This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/348789-3208-4847-9c3f-982d1f21a32b/1/y_dM2EZJMTj1IsV8AGW1xgUS3Qk.mft File: y_dM2EZJMTj1IsV8AGW1xgUS3Qk.mft (raw, json) Hash identifier: WKNAQ/8/KgHt9+2EOtSDKwb8277hHRfxvwtIOScl/PQ= Subject key identifier: F6:55:5B:0E:56:C9:39:74:A3:AC:9A:04:6C:4E:6B:15:59:CE:EF:96 Authority key identifier: CB:F7:4C:D8:46:49:31:38:F5:22:C5:7C:00:65:B5:C6:05:12:DD:09 Certificate issuer: /CN=cbf74cd846493138f522c57c0065b5c60512dd09 Certificate serial: 019AAC14CCAFE8AFABB80D391CE2199F4653 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y_dM2EZJMTj1IsV8AGW1xgUS3Qk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/348789-3208-4847-9c3f-982d1f21a32b/1/y_dM2EZJMTj1IsV8AGW1xgUS3Qk.mft Manifest number: 164A Signing time: Sat 22 Nov 2025 15:00:35 +0000 Manifest this update: Sat 22 Nov 2025 15:00:35 +0000 Manifest next update: Sun 23 Nov 2025 15:00:35 +0000 Files and hashes: 1: JlQN0N4As8kTE_2777wqlcFNrC8.roa (hash: gQA+8fA2lRTUYRE2yD6RworLn/rUFJdeb4rtkckOnyE=) 2: WD7cwf6HLxZKq0IMG8YbMTooJt0.roa (hash: JexN5Bcs7RxXPWQCAkKPWPwbZPwuEud7FpPGiuV9xSU=) 3: n0VCvrGvbIgBmTHfdTvtFpgH4bs.roa (hash: ukpF9blWLJ1fHC+qQnWNibfuLjVHA9hpURE/X4EaFzY=) 4: qObypTg-nOBL35cm5Sg2yM7Yo3s.roa (hash: rh8dBS1PUlDYnkodpVPvUZaeXyMvofP2iGR3Qp60YxQ=) 5: y_dM2EZJMTj1IsV8AGW1xgUS3Qk.crl (hash: Ab1xkb/5/8xI8y5c8txM5VB7ObkARk4FLz6NRDXy2BU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/348789-3208-4847-9c3f-982d1f21a32b/1/y_dM2EZJMTj1IsV8AGW1xgUS3Qk.crl rsync://rpki.ripe.net/repository/DEFAULT/40/348789-3208-4847-9c3f-982d1f21a32b/1/y_dM2EZJMTj1IsV8AGW1xgUS3Qk.mft rsync://rpki.ripe.net/repository/DEFAULT/y_dM2EZJMTj1IsV8AGW1xgUS3Qk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 23 Nov 2025 12:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ac:14:cc:af:e8:af:ab:b8:0d:39:1c:e2:19:9f:46:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cbf74cd846493138f522c57c0065b5c60512dd09 Validity Not Before: Nov 22 15:00:35 2025 GMT Not After : Nov 23 15:00:35 2025 GMT Subject: CN=f6555b0e56c93974a3ac9a046c4e6b1559ceef96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:a7:45:ed:af:58:af:b7:56:ea:60:99:bc:2b: 9f:5f:79:16:33:bd:63:65:ef:fb:cb:a1:0c:ed:08: c1:22:c1:4d:03:4a:62:55:57:30:35:13:84:90:75: 63:c0:47:1f:cc:8e:73:23:8b:3d:d7:fa:ed:0b:1b: 51:0b:ea:b6:86:d5:79:c4:c7:fa:d5:f9:34:08:3c: de:b5:0a:38:25:07:83:59:c4:a5:c6:f6:33:ee:b0: 3f:05:5a:27:03:e8:15:a8:6a:6e:dc:c6:1d:3a:c2: cd:d8:b8:29:07:1e:82:b6:42:48:9f:ae:b2:ed:64: 9d:b5:a7:db:bc:80:d8:c1:a6:ea:9a:fb:7e:8e:8f: 43:15:0a:9f:c2:47:08:1c:ba:96:9a:a8:0c:60:22: 21:2f:d6:80:71:5b:e0:a7:ae:65:38:1a:4c:26:56: 0d:3c:c7:87:8d:c6:e1:95:20:08:3a:1d:86:6a:fe: 81:f0:c9:fd:46:34:1f:88:65:7a:ac:46:b9:27:01: 23:6b:b6:f8:50:87:9f:ba:e3:2d:1c:5f:ef:16:f6: 63:db:36:d5:35:4c:12:be:f3:c7:a4:3d:4f:5b:46: 8f:9a:a0:c2:13:1a:c6:f1:d8:7f:42:d9:78:32:f7: 61:8b:42:a6:07:98:67:c9:6f:a5:2f:16:9c:3a:44: 0a:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:55:5B:0E:56:C9:39:74:A3:AC:9A:04:6C:4E:6B:15:59:CE:EF:96 X509v3 Authority Key Identifier: keyid:CB:F7:4C:D8:46:49:31:38:F5:22:C5:7C:00:65:B5:C6:05:12:DD:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y_dM2EZJMTj1IsV8AGW1xgUS3Qk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/348789-3208-4847-9c3f-982d1f21a32b/1/y_dM2EZJMTj1IsV8AGW1xgUS3Qk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/348789-3208-4847-9c3f-982d1f21a32b/1/y_dM2EZJMTj1IsV8AGW1xgUS3Qk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:25:bc:ea:8f:b3:24:08:55:fb:ec:6b:01:a6:71:d6:e6:8e: f3:f9:17:4c:3a:2a:50:ea:db:67:0c:73:10:ed:6e:b6:49:09: ed:09:0e:7f:7d:b0:95:a6:a5:77:a5:6e:35:dd:33:c1:e4:71: 0a:49:31:8e:d4:07:e6:6f:8e:50:2e:67:8d:a3:0f:6a:54:34: 09:b2:66:83:93:6f:79:94:94:c8:47:28:45:e7:cb:71:cf:a1: aa:b4:b9:78:39:29:5f:d5:2b:ef:24:35:6f:d2:30:96:30:26: 97:2c:04:a3:b7:eb:79:56:c6:5e:f0:5a:04:51:70:f2:85:9e: 5f:48:7d:67:cd:95:48:e2:66:c7:e6:8c:ef:e0:6b:c4:be:f8: 25:7c:43:8a:88:f2:26:6d:66:54:5c:2f:34:28:36:9b:52:e8: d1:43:79:35:66:b4:f3:35:27:2e:13:db:57:b4:af:dc:cf:28: d0:3e:09:9e:57:e4:cd:c7:66:a7:9b:0a:ed:49:6b:59:5b:56: 0d:d5:e7:a2:64:c2:4d:f8:be:04:45:9b:95:1c:88:fe:71:60: f9:0b:9d:ed:06:65:02:df:90:44:f8:99:9c:c2:8f:04:59:b4: a4:ec:66:29:60:88:03:b5:a3:94:3d:4b:42:4d:61:4a:42:70: 5d:4d:35:a4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZqsFMyv6K+ruA05HOIZn0ZTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiZjc0Y2Q4NDY0OTMxMzhmNTIyYzU3YzAwNjViNWM2MDUx MmRkMDkwHhcNMjUxMTIyMTUwMDM1WhcNMjUxMTIzMTUwMDM1WjAzMTEwLwYDVQQD EyhmNjU1NWIwZTU2YzkzOTc0YTNhYzlhMDQ2YzRlNmIxNTU5Y2VlZjk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvqdF7a9Yr7dW6mCZvCufX3kWM71j Ze/7y6EM7QjBIsFNA0piVVcwNROEkHVjwEcfzI5zI4s91/rtCxtRC+q2htV5xMf6 1fk0CDzetQo4JQeDWcSlxvYz7rA/BVonA+gVqGpu3MYdOsLN2LgpBx6CtkJIn66y 7WSdtafbvIDYwabqmvt+jo9DFQqfwkcIHLqWmqgMYCIhL9aAcVvgp65lOBpMJlYN PMeHjcbhlSAIOh2Gav6B8Mn9RjQfiGV6rEa5JwEja7b4UIefuuMtHF/vFvZj2zbV NUwSvvPHpD1PW0aPmqDCExrG8dh/Qtl4Mvdhi0KmB5hnyW+lLxacOkQKZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPZVWw5WyTl0o6yaBGxOaxVZzu+WMB8GA1UdIwQY MBaAFMv3TNhGSTE49SLFfABltcYFEt0JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveV9kTTJFWkpNVGoxSXNWOEFHVzF4Z1VTM1FrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC8zNDg3ODktMzIwOC00ODQ3LTljM2Yt OTgyZDFmMjFhMzJiLzEveV9kTTJFWkpNVGoxSXNWOEFHVzF4Z1VTM1FrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC8zNDg3ODktMzIwOC00ODQ3LTljM2YtOTgyZDFmMjFhMzJi LzEveV9kTTJFWkpNVGoxSXNWOEFHVzF4Z1VTM1FrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANiW86o+z JAhV++xrAaZx1uaO8/kXTDoqUOrbZwxzEO1utkkJ7QkOf32wlaald6VuNd0zweRx CkkxjtQH5m+OUC5njaMPalQ0CbJmg5NveZSUyEcoRefLcc+hqrS5eDkpX9Ur7yQ1 b9IwljAmlywEo7freVbGXvBaBFFw8oWeX0h9Z82VSOJmx+aM7+BrxL74JXxDiojy Jm1mVFwvNCg2m1Lo0UN5NWa08zUnLhPbV7Sv3M8o0D4Jnlfkzcdmp5sK7UlrWVtW DdXnomTCTfi+BEWblRyI/nFg+Qud7QZlAt+QRPiZnMKPBFm0pOxmKWCIA7WjlD1L Qk1hSkJwXU01pA== -----END CERTIFICATE-----Generated at Sat Nov 22 21:49:59 2025 by rpki-client