This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/a9131c-82d2-41b7-9e20-13696197d3b6/1/y02MQeEiyIHZNtkdWwLb2GoucKU.mft File: y02MQeEiyIHZNtkdWwLb2GoucKU.mft (raw, json) Hash identifier: AwqQId6rNvqJsWyhO1e8k89AJSiSsoh/8oFz7CFC6gE= Subject key identifier: 4E:36:AB:E8:78:56:37:36:2D:F2:47:93:CF:45:DD:63:E0:51:5D:58 Authority key identifier: CB:4D:8C:41:E1:22:C8:81:D9:36:D9:1D:5B:02:DB:D8:6A:2E:70:A5 Certificate issuer: /CN=cb4d8c41e122c881d936d91d5b02dbd86a2e70a5 Certificate serial: 019B0FA584D917E6F07C21AF99D6EF7206F2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y02MQeEiyIHZNtkdWwLb2GoucKU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/a9131c-82d2-41b7-9e20-13696197d3b6/1/y02MQeEiyIHZNtkdWwLb2GoucKU.mft Manifest number: 1772 Signing time: Thu 11 Dec 2025 23:01:04 +0000 Manifest this update: Thu 11 Dec 2025 23:01:04 +0000 Manifest next update: Fri 12 Dec 2025 23:01:04 +0000 Files and hashes: 1: x9dC2s7poumOX7Fyb1pJRfvWUck.roa (hash: 4hkKgFGTZlThYX8UktL5gydXSJoUP0UEdhwE5OUeAGQ=) 2: y02MQeEiyIHZNtkdWwLb2GoucKU.crl (hash: 4eUc7/SjRlCrcQAmvnCiB8tR8TKXs6cJAnqDiba7WRU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/a9131c-82d2-41b7-9e20-13696197d3b6/1/y02MQeEiyIHZNtkdWwLb2GoucKU.crl rsync://rpki.ripe.net/repository/DEFAULT/47/a9131c-82d2-41b7-9e20-13696197d3b6/1/y02MQeEiyIHZNtkdWwLb2GoucKU.mft rsync://rpki.ripe.net/repository/DEFAULT/y02MQeEiyIHZNtkdWwLb2GoucKU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:a5:84:d9:17:e6:f0:7c:21:af:99:d6:ef:72:06:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb4d8c41e122c881d936d91d5b02dbd86a2e70a5 Validity Not Before: Dec 11 23:01:04 2025 GMT Not After : Dec 12 23:01:04 2025 GMT Subject: CN=4e36abe8785637362df24793cf45dd63e0515d58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:a9:fb:ad:84:ab:ff:d5:73:d2:3a:cb:60:98: 2a:e1:79:2a:ce:b5:fd:73:1a:f4:f1:41:6f:c5:ed: 9c:a5:58:7b:20:1d:36:84:ea:0f:fb:1b:ab:ed:1e: 3e:65:ee:8b:e5:5d:65:50:2f:e4:a4:32:32:3e:6d: bd:df:fd:d0:0f:6e:7c:43:50:39:e3:41:c0:5c:39: 8a:77:56:fc:ef:35:ea:57:4a:1c:25:1a:64:8d:14: a9:36:05:7c:6d:ef:61:e7:f4:02:b1:0e:c3:a9:a7: 2f:58:81:dd:31:eb:36:be:73:d3:eb:4b:cd:00:d8: e0:b3:f9:eb:4c:9b:82:d1:96:53:19:f8:b7:2c:17: fb:6b:21:d2:58:d9:9a:25:41:e5:9d:9c:cb:29:f0: de:41:1e:d2:73:72:41:5a:f4:a1:0f:a5:cb:c0:2d: 13:82:3c:03:80:e4:74:6f:14:e9:91:d8:4a:c3:c9: fb:2e:43:c0:ae:22:2f:7d:5a:7c:61:a5:5b:f0:8d: 8a:9a:0e:47:70:5f:25:4b:9a:7c:0d:37:24:1a:0b: a5:55:d4:ce:69:7d:37:8a:29:b7:08:6a:e2:f6:9d: 47:72:45:94:6a:18:c4:96:b1:ff:59:0a:38:35:db: b2:29:05:dc:e3:ac:fa:b8:74:10:12:02:de:80:52: 4c:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:36:AB:E8:78:56:37:36:2D:F2:47:93:CF:45:DD:63:E0:51:5D:58 X509v3 Authority Key Identifier: keyid:CB:4D:8C:41:E1:22:C8:81:D9:36:D9:1D:5B:02:DB:D8:6A:2E:70:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y02MQeEiyIHZNtkdWwLb2GoucKU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a9131c-82d2-41b7-9e20-13696197d3b6/1/y02MQeEiyIHZNtkdWwLb2GoucKU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a9131c-82d2-41b7-9e20-13696197d3b6/1/y02MQeEiyIHZNtkdWwLb2GoucKU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:1c:d6:f9:95:a8:8d:58:1b:f5:70:bb:32:2d:7f:43:6f:eb: 67:b2:b0:5d:07:a9:b9:dd:c7:31:38:a3:61:a6:29:12:34:51: e3:91:3f:77:f2:93:6a:53:fa:b8:ef:3f:1d:7c:be:f9:9a:eb: 13:34:f4:92:6b:47:d8:87:8c:b9:08:c3:1e:bb:f9:a2:7d:e8: 0c:ea:8f:a7:e7:8c:df:3c:07:e0:e2:8d:d6:52:c5:7f:17:c8: fa:5e:f7:64:5f:17:9d:ca:c6:b7:53:ee:ea:36:ec:b0:2f:54: 54:58:d6:e6:cf:7d:ef:1d:45:de:84:24:1d:05:c3:af:59:20: f2:35:27:a6:48:ec:8e:40:df:22:bd:b0:a1:a3:7d:07:0c:07: 65:b9:15:c4:bd:e2:8d:05:6a:06:09:31:54:21:9b:da:23:d2: 52:ae:43:e5:0d:e2:58:c6:ef:1b:d0:aa:d8:8b:68:b9:00:98: dd:61:34:09:ca:9f:a5:66:d6:88:db:ea:8d:a8:94:17:6e:2c: 96:c7:93:97:1a:b8:35:cc:b3:28:d8:19:02:a5:5f:41:9b:a3: a1:fb:ec:04:99:1b:cb:06:f8:2e:63:ac:71:60:92:23:b4:24: 31:7f:e4:06:a1:80:ed:89:87:55:bd:5f:ae:d6:ab:50:12:46: 08:0f:fd:7d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPpYTZF+bwfCGvmdbvcgbyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiNGQ4YzQxZTEyMmM4ODFkOTM2ZDkxZDViMDJkYmQ4NmEy ZTcwYTUwHhcNMjUxMjExMjMwMTA0WhcNMjUxMjEyMjMwMTA0WjAzMTEwLwYDVQQD Eyg0ZTM2YWJlODc4NTYzNzM2MmRmMjQ3OTNjZjQ1ZGQ2M2UwNTE1ZDU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhan7rYSr/9Vz0jrLYJgq4XkqzrX9 cxr08UFvxe2cpVh7IB02hOoP+xur7R4+Ze6L5V1lUC/kpDIyPm293/3QD258Q1A5 40HAXDmKd1b87zXqV0ocJRpkjRSpNgV8be9h5/QCsQ7DqacvWIHdMes2vnPT60vN ANjgs/nrTJuC0ZZTGfi3LBf7ayHSWNmaJUHlnZzLKfDeQR7Sc3JBWvShD6XLwC0T gjwDgOR0bxTpkdhKw8n7LkPAriIvfVp8YaVb8I2Kmg5HcF8lS5p8DTckGgulVdTO aX03iim3CGri9p1HckWUahjElrH/WQo4NduyKQXc46z6uHQQEgLegFJMqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE42q+h4Vjc2LfJHk89F3WPgUV1YMB8GA1UdIwQY MBaAFMtNjEHhIsiB2TbZHVsC29hqLnClMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveTAyTVFlRWl5SUhaTnRrZFd3TGIyR291Y0tVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9hOTEzMWMtODJkMi00MWI3LTllMjAt MTM2OTYxOTdkM2I2LzEveTAyTVFlRWl5SUhaTnRrZFd3TGIyR291Y0tVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny9hOTEzMWMtODJkMi00MWI3LTllMjAtMTM2OTYxOTdkM2I2 LzEveTAyTVFlRWl5SUhaTnRrZFd3TGIyR291Y0tVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKhzW+ZWo jVgb9XC7Mi1/Q2/rZ7KwXQepud3HMTijYaYpEjRR45E/d/KTalP6uO8/HXy++Zrr EzT0kmtH2IeMuQjDHrv5on3oDOqPp+eM3zwH4OKN1lLFfxfI+l73ZF8XncrGt1Pu 6jbssC9UVFjW5s997x1F3oQkHQXDr1kg8jUnpkjsjkDfIr2woaN9BwwHZbkVxL3i jQVqBgkxVCGb2iPSUq5D5Q3iWMbvG9Cq2ItouQCY3WE0CcqfpWbWiNvqjaiUF24s lseTlxq4NcyzKNgZAqVfQZujofvsBJkbywb4LmOscWCSI7QkMX/kBqGA7YmHVb1f rtarUBJGCA/9fQ== -----END CERTIFICATE-----Generated at Fri Dec 12 03:22:08 2025 by rpki-client