This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/dadb4b-14f3-42fa-95b7-f85cc5747fbf/1/y0-6CRkLdoSf_z0m1YB5DlT6wuM.mft File: y0-6CRkLdoSf_z0m1YB5DlT6wuM.mft (raw, json) Hash identifier: G/YGc0gTUpYhINp9XlbxC4r5KiHQR8VDfYHrj6paNFI= Subject key identifier: 13:5B:C0:4B:A5:F7:09:79:A4:39:34:BA:DA:2E:F7:43:35:00:22:EF Authority key identifier: CB:4F:BA:09:19:0B:76:84:9F:FF:3D:26:D5:80:79:0E:54:FA:C2:E3 Certificate issuer: /CN=cb4fba09190b76849fff3d26d580790e54fac2e3 Certificate serial: 019B353237988AB67C0B37E1DEA275D24EEE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y0-6CRkLdoSf_z0m1YB5DlT6wuM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/dadb4b-14f3-42fa-95b7-f85cc5747fbf/1/y0-6CRkLdoSf_z0m1YB5DlT6wuM.mft Manifest number: 1784 Signing time: Fri 19 Dec 2025 06:00:41 +0000 Manifest this update: Fri 19 Dec 2025 06:00:41 +0000 Manifest next update: Sat 20 Dec 2025 06:00:41 +0000 Files and hashes: 1: A7rB6GvieHic3egdiMZfNGfq2m0.roa (hash: HS3mNdYCRI3MKIsdLKnGS/MBr6fXeWlgGEcIpC1Xugc=) 2: y0-6CRkLdoSf_z0m1YB5DlT6wuM.crl (hash: FS0DNHyArxItBrRufeF6OwPzaukqe434g+42NN0vr5k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/dadb4b-14f3-42fa-95b7-f85cc5747fbf/1/y0-6CRkLdoSf_z0m1YB5DlT6wuM.crl rsync://rpki.ripe.net/repository/DEFAULT/50/dadb4b-14f3-42fa-95b7-f85cc5747fbf/1/y0-6CRkLdoSf_z0m1YB5DlT6wuM.mft rsync://rpki.ripe.net/repository/DEFAULT/y0-6CRkLdoSf_z0m1YB5DlT6wuM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 06:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:32:37:98:8a:b6:7c:0b:37:e1:de:a2:75:d2:4e:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb4fba09190b76849fff3d26d580790e54fac2e3 Validity Not Before: Dec 19 06:00:41 2025 GMT Not After : Dec 20 06:00:41 2025 GMT Subject: CN=135bc04ba5f70979a43934bada2ef743350022ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:4d:26:7d:24:ef:c2:ea:5f:d5:c8:b1:e2:62: b9:38:b5:90:12:40:b3:47:9b:be:da:0e:c8:2b:e9: 67:4e:0b:68:61:bc:7f:59:87:24:93:c4:42:f3:8f: 9e:5f:f2:8e:45:b4:07:12:27:5b:b9:0c:94:d6:27: f5:d3:f4:a8:e5:f5:30:38:b2:54:ec:1b:ba:35:64: 32:27:19:28:ea:95:e5:c8:b8:73:15:77:5d:c4:dc: c4:62:93:93:30:8a:d9:61:17:66:4d:44:dd:e1:c6: 22:17:97:18:fe:4d:5c:71:53:38:a3:a9:5b:95:2d: 29:13:e6:db:2f:e9:fd:5f:bb:6f:e1:9a:b1:e7:ce: dc:ba:08:75:2e:aa:2e:07:a3:27:ba:8f:e4:7b:95: 0c:e1:10:d4:14:4b:03:2b:7e:55:79:aa:b0:d1:64: d2:f0:d9:41:2f:df:96:9c:5a:ac:36:7f:ee:d5:b2: f4:72:c3:92:09:52:7a:18:9b:af:52:e1:fa:20:05: ad:8e:de:2c:cb:b1:b5:13:14:d2:7a:72:5f:99:c5: 35:a3:b9:dc:3a:5d:9b:3b:ba:47:27:65:07:24:42: 68:4b:ec:db:76:8b:ab:42:ad:aa:3f:92:c2:2f:02: 56:70:fb:55:22:c6:b5:f4:18:ff:77:9e:9f:db:a8: f2:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:5B:C0:4B:A5:F7:09:79:A4:39:34:BA:DA:2E:F7:43:35:00:22:EF X509v3 Authority Key Identifier: keyid:CB:4F:BA:09:19:0B:76:84:9F:FF:3D:26:D5:80:79:0E:54:FA:C2:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y0-6CRkLdoSf_z0m1YB5DlT6wuM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/dadb4b-14f3-42fa-95b7-f85cc5747fbf/1/y0-6CRkLdoSf_z0m1YB5DlT6wuM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/50/dadb4b-14f3-42fa-95b7-f85cc5747fbf/1/y0-6CRkLdoSf_z0m1YB5DlT6wuM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:88:71:a0:99:4c:dc:43:fa:90:07:78:1d:da:da:f8:c0:04: ef:3a:ef:6f:ef:01:2e:68:fa:08:9b:a9:b1:9a:7a:d6:fb:f5: 6b:f8:5c:70:3d:11:bd:61:ee:26:3c:10:ee:15:ae:f6:7d:d3: 62:5f:da:3c:b8:0a:f7:3b:c5:35:30:ad:60:c6:a1:1b:33:69: 62:b8:3b:15:5b:8a:9e:eb:c2:27:a2:65:6d:e0:9e:38:ed:5a: 3a:59:38:d7:53:e3:29:b7:5d:c0:10:70:83:1e:09:4f:a9:1c: a5:da:55:ef:25:8d:ec:53:76:42:83:61:f1:c6:2c:d9:7d:c7: fe:19:fc:4f:5e:9e:5a:f3:e0:48:49:ce:61:20:ab:55:21:92: 87:55:ce:4c:8f:49:9e:56:fc:25:bf:64:3c:ea:90:30:72:af: be:c4:9a:42:18:cc:d5:40:95:84:ce:30:cd:b9:7e:c9:9c:db: b7:ff:57:eb:21:b8:3b:37:cc:5b:82:99:db:97:53:f6:bd:7a: f6:0c:10:68:0d:79:40:31:b8:7b:26:a9:7c:5e:18:06:f7:a6: 9e:f9:ea:bf:ef:cc:69:e4:ee:27:f5:eb:f4:33:18:29:f3:ce: fa:e7:34:be:27:4b:e7:99:53:6b:c3:cb:4f:ce:8c:ec:02:c7: 82:fd:9f:16 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1MjeYirZ8Czfh3qJ10k7uMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiNGZiYTA5MTkwYjc2ODQ5ZmZmM2QyNmQ1ODA3OTBlNTRm YWMyZTMwHhcNMjUxMjE5MDYwMDQxWhcNMjUxMjIwMDYwMDQxWjAzMTEwLwYDVQQD EygxMzViYzA0YmE1ZjcwOTc5YTQzOTM0YmFkYTJlZjc0MzM1MDAyMmVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk00mfSTvwupf1cix4mK5OLWQEkCz R5u+2g7IK+lnTgtoYbx/WYckk8RC84+eX/KORbQHEidbuQyU1if10/So5fUwOLJU 7Bu6NWQyJxko6pXlyLhzFXddxNzEYpOTMIrZYRdmTUTd4cYiF5cY/k1ccVM4o6lb lS0pE+bbL+n9X7tv4Zqx587cugh1LqouB6Mnuo/ke5UM4RDUFEsDK35Veaqw0WTS 8NlBL9+WnFqsNn/u1bL0csOSCVJ6GJuvUuH6IAWtjt4sy7G1ExTSenJfmcU1o7nc Ol2bO7pHJ2UHJEJoS+zbdourQq2qP5LCLwJWcPtVIsa19Bj/d56f26jy5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBNbwEul9wl5pDk0utou90M1ACLvMB8GA1UdIwQY MBaAFMtPugkZC3aEn/89JtWAeQ5U+sLjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveTAtNkNSa0xkb1NmX3owbTFZQjVEbFQ2d3VNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC9kYWRiNGItMTRmMy00MmZhLTk1Yjct Zjg1Y2M1NzQ3ZmJmLzEveTAtNkNSa0xkb1NmX3owbTFZQjVEbFQ2d3VNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MC9kYWRiNGItMTRmMy00MmZhLTk1YjctZjg1Y2M1NzQ3ZmJm LzEveTAtNkNSa0xkb1NmX3owbTFZQjVEbFQ2d3VNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdohxoJlM 3EP6kAd4Hdra+MAE7zrvb+8BLmj6CJupsZp61vv1a/hccD0RvWHuJjwQ7hWu9n3T Yl/aPLgK9zvFNTCtYMahGzNpYrg7FVuKnuvCJ6JlbeCeOO1aOlk411PjKbddwBBw gx4JT6kcpdpV7yWN7FN2QoNh8cYs2X3H/hn8T16eWvPgSEnOYSCrVSGSh1XOTI9J nlb8Jb9kPOqQMHKvvsSaQhjM1UCVhM4wzbl+yZzbt/9X6yG4OzfMW4KZ25dT9r16 9gwQaA15QDG4eyapfF4YBvemnvnqv+/MaeTuJ/Xr9DMYKfPO+uc0vidL55lTa8PL T86M7ALHgv2fFg== -----END CERTIFICATE-----Generated at Fri Dec 19 12:27:50 2025 by rpki-client