This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/ffe567-27e6-4a64-baf4-a28bce5d5da5/1/cYZUy47T9V1cYJctMQ9e1iBLT-U.mft File: cYZUy47T9V1cYJctMQ9e1iBLT-U.mft (raw, json) Hash identifier: VLxuTi56UKBPAYKKqpxPTlaemRjxnY7+l+ZJ5s2VsSg= Subject key identifier: BC:CB:9A:00:82:3F:3D:8C:BE:45:81:43:C8:15:0B:5B:D3:A9:66:D9 Authority key identifier: 71:86:54:CB:8E:D3:F5:5D:5C:60:97:2D:31:0F:5E:D6:20:4B:4F:E5 Certificate issuer: /CN=718654cb8ed3f55d5c60972d310f5ed6204b4fe5 Certificate serial: 019B5ABF318B9CA09A41B49CCD405BD021F5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cYZUy47T9V1cYJctMQ9e1iBLT-U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/ffe567-27e6-4a64-baf4-a28bce5d5da5/1/cYZUy47T9V1cYJctMQ9e1iBLT-U.mft Manifest number: A0 Signing time: Fri 26 Dec 2025 13:00:38 +0000 Manifest this update: Fri 26 Dec 2025 13:00:38 +0000 Manifest next update: Sat 27 Dec 2025 13:00:38 +0000 Files and hashes: 1: cYZUy47T9V1cYJctMQ9e1iBLT-U.crl (hash: 0oWi0oWb+0b7YV3DNwLbasXi3bNoBlZQFBkLnK7H++U=) 2: ijhgDrG4PAh5dm_FiU2MYyK1EHo.roa (hash: yZiKOLYeFB+QkMKLWFDCfaVVV6Y0ofxXdn/v1jLWMuE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/ffe567-27e6-4a64-baf4-a28bce5d5da5/1/cYZUy47T9V1cYJctMQ9e1iBLT-U.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/ffe567-27e6-4a64-baf4-a28bce5d5da5/1/cYZUy47T9V1cYJctMQ9e1iBLT-U.mft rsync://rpki.ripe.net/repository/DEFAULT/cYZUy47T9V1cYJctMQ9e1iBLT-U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:bf:31:8b:9c:a0:9a:41:b4:9c:cd:40:5b:d0:21:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=718654cb8ed3f55d5c60972d310f5ed6204b4fe5 Validity Not Before: Dec 26 13:00:38 2025 GMT Not After : Dec 27 13:00:38 2025 GMT Subject: CN=bccb9a00823f3d8cbe458143c8150b5bd3a966d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:f5:c5:88:9a:3c:b8:d9:3c:f6:8b:4b:49:4c: de:45:f5:3b:27:08:af:07:8e:1b:62:11:44:1a:5b: a9:f3:ac:35:15:41:d7:b1:d8:af:83:1c:31:a7:3c: f8:a1:ab:3f:49:29:b6:77:f4:37:eb:39:f4:3e:95: 80:f3:6b:21:cd:dc:c0:e6:ff:ca:3f:49:ab:40:ac: 34:e3:0b:b7:0e:89:ed:44:ab:3e:a8:fd:5f:61:5a: b6:66:3b:a4:be:e7:ff:22:7f:5b:64:ed:28:e3:18: 67:0a:2c:d7:33:51:59:0e:86:a1:a1:a5:b7:46:12: d7:5d:95:94:20:b2:21:a0:ff:4e:c3:88:0c:92:67: 05:b4:b7:31:cc:86:80:78:07:c2:2a:32:0e:c6:28: 34:f9:30:c9:94:ab:11:6c:1d:27:54:b0:c1:70:86: cc:aa:8d:a2:3f:f1:c4:56:e3:10:94:f9:28:20:7f: c2:4e:4a:75:73:1f:b4:6e:16:3c:a2:0f:6d:9a:ab: bd:03:45:d4:5b:5e:d9:95:41:f0:c1:c0:3d:e3:c3: be:f0:b9:3f:a1:74:ff:1e:1b:f5:ff:2e:be:2c:5a: eb:65:00:4d:54:44:5c:b4:c8:03:f5:a7:8f:c0:93: 8c:6b:65:c3:a1:96:fb:92:ec:52:47:d7:11:b7:97: f6:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:CB:9A:00:82:3F:3D:8C:BE:45:81:43:C8:15:0B:5B:D3:A9:66:D9 X509v3 Authority Key Identifier: keyid:71:86:54:CB:8E:D3:F5:5D:5C:60:97:2D:31:0F:5E:D6:20:4B:4F:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cYZUy47T9V1cYJctMQ9e1iBLT-U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/ffe567-27e6-4a64-baf4-a28bce5d5da5/1/cYZUy47T9V1cYJctMQ9e1iBLT-U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/ffe567-27e6-4a64-baf4-a28bce5d5da5/1/cYZUy47T9V1cYJctMQ9e1iBLT-U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:ed:00:1a:05:9d:14:b8:84:ec:46:2d:99:0a:2a:74:1d:09: 1e:f9:04:aa:7f:86:48:1b:bd:ca:6f:76:58:7b:b5:c8:aa:bd: 98:c8:11:6c:5a:12:85:f3:12:d1:97:9d:df:45:32:da:64:38: c9:7a:21:20:e8:1c:85:43:70:cc:bd:01:5c:ef:bb:42:a8:4d: 1e:90:42:8b:9b:1f:0b:44:a3:f7:63:5e:0a:2e:9f:34:12:11: 9f:ea:03:57:a0:07:5f:8c:80:0f:ba:82:64:7b:cd:24:84:a5: 5b:36:b0:b3:8d:90:75:47:23:8e:be:a8:e0:31:ad:9d:f5:3a: 4d:02:54:17:55:fd:bc:27:a4:87:97:30:15:50:cf:bc:e5:24: b5:b8:94:37:2b:f6:b8:86:8d:03:a7:2c:df:aa:89:2e:96:6b: 82:e4:5f:79:d6:e5:52:a0:86:ad:9b:4a:75:dc:45:50:b7:89: 00:3d:04:5b:45:b1:e5:2b:68:9f:b0:0c:9a:4e:f4:9c:f3:54: 7e:dd:f8:eb:ec:b6:08:b6:59:f0:20:ae:1c:1e:f0:89:8d:43: 05:84:0a:0f:4f:5e:57:f6:c1:90:51:75:c1:1d:c7:12:2c:e7: 05:9d:84:5c:31:c9:ee:a7:85:0a:c5:c6:f2:d8:f0:12:bc:73: aa:bb:97:97 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtavzGLnKCaQbSczUBb0CH1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcxODY1NGNiOGVkM2Y1NWQ1YzYwOTcyZDMxMGY1ZWQ2MjA0 YjRmZTUwHhcNMjUxMjI2MTMwMDM4WhcNMjUxMjI3MTMwMDM4WjAzMTEwLwYDVQQD EyhiY2NiOWEwMDgyM2YzZDhjYmU0NTgxNDNjODE1MGI1YmQzYTk2NmQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiPXFiJo8uNk89otLSUzeRfU7Jwiv B44bYhFEGlup86w1FUHXsdivgxwxpzz4oas/SSm2d/Q36zn0PpWA82shzdzA5v/K P0mrQKw04wu3DontRKs+qP1fYVq2Zjukvuf/In9bZO0o4xhnCizXM1FZDoahoaW3 RhLXXZWUILIhoP9Ow4gMkmcFtLcxzIaAeAfCKjIOxig0+TDJlKsRbB0nVLDBcIbM qo2iP/HEVuMQlPkoIH/CTkp1cx+0bhY8og9tmqu9A0XUW17ZlUHwwcA948O+8Lk/ oXT/Hhv1/y6+LFrrZQBNVERctMgD9aePwJOMa2XDoZb7kuxSR9cRt5f2VwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLzLmgCCPz2MvkWBQ8gVC1vTqWbZMB8GA1UdIwQY MBaAFHGGVMuO0/VdXGCXLTEPXtYgS0/lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY1laVXk0N1Q5VjFjWUpjdE1ROWUxaUJMVC1VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi9mZmU1NjctMjdlNi00YTY0LWJhZjQt YTI4YmNlNWQ1ZGE1LzEvY1laVXk0N1Q5VjFjWUpjdE1ROWUxaUJMVC1VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi9mZmU1NjctMjdlNi00YTY0LWJhZjQtYTI4YmNlNWQ1ZGE1 LzEvY1laVXk0N1Q5VjFjWUpjdE1ROWUxaUJMVC1VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAje0AGgWd FLiE7EYtmQoqdB0JHvkEqn+GSBu9ym92WHu1yKq9mMgRbFoShfMS0Zed30Uy2mQ4 yXohIOgchUNwzL0BXO+7QqhNHpBCi5sfC0Sj92NeCi6fNBIRn+oDV6AHX4yAD7qC ZHvNJISlWzaws42QdUcjjr6o4DGtnfU6TQJUF1X9vCekh5cwFVDPvOUktbiUNyv2 uIaNA6cs36qJLpZrguRfedblUqCGrZtKddxFULeJAD0EW0Wx5Ston7AMmk70nPNU ft346+y2CLZZ8CCuHB7wiY1DBYQKD09eV/bBkFF1wR3HEiznBZ2EXDHJ7qeFCsXG 8tjwErxzqruXlw== -----END CERTIFICATE-----Generated at Fri Dec 26 16:06:41 2025 by rpki-client