This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/b1af5b-089e-4cbe-bbe9-425ee968df0b/1/yy2f-G42PbNNBVbsFkUfL38wPSQ.mft File: yy2f-G42PbNNBVbsFkUfL38wPSQ.mft (raw, json) Hash identifier: JWZejEB4qCwWM4oQZcBUGVfMYqHTV3o8ij/i5N+vSJU= Subject key identifier: 8F:2F:6F:46:9D:53:CC:CA:B6:BC:E5:50:85:74:A7:06:DF:E6:48:46 Authority key identifier: CB:2D:9F:F8:6E:36:3D:B3:4D:05:56:EC:16:45:1F:2F:7F:30:3D:24 Certificate issuer: /CN=cb2d9ff86e363db34d0556ec16451f2f7f303d24 Certificate serial: 019B10B83185E4215732195858D25689BF41 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yy2f-G42PbNNBVbsFkUfL38wPSQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/b1af5b-089e-4cbe-bbe9-425ee968df0b/1/yy2f-G42PbNNBVbsFkUfL38wPSQ.mft Manifest number: 1771 Signing time: Fri 12 Dec 2025 04:01:05 +0000 Manifest this update: Fri 12 Dec 2025 04:01:05 +0000 Manifest next update: Sat 13 Dec 2025 04:01:05 +0000 Files and hashes: 1: 92Huf3IHz49yEZcp8laODPaay4A.roa (hash: fHDvsxbqA8PNa+801vhXYVjpC3kLuwr6JG2deunc2nA=) 2: yy2f-G42PbNNBVbsFkUfL38wPSQ.crl (hash: FXFEcYB6VETprknW7uvje4Kxez+pw0BppPsiUnDh3LY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/b1af5b-089e-4cbe-bbe9-425ee968df0b/1/yy2f-G42PbNNBVbsFkUfL38wPSQ.crl rsync://rpki.ripe.net/repository/DEFAULT/94/b1af5b-089e-4cbe-bbe9-425ee968df0b/1/yy2f-G42PbNNBVbsFkUfL38wPSQ.mft rsync://rpki.ripe.net/repository/DEFAULT/yy2f-G42PbNNBVbsFkUfL38wPSQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:b8:31:85:e4:21:57:32:19:58:58:d2:56:89:bf:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb2d9ff86e363db34d0556ec16451f2f7f303d24 Validity Not Before: Dec 12 04:01:05 2025 GMT Not After : Dec 13 04:01:05 2025 GMT Subject: CN=8f2f6f469d53cccab6bce5508574a706dfe64846 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:f5:9a:fd:27:bb:82:08:14:a3:15:13:4e:41: 05:c2:f2:e8:1b:9d:06:a3:bb:50:8f:c5:10:f2:41: 3f:33:ff:d7:05:c4:49:67:7c:7b:85:6d:e7:13:57: e2:81:c7:d9:9d:fa:e7:f3:57:c8:89:cd:32:8e:d0: d0:ec:e3:25:7a:c6:83:a2:6e:2d:f0:8f:49:eb:05: 07:53:c9:8a:cd:61:dd:16:c8:59:44:8d:94:cd:1c: 26:57:1f:24:19:aa:37:5e:c6:2b:2e:ac:88:10:92: 4c:ea:49:05:0a:d8:0f:0e:aa:fd:5f:d8:c6:f4:ae: d0:5a:1e:28:d1:80:f0:70:c6:17:fc:dd:35:91:8e: cd:51:99:af:6b:8e:cf:5d:35:ec:e3:62:27:35:af: 2e:4b:87:c2:05:d7:f6:07:7b:43:67:ec:96:c1:e5: ba:db:ce:47:a8:66:b1:6a:6f:9a:ee:e6:b0:ca:8f: d7:5a:01:5f:52:e6:59:2b:8c:dc:fc:e6:21:27:51: 83:d5:38:69:ab:4c:bd:86:21:13:73:a0:39:0e:d6: 61:83:49:10:be:c0:02:c1:9c:6b:69:f9:0b:f2:08: 39:eb:df:17:74:f4:46:18:ff:f7:9f:b4:c7:18:7b: c9:ab:7d:d7:61:b3:a5:ac:87:29:be:fa:5a:dd:b0: 03:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:2F:6F:46:9D:53:CC:CA:B6:BC:E5:50:85:74:A7:06:DF:E6:48:46 X509v3 Authority Key Identifier: keyid:CB:2D:9F:F8:6E:36:3D:B3:4D:05:56:EC:16:45:1F:2F:7F:30:3D:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yy2f-G42PbNNBVbsFkUfL38wPSQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b1af5b-089e-4cbe-bbe9-425ee968df0b/1/yy2f-G42PbNNBVbsFkUfL38wPSQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b1af5b-089e-4cbe-bbe9-425ee968df0b/1/yy2f-G42PbNNBVbsFkUfL38wPSQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:0c:41:b4:85:0c:7f:9c:27:69:f0:a2:0e:a7:55:f6:b8:58: 6e:0b:69:b9:cc:a3:65:c3:0a:89:90:79:71:af:ea:3a:41:e9: db:1a:7b:c8:9f:0e:91:dd:6a:9b:21:ee:73:ed:2a:cc:e4:2c: 6f:80:e5:56:f3:c1:1b:f6:3e:ed:5c:e9:97:91:bf:35:37:4e: 9c:7b:3d:e6:1c:44:b1:f8:09:59:2a:54:e9:9a:24:b5:38:aa: b1:91:f2:7f:1d:d5:ff:01:54:3b:51:2a:40:59:1d:bd:5a:2f: ec:b2:b5:59:0b:d3:09:b8:c9:9d:e2:0a:54:cf:89:7d:98:42: ed:69:99:49:01:f1:94:fa:c7:7e:5d:97:1f:05:b8:48:7d:b3: 00:e2:22:87:37:06:11:d0:e2:10:ed:62:c8:98:6d:a1:64:7f: 10:d1:e5:c3:b0:cf:e9:07:0e:90:6c:05:8c:13:0e:a6:73:8c: 29:f7:40:ad:ab:88:af:d4:68:d1:46:5e:9e:39:3a:3c:83:3b: 88:58:23:e9:44:0d:77:29:95:6e:79:59:bd:2f:6c:e3:86:27: 57:26:1d:4f:fe:7c:bc:e4:cd:97:65:bb:c2:42:bb:6c:f5:96: 74:9b:06:5b:0c:43:2e:07:e2:43:ae:ca:fc:76:67:ab:5a:00: 5b:6f:91:99 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsQuDGF5CFXMhlYWNJWib9BMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiMmQ5ZmY4NmUzNjNkYjM0ZDA1NTZlYzE2NDUxZjJmN2Yz MDNkMjQwHhcNMjUxMjEyMDQwMTA1WhcNMjUxMjEzMDQwMTA1WjAzMTEwLwYDVQQD Eyg4ZjJmNmY0NjlkNTNjY2NhYjZiY2U1NTA4NTc0YTcwNmRmZTY0ODQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg/Wa/Se7gggUoxUTTkEFwvLoG50G o7tQj8UQ8kE/M//XBcRJZ3x7hW3nE1figcfZnfrn81fIic0yjtDQ7OMlesaDom4t 8I9J6wUHU8mKzWHdFshZRI2UzRwmVx8kGao3XsYrLqyIEJJM6kkFCtgPDqr9X9jG 9K7QWh4o0YDwcMYX/N01kY7NUZmva47PXTXs42InNa8uS4fCBdf2B3tDZ+yWweW6 285HqGaxam+a7uawyo/XWgFfUuZZK4zc/OYhJ1GD1Thpq0y9hiETc6A5DtZhg0kQ vsACwZxrafkL8gg5698XdPRGGP/3n7THGHvJq33XYbOlrIcpvvpa3bADVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI8vb0adU8zKtrzlUIV0pwbf5khGMB8GA1UdIwQY MBaAFMstn/huNj2zTQVW7BZFHy9/MD0kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveXkyZi1HNDJQYk5OQlZic0ZrVWZMMzh3UFNRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC9iMWFmNWItMDg5ZS00Y2JlLWJiZTkt NDI1ZWU5NjhkZjBiLzEveXkyZi1HNDJQYk5OQlZic0ZrVWZMMzh3UFNRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NC9iMWFmNWItMDg5ZS00Y2JlLWJiZTktNDI1ZWU5NjhkZjBi LzEveXkyZi1HNDJQYk5OQlZic0ZrVWZMMzh3UFNRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATAxBtIUM f5wnafCiDqdV9rhYbgtpucyjZcMKiZB5ca/qOkHp2xp7yJ8Okd1qmyHuc+0qzOQs b4DlVvPBG/Y+7Vzpl5G/NTdOnHs95hxEsfgJWSpU6ZoktTiqsZHyfx3V/wFUO1Eq QFkdvVov7LK1WQvTCbjJneIKVM+JfZhC7WmZSQHxlPrHfl2XHwW4SH2zAOIihzcG EdDiEO1iyJhtoWR/ENHlw7DP6QcOkGwFjBMOpnOMKfdArauIr9Ro0UZenjk6PIM7 iFgj6UQNdymVbnlZvS9s44YnVyYdT/58vOTNl2W7wkK7bPWWdJsGWwxDLgfiQ67K /HZnq1oAW2+RmQ== -----END CERTIFICATE-----Generated at Fri Dec 12 05:23:46 2025 by rpki-client