This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/b84500-ffdb-42d2-9465-a2eade83955d/1/y5-GErfxR1ABa4SMQvYN82rYMtk.mft File: y5-GErfxR1ABa4SMQvYN82rYMtk.mft (raw, json) Hash identifier: gPhYbCDC6sPEmxB0NvAbjQieiiIxqg0aFYCPeGPHFKU= Subject key identifier: E3:20:51:20:29:7F:FB:EE:58:C8:7F:88:0C:AE:1E:62:82:0A:D5:1F Authority key identifier: CB:9F:86:12:B7:F1:47:50:01:6B:84:8C:42:F6:0D:F3:6A:D8:32:D9 Certificate issuer: /CN=cb9f8612b7f14750016b848c42f60df36ad832d9 Certificate serial: 019B066BD79F0D12486123E0B35EBE5A7F48 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y5-GErfxR1ABa4SMQvYN82rYMtk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/b84500-ffdb-42d2-9465-a2eade83955d/1/y5-GErfxR1ABa4SMQvYN82rYMtk.mft Manifest number: 176C Signing time: Wed 10 Dec 2025 04:01:29 +0000 Manifest this update: Wed 10 Dec 2025 04:01:29 +0000 Manifest next update: Thu 11 Dec 2025 04:01:29 +0000 Files and hashes: 1: 35Hkh6WGB56LhQUZWJy4fWu8adc.roa (hash: N+zjw78vBIKP/bKJa3b5qGQ6N/RlG9tWFNOT+GZrtRA=) 2: y5-GErfxR1ABa4SMQvYN82rYMtk.crl (hash: y32rooS62p+4rV1U/IEUPkFATJRcBo1EsbC+Hvo4ZWg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/b84500-ffdb-42d2-9465-a2eade83955d/1/y5-GErfxR1ABa4SMQvYN82rYMtk.crl rsync://rpki.ripe.net/repository/DEFAULT/94/b84500-ffdb-42d2-9465-a2eade83955d/1/y5-GErfxR1ABa4SMQvYN82rYMtk.mft rsync://rpki.ripe.net/repository/DEFAULT/y5-GErfxR1ABa4SMQvYN82rYMtk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:06:6b:d7:9f:0d:12:48:61:23:e0:b3:5e:be:5a:7f:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb9f8612b7f14750016b848c42f60df36ad832d9 Validity Not Before: Dec 10 04:01:29 2025 GMT Not After : Dec 11 04:01:29 2025 GMT Subject: CN=e3205120297ffbee58c87f880cae1e62820ad51f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:62:e9:7d:ca:27:66:b5:c4:90:5e:74:6b:6b: 7e:76:ab:cf:4e:dc:17:b0:be:59:ed:d3:8e:dc:77: 80:23:0c:cd:24:d7:e8:3b:d0:02:5b:d5:fa:e4:67: bc:9f:21:28:7f:64:69:f8:8d:bf:d3:fc:b5:e0:96: 09:8f:33:41:12:bb:a4:96:31:80:d2:52:78:d7:ae: 7c:05:70:aa:e3:3d:a1:a1:76:7c:1a:e4:13:0e:cf: 3d:6c:a1:31:41:cf:36:c3:0e:bd:a5:60:16:dd:86: 8d:7c:8c:e9:00:8c:b7:12:aa:66:b4:a0:1f:f3:5c: 3e:80:c4:ea:f5:1e:82:38:bd:0d:d0:9a:a8:67:dc: fd:c1:85:3d:c0:4b:8d:83:ef:0c:3a:d7:64:52:81: cf:e0:06:09:61:23:9c:b4:5a:6e:66:13:8f:b0:5a: 89:50:44:a7:de:e4:10:34:3f:d0:82:57:f8:0e:6c: d2:54:b8:59:e2:48:12:3a:bb:d7:55:de:39:91:39: 7b:1b:18:ee:10:cd:b4:86:b0:a2:38:a4:fe:ad:fb: ec:30:45:84:f8:0c:ff:0a:36:e1:f9:96:fe:53:60: 0a:af:28:b9:84:77:54:3f:7e:2a:93:1e:79:cf:87: a1:40:7e:d3:14:f4:d4:2d:1b:bb:34:db:cd:e8:70: 28:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:20:51:20:29:7F:FB:EE:58:C8:7F:88:0C:AE:1E:62:82:0A:D5:1F X509v3 Authority Key Identifier: keyid:CB:9F:86:12:B7:F1:47:50:01:6B:84:8C:42:F6:0D:F3:6A:D8:32:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y5-GErfxR1ABa4SMQvYN82rYMtk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b84500-ffdb-42d2-9465-a2eade83955d/1/y5-GErfxR1ABa4SMQvYN82rYMtk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b84500-ffdb-42d2-9465-a2eade83955d/1/y5-GErfxR1ABa4SMQvYN82rYMtk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:c6:aa:18:1b:88:ea:df:30:6e:24:05:99:3d:9f:73:68:a0: 96:df:b1:ab:40:94:87:e6:31:32:63:15:3d:05:0a:d8:39:70: eb:2d:93:6d:4a:0a:84:a5:1e:27:3a:e8:86:ce:4b:a5:35:49: f7:0b:9b:6f:ff:c5:1b:b2:d9:ee:96:48:4b:1d:71:9b:9f:67: e5:45:18:25:9b:1f:3d:71:12:2c:f0:92:54:85:6f:d4:72:68: ca:59:9e:ea:41:27:fc:ba:13:51:93:06:25:d6:d1:e2:fd:d5: d7:fe:6c:d9:56:87:ef:4e:c7:0c:86:47:34:48:c9:97:cb:53: 06:52:1f:32:aa:f0:05:ff:3a:02:a1:02:9e:ad:c2:d3:34:fd: 29:97:a8:5a:3f:28:06:3b:98:47:9f:b5:63:2b:16:7c:4c:b7: 99:95:1d:37:b2:1d:88:d0:9a:8a:61:09:a3:46:9a:46:3c:ae: 0b:b0:18:c1:c6:9a:47:77:da:db:37:50:3f:7d:4e:c7:37:5b: 51:6a:e0:0b:24:b7:e2:19:a3:90:8c:a0:f3:41:98:94:99:d7: 1c:7c:ce:5a:1e:c7:9e:c1:4d:a5:a7:6a:1b:56:58:20:01:a4: cd:12:55:2a:70:0a:7f:a6:9e:7d:06:e9:fc:eb:d1:fb:ff:75: e0:20:60:55 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsGa9efDRJIYSPgs16+Wn9IMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiOWY4NjEyYjdmMTQ3NTAwMTZiODQ4YzQyZjYwZGYzNmFk ODMyZDkwHhcNMjUxMjEwMDQwMTI5WhcNMjUxMjExMDQwMTI5WjAzMTEwLwYDVQQD EyhlMzIwNTEyMDI5N2ZmYmVlNThjODdmODgwY2FlMWU2MjgyMGFkNTFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtWLpfconZrXEkF50a2t+dqvPTtwX sL5Z7dOO3HeAIwzNJNfoO9ACW9X65Ge8nyEof2Rp+I2/0/y14JYJjzNBErukljGA 0lJ41658BXCq4z2hoXZ8GuQTDs89bKExQc82ww69pWAW3YaNfIzpAIy3EqpmtKAf 81w+gMTq9R6COL0N0JqoZ9z9wYU9wEuNg+8MOtdkUoHP4AYJYSOctFpuZhOPsFqJ UESn3uQQND/Qglf4DmzSVLhZ4kgSOrvXVd45kTl7GxjuEM20hrCiOKT+rfvsMEWE +Az/Cjbh+Zb+U2AKryi5hHdUP34qkx55z4ehQH7TFPTULRu7NNvN6HAo0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOMgUSApf/vuWMh/iAyuHmKCCtUfMB8GA1UdIwQY MBaAFMufhhK38UdQAWuEjEL2DfNq2DLZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveTUtR0VyZnhSMUFCYTRTTVF2WU44MnJZTXRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC9iODQ1MDAtZmZkYi00MmQyLTk0NjUt YTJlYWRlODM5NTVkLzEveTUtR0VyZnhSMUFCYTRTTVF2WU44MnJZTXRrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NC9iODQ1MDAtZmZkYi00MmQyLTk0NjUtYTJlYWRlODM5NTVk LzEveTUtR0VyZnhSMUFCYTRTTVF2WU44MnJZTXRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANsaqGBuI 6t8wbiQFmT2fc2iglt+xq0CUh+YxMmMVPQUK2Dlw6y2TbUoKhKUeJzrohs5LpTVJ 9wubb//FG7LZ7pZISx1xm59n5UUYJZsfPXESLPCSVIVv1HJoylme6kEn/LoTUZMG JdbR4v3V1/5s2VaH707HDIZHNEjJl8tTBlIfMqrwBf86AqECnq3C0zT9KZeoWj8o BjuYR5+1YysWfEy3mZUdN7IdiNCaimEJo0aaRjyuC7AYwcaaR3fa2zdQP31Oxzdb UWrgCyS34hmjkIyg80GYlJnXHHzOWh7HnsFNpadqG1ZYIAGkzRJVKnAKf6aefQbp /OvR+/914CBgVQ== -----END CERTIFICATE-----Generated at Wed Dec 10 09:00:54 2025 by rpki-client