This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/7f0c24-440a-4ff7-a0c8-256339736c2b/1/y7fCC1WkcNq4kvTJHqABC9HDnzQ.mft File: y7fCC1WkcNq4kvTJHqABC9HDnzQ.mft (raw, json) Hash identifier: q+AvRRXodn7vSnMYCn5VO7DpRmD4w1ZqDDDJCqj6UIE= Subject key identifier: 96:F2:93:B2:F1:0A:8C:8F:65:82:F7:2A:D1:F6:18:DA:91:80:9F:E7 Authority key identifier: CB:B7:C2:0B:55:A4:70:DA:B8:92:F4:C9:1E:A0:01:0B:D1:C3:9F:34 Certificate issuer: /CN=cbb7c20b55a470dab892f4c91ea0010bd1c39f34 Certificate serial: 019B04B413DDECA1E69DF3E3F166BFC850FA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y7fCC1WkcNq4kvTJHqABC9HDnzQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/7f0c24-440a-4ff7-a0c8-256339736c2b/1/y7fCC1WkcNq4kvTJHqABC9HDnzQ.mft Manifest number: 1058 Signing time: Tue 09 Dec 2025 20:01:08 +0000 Manifest this update: Tue 09 Dec 2025 20:01:08 +0000 Manifest next update: Wed 10 Dec 2025 20:01:08 +0000 Files and hashes: 1: 09lPg3280N3ZZ86hKfoO1uBHQzU.roa (hash: nnylAsJyHM10QSoZPAI37zrHno/gVhQAjT+wCMZWOs0=) 2: H_d5LCU4L3XwGqLNkFDXFN1zy2I.roa (hash: 1Qd4GHmykP1jEc8/694tMFaYEbNeBbde2QJNxgvHfMw=) 3: IjrWIh0jzbH9AGDO-Vviq_eBA4Q.roa (hash: 7jujT2Lsuok7oL2vIrgbVf5j8YwADQ9BWos7sqz0ULQ=) 4: y7fCC1WkcNq4kvTJHqABC9HDnzQ.crl (hash: Pej7pTEU1byhhL6IpN2Cy3Q7rC7SKw+Y0w+nosnqnyg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/7f0c24-440a-4ff7-a0c8-256339736c2b/1/y7fCC1WkcNq4kvTJHqABC9HDnzQ.crl rsync://rpki.ripe.net/repository/DEFAULT/af/7f0c24-440a-4ff7-a0c8-256339736c2b/1/y7fCC1WkcNq4kvTJHqABC9HDnzQ.mft rsync://rpki.ripe.net/repository/DEFAULT/y7fCC1WkcNq4kvTJHqABC9HDnzQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 10 Dec 2025 20:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:04:b4:13:dd:ec:a1:e6:9d:f3:e3:f1:66:bf:c8:50:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cbb7c20b55a470dab892f4c91ea0010bd1c39f34 Validity Not Before: Dec 9 20:01:08 2025 GMT Not After : Dec 10 20:01:08 2025 GMT Subject: CN=96f293b2f10a8c8f6582f72ad1f618da91809fe7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:b3:0d:46:2b:51:65:af:29:4b:36:1c:74:90: de:e4:23:e8:74:99:f4:b6:29:44:7a:4b:be:b6:8c: 74:2f:8c:4d:15:5a:42:c9:89:2f:98:1a:4d:fc:15: e7:df:f3:db:f1:0c:69:c1:8c:90:e7:d0:11:cc:1d: cd:37:7b:e2:08:10:df:cb:0f:e8:f7:3d:26:84:8c: 31:0a:5c:b8:c6:c2:2c:7f:7f:b0:5a:7f:51:47:a1: ba:97:ba:b8:c3:c1:54:e6:27:f9:6f:4c:c6:22:11: fd:85:c4:5d:2e:7f:cb:31:7c:9e:f3:b3:3b:1c:1c: 07:eb:6f:25:9d:f8:15:9f:32:ab:a5:0d:ed:36:91: a9:42:ec:7b:af:a9:41:a5:23:10:d0:3a:4a:9f:b1: 3a:a9:a7:f0:0f:c3:7e:65:db:de:da:dd:28:c1:3a: 80:84:17:ad:af:d9:bd:7c:e1:9b:8a:7e:5a:68:1a: 87:35:61:66:8a:f9:7a:9a:b7:19:11:10:40:25:75: f5:73:f8:1a:6e:ff:03:70:e3:a1:48:99:8d:53:a2: 2a:f5:22:8d:93:ea:69:b8:fd:d1:cf:5c:e4:ee:cf: cc:bd:3c:27:f5:51:1c:46:c0:84:ad:c3:57:8b:13: 7e:a4:c1:28:67:c9:1c:b2:de:88:b8:e1:22:9a:a6: 65:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:F2:93:B2:F1:0A:8C:8F:65:82:F7:2A:D1:F6:18:DA:91:80:9F:E7 X509v3 Authority Key Identifier: keyid:CB:B7:C2:0B:55:A4:70:DA:B8:92:F4:C9:1E:A0:01:0B:D1:C3:9F:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y7fCC1WkcNq4kvTJHqABC9HDnzQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/7f0c24-440a-4ff7-a0c8-256339736c2b/1/y7fCC1WkcNq4kvTJHqABC9HDnzQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/af/7f0c24-440a-4ff7-a0c8-256339736c2b/1/y7fCC1WkcNq4kvTJHqABC9HDnzQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:5a:92:fd:4b:5a:b1:8b:39:79:23:0c:d6:8e:24:6f:34:cc: d3:ba:a4:bd:73:6e:e7:77:14:e0:98:d2:0d:fa:10:67:50:41: 32:71:e3:59:07:79:c1:16:bb:fe:7a:8b:e1:0e:f7:01:45:52: fa:52:50:fe:f4:f3:b7:cf:ed:90:a5:7a:32:ce:e2:81:c8:44: c4:27:8b:9b:a2:e1:8b:7b:8a:e4:f7:bc:39:c6:b7:ae:a8:90: e3:ea:59:b8:5d:43:94:2d:27:b8:22:c3:4f:db:63:b4:de:0f: 07:64:4b:e1:84:fe:bf:f7:f6:4c:ea:1e:2b:9d:51:b8:f4:f5: 53:4c:45:cf:3d:ec:53:2b:c8:df:2d:df:78:d9:8a:89:a8:73: 05:09:1f:10:d5:e9:fb:f4:fd:c0:46:ea:8f:7f:7a:43:58:7a: fc:9b:a7:0e:c2:04:c5:fc:87:06:e0:9b:81:b5:f4:18:a7:ac: 46:a4:6f:8c:53:27:c8:96:a2:ec:85:22:bd:f6:49:c5:75:f9: 63:cf:3e:2b:aa:c1:af:8a:df:bd:b7:20:ce:7f:9d:de:44:a1: d6:f1:fb:90:8c:bf:49:06:1f:f3:e2:a7:52:15:69:30:a7:7c: 61:bf:69:d8:17:8a:ab:6b:39:61:11:2c:ab:20:be:97:ff:0e: ca:e6:01:e4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsEtBPd7KHmnfPj8Wa/yFD6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiYjdjMjBiNTVhNDcwZGFiODkyZjRjOTFlYTAwMTBiZDFj MzlmMzQwHhcNMjUxMjA5MjAwMTA4WhcNMjUxMjEwMjAwMTA4WjAzMTEwLwYDVQQD Eyg5NmYyOTNiMmYxMGE4YzhmNjU4MmY3MmFkMWY2MThkYTkxODA5ZmU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvbMNRitRZa8pSzYcdJDe5CPodJn0 tilEeku+tox0L4xNFVpCyYkvmBpN/BXn3/Pb8QxpwYyQ59ARzB3NN3viCBDfyw/o 9z0mhIwxCly4xsIsf3+wWn9RR6G6l7q4w8FU5if5b0zGIhH9hcRdLn/LMXye87M7 HBwH628lnfgVnzKrpQ3tNpGpQux7r6lBpSMQ0DpKn7E6qafwD8N+Zdve2t0owTqA hBetr9m9fOGbin5aaBqHNWFmivl6mrcZERBAJXX1c/gabv8DcOOhSJmNU6Iq9SKN k+ppuP3Rz1zk7s/MvTwn9VEcRsCErcNXixN+pMEoZ8kcst6IuOEimqZltwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJbyk7LxCoyPZYL3KtH2GNqRgJ/nMB8GA1UdIwQY MBaAFMu3wgtVpHDauJL0yR6gAQvRw580MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveTdmQ0MxV2tjTnE0a3ZUSkhxQUJDOUhEbnpRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi83ZjBjMjQtNDQwYS00ZmY3LWEwYzgt MjU2MzM5NzM2YzJiLzEveTdmQ0MxV2tjTnE0a3ZUSkhxQUJDOUhEbnpRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZi83ZjBjMjQtNDQwYS00ZmY3LWEwYzgtMjU2MzM5NzM2YzJi LzEveTdmQ0MxV2tjTnE0a3ZUSkhxQUJDOUhEbnpRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMVqS/Uta sYs5eSMM1o4kbzTM07qkvXNu53cU4JjSDfoQZ1BBMnHjWQd5wRa7/nqL4Q73AUVS +lJQ/vTzt8/tkKV6Ms7igchExCeLm6Lhi3uK5Pe8Oca3rqiQ4+pZuF1DlC0nuCLD T9tjtN4PB2RL4YT+v/f2TOoeK51RuPT1U0xFzz3sUyvI3y3feNmKiahzBQkfENXp +/T9wEbqj396Q1h6/JunDsIExfyHBuCbgbX0GKesRqRvjFMnyJai7IUivfZJxXX5 Y88+K6rBr4rfvbcgzn+d3kSh1vH7kIy/SQYf8+KnUhVpMKd8Yb9p2BeKq2s5YREs qyC+l/8OyuYB5A== -----END CERTIFICATE-----Generated at Wed Dec 10 05:19:07 2025 by rpki-client