This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/be56d4-8de6-44a2-9691-369263443025/1/y5idLhUgGyDjQIjdHARVslRE-Pw.mft File: y5idLhUgGyDjQIjdHARVslRE-Pw.mft (raw, json) Hash identifier: Wr/CilluwFH6v75BfWDR0A+bZWSftyrIz1dx0tvjf+0= Subject key identifier: 43:5B:DC:F0:09:4C:A9:3D:91:B3:06:15:F3:53:67:F3:98:84:DD:F9 Authority key identifier: CB:98:9D:2E:15:20:1B:20:E3:40:88:DD:1C:04:55:B2:54:44:F8:FC Certificate issuer: /CN=cb989d2e15201b20e34088dd1c0455b25444f8fc Certificate serial: 019B435C461642AB02ED29F7E6AA242F33F5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y5idLhUgGyDjQIjdHARVslRE-Pw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/be56d4-8de6-44a2-9691-369263443025/1/y5idLhUgGyDjQIjdHARVslRE-Pw.mft Manifest number: 0DC5 Signing time: Mon 22 Dec 2025 00:01:19 +0000 Manifest this update: Mon 22 Dec 2025 00:01:19 +0000 Manifest next update: Tue 23 Dec 2025 00:01:19 +0000 Files and hashes: 1: IlHeExFCZOwDVGR-pn-Mj6btqHA.roa (hash: G3OUewbUbdIfclHozVugqBGDnmkGwJv9DxeJNbUzFpM=) 2: y5idLhUgGyDjQIjdHARVslRE-Pw.crl (hash: +/+7TYgS0RxgiRRh+/zyne4Uvhd3o+oZPG7GLmmCDvw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/be56d4-8de6-44a2-9691-369263443025/1/y5idLhUgGyDjQIjdHARVslRE-Pw.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/be56d4-8de6-44a2-9691-369263443025/1/y5idLhUgGyDjQIjdHARVslRE-Pw.mft rsync://rpki.ripe.net/repository/DEFAULT/y5idLhUgGyDjQIjdHARVslRE-Pw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:43:5c:46:16:42:ab:02:ed:29:f7:e6:aa:24:2f:33:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb989d2e15201b20e34088dd1c0455b25444f8fc Validity Not Before: Dec 22 00:01:19 2025 GMT Not After : Dec 23 00:01:19 2025 GMT Subject: CN=435bdcf0094ca93d91b30615f35367f39884ddf9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:4f:d7:51:f0:2e:4a:42:cf:af:90:46:c9:b2: 94:e6:9a:db:44:4a:c3:c3:97:34:b8:d0:1f:94:3b: 5f:a2:34:42:b3:d5:f4:55:72:73:e4:38:92:e0:82: 01:1d:18:32:76:08:0c:2b:94:37:f3:5a:97:58:5e: e6:ba:9e:47:f5:e4:97:12:22:f6:56:42:0c:5e:2c: ed:cf:bc:9c:c2:74:ba:f3:35:a1:21:e5:be:2c:d3: a9:99:a9:0e:51:c6:09:e6:bf:1e:89:61:7f:fa:56: ee:64:90:ba:77:9b:8b:91:af:34:ba:4a:d4:b5:7f: 26:24:70:0e:96:b6:42:78:17:1e:ab:49:3c:d9:8a: 24:74:d9:b1:7b:44:f1:d8:22:a2:64:b7:15:6a:b2: ee:81:bf:2e:28:6a:4f:0a:49:9d:7f:51:7b:ab:93: 6b:d7:c4:43:43:d2:12:0a:a9:61:51:a3:15:b0:54: 38:df:61:7c:f9:fc:d0:60:93:9c:66:c4:d0:2a:2f: 2e:3d:14:6f:aa:cb:c8:2d:3c:5a:79:73:a4:ef:5a: e0:b2:ed:3b:ed:af:b4:0c:3a:80:5d:98:44:d5:c7: 08:2e:fc:2b:4b:93:90:13:52:0c:c5:ec:93:83:10: 74:1f:8f:55:5b:33:ce:4e:10:ae:84:be:71:e4:27: de:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:5B:DC:F0:09:4C:A9:3D:91:B3:06:15:F3:53:67:F3:98:84:DD:F9 X509v3 Authority Key Identifier: keyid:CB:98:9D:2E:15:20:1B:20:E3:40:88:DD:1C:04:55:B2:54:44:F8:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y5idLhUgGyDjQIjdHARVslRE-Pw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/be56d4-8de6-44a2-9691-369263443025/1/y5idLhUgGyDjQIjdHARVslRE-Pw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/be56d4-8de6-44a2-9691-369263443025/1/y5idLhUgGyDjQIjdHARVslRE-Pw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:32:4d:86:3a:c3:03:2e:99:8e:11:87:5c:b2:b5:0f:4a:11: 13:bb:e2:a2:13:d5:b2:f7:12:2a:cc:92:6a:cb:f4:73:a7:d4: 6b:dc:a4:f9:cf:7e:5c:4b:0f:22:7c:02:83:6b:ef:bc:41:39: 5e:32:b7:ab:27:8e:d3:60:18:b6:3e:63:ee:f0:56:34:38:12: 37:59:7a:71:db:5f:f7:b6:7a:78:cb:97:7a:9a:3b:56:f6:60: 76:ef:76:69:a0:21:bb:4d:cb:47:ff:ef:74:f1:d9:ad:fc:66: db:27:1e:a7:0b:fa:bb:bd:6f:10:9f:1e:43:6a:74:42:c9:52: c5:68:d8:2d:8c:1d:b2:fa:96:e5:80:dc:d8:6b:0d:56:5a:ad: 50:9f:a6:b3:87:5a:cb:76:31:c8:13:97:d2:af:3c:86:a4:6f: 12:c3:db:1a:de:f6:41:ce:fc:05:0c:ea:54:1f:79:fe:3a:cb: 83:6d:93:8b:82:49:86:6f:35:07:ef:ba:fb:8c:0f:f6:f1:5d: c6:eb:1e:8e:76:31:08:74:c1:79:1d:b7:88:bd:67:eb:07:a1: 73:aa:fb:66:1d:06:68:ef:43:fa:d3:d2:6f:06:ed:4a:e6:f5: 95:62:bb:da:e5:ef:b4:d6:42:35:80:60:df:2c:e2:1b:e1:21: 5d:6f:9d:93 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtDXEYWQqsC7Sn35qokLzP1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiOTg5ZDJlMTUyMDFiMjBlMzQwODhkZDFjMDQ1NWIyNTQ0 NGY4ZmMwHhcNMjUxMjIyMDAwMTE5WhcNMjUxMjIzMDAwMTE5WjAzMTEwLwYDVQQD Eyg0MzViZGNmMDA5NGNhOTNkOTFiMzA2MTVmMzUzNjdmMzk4ODRkZGY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2U/XUfAuSkLPr5BGybKU5prbRErD w5c0uNAflDtfojRCs9X0VXJz5DiS4IIBHRgydggMK5Q381qXWF7mup5H9eSXEiL2 VkIMXiztz7ycwnS68zWhIeW+LNOpmakOUcYJ5r8eiWF/+lbuZJC6d5uLka80ukrU tX8mJHAOlrZCeBceq0k82YokdNmxe0Tx2CKiZLcVarLugb8uKGpPCkmdf1F7q5Nr 18RDQ9ISCqlhUaMVsFQ432F8+fzQYJOcZsTQKi8uPRRvqsvILTxaeXOk71rgsu07 7a+0DDqAXZhE1ccILvwrS5OQE1IMxeyTgxB0H49VWzPOThCuhL5x5CfeNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFENb3PAJTKk9kbMGFfNTZ/OYhN35MB8GA1UdIwQY MBaAFMuYnS4VIBsg40CI3RwEVbJURPj8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveTVpZExoVWdHeURqUUlqZEhBUlZzbFJFLVB3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC9iZTU2ZDQtOGRlNi00NGEyLTk2OTEt MzY5MjYzNDQzMDI1LzEveTVpZExoVWdHeURqUUlqZEhBUlZzbFJFLVB3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC9iZTU2ZDQtOGRlNi00NGEyLTk2OTEtMzY5MjYzNDQzMDI1 LzEveTVpZExoVWdHeURqUUlqZEhBUlZzbFJFLVB3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJjJNhjrD Ay6ZjhGHXLK1D0oRE7viohPVsvcSKsySasv0c6fUa9yk+c9+XEsPInwCg2vvvEE5 XjK3qyeO02AYtj5j7vBWNDgSN1l6cdtf97Z6eMuXepo7VvZgdu92aaAhu03LR//v dPHZrfxm2ycepwv6u71vEJ8eQ2p0QslSxWjYLYwdsvqW5YDc2GsNVlqtUJ+ms4da y3YxyBOX0q88hqRvEsPbGt72Qc78BQzqVB95/jrLg22Ti4JJhm81B++6+4wP9vFd xusejnYxCHTBeR23iL1n6wehc6r7Zh0GaO9D+tPSbwbtSub1lWK72uXvtNZCNYBg 3yziG+EhXW+dkw== -----END CERTIFICATE-----Generated at Mon Dec 22 04:19:48 2025 by rpki-client