This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/0748bb-e7e2-4268-b79c-8e652940a09d/1/y_FtyaS1vU0MQnioXAhVkwIL6jE.mft File: y_FtyaS1vU0MQnioXAhVkwIL6jE.mft (raw, json) Hash identifier: lCpo2oYtC/ZQEQ2aCq/0UyZNMsNIgDAEJ30zIOe1JME= Subject key identifier: 42:D9:0A:43:6B:F4:C0:E6:91:85:66:45:FA:02:E4:CD:B0:E5:D7:A7 Authority key identifier: CB:F1:6D:C9:A4:B5:BD:4D:0C:42:78:A8:5C:08:55:93:02:0B:EA:31 Certificate issuer: /CN=cbf16dc9a4b5bd4d0c4278a85c085593020bea31 Certificate serial: 019B2175E9CBAFE83FA18E0B41AC471C0BA5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y_FtyaS1vU0MQnioXAhVkwIL6jE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/0748bb-e7e2-4268-b79c-8e652940a09d/1/y_FtyaS1vU0MQnioXAhVkwIL6jE.mft Manifest number: 140C Signing time: Mon 15 Dec 2025 10:02:14 +0000 Manifest this update: Mon 15 Dec 2025 10:02:14 +0000 Manifest next update: Tue 16 Dec 2025 10:02:14 +0000 Files and hashes: 1: uEzNWyvL5-zi2wG6wisIZYvIGW8.roa (hash: 74OlC+KGFIeOMFiETr1Upq5Oacdq7NEmnxm00bM9o0w=) 2: y_FtyaS1vU0MQnioXAhVkwIL6jE.crl (hash: GxLg3KaBIS3j6XUQSYfWOevVYl5OYQTJknZlcDoakbQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/0748bb-e7e2-4268-b79c-8e652940a09d/1/y_FtyaS1vU0MQnioXAhVkwIL6jE.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/0748bb-e7e2-4268-b79c-8e652940a09d/1/y_FtyaS1vU0MQnioXAhVkwIL6jE.mft rsync://rpki.ripe.net/repository/DEFAULT/y_FtyaS1vU0MQnioXAhVkwIL6jE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 08:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:21:75:e9:cb:af:e8:3f:a1:8e:0b:41:ac:47:1c:0b:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cbf16dc9a4b5bd4d0c4278a85c085593020bea31 Validity Not Before: Dec 15 10:02:14 2025 GMT Not After : Dec 16 10:02:14 2025 GMT Subject: CN=42d90a436bf4c0e691856645fa02e4cdb0e5d7a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:dc:35:d5:29:7b:de:16:9f:94:ce:ba:02:65: 0f:ad:fb:04:93:fa:da:fe:65:1a:01:14:eb:67:bb: bf:70:68:bf:29:4d:4a:25:8f:13:6e:6d:66:e4:a4: a5:56:90:f3:04:58:f6:a4:44:ec:87:de:a9:47:cc: b8:2e:c0:0b:0d:d8:ee:e8:b7:8b:f7:04:ac:31:66: a5:fc:d7:0c:07:47:f0:df:c6:00:f8:51:55:18:e8: e2:9e:d3:79:dc:ac:04:14:b4:f1:3b:3a:c6:89:a7: ef:1d:e2:b5:5c:fb:9f:c8:2e:9e:12:23:0c:cb:f0: f9:fa:fa:e8:11:9e:19:e6:d4:d7:b5:3b:28:6a:98: e2:cd:4c:75:cc:c4:7a:75:54:7f:ca:25:26:20:f3: 83:32:37:b9:e9:79:39:47:e6:8c:46:e0:ed:15:93: ba:16:d8:34:f7:6b:2d:74:de:df:49:9e:69:bf:38: 05:a3:87:58:72:1d:50:24:c2:90:86:38:90:66:1e: 2a:5e:53:88:74:d3:64:02:c7:d2:8f:5c:0c:0b:25: 8b:c9:4d:fb:45:75:20:6c:34:aa:41:64:4e:22:3e: 46:a7:ab:9f:97:7a:60:aa:6a:ab:75:0d:f3:c6:81: 21:31:8f:7c:17:32:62:b5:d8:a8:71:e6:78:f7:2c: 0a:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:D9:0A:43:6B:F4:C0:E6:91:85:66:45:FA:02:E4:CD:B0:E5:D7:A7 X509v3 Authority Key Identifier: keyid:CB:F1:6D:C9:A4:B5:BD:4D:0C:42:78:A8:5C:08:55:93:02:0B:EA:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y_FtyaS1vU0MQnioXAhVkwIL6jE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/0748bb-e7e2-4268-b79c-8e652940a09d/1/y_FtyaS1vU0MQnioXAhVkwIL6jE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/0748bb-e7e2-4268-b79c-8e652940a09d/1/y_FtyaS1vU0MQnioXAhVkwIL6jE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:4a:41:d3:ac:d0:bb:91:45:d1:3f:f4:98:2f:de:cd:29:9e: 00:ff:38:28:83:6d:08:7c:dd:ed:5d:5a:a0:e8:81:fb:9b:5a: 8b:98:37:bf:f4:26:06:56:b6:c0:f1:76:ce:17:ae:eb:48:99: 73:eb:64:39:76:e0:9f:6a:4f:fd:8c:8d:f1:c5:26:b1:67:96: 91:5d:f1:ea:41:e0:a3:07:56:40:e0:e4:46:9b:ce:84:e7:21: b7:8f:a0:6f:64:34:0c:38:7b:f3:e5:fd:fe:b0:6d:2d:6e:cc: bb:e3:bc:13:82:52:66:3f:10:0f:4b:9f:c8:04:f7:bf:29:96: 21:d1:a3:af:63:ec:5a:2b:7b:fb:e8:73:7b:a9:49:80:28:0b: 57:d5:5e:e5:0d:94:22:1d:0b:78:12:63:e7:b0:50:81:6e:4f: 79:34:45:d4:44:ba:a2:16:ea:3c:66:75:15:f7:71:23:e1:a0: 5b:23:0e:50:83:c8:1d:32:0d:78:79:6f:dd:c1:e3:d1:52:95: be:21:9b:27:76:c7:1e:af:f3:60:cf:a2:09:87:2c:5d:5a:c6: 62:f4:04:a3:a4:64:35:1d:fd:c4:c0:6a:74:26:80:1d:d1:cc: 10:c3:35:47:2f:f5:e8:ff:b8:ff:b2:ee:fd:66:dd:8b:7b:a0: d4:5f:cd:b9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZshdenLr+g/oY4LQaxHHAulMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiZjE2ZGM5YTRiNWJkNGQwYzQyNzhhODVjMDg1NTkzMDIw YmVhMzEwHhcNMjUxMjE1MTAwMjE0WhcNMjUxMjE2MTAwMjE0WjAzMTEwLwYDVQQD Eyg0MmQ5MGE0MzZiZjRjMGU2OTE4NTY2NDVmYTAyZTRjZGIwZTVkN2E3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA09w11Sl73haflM66AmUPrfsEk/ra /mUaARTrZ7u/cGi/KU1KJY8Tbm1m5KSlVpDzBFj2pETsh96pR8y4LsALDdju6LeL 9wSsMWal/NcMB0fw38YA+FFVGOjintN53KwEFLTxOzrGiafvHeK1XPufyC6eEiMM y/D5+vroEZ4Z5tTXtTsoapjizUx1zMR6dVR/yiUmIPODMje56Xk5R+aMRuDtFZO6 Ftg092stdN7fSZ5pvzgFo4dYch1QJMKQhjiQZh4qXlOIdNNkAsfSj1wMCyWLyU37 RXUgbDSqQWROIj5Gp6ufl3pgqmqrdQ3zxoEhMY98FzJitdioceZ49ywKeQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFELZCkNr9MDmkYVmRfoC5M2w5denMB8GA1UdIwQY MBaAFMvxbcmktb1NDEJ4qFwIVZMCC+oxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveV9GdHlhUzF2VTBNUW5pb1hBaFZrd0lMNmpFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi8wNzQ4YmItZTdlMi00MjY4LWI3OWMt OGU2NTI5NDBhMDlkLzEveV9GdHlhUzF2VTBNUW5pb1hBaFZrd0lMNmpFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi8wNzQ4YmItZTdlMi00MjY4LWI3OWMtOGU2NTI5NDBhMDlk LzEveV9GdHlhUzF2VTBNUW5pb1hBaFZrd0lMNmpFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKUpB06zQ u5FF0T/0mC/ezSmeAP84KINtCHzd7V1aoOiB+5tai5g3v/QmBla2wPF2zheu60iZ c+tkOXbgn2pP/YyN8cUmsWeWkV3x6kHgowdWQODkRpvOhOcht4+gb2Q0DDh78+X9 /rBtLW7Mu+O8E4JSZj8QD0ufyAT3vymWIdGjr2PsWit7++hze6lJgCgLV9Ve5Q2U Ih0LeBJj57BQgW5PeTRF1ES6ohbqPGZ1FfdxI+GgWyMOUIPIHTINeHlv3cHj0VKV viGbJ3bHHq/zYM+iCYcsXVrGYvQEo6RkNR39xMBqdCaAHdHMEMM1Ry/16P+4/7Lu /Wbdi3ug1F/NuQ== -----END CERTIFICATE-----Generated at Mon Dec 15 14:52:54 2025 by rpki-client