This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/0748bb-e7e2-4268-b79c-8e652940a09d/1/y_FtyaS1vU0MQnioXAhVkwIL6jE.mft File: y_FtyaS1vU0MQnioXAhVkwIL6jE.mft (raw, json) Hash identifier: 1s7UtWqu66GpQ5+pm4nD0iC3gx7r2307Kthg6YgvR8w= Subject key identifier: D7:FE:C6:75:74:FD:4D:32:F0:E8:0B:49:19:E7:48:BB:04:57:E6:2C Authority key identifier: CB:F1:6D:C9:A4:B5:BD:4D:0C:42:78:A8:5C:08:55:93:02:0B:EA:31 Certificate issuer: /CN=cbf16dc9a4b5bd4d0c4278a85c085593020bea31 Certificate serial: 019B2D0C525C4559D1CD079EC7484892BF23 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y_FtyaS1vU0MQnioXAhVkwIL6jE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/0748bb-e7e2-4268-b79c-8e652940a09d/1/y_FtyaS1vU0MQnioXAhVkwIL6jE.mft Manifest number: 1412 Signing time: Wed 17 Dec 2025 16:02:20 +0000 Manifest this update: Wed 17 Dec 2025 16:02:20 +0000 Manifest next update: Thu 18 Dec 2025 16:02:20 +0000 Files and hashes: 1: uEzNWyvL5-zi2wG6wisIZYvIGW8.roa (hash: 74OlC+KGFIeOMFiETr1Upq5Oacdq7NEmnxm00bM9o0w=) 2: y_FtyaS1vU0MQnioXAhVkwIL6jE.crl (hash: YBQ9peNDqNlYteQt/q9DjSmlw297uZmvbwKw7hSNpKg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/0748bb-e7e2-4268-b79c-8e652940a09d/1/y_FtyaS1vU0MQnioXAhVkwIL6jE.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/0748bb-e7e2-4268-b79c-8e652940a09d/1/y_FtyaS1vU0MQnioXAhVkwIL6jE.mft rsync://rpki.ripe.net/repository/DEFAULT/y_FtyaS1vU0MQnioXAhVkwIL6jE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2d:0c:52:5c:45:59:d1:cd:07:9e:c7:48:48:92:bf:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cbf16dc9a4b5bd4d0c4278a85c085593020bea31 Validity Not Before: Dec 17 16:02:20 2025 GMT Not After : Dec 18 16:02:20 2025 GMT Subject: CN=d7fec67574fd4d32f0e80b4919e748bb0457e62c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:17:17:84:66:3c:18:cd:0d:73:0c:6e:1a:cf: d7:80:01:83:d9:1c:6e:3e:fb:8a:01:d6:33:04:a8: e2:13:7d:fa:13:bc:ba:fb:74:14:a8:70:7c:a8:1b: 5f:be:32:4e:3e:be:d6:6f:9e:bb:41:0b:38:6c:54: 10:96:ae:c7:6c:12:96:3c:32:d1:2b:64:e5:93:37: a8:60:04:73:ae:77:b2:54:69:37:72:5d:f2:d7:50: 89:ef:ed:56:cc:a8:09:1a:b5:84:a0:b1:10:e8:5a: e0:ee:9a:6b:d7:05:f4:3a:10:08:f5:75:bd:24:4f: 18:3c:c5:8b:9c:25:c6:48:ae:a0:9e:85:ba:ea:9c: 75:d1:4a:4b:f6:f3:99:11:2f:6b:3a:df:c1:82:ff: f7:bc:56:63:76:cd:73:a9:a9:f3:e5:fd:f7:19:73: f4:7e:d5:e6:3d:96:96:d9:61:b1:5e:30:e9:f8:b3: 8f:f4:c2:d3:d3:20:d2:d7:5d:8c:ed:4a:98:77:e8: 8d:0e:94:13:c0:d7:bf:5d:13:ba:9d:ae:56:e3:d4: 7f:13:63:10:b2:6b:aa:20:8b:af:4d:5f:f0:ae:29: 9e:a5:e4:72:32:0f:69:17:1c:0e:f8:85:ee:3a:be: 0b:90:35:c0:5b:8a:a4:e9:bc:df:84:1b:06:a0:a3: 69:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:FE:C6:75:74:FD:4D:32:F0:E8:0B:49:19:E7:48:BB:04:57:E6:2C X509v3 Authority Key Identifier: keyid:CB:F1:6D:C9:A4:B5:BD:4D:0C:42:78:A8:5C:08:55:93:02:0B:EA:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y_FtyaS1vU0MQnioXAhVkwIL6jE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/0748bb-e7e2-4268-b79c-8e652940a09d/1/y_FtyaS1vU0MQnioXAhVkwIL6jE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/0748bb-e7e2-4268-b79c-8e652940a09d/1/y_FtyaS1vU0MQnioXAhVkwIL6jE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:67:10:c2:83:f9:f2:48:0a:6c:01:8b:fe:b4:a8:fe:b0:54: 67:b9:f6:24:fd:50:39:39:bb:f7:96:eb:8f:48:51:b1:17:ff: a3:d0:d3:b3:74:c8:c8:cc:b0:2b:4d:e2:e4:d4:68:ec:1d:f1: 6f:b7:69:db:4b:7e:c6:90:49:cf:13:55:57:24:10:cc:a8:8d: a7:46:26:d9:36:cf:06:03:d1:a7:eb:e0:80:89:d3:aa:b6:ed: bc:86:0b:fb:90:8a:65:c4:9a:a0:88:3f:12:d9:65:49:9e:db: 2a:3a:34:73:74:a2:a1:0d:c4:59:b2:5b:1c:0b:81:18:5f:ea: 0c:ee:dc:23:f1:7f:34:89:bd:e2:25:c3:26:a8:7c:7e:8c:aa: f5:35:9f:1b:42:95:98:76:54:df:64:4c:61:42:c0:87:61:5a: 83:c8:78:28:04:d6:91:3f:ad:77:26:93:ae:42:b2:fa:f0:34: 1c:20:f2:92:88:95:9e:c7:bb:c4:7a:6a:c1:15:ec:35:63:ff: ae:57:f2:40:80:36:c2:11:d0:4e:45:f1:e0:17:b4:c3:dd:d0: 70:e0:40:29:0e:29:3a:d5:05:39:7c:38:e8:17:9e:36:ba:e2: 06:77:25:93:2a:06:ac:3a:a6:90:f7:bc:c2:2c:cd:87:39:25: a1:d0:ce:7f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZstDFJcRVnRzQeex0hIkr8jMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiZjE2ZGM5YTRiNWJkNGQwYzQyNzhhODVjMDg1NTkzMDIw YmVhMzEwHhcNMjUxMjE3MTYwMjIwWhcNMjUxMjE4MTYwMjIwWjAzMTEwLwYDVQQD EyhkN2ZlYzY3NTc0ZmQ0ZDMyZjBlODBiNDkxOWU3NDhiYjA0NTdlNjJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoRcXhGY8GM0NcwxuGs/XgAGD2Rxu PvuKAdYzBKjiE336E7y6+3QUqHB8qBtfvjJOPr7Wb567QQs4bFQQlq7HbBKWPDLR K2TlkzeoYARzrneyVGk3cl3y11CJ7+1WzKgJGrWEoLEQ6Frg7ppr1wX0OhAI9XW9 JE8YPMWLnCXGSK6gnoW66px10UpL9vOZES9rOt/Bgv/3vFZjds1zqanz5f33GXP0 ftXmPZaW2WGxXjDp+LOP9MLT0yDS112M7UqYd+iNDpQTwNe/XRO6na5W49R/E2MQ smuqIIuvTV/wrimepeRyMg9pFxwO+IXuOr4LkDXAW4qk6bzfhBsGoKNpTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNf+xnV0/U0y8OgLSRnnSLsEV+YsMB8GA1UdIwQY MBaAFMvxbcmktb1NDEJ4qFwIVZMCC+oxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveV9GdHlhUzF2VTBNUW5pb1hBaFZrd0lMNmpFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi8wNzQ4YmItZTdlMi00MjY4LWI3OWMt OGU2NTI5NDBhMDlkLzEveV9GdHlhUzF2VTBNUW5pb1hBaFZrd0lMNmpFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi8wNzQ4YmItZTdlMi00MjY4LWI3OWMtOGU2NTI5NDBhMDlk LzEveV9GdHlhUzF2VTBNUW5pb1hBaFZrd0lMNmpFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgmcQwoP5 8kgKbAGL/rSo/rBUZ7n2JP1QOTm795brj0hRsRf/o9DTs3TIyMywK03i5NRo7B3x b7dp20t+xpBJzxNVVyQQzKiNp0Ym2TbPBgPRp+vggInTqrbtvIYL+5CKZcSaoIg/ EtllSZ7bKjo0c3SioQ3EWbJbHAuBGF/qDO7cI/F/NIm94iXDJqh8foyq9TWfG0KV mHZU32RMYULAh2Fag8h4KATWkT+tdyaTrkKy+vA0HCDykoiVnse7xHpqwRXsNWP/ rlfyQIA2whHQTkXx4Be0w93QcOBAKQ4pOtUFOXw46BeeNrriBnclkyoGrDqmkPe8 wizNhzklodDOfw== -----END CERTIFICATE-----Generated at Wed Dec 17 19:05:21 2025 by rpki-client