This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/68cfc5-2ec6-4b59-b12e-6e36b2f1706b/1/y-PaNYKiKDDsTmdUfnX6O52iCyM.mft File: y-PaNYKiKDDsTmdUfnX6O52iCyM.mft (raw, json) Hash identifier: n5jphA3nrxMQGTBkEVfJ04mAe5ktdF1E51eh/+zJ27I= Subject key identifier: 3A:79:C9:E0:67:21:60:9C:5C:8F:EE:F3:F8:88:3E:88:8E:7E:71:BA Authority key identifier: CB:E3:DA:35:82:A2:28:30:EC:4E:67:54:7E:75:FA:3B:9D:A2:0B:23 Certificate issuer: /CN=cbe3da3582a22830ec4e67547e75fa3b9da20b23 Certificate serial: 019B1C1709DF676208187B89352DED7520BA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y-PaNYKiKDDsTmdUfnX6O52iCyM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/68cfc5-2ec6-4b59-b12e-6e36b2f1706b/1/y-PaNYKiKDDsTmdUfnX6O52iCyM.mft Manifest number: 0986 Signing time: Sun 14 Dec 2025 09:00:30 +0000 Manifest this update: Sun 14 Dec 2025 09:00:30 +0000 Manifest next update: Mon 15 Dec 2025 09:00:30 +0000 Files and hashes: 1: XGSaAvPj_7ZKK3N0e0ECGhx2VrQ.roa (hash: 4J6msExKcBt3FvPoWt2N5Sp5wauv+dD5ByMN6L0xjog=) 2: y-PaNYKiKDDsTmdUfnX6O52iCyM.crl (hash: P4lSR3ZoI6eTZxI2FZp2dmzB1Mj+6YE6WbyhF43Lrbg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/68cfc5-2ec6-4b59-b12e-6e36b2f1706b/1/y-PaNYKiKDDsTmdUfnX6O52iCyM.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/68cfc5-2ec6-4b59-b12e-6e36b2f1706b/1/y-PaNYKiKDDsTmdUfnX6O52iCyM.mft rsync://rpki.ripe.net/repository/DEFAULT/y-PaNYKiKDDsTmdUfnX6O52iCyM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1c:17:09:df:67:62:08:18:7b:89:35:2d:ed:75:20:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cbe3da3582a22830ec4e67547e75fa3b9da20b23 Validity Not Before: Dec 14 09:00:30 2025 GMT Not After : Dec 15 09:00:30 2025 GMT Subject: CN=3a79c9e06721609c5c8feef3f8883e888e7e71ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:83:cc:03:7d:5e:20:2a:d1:3b:cf:38:35:85: 2f:fc:ec:d7:69:c6:82:7b:35:f6:a3:f5:5d:cf:34: cb:57:a4:10:8d:a9:09:df:05:73:80:70:8d:0e:26: 32:d1:2d:92:fa:ea:85:ba:ef:cb:1d:12:3b:2e:e0: b0:c2:73:dd:33:19:2f:2b:62:8d:31:3d:32:25:a4: 3c:25:d8:88:8f:0b:e4:53:1d:c7:c1:15:fb:05:7c: 13:04:76:24:b1:6b:6d:77:4c:63:df:72:78:66:ea: bf:fa:1c:98:20:6a:32:18:71:47:fd:aa:97:08:c5: 41:1d:26:78:9d:28:97:a6:f4:c6:5e:a5:b3:62:33: 11:6b:92:89:3f:45:54:e9:a9:51:3d:37:5d:cb:90: c8:96:44:bf:4f:c1:69:71:c5:eb:9a:b8:ab:09:d3: 30:82:11:08:4d:c3:71:91:c3:ef:f3:89:5b:45:c5: ca:5c:16:d4:67:dc:8b:c8:25:89:c0:20:c1:0d:6c: 55:4a:c3:0b:c6:69:dd:07:f1:56:8b:c1:a8:bf:ba: d8:31:c2:8d:87:8a:01:56:92:b8:59:43:b7:ee:30: a9:3d:f3:3d:bf:10:46:38:4d:96:e0:68:8f:a2:33: 57:9f:b9:03:f1:cd:28:a5:78:9a:af:4a:3a:57:61: 2b:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:79:C9:E0:67:21:60:9C:5C:8F:EE:F3:F8:88:3E:88:8E:7E:71:BA X509v3 Authority Key Identifier: keyid:CB:E3:DA:35:82:A2:28:30:EC:4E:67:54:7E:75:FA:3B:9D:A2:0B:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y-PaNYKiKDDsTmdUfnX6O52iCyM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/68cfc5-2ec6-4b59-b12e-6e36b2f1706b/1/y-PaNYKiKDDsTmdUfnX6O52iCyM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/68cfc5-2ec6-4b59-b12e-6e36b2f1706b/1/y-PaNYKiKDDsTmdUfnX6O52iCyM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:8f:36:fd:2d:37:d7:c0:6a:81:4f:98:55:c7:ff:b5:f2:7f: a6:10:bd:af:94:b4:8c:45:d3:6b:00:83:da:78:55:9f:f7:d1: 25:65:c9:08:87:a5:a8:a8:99:ec:a8:dc:eb:62:f8:13:7d:56: 1c:80:36:0d:fc:f3:fb:26:d9:66:5f:07:b4:92:e2:28:08:ed: e1:b8:ba:62:1e:09:0f:8e:b8:48:f5:bd:a1:15:97:ac:56:44: bd:44:3b:e1:a4:51:1e:c2:76:76:68:24:3d:7d:be:3b:c0:7d: ec:1f:65:43:f6:7b:47:f4:08:81:ac:41:9b:61:6e:36:2d:88: db:8c:03:ed:77:53:57:48:d6:6a:f2:b2:df:c4:c2:2e:d1:78: b9:75:21:54:11:35:a4:22:66:e5:11:e2:e4:96:9a:c7:b4:2e: 99:32:5e:7f:f9:df:d1:5b:49:a3:ba:6f:f7:75:32:79:ac:e4: 41:e1:04:03:e7:63:0a:eb:d6:71:24:62:63:aa:c5:89:cf:31: 93:90:6f:27:a0:5c:d8:b6:e9:b9:6f:21:bd:2c:cc:31:f3:ad: db:7a:14:32:d2:ce:75:de:61:38:26:08:1e:50:ff:31:a5:05: 6e:eb:35:32:2e:f2:97:91:71:96:29:27:66:ba:6f:fc:88:4d: bd:b7:28:25 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZscFwnfZ2IIGHuJNS3tdSC6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiZTNkYTM1ODJhMjI4MzBlYzRlNjc1NDdlNzVmYTNiOWRh MjBiMjMwHhcNMjUxMjE0MDkwMDMwWhcNMjUxMjE1MDkwMDMwWjAzMTEwLwYDVQQD EygzYTc5YzllMDY3MjE2MDljNWM4ZmVlZjNmODg4M2U4ODhlN2U3MWJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxIPMA31eICrRO884NYUv/OzXacaC ezX2o/VdzzTLV6QQjakJ3wVzgHCNDiYy0S2S+uqFuu/LHRI7LuCwwnPdMxkvK2KN MT0yJaQ8JdiIjwvkUx3HwRX7BXwTBHYksWttd0xj33J4Zuq/+hyYIGoyGHFH/aqX CMVBHSZ4nSiXpvTGXqWzYjMRa5KJP0VU6alRPTddy5DIlkS/T8FpccXrmrirCdMw ghEITcNxkcPv84lbRcXKXBbUZ9yLyCWJwCDBDWxVSsMLxmndB/FWi8Gov7rYMcKN h4oBVpK4WUO37jCpPfM9vxBGOE2W4GiPojNXn7kD8c0opXiar0o6V2ErUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDp5yeBnIWCcXI/u8/iIPoiOfnG6MB8GA1UdIwQY MBaAFMvj2jWCoigw7E5nVH51+judogsjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveS1QYU5ZS2lLRERzVG1kVWZuWDZPNTJpQ3lNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC82OGNmYzUtMmVjNi00YjU5LWIxMmUt NmUzNmIyZjE3MDZiLzEveS1QYU5ZS2lLRERzVG1kVWZuWDZPNTJpQ3lNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC82OGNmYzUtMmVjNi00YjU5LWIxMmUtNmUzNmIyZjE3MDZi LzEveS1QYU5ZS2lLRERzVG1kVWZuWDZPNTJpQ3lNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlY82/S03 18BqgU+YVcf/tfJ/phC9r5S0jEXTawCD2nhVn/fRJWXJCIelqKiZ7Kjc62L4E31W HIA2Dfzz+ybZZl8HtJLiKAjt4bi6Yh4JD464SPW9oRWXrFZEvUQ74aRRHsJ2dmgk PX2+O8B97B9lQ/Z7R/QIgaxBm2FuNi2I24wD7XdTV0jWavKy38TCLtF4uXUhVBE1 pCJm5RHi5Jaax7QumTJef/nf0VtJo7pv93UyeazkQeEEA+djCuvWcSRiY6rFic8x k5BvJ6Bc2LbpuW8hvSzMMfOt23oUMtLOdd5hOCYIHlD/MaUFbus1Mi7yl5Fxlikn Zrpv/IhNvbcoJQ== -----END CERTIFICATE-----Generated at Sun Dec 14 15:06:57 2025 by rpki-client