This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a69f50-2740-4213-9616-1d4aa781b4d4/1/y2r1L3gkVTrztsuqc686F4wcWRM.mft File: y2r1L3gkVTrztsuqc686F4wcWRM.mft (raw, json) Hash identifier: L3ccpkV8bHCZeIvcCsXzwDm7P0NyIH0xoymgGzv06oc= Subject key identifier: 19:7B:09:AA:3D:03:21:8F:07:97:2E:8C:EF:04:21:13:C4:CC:AC:A2 Authority key identifier: CB:6A:F5:2F:78:24:55:3A:F3:B6:CB:AA:73:AF:3A:17:8C:1C:59:13 Certificate issuer: /CN=cb6af52f7824553af3b6cbaa73af3a178c1c5913 Certificate serial: 019AED87645D47615D7161BEE07551336E0D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y2r1L3gkVTrztsuqc686F4wcWRM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a69f50-2740-4213-9616-1d4aa781b4d4/1/y2r1L3gkVTrztsuqc686F4wcWRM.mft Manifest number: 012C Signing time: Fri 05 Dec 2025 08:01:04 +0000 Manifest this update: Fri 05 Dec 2025 08:01:04 +0000 Manifest next update: Sat 06 Dec 2025 08:01:04 +0000 Files and hashes: 1: IjHqWxuNpJU8DaK_lff-VC_PVWQ.roa (hash: kBcWX1ntdL3bghAjxPsE3h6Q1xLnJksKwhAqQ4KHWmw=) 2: y2r1L3gkVTrztsuqc686F4wcWRM.crl (hash: ZWpM/+Ct7sWjAFoNvUBTLIBI3xriqXYrO15SIqb00ZM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/a69f50-2740-4213-9616-1d4aa781b4d4/1/y2r1L3gkVTrztsuqc686F4wcWRM.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/a69f50-2740-4213-9616-1d4aa781b4d4/1/y2r1L3gkVTrztsuqc686F4wcWRM.mft rsync://rpki.ripe.net/repository/DEFAULT/y2r1L3gkVTrztsuqc686F4wcWRM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 08:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ed:87:64:5d:47:61:5d:71:61:be:e0:75:51:33:6e:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb6af52f7824553af3b6cbaa73af3a178c1c5913 Validity Not Before: Dec 5 08:01:04 2025 GMT Not After : Dec 6 08:01:04 2025 GMT Subject: CN=197b09aa3d03218f07972e8cef042113c4ccaca2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:1b:b8:f1:c4:e5:b7:b2:19:28:9e:7d:71:9a: 12:5b:ee:f4:83:06:43:4d:f1:ca:4e:b1:72:18:86: 04:de:19:f8:75:8b:67:9a:02:6d:24:36:b1:fe:79: 60:41:9e:91:1d:5e:12:41:4e:ee:7b:0b:21:f9:f5: 59:90:94:e5:66:c7:bc:87:3f:f6:94:e8:2b:e0:2b: 74:df:61:a6:0d:88:d5:bf:39:10:e7:26:e5:f3:df: c2:c8:8b:91:3a:bc:e9:31:69:59:71:ee:54:24:e3: ea:0d:90:4d:90:c5:89:96:6c:92:22:68:94:fe:54: c0:8b:71:0b:23:b7:07:d2:a2:7e:61:59:61:5f:d4: 33:93:49:06:33:1a:32:fd:cd:04:16:a5:1c:fa:c3: 2a:3b:3b:ec:1b:25:34:66:5d:f5:0f:a5:32:53:97: 0d:71:b9:d8:44:8d:14:1b:03:88:6d:15:ae:ca:42: f6:42:c7:81:f5:d4:99:38:cf:35:49:34:b8:e1:26: 5d:8d:47:e4:96:f1:b7:e5:42:02:82:f5:06:62:78: ed:24:bc:60:d5:04:34:a9:7d:5b:d4:3f:a1:86:55: 5e:e4:60:f2:de:44:67:32:b6:7d:6a:a6:e8:8b:7c: ed:04:a7:79:7f:48:93:3b:21:7c:26:d5:6e:4f:43: 3d:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:7B:09:AA:3D:03:21:8F:07:97:2E:8C:EF:04:21:13:C4:CC:AC:A2 X509v3 Authority Key Identifier: keyid:CB:6A:F5:2F:78:24:55:3A:F3:B6:CB:AA:73:AF:3A:17:8C:1C:59:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y2r1L3gkVTrztsuqc686F4wcWRM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a69f50-2740-4213-9616-1d4aa781b4d4/1/y2r1L3gkVTrztsuqc686F4wcWRM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a69f50-2740-4213-9616-1d4aa781b4d4/1/y2r1L3gkVTrztsuqc686F4wcWRM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:75:c3:15:34:52:a3:2f:99:45:8a:68:37:74:81:ae:b6:78: d8:8e:2e:59:db:02:42:38:95:be:e2:b2:ca:0e:d3:7f:ee:24: fb:fb:6d:f4:41:07:6d:1f:5b:32:50:08:fb:79:5d:58:ab:3e: a6:b8:79:a5:bb:e9:67:28:3e:26:1d:27:22:02:b2:0f:ad:1a: 12:8b:29:1f:72:e1:2c:59:98:f0:c4:5f:80:4b:25:5c:5c:60: ef:cf:87:de:da:de:73:60:f4:28:96:56:3d:69:10:9f:8e:55: 3a:39:ec:be:1b:a3:fd:2e:0a:79:e1:04:c9:1d:d0:1b:3b:e7: 6d:6c:8d:bd:7a:d5:5a:a3:e8:17:5b:7a:3e:87:d8:86:51:0f: 83:ab:2f:b9:60:bc:0a:bf:c1:a1:e0:1b:68:9e:31:5a:36:16: 75:26:9b:cb:77:ec:f7:f0:cf:b7:45:29:30:df:38:dd:5d:46: 33:b0:59:da:79:66:8a:00:05:4f:c8:94:ff:d7:bd:b8:63:0f: d0:46:04:6d:5a:73:1b:25:69:f9:2b:99:97:12:77:2a:0b:08: 61:c2:3c:00:c8:d0:1e:ba:08:24:2b:3f:c0:77:d1:a6:ca:6f: 66:e8:97:37:d1:10:1e:15:28:32:61:4a:61:dd:fd:18:6c:e0: a3:df:2d:f9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrth2RdR2FdcWG+4HVRM24NMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiNmFmNTJmNzgyNDU1M2FmM2I2Y2JhYTczYWYzYTE3OGMx YzU5MTMwHhcNMjUxMjA1MDgwMTA0WhcNMjUxMjA2MDgwMTA0WjAzMTEwLwYDVQQD EygxOTdiMDlhYTNkMDMyMThmMDc5NzJlOGNlZjA0MjExM2M0Y2NhY2EyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1xu48cTlt7IZKJ59cZoSW+70gwZD TfHKTrFyGIYE3hn4dYtnmgJtJDax/nlgQZ6RHV4SQU7uewsh+fVZkJTlZse8hz/2 lOgr4Ct032GmDYjVvzkQ5ybl89/CyIuROrzpMWlZce5UJOPqDZBNkMWJlmySImiU /lTAi3ELI7cH0qJ+YVlhX9Qzk0kGMxoy/c0EFqUc+sMqOzvsGyU0Zl31D6UyU5cN cbnYRI0UGwOIbRWuykL2QseB9dSZOM81STS44SZdjUfklvG35UICgvUGYnjtJLxg 1QQ0qX1b1D+hhlVe5GDy3kRnMrZ9aqboi3ztBKd5f0iTOyF8JtVuT0M9tQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBl7Cao9AyGPB5cujO8EIRPEzKyiMB8GA1UdIwQY MBaAFMtq9S94JFU687bLqnOvOheMHFkTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveTJyMUwzZ2tWVHJ6dHN1cWM2ODZGNHdjV1JNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9hNjlmNTAtMjc0MC00MjEzLTk2MTYt MWQ0YWE3ODFiNGQ0LzEveTJyMUwzZ2tWVHJ6dHN1cWM2ODZGNHdjV1JNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC9hNjlmNTAtMjc0MC00MjEzLTk2MTYtMWQ0YWE3ODFiNGQ0 LzEveTJyMUwzZ2tWVHJ6dHN1cWM2ODZGNHdjV1JNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG3XDFTRS oy+ZRYpoN3SBrrZ42I4uWdsCQjiVvuKyyg7Tf+4k+/tt9EEHbR9bMlAI+3ldWKs+ prh5pbvpZyg+Jh0nIgKyD60aEospH3LhLFmY8MRfgEslXFxg78+H3trec2D0KJZW PWkQn45VOjnsvhuj/S4KeeEEyR3QGzvnbWyNvXrVWqPoF1t6PofYhlEPg6svuWC8 Cr/BoeAbaJ4xWjYWdSaby3fs9/DPt0UpMN843V1GM7BZ2nlmigAFT8iU/9e9uGMP 0EYEbVpzGyVp+SuZlxJ3KgsIYcI8AMjQHroIJCs/wHfRpspvZuiXN9EQHhUoMmFK Yd39GGzgo98t+Q== -----END CERTIFICATE-----Generated at Fri Dec 5 13:14:11 2025 by rpki-client