This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/418fe2-4f7d-40ac-abe4-119bbd761973/1/_CYh7jHgaq3Byjo3bkV9jQSWsQ0.mft File: _CYh7jHgaq3Byjo3bkV9jQSWsQ0.mft (raw, json) Hash identifier: SZ3wp5mUX1cN9Z+LK374hmi8SfoGVNBu3faD+ZMjJXU= Subject key identifier: 5F:4E:0E:BB:02:52:96:6E:B0:CA:AE:C0:33:A5:16:D5:A0:4F:AE:50 Authority key identifier: FC:26:21:EE:31:E0:6A:AD:C1:CA:3A:37:6E:45:7D:8D:04:96:B1:0D Certificate issuer: /CN=fc2621ee31e06aadc1ca3a376e457d8d0496b10d Certificate serial: 019AF50A651DC3A837E2914A5124842CD2E3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_CYh7jHgaq3Byjo3bkV9jQSWsQ0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/418fe2-4f7d-40ac-abe4-119bbd761973/1/_CYh7jHgaq3Byjo3bkV9jQSWsQ0.mft Manifest number: 15E3 Signing time: Sat 06 Dec 2025 19:01:30 +0000 Manifest this update: Sat 06 Dec 2025 19:01:30 +0000 Manifest next update: Sun 07 Dec 2025 19:01:30 +0000 Files and hashes: 1: ZBvl9kgTfl9xpoCDalOQ41fsQlA.roa (hash: eTBJG42QxSY9j5MKHECEE0ZbmMhc6Mb5ITGizx3+EdE=) 2: _CYh7jHgaq3Byjo3bkV9jQSWsQ0.crl (hash: yNR+kdFlSjv8S8nYvQ5oEVeUw9G36LHam8sZFjzjF3s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/418fe2-4f7d-40ac-abe4-119bbd761973/1/_CYh7jHgaq3Byjo3bkV9jQSWsQ0.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/418fe2-4f7d-40ac-abe4-119bbd761973/1/_CYh7jHgaq3Byjo3bkV9jQSWsQ0.mft rsync://rpki.ripe.net/repository/DEFAULT/_CYh7jHgaq3Byjo3bkV9jQSWsQ0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0a:65:1d:c3:a8:37:e2:91:4a:51:24:84:2c:d2:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fc2621ee31e06aadc1ca3a376e457d8d0496b10d Validity Not Before: Dec 6 19:01:30 2025 GMT Not After : Dec 7 19:01:30 2025 GMT Subject: CN=5f4e0ebb0252966eb0caaec033a516d5a04fae50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:31:46:44:bd:60:27:03:4d:91:36:76:86:80: 01:64:08:6d:00:86:7f:4f:f2:cc:4e:62:9d:a3:85: 91:56:27:4d:09:96:64:56:c4:2d:c9:93:c5:92:7b: 2f:f5:55:46:91:0f:d2:4b:c0:2d:e7:73:1e:f6:09: 7e:67:11:aa:c0:46:ed:61:ff:57:09:9e:a8:5c:a4: 2b:c7:c6:a2:6b:f1:d6:63:6c:bf:53:c5:a4:c5:a4: fe:e8:be:3f:eb:a2:26:ad:c4:2e:ca:d5:8b:6b:55: 3b:a9:de:36:74:23:5b:37:a4:3e:95:07:02:87:6d: 53:e9:ce:1e:b1:7c:ef:18:82:70:42:82:5f:36:fd: 18:36:5d:bc:02:c5:67:d6:83:d0:b6:1e:35:dc:eb: 8f:ec:39:f1:e2:8d:f3:d8:56:0d:1a:99:9a:21:33: f4:1a:2f:e1:aa:71:de:50:6c:e7:63:ab:47:c4:cc: 3d:e6:fe:f9:c8:b4:47:60:ad:b8:09:9b:15:a1:1e: ec:0f:37:c9:85:b1:25:16:c5:b8:a0:9d:98:c9:09: 68:e3:2a:87:90:4d:19:07:b0:04:46:1b:df:19:a6: 52:8a:dd:4e:e3:e9:b6:e5:fc:4d:90:17:f4:42:de: fe:a7:fa:87:8d:24:c7:1a:b3:1e:96:fc:84:0b:1b: 2f:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:4E:0E:BB:02:52:96:6E:B0:CA:AE:C0:33:A5:16:D5:A0:4F:AE:50 X509v3 Authority Key Identifier: keyid:FC:26:21:EE:31:E0:6A:AD:C1:CA:3A:37:6E:45:7D:8D:04:96:B1:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_CYh7jHgaq3Byjo3bkV9jQSWsQ0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/418fe2-4f7d-40ac-abe4-119bbd761973/1/_CYh7jHgaq3Byjo3bkV9jQSWsQ0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/418fe2-4f7d-40ac-abe4-119bbd761973/1/_CYh7jHgaq3Byjo3bkV9jQSWsQ0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:90:88:77:44:56:09:06:fb:41:f0:ed:22:43:f5:df:21:72: 77:c3:55:30:90:53:d0:b9:26:a4:71:de:e3:45:54:a2:1e:64: b5:29:c9:02:86:2d:c0:1c:62:4d:1d:c5:db:e8:a4:84:3a:e0: 41:3e:0c:c1:7a:6f:94:10:9b:8e:9e:9b:7b:94:68:dd:83:00: 07:63:8c:33:5c:35:72:a1:d7:83:25:d1:a5:46:8f:3c:ae:96: 93:25:d5:03:f3:58:04:47:f9:38:7e:65:3b:42:b3:24:d8:51: f9:56:ac:8e:26:ea:ee:aa:b8:b1:7b:7d:58:85:3c:a3:ff:19: 1e:16:2a:76:dc:e5:69:6f:77:d5:7c:26:da:52:75:31:9e:3e: f9:90:d3:c3:44:09:bc:7e:68:a4:19:14:88:73:1d:d3:c7:0f: 86:a7:46:c9:dd:be:0c:44:22:5e:15:a3:30:13:f2:fb:af:6f: e5:89:b7:16:e8:2d:c5:ff:ea:c4:ba:b8:df:5c:a4:de:b9:01: ad:02:a9:53:0e:1c:3e:2f:a8:cc:bb:cf:38:26:b3:be:cc:32: 0d:cd:6d:09:be:33:bf:d4:c2:ff:29:e9:1a:af:d9:0f:ec:96: 12:da:cc:c5:5f:70:a8:16:63:94:eb:ee:c6:bc:24:ce:4f:b9: 2e:e6:24:c1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1CmUdw6g34pFKUSSELNLjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZjMjYyMWVlMzFlMDZhYWRjMWNhM2EzNzZlNDU3ZDhkMDQ5 NmIxMGQwHhcNMjUxMjA2MTkwMTMwWhcNMjUxMjA3MTkwMTMwWjAzMTEwLwYDVQQD Eyg1ZjRlMGViYjAyNTI5NjZlYjBjYWFlYzAzM2E1MTZkNWEwNGZhZTUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyjFGRL1gJwNNkTZ2hoABZAhtAIZ/ T/LMTmKdo4WRVidNCZZkVsQtyZPFknsv9VVGkQ/SS8At53Me9gl+ZxGqwEbtYf9X CZ6oXKQrx8aia/HWY2y/U8WkxaT+6L4/66ImrcQuytWLa1U7qd42dCNbN6Q+lQcC h21T6c4esXzvGIJwQoJfNv0YNl28AsVn1oPQth413OuP7Dnx4o3z2FYNGpmaITP0 Gi/hqnHeUGznY6tHxMw95v75yLRHYK24CZsVoR7sDzfJhbElFsW4oJ2YyQlo4yqH kE0ZB7AERhvfGaZSit1O4+m25fxNkBf0Qt7+p/qHjSTHGrMelvyECxsvMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF9ODrsCUpZusMquwDOlFtWgT65QMB8GA1UdIwQY MBaAFPwmIe4x4Gqtwco6N25FfY0ElrENMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX0NZaDdqSGdhcTNCeWpvM2JrVjlqUVNXc1EwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS80MThmZTItNGY3ZC00MGFjLWFiZTQt MTE5YmJkNzYxOTczLzEvX0NZaDdqSGdhcTNCeWpvM2JrVjlqUVNXc1EwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS80MThmZTItNGY3ZC00MGFjLWFiZTQtMTE5YmJkNzYxOTcz LzEvX0NZaDdqSGdhcTNCeWpvM2JrVjlqUVNXc1EwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqZCId0RW CQb7QfDtIkP13yFyd8NVMJBT0LkmpHHe40VUoh5ktSnJAoYtwBxiTR3F2+ikhDrg QT4MwXpvlBCbjp6be5Ro3YMAB2OMM1w1cqHXgyXRpUaPPK6WkyXVA/NYBEf5OH5l O0KzJNhR+Vasjibq7qq4sXt9WIU8o/8ZHhYqdtzlaW931Xwm2lJ1MZ4++ZDTw0QJ vH5opBkUiHMd08cPhqdGyd2+DEQiXhWjMBPy+69v5Ym3Fugtxf/qxLq431yk3rkB rQKpUw4cPi+ozLvPOCazvswyDc1tCb4zv9TC/ynpGq/ZD+yWEtrMxV9wqBZjlOvu xrwkzk+5LuYkwQ== -----END CERTIFICATE-----Generated at Sun Dec 7 01:52:39 2025 by rpki-client