This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/9098fd-7dc3-4e12-b893-fd22df3b57f6/1/y5UvnDOcq9FCNNAMhKJS1-xxoqI.mft File: y5UvnDOcq9FCNNAMhKJS1-xxoqI.mft (raw, json) Hash identifier: SFiJhe5ytcIYryzDwD+8V4FkENBmPDlxRvP/4tijFZ8= Subject key identifier: D5:09:C1:A2:39:38:74:73:08:5E:2A:4E:36:25:A4:D0:97:CA:12:DD Authority key identifier: CB:95:2F:9C:33:9C:AB:D1:42:34:D0:0C:84:A2:52:D7:EC:71:A2:A2 Certificate issuer: /CN=cb952f9c339cabd14234d00c84a252d7ec71a2a2 Certificate serial: 019B48B8FABD6279A034C238761387E17AF4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y5UvnDOcq9FCNNAMhKJS1-xxoqI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/9098fd-7dc3-4e12-b893-fd22df3b57f6/1/y5UvnDOcq9FCNNAMhKJS1-xxoqI.mft Manifest number: 1793 Signing time: Tue 23 Dec 2025 01:00:40 +0000 Manifest this update: Tue 23 Dec 2025 01:00:40 +0000 Manifest next update: Wed 24 Dec 2025 01:00:40 +0000 Files and hashes: 1: 7ZEG0z_Osqd4q9aW4GX-pynJwVw.roa (hash: 878HhGYlePO6JgY3PtW7VLOGBnrfdtyTWzeH4xsP4g8=) 2: VeBtVkpIYodNfDVL9q0zO2G9fI4.roa (hash: 69DCX1Y+C0YR951ujfa1InW/UlkkHLEEqX2IFa0T65Q=) 3: WFk1Sbl9ffKO0_c5-wWqDgx_UdY.roa (hash: 17TQJSkjsNV4kLocHOeLmKp8frraMCHjxrwGJ2DZ/TA=) 4: YQH8RWxADt9aJV8FpUmZfLr_4hA.roa (hash: as+j57YQ6lscVO9lYUdKRdByZHNNE4AzI7PATyHo/j0=) 5: qB1Zo9eTq0Gf6RAAveJrJzHjkfE.roa (hash: k2V4zT3lW1qBoAk74wdn7K6a/aSM0/Ew+2PcshHyMps=) 6: y5UvnDOcq9FCNNAMhKJS1-xxoqI.crl (hash: vodyL9T6FFXHiqdr1CR38xv2L0vk8Milsb1bSg5wz+I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/9098fd-7dc3-4e12-b893-fd22df3b57f6/1/y5UvnDOcq9FCNNAMhKJS1-xxoqI.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/9098fd-7dc3-4e12-b893-fd22df3b57f6/1/y5UvnDOcq9FCNNAMhKJS1-xxoqI.mft rsync://rpki.ripe.net/repository/DEFAULT/y5UvnDOcq9FCNNAMhKJS1-xxoqI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 23:03:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:48:b8:fa:bd:62:79:a0:34:c2:38:76:13:87:e1:7a:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb952f9c339cabd14234d00c84a252d7ec71a2a2 Validity Not Before: Dec 23 01:00:40 2025 GMT Not After : Dec 24 01:00:40 2025 GMT Subject: CN=d509c1a239387473085e2a4e3625a4d097ca12dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:e8:5f:26:00:6a:49:0f:17:a9:40:7d:c4:b4: de:e8:8a:4a:d7:cf:1c:2c:c5:d8:de:db:91:3b:3e: 5f:b1:28:35:c1:8e:e2:1b:77:b5:2c:0e:fc:93:07: 21:f9:6e:94:e8:dd:42:6c:a0:cf:d4:bf:05:ea:90: d4:c7:04:e6:c2:ec:7f:78:cd:9e:1b:3b:e1:e9:44: ed:c1:bb:f2:e8:b2:47:01:f1:06:7d:99:15:3b:1e: 79:46:10:41:72:f8:43:8e:a0:0f:af:ec:67:86:bd: c4:15:51:76:13:96:c6:e6:b0:e6:50:e5:10:50:a3: d2:36:5f:e9:8a:58:c7:f5:d5:82:8d:ea:4f:6c:ca: 8b:09:60:aa:2e:7b:d0:5e:d2:27:9b:7d:61:87:4a: c6:ff:2f:e8:00:82:18:5a:3d:51:40:e9:d5:63:f3: 15:61:95:a5:91:da:64:56:c5:21:89:5b:57:28:ab: 46:1b:33:75:23:2d:3d:dd:64:fa:64:1c:90:49:29: 5d:58:b2:00:04:c5:33:95:e8:07:bf:76:75:50:36: 11:d3:63:eb:7c:c2:aa:99:a8:4c:19:d2:27:11:c7: 24:b9:1b:8f:b0:6c:7d:36:fd:e1:84:6c:ed:66:1b: c2:d9:72:ca:14:1a:60:4f:b4:4e:90:2b:99:cc:ee: 1a:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:09:C1:A2:39:38:74:73:08:5E:2A:4E:36:25:A4:D0:97:CA:12:DD X509v3 Authority Key Identifier: keyid:CB:95:2F:9C:33:9C:AB:D1:42:34:D0:0C:84:A2:52:D7:EC:71:A2:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y5UvnDOcq9FCNNAMhKJS1-xxoqI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/9098fd-7dc3-4e12-b893-fd22df3b57f6/1/y5UvnDOcq9FCNNAMhKJS1-xxoqI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/9098fd-7dc3-4e12-b893-fd22df3b57f6/1/y5UvnDOcq9FCNNAMhKJS1-xxoqI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:65:ef:e1:d3:de:26:6d:ec:8d:5f:e9:c9:93:c1:80:b5:db: da:ff:c7:dd:72:d0:e7:1c:39:b6:03:2b:12:61:4b:01:1a:e3: 79:05:42:65:87:a7:4d:cc:a9:0d:cb:9d:7e:c5:27:6c:20:be: f8:69:b4:d4:d6:a6:ce:7d:7a:18:56:0f:1b:50:7a:9d:2a:f1: 40:0a:13:f8:83:97:c8:88:c7:c0:68:a9:96:2d:11:ae:6d:57: 1c:09:48:82:ed:97:ee:24:19:8c:06:e5:68:22:c8:88:d1:d6: 79:82:0c:af:1f:83:7c:80:6f:3b:fb:42:1d:cd:8c:bf:da:09: 1a:24:d0:8d:16:81:56:c7:61:d9:e0:59:34:42:30:eb:cc:31: 1f:57:fb:a6:fc:5d:63:88:7b:cc:68:28:2d:ea:31:2a:9d:24: ac:6f:c0:11:54:11:29:5c:30:40:c1:a9:ed:4a:4b:d8:aa:b7: e2:4a:c4:0d:d7:b8:57:ee:1f:d8:26:cd:db:ac:bf:51:83:a7: db:a4:7f:89:63:15:7e:93:f8:1c:67:43:07:41:d7:2c:3d:51: 28:1d:79:ea:79:9e:89:20:2a:7e:92:da:f4:ce:db:f4:da:38: 55:88:87:19:d3:f8:cd:e7:0d:23:5b:c7:04:ff:1f:be:5f:a9: ee:e9:18:58 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtIuPq9YnmgNMI4dhOH4Xr0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiOTUyZjljMzM5Y2FiZDE0MjM0ZDAwYzg0YTI1MmQ3ZWM3 MWEyYTIwHhcNMjUxMjIzMDEwMDQwWhcNMjUxMjI0MDEwMDQwWjAzMTEwLwYDVQQD EyhkNTA5YzFhMjM5Mzg3NDczMDg1ZTJhNGUzNjI1YTRkMDk3Y2ExMmRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApehfJgBqSQ8XqUB9xLTe6IpK188c LMXY3tuROz5fsSg1wY7iG3e1LA78kwch+W6U6N1CbKDP1L8F6pDUxwTmwux/eM2e Gzvh6UTtwbvy6LJHAfEGfZkVOx55RhBBcvhDjqAPr+xnhr3EFVF2E5bG5rDmUOUQ UKPSNl/piljH9dWCjepPbMqLCWCqLnvQXtInm31hh0rG/y/oAIIYWj1RQOnVY/MV YZWlkdpkVsUhiVtXKKtGGzN1Iy093WT6ZByQSSldWLIABMUzlegHv3Z1UDYR02Pr fMKqmahMGdInEcckuRuPsGx9Nv3hhGztZhvC2XLKFBpgT7ROkCuZzO4aQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNUJwaI5OHRzCF4qTjYlpNCXyhLdMB8GA1UdIwQY MBaAFMuVL5wznKvRQjTQDISiUtfscaKiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveTVVdm5ET2NxOUZDTk5BTWhLSlMxLXh4b3FJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS85MDk4ZmQtN2RjMy00ZTEyLWI4OTMt ZmQyMmRmM2I1N2Y2LzEveTVVdm5ET2NxOUZDTk5BTWhLSlMxLXh4b3FJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS85MDk4ZmQtN2RjMy00ZTEyLWI4OTMtZmQyMmRmM2I1N2Y2 LzEveTVVdm5ET2NxOUZDTk5BTWhLSlMxLXh4b3FJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMWXv4dPe Jm3sjV/pyZPBgLXb2v/H3XLQ5xw5tgMrEmFLARrjeQVCZYenTcypDcudfsUnbCC+ +Gm01Namzn16GFYPG1B6nSrxQAoT+IOXyIjHwGipli0Rrm1XHAlIgu2X7iQZjAbl aCLIiNHWeYIMrx+DfIBvO/tCHc2Mv9oJGiTQjRaBVsdh2eBZNEIw68wxH1f7pvxd Y4h7zGgoLeoxKp0krG/AEVQRKVwwQMGp7UpL2Kq34krEDde4V+4f2CbN26y/UYOn 26R/iWMVfpP4HGdDB0HXLD1RKB156nmeiSAqfpLa9M7b9No4VYiHGdP4zecNI1vH BP8fvl+p7ukYWA== -----END CERTIFICATE-----Generated at Tue Dec 23 09:12:37 2025 by rpki-client