This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/73e00f-e3e3-4d23-ad6b-76682e794cc3/1/y5Xhy8Z-eC2_n450TkNyaL3MOc4.mft File: y5Xhy8Z-eC2_n450TkNyaL3MOc4.mft (raw, json) Hash identifier: c4yfI+dbNQ4eCvzDJF8Etj21Iyf8KtISGY6fp5t4gb4= Subject key identifier: 28:85:34:C9:4D:2E:BD:18:B3:07:F6:5D:36:64:D1:28:88:11:26:2C Authority key identifier: CB:95:E1:CB:C6:7E:78:2D:BF:9F:8E:74:4E:43:72:68:BD:CC:39:CE Certificate issuer: /CN=cb95e1cbc67e782dbf9f8e744e437268bdcc39ce Certificate serial: 019AE716FA9AFEA31E297EFBF1864F38FD0E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y5Xhy8Z-eC2_n450TkNyaL3MOc4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/73e00f-e3e3-4d23-ad6b-76682e794cc3/1/y5Xhy8Z-eC2_n450TkNyaL3MOc4.mft Manifest number: 1759 Signing time: Thu 04 Dec 2025 02:00:34 +0000 Manifest this update: Thu 04 Dec 2025 02:00:34 +0000 Manifest next update: Fri 05 Dec 2025 02:00:34 +0000 Files and hashes: 1: YCt2PEu1c9s1UKpEDsPjqt0QhVE.roa (hash: J7vCJCdM4bkswGPTs/5K83jCz1I4iBeDKjR/fP3jctk=) 2: y5Xhy8Z-eC2_n450TkNyaL3MOc4.crl (hash: 66pysqlnVSxuQiTxvDMyocezZTs1SbmA64FnJKXk5eQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/73e00f-e3e3-4d23-ad6b-76682e794cc3/1/y5Xhy8Z-eC2_n450TkNyaL3MOc4.crl rsync://rpki.ripe.net/repository/DEFAULT/ec/73e00f-e3e3-4d23-ad6b-76682e794cc3/1/y5Xhy8Z-eC2_n450TkNyaL3MOc4.mft rsync://rpki.ripe.net/repository/DEFAULT/y5Xhy8Z-eC2_n450TkNyaL3MOc4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 02:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e7:16:fa:9a:fe:a3:1e:29:7e:fb:f1:86:4f:38:fd:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb95e1cbc67e782dbf9f8e744e437268bdcc39ce Validity Not Before: Dec 4 02:00:34 2025 GMT Not After : Dec 5 02:00:34 2025 GMT Subject: CN=288534c94d2ebd18b307f65d3664d1288811262c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:48:e6:0f:75:58:f5:9c:2f:eb:5a:1d:fe:05: 3b:0c:6a:9f:42:d5:f7:99:1d:c0:be:20:b1:1e:45: b0:7a:2d:fb:b4:3d:ef:10:19:0b:e0:fa:44:3e:7d: a9:67:06:64:f7:50:d1:e7:3d:ef:2c:5a:74:2c:a5: 47:2b:3e:22:97:04:c9:6a:5d:f1:8b:74:9f:a1:53: e5:fc:68:4e:d0:f0:85:70:cc:e2:07:9f:d3:7f:20: 3b:68:6b:6d:c9:10:1c:48:c6:9e:93:28:ee:1b:57: 68:eb:a6:0e:2d:0b:14:7a:aa:6a:26:9d:c5:02:cd: cc:ea:79:e6:62:b2:42:c2:be:3d:f5:dd:4c:88:23: 4f:22:77:b1:6b:46:5e:46:29:81:cc:70:1d:35:9a: 98:38:1b:a6:94:ae:8d:e5:07:75:7d:14:3e:c8:23: 94:9b:6b:54:de:29:c4:32:e8:0c:6b:c2:e4:ed:8d: b6:7a:71:c1:b3:b1:a4:50:66:39:ca:fa:ca:e2:7f: 7a:c4:09:36:0d:09:2f:49:c9:30:e1:f9:1f:5a:dd: 21:2e:e9:4a:1a:97:45:8f:b8:83:56:eb:90:d1:ea: f6:8a:4f:a6:fb:38:e1:6b:10:9b:36:39:57:1e:4a: 9c:62:08:63:78:e7:0e:66:23:17:8b:02:e1:9b:fc: 84:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:85:34:C9:4D:2E:BD:18:B3:07:F6:5D:36:64:D1:28:88:11:26:2C X509v3 Authority Key Identifier: keyid:CB:95:E1:CB:C6:7E:78:2D:BF:9F:8E:74:4E:43:72:68:BD:CC:39:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y5Xhy8Z-eC2_n450TkNyaL3MOc4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/73e00f-e3e3-4d23-ad6b-76682e794cc3/1/y5Xhy8Z-eC2_n450TkNyaL3MOc4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/73e00f-e3e3-4d23-ad6b-76682e794cc3/1/y5Xhy8Z-eC2_n450TkNyaL3MOc4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:e6:7e:35:9d:95:88:e4:84:bf:12:8c:c4:60:48:25:69:4e: 41:2c:af:37:c3:9e:54:9c:08:6f:eb:d6:6c:b8:75:ac:ed:e5: 8a:f7:80:9d:d6:6e:f7:40:90:50:08:19:4d:4c:fb:c5:b1:40: fa:2b:37:67:04:f4:73:57:a3:df:ff:88:eb:8a:90:e0:e6:10: fe:86:70:34:89:97:14:44:f0:e7:7c:47:5c:99:99:c3:95:f9: cf:b0:f7:6a:88:ca:21:4d:c2:47:72:df:2e:50:e8:b5:78:56: a3:51:3c:08:67:0d:4c:8b:83:8d:31:3f:41:98:37:ea:e6:af: b0:60:d0:16:a5:1d:f4:90:8b:c7:1d:ff:ce:24:10:c7:bd:60: 73:ff:8c:49:3f:1c:eb:d5:52:2f:47:35:67:fb:1b:ea:18:28: 05:24:fa:61:54:d5:17:ef:57:02:2f:86:09:f7:9a:50:4f:8f: 21:4d:8e:e7:c9:91:a1:cc:8f:a8:81:ee:88:b6:b5:bc:a8:66: ac:e6:f3:3b:66:11:da:ce:3e:c5:ad:8c:a3:f4:98:06:b4:0b: bd:f3:52:0b:da:76:6f:c1:ca:54:e0:01:a6:cd:cd:b5:c0:c8: 80:4c:c9:d5:26:88:84:74:e8:77:40:00:af:44:57:fd:c4:b5: 80:23:ea:72 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrnFvqa/qMeKX778YZPOP0OMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiOTVlMWNiYzY3ZTc4MmRiZjlmOGU3NDRlNDM3MjY4YmRj YzM5Y2UwHhcNMjUxMjA0MDIwMDM0WhcNMjUxMjA1MDIwMDM0WjAzMTEwLwYDVQQD EygyODg1MzRjOTRkMmViZDE4YjMwN2Y2NWQzNjY0ZDEyODg4MTEyNjJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs0jmD3VY9Zwv61od/gU7DGqfQtX3 mR3AviCxHkWwei37tD3vEBkL4PpEPn2pZwZk91DR5z3vLFp0LKVHKz4ilwTJal3x i3SfoVPl/GhO0PCFcMziB5/TfyA7aGttyRAcSMaekyjuG1do66YOLQsUeqpqJp3F As3M6nnmYrJCwr499d1MiCNPInexa0ZeRimBzHAdNZqYOBumlK6N5Qd1fRQ+yCOU m2tU3inEMugMa8Lk7Y22enHBs7GkUGY5yvrK4n96xAk2DQkvSckw4fkfWt0hLulK GpdFj7iDVuuQ0er2ik+m+zjhaxCbNjlXHkqcYghjeOcOZiMXiwLhm/yELQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCiFNMlNLr0Yswf2XTZk0SiIESYsMB8GA1UdIwQY MBaAFMuV4cvGfngtv5+OdE5Dcmi9zDnOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveTVYaHk4Wi1lQzJfbjQ1MFRrTnlhTDNNT2M0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy83M2UwMGYtZTNlMy00ZDIzLWFkNmIt NzY2ODJlNzk0Y2MzLzEveTVYaHk4Wi1lQzJfbjQ1MFRrTnlhTDNNT2M0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYy83M2UwMGYtZTNlMy00ZDIzLWFkNmItNzY2ODJlNzk0Y2Mz LzEveTVYaHk4Wi1lQzJfbjQ1MFRrTnlhTDNNT2M0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJuZ+NZ2V iOSEvxKMxGBIJWlOQSyvN8OeVJwIb+vWbLh1rO3liveAndZu90CQUAgZTUz7xbFA +is3ZwT0c1ej3/+I64qQ4OYQ/oZwNImXFETw53xHXJmZw5X5z7D3aojKIU3CR3Lf LlDotXhWo1E8CGcNTIuDjTE/QZg36uavsGDQFqUd9JCLxx3/ziQQx71gc/+MST8c 69VSL0c1Z/sb6hgoBST6YVTVF+9XAi+GCfeaUE+PIU2O58mRocyPqIHuiLa1vKhm rObzO2YR2s4+xa2Mo/SYBrQLvfNSC9p2b8HKVOABps3NtcDIgEzJ1SaIhHTod0AA r0RX/cS1gCPqcg== -----END CERTIFICATE-----Generated at Thu Dec 4 11:21:54 2025 by rpki-client