This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/5da1e6-246f-4493-992e-22c79aea127c/1/y9wl6joKcp7Y5umnPaiW2E-VQ5w.mft File: y9wl6joKcp7Y5umnPaiW2E-VQ5w.mft (raw, json) Hash identifier: ik2z4Qv7OvPRzZkqrf/Ne24NbpohJU2jMaPMpgPZFhE= Subject key identifier: 5E:C2:61:6E:A9:B6:3B:75:3C:DD:DE:E2:53:31:52:A2:FF:71:0A:10 Authority key identifier: CB:DC:25:EA:3A:0A:72:9E:D8:E6:E9:A7:3D:A8:96:D8:4F:95:43:9C Certificate issuer: /CN=cbdc25ea3a0a729ed8e6e9a73da896d84f95439c Certificate serial: 019B1049FC1397EE8D7DBFD19247FE4163E9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9wl6joKcp7Y5umnPaiW2E-VQ5w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/5da1e6-246f-4493-992e-22c79aea127c/1/y9wl6joKcp7Y5umnPaiW2E-VQ5w.mft Manifest number: 17CA Signing time: Fri 12 Dec 2025 02:00:42 +0000 Manifest this update: Fri 12 Dec 2025 02:00:42 +0000 Manifest next update: Sat 13 Dec 2025 02:00:42 +0000 Files and hashes: 1: 46nBDvj667zfOAp042BssRV0tGo.roa (hash: ijvMinyi7MX0fq0QyRdi2Vr4DZ+zPLFltRyx4COFtiw=) 2: y9wl6joKcp7Y5umnPaiW2E-VQ5w.crl (hash: 1Pd7KRqA2wLNVDHQunUhBPlAobUmcWq61k/10DyM844=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/5da1e6-246f-4493-992e-22c79aea127c/1/y9wl6joKcp7Y5umnPaiW2E-VQ5w.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/5da1e6-246f-4493-992e-22c79aea127c/1/y9wl6joKcp7Y5umnPaiW2E-VQ5w.mft rsync://rpki.ripe.net/repository/DEFAULT/y9wl6joKcp7Y5umnPaiW2E-VQ5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 02:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:49:fc:13:97:ee:8d:7d:bf:d1:92:47:fe:41:63:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cbdc25ea3a0a729ed8e6e9a73da896d84f95439c Validity Not Before: Dec 12 02:00:42 2025 GMT Not After : Dec 13 02:00:42 2025 GMT Subject: CN=5ec2616ea9b63b753cdddee2533152a2ff710a10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:a2:91:6a:dd:e0:c5:22:d4:ff:ff:f3:be:9a: 4c:89:5d:ce:61:05:88:9f:d1:ab:ca:89:72:39:16: 56:4e:8a:ca:42:97:81:94:f2:2f:8a:fd:0f:01:ff: 67:60:bd:25:9d:39:75:22:64:f9:c9:1b:93:0f:2f: 91:f9:34:4c:e5:43:06:32:2b:b8:73:6f:09:12:c2: aa:ba:a9:45:47:c5:a5:e6:49:74:d7:fa:08:a7:09: f5:7f:d8:71:b5:b1:31:22:ea:50:e5:ad:f6:47:38: de:4e:c8:3b:29:ed:dd:a6:3d:87:71:8d:d8:d7:0e: fc:fc:31:62:aa:a3:86:21:fa:9e:3c:6f:1a:be:ec: 5f:a9:ed:63:83:21:34:25:5b:11:e5:07:6b:1d:2a: d6:8b:b1:1f:11:6d:ca:5b:83:a3:0f:92:0d:15:c4: 8d:a5:79:69:7f:0b:e8:30:ab:3e:96:b0:ed:d8:b8: fd:d2:6b:e8:f7:1c:0e:85:da:15:be:fb:81:02:7e: 1e:1d:76:aa:e3:9a:36:80:41:26:09:ba:f7:71:3b: ad:25:c8:36:16:4d:cc:f9:12:29:26:c2:04:8a:44: 0c:36:fe:fa:cf:84:8c:68:e2:0a:27:ba:d1:6d:5f: a8:7b:13:7f:8f:95:d8:0e:0e:a0:9f:39:11:d7:79: 36:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:C2:61:6E:A9:B6:3B:75:3C:DD:DE:E2:53:31:52:A2:FF:71:0A:10 X509v3 Authority Key Identifier: keyid:CB:DC:25:EA:3A:0A:72:9E:D8:E6:E9:A7:3D:A8:96:D8:4F:95:43:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9wl6joKcp7Y5umnPaiW2E-VQ5w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/5da1e6-246f-4493-992e-22c79aea127c/1/y9wl6joKcp7Y5umnPaiW2E-VQ5w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/5da1e6-246f-4493-992e-22c79aea127c/1/y9wl6joKcp7Y5umnPaiW2E-VQ5w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:4a:74:91:fc:22:e6:d4:b2:08:d4:8f:ad:32:df:2a:1b:01: 87:38:7a:13:bc:7d:c9:d3:07:9b:fa:8c:4c:33:aa:f1:d3:b3: 86:81:49:aa:ca:68:7a:00:e7:c0:e4:58:02:cc:51:09:65:40: ff:97:64:15:48:9d:b7:7d:2c:0b:29:5b:93:f2:58:6b:42:c7: d4:80:e5:9b:39:f0:17:b9:59:c8:2c:c7:0d:6f:e5:2a:ce:a1: 7e:b4:d7:b5:8b:0e:40:bd:8d:63:0b:b6:a4:b5:e6:2d:c2:5a: ad:e5:79:df:b6:4a:d4:37:f2:80:92:48:70:00:3a:15:35:2c: 9d:c4:99:10:53:66:32:01:3c:ac:9e:6b:25:30:fa:5f:f7:39: 79:9e:69:3d:46:bd:3f:3c:61:cc:1b:a9:7e:86:a2:0d:3b:12: 95:5f:85:e8:33:83:7c:ac:51:b8:10:1f:1f:d8:ef:c1:81:55: 45:ba:c4:60:a3:db:44:8b:00:5f:1b:b9:4f:b7:a5:96:86:34: 9d:10:a7:55:f3:63:97:e9:0d:eb:f2:44:43:da:80:1c:71:e8: b1:d7:0b:38:81:da:75:20:d9:81:13:e1:f5:88:e4:d4:08:fa: e3:d3:b1:ee:88:b1:f2:4a:04:a2:9b:66:46:89:0e:48:13:a2: d4:c2:cb:0d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsQSfwTl+6Nfb/Rkkf+QWPpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiZGMyNWVhM2EwYTcyOWVkOGU2ZTlhNzNkYTg5NmQ4NGY5 NTQzOWMwHhcNMjUxMjEyMDIwMDQyWhcNMjUxMjEzMDIwMDQyWjAzMTEwLwYDVQQD Eyg1ZWMyNjE2ZWE5YjYzYjc1M2NkZGRlZTI1MzMxNTJhMmZmNzEwYTEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvaKRat3gxSLU///zvppMiV3OYQWI n9GryolyORZWTorKQpeBlPIviv0PAf9nYL0lnTl1ImT5yRuTDy+R+TRM5UMGMiu4 c28JEsKquqlFR8Wl5kl01/oIpwn1f9hxtbExIupQ5a32RzjeTsg7Ke3dpj2HcY3Y 1w78/DFiqqOGIfqePG8avuxfqe1jgyE0JVsR5QdrHSrWi7EfEW3KW4OjD5INFcSN pXlpfwvoMKs+lrDt2Lj90mvo9xwOhdoVvvuBAn4eHXaq45o2gEEmCbr3cTutJcg2 Fk3M+RIpJsIEikQMNv76z4SMaOIKJ7rRbV+oexN/j5XYDg6gnzkR13k2OwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF7CYW6ptjt1PN3e4lMxUqL/cQoQMB8GA1UdIwQY MBaAFMvcJeo6CnKe2Obppz2olthPlUOcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveTl3bDZqb0tjcDdZNXVtblBhaVcyRS1WUTV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS81ZGExZTYtMjQ2Zi00NDkzLTk5MmUt MjJjNzlhZWExMjdjLzEveTl3bDZqb0tjcDdZNXVtblBhaVcyRS1WUTV3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS81ZGExZTYtMjQ2Zi00NDkzLTk5MmUtMjJjNzlhZWExMjdj LzEveTl3bDZqb0tjcDdZNXVtblBhaVcyRS1WUTV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZUp0kfwi 5tSyCNSPrTLfKhsBhzh6E7x9ydMHm/qMTDOq8dOzhoFJqspoegDnwORYAsxRCWVA /5dkFUidt30sCylbk/JYa0LH1IDlmznwF7lZyCzHDW/lKs6hfrTXtYsOQL2NYwu2 pLXmLcJareV537ZK1DfygJJIcAA6FTUsncSZEFNmMgE8rJ5rJTD6X/c5eZ5pPUa9 PzxhzBupfoaiDTsSlV+F6DODfKxRuBAfH9jvwYFVRbrEYKPbRIsAXxu5T7elloY0 nRCnVfNjl+kN6/JEQ9qAHHHosdcLOIHadSDZgRPh9Yjk1Aj649Ox7oix8koEoptm RokOSBOi1MLLDQ== -----END CERTIFICATE-----Generated at Fri Dec 12 10:35:41 2025 by rpki-client