This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/f841d9-5505-4e3d-a2ff-f7c1899cd7fa/1/y0W24SUWoP1eur56eBEILzp0Y5c.mft File: y0W24SUWoP1eur56eBEILzp0Y5c.mft (raw, json) Hash identifier: AartEWgVPduFQ/dEuCtWWVVLCTLAo7I1hAChy0FgQUk= Subject key identifier: BF:75:64:87:45:9B:B1:2E:CA:DC:1F:CD:59:78:56:A4:DF:FA:E5:F7 Authority key identifier: CB:45:B6:E1:25:16:A0:FD:5E:BA:BE:7A:78:11:08:2F:3A:74:63:97 Certificate issuer: /CN=cb45b6e12516a0fd5ebabe7a7811082f3a746397 Certificate serial: 019B36E9D388F8E3CBC42908A2765636BE01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y0W24SUWoP1eur56eBEILzp0Y5c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/f841d9-5505-4e3d-a2ff-f7c1899cd7fa/1/y0W24SUWoP1eur56eBEILzp0Y5c.mft Manifest number: 0CAE Signing time: Fri 19 Dec 2025 14:00:52 +0000 Manifest this update: Fri 19 Dec 2025 14:00:52 +0000 Manifest next update: Sat 20 Dec 2025 14:00:52 +0000 Files and hashes: 1: d43Bbm-jTlxIEQu_UfTFZQFzBcE.roa (hash: UkexUnRIJprjhWor4Jilgkay/bVJfFqJkF7dBPx8pH8=) 2: y0W24SUWoP1eur56eBEILzp0Y5c.crl (hash: vllTfJ6xgpYs8okM8nLdvkejLr3sSRyFkfA/4PgQgpA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/f841d9-5505-4e3d-a2ff-f7c1899cd7fa/1/y0W24SUWoP1eur56eBEILzp0Y5c.crl rsync://rpki.ripe.net/repository/DEFAULT/f7/f841d9-5505-4e3d-a2ff-f7c1899cd7fa/1/y0W24SUWoP1eur56eBEILzp0Y5c.mft rsync://rpki.ripe.net/repository/DEFAULT/y0W24SUWoP1eur56eBEILzp0Y5c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 14:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:e9:d3:88:f8:e3:cb:c4:29:08:a2:76:56:36:be:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb45b6e12516a0fd5ebabe7a7811082f3a746397 Validity Not Before: Dec 19 14:00:52 2025 GMT Not After : Dec 20 14:00:52 2025 GMT Subject: CN=bf756487459bb12ecadc1fcd597856a4dffae5f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:f6:8b:ad:b0:84:b0:7d:58:11:fc:53:85:2a: a3:80:3f:03:46:02:45:0b:84:9f:d3:a1:d4:b5:9b: 4f:98:71:9b:e6:a4:0f:44:4e:0b:89:d7:55:a5:d8: 12:2d:f7:0c:d3:99:58:94:6a:68:80:50:de:01:6c: c3:ab:85:f3:e2:ae:96:09:cf:91:34:84:ef:bc:eb: b2:c0:78:d7:d4:01:0e:a2:49:ce:27:4d:83:23:1b: 65:32:c3:85:f3:55:e6:ae:d3:c6:01:f1:68:0a:5d: 48:07:25:54:ec:9b:e5:9d:92:cc:0c:e1:61:ce:a2: 9d:a6:ac:7a:49:f1:c9:10:9a:69:e9:35:03:c7:84: 84:6e:67:56:99:46:3c:a3:53:b0:48:46:90:16:08: 14:79:32:6b:ca:bc:8c:bb:d7:13:d2:65:c5:d3:0a: b6:e4:2f:e7:76:8e:82:19:34:8e:b1:c5:3a:dc:26: 8f:a4:e7:f7:71:43:dd:e9:77:46:59:47:0e:b5:03: 2a:bc:22:23:de:45:cb:6b:f9:03:17:03:72:25:e4: d3:c4:0e:b5:18:17:6f:06:5b:d5:8f:88:55:82:63: 39:49:9e:cb:63:e0:71:09:fe:d1:79:5f:43:b0:e0: 03:5c:5e:3c:b9:6a:96:96:34:ff:69:78:23:e8:36: d6:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:75:64:87:45:9B:B1:2E:CA:DC:1F:CD:59:78:56:A4:DF:FA:E5:F7 X509v3 Authority Key Identifier: keyid:CB:45:B6:E1:25:16:A0:FD:5E:BA:BE:7A:78:11:08:2F:3A:74:63:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y0W24SUWoP1eur56eBEILzp0Y5c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f841d9-5505-4e3d-a2ff-f7c1899cd7fa/1/y0W24SUWoP1eur56eBEILzp0Y5c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f841d9-5505-4e3d-a2ff-f7c1899cd7fa/1/y0W24SUWoP1eur56eBEILzp0Y5c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:7a:b3:5d:4e:93:e3:f5:d6:5d:ee:c5:50:1a:de:63:82:26: 02:3b:92:e7:52:e9:d4:11:64:e6:50:ce:de:e2:1d:fb:c8:5c: 90:bf:4e:a3:b6:85:4f:df:3f:6e:8c:4d:81:09:ab:74:a5:c8: 5e:11:de:bf:dc:ce:e1:c2:71:c8:41:3a:e5:37:96:cd:8a:0f: f0:e8:c2:ac:1a:ae:f2:6c:f2:20:5a:25:20:be:a2:fe:0d:fe: f6:d6:49:17:ea:ca:22:f8:64:f3:c6:ed:2b:c7:31:70:88:9b: 14:3a:03:48:bd:bd:dd:4e:98:8d:c0:64:dd:7c:f5:29:92:c2: 3a:40:75:9b:ab:0a:1f:ed:cb:e2:b0:cf:1a:ac:81:ea:84:d7: 24:a0:9e:0a:84:c7:c1:ec:eb:cb:21:ec:4b:5c:ac:c7:ce:bd: b0:7a:65:1b:c2:f2:39:4d:94:ca:97:df:df:7b:d3:18:27:6e: b4:28:63:da:6d:80:74:60:9a:f6:15:79:57:03:1e:35:6c:34: f2:e6:94:ee:e4:28:93:1c:29:c9:14:af:b0:bb:b4:f3:80:da: 31:23:4c:24:53:2b:46:12:48:e9:9a:71:e2:54:c5:6b:e0:69: 8b:76:5c:0d:30:bd:96:ea:e9:46:3d:9d:3d:44:e3:05:29:0b: 89:ac:3b:30 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs26dOI+OPLxCkIonZWNr4BMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiNDViNmUxMjUxNmEwZmQ1ZWJhYmU3YTc4MTEwODJmM2E3 NDYzOTcwHhcNMjUxMjE5MTQwMDUyWhcNMjUxMjIwMTQwMDUyWjAzMTEwLwYDVQQD EyhiZjc1NjQ4NzQ1OWJiMTJlY2FkYzFmY2Q1OTc4NTZhNGRmZmFlNWY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1PaLrbCEsH1YEfxThSqjgD8DRgJF C4Sf06HUtZtPmHGb5qQPRE4LiddVpdgSLfcM05lYlGpogFDeAWzDq4Xz4q6WCc+R NITvvOuywHjX1AEOoknOJ02DIxtlMsOF81XmrtPGAfFoCl1IByVU7JvlnZLMDOFh zqKdpqx6SfHJEJpp6TUDx4SEbmdWmUY8o1OwSEaQFggUeTJryryMu9cT0mXF0wq2 5C/ndo6CGTSOscU63CaPpOf3cUPd6XdGWUcOtQMqvCIj3kXLa/kDFwNyJeTTxA61 GBdvBlvVj4hVgmM5SZ7LY+BxCf7ReV9DsOADXF48uWqWljT/aXgj6DbW2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL91ZIdFm7EuytwfzVl4VqTf+uX3MB8GA1UdIwQY MBaAFMtFtuElFqD9Xrq+engRCC86dGOXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveTBXMjRTVVdvUDFldXI1NmVCRUlMenAwWTVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy9mODQxZDktNTUwNS00ZTNkLWEyZmYt ZjdjMTg5OWNkN2ZhLzEveTBXMjRTVVdvUDFldXI1NmVCRUlMenAwWTVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNy9mODQxZDktNTUwNS00ZTNkLWEyZmYtZjdjMTg5OWNkN2Zh LzEveTBXMjRTVVdvUDFldXI1NmVCRUlMenAwWTVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABnqzXU6T 4/XWXe7FUBreY4ImAjuS51Lp1BFk5lDO3uId+8hckL9Oo7aFT98/boxNgQmrdKXI XhHev9zO4cJxyEE65TeWzYoP8OjCrBqu8mzyIFolIL6i/g3+9tZJF+rKIvhk88bt K8cxcIibFDoDSL293U6YjcBk3Xz1KZLCOkB1m6sKH+3L4rDPGqyB6oTXJKCeCoTH wezryyHsS1ysx869sHplG8LyOU2Uypff33vTGCdutChj2m2AdGCa9hV5VwMeNWw0 8uaU7uQokxwpyRSvsLu084DaMSNMJFMrRhJI6Zpx4lTFa+Bpi3ZcDTC9lurpRj2d PUTjBSkLiaw7MA== -----END CERTIFICATE-----Generated at Fri Dec 19 20:29:22 2025 by rpki-client