This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/df0e81-bdcb-4a24-8435-c1f12e58fedd/1/y4if7tE13ANJLYs-goxzCVh9FBE.mft File: y4if7tE13ANJLYs-goxzCVh9FBE.mft (raw, json) Hash identifier: iPgmznRzibMednTzE6KR4ziR0M6mD8+Gcdxi8rCVg7U= Subject key identifier: 55:02:5F:F4:A1:4C:3D:CC:D4:B3:69:06:AB:54:0C:D8:A5:3A:E8:FE Authority key identifier: CB:88:9F:EE:D1:35:DC:03:49:2D:8B:3E:82:8C:73:09:58:7D:14:11 Certificate issuer: /CN=cb889feed135dc03492d8b3e828c7309587d1411 Certificate serial: 019B39EB01FF410ED54AE28539344519035F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y4if7tE13ANJLYs-goxzCVh9FBE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/df0e81-bdcb-4a24-8435-c1f12e58fedd/1/y4if7tE13ANJLYs-goxzCVh9FBE.mft Manifest number: 1224 Signing time: Sat 20 Dec 2025 04:01:01 +0000 Manifest this update: Sat 20 Dec 2025 04:01:01 +0000 Manifest next update: Sun 21 Dec 2025 04:01:01 +0000 Files and hashes: 1: rfAqhHSyB0bVC5i8dVtfZe-treM.roa (hash: tI9pAzBOPcqsKJP119w8Wmg6uhaucxG8mazRidS4T3g=) 2: y4if7tE13ANJLYs-goxzCVh9FBE.crl (hash: zByopfEYzn6xN3lM/dmBkUU0aTHXKOfU1OrAKDrbTfI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/df0e81-bdcb-4a24-8435-c1f12e58fedd/1/y4if7tE13ANJLYs-goxzCVh9FBE.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/df0e81-bdcb-4a24-8435-c1f12e58fedd/1/y4if7tE13ANJLYs-goxzCVh9FBE.mft rsync://rpki.ripe.net/repository/DEFAULT/y4if7tE13ANJLYs-goxzCVh9FBE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:eb:01:ff:41:0e:d5:4a:e2:85:39:34:45:19:03:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb889feed135dc03492d8b3e828c7309587d1411 Validity Not Before: Dec 20 04:01:01 2025 GMT Not After : Dec 21 04:01:01 2025 GMT Subject: CN=55025ff4a14c3dccd4b36906ab540cd8a53ae8fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:d5:d3:1f:bc:68:5b:29:c7:56:a4:b3:1d:33: b0:d7:e8:69:8d:f7:46:e1:7a:96:0f:9e:f7:62:83: ac:83:72:d9:22:bb:81:ae:ac:7d:96:82:93:75:41: bc:d1:b9:77:6e:2b:9e:39:78:4b:fb:e3:c7:6e:31: 76:7d:10:a1:ce:e0:41:2f:fa:72:8c:c8:5f:64:c8: 1d:4e:91:2f:3d:8a:00:1f:e0:6b:8b:97:55:43:59: 24:e6:d9:7a:18:a8:ca:c8:0b:7b:e1:ef:28:34:49: 91:24:8f:32:6f:5e:e9:48:1b:40:b0:12:4d:de:97: 28:9f:1f:90:51:0e:1f:f2:e8:ff:f5:e4:91:35:7d: b9:cf:22:a6:9a:87:1f:f4:31:1f:78:6e:78:03:f8: 4e:60:47:ba:a5:9c:51:be:0c:aa:17:7b:6b:65:d2: 0d:3d:f1:c3:8b:21:ab:4b:3c:7c:6b:f1:90:63:77: 4f:8b:3c:52:5a:96:b2:4c:cb:7c:13:b2:1e:3f:56: d7:d8:a3:44:21:64:f6:4c:69:c9:07:13:46:4d:9d: ec:f3:26:02:7f:7c:50:b5:e0:2c:00:17:ab:4d:b2: 63:d9:3c:59:84:20:0c:ac:44:a3:38:cb:61:7e:e1: e1:a3:dc:ac:9f:9f:72:20:6a:78:a7:51:41:2d:9d: 30:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:02:5F:F4:A1:4C:3D:CC:D4:B3:69:06:AB:54:0C:D8:A5:3A:E8:FE X509v3 Authority Key Identifier: keyid:CB:88:9F:EE:D1:35:DC:03:49:2D:8B:3E:82:8C:73:09:58:7D:14:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y4if7tE13ANJLYs-goxzCVh9FBE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/df0e81-bdcb-4a24-8435-c1f12e58fedd/1/y4if7tE13ANJLYs-goxzCVh9FBE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/df0e81-bdcb-4a24-8435-c1f12e58fedd/1/y4if7tE13ANJLYs-goxzCVh9FBE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:a1:6b:19:65:af:4d:09:b2:65:11:e5:dd:45:75:44:00:03: d9:82:13:65:e1:4e:a4:c4:ba:1c:97:d5:1a:6a:c0:ba:de:96: c7:d6:17:0d:43:d6:b3:1d:22:6d:5f:c6:1f:16:47:a9:16:94: 61:b2:81:59:05:e8:0b:00:31:4e:44:a7:25:2e:17:7c:bf:2b: 17:84:2c:47:c9:1a:a0:75:e3:bf:8d:ba:66:aa:86:f8:ea:ab: f8:d9:67:a0:97:e2:40:ad:a4:fa:ea:13:ed:7b:ec:87:ea:01: eb:84:9b:b5:96:fe:86:54:a9:eb:bb:19:ca:9b:08:ce:0d:9b: 48:cc:e5:b3:61:c3:4d:0d:cf:53:48:aa:68:ee:f8:e7:68:84: 9f:e8:ce:a4:83:23:e4:63:75:a9:5a:01:65:f3:c8:d6:35:eb: be:7c:bf:8d:41:a8:09:81:c9:a0:1f:30:51:5a:11:68:b9:75: de:bd:ab:ca:d6:94:7f:cb:89:46:ec:b4:dd:8e:04:c3:80:1d: e9:b2:44:6f:f0:8d:b8:0a:bd:48:29:28:04:5d:31:d5:1b:4a: d3:1e:56:98:db:6d:0c:8b:43:84:34:26:7a:b0:91:8d:07:94: cb:03:e1:e5:a1:67:b5:9f:d7:31:b5:72:75:71:aa:13:69:d8: 07:a6:78:60 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs56wH/QQ7VSuKFOTRFGQNfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiODg5ZmVlZDEzNWRjMDM0OTJkOGIzZTgyOGM3MzA5NTg3 ZDE0MTEwHhcNMjUxMjIwMDQwMTAxWhcNMjUxMjIxMDQwMTAxWjAzMTEwLwYDVQQD Eyg1NTAyNWZmNGExNGMzZGNjZDRiMzY5MDZhYjU0MGNkOGE1M2FlOGZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkdXTH7xoWynHVqSzHTOw1+hpjfdG 4XqWD573YoOsg3LZIruBrqx9loKTdUG80bl3biueOXhL++PHbjF2fRChzuBBL/py jMhfZMgdTpEvPYoAH+Bri5dVQ1kk5tl6GKjKyAt74e8oNEmRJI8yb17pSBtAsBJN 3pconx+QUQ4f8uj/9eSRNX25zyKmmocf9DEfeG54A/hOYEe6pZxRvgyqF3trZdIN PfHDiyGrSzx8a/GQY3dPizxSWpayTMt8E7IeP1bX2KNEIWT2TGnJBxNGTZ3s8yYC f3xQteAsABerTbJj2TxZhCAMrESjOMthfuHho9ysn59yIGp4p1FBLZ0wVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFUCX/ShTD3M1LNpBqtUDNilOuj+MB8GA1UdIwQY MBaAFMuIn+7RNdwDSS2LPoKMcwlYfRQRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveTRpZjd0RTEzQU5KTFlzLWdveHpDVmg5RkJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9kZjBlODEtYmRjYi00YTI0LTg0MzUt YzFmMTJlNThmZWRkLzEveTRpZjd0RTEzQU5KTFlzLWdveHpDVmg5RkJFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS9kZjBlODEtYmRjYi00YTI0LTg0MzUtYzFmMTJlNThmZWRk LzEveTRpZjd0RTEzQU5KTFlzLWdveHpDVmg5RkJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJaFrGWWv TQmyZRHl3UV1RAAD2YITZeFOpMS6HJfVGmrAut6Wx9YXDUPWsx0ibV/GHxZHqRaU YbKBWQXoCwAxTkSnJS4XfL8rF4QsR8kaoHXjv426ZqqG+Oqr+NlnoJfiQK2k+uoT 7Xvsh+oB64SbtZb+hlSp67sZypsIzg2bSMzls2HDTQ3PU0iqaO7452iEn+jOpIMj 5GN1qVoBZfPI1jXrvny/jUGoCYHJoB8wUVoRaLl13r2rytaUf8uJRuy03Y4Ew4Ad 6bJEb/CNuAq9SCkoBF0x1RtK0x5WmNttDItDhDQmerCRjQeUywPh5aFntZ/XMbVy dXGqE2nYB6Z4YA== -----END CERTIFICATE-----Generated at Sat Dec 20 10:39:19 2025 by rpki-client