This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/9e39da-1925-4464-9576-bbf719c3ca74/1/y0Jf3nR6p_6o57M1tGyI0jiFCr4.mft File: y0Jf3nR6p_6o57M1tGyI0jiFCr4.mft (raw, json) Hash identifier: REtTtPbssNuN1n/HnOHzHBrzz53ew2Qz3vaSbJUMl20= Subject key identifier: 39:EC:F0:FB:D1:B5:65:6E:A8:5D:C8:87:26:BB:0E:B4:92:69:16:1A Authority key identifier: CB:42:5F:DE:74:7A:A7:FE:A8:E7:B3:35:B4:6C:88:D2:38:85:0A:BE Certificate issuer: /CN=cb425fde747aa7fea8e7b335b46c88d238850abe Certificate serial: 019B3DC7CCCDF27CB7C533FE2B90950E0ED0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y0Jf3nR6p_6o57M1tGyI0jiFCr4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/9e39da-1925-4464-9576-bbf719c3ca74/1/y0Jf3nR6p_6o57M1tGyI0jiFCr4.mft Manifest number: 141D Signing time: Sat 20 Dec 2025 22:01:02 +0000 Manifest this update: Sat 20 Dec 2025 22:01:02 +0000 Manifest next update: Sun 21 Dec 2025 22:01:02 +0000 Files and hashes: 1: 5DBv9RBy0-ALdhnOZ9mL1Puy4-Y.roa (hash: aEYaKBsIdOUxFwnWgD/VnfwycMEFPEslMaW+CK0NuzE=) 2: y0Jf3nR6p_6o57M1tGyI0jiFCr4.crl (hash: +15M/nIVmJpmOXb5r/N293qiR12LTKNMt1PWq7zFU8g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/9e39da-1925-4464-9576-bbf719c3ca74/1/y0Jf3nR6p_6o57M1tGyI0jiFCr4.crl rsync://rpki.ripe.net/repository/DEFAULT/15/9e39da-1925-4464-9576-bbf719c3ca74/1/y0Jf3nR6p_6o57M1tGyI0jiFCr4.mft rsync://rpki.ripe.net/repository/DEFAULT/y0Jf3nR6p_6o57M1tGyI0jiFCr4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 22:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:c7:cc:cd:f2:7c:b7:c5:33:fe:2b:90:95:0e:0e:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb425fde747aa7fea8e7b335b46c88d238850abe Validity Not Before: Dec 20 22:01:02 2025 GMT Not After : Dec 21 22:01:02 2025 GMT Subject: CN=39ecf0fbd1b5656ea85dc88726bb0eb49269161a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:e5:29:f8:c3:4b:05:b4:8b:fc:84:13:38:c1: 87:de:2d:f4:8b:f3:e6:d5:21:6a:bc:9e:c4:6b:8f: 23:b8:9c:8b:ec:5f:d5:27:11:80:3a:d5:17:cd:1c: 5b:ec:06:45:69:ba:d2:d1:9d:9c:c9:c5:fd:3e:55: e4:57:17:61:ea:87:d2:06:55:d3:ea:61:3e:45:85: ab:99:ee:3b:ef:38:79:13:de:13:c3:65:8a:3d:63: 17:83:b4:b3:33:60:dc:f9:70:4f:57:d1:52:93:51: 18:8a:27:d7:19:67:bf:8c:92:06:6a:98:38:43:19: f5:a3:b0:67:fe:16:8d:5e:d8:ae:45:fe:de:df:57: b7:84:f8:95:af:98:c1:8f:c2:9d:6e:3d:cd:aa:49: 6d:2c:7c:db:10:19:93:21:6d:c4:fb:ba:58:8b:75: 3f:b3:56:64:f5:55:02:fc:80:7b:f4:60:b7:33:f8: e9:2b:b3:ce:43:ce:86:50:19:07:40:f6:c9:6d:1c: 85:46:e2:b1:a4:bf:15:f6:96:c7:d5:44:a3:a3:8f: 77:b1:22:12:ee:34:bf:6e:f3:aa:92:f8:c8:3e:52: 29:86:d3:d4:b3:c8:5f:43:04:9b:cc:97:0f:7b:f7: 28:86:e8:0d:f9:ed:ae:27:65:9f:45:95:1c:4f:47: ac:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:EC:F0:FB:D1:B5:65:6E:A8:5D:C8:87:26:BB:0E:B4:92:69:16:1A X509v3 Authority Key Identifier: keyid:CB:42:5F:DE:74:7A:A7:FE:A8:E7:B3:35:B4:6C:88:D2:38:85:0A:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y0Jf3nR6p_6o57M1tGyI0jiFCr4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/9e39da-1925-4464-9576-bbf719c3ca74/1/y0Jf3nR6p_6o57M1tGyI0jiFCr4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/9e39da-1925-4464-9576-bbf719c3ca74/1/y0Jf3nR6p_6o57M1tGyI0jiFCr4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:e2:a8:0c:3e:93:64:9a:6a:e4:47:b7:ef:6d:ba:9d:37:be: 39:44:6a:fd:bb:01:a5:b0:5d:ed:3b:26:c4:a8:d2:e5:8d:ce: ef:ee:bf:00:72:05:93:ce:f6:a4:a0:42:58:08:31:fd:82:9c: af:f6:9e:73:d9:c6:bb:b8:82:a4:39:a9:c1:53:30:5a:5c:c3: 6d:60:7a:43:db:7d:1b:aa:be:1e:f6:c9:11:27:e8:1a:fe:54: 1d:e9:b7:d8:bb:a3:f2:80:46:82:49:97:df:c3:a7:ef:da:44: 63:c5:68:54:22:ba:81:95:77:b1:5b:53:23:54:d1:8e:29:51: 77:f3:c9:ee:75:91:1b:6a:ef:5a:9a:90:9e:f8:33:58:7d:3c: 45:d7:13:06:3c:7b:8e:55:d5:a7:19:ae:d8:43:8c:43:b5:db: 09:ca:e0:12:fb:06:62:98:08:58:42:31:96:5c:d7:93:33:c8: 49:db:38:35:a3:a7:18:6b:b2:35:80:d7:28:4c:15:16:c5:ce: d2:c9:1d:4e:67:cc:ef:d8:d2:ae:12:18:26:11:3a:f4:a0:ae: a8:2a:cd:90:b1:52:fe:56:61:0c:df:54:2c:6b:5f:d0:7f:a5: b0:41:26:de:ea:10:a8:18:43:f5:2d:b7:69:d7:2a:88:7f:d7: 4a:a8:1a:9a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9x8zN8ny3xTP+K5CVDg7QMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiNDI1ZmRlNzQ3YWE3ZmVhOGU3YjMzNWI0NmM4OGQyMzg4 NTBhYmUwHhcNMjUxMjIwMjIwMTAyWhcNMjUxMjIxMjIwMTAyWjAzMTEwLwYDVQQD EygzOWVjZjBmYmQxYjU2NTZlYTg1ZGM4ODcyNmJiMGViNDkyNjkxNjFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsOUp+MNLBbSL/IQTOMGH3i30i/Pm 1SFqvJ7Ea48juJyL7F/VJxGAOtUXzRxb7AZFabrS0Z2cycX9PlXkVxdh6ofSBlXT 6mE+RYWrme477zh5E94Tw2WKPWMXg7SzM2Dc+XBPV9FSk1EYiifXGWe/jJIGapg4 Qxn1o7Bn/haNXtiuRf7e31e3hPiVr5jBj8Kdbj3NqkltLHzbEBmTIW3E+7pYi3U/ s1Zk9VUC/IB79GC3M/jpK7POQ86GUBkHQPbJbRyFRuKxpL8V9pbH1USjo493sSIS 7jS/bvOqkvjIPlIphtPUs8hfQwSbzJcPe/cohugN+e2uJ2WfRZUcT0es1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDns8PvRtWVuqF3Ihya7DrSSaRYaMB8GA1UdIwQY MBaAFMtCX950eqf+qOezNbRsiNI4hQq+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveTBKZjNuUjZwXzZvNTdNMXRHeUkwamlGQ3I0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS85ZTM5ZGEtMTkyNS00NDY0LTk1NzYt YmJmNzE5YzNjYTc0LzEveTBKZjNuUjZwXzZvNTdNMXRHeUkwamlGQ3I0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS85ZTM5ZGEtMTkyNS00NDY0LTk1NzYtYmJmNzE5YzNjYTc0 LzEveTBKZjNuUjZwXzZvNTdNMXRHeUkwamlGQ3I0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVuKoDD6T ZJpq5Ee37226nTe+OURq/bsBpbBd7TsmxKjS5Y3O7+6/AHIFk872pKBCWAgx/YKc r/aec9nGu7iCpDmpwVMwWlzDbWB6Q9t9G6q+HvbJESfoGv5UHem32Luj8oBGgkmX 38On79pEY8VoVCK6gZV3sVtTI1TRjilRd/PJ7nWRG2rvWpqQnvgzWH08RdcTBjx7 jlXVpxmu2EOMQ7XbCcrgEvsGYpgIWEIxllzXkzPISds4NaOnGGuyNYDXKEwVFsXO 0skdTmfM79jSrhIYJhE69KCuqCrNkLFS/lZhDN9ULGtf0H+lsEEm3uoQqBhD9S23 adcqiH/XSqgamg== -----END CERTIFICATE-----Generated at Sun Dec 21 07:23:55 2025 by rpki-client