This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/9e39da-1925-4464-9576-bbf719c3ca74/1/y0Jf3nR6p_6o57M1tGyI0jiFCr4.mft File: y0Jf3nR6p_6o57M1tGyI0jiFCr4.mft (raw, json) Hash identifier: ANgHMpa4KYR32k1+bSHFqoAFFkUmOHir+/y5ZMhvqU4= Subject key identifier: BE:2D:44:0F:93:E0:98:01:73:FF:1D:3F:0E:89:DC:E6:63:39:7B:2F Authority key identifier: CB:42:5F:DE:74:7A:A7:FE:A8:E7:B3:35:B4:6C:88:D2:38:85:0A:BE Certificate issuer: /CN=cb425fde747aa7fea8e7b335b46c88d238850abe Certificate serial: 019B71EBFA84CBF62C5E7AFE973FA6C81140 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y0Jf3nR6p_6o57M1tGyI0jiFCr4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/9e39da-1925-4464-9576-bbf719c3ca74/1/y0Jf3nR6p_6o57M1tGyI0jiFCr4.mft Manifest number: 1438 Signing time: Wed 31 Dec 2025 01:00:48 +0000 Manifest this update: Wed 31 Dec 2025 01:00:48 +0000 Manifest next update: Thu 01 Jan 2026 01:00:48 +0000 Files and hashes: 1: 5DBv9RBy0-ALdhnOZ9mL1Puy4-Y.roa (hash: aEYaKBsIdOUxFwnWgD/VnfwycMEFPEslMaW+CK0NuzE=) 2: y0Jf3nR6p_6o57M1tGyI0jiFCr4.crl (hash: h/3nXB0NbGPSgHIyAQYDHjNJqBHSdrNs9V2W3az/C1I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/9e39da-1925-4464-9576-bbf719c3ca74/1/y0Jf3nR6p_6o57M1tGyI0jiFCr4.crl rsync://rpki.ripe.net/repository/DEFAULT/15/9e39da-1925-4464-9576-bbf719c3ca74/1/y0Jf3nR6p_6o57M1tGyI0jiFCr4.mft rsync://rpki.ripe.net/repository/DEFAULT/y0Jf3nR6p_6o57M1tGyI0jiFCr4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 01 Jan 2026 01:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:71:eb:fa:84:cb:f6:2c:5e:7a:fe:97:3f:a6:c8:11:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb425fde747aa7fea8e7b335b46c88d238850abe Validity Not Before: Dec 31 01:00:48 2025 GMT Not After : Jan 1 01:00:48 2026 GMT Subject: CN=be2d440f93e0980173ff1d3f0e89dce663397b2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:cd:5e:10:3b:f4:6f:91:b0:c4:5e:69:a4:47: a3:9c:48:da:5f:61:68:73:8a:65:4b:0c:dd:36:65: 4c:09:61:6f:b4:dc:fc:ed:c5:00:93:76:06:e3:6b: 54:36:9b:9f:d6:0d:fc:d1:d4:ae:3f:0f:3a:0e:1f: 0b:3f:2a:87:8e:6b:3b:2b:5d:be:be:1b:16:85:7b: 8d:a2:e0:fd:1d:60:50:37:a4:3e:e7:b9:7e:00:6c: a5:f6:ab:58:97:4f:87:45:1b:eb:97:39:34:44:a5: 7d:cc:66:c3:84:c3:80:2d:57:c7:5a:af:78:20:fb: 5a:8c:48:b0:c4:0e:3f:d7:16:34:97:6e:48:d2:60: f4:4b:3c:bf:30:3f:ab:b7:8d:60:3e:9e:de:e2:43: 63:fa:6e:b5:5e:d0:49:89:1d:93:f7:68:a7:8d:b3: 6b:5b:0b:21:f5:c8:3b:0e:f5:34:51:a7:41:c9:f4: d9:9f:f1:31:df:b7:3c:34:3b:b5:41:2c:2a:50:31: 8d:2b:77:55:5a:40:d6:80:e7:92:d6:e3:e0:2a:35: 76:de:62:80:53:75:82:af:a8:e9:93:36:21:71:0d: cf:f5:20:cd:e5:65:93:c2:11:52:d8:5c:4e:4a:53: f7:97:7c:01:91:e4:f6:3c:2b:7e:ca:68:37:28:f1: 31:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:2D:44:0F:93:E0:98:01:73:FF:1D:3F:0E:89:DC:E6:63:39:7B:2F X509v3 Authority Key Identifier: keyid:CB:42:5F:DE:74:7A:A7:FE:A8:E7:B3:35:B4:6C:88:D2:38:85:0A:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y0Jf3nR6p_6o57M1tGyI0jiFCr4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/9e39da-1925-4464-9576-bbf719c3ca74/1/y0Jf3nR6p_6o57M1tGyI0jiFCr4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/9e39da-1925-4464-9576-bbf719c3ca74/1/y0Jf3nR6p_6o57M1tGyI0jiFCr4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:79:95:c5:ca:df:c8:d3:f7:2f:ad:48:2d:0f:a3:83:e2:80: b3:9c:f0:d1:64:aa:fd:2b:04:cc:69:28:99:27:a2:1a:9d:04: 68:0a:b2:b9:de:be:88:df:f2:fa:75:27:8d:f7:0b:68:75:47: 34:a9:68:9b:14:c7:b9:65:b7:73:87:18:d9:ce:03:b0:ac:7b: 39:0b:ea:65:b7:8f:96:a0:af:9a:5a:be:01:78:e2:f8:50:20: 35:14:60:0a:14:05:15:29:c3:64:c7:64:b2:71:81:0f:12:0e: ac:d8:c2:f0:c8:37:4d:1f:3c:2b:de:8c:c5:2c:66:2c:b6:67: b9:29:51:4f:d8:5f:6e:36:72:96:81:d8:00:c0:64:95:8b:49: 83:07:a9:57:d8:65:e6:55:13:3c:e9:5c:86:20:8a:9d:5d:b4: 4d:18:28:9f:bb:a4:82:65:28:7a:51:0e:3e:0b:60:36:5a:2d: f8:21:4a:33:1f:df:59:bb:54:f5:a9:ac:73:4d:dc:bd:92:f6: 65:8f:4c:3c:a8:23:33:b2:f6:3c:af:ef:cf:c8:c6:f7:a7:75: 91:44:b4:c5:35:55:09:ed:fe:e1:76:8c:88:93:da:df:f2:61: 17:f3:8b:4b:ef:ae:cb:f2:d6:aa:8f:fb:18:01:e2:48:0f:1f: f6:e6:bc:6c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtx6/qEy/YsXnr+lz+myBFAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiNDI1ZmRlNzQ3YWE3ZmVhOGU3YjMzNWI0NmM4OGQyMzg4 NTBhYmUwHhcNMjUxMjMxMDEwMDQ4WhcNMjYwMTAxMDEwMDQ4WjAzMTEwLwYDVQQD EyhiZTJkNDQwZjkzZTA5ODAxNzNmZjFkM2YwZTg5ZGNlNjYzMzk3YjJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAws1eEDv0b5GwxF5ppEejnEjaX2Fo c4plSwzdNmVMCWFvtNz87cUAk3YG42tUNpuf1g380dSuPw86Dh8LPyqHjms7K12+ vhsWhXuNouD9HWBQN6Q+57l+AGyl9qtYl0+HRRvrlzk0RKV9zGbDhMOALVfHWq94 IPtajEiwxA4/1xY0l25I0mD0Szy/MD+rt41gPp7e4kNj+m61XtBJiR2T92injbNr Wwsh9cg7DvU0UadByfTZn/Ex37c8NDu1QSwqUDGNK3dVWkDWgOeS1uPgKjV23mKA U3WCr6jpkzYhcQ3P9SDN5WWTwhFS2FxOSlP3l3wBkeT2PCt+ymg3KPEx9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL4tRA+T4JgBc/8dPw6J3OZjOXsvMB8GA1UdIwQY MBaAFMtCX950eqf+qOezNbRsiNI4hQq+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveTBKZjNuUjZwXzZvNTdNMXRHeUkwamlGQ3I0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS85ZTM5ZGEtMTkyNS00NDY0LTk1NzYt YmJmNzE5YzNjYTc0LzEveTBKZjNuUjZwXzZvNTdNMXRHeUkwamlGQ3I0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS85ZTM5ZGEtMTkyNS00NDY0LTk1NzYtYmJmNzE5YzNjYTc0 LzEveTBKZjNuUjZwXzZvNTdNMXRHeUkwamlGQ3I0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAanmVxcrf yNP3L61ILQ+jg+KAs5zw0WSq/SsEzGkomSeiGp0EaAqyud6+iN/y+nUnjfcLaHVH NKlomxTHuWW3c4cY2c4DsKx7OQvqZbePlqCvmlq+AXji+FAgNRRgChQFFSnDZMdk snGBDxIOrNjC8Mg3TR88K96MxSxmLLZnuSlRT9hfbjZyloHYAMBklYtJgwepV9hl 5lUTPOlchiCKnV20TRgon7ukgmUoelEOPgtgNlot+CFKMx/fWbtU9amsc03cvZL2 ZY9MPKgjM7L2PK/vz8jG96d1kUS0xTVVCe3+4XaMiJPa3/JhF/OLS++uy/LWqo/7 GAHiSA8f9ua8bA== -----END CERTIFICATE-----Generated at Wed Dec 31 10:26:48 2025 by rpki-client