This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/214c9a-0950-40d9-a586-e35db52567f0/1/y9f8E-GDbDlsyiF4lwSrOf2eW2Q.mft File: y9f8E-GDbDlsyiF4lwSrOf2eW2Q.mft (raw, json) Hash identifier: KWKxyw4uVczk11M9QkM269nMxizRVGw4qMXyL2CZ3tg= Subject key identifier: 3A:A7:F4:65:C0:28:D8:C3:B8:8D:CC:52:33:A6:41:75:B0:45:30:B8 Authority key identifier: CB:D7:FC:13:E1:83:6C:39:6C:CA:21:78:97:04:AB:39:FD:9E:5B:64 Certificate issuer: /CN=cbd7fc13e1836c396cca21789704ab39fd9e5b64 Certificate serial: 019B51BE5CF2AF48D0F7724E6EA29709ECB2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9f8E-GDbDlsyiF4lwSrOf2eW2Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/214c9a-0950-40d9-a586-e35db52567f0/1/y9f8E-GDbDlsyiF4lwSrOf2eW2Q.mft Manifest number: 0346 Signing time: Wed 24 Dec 2025 19:03:08 +0000 Manifest this update: Wed 24 Dec 2025 19:03:08 +0000 Manifest next update: Thu 25 Dec 2025 19:03:08 +0000 Files and hashes: 1: E1mhBRMNKUKpYCp6l6cYmmnl_S8.roa (hash: EfpfXPe85LjuFoEfBPlRSotwGgPrWv2BqUA6Yn79Kmg=) 2: y9f8E-GDbDlsyiF4lwSrOf2eW2Q.crl (hash: N4YT9jbPLVezxKPFfJpurPhXN2tY7RbKs+w3IEEUupk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/214c9a-0950-40d9-a586-e35db52567f0/1/y9f8E-GDbDlsyiF4lwSrOf2eW2Q.crl rsync://rpki.ripe.net/repository/DEFAULT/24/214c9a-0950-40d9-a586-e35db52567f0/1/y9f8E-GDbDlsyiF4lwSrOf2eW2Q.mft rsync://rpki.ripe.net/repository/DEFAULT/y9f8E-GDbDlsyiF4lwSrOf2eW2Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 14:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:51:be:5c:f2:af:48:d0:f7:72:4e:6e:a2:97:09:ec:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cbd7fc13e1836c396cca21789704ab39fd9e5b64 Validity Not Before: Dec 24 19:03:08 2025 GMT Not After : Dec 25 19:03:08 2025 GMT Subject: CN=3aa7f465c028d8c3b88dcc5233a64175b04530b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:e4:18:6d:c4:4f:ec:be:a4:61:c3:37:f4:03: a0:0b:4e:f1:11:5e:31:1f:b6:6d:17:ab:1f:b8:3b: ec:fa:f8:7f:d2:10:50:7f:d7:1f:23:6b:00:a7:b0: 9c:5d:2f:06:19:7e:c4:f5:c6:06:be:38:c4:20:04: ff:66:07:94:63:ba:2a:9b:14:55:91:e9:09:e4:a5: fd:90:d0:60:c6:0c:b0:92:3d:c8:28:7a:37:45:28: ec:a7:60:9e:b5:8e:0b:51:f2:6a:40:84:2f:16:34: 15:4b:59:e0:9d:e4:56:ba:e9:94:1a:4a:a2:34:5d: 92:b5:d4:8b:57:8a:3a:34:57:fc:15:a1:99:45:a7: 15:58:cb:47:bb:13:f4:6a:80:14:f5:1c:8f:02:fd: b0:cb:47:3f:ad:c5:2b:e9:a9:cf:75:55:60:f2:81: 3c:4c:e2:b6:06:31:04:4d:14:dc:d3:4a:34:4a:9e: 23:af:43:0d:9d:ff:b7:fc:c6:7b:be:51:e9:2f:68: a5:3d:92:ee:fa:a3:d8:49:0f:2a:c3:b8:94:55:03: c8:68:6c:f0:96:d3:6b:a8:ce:f5:25:38:8e:ee:1f: fc:5c:91:e4:2a:20:aa:ee:5c:5f:b9:43:a8:51:df: ed:5a:9f:9f:df:8e:ab:75:94:2f:cd:d2:69:bf:cc: ca:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:A7:F4:65:C0:28:D8:C3:B8:8D:CC:52:33:A6:41:75:B0:45:30:B8 X509v3 Authority Key Identifier: keyid:CB:D7:FC:13:E1:83:6C:39:6C:CA:21:78:97:04:AB:39:FD:9E:5B:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9f8E-GDbDlsyiF4lwSrOf2eW2Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/214c9a-0950-40d9-a586-e35db52567f0/1/y9f8E-GDbDlsyiF4lwSrOf2eW2Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/214c9a-0950-40d9-a586-e35db52567f0/1/y9f8E-GDbDlsyiF4lwSrOf2eW2Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e8:27:d9:29:99:85:d2:af:ce:67:8e:fe:e3:3f:70:94:52:65: e6:e6:87:8f:fe:d9:e7:b9:9d:b5:b5:c7:9a:28:75:e0:ef:0f: d0:26:7a:d4:30:15:48:aa:f7:30:7f:f3:93:02:db:c6:46:22: e7:08:24:0d:52:8d:5f:d4:3e:ac:47:75:68:2a:a6:5d:35:ef: 74:8e:75:07:9d:73:04:32:e8:e3:bb:8d:ce:4f:34:30:c1:b8: 41:0e:0c:db:be:02:6a:b9:ee:d4:02:b4:6b:ab:27:79:68:17: 5c:c5:31:d6:bf:13:08:73:ef:a2:15:54:90:61:75:71:88:d7: ba:8d:0a:95:3f:1b:85:b7:b7:d9:ca:1e:24:68:d5:40:47:ae: cb:a1:c3:4f:cf:92:76:e0:f0:56:f6:6e:c2:ac:0b:d0:c6:e0: 60:01:a6:69:61:a2:a3:b9:55:cd:12:9c:a7:ab:aa:44:1e:ad: 1d:b8:49:c7:9b:7d:32:3f:0b:ba:1d:a3:fa:12:0c:47:ff:e7: b6:3a:8e:c7:dd:09:fd:6c:ab:5d:c0:25:80:65:88:7c:2a:96: f6:35:86:aa:1c:00:13:c6:5e:17:54:42:38:01:2a:b5:14:07: 13:70:e0:43:5e:2d:6e:bd:bd:08:a8:6b:c5:7b:85:c7:f0:12: a0:9b:fc:4c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtRvlzyr0jQ93JObqKXCeyyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiZDdmYzEzZTE4MzZjMzk2Y2NhMjE3ODk3MDRhYjM5ZmQ5 ZTViNjQwHhcNMjUxMjI0MTkwMzA4WhcNMjUxMjI1MTkwMzA4WjAzMTEwLwYDVQQD EygzYWE3ZjQ2NWMwMjhkOGMzYjg4ZGNjNTIzM2E2NDE3NWIwNDUzMGI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmeQYbcRP7L6kYcM39AOgC07xEV4x H7ZtF6sfuDvs+vh/0hBQf9cfI2sAp7CcXS8GGX7E9cYGvjjEIAT/ZgeUY7oqmxRV kekJ5KX9kNBgxgywkj3IKHo3RSjsp2CetY4LUfJqQIQvFjQVS1ngneRWuumUGkqi NF2StdSLV4o6NFf8FaGZRacVWMtHuxP0aoAU9RyPAv2wy0c/rcUr6anPdVVg8oE8 TOK2BjEETRTc00o0Sp4jr0MNnf+3/MZ7vlHpL2ilPZLu+qPYSQ8qw7iUVQPIaGzw ltNrqM71JTiO7h/8XJHkKiCq7lxfuUOoUd/tWp+f346rdZQvzdJpv8zKRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDqn9GXAKNjDuI3MUjOmQXWwRTC4MB8GA1UdIwQY MBaAFMvX/BPhg2w5bMoheJcEqzn9nltkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveTlmOEUtR0RiRGxzeWlGNGx3U3JPZjJlVzJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC8yMTRjOWEtMDk1MC00MGQ5LWE1ODYt ZTM1ZGI1MjU2N2YwLzEveTlmOEUtR0RiRGxzeWlGNGx3U3JPZjJlVzJRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC8yMTRjOWEtMDk1MC00MGQ5LWE1ODYtZTM1ZGI1MjU2N2Yw LzEveTlmOEUtR0RiRGxzeWlGNGx3U3JPZjJlVzJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA6CfZKZmF 0q/OZ47+4z9wlFJl5uaHj/7Z57mdtbXHmih14O8P0CZ61DAVSKr3MH/zkwLbxkYi 5wgkDVKNX9Q+rEd1aCqmXTXvdI51B51zBDLo47uNzk80MMG4QQ4M274Carnu1AK0 a6sneWgXXMUx1r8TCHPvohVUkGF1cYjXuo0KlT8bhbe32coeJGjVQEeuy6HDT8+S duDwVvZuwqwL0MbgYAGmaWGio7lVzRKcp6uqRB6tHbhJx5t9Mj8Luh2j+hIMR//n tjqOx90J/WyrXcAlgGWIfCqW9jWGqhwAE8ZeF1RCOAEqtRQHE3DgQ14tbr29CKhr xXuFx/ASoJv8TA== -----END CERTIFICATE-----Generated at Wed Dec 24 21:48:03 2025 by rpki-client