This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/214c9a-0950-40d9-a586-e35db52567f0/1/y9f8E-GDbDlsyiF4lwSrOf2eW2Q.mft File: y9f8E-GDbDlsyiF4lwSrOf2eW2Q.mft (raw, json) Hash identifier: zTDoznMV2oyxKeClL3vvPzyN0xyJZFE3HC5OZ8R0Qwg= Subject key identifier: 11:E1:4E:62:D1:3C:94:1D:B8:68:0D:84:A1:43:73:60:4C:B5:0A:49 Authority key identifier: CB:D7:FC:13:E1:83:6C:39:6C:CA:21:78:97:04:AB:39:FD:9E:5B:64 Certificate issuer: /CN=cbd7fc13e1836c396cca21789704ab39fd9e5b64 Certificate serial: 019B5B65B19C1DAAD6E4FCA3F8E803AB49CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9f8E-GDbDlsyiF4lwSrOf2eW2Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/214c9a-0950-40d9-a586-e35db52567f0/1/y9f8E-GDbDlsyiF4lwSrOf2eW2Q.mft Manifest number: 034B Signing time: Fri 26 Dec 2025 16:02:29 +0000 Manifest this update: Fri 26 Dec 2025 16:02:29 +0000 Manifest next update: Sat 27 Dec 2025 16:02:29 +0000 Files and hashes: 1: E1mhBRMNKUKpYCp6l6cYmmnl_S8.roa (hash: EfpfXPe85LjuFoEfBPlRSotwGgPrWv2BqUA6Yn79Kmg=) 2: y9f8E-GDbDlsyiF4lwSrOf2eW2Q.crl (hash: NB1h4GEzVmk1obXwaPUIQzYJXSDNu2rM9ugtyrMc6b0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/214c9a-0950-40d9-a586-e35db52567f0/1/y9f8E-GDbDlsyiF4lwSrOf2eW2Q.crl rsync://rpki.ripe.net/repository/DEFAULT/24/214c9a-0950-40d9-a586-e35db52567f0/1/y9f8E-GDbDlsyiF4lwSrOf2eW2Q.mft rsync://rpki.ripe.net/repository/DEFAULT/y9f8E-GDbDlsyiF4lwSrOf2eW2Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 15:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5b:65:b1:9c:1d:aa:d6:e4:fc:a3:f8:e8:03:ab:49:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cbd7fc13e1836c396cca21789704ab39fd9e5b64 Validity Not Before: Dec 26 16:02:29 2025 GMT Not After : Dec 27 16:02:29 2025 GMT Subject: CN=11e14e62d13c941db8680d84a14373604cb50a49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:db:dd:9f:c0:b4:47:f6:95:9e:4c:25:1b:69: 30:07:5e:25:f4:eb:65:70:05:9c:96:e5:81:95:d0: d3:31:f9:21:9e:97:7f:36:e7:4e:88:17:db:0f:ed: 00:ae:a0:2d:03:f9:7b:10:af:35:df:ef:7d:a6:a5: d3:f5:09:76:36:bd:dc:99:ef:67:ec:e7:85:c0:af: 4e:2a:28:88:79:ab:bb:75:77:01:db:8d:5b:8b:8f: 72:7f:1e:e0:06:b0:14:1e:d6:05:6e:98:8d:57:45: b9:55:77:02:83:88:24:55:9c:66:ca:79:1a:51:78: f6:5d:d2:94:b7:68:8a:ee:03:ed:bb:61:51:44:8c: bf:a7:44:48:e2:ac:b0:d5:dc:45:68:48:e2:5d:13: 58:b0:b7:87:9f:75:93:dc:56:9d:2c:b6:d1:99:db: 16:93:0a:e8:71:9a:b3:13:a1:37:f6:c5:7a:8f:88: cc:19:db:b4:d7:78:9a:d7:b8:9e:2a:aa:79:c3:1b: 82:40:55:08:1e:00:03:79:6a:ca:a0:63:55:ac:e0: e8:c0:bc:a6:63:1e:ee:dd:22:62:2a:59:bb:f2:72: e5:e7:41:ee:41:5a:b8:ac:ae:6f:a8:a2:54:b8:7e: 77:0d:64:eb:30:38:48:2a:c7:45:20:e4:6a:cf:b4: f9:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:E1:4E:62:D1:3C:94:1D:B8:68:0D:84:A1:43:73:60:4C:B5:0A:49 X509v3 Authority Key Identifier: keyid:CB:D7:FC:13:E1:83:6C:39:6C:CA:21:78:97:04:AB:39:FD:9E:5B:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9f8E-GDbDlsyiF4lwSrOf2eW2Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/214c9a-0950-40d9-a586-e35db52567f0/1/y9f8E-GDbDlsyiF4lwSrOf2eW2Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/214c9a-0950-40d9-a586-e35db52567f0/1/y9f8E-GDbDlsyiF4lwSrOf2eW2Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:35:f3:9c:a9:1e:ed:67:4f:aa:d2:fa:ea:d8:e2:8b:a5:d9: 28:3b:8e:71:e9:fe:74:f8:1e:1f:b1:32:04:e8:32:ab:0a:f0: 68:44:9d:16:5f:6f:0b:c3:ae:4d:2a:a3:63:d4:c9:b4:32:e7: 35:b1:57:32:44:85:f8:5a:39:a4:33:39:aa:ed:c8:18:d6:34: a8:d8:d9:2e:0e:39:72:26:3c:16:3d:a9:50:f5:f8:c8:3f:e7: f5:09:ed:e1:70:a2:ba:83:e0:14:4b:7a:b6:77:7e:42:a7:bd: 6b:d2:14:da:ff:02:dd:55:20:44:3e:38:63:eb:46:62:58:30: bd:76:66:73:e8:26:51:a2:5f:30:9a:62:9c:45:bb:46:75:e8: e6:3b:48:fe:2d:a7:d1:b9:63:a7:33:c3:46:db:f1:e8:27:e5: a9:e0:3f:48:e0:67:c4:78:89:56:08:1e:4c:11:2b:e9:de:76: f7:36:43:e9:0c:2d:c6:88:92:f7:9c:69:27:48:ce:f1:60:59: 92:c8:ce:a1:27:1a:70:dd:e9:34:d6:a2:e6:85:53:b7:3e:36: 85:59:e9:9d:92:9a:a7:2e:3c:41:c1:d4:6d:f9:93:99:91:72: 44:cc:4c:1b:aa:e3:bc:b3:ad:82:75:ef:2a:68:a5:df:c2:73: 78:2b:a2:b4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtbZbGcHarW5Pyj+OgDq0nOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiZDdmYzEzZTE4MzZjMzk2Y2NhMjE3ODk3MDRhYjM5ZmQ5 ZTViNjQwHhcNMjUxMjI2MTYwMjI5WhcNMjUxMjI3MTYwMjI5WjAzMTEwLwYDVQQD EygxMWUxNGU2MmQxM2M5NDFkYjg2ODBkODRhMTQzNzM2MDRjYjUwYTQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsdvdn8C0R/aVnkwlG2kwB14l9Otl cAWcluWBldDTMfkhnpd/NudOiBfbD+0ArqAtA/l7EK813+99pqXT9Ql2Nr3cme9n 7OeFwK9OKiiIeau7dXcB241bi49yfx7gBrAUHtYFbpiNV0W5VXcCg4gkVZxmynka UXj2XdKUt2iK7gPtu2FRRIy/p0RI4qyw1dxFaEjiXRNYsLeHn3WT3FadLLbRmdsW kwrocZqzE6E39sV6j4jMGdu013ia17ieKqp5wxuCQFUIHgADeWrKoGNVrODowLym Yx7u3SJiKlm78nLl50HuQVq4rK5vqKJUuH53DWTrMDhIKsdFIORqz7T5HwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBHhTmLRPJQduGgNhKFDc2BMtQpJMB8GA1UdIwQY MBaAFMvX/BPhg2w5bMoheJcEqzn9nltkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveTlmOEUtR0RiRGxzeWlGNGx3U3JPZjJlVzJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC8yMTRjOWEtMDk1MC00MGQ5LWE1ODYt ZTM1ZGI1MjU2N2YwLzEveTlmOEUtR0RiRGxzeWlGNGx3U3JPZjJlVzJRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC8yMTRjOWEtMDk1MC00MGQ5LWE1ODYtZTM1ZGI1MjU2N2Yw LzEveTlmOEUtR0RiRGxzeWlGNGx3U3JPZjJlVzJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACDXznKke 7WdPqtL66tjii6XZKDuOcen+dPgeH7EyBOgyqwrwaESdFl9vC8OuTSqjY9TJtDLn NbFXMkSF+Fo5pDM5qu3IGNY0qNjZLg45ciY8Fj2pUPX4yD/n9Qnt4XCiuoPgFEt6 tnd+Qqe9a9IU2v8C3VUgRD44Y+tGYlgwvXZmc+gmUaJfMJpinEW7RnXo5jtI/i2n 0bljpzPDRtvx6CflqeA/SOBnxHiJVggeTBEr6d529zZD6QwtxoiS95xpJ0jO8WBZ ksjOoScacN3pNNai5oVTtz42hVnpnZKapy48QcHUbfmTmZFyRMxMG6rjvLOtgnXv Kmil38JzeCuitA== -----END CERTIFICATE-----Generated at Fri Dec 26 23:11:26 2025 by rpki-client