This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/7e90ac-90cf-4523-8f97-31660c22d19e/1/y02Dpn-zWviN6DwTBMZ0OlFTE2E.mft File: y02Dpn-zWviN6DwTBMZ0OlFTE2E.mft (raw, json) Hash identifier: 1Zfu6iKF1mlo0TuIx+tA5xIDIKstAn+1Y0GA5IATEDM= Subject key identifier: 70:DB:AA:BD:84:10:F2:3D:DB:26:FD:8D:85:7B:15:E5:04:97:66:FD Authority key identifier: CB:4D:83:A6:7F:B3:5A:F8:8D:E8:3C:13:04:C6:74:3A:51:53:13:61 Certificate issuer: /CN=cb4d83a67fb35af88de83c1304c6743a51531361 Certificate serial: 019B3C103583C7B8E46DF11F6702FEAA2C77 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y02Dpn-zWviN6DwTBMZ0OlFTE2E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/7e90ac-90cf-4523-8f97-31660c22d19e/1/y02Dpn-zWviN6DwTBMZ0OlFTE2E.mft Manifest number: 0A05 Signing time: Sat 20 Dec 2025 14:00:53 +0000 Manifest this update: Sat 20 Dec 2025 14:00:53 +0000 Manifest next update: Sun 21 Dec 2025 14:00:53 +0000 Files and hashes: 1: 5Es4zPvDm3MMXSDOXrPDEzILG78.roa (hash: WNzo+YIvuvagGYiyG4uSKV3fWrNNz4wRZQOVkyJIxJc=) 2: soLPFB9BaoeGyxe_ows2MqIBmHY.roa (hash: zvz/ucZSe9gs0q+JXgBGOo5yJbgzXAhsnWqzDHocROw=) 3: xHaucpgtSJqvYDWEQH_jghu3SHs.roa (hash: 7WTdK2upF+9XygbepRb7SlbpqhR7M3j31Q2B96zjyEA=) 4: y02Dpn-zWviN6DwTBMZ0OlFTE2E.crl (hash: ANzzrcRDJ4AiySU3O+Ol4ItoBVUZSK94uuzebZdkgaA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/7e90ac-90cf-4523-8f97-31660c22d19e/1/y02Dpn-zWviN6DwTBMZ0OlFTE2E.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/7e90ac-90cf-4523-8f97-31660c22d19e/1/y02Dpn-zWviN6DwTBMZ0OlFTE2E.mft rsync://rpki.ripe.net/repository/DEFAULT/y02Dpn-zWviN6DwTBMZ0OlFTE2E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:10:35:83:c7:b8:e4:6d:f1:1f:67:02:fe:aa:2c:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb4d83a67fb35af88de83c1304c6743a51531361 Validity Not Before: Dec 20 14:00:53 2025 GMT Not After : Dec 21 14:00:53 2025 GMT Subject: CN=70dbaabd8410f23ddb26fd8d857b15e5049766fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:11:2a:2c:7f:84:49:54:1c:0c:f6:d8:dd:fd: ff:2e:85:db:53:cb:e5:e5:f2:6c:7b:4b:22:23:a6: d7:43:aa:1e:2e:e8:2d:17:1e:d7:06:e1:83:92:c5: bc:0d:81:e1:70:d4:31:bc:a1:d6:09:97:3f:72:0a: 04:20:2f:bb:62:29:cc:3d:66:98:1d:34:1b:f8:f7: dd:c8:f8:8e:69:61:78:34:fd:27:b9:51:ce:1d:18: 9b:31:fb:fc:1e:a3:6d:e8:8b:f2:58:c0:d0:46:75: 10:35:05:63:25:ab:4d:cb:31:12:6a:78:22:c1:f5: ab:9a:c2:b2:6a:f4:85:ed:11:b2:a0:6f:82:c6:84: 9d:30:e4:56:0c:b9:06:4b:78:b8:d2:eb:21:7e:9e: da:f6:b6:cd:5b:5c:b3:db:5f:8c:69:dc:8b:d3:6a: 2f:66:85:85:84:1d:d2:56:59:8c:41:85:90:12:33: d0:f4:d9:d7:d2:fe:b2:3c:0a:c8:d3:dc:36:65:f4: 96:60:c0:86:dc:9f:36:44:8f:da:86:98:ac:69:1d: 8a:3c:80:21:f0:59:b8:ed:75:2a:ad:d8:19:11:a5: 47:e5:60:a8:76:46:78:40:b5:d4:56:5b:9a:ac:b0: 9f:b6:01:5f:81:17:20:d2:78:9f:c4:cf:74:e5:5d: 98:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:DB:AA:BD:84:10:F2:3D:DB:26:FD:8D:85:7B:15:E5:04:97:66:FD X509v3 Authority Key Identifier: keyid:CB:4D:83:A6:7F:B3:5A:F8:8D:E8:3C:13:04:C6:74:3A:51:53:13:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y02Dpn-zWviN6DwTBMZ0OlFTE2E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/7e90ac-90cf-4523-8f97-31660c22d19e/1/y02Dpn-zWviN6DwTBMZ0OlFTE2E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/7e90ac-90cf-4523-8f97-31660c22d19e/1/y02Dpn-zWviN6DwTBMZ0OlFTE2E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:c8:ca:38:8d:d6:dd:9b:d8:7d:e9:bf:e3:f0:c2:2e:cc:78: bf:3d:b4:5e:34:0b:86:69:94:73:c1:9c:ee:86:21:c5:9b:00: 7a:c6:d5:80:ee:dc:52:36:bd:e6:d0:c1:5e:f3:fd:39:16:31: 7c:79:95:4d:c8:a1:dc:57:59:04:1d:ac:9f:c6:1a:0e:10:57: bf:77:51:62:66:63:e4:be:0a:9f:a2:89:f4:8e:cf:47:76:5c: c9:cd:3d:84:af:40:79:ad:b9:b4:7c:aa:69:11:b9:c8:db:db: bd:8c:7c:24:45:88:9c:a7:04:6d:0d:e6:0c:80:d3:d4:0f:28: 02:01:d2:5b:cc:de:61:97:75:1c:64:de:6e:84:52:0f:ff:18: 17:c1:61:7a:be:86:d3:c0:af:47:60:79:06:4d:5f:14:a6:c2: 39:a6:1a:89:3c:3c:28:09:4f:e4:34:a8:f7:8e:6b:bc:a1:3c: ab:96:55:8b:3a:7c:b0:5c:e3:ba:8a:b0:02:35:3d:a7:ff:79: 11:73:26:87:e8:b5:fb:51:4f:d6:bd:b6:ca:5c:89:f0:d9:fd: 29:ef:e7:bd:4f:43:13:13:f2:fe:c9:3e:a6:4a:0f:dd:5b:01: 97:81:0d:3b:6c:ed:b7:21:22:30:ed:31:b2:d5:4e:ef:24:f3: c7:ad:f0:ee -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8EDWDx7jkbfEfZwL+qix3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiNGQ4M2E2N2ZiMzVhZjg4ZGU4M2MxMzA0YzY3NDNhNTE1 MzEzNjEwHhcNMjUxMjIwMTQwMDUzWhcNMjUxMjIxMTQwMDUzWjAzMTEwLwYDVQQD Eyg3MGRiYWFiZDg0MTBmMjNkZGIyNmZkOGQ4NTdiMTVlNTA0OTc2NmZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6xEqLH+ESVQcDPbY3f3/LoXbU8vl 5fJse0siI6bXQ6oeLugtFx7XBuGDksW8DYHhcNQxvKHWCZc/cgoEIC+7YinMPWaY HTQb+PfdyPiOaWF4NP0nuVHOHRibMfv8HqNt6IvyWMDQRnUQNQVjJatNyzESangi wfWrmsKyavSF7RGyoG+CxoSdMORWDLkGS3i40ushfp7a9rbNW1yz21+MadyL02ov ZoWFhB3SVlmMQYWQEjPQ9NnX0v6yPArI09w2ZfSWYMCG3J82RI/ahpisaR2KPIAh 8Fm47XUqrdgZEaVH5WCodkZ4QLXUVluarLCftgFfgRcg0nifxM905V2YcQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHDbqr2EEPI92yb9jYV7FeUEl2b9MB8GA1UdIwQY MBaAFMtNg6Z/s1r4jeg8EwTGdDpRUxNhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveTAyRHBuLXpXdmlONkR3VEJNWjBPbEZURTJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS83ZTkwYWMtOTBjZi00NTIzLThmOTct MzE2NjBjMjJkMTllLzEveTAyRHBuLXpXdmlONkR3VEJNWjBPbEZURTJFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS83ZTkwYWMtOTBjZi00NTIzLThmOTctMzE2NjBjMjJkMTll LzEveTAyRHBuLXpXdmlONkR3VEJNWjBPbEZURTJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOsjKOI3W 3ZvYfem/4/DCLsx4vz20XjQLhmmUc8Gc7oYhxZsAesbVgO7cUja95tDBXvP9ORYx fHmVTcih3FdZBB2sn8YaDhBXv3dRYmZj5L4Kn6KJ9I7PR3Zcyc09hK9Aea25tHyq aRG5yNvbvYx8JEWInKcEbQ3mDIDT1A8oAgHSW8zeYZd1HGTeboRSD/8YF8Fher6G 08CvR2B5Bk1fFKbCOaYaiTw8KAlP5DSo945rvKE8q5ZVizp8sFzjuoqwAjU9p/95 EXMmh+i1+1FP1r22ylyJ8Nn9Ke/nvU9DExPy/sk+pkoP3VsBl4ENO2zttyEiMO0x stVO7yTzx63w7g== -----END CERTIFICATE-----Generated at Sat Dec 20 16:01:56 2025 by rpki-client