This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/1ba6df-548c-44ea-b1d5-f4eb0ff5bb73/1/y4muY2SP0cie1Wo2G9jB4RlWv7o.mft File: y4muY2SP0cie1Wo2G9jB4RlWv7o.mft (raw, json) Hash identifier: VVZpYs/7CamMjChzSjTVFOKkz2shdcdEsevS+mO8+vI= Subject key identifier: E7:84:F0:5E:7B:F4:36:06:DB:FE:03:73:92:D8:E1:1C:DB:3A:DE:69 Authority key identifier: CB:89:AE:63:64:8F:D1:C8:9E:D5:6A:36:1B:D8:C1:E1:19:56:BF:BA Certificate issuer: /CN=cb89ae63648fd1c89ed56a361bd8c1e11956bfba Certificate serial: 019B34C59BF2BE81D3E7A48396168D34E67B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y4muY2SP0cie1Wo2G9jB4RlWv7o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/1ba6df-548c-44ea-b1d5-f4eb0ff5bb73/1/y4muY2SP0cie1Wo2G9jB4RlWv7o.mft Manifest number: 1485 Signing time: Fri 19 Dec 2025 04:02:04 +0000 Manifest this update: Fri 19 Dec 2025 04:02:04 +0000 Manifest next update: Sat 20 Dec 2025 04:02:04 +0000 Files and hashes: 1: AC5Czqpvjh0N2Ua52Rhnwc0cRrg.roa (hash: BaLqMkqAO8y3wqAkiCrx9+8UXW+y+iTwdOtnoANbo+k=) 2: y4muY2SP0cie1Wo2G9jB4RlWv7o.crl (hash: hub+cMVW52+ka2rMbeR9xRiBt1jJkKp4mppZUAX7Tx4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/1ba6df-548c-44ea-b1d5-f4eb0ff5bb73/1/y4muY2SP0cie1Wo2G9jB4RlWv7o.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/1ba6df-548c-44ea-b1d5-f4eb0ff5bb73/1/y4muY2SP0cie1Wo2G9jB4RlWv7o.mft rsync://rpki.ripe.net/repository/DEFAULT/y4muY2SP0cie1Wo2G9jB4RlWv7o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 04:02:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:c5:9b:f2:be:81:d3:e7:a4:83:96:16:8d:34:e6:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb89ae63648fd1c89ed56a361bd8c1e11956bfba Validity Not Before: Dec 19 04:02:04 2025 GMT Not After : Dec 20 04:02:04 2025 GMT Subject: CN=e784f05e7bf43606dbfe037392d8e11cdb3ade69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:e9:8c:de:a6:ba:04:8c:45:81:4a:02:77:be: 0a:c3:85:b4:19:0c:1b:69:c9:bd:b9:81:f0:6d:70: a6:7d:9b:03:60:7b:79:6f:fc:8d:fd:b9:b0:7b:b3: 54:2c:47:07:26:ad:44:65:62:3f:c5:5e:c7:95:cf: 6e:e9:1a:7a:87:60:83:cf:54:62:65:e1:10:bf:b6: d6:c9:3b:29:22:38:3b:08:d5:1b:75:1a:b3:b0:9c: af:64:ec:ec:48:92:12:60:c5:2a:7c:88:56:af:44: f9:20:05:4a:82:b2:1d:97:28:db:94:99:ec:2c:24: 6d:78:1a:a0:92:07:bd:2f:28:0f:c3:ff:fc:20:d0: 75:75:51:b7:c4:14:73:a0:86:17:20:fa:48:c6:0a: e5:1e:58:05:62:83:a7:5c:75:2b:8e:10:a8:8f:6a: 56:99:cb:14:87:e9:15:42:db:08:77:df:f2:b7:e9: 36:46:74:9f:c8:13:df:af:ba:94:74:17:72:ba:d5: 99:e5:d1:9e:e7:80:6f:6a:65:3f:34:40:95:07:96: c2:8b:c8:dd:f8:e5:20:7c:37:55:2a:93:ff:ac:cf: 88:bc:49:87:c0:9a:04:e6:2f:2f:b2:14:79:3b:aa: 6c:81:f0:dc:8a:4c:df:65:e0:db:87:d2:5e:58:2f: 6a:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:84:F0:5E:7B:F4:36:06:DB:FE:03:73:92:D8:E1:1C:DB:3A:DE:69 X509v3 Authority Key Identifier: keyid:CB:89:AE:63:64:8F:D1:C8:9E:D5:6A:36:1B:D8:C1:E1:19:56:BF:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y4muY2SP0cie1Wo2G9jB4RlWv7o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1ba6df-548c-44ea-b1d5-f4eb0ff5bb73/1/y4muY2SP0cie1Wo2G9jB4RlWv7o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1ba6df-548c-44ea-b1d5-f4eb0ff5bb73/1/y4muY2SP0cie1Wo2G9jB4RlWv7o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:a1:25:db:fd:93:bd:4f:4c:6b:ca:34:77:bc:3a:cc:5f:b9: 74:44:8b:a9:25:4b:a1:12:be:f0:0c:b6:20:27:dc:a4:9e:ea: bb:57:1d:9b:c0:5d:da:e2:13:a1:74:81:6e:47:2c:d5:87:26: 60:48:b7:0d:31:ee:99:b1:4c:de:44:18:17:b9:23:0d:11:49: 36:ce:06:bc:c1:7a:0d:3f:e1:e4:0d:d6:5f:07:e0:2b:07:30: 23:00:43:53:25:ff:60:e4:0a:7f:8a:3f:18:00:8b:74:38:c4: 66:00:1a:55:1d:13:12:b4:d1:1a:60:74:55:50:1d:b4:c3:de: 7a:63:24:7c:62:01:7f:c4:9f:67:93:32:2e:e9:a7:f2:dd:b7: b2:5f:20:3c:b5:ba:f9:f8:67:ff:5b:01:01:87:6c:3a:73:7b: 32:1c:5e:df:89:ba:ec:99:f6:b4:f1:01:1d:62:d2:97:b4:5f: 9e:b9:3b:a4:17:ff:e6:a8:34:64:87:86:6f:b9:d3:da:85:26: 29:4d:e1:a8:23:37:2b:26:dc:d8:5d:e2:06:9a:9a:be:40:ba: d8:73:0c:28:3d:78:0b:4b:35:0d:be:a4:e0:87:b8:93:7c:27: 68:91:a5:c6:21:c3:c3:5d:43:18:2c:78:05:de:69:7b:14:96: 32:be:1e:fb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0xZvyvoHT56SDlhaNNOZ7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiODlhZTYzNjQ4ZmQxYzg5ZWQ1NmEzNjFiZDhjMWUxMTk1 NmJmYmEwHhcNMjUxMjE5MDQwMjA0WhcNMjUxMjIwMDQwMjA0WjAzMTEwLwYDVQQD EyhlNzg0ZjA1ZTdiZjQzNjA2ZGJmZTAzNzM5MmQ4ZTExY2RiM2FkZTY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl+mM3qa6BIxFgUoCd74Kw4W0GQwb acm9uYHwbXCmfZsDYHt5b/yN/bmwe7NULEcHJq1EZWI/xV7Hlc9u6Rp6h2CDz1Ri ZeEQv7bWyTspIjg7CNUbdRqzsJyvZOzsSJISYMUqfIhWr0T5IAVKgrIdlyjblJns LCRteBqgkge9LygPw//8INB1dVG3xBRzoIYXIPpIxgrlHlgFYoOnXHUrjhCoj2pW mcsUh+kVQtsId9/yt+k2RnSfyBPfr7qUdBdyutWZ5dGe54BvamU/NECVB5bCi8jd +OUgfDdVKpP/rM+IvEmHwJoE5i8vshR5O6psgfDcikzfZeDbh9JeWC9qwQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOeE8F579DYG2/4Dc5LY4RzbOt5pMB8GA1UdIwQY MBaAFMuJrmNkj9HIntVqNhvYweEZVr+6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveTRtdVkyU1AwY2llMVdvMkc5akI0UmxXdjdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC8xYmE2ZGYtNTQ4Yy00NGVhLWIxZDUt ZjRlYjBmZjViYjczLzEveTRtdVkyU1AwY2llMVdvMkc5akI0UmxXdjdvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC8xYmE2ZGYtNTQ4Yy00NGVhLWIxZDUtZjRlYjBmZjViYjcz LzEveTRtdVkyU1AwY2llMVdvMkc5akI0UmxXdjdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdKEl2/2T vU9Ma8o0d7w6zF+5dESLqSVLoRK+8Ay2ICfcpJ7qu1cdm8Bd2uIToXSBbkcs1Ycm YEi3DTHumbFM3kQYF7kjDRFJNs4GvMF6DT/h5A3WXwfgKwcwIwBDUyX/YOQKf4o/ GACLdDjEZgAaVR0TErTRGmB0VVAdtMPeemMkfGIBf8SfZ5MyLumn8t23sl8gPLW6 +fhn/1sBAYdsOnN7Mhxe34m67Jn2tPEBHWLSl7Rfnrk7pBf/5qg0ZIeGb7nT2oUm KU3hqCM3Kybc2F3iBpqavkC62HMMKD14C0s1Db6k4Ie4k3wnaJGlxiHDw11DGCx4 Bd5pexSWMr4e+w== -----END CERTIFICATE-----Generated at Fri Dec 19 10:28:15 2025 by rpki-client