This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/348789-3208-4847-9c3f-982d1f21a32b/1/y_dM2EZJMTj1IsV8AGW1xgUS3Qk.mft File: y_dM2EZJMTj1IsV8AGW1xgUS3Qk.mft (raw, json) Hash identifier: rIxoNJJwD0SeKxtQe6ZK67PbCEQ6qatXbHr1AI55y+o= Subject key identifier: EB:90:38:0D:F2:49:B7:9A:6E:B3:29:E3:3B:E6:D3:59:FE:74:08:02 Authority key identifier: CB:F7:4C:D8:46:49:31:38:F5:22:C5:7C:00:65:B5:C6:05:12:DD:09 Certificate issuer: /CN=cbf74cd846493138f522c57c0065b5c60512dd09 Certificate serial: 019B390FB3590ABCEF766C29B12B7FEBF823 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y_dM2EZJMTj1IsV8AGW1xgUS3Qk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/348789-3208-4847-9c3f-982d1f21a32b/1/y_dM2EZJMTj1IsV8AGW1xgUS3Qk.mft Manifest number: 1693 Signing time: Sat 20 Dec 2025 00:01:28 +0000 Manifest this update: Sat 20 Dec 2025 00:01:28 +0000 Manifest next update: Sun 21 Dec 2025 00:01:28 +0000 Files and hashes: 1: JlQN0N4As8kTE_2777wqlcFNrC8.roa (hash: gQA+8fA2lRTUYRE2yD6RworLn/rUFJdeb4rtkckOnyE=) 2: WD7cwf6HLxZKq0IMG8YbMTooJt0.roa (hash: JexN5Bcs7RxXPWQCAkKPWPwbZPwuEud7FpPGiuV9xSU=) 3: n0VCvrGvbIgBmTHfdTvtFpgH4bs.roa (hash: ukpF9blWLJ1fHC+qQnWNibfuLjVHA9hpURE/X4EaFzY=) 4: qObypTg-nOBL35cm5Sg2yM7Yo3s.roa (hash: rh8dBS1PUlDYnkodpVPvUZaeXyMvofP2iGR3Qp60YxQ=) 5: y_dM2EZJMTj1IsV8AGW1xgUS3Qk.crl (hash: V/YiKGqe1liPjfhRm8993FqJOwtNUsJOJF9dYUQRn4w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/348789-3208-4847-9c3f-982d1f21a32b/1/y_dM2EZJMTj1IsV8AGW1xgUS3Qk.crl rsync://rpki.ripe.net/repository/DEFAULT/40/348789-3208-4847-9c3f-982d1f21a32b/1/y_dM2EZJMTj1IsV8AGW1xgUS3Qk.mft rsync://rpki.ripe.net/repository/DEFAULT/y_dM2EZJMTj1IsV8AGW1xgUS3Qk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 00:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:0f:b3:59:0a:bc:ef:76:6c:29:b1:2b:7f:eb:f8:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cbf74cd846493138f522c57c0065b5c60512dd09 Validity Not Before: Dec 20 00:01:28 2025 GMT Not After : Dec 21 00:01:28 2025 GMT Subject: CN=eb90380df249b79a6eb329e33be6d359fe740802 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:97:14:13:f7:f8:c4:bf:6a:d4:47:1d:7c:6a: 1e:2f:2a:58:c1:91:5a:5c:25:32:53:99:32:8a:ef: 0d:79:f0:f3:7b:e0:73:9f:0d:23:12:42:50:3e:1a: 5c:74:d9:a1:f8:8c:cb:5d:cf:75:34:ab:03:5a:f2: e8:c6:dc:c4:d9:42:af:89:4b:9c:63:90:c7:ee:39: 95:6c:52:1c:e7:4c:94:0b:1d:23:19:d7:2e:27:37: 3d:fb:42:9d:73:78:3c:4a:15:04:83:18:98:b4:fc: 8e:d6:d2:9e:ef:03:f8:87:93:c1:0a:a1:f1:6c:12: 95:21:dc:f0:9c:ef:e5:b5:57:f2:ac:91:4d:e6:87: e0:56:72:b9:49:9e:30:12:9e:e7:2a:c6:c7:a0:b9: 60:18:2a:47:5b:f9:3e:a7:37:31:17:ea:18:2e:de: de:4c:4c:cb:42:da:4e:7b:be:45:16:76:d4:83:43: 82:f0:18:15:87:28:84:c6:e7:a3:5c:95:cb:18:db: c0:6f:b2:c8:bb:66:09:41:55:d8:e1:94:62:0f:2b: 37:21:e4:bd:6e:75:41:58:d8:2f:98:3c:7c:fe:60: 7e:e8:62:f6:60:4b:9a:28:33:4d:c8:06:d4:08:fe: 12:bb:2f:b9:f6:82:42:75:8b:b3:5d:9d:be:7d:9d: 13:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:90:38:0D:F2:49:B7:9A:6E:B3:29:E3:3B:E6:D3:59:FE:74:08:02 X509v3 Authority Key Identifier: keyid:CB:F7:4C:D8:46:49:31:38:F5:22:C5:7C:00:65:B5:C6:05:12:DD:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y_dM2EZJMTj1IsV8AGW1xgUS3Qk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/348789-3208-4847-9c3f-982d1f21a32b/1/y_dM2EZJMTj1IsV8AGW1xgUS3Qk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/348789-3208-4847-9c3f-982d1f21a32b/1/y_dM2EZJMTj1IsV8AGW1xgUS3Qk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:06:1b:64:3d:e5:02:60:72:59:4a:48:f5:44:07:7e:f5:f5: 29:f2:84:32:94:98:5a:61:47:8d:63:fb:68:39:9f:bc:de:67: fe:ae:92:f0:7c:2c:b0:d5:05:23:0d:44:eb:aa:e3:da:2e:e3: f9:9c:df:f1:c5:ff:50:08:24:f1:19:11:bb:44:95:7b:4a:70: 19:43:15:36:6b:4e:51:d0:58:d1:a1:a1:12:50:ec:71:2b:e9: f4:b8:a9:62:ab:99:cd:38:65:ee:ac:26:33:97:fe:f4:49:5f: 90:07:82:f6:b8:22:5c:be:dc:17:c2:fe:1d:be:ba:98:8c:16: ba:f6:3e:57:88:96:e8:da:10:cb:32:80:09:10:b4:5c:fc:67: 20:93:62:75:ea:94:f5:3d:35:cd:77:94:ea:8f:c6:d9:07:9e: f9:6e:56:67:84:22:20:84:01:fb:67:03:4e:8e:ab:21:fd:0c: d1:66:7c:6c:9b:91:b2:1c:d9:ec:38:a2:c6:0a:5d:6d:cb:ef: 6f:61:a4:9b:53:95:18:a8:6d:a0:8e:52:26:b3:f7:05:4c:df: c9:ab:e1:54:e9:19:03:41:c3:81:f3:b1:c0:fd:c5:32:c1:2b: 89:66:ca:8b:2e:99:95:40:3c:6a:94:5c:53:ef:4f:5b:62:b0: c6:5e:63:98 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5D7NZCrzvdmwpsSt/6/gjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiZjc0Y2Q4NDY0OTMxMzhmNTIyYzU3YzAwNjViNWM2MDUx MmRkMDkwHhcNMjUxMjIwMDAwMTI4WhcNMjUxMjIxMDAwMTI4WjAzMTEwLwYDVQQD EyhlYjkwMzgwZGYyNDliNzlhNmViMzI5ZTMzYmU2ZDM1OWZlNzQwODAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvZcUE/f4xL9q1EcdfGoeLypYwZFa XCUyU5kyiu8NefDze+Bznw0jEkJQPhpcdNmh+IzLXc91NKsDWvLoxtzE2UKviUuc Y5DH7jmVbFIc50yUCx0jGdcuJzc9+0Kdc3g8ShUEgxiYtPyO1tKe7wP4h5PBCqHx bBKVIdzwnO/ltVfyrJFN5ofgVnK5SZ4wEp7nKsbHoLlgGCpHW/k+pzcxF+oYLt7e TEzLQtpOe75FFnbUg0OC8BgVhyiExuejXJXLGNvAb7LIu2YJQVXY4ZRiDys3IeS9 bnVBWNgvmDx8/mB+6GL2YEuaKDNNyAbUCP4Suy+59oJCdYuzXZ2+fZ0TPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOuQOA3ySbeabrMp4zvm01n+dAgCMB8GA1UdIwQY MBaAFMv3TNhGSTE49SLFfABltcYFEt0JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveV9kTTJFWkpNVGoxSXNWOEFHVzF4Z1VTM1FrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC8zNDg3ODktMzIwOC00ODQ3LTljM2Yt OTgyZDFmMjFhMzJiLzEveV9kTTJFWkpNVGoxSXNWOEFHVzF4Z1VTM1FrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC8zNDg3ODktMzIwOC00ODQ3LTljM2YtOTgyZDFmMjFhMzJi LzEveV9kTTJFWkpNVGoxSXNWOEFHVzF4Z1VTM1FrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeQYbZD3l AmByWUpI9UQHfvX1KfKEMpSYWmFHjWP7aDmfvN5n/q6S8HwssNUFIw1E66rj2i7j +Zzf8cX/UAgk8RkRu0SVe0pwGUMVNmtOUdBY0aGhElDscSvp9LipYquZzThl7qwm M5f+9ElfkAeC9rgiXL7cF8L+Hb66mIwWuvY+V4iW6NoQyzKACRC0XPxnIJNideqU 9T01zXeU6o/G2Qee+W5WZ4QiIIQB+2cDTo6rIf0M0WZ8bJuRshzZ7Diixgpdbcvv b2Gkm1OVGKhtoI5SJrP3BUzfyavhVOkZA0HDgfOxwP3FMsEriWbKiy6ZlUA8apRc U+9PW2Kwxl5jmA== -----END CERTIFICATE-----Generated at Sat Dec 20 04:25:34 2025 by rpki-client