This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/7711d9-7f7c-4edb-a687-d6f04e708454/1/Y5jsFbwDnFpgQvvpBIRFa-Atp7k.mft File: Y5jsFbwDnFpgQvvpBIRFa-Atp7k.mft (raw, json) Hash identifier: RlsdTLmqWp6YtMePBpRSPOGbqQDmKHKZKnOKhQA2bzc= Subject key identifier: 41:23:13:AF:F4:9C:17:BD:3D:C4:09:02:F6:86:76:CB:0B:D5:41:A7 Authority key identifier: 63:98:EC:15:BC:03:9C:5A:60:42:FB:E9:04:84:45:6B:E0:2D:A7:B9 Certificate issuer: /CN=6398ec15bc039c5a6042fbe90484456be02da7b9 Certificate serial: 019B5CAE2F192F009C7A5334D8D2382CD612 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y5jsFbwDnFpgQvvpBIRFa-Atp7k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/7711d9-7f7c-4edb-a687-d6f04e708454/1/Y5jsFbwDnFpgQvvpBIRFa-Atp7k.mft Manifest number: 10CD Signing time: Fri 26 Dec 2025 22:01:17 +0000 Manifest this update: Fri 26 Dec 2025 22:01:17 +0000 Manifest next update: Sat 27 Dec 2025 22:01:17 +0000 Files and hashes: 1: Y5jsFbwDnFpgQvvpBIRFa-Atp7k.crl (hash: dqOR9bG2Hgm+nZII1pJpicnG8BQQaGza718kiOV6eHY=) 2: e7A-mRDgO875HCDrxITlnnJ3Ki0.roa (hash: 7vWhmuACkkydDfcxmeEEUNVhiR5m0fscFivB+SuNzME=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/7711d9-7f7c-4edb-a687-d6f04e708454/1/Y5jsFbwDnFpgQvvpBIRFa-Atp7k.crl rsync://rpki.ripe.net/repository/DEFAULT/41/7711d9-7f7c-4edb-a687-d6f04e708454/1/Y5jsFbwDnFpgQvvpBIRFa-Atp7k.mft rsync://rpki.ripe.net/repository/DEFAULT/Y5jsFbwDnFpgQvvpBIRFa-Atp7k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 22:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5c:ae:2f:19:2f:00:9c:7a:53:34:d8:d2:38:2c:d6:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6398ec15bc039c5a6042fbe90484456be02da7b9 Validity Not Before: Dec 26 22:01:17 2025 GMT Not After : Dec 27 22:01:17 2025 GMT Subject: CN=412313aff49c17bd3dc40902f68676cb0bd541a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:a6:2a:5b:a2:83:44:6f:67:4e:5b:4f:4f:58: 84:18:1d:92:a0:df:b7:d0:b9:0c:04:93:d0:e4:6b: 1f:f3:da:f2:4f:76:af:64:8e:0a:0c:ff:b3:1a:ed: e8:03:5f:d4:71:b6:ab:68:80:41:92:1b:34:ab:06: 47:61:8d:1d:06:bd:a2:95:21:c1:53:fa:98:ab:c5: 87:76:34:17:e3:01:d8:8d:17:fe:b4:1a:74:6a:3a: f3:2e:f5:23:c5:35:7d:fb:93:40:5d:37:3e:a2:09: 20:07:29:bd:bc:5d:67:1b:89:b9:b5:fa:b2:98:d1: 73:b1:60:24:b2:f7:87:a4:34:4b:5d:ee:db:4a:b0: 9a:6f:f9:f1:a3:ed:b9:4a:78:d4:06:1f:8a:8b:5e: db:7b:8d:4c:21:49:90:fd:a9:4a:71:b7:fb:4e:07: 79:0e:7d:40:d8:66:41:70:06:77:2d:2f:33:e1:64: 06:cf:3b:da:19:ef:25:ac:6b:83:04:67:15:82:ca: 1f:0c:4b:c1:2d:d3:29:c0:f6:fa:b3:04:de:b3:ad: d9:ca:0a:d4:02:df:5f:b2:85:7a:3f:e8:06:78:d3: 30:36:c2:70:ce:cf:4a:b8:81:cc:90:d6:f6:25:aa: c5:6f:9f:c3:b5:a9:63:f7:b4:8a:80:dc:e6:63:82: ce:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:23:13:AF:F4:9C:17:BD:3D:C4:09:02:F6:86:76:CB:0B:D5:41:A7 X509v3 Authority Key Identifier: keyid:63:98:EC:15:BC:03:9C:5A:60:42:FB:E9:04:84:45:6B:E0:2D:A7:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y5jsFbwDnFpgQvvpBIRFa-Atp7k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/7711d9-7f7c-4edb-a687-d6f04e708454/1/Y5jsFbwDnFpgQvvpBIRFa-Atp7k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/41/7711d9-7f7c-4edb-a687-d6f04e708454/1/Y5jsFbwDnFpgQvvpBIRFa-Atp7k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:c6:a5:ee:6f:7f:ec:00:d8:ef:64:4a:5a:73:e5:e9:48:84: fe:03:e2:6f:c8:6c:67:86:9b:87:bc:85:2a:c0:f3:a8:4d:7d: 04:dc:e1:1b:bc:38:62:2e:ba:bf:71:45:b9:a2:ee:7b:99:dc: 50:a0:13:a6:e6:2a:f8:e5:1e:99:45:bc:98:6b:43:f9:b9:74: 80:98:d0:30:ab:b5:7e:eb:06:b3:01:64:99:33:ab:75:23:62: 52:b6:18:ab:ab:b4:2d:d8:e8:fc:c6:1d:56:72:ea:3c:d8:e4: 3b:b0:1c:de:53:d2:15:7d:5f:97:30:5f:ba:1f:46:67:8a:f5: f9:bc:ae:30:61:59:bf:65:17:1a:ce:98:4e:92:d6:9d:4e:ac: d7:2a:40:ff:99:a4:37:1d:69:ac:e6:5d:ea:9d:56:07:98:9d: 91:b9:31:8b:25:15:a2:84:44:e1:9d:da:8d:59:e2:c3:1b:03: 3e:55:16:63:18:0a:e3:b0:69:1e:3f:0f:e4:32:1c:71:9e:fb: 15:c7:cb:95:0c:e9:a4:02:e5:d4:ef:ed:ae:52:71:08:ed:23: f8:5d:c4:a8:fc:1d:01:88:5a:fa:fa:79:60:c2:b9:e7:a1:f8: 5b:ca:b2:36:b4:18:b0:a0:67:d5:63:59:72:ad:75:02:e5:03: 05:c9:a9:72 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtcri8ZLwCcelM02NI4LNYSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzOThlYzE1YmMwMzljNWE2MDQyZmJlOTA0ODQ0NTZiZTAy ZGE3YjkwHhcNMjUxMjI2MjIwMTE3WhcNMjUxMjI3MjIwMTE3WjAzMTEwLwYDVQQD Eyg0MTIzMTNhZmY0OWMxN2JkM2RjNDA5MDJmNjg2NzZjYjBiZDU0MWE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA56YqW6KDRG9nTltPT1iEGB2SoN+3 0LkMBJPQ5Gsf89ryT3avZI4KDP+zGu3oA1/UcbaraIBBkhs0qwZHYY0dBr2ilSHB U/qYq8WHdjQX4wHYjRf+tBp0ajrzLvUjxTV9+5NAXTc+ogkgBym9vF1nG4m5tfqy mNFzsWAksveHpDRLXe7bSrCab/nxo+25SnjUBh+Ki17be41MIUmQ/alKcbf7Tgd5 Dn1A2GZBcAZ3LS8z4WQGzzvaGe8lrGuDBGcVgsofDEvBLdMpwPb6swTes63ZygrU At9fsoV6P+gGeNMwNsJwzs9KuIHMkNb2JarFb5/Dtalj97SKgNzmY4LOxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEEjE6/0nBe9PcQJAvaGdssL1UGnMB8GA1UdIwQY MBaAFGOY7BW8A5xaYEL76QSERWvgLae5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWTVqc0Zid0RuRnBnUXZ2cEJJUkZhLUF0cDdrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS83NzExZDktN2Y3Yy00ZWRiLWE2ODct ZDZmMDRlNzA4NDU0LzEvWTVqc0Zid0RuRnBnUXZ2cEJJUkZhLUF0cDdrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MS83NzExZDktN2Y3Yy00ZWRiLWE2ODctZDZmMDRlNzA4NDU0 LzEvWTVqc0Zid0RuRnBnUXZ2cEJJUkZhLUF0cDdrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsMal7m9/ 7ADY72RKWnPl6UiE/gPib8hsZ4abh7yFKsDzqE19BNzhG7w4Yi66v3FFuaLue5nc UKATpuYq+OUemUW8mGtD+bl0gJjQMKu1fusGswFkmTOrdSNiUrYYq6u0Ldjo/MYd VnLqPNjkO7Ac3lPSFX1flzBfuh9GZ4r1+byuMGFZv2UXGs6YTpLWnU6s1ypA/5mk Nx1prOZd6p1WB5idkbkxiyUVooRE4Z3ajVniwxsDPlUWYxgK47BpHj8P5DIccZ77 FcfLlQzppALl1O/trlJxCO0j+F3EqPwdAYha+vp5YMK556H4W8qyNrQYsKBn1WNZ cq11AuUDBcmpcg== -----END CERTIFICATE-----Generated at Sat Dec 27 07:03:33 2025 by rpki-client