This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/a9131c-82d2-41b7-9e20-13696197d3b6/1/y02MQeEiyIHZNtkdWwLb2GoucKU.mft File: y02MQeEiyIHZNtkdWwLb2GoucKU.mft (raw, json) Hash identifier: gG7+J3nV4AH2Jk/nl3oLcW5Pn8DqwAgB5vpQLm4fwIw= Subject key identifier: 96:0E:92:FF:90:C5:AE:12:D3:36:24:CF:76:BC:E7:E1:AF:47:95:08 Authority key identifier: CB:4D:8C:41:E1:22:C8:81:D9:36:D9:1D:5B:02:DB:D8:6A:2E:70:A5 Certificate issuer: /CN=cb4d8c41e122c881d936d91d5b02dbd86a2e70a5 Certificate serial: 019B62AFA0947199BF5114542D120E270F60 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y02MQeEiyIHZNtkdWwLb2GoucKU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/a9131c-82d2-41b7-9e20-13696197d3b6/1/y02MQeEiyIHZNtkdWwLb2GoucKU.mft Manifest number: 179D Signing time: Sun 28 Dec 2025 02:00:35 +0000 Manifest this update: Sun 28 Dec 2025 02:00:35 +0000 Manifest next update: Mon 29 Dec 2025 02:00:35 +0000 Files and hashes: 1: x9dC2s7poumOX7Fyb1pJRfvWUck.roa (hash: 4hkKgFGTZlThYX8UktL5gydXSJoUP0UEdhwE5OUeAGQ=) 2: y02MQeEiyIHZNtkdWwLb2GoucKU.crl (hash: biOGwERsc1OPy3wQ1qV74Z8uY64le5LfR0p1//O5P6E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/a9131c-82d2-41b7-9e20-13696197d3b6/1/y02MQeEiyIHZNtkdWwLb2GoucKU.crl rsync://rpki.ripe.net/repository/DEFAULT/47/a9131c-82d2-41b7-9e20-13696197d3b6/1/y02MQeEiyIHZNtkdWwLb2GoucKU.mft rsync://rpki.ripe.net/repository/DEFAULT/y02MQeEiyIHZNtkdWwLb2GoucKU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:62:af:a0:94:71:99:bf:51:14:54:2d:12:0e:27:0f:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb4d8c41e122c881d936d91d5b02dbd86a2e70a5 Validity Not Before: Dec 28 02:00:35 2025 GMT Not After : Dec 29 02:00:35 2025 GMT Subject: CN=960e92ff90c5ae12d33624cf76bce7e1af479508 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:37:ee:9a:70:41:72:6a:e7:d4:60:9d:fa:67: 6d:c0:9c:bc:b6:b9:cb:75:60:db:9b:6b:86:ec:42: 47:1f:82:ed:de:b9:6b:21:2a:ff:51:ea:bc:94:a8: af:30:a9:f0:70:9f:e7:af:2a:d3:94:00:93:f2:40: 78:d8:08:7d:a0:72:c9:9a:db:69:35:3f:8d:70:2d: fb:d5:d6:f0:4d:0c:2d:62:88:3a:cc:91:41:16:fd: 55:01:93:e9:76:8d:18:28:43:3b:a7:55:b8:6e:60: 21:9b:da:a8:57:76:84:45:58:ee:bd:63:e3:e8:00: 4d:b4:0d:95:bc:5d:c0:ae:8c:f4:dd:0e:28:83:5e: 65:5c:f6:27:03:1c:69:f4:8f:6e:f4:b2:d9:aa:00: ce:86:b8:d4:7b:e0:92:b6:ff:3d:7c:cd:74:51:68: 49:2c:bb:6b:9c:f1:74:2e:fc:ec:4f:1d:e3:47:9e: 4d:90:98:27:2e:cc:97:72:88:95:07:01:51:8b:b8: 6b:dd:79:b4:c8:32:e5:78:19:45:d6:01:26:8d:86: b6:b9:91:e8:ef:1e:86:89:f7:6f:7c:42:85:4a:e4: 41:c5:a0:18:94:c7:41:47:87:49:df:52:fd:45:fb: 20:16:51:ab:60:c5:82:62:d3:13:e9:6c:f2:85:5d: cb:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:0E:92:FF:90:C5:AE:12:D3:36:24:CF:76:BC:E7:E1:AF:47:95:08 X509v3 Authority Key Identifier: keyid:CB:4D:8C:41:E1:22:C8:81:D9:36:D9:1D:5B:02:DB:D8:6A:2E:70:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y02MQeEiyIHZNtkdWwLb2GoucKU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a9131c-82d2-41b7-9e20-13696197d3b6/1/y02MQeEiyIHZNtkdWwLb2GoucKU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a9131c-82d2-41b7-9e20-13696197d3b6/1/y02MQeEiyIHZNtkdWwLb2GoucKU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:d7:aa:c9:f5:8b:df:89:60:e5:82:ac:62:58:73:3f:5e:47: 40:c4:d3:c4:fd:b6:b7:11:d4:9b:6a:16:8b:a5:1f:ff:a7:fb: f2:14:d6:f4:d3:06:ca:2c:90:6d:a3:a2:27:19:3c:b2:4d:fe: 37:64:af:9f:85:18:07:67:d7:53:0d:03:bc:8d:90:8a:2c:de: 56:51:0f:03:d3:24:49:d5:2f:bc:78:65:b4:2f:9e:e0:d4:44: 1d:99:ba:d0:0f:fa:85:24:71:35:3a:57:dc:3d:8b:e0:12:10: 72:78:4a:29:ad:5f:bc:98:d1:9c:44:d4:92:04:3a:79:47:0b: 7a:83:79:11:24:d2:9c:bd:b0:bd:d7:37:0f:0b:c6:76:13:a7: b2:fc:5d:5e:77:8e:dc:d9:c3:d7:d8:5d:d5:22:47:ce:04:37: 33:02:01:76:49:ae:07:60:40:d1:ed:c6:58:58:14:eb:51:5e: 85:05:e1:35:a9:bf:c1:d5:7e:2e:e6:99:ba:f6:1a:3e:ad:05: d2:a1:c9:3b:de:46:c8:e0:c7:f7:ef:a4:d2:54:72:41:24:f2: 37:1e:ff:96:a1:e5:74:5a:b2:39:44:3c:59:f7:8a:45:9f:10: 97:87:82:a5:9e:ec:31:a1:10:3a:ca:20:81:ab:b5:18:80:20: c1:c7:62:41 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtir6CUcZm/URRULRIOJw9gMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiNGQ4YzQxZTEyMmM4ODFkOTM2ZDkxZDViMDJkYmQ4NmEy ZTcwYTUwHhcNMjUxMjI4MDIwMDM1WhcNMjUxMjI5MDIwMDM1WjAzMTEwLwYDVQQD Eyg5NjBlOTJmZjkwYzVhZTEyZDMzNjI0Y2Y3NmJjZTdlMWFmNDc5NTA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAijfumnBBcmrn1GCd+mdtwJy8trnL dWDbm2uG7EJHH4Lt3rlrISr/Ueq8lKivMKnwcJ/nryrTlACT8kB42Ah9oHLJmttp NT+NcC371dbwTQwtYog6zJFBFv1VAZPpdo0YKEM7p1W4bmAhm9qoV3aERVjuvWPj 6ABNtA2VvF3Aroz03Q4og15lXPYnAxxp9I9u9LLZqgDOhrjUe+CStv89fM10UWhJ LLtrnPF0LvzsTx3jR55NkJgnLsyXcoiVBwFRi7hr3Xm0yDLleBlF1gEmjYa2uZHo 7x6GifdvfEKFSuRBxaAYlMdBR4dJ31L9RfsgFlGrYMWCYtMT6WzyhV3LdwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJYOkv+Qxa4S0zYkz3a85+GvR5UIMB8GA1UdIwQY MBaAFMtNjEHhIsiB2TbZHVsC29hqLnClMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveTAyTVFlRWl5SUhaTnRrZFd3TGIyR291Y0tVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9hOTEzMWMtODJkMi00MWI3LTllMjAt MTM2OTYxOTdkM2I2LzEveTAyTVFlRWl5SUhaTnRrZFd3TGIyR291Y0tVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny9hOTEzMWMtODJkMi00MWI3LTllMjAtMTM2OTYxOTdkM2I2 LzEveTAyTVFlRWl5SUhaTnRrZFd3TGIyR291Y0tVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAANeqyfWL 34lg5YKsYlhzP15HQMTTxP22txHUm2oWi6Uf/6f78hTW9NMGyiyQbaOiJxk8sk3+ N2Svn4UYB2fXUw0DvI2QiizeVlEPA9MkSdUvvHhltC+e4NREHZm60A/6hSRxNTpX 3D2L4BIQcnhKKa1fvJjRnETUkgQ6eUcLeoN5ESTSnL2wvdc3DwvGdhOnsvxdXneO 3NnD19hd1SJHzgQ3MwIBdkmuB2BA0e3GWFgU61FehQXhNam/wdV+LuaZuvYaPq0F 0qHJO95GyODH9++k0lRyQSTyNx7/lqHldFqyOUQ8WfeKRZ8Ql4eCpZ7sMaEQOsog gau1GIAgwcdiQQ== -----END CERTIFICATE-----Generated at Sun Dec 28 07:29:18 2025 by rpki-client