This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/dadb4b-14f3-42fa-95b7-f85cc5747fbf/1/y0-6CRkLdoSf_z0m1YB5DlT6wuM.mft File: y0-6CRkLdoSf_z0m1YB5DlT6wuM.mft (raw, json) Hash identifier: U+dLt0QjigwGLFq1CiiA8QzLvKp3Rrt/k/XNbhGQj2c= Subject key identifier: 7D:97:B2:82:FD:B5:D8:16:87:C9:81:F4:29:0E:20:D6:F3:29:90:82 Authority key identifier: CB:4F:BA:09:19:0B:76:84:9F:FF:3D:26:D5:80:79:0E:54:FA:C2:E3 Certificate issuer: /CN=cb4fba09190b76849fff3d26d580790e54fac2e3 Certificate serial: 019B3AFDF00B9C5E66106B978682F59EF589 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y0-6CRkLdoSf_z0m1YB5DlT6wuM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/dadb4b-14f3-42fa-95b7-f85cc5747fbf/1/y0-6CRkLdoSf_z0m1YB5DlT6wuM.mft Manifest number: 1787 Signing time: Sat 20 Dec 2025 09:01:19 +0000 Manifest this update: Sat 20 Dec 2025 09:01:19 +0000 Manifest next update: Sun 21 Dec 2025 09:01:19 +0000 Files and hashes: 1: A7rB6GvieHic3egdiMZfNGfq2m0.roa (hash: HS3mNdYCRI3MKIsdLKnGS/MBr6fXeWlgGEcIpC1Xugc=) 2: y0-6CRkLdoSf_z0m1YB5DlT6wuM.crl (hash: rVEjxXa1FzkOtBzfOy9Hg2A0HkkhmnPcwP6MTPqoysg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/dadb4b-14f3-42fa-95b7-f85cc5747fbf/1/y0-6CRkLdoSf_z0m1YB5DlT6wuM.crl rsync://rpki.ripe.net/repository/DEFAULT/50/dadb4b-14f3-42fa-95b7-f85cc5747fbf/1/y0-6CRkLdoSf_z0m1YB5DlT6wuM.mft rsync://rpki.ripe.net/repository/DEFAULT/y0-6CRkLdoSf_z0m1YB5DlT6wuM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:fd:f0:0b:9c:5e:66:10:6b:97:86:82:f5:9e:f5:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb4fba09190b76849fff3d26d580790e54fac2e3 Validity Not Before: Dec 20 09:01:19 2025 GMT Not After : Dec 21 09:01:19 2025 GMT Subject: CN=7d97b282fdb5d81687c981f4290e20d6f3299082 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:b3:e9:f1:58:8e:e4:a4:ad:08:5e:12:63:3f: a9:c8:07:6b:c1:dd:32:77:e5:a7:64:20:84:64:b4: 5c:08:3c:3b:a2:32:31:eb:f7:cc:41:7a:fc:05:73: 08:83:7d:79:4a:ac:34:a0:f7:00:31:3d:0d:ba:5f: af:85:71:76:21:4a:66:f7:f5:09:98:60:f5:b1:cf: b7:7b:58:a4:00:81:90:2a:c3:12:5e:c3:2a:27:f0: 49:95:55:75:c2:d9:53:cb:8b:d9:ec:01:27:71:09: 3c:d1:e3:d7:30:4c:59:39:71:4e:b9:4b:e8:18:5a: c4:8e:e5:c0:d8:aa:43:2b:5f:9e:94:78:7d:66:dd: 6d:09:f1:ae:c8:34:07:37:a1:36:73:97:90:b8:ac: bb:98:81:50:9d:73:0f:67:48:3c:5e:04:96:4c:7f: 55:e3:36:40:ab:16:e0:02:0f:4a:51:e0:d7:51:3d: 36:0b:25:93:2d:6d:86:53:c6:10:b2:a0:b0:33:93: 3c:c5:c1:3d:56:b4:f6:81:ff:43:2d:61:05:7c:e7: 03:ba:8f:78:4d:50:30:35:c3:20:24:bf:99:69:fb: 2a:de:74:8e:40:6e:53:ba:cb:55:63:88:41:99:9e: 17:65:96:d2:ee:dc:4a:d4:8f:e3:67:b2:43:b2:34: 2e:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:97:B2:82:FD:B5:D8:16:87:C9:81:F4:29:0E:20:D6:F3:29:90:82 X509v3 Authority Key Identifier: keyid:CB:4F:BA:09:19:0B:76:84:9F:FF:3D:26:D5:80:79:0E:54:FA:C2:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y0-6CRkLdoSf_z0m1YB5DlT6wuM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/dadb4b-14f3-42fa-95b7-f85cc5747fbf/1/y0-6CRkLdoSf_z0m1YB5DlT6wuM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/50/dadb4b-14f3-42fa-95b7-f85cc5747fbf/1/y0-6CRkLdoSf_z0m1YB5DlT6wuM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:51:40:e8:39:81:57:08:4f:8a:05:f6:73:aa:e6:2c:36:01: 0a:05:ae:98:08:48:99:06:a3:8f:5b:40:fe:39:aa:91:14:90: aa:a2:2d:fa:4a:a6:f4:87:41:a2:e0:5d:da:8c:b8:08:7f:4a: 0b:24:77:40:52:5e:96:60:0f:4e:db:6e:69:3c:dc:3f:4e:02: c1:f1:41:0b:80:8c:be:fe:4e:7c:dd:bf:02:73:e3:61:02:3d: 88:fa:74:cd:4b:df:88:33:29:8d:5b:c8:68:f9:61:ed:ba:7e: dd:5f:50:92:21:1e:fb:d0:60:d1:6a:4c:3d:93:bc:39:ce:b5: e8:89:c3:f9:55:83:4a:28:fd:35:e6:19:28:ca:8d:60:1e:15: 74:36:1a:f8:bb:0c:d0:81:a8:c9:45:5e:57:70:1a:54:16:b4: 94:9e:0c:e3:4a:52:39:d9:77:b0:0e:e1:d1:31:21:1b:75:08: a9:67:2f:09:c5:ee:22:63:87:07:ad:ea:23:7b:5b:b2:2d:80: c7:17:81:ed:20:99:ad:4f:9b:d9:b2:27:f0:9b:a7:65:ae:18: 32:ad:94:81:a5:01:4d:87:3d:33:fe:60:a9:74:e4:16:89:44: a3:b2:c8:88:f8:20:cf:d4:71:e5:53:92:1c:e7:fc:5e:08:00: 5a:7c:6b:41 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6/fALnF5mEGuXhoL1nvWJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiNGZiYTA5MTkwYjc2ODQ5ZmZmM2QyNmQ1ODA3OTBlNTRm YWMyZTMwHhcNMjUxMjIwMDkwMTE5WhcNMjUxMjIxMDkwMTE5WjAzMTEwLwYDVQQD Eyg3ZDk3YjI4MmZkYjVkODE2ODdjOTgxZjQyOTBlMjBkNmYzMjk5MDgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA47Pp8ViO5KStCF4SYz+pyAdrwd0y d+WnZCCEZLRcCDw7ojIx6/fMQXr8BXMIg315Sqw0oPcAMT0Nul+vhXF2IUpm9/UJ mGD1sc+3e1ikAIGQKsMSXsMqJ/BJlVV1wtlTy4vZ7AEncQk80ePXMExZOXFOuUvo GFrEjuXA2KpDK1+elHh9Zt1tCfGuyDQHN6E2c5eQuKy7mIFQnXMPZ0g8XgSWTH9V 4zZAqxbgAg9KUeDXUT02CyWTLW2GU8YQsqCwM5M8xcE9VrT2gf9DLWEFfOcDuo94 TVAwNcMgJL+Zafsq3nSOQG5TustVY4hBmZ4XZZbS7txK1I/jZ7JDsjQupQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH2XsoL9tdgWh8mB9CkOINbzKZCCMB8GA1UdIwQY MBaAFMtPugkZC3aEn/89JtWAeQ5U+sLjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveTAtNkNSa0xkb1NmX3owbTFZQjVEbFQ2d3VNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC9kYWRiNGItMTRmMy00MmZhLTk1Yjct Zjg1Y2M1NzQ3ZmJmLzEveTAtNkNSa0xkb1NmX3owbTFZQjVEbFQ2d3VNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MC9kYWRiNGItMTRmMy00MmZhLTk1YjctZjg1Y2M1NzQ3ZmJm LzEveTAtNkNSa0xkb1NmX3owbTFZQjVEbFQ2d3VNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWlFA6DmB VwhPigX2c6rmLDYBCgWumAhImQajj1tA/jmqkRSQqqIt+kqm9IdBouBd2oy4CH9K CyR3QFJelmAPTttuaTzcP04CwfFBC4CMvv5OfN2/AnPjYQI9iPp0zUvfiDMpjVvI aPlh7bp+3V9QkiEe+9Bg0WpMPZO8Oc616InD+VWDSij9NeYZKMqNYB4VdDYa+LsM 0IGoyUVeV3AaVBa0lJ4M40pSOdl3sA7h0TEhG3UIqWcvCcXuImOHB63qI3tbsi2A xxeB7SCZrU+b2bIn8JunZa4YMq2UgaUBTYc9M/5gqXTkFolEo7LIiPggz9Rx5VOS HOf8XggAWnxrQQ== -----END CERTIFICATE-----Generated at Sat Dec 20 18:51:33 2025 by rpki-client