This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/57bf89-fe3b-4c21-8ffb-e8754d005ebe/1/y2RbwP24YmvOLAQlxAh7VOFQ04Y.mft File: y2RbwP24YmvOLAQlxAh7VOFQ04Y.mft (raw, json) Hash identifier: JLtBaFz2VznUUDT+CfMT6nzcrYW1LsoIl5mJwrdkuDE= Subject key identifier: 1A:AC:86:1A:E5:0E:E9:D9:24:DF:D8:62:4E:FE:05:80:D9:A5:C7:25 Authority key identifier: CB:64:5B:C0:FD:B8:62:6B:CE:2C:04:25:C4:08:7B:54:E1:50:D3:86 Certificate issuer: /CN=cb645bc0fdb8626bce2c0425c4087b54e150d386 Certificate serial: 019B544FD85D66707B6C2AB1807C93F6A9BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y2RbwP24YmvOLAQlxAh7VOFQ04Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/57bf89-fe3b-4c21-8ffb-e8754d005ebe/1/y2RbwP24YmvOLAQlxAh7VOFQ04Y.mft Manifest number: 1333 Signing time: Thu 25 Dec 2025 07:01:17 +0000 Manifest this update: Thu 25 Dec 2025 07:01:17 +0000 Manifest next update: Fri 26 Dec 2025 07:01:17 +0000 Files and hashes: 1: nPtNOVhjTVbNoPzqUJGa-Eqnb0Y.roa (hash: Yuz9f1rxV7S4atM+GycUQVhSQinvjc3oT1lXV1zOVuE=) 2: y2RbwP24YmvOLAQlxAh7VOFQ04Y.crl (hash: cOOMjasu/xDM9XkHbPD/YxT1TEEBE1HeOx/qBEi2rZ8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/57bf89-fe3b-4c21-8ffb-e8754d005ebe/1/y2RbwP24YmvOLAQlxAh7VOFQ04Y.crl rsync://rpki.ripe.net/repository/DEFAULT/64/57bf89-fe3b-4c21-8ffb-e8754d005ebe/1/y2RbwP24YmvOLAQlxAh7VOFQ04Y.mft rsync://rpki.ripe.net/repository/DEFAULT/y2RbwP24YmvOLAQlxAh7VOFQ04Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 07:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:54:4f:d8:5d:66:70:7b:6c:2a:b1:80:7c:93:f6:a9:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb645bc0fdb8626bce2c0425c4087b54e150d386 Validity Not Before: Dec 25 07:01:17 2025 GMT Not After : Dec 26 07:01:17 2025 GMT Subject: CN=1aac861ae50ee9d924dfd8624efe0580d9a5c725 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:15:bc:d2:72:ee:a5:a9:38:7e:cb:9f:b2:15: 25:61:92:0f:75:7f:4d:c4:c8:5a:1a:99:dc:bb:ff: 6a:c0:a7:3a:c4:da:20:3a:93:0a:0e:e3:30:26:e0: 0f:4b:0b:50:e4:63:ae:cf:62:e2:2f:b9:42:80:09: 17:10:b0:2e:8a:f3:50:29:64:0b:bd:78:0f:1d:40: 8d:36:e6:17:86:5c:93:c3:5d:d1:cb:c3:26:c7:d0: 15:03:33:10:2f:aa:6e:ee:6b:2f:cd:02:96:21:30: 4a:82:0c:66:69:b1:12:7a:0b:21:37:47:06:0b:37: 12:83:a1:6a:0f:ee:68:71:ef:8f:86:97:f7:0c:9f: 41:18:88:d6:6b:65:34:03:f6:0d:ed:ee:47:95:b6: 59:d5:49:59:d0:49:e4:1e:6a:7c:ac:a1:49:06:8d: c0:9e:d5:d6:ce:f2:46:78:aa:f4:b8:52:06:9a:5c: 81:0e:7f:11:11:0a:82:6f:f2:79:05:94:87:67:13: 91:ce:e8:3f:df:08:5c:16:c4:02:27:66:36:7e:6b: 03:88:10:76:18:3a:20:3e:86:e1:de:f2:6b:de:8c: 8d:be:41:bf:b2:1a:7c:64:51:b2:d4:b1:57:ba:c2: cf:ee:24:cc:8c:2d:4d:0e:8d:88:43:c1:ce:94:33: 00:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:AC:86:1A:E5:0E:E9:D9:24:DF:D8:62:4E:FE:05:80:D9:A5:C7:25 X509v3 Authority Key Identifier: keyid:CB:64:5B:C0:FD:B8:62:6B:CE:2C:04:25:C4:08:7B:54:E1:50:D3:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y2RbwP24YmvOLAQlxAh7VOFQ04Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/57bf89-fe3b-4c21-8ffb-e8754d005ebe/1/y2RbwP24YmvOLAQlxAh7VOFQ04Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/57bf89-fe3b-4c21-8ffb-e8754d005ebe/1/y2RbwP24YmvOLAQlxAh7VOFQ04Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:56:0a:1c:e6:0b:50:f4:29:fd:f1:21:6e:83:79:9c:19:46: a8:66:da:a5:aa:bb:70:17:a0:f0:74:d9:b4:80:7d:9d:e7:60: 17:3c:4f:59:65:49:87:1a:a7:6b:af:94:af:74:5e:52:da:c3: 41:dc:72:3b:d2:c7:d4:ec:95:3c:b0:aa:6a:17:b6:51:52:ba: df:e4:65:a3:5c:7e:a6:9d:42:f8:be:de:97:7c:85:29:61:e0: 60:33:be:9b:be:ee:0d:c9:84:8c:4d:bb:d5:7b:20:6b:aa:71: e8:5b:c9:93:fb:a5:42:56:3d:71:a9:18:67:8a:5f:73:1e:ee: b2:35:01:c5:26:42:8f:d8:75:9f:4c:a0:0b:78:52:dd:31:22: e7:81:94:8a:06:42:98:1e:0c:1a:da:05:e1:10:26:d7:3c:9a: 33:d6:57:4d:05:64:99:ec:ad:45:12:35:b8:53:a3:55:02:79: 86:93:9e:ae:76:2c:cd:6b:bc:d8:3b:b7:27:ce:dc:0a:b1:fd: 5a:79:98:41:cb:82:4a:e2:fe:66:32:f8:be:10:b3:db:ee:b0: b9:a0:63:5c:d9:d5:68:56:75:7b:73:e1:09:40:54:0a:f5:16: 07:5c:1a:33:07:30:2e:5e:4f:0c:51:30:d2:d3:8e:f8:0f:af: 95:a8:f3:0c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtUT9hdZnB7bCqxgHyT9qm+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiNjQ1YmMwZmRiODYyNmJjZTJjMDQyNWM0MDg3YjU0ZTE1 MGQzODYwHhcNMjUxMjI1MDcwMTE3WhcNMjUxMjI2MDcwMTE3WjAzMTEwLwYDVQQD EygxYWFjODYxYWU1MGVlOWQ5MjRkZmQ4NjI0ZWZlMDU4MGQ5YTVjNzI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlhW80nLupak4fsufshUlYZIPdX9N xMhaGpncu/9qwKc6xNogOpMKDuMwJuAPSwtQ5GOuz2LiL7lCgAkXELAuivNQKWQL vXgPHUCNNuYXhlyTw13Ry8Mmx9AVAzMQL6pu7msvzQKWITBKggxmabESegshN0cG CzcSg6FqD+5oce+Phpf3DJ9BGIjWa2U0A/YN7e5HlbZZ1UlZ0EnkHmp8rKFJBo3A ntXWzvJGeKr0uFIGmlyBDn8REQqCb/J5BZSHZxORzug/3whcFsQCJ2Y2fmsDiBB2 GDogPobh3vJr3oyNvkG/shp8ZFGy1LFXusLP7iTMjC1NDo2IQ8HOlDMAIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBqshhrlDunZJN/YYk7+BYDZpcclMB8GA1UdIwQY MBaAFMtkW8D9uGJrziwEJcQIe1ThUNOGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveTJSYndQMjRZbXZPTEFRbHhBaDdWT0ZRMDRZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC81N2JmODktZmUzYi00YzIxLThmZmIt ZTg3NTRkMDA1ZWJlLzEveTJSYndQMjRZbXZPTEFRbHhBaDdWT0ZRMDRZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC81N2JmODktZmUzYi00YzIxLThmZmItZTg3NTRkMDA1ZWJl LzEveTJSYndQMjRZbXZPTEFRbHhBaDdWT0ZRMDRZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACVYKHOYL UPQp/fEhboN5nBlGqGbapaq7cBeg8HTZtIB9nedgFzxPWWVJhxqna6+Ur3ReUtrD QdxyO9LH1OyVPLCqahe2UVK63+Rlo1x+pp1C+L7el3yFKWHgYDO+m77uDcmEjE27 1Xsga6px6FvJk/ulQlY9cakYZ4pfcx7usjUBxSZCj9h1n0ygC3hS3TEi54GUigZC mB4MGtoF4RAm1zyaM9ZXTQVkmeytRRI1uFOjVQJ5hpOernYszWu82Du3J87cCrH9 WnmYQcuCSuL+ZjL4vhCz2+6wuaBjXNnVaFZ1e3PhCUBUCvUWB1waMwcwLl5PDFEw 0tOO+A+vlajzDA== -----END CERTIFICATE-----Generated at Thu Dec 25 14:31:15 2025 by rpki-client