This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/51bfd9-7ffb-4159-9ed5-3a5fecacd49a/1/y0JLQMH4QIT41A8rncvh4fkWrz4.mft File: y0JLQMH4QIT41A8rncvh4fkWrz4.mft (raw, json) Hash identifier: P2oAFLZv3lo8J/HjduDQMLsjnvoT5JVU/ZD1AR0jsKE= Subject key identifier: DE:43:69:17:E0:EC:37:16:5D:07:14:3F:5A:F9:65:6A:0C:F6:62:77 Authority key identifier: CB:42:4B:40:C1:F8:40:84:F8:D4:0F:2B:9D:CB:E1:E1:F9:16:AF:3E Certificate issuer: /CN=cb424b40c1f84084f8d40f2b9dcbe1e1f916af3e Certificate serial: 019B3D9068DFEC38F2429FA3BF8ECF430D2C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y0JLQMH4QIT41A8rncvh4fkWrz4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/51bfd9-7ffb-4159-9ed5-3a5fecacd49a/1/y0JLQMH4QIT41A8rncvh4fkWrz4.mft Manifest number: 08C0 Signing time: Sat 20 Dec 2025 21:00:32 +0000 Manifest this update: Sat 20 Dec 2025 21:00:32 +0000 Manifest next update: Sun 21 Dec 2025 21:00:32 +0000 Files and hashes: 1: V9bu_0z7-vke15TqRAacNobtW_w.roa (hash: AcTyYpjmVQYslHpVhDjOI3OS/nx5PavwBhDkpmqXVeI=) 2: y0JLQMH4QIT41A8rncvh4fkWrz4.crl (hash: Vub0tbjsioHC428Eo1LzaEhEDmvfcDLSdzUCsrJKIR0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/51bfd9-7ffb-4159-9ed5-3a5fecacd49a/1/y0JLQMH4QIT41A8rncvh4fkWrz4.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/51bfd9-7ffb-4159-9ed5-3a5fecacd49a/1/y0JLQMH4QIT41A8rncvh4fkWrz4.mft rsync://rpki.ripe.net/repository/DEFAULT/y0JLQMH4QIT41A8rncvh4fkWrz4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 21:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:90:68:df:ec:38:f2:42:9f:a3:bf:8e:cf:43:0d:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb424b40c1f84084f8d40f2b9dcbe1e1f916af3e Validity Not Before: Dec 20 21:00:32 2025 GMT Not After : Dec 21 21:00:32 2025 GMT Subject: CN=de436917e0ec37165d07143f5af9656a0cf66277 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:85:60:99:b4:4d:d1:f5:68:8d:72:df:13:a2: 54:7f:37:0b:25:66:0e:0c:55:fa:a5:4f:b3:24:57: 96:a4:1b:93:7f:9f:a4:0d:8c:b6:92:da:d2:b6:55: 22:61:d5:3b:c9:e3:cb:98:de:52:a2:f1:55:95:0b: 46:f6:25:86:bc:2b:56:53:56:1f:ec:50:ca:2a:53: cc:4f:68:d4:9d:1f:86:ae:72:e5:46:85:cc:0b:7d: 7a:44:47:e1:b1:55:d1:5e:47:98:11:87:5a:94:1a: eb:60:c9:da:f7:24:5a:cc:0b:73:cd:8f:0f:af:f6: b0:f2:10:62:f1:e0:57:2a:32:71:97:c1:24:41:d5: 3f:62:9d:c3:df:bf:12:1e:9a:83:ec:a1:97:53:57: 5d:34:4e:e4:22:fd:dc:4d:3f:4e:a5:dc:d4:33:cd: f6:8b:ad:e8:96:b4:ad:6e:ed:1c:08:fb:f4:c4:39: 2b:71:83:43:4b:59:33:47:15:f2:0e:44:1e:d7:7c: 24:e2:d1:40:c5:35:a9:82:90:1e:fa:d6:94:20:8b: ea:e6:33:b6:1f:1d:78:43:5c:0d:6f:01:b8:a8:81: c3:04:a6:41:79:4a:4c:a1:49:46:6e:49:95:b9:71: 17:5f:47:f9:f0:a8:c8:9c:4a:86:6c:e7:b6:dd:82: 5c:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:43:69:17:E0:EC:37:16:5D:07:14:3F:5A:F9:65:6A:0C:F6:62:77 X509v3 Authority Key Identifier: keyid:CB:42:4B:40:C1:F8:40:84:F8:D4:0F:2B:9D:CB:E1:E1:F9:16:AF:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y0JLQMH4QIT41A8rncvh4fkWrz4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/51bfd9-7ffb-4159-9ed5-3a5fecacd49a/1/y0JLQMH4QIT41A8rncvh4fkWrz4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/51bfd9-7ffb-4159-9ed5-3a5fecacd49a/1/y0JLQMH4QIT41A8rncvh4fkWrz4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:f8:cb:13:79:48:81:d2:78:4d:d2:fe:ba:e4:f1:68:ab:b7: 49:89:00:fc:37:c8:56:21:a8:16:81:2e:dc:64:d7:31:23:cf: ce:21:be:81:63:d1:57:3b:01:c0:e2:1e:e1:ef:59:3d:da:e6: 89:c7:b8:9a:c5:79:5a:62:3d:48:55:6d:ea:87:6b:10:99:8d: af:39:cd:ee:fa:59:13:3e:ae:6b:5c:0e:77:66:7d:e6:bd:f8: 83:ef:07:16:26:62:ca:b5:19:2f:72:a2:3a:6d:43:11:e4:48: 29:af:61:72:dd:91:fa:01:9a:84:16:aa:c9:90:77:78:a1:bb: eb:b9:cf:59:f4:6d:48:bb:cd:0c:46:1f:20:22:24:20:0f:cb: 41:49:57:c0:64:47:de:85:e1:d8:a0:32:18:d2:e6:28:19:12: ac:22:e5:bd:64:82:de:04:ae:2b:75:80:87:c8:b1:54:cb:a1: 6f:b3:e2:99:83:2f:53:e4:89:b5:84:f6:12:1b:fe:98:4a:7f: a0:b1:13:5f:5a:61:49:d5:08:a2:a3:97:00:d9:0d:d2:af:f6: ad:d8:db:d4:12:c3:cf:5d:b5:be:cf:f7:2b:15:2e:36:c8:02: 28:cd:86:77:ec:ed:f7:b5:bb:a2:a5:e7:4f:e6:d6:9a:78:10: 36:ff:bb:dc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9kGjf7DjyQp+jv47PQw0sMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiNDI0YjQwYzFmODQwODRmOGQ0MGYyYjlkY2JlMWUxZjkx NmFmM2UwHhcNMjUxMjIwMjEwMDMyWhcNMjUxMjIxMjEwMDMyWjAzMTEwLwYDVQQD EyhkZTQzNjkxN2UwZWMzNzE2NWQwNzE0M2Y1YWY5NjU2YTBjZjY2Mjc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlYVgmbRN0fVojXLfE6JUfzcLJWYO DFX6pU+zJFeWpBuTf5+kDYy2ktrStlUiYdU7yePLmN5SovFVlQtG9iWGvCtWU1Yf 7FDKKlPMT2jUnR+GrnLlRoXMC316REfhsVXRXkeYEYdalBrrYMna9yRazAtzzY8P r/aw8hBi8eBXKjJxl8EkQdU/Yp3D378SHpqD7KGXU1ddNE7kIv3cTT9OpdzUM832 i63olrStbu0cCPv0xDkrcYNDS1kzRxXyDkQe13wk4tFAxTWpgpAe+taUIIvq5jO2 Hx14Q1wNbwG4qIHDBKZBeUpMoUlGbkmVuXEXX0f58KjInEqGbOe23YJc6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN5DaRfg7DcWXQcUP1r5ZWoM9mJ3MB8GA1UdIwQY MBaAFMtCS0DB+ECE+NQPK53L4eH5Fq8+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveTBKTFFNSDRRSVQ0MUE4cm5jdmg0ZmtXcno0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS81MWJmZDktN2ZmYi00MTU5LTllZDUt M2E1ZmVjYWNkNDlhLzEveTBKTFFNSDRRSVQ0MUE4cm5jdmg0ZmtXcno0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS81MWJmZDktN2ZmYi00MTU5LTllZDUtM2E1ZmVjYWNkNDlh LzEveTBKTFFNSDRRSVQ0MUE4cm5jdmg0ZmtXcno0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVfjLE3lI gdJ4TdL+uuTxaKu3SYkA/DfIViGoFoEu3GTXMSPPziG+gWPRVzsBwOIe4e9ZPdrm ice4msV5WmI9SFVt6odrEJmNrznN7vpZEz6ua1wOd2Z95r34g+8HFiZiyrUZL3Ki Om1DEeRIKa9hct2R+gGahBaqyZB3eKG767nPWfRtSLvNDEYfICIkIA/LQUlXwGRH 3oXh2KAyGNLmKBkSrCLlvWSC3gSuK3WAh8ixVMuhb7PimYMvU+SJtYT2Ehv+mEp/ oLETX1phSdUIoqOXANkN0q/2rdjb1BLDz121vs/3KxUuNsgCKM2Gd+zt97W7oqXn T+bWmngQNv+73A== -----END CERTIFICATE-----Generated at Sun Dec 21 06:43:04 2025 by rpki-client