This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/7f0c24-440a-4ff7-a0c8-256339736c2b/1/y7fCC1WkcNq4kvTJHqABC9HDnzQ.mft File: y7fCC1WkcNq4kvTJHqABC9HDnzQ.mft (raw, json) Hash identifier: 7+OmBC5Chj1KgMf00u6HLtrK28ZAXSzwiuggWeK/An8= Subject key identifier: A6:2A:C7:0A:9C:AC:7E:0A:5B:B8:1F:9F:F2:2C:B7:FF:21:2A:41:E3 Authority key identifier: CB:B7:C2:0B:55:A4:70:DA:B8:92:F4:C9:1E:A0:01:0B:D1:C3:9F:34 Certificate issuer: /CN=cbb7c20b55a470dab892f4c91ea0010bd1c39f34 Certificate serial: 019B3EA36B46639F539FFD485EBF3FACF91B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y7fCC1WkcNq4kvTJHqABC9HDnzQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/7f0c24-440a-4ff7-a0c8-256339736c2b/1/y7fCC1WkcNq4kvTJHqABC9HDnzQ.mft Manifest number: 1076 Signing time: Sun 21 Dec 2025 02:00:55 +0000 Manifest this update: Sun 21 Dec 2025 02:00:55 +0000 Manifest next update: Mon 22 Dec 2025 02:00:55 +0000 Files and hashes: 1: 09lPg3280N3ZZ86hKfoO1uBHQzU.roa (hash: nnylAsJyHM10QSoZPAI37zrHno/gVhQAjT+wCMZWOs0=) 2: H_d5LCU4L3XwGqLNkFDXFN1zy2I.roa (hash: 1Qd4GHmykP1jEc8/694tMFaYEbNeBbde2QJNxgvHfMw=) 3: IjrWIh0jzbH9AGDO-Vviq_eBA4Q.roa (hash: 7jujT2Lsuok7oL2vIrgbVf5j8YwADQ9BWos7sqz0ULQ=) 4: y7fCC1WkcNq4kvTJHqABC9HDnzQ.crl (hash: qmv/TObUyxUdFOzt9nu/JDvfBBM9zpN9+v4BYhMF+K4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/7f0c24-440a-4ff7-a0c8-256339736c2b/1/y7fCC1WkcNq4kvTJHqABC9HDnzQ.crl rsync://rpki.ripe.net/repository/DEFAULT/af/7f0c24-440a-4ff7-a0c8-256339736c2b/1/y7fCC1WkcNq4kvTJHqABC9HDnzQ.mft rsync://rpki.ripe.net/repository/DEFAULT/y7fCC1WkcNq4kvTJHqABC9HDnzQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 02:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:a3:6b:46:63:9f:53:9f:fd:48:5e:bf:3f:ac:f9:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cbb7c20b55a470dab892f4c91ea0010bd1c39f34 Validity Not Before: Dec 21 02:00:55 2025 GMT Not After : Dec 22 02:00:55 2025 GMT Subject: CN=a62ac70a9cac7e0a5bb81f9ff22cb7ff212a41e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:cb:c7:22:c9:47:f5:a8:43:1e:99:93:cf:f4: 40:56:4f:8a:23:71:43:1b:88:9b:55:bf:41:48:2d: a9:0d:1d:82:cd:0d:0a:4f:99:b4:7c:22:df:c3:c6: 1a:94:99:5c:72:b8:44:b3:28:3f:73:74:47:17:42: 90:4c:f2:04:fe:60:d0:8a:d9:e9:a3:37:8e:a7:23: 64:c1:8d:ab:41:b0:3c:c9:ee:a9:29:aa:d9:19:e5: 4a:b4:df:3a:d8:de:94:e0:16:76:4d:15:43:ed:d0: c5:4f:90:2b:bb:aa:ba:ed:18:2a:2e:b2:f1:22:5b: c5:e1:f7:97:09:b1:c1:f9:08:40:b0:92:c7:26:0a: 24:20:be:4d:ab:9c:15:a4:cd:43:d2:c1:3b:da:3e: 91:df:ef:dd:e1:12:b1:5e:4b:01:52:7d:45:41:f0: 6c:fb:22:a2:7a:69:3c:eb:59:ab:9a:6a:38:51:df: 64:3a:a7:35:0c:9e:4c:67:36:da:f6:bc:6c:d1:b6: 9c:0d:0b:1d:29:30:dd:2e:da:d5:fc:b4:49:00:72: 9e:ec:0e:67:d9:8d:46:68:05:b5:68:0a:56:c5:ac: 52:87:a7:89:60:59:17:c5:84:04:82:2e:48:28:d9: 0f:8e:4f:81:48:dd:c7:89:6b:09:21:f6:b1:d7:5c: 42:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:2A:C7:0A:9C:AC:7E:0A:5B:B8:1F:9F:F2:2C:B7:FF:21:2A:41:E3 X509v3 Authority Key Identifier: keyid:CB:B7:C2:0B:55:A4:70:DA:B8:92:F4:C9:1E:A0:01:0B:D1:C3:9F:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y7fCC1WkcNq4kvTJHqABC9HDnzQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/7f0c24-440a-4ff7-a0c8-256339736c2b/1/y7fCC1WkcNq4kvTJHqABC9HDnzQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/af/7f0c24-440a-4ff7-a0c8-256339736c2b/1/y7fCC1WkcNq4kvTJHqABC9HDnzQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:4a:f5:17:d8:1f:97:fd:a8:fe:c7:40:2e:09:a0:04:2e:4d: b2:2b:68:f4:93:92:d0:82:3b:03:6f:f5:6d:9c:4a:e0:92:e6: 2c:60:1e:71:3c:08:41:b8:9d:93:37:0f:c6:db:46:d6:43:69: b8:a8:4f:19:a8:b7:a5:28:a8:b7:46:37:d5:33:1a:36:2c:c4: de:a1:93:9b:9a:be:c6:ff:10:61:52:3d:75:3d:c0:66:be:a3: 4b:f5:67:24:9e:14:a2:4c:7c:dd:63:9a:72:37:b5:07:be:bb: b9:39:17:7b:a0:7d:7e:f0:b4:f5:81:26:a4:18:99:8e:7a:2a: e5:9d:1e:fb:f0:d1:78:7d:ab:ba:a5:fa:61:16:0e:0f:9e:72: 62:40:66:6e:b9:de:f9:a4:2f:12:68:f5:26:4e:41:0e:8b:ad: 4e:4b:15:c6:84:da:ef:f5:cf:00:7a:a6:45:57:4b:ee:8e:96: 3a:bc:31:33:14:32:62:44:36:1c:16:da:64:06:68:b8:3a:71: 48:15:67:b9:39:2d:36:3c:6e:76:04:0e:82:f5:52:c0:09:9b: e2:5d:db:05:b2:ae:10:f4:c2:fb:74:5e:35:f3:9d:a7:d4:4a: 25:2f:c6:35:16:b2:c9:2f:fb:ef:cb:48:9c:d1:14:f8:13:1d: 5a:e5:9b:f5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+o2tGY59Tn/1IXr8/rPkbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiYjdjMjBiNTVhNDcwZGFiODkyZjRjOTFlYTAwMTBiZDFj MzlmMzQwHhcNMjUxMjIxMDIwMDU1WhcNMjUxMjIyMDIwMDU1WjAzMTEwLwYDVQQD EyhhNjJhYzcwYTljYWM3ZTBhNWJiODFmOWZmMjJjYjdmZjIxMmE0MWUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwMvHIslH9ahDHpmTz/RAVk+KI3FD G4ibVb9BSC2pDR2CzQ0KT5m0fCLfw8YalJlccrhEsyg/c3RHF0KQTPIE/mDQitnp ozeOpyNkwY2rQbA8ye6pKarZGeVKtN862N6U4BZ2TRVD7dDFT5Aru6q67RgqLrLx IlvF4feXCbHB+QhAsJLHJgokIL5Nq5wVpM1D0sE72j6R3+/d4RKxXksBUn1FQfBs +yKiemk861mrmmo4Ud9kOqc1DJ5MZzba9rxs0bacDQsdKTDdLtrV/LRJAHKe7A5n 2Y1GaAW1aApWxaxSh6eJYFkXxYQEgi5IKNkPjk+BSN3HiWsJIfax11xCfQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKYqxwqcrH4KW7gfn/Ist/8hKkHjMB8GA1UdIwQY MBaAFMu3wgtVpHDauJL0yR6gAQvRw580MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveTdmQ0MxV2tjTnE0a3ZUSkhxQUJDOUhEbnpRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi83ZjBjMjQtNDQwYS00ZmY3LWEwYzgt MjU2MzM5NzM2YzJiLzEveTdmQ0MxV2tjTnE0a3ZUSkhxQUJDOUhEbnpRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZi83ZjBjMjQtNDQwYS00ZmY3LWEwYzgtMjU2MzM5NzM2YzJi LzEveTdmQ0MxV2tjTnE0a3ZUSkhxQUJDOUhEbnpRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhkr1F9gf l/2o/sdALgmgBC5Nsito9JOS0II7A2/1bZxK4JLmLGAecTwIQbidkzcPxttG1kNp uKhPGai3pSiot0Y31TMaNizE3qGTm5q+xv8QYVI9dT3AZr6jS/VnJJ4Uokx83WOa cje1B767uTkXe6B9fvC09YEmpBiZjnoq5Z0e+/DReH2ruqX6YRYOD55yYkBmbrne +aQvEmj1Jk5BDoutTksVxoTa7/XPAHqmRVdL7o6WOrwxMxQyYkQ2HBbaZAZouDpx SBVnuTktNjxudgQOgvVSwAmb4l3bBbKuEPTC+3ReNfOdp9RKJS/GNRayyS/778tI nNEU+BMdWuWb9Q== -----END CERTIFICATE-----Generated at Sun Dec 21 10:35:03 2025 by rpki-client