This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/0748bb-e7e2-4268-b79c-8e652940a09d/1/y_FtyaS1vU0MQnioXAhVkwIL6jE.mft File: y_FtyaS1vU0MQnioXAhVkwIL6jE.mft (raw, json) Hash identifier: Pt4HUY4suvOInc0nrboj8oZBXgW4rlwOvfAwFCQksSM= Subject key identifier: B7:9E:FA:C5:C5:B4:62:14:6A:04:07:A8:B1:A0:0B:C0:21:F3:DE:2F Authority key identifier: CB:F1:6D:C9:A4:B5:BD:4D:0C:42:78:A8:5C:08:55:93:02:0B:EA:31 Certificate issuer: /CN=cbf16dc9a4b5bd4d0c4278a85c085593020bea31 Certificate serial: 019B36B2E9F1E7E38F6A0DD7416E570DC341 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y_FtyaS1vU0MQnioXAhVkwIL6jE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/0748bb-e7e2-4268-b79c-8e652940a09d/1/y_FtyaS1vU0MQnioXAhVkwIL6jE.mft Manifest number: 1417 Signing time: Fri 19 Dec 2025 13:00:53 +0000 Manifest this update: Fri 19 Dec 2025 13:00:53 +0000 Manifest next update: Sat 20 Dec 2025 13:00:53 +0000 Files and hashes: 1: uEzNWyvL5-zi2wG6wisIZYvIGW8.roa (hash: 74OlC+KGFIeOMFiETr1Upq5Oacdq7NEmnxm00bM9o0w=) 2: y_FtyaS1vU0MQnioXAhVkwIL6jE.crl (hash: ZYFjoU9S2BERgOr95qoD13DwdoJ+PFu2HBpqvrH/mqU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/0748bb-e7e2-4268-b79c-8e652940a09d/1/y_FtyaS1vU0MQnioXAhVkwIL6jE.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/0748bb-e7e2-4268-b79c-8e652940a09d/1/y_FtyaS1vU0MQnioXAhVkwIL6jE.mft rsync://rpki.ripe.net/repository/DEFAULT/y_FtyaS1vU0MQnioXAhVkwIL6jE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 13:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:b2:e9:f1:e7:e3:8f:6a:0d:d7:41:6e:57:0d:c3:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cbf16dc9a4b5bd4d0c4278a85c085593020bea31 Validity Not Before: Dec 19 13:00:53 2025 GMT Not After : Dec 20 13:00:53 2025 GMT Subject: CN=b79efac5c5b462146a0407a8b1a00bc021f3de2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:95:7d:33:82:31:74:e9:c9:2a:5b:ab:5a:9b: 3f:d1:ec:7a:bf:3b:a9:39:5c:ee:ac:af:8c:aa:2c: e3:0c:b6:c2:36:fd:5d:07:2e:bc:89:e6:97:b0:e6: eb:30:ba:8f:ee:d8:42:38:b5:c5:57:8d:15:05:1a: 88:b5:3a:1c:76:0e:c4:2d:be:5d:89:21:c3:12:92: f6:ca:ce:9c:dd:4f:3a:e3:1f:1e:dc:78:5e:f7:79: 18:5a:32:f6:04:49:45:95:b4:fa:37:c8:aa:bd:21: 94:87:e4:c7:c0:1d:45:b1:5c:a7:3e:6e:f9:01:e5: ef:e1:6b:6b:be:f0:35:aa:3d:98:bf:49:90:3c:9d: 26:d7:41:72:a5:3b:fa:c4:2b:b2:03:22:11:a7:6a: b1:df:5e:67:43:d7:88:4c:a9:2a:6c:b3:89:52:fd: 73:f9:15:33:89:b9:f8:6e:9a:c3:eb:49:f7:c5:04: 2c:94:b8:0d:58:86:df:6f:f4:2e:f2:6a:8e:5d:50: 02:35:83:6d:33:59:24:ca:a9:f8:5d:ff:70:27:1a: 4f:36:df:8c:c1:5a:c8:20:95:77:d9:4c:66:55:86: 25:81:86:50:74:10:3c:b0:33:a2:50:01:44:5e:e3: d3:64:92:c5:2c:10:13:f0:04:ae:27:13:be:2a:35: 7c:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:9E:FA:C5:C5:B4:62:14:6A:04:07:A8:B1:A0:0B:C0:21:F3:DE:2F X509v3 Authority Key Identifier: keyid:CB:F1:6D:C9:A4:B5:BD:4D:0C:42:78:A8:5C:08:55:93:02:0B:EA:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y_FtyaS1vU0MQnioXAhVkwIL6jE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/0748bb-e7e2-4268-b79c-8e652940a09d/1/y_FtyaS1vU0MQnioXAhVkwIL6jE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/0748bb-e7e2-4268-b79c-8e652940a09d/1/y_FtyaS1vU0MQnioXAhVkwIL6jE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:87:93:45:e8:ac:eb:ad:73:ca:7f:ce:84:7b:e2:24:18:34: 78:f9:82:14:f6:d7:7c:b7:df:d7:7c:8d:65:20:de:78:52:6d: 03:e9:56:65:33:15:08:17:54:f6:6d:51:47:b6:a9:ac:2c:b8: 0a:2a:bd:22:d1:17:f8:09:99:b8:28:2b:26:dd:50:b4:87:06: 68:cf:6d:2f:27:c0:bd:b4:f5:59:54:bf:68:48:6e:e1:14:91: 70:00:9a:5b:40:24:e3:e2:6a:fb:6b:9a:1c:7f:b3:eb:61:8d: 79:ed:01:d7:35:86:25:bc:cb:c6:0a:c7:0c:5a:3b:6a:13:20: 2e:32:da:4e:c6:00:ec:bf:1a:63:9f:55:4f:0c:8b:16:52:e0: ba:4b:c6:c5:b8:38:35:aa:12:4b:62:fd:f6:20:0b:a4:36:76: be:be:ae:42:ae:fa:45:46:e9:79:d9:8d:9f:1f:71:e7:41:76: c6:d0:4c:d8:ab:91:fb:1b:c3:49:ad:48:b9:3b:ec:57:81:5b: b8:21:85:bd:69:0b:1b:5a:c3:ca:18:c5:1c:f9:8a:62:8a:3e: 97:59:c6:3c:cd:cc:a9:63:46:b0:13:fe:47:c4:2d:60:be:5a: b0:1e:48:71:00:64:38:b8:d4:c4:7c:e0:da:c5:c3:03:ef:1e: be:d0:be:07 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs2sunx5+OPag3XQW5XDcNBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiZjE2ZGM5YTRiNWJkNGQwYzQyNzhhODVjMDg1NTkzMDIw YmVhMzEwHhcNMjUxMjE5MTMwMDUzWhcNMjUxMjIwMTMwMDUzWjAzMTEwLwYDVQQD EyhiNzllZmFjNWM1YjQ2MjE0NmEwNDA3YThiMWEwMGJjMDIxZjNkZTJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuJV9M4IxdOnJKlurWps/0ex6vzup OVzurK+MqizjDLbCNv1dBy68ieaXsObrMLqP7thCOLXFV40VBRqItTocdg7ELb5d iSHDEpL2ys6c3U864x8e3Hhe93kYWjL2BElFlbT6N8iqvSGUh+THwB1FsVynPm75 AeXv4WtrvvA1qj2Yv0mQPJ0m10FypTv6xCuyAyIRp2qx315nQ9eITKkqbLOJUv1z +RUzibn4bprD60n3xQQslLgNWIbfb/Qu8mqOXVACNYNtM1kkyqn4Xf9wJxpPNt+M wVrIIJV32UxmVYYlgYZQdBA8sDOiUAFEXuPTZJLFLBAT8ASuJxO+KjV8fwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLee+sXFtGIUagQHqLGgC8Ah894vMB8GA1UdIwQY MBaAFMvxbcmktb1NDEJ4qFwIVZMCC+oxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveV9GdHlhUzF2VTBNUW5pb1hBaFZrd0lMNmpFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi8wNzQ4YmItZTdlMi00MjY4LWI3OWMt OGU2NTI5NDBhMDlkLzEveV9GdHlhUzF2VTBNUW5pb1hBaFZrd0lMNmpFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi8wNzQ4YmItZTdlMi00MjY4LWI3OWMtOGU2NTI5NDBhMDlk LzEveV9GdHlhUzF2VTBNUW5pb1hBaFZrd0lMNmpFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASoeTReis 661zyn/OhHviJBg0ePmCFPbXfLff13yNZSDeeFJtA+lWZTMVCBdU9m1RR7aprCy4 Ciq9ItEX+AmZuCgrJt1QtIcGaM9tLyfAvbT1WVS/aEhu4RSRcACaW0Ak4+Jq+2ua HH+z62GNee0B1zWGJbzLxgrHDFo7ahMgLjLaTsYA7L8aY59VTwyLFlLgukvGxbg4 NaoSS2L99iALpDZ2vr6uQq76RUbpedmNnx9x50F2xtBM2KuR+xvDSa1IuTvsV4Fb uCGFvWkLG1rDyhjFHPmKYoo+l1nGPM3MqWNGsBP+R8QtYL5asB5IcQBkOLjUxHzg 2sXDA+8evtC+Bw== -----END CERTIFICATE-----Generated at Fri Dec 19 20:11:41 2025 by rpki-client