This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/68cfc5-2ec6-4b59-b12e-6e36b2f1706b/1/y-PaNYKiKDDsTmdUfnX6O52iCyM.mft File: y-PaNYKiKDDsTmdUfnX6O52iCyM.mft (raw, json) Hash identifier: bQQXvJShULSkuZ37DyTwm5AuL70oQn2tKSxnz4bhTJ8= Subject key identifier: 42:31:0C:01:DD:EB:57:16:95:0C:56:AD:05:5E:15:AB:90:10:1E:37 Authority key identifier: CB:E3:DA:35:82:A2:28:30:EC:4E:67:54:7E:75:FA:3B:9D:A2:0B:23 Certificate issuer: /CN=cbe3da3582a22830ec4e67547e75fa3b9da20b23 Certificate serial: 019B42B7623FCC6371F8BCB96E76D1C678F8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y-PaNYKiKDDsTmdUfnX6O52iCyM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/68cfc5-2ec6-4b59-b12e-6e36b2f1706b/1/y-PaNYKiKDDsTmdUfnX6O52iCyM.mft Manifest number: 099A Signing time: Sun 21 Dec 2025 21:01:13 +0000 Manifest this update: Sun 21 Dec 2025 21:01:13 +0000 Manifest next update: Mon 22 Dec 2025 21:01:13 +0000 Files and hashes: 1: XGSaAvPj_7ZKK3N0e0ECGhx2VrQ.roa (hash: 4J6msExKcBt3FvPoWt2N5Sp5wauv+dD5ByMN6L0xjog=) 2: y-PaNYKiKDDsTmdUfnX6O52iCyM.crl (hash: 1QRsBBtN1TP615d/Q7TwaooqJM5sOo8Vdy2ffVdeO0s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/68cfc5-2ec6-4b59-b12e-6e36b2f1706b/1/y-PaNYKiKDDsTmdUfnX6O52iCyM.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/68cfc5-2ec6-4b59-b12e-6e36b2f1706b/1/y-PaNYKiKDDsTmdUfnX6O52iCyM.mft rsync://rpki.ripe.net/repository/DEFAULT/y-PaNYKiKDDsTmdUfnX6O52iCyM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 21:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:b7:62:3f:cc:63:71:f8:bc:b9:6e:76:d1:c6:78:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cbe3da3582a22830ec4e67547e75fa3b9da20b23 Validity Not Before: Dec 21 21:01:13 2025 GMT Not After : Dec 22 21:01:13 2025 GMT Subject: CN=42310c01ddeb5716950c56ad055e15ab90101e37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:11:ac:89:1d:f2:46:95:11:54:f6:ef:4e:df: 5c:90:fb:50:4a:d3:3e:00:8b:5b:90:e4:eb:9a:f9: 6a:21:4c:49:45:50:db:ab:fc:7d:1c:1d:ab:2c:9d: 7f:a2:16:c3:b1:36:40:7c:bf:8c:eb:e0:f7:63:e0: 72:20:d6:4a:d7:49:d3:80:b6:7a:42:40:07:72:86: d5:cd:18:89:ab:a9:28:67:07:1e:13:5c:dd:9a:a4: 63:a0:62:37:d5:90:8c:c9:ea:48:d2:59:43:41:a2: 10:c4:76:91:41:32:4e:98:60:53:ca:cf:09:25:fe: 94:93:f6:cd:19:b5:43:00:95:a8:fb:86:64:0d:6a: e4:f1:87:85:fd:3b:96:d0:63:c9:0b:7c:c3:7d:f3: 22:45:16:e1:eb:36:5d:50:38:55:f5:fc:d4:ad:79: 9e:7f:87:4f:b3:4d:c2:dd:d4:73:db:b7:e5:97:1b: 4c:03:fd:6a:01:a2:90:9e:ec:19:b9:a7:58:39:60: df:96:9b:63:67:fa:c0:8b:87:2d:ad:3f:5c:8f:c5: 3b:c0:e6:dc:a3:e1:0b:df:13:77:80:9f:24:9a:43: 3b:6a:30:9a:02:f3:ad:ae:09:ca:90:3d:9c:01:f2: 04:e4:56:46:20:06:0f:3f:e5:54:2d:b5:46:c6:7f: 9b:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:31:0C:01:DD:EB:57:16:95:0C:56:AD:05:5E:15:AB:90:10:1E:37 X509v3 Authority Key Identifier: keyid:CB:E3:DA:35:82:A2:28:30:EC:4E:67:54:7E:75:FA:3B:9D:A2:0B:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y-PaNYKiKDDsTmdUfnX6O52iCyM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/68cfc5-2ec6-4b59-b12e-6e36b2f1706b/1/y-PaNYKiKDDsTmdUfnX6O52iCyM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/68cfc5-2ec6-4b59-b12e-6e36b2f1706b/1/y-PaNYKiKDDsTmdUfnX6O52iCyM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:0b:5e:fe:ef:80:d8:83:6e:9a:31:67:86:69:be:e2:40:f0: fa:70:20:8f:c0:b9:e2:74:98:23:2a:ea:1f:8f:40:ea:17:2b: 22:2d:dd:b1:02:59:3b:37:f7:5c:a1:51:bb:5a:81:6b:81:c6: 14:42:c2:cf:a1:16:3c:69:14:38:48:c9:b0:0a:ff:ac:d5:ba: a9:55:7e:16:04:74:2a:d4:e4:32:71:4a:26:dd:d0:3b:c1:cf: 3c:b4:71:e8:d7:52:f3:db:8c:d4:ce:24:f5:7d:60:cb:55:86: 7d:d9:3d:07:66:83:d0:ca:c0:ad:4a:4e:88:2c:88:4f:ac:5e: f4:16:ef:f8:ac:ad:6f:0a:bc:94:7f:05:91:1b:9d:4e:62:ea: 4b:d3:5b:27:49:36:e0:0d:01:e4:32:a7:6b:d7:ff:3c:da:de: 50:7c:06:22:1c:f5:95:0b:04:b2:83:30:e6:6f:17:8b:b7:d6: 3e:01:ab:95:2f:5e:d0:25:86:ca:2e:4a:9b:3e:75:d1:42:51: 1e:ab:2a:b2:7f:8f:4f:f4:af:3f:97:0c:74:64:c8:b7:fe:fe: f3:2d:28:69:d3:4b:c0:71:70:f5:c4:b6:84:ec:df:2e:04:a8: 8b:7c:8f:98:a8:99:3d:cd:91:52:52:42:ee:02:46:30:a3:7e: a6:8c:69:b8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCt2I/zGNx+Ly5bnbRxnj4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiZTNkYTM1ODJhMjI4MzBlYzRlNjc1NDdlNzVmYTNiOWRh MjBiMjMwHhcNMjUxMjIxMjEwMTEzWhcNMjUxMjIyMjEwMTEzWjAzMTEwLwYDVQQD Eyg0MjMxMGMwMWRkZWI1NzE2OTUwYzU2YWQwNTVlMTVhYjkwMTAxZTM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzxGsiR3yRpURVPbvTt9ckPtQStM+ AItbkOTrmvlqIUxJRVDbq/x9HB2rLJ1/ohbDsTZAfL+M6+D3Y+ByINZK10nTgLZ6 QkAHcobVzRiJq6koZwceE1zdmqRjoGI31ZCMyepI0llDQaIQxHaRQTJOmGBTys8J Jf6Uk/bNGbVDAJWo+4ZkDWrk8YeF/TuW0GPJC3zDffMiRRbh6zZdUDhV9fzUrXme f4dPs03C3dRz27fllxtMA/1qAaKQnuwZuadYOWDflptjZ/rAi4ctrT9cj8U7wObc o+EL3xN3gJ8kmkM7ajCaAvOtrgnKkD2cAfIE5FZGIAYPP+VULbVGxn+bWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEIxDAHd61cWlQxWrQVeFauQEB43MB8GA1UdIwQY MBaAFMvj2jWCoigw7E5nVH51+judogsjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveS1QYU5ZS2lLRERzVG1kVWZuWDZPNTJpQ3lNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC82OGNmYzUtMmVjNi00YjU5LWIxMmUt NmUzNmIyZjE3MDZiLzEveS1QYU5ZS2lLRERzVG1kVWZuWDZPNTJpQ3lNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC82OGNmYzUtMmVjNi00YjU5LWIxMmUtNmUzNmIyZjE3MDZi LzEveS1QYU5ZS2lLRERzVG1kVWZuWDZPNTJpQ3lNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYQte/u+A 2INumjFnhmm+4kDw+nAgj8C54nSYIyrqH49A6hcrIi3dsQJZOzf3XKFRu1qBa4HG FELCz6EWPGkUOEjJsAr/rNW6qVV+FgR0KtTkMnFKJt3QO8HPPLRx6NdS89uM1M4k 9X1gy1WGfdk9B2aD0MrArUpOiCyIT6xe9Bbv+Kytbwq8lH8FkRudTmLqS9NbJ0k2 4A0B5DKna9f/PNreUHwGIhz1lQsEsoMw5m8Xi7fWPgGrlS9e0CWGyi5Kmz510UJR Hqsqsn+PT/SvP5cMdGTIt/7+8y0oadNLwHFw9cS2hOzfLgSoi3yPmKiZPc2RUlJC 7gJGMKN+poxpuA== -----END CERTIFICATE-----Generated at Mon Dec 22 00:46:05 2025 by rpki-client