This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a69f50-2740-4213-9616-1d4aa781b4d4/1/y2r1L3gkVTrztsuqc686F4wcWRM.mft File: y2r1L3gkVTrztsuqc686F4wcWRM.mft (raw, json) Hash identifier: AD9WL5PFnHUSoN+9ssIpc1TVDZJrCbTri6mnv2c5Atc= Subject key identifier: 42:43:90:97:9E:5A:21:6E:F0:E7:45:E7:FE:F7:22:68:45:2C:95:7D Authority key identifier: CB:6A:F5:2F:78:24:55:3A:F3:B6:CB:AA:73:AF:3A:17:8C:1C:59:13 Certificate issuer: /CN=cb6af52f7824553af3b6cbaa73af3a178c1c5913 Certificate serial: 019B3EA3ACFA260E5D40ACCBA1373968E22B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y2r1L3gkVTrztsuqc686F4wcWRM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a69f50-2740-4213-9616-1d4aa781b4d4/1/y2r1L3gkVTrztsuqc686F4wcWRM.mft Manifest number: 0156 Signing time: Sun 21 Dec 2025 02:01:12 +0000 Manifest this update: Sun 21 Dec 2025 02:01:12 +0000 Manifest next update: Mon 22 Dec 2025 02:01:12 +0000 Files and hashes: 1: IjHqWxuNpJU8DaK_lff-VC_PVWQ.roa (hash: kBcWX1ntdL3bghAjxPsE3h6Q1xLnJksKwhAqQ4KHWmw=) 2: y2r1L3gkVTrztsuqc686F4wcWRM.crl (hash: W9tvPeUUTWZpaNuYeWYm+XfxpgCQzj3XwbU3/vHz6no=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/a69f50-2740-4213-9616-1d4aa781b4d4/1/y2r1L3gkVTrztsuqc686F4wcWRM.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/a69f50-2740-4213-9616-1d4aa781b4d4/1/y2r1L3gkVTrztsuqc686F4wcWRM.mft rsync://rpki.ripe.net/repository/DEFAULT/y2r1L3gkVTrztsuqc686F4wcWRM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 02:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:a3:ac:fa:26:0e:5d:40:ac:cb:a1:37:39:68:e2:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb6af52f7824553af3b6cbaa73af3a178c1c5913 Validity Not Before: Dec 21 02:01:12 2025 GMT Not After : Dec 22 02:01:12 2025 GMT Subject: CN=424390979e5a216ef0e745e7fef72268452c957d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:cf:d9:c0:db:85:29:58:a6:87:05:49:a5:a9: 3d:6a:50:de:0c:2e:73:68:9b:2e:4f:d8:78:f3:13: 95:b7:ed:8f:f3:6a:25:5a:90:a5:d6:43:b5:60:94: 49:11:77:7f:97:ee:a6:9d:d6:f4:b4:0a:9a:f9:a7: 4a:73:91:a8:c9:35:13:3c:53:33:3f:e9:e8:cf:bc: 03:ca:6c:79:cc:41:35:ff:59:81:21:af:a5:d5:2e: 7b:db:1a:92:d0:60:2f:3a:66:91:3f:55:0b:8f:df: ac:7b:98:ca:9a:1a:19:98:af:68:38:cc:1c:ff:34: 7d:b7:14:20:18:e1:7e:ff:b2:22:fc:73:3c:98:3b: 44:4e:61:df:a8:6f:a3:8d:f5:72:f2:d0:e5:7d:eb: 44:bd:d9:b5:49:75:57:e4:4b:9f:f7:d0:b4:4f:30: 21:a5:3b:50:2c:18:4c:fe:05:97:3a:cc:e4:41:ea: cd:1a:a5:e2:fa:31:33:7f:2d:02:08:f4:a9:6a:d0: 1e:ad:8d:30:4b:4d:17:d5:35:9c:b0:32:a7:97:99: 7d:db:99:df:93:f8:b5:15:12:dd:9c:bf:ba:25:b4: 8e:e1:98:c1:09:e6:5d:a5:60:c6:f3:44:cc:96:32: 5c:ff:aa:a1:5a:4b:75:b0:39:8e:9b:1c:7a:24:6f: 5c:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:43:90:97:9E:5A:21:6E:F0:E7:45:E7:FE:F7:22:68:45:2C:95:7D X509v3 Authority Key Identifier: keyid:CB:6A:F5:2F:78:24:55:3A:F3:B6:CB:AA:73:AF:3A:17:8C:1C:59:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y2r1L3gkVTrztsuqc686F4wcWRM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a69f50-2740-4213-9616-1d4aa781b4d4/1/y2r1L3gkVTrztsuqc686F4wcWRM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a69f50-2740-4213-9616-1d4aa781b4d4/1/y2r1L3gkVTrztsuqc686F4wcWRM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:96:2c:55:ab:64:db:44:4d:8d:33:b2:36:61:2e:87:5f:fc: 0c:97:6c:9f:14:6c:57:65:08:a0:d2:6b:81:dc:f0:6d:68:95: bf:34:e4:ef:f9:62:f4:e8:e9:48:66:ee:e5:16:33:61:5b:6a: e7:fe:ac:c4:fe:85:76:02:3a:e9:a4:8c:50:16:c0:2c:9e:4f: 3c:fe:97:8c:27:8a:6e:8a:35:67:5b:29:15:48:93:65:3c:d3: d0:e3:eb:04:73:8f:c9:2a:22:4e:45:20:30:8a:b6:ed:05:38: 1c:26:00:88:4f:86:08:69:78:fe:ac:29:3b:61:f5:1a:d8:05: 80:cb:c5:15:82:cf:a6:dc:a0:37:01:83:08:d5:ca:c3:4c:b4: ad:65:40:24:4f:64:7e:1e:4e:0f:1c:6b:ee:91:92:08:c0:ca: 0a:22:11:ac:ed:c9:6c:8e:d5:7c:d4:f8:1c:b4:1d:f9:aa:41: ae:92:8f:4c:ba:80:f7:29:cc:9a:b3:4b:16:ae:34:ba:8f:b3: c6:f5:7b:bd:ad:cb:3d:5e:10:66:ca:b8:6b:ea:e5:d5:c4:c6: 1a:ac:c1:53:d9:97:f6:e1:41:d8:f4:0a:68:c6:a2:3c:ea:88: 85:a3:fc:ec:ae:89:00:8e:7d:72:f0:ec:5f:10:2c:cb:81:b4: 76:98:ad:15 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+o6z6Jg5dQKzLoTc5aOIrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiNmFmNTJmNzgyNDU1M2FmM2I2Y2JhYTczYWYzYTE3OGMx YzU5MTMwHhcNMjUxMjIxMDIwMTEyWhcNMjUxMjIyMDIwMTEyWjAzMTEwLwYDVQQD Eyg0MjQzOTA5NzllNWEyMTZlZjBlNzQ1ZTdmZWY3MjI2ODQ1MmM5NTdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt8/ZwNuFKVimhwVJpak9alDeDC5z aJsuT9h48xOVt+2P82olWpCl1kO1YJRJEXd/l+6mndb0tAqa+adKc5GoyTUTPFMz P+noz7wDymx5zEE1/1mBIa+l1S572xqS0GAvOmaRP1ULj9+se5jKmhoZmK9oOMwc /zR9txQgGOF+/7Ii/HM8mDtETmHfqG+jjfVy8tDlfetEvdm1SXVX5Euf99C0TzAh pTtQLBhM/gWXOszkQerNGqXi+jEzfy0CCPSpatAerY0wS00X1TWcsDKnl5l925nf k/i1FRLdnL+6JbSO4ZjBCeZdpWDG80TMljJc/6qhWkt1sDmOmxx6JG9cqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEJDkJeeWiFu8OdF5/73ImhFLJV9MB8GA1UdIwQY MBaAFMtq9S94JFU687bLqnOvOheMHFkTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveTJyMUwzZ2tWVHJ6dHN1cWM2ODZGNHdjV1JNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9hNjlmNTAtMjc0MC00MjEzLTk2MTYt MWQ0YWE3ODFiNGQ0LzEveTJyMUwzZ2tWVHJ6dHN1cWM2ODZGNHdjV1JNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC9hNjlmNTAtMjc0MC00MjEzLTk2MTYtMWQ0YWE3ODFiNGQ0 LzEveTJyMUwzZ2tWVHJ6dHN1cWM2ODZGNHdjV1JNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcZYsVatk 20RNjTOyNmEuh1/8DJdsnxRsV2UIoNJrgdzwbWiVvzTk7/li9OjpSGbu5RYzYVtq 5/6sxP6FdgI66aSMUBbALJ5PPP6XjCeKboo1Z1spFUiTZTzT0OPrBHOPySoiTkUg MIq27QU4HCYAiE+GCGl4/qwpO2H1GtgFgMvFFYLPptygNwGDCNXKw0y0rWVAJE9k fh5ODxxr7pGSCMDKCiIRrO3JbI7VfNT4HLQd+apBrpKPTLqA9ynMmrNLFq40uo+z xvV7va3LPV4QZsq4a+rl1cTGGqzBU9mX9uFB2PQKaMaiPOqIhaP87K6JAI59cvDs XxAsy4G0dpitFQ== -----END CERTIFICATE-----Generated at Sun Dec 21 11:59:35 2025 by rpki-client