This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/9098fd-7dc3-4e12-b893-fd22df3b57f6/1/y5UvnDOcq9FCNNAMhKJS1-xxoqI.mft File: y5UvnDOcq9FCNNAMhKJS1-xxoqI.mft (raw, json) Hash identifier: ODh0ZVU1TDEDpPpuHIlh7NHP5YBvpgOMJeZB7UVO3Ec= Subject key identifier: AA:34:7B:83:E3:40:B0:AB:09:BA:AF:05:63:D1:50:E3:AF:33:84:AB Authority key identifier: CB:95:2F:9C:33:9C:AB:D1:42:34:D0:0C:84:A2:52:D7:EC:71:A2:A2 Certificate issuer: /CN=cb952f9c339cabd14234d00c84a252d7ec71a2a2 Certificate serial: 019B5260EC226F40F6AF27F866A329123A87 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y5UvnDOcq9FCNNAMhKJS1-xxoqI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/9098fd-7dc3-4e12-b893-fd22df3b57f6/1/y5UvnDOcq9FCNNAMhKJS1-xxoqI.mft Manifest number: 1798 Signing time: Wed 24 Dec 2025 22:00:41 +0000 Manifest this update: Wed 24 Dec 2025 22:00:41 +0000 Manifest next update: Thu 25 Dec 2025 22:00:41 +0000 Files and hashes: 1: 7ZEG0z_Osqd4q9aW4GX-pynJwVw.roa (hash: 878HhGYlePO6JgY3PtW7VLOGBnrfdtyTWzeH4xsP4g8=) 2: VeBtVkpIYodNfDVL9q0zO2G9fI4.roa (hash: 69DCX1Y+C0YR951ujfa1InW/UlkkHLEEqX2IFa0T65Q=) 3: WFk1Sbl9ffKO0_c5-wWqDgx_UdY.roa (hash: 17TQJSkjsNV4kLocHOeLmKp8frraMCHjxrwGJ2DZ/TA=) 4: YQH8RWxADt9aJV8FpUmZfLr_4hA.roa (hash: as+j57YQ6lscVO9lYUdKRdByZHNNE4AzI7PATyHo/j0=) 5: qB1Zo9eTq0Gf6RAAveJrJzHjkfE.roa (hash: k2V4zT3lW1qBoAk74wdn7K6a/aSM0/Ew+2PcshHyMps=) 6: y5UvnDOcq9FCNNAMhKJS1-xxoqI.crl (hash: 1mTkA6iHKAXdDw/CtvK4lH03sNCM+oYwJS9ETA7xDus=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/9098fd-7dc3-4e12-b893-fd22df3b57f6/1/y5UvnDOcq9FCNNAMhKJS1-xxoqI.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/9098fd-7dc3-4e12-b893-fd22df3b57f6/1/y5UvnDOcq9FCNNAMhKJS1-xxoqI.mft rsync://rpki.ripe.net/repository/DEFAULT/y5UvnDOcq9FCNNAMhKJS1-xxoqI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 14:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:52:60:ec:22:6f:40:f6:af:27:f8:66:a3:29:12:3a:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb952f9c339cabd14234d00c84a252d7ec71a2a2 Validity Not Before: Dec 24 22:00:41 2025 GMT Not After : Dec 25 22:00:41 2025 GMT Subject: CN=aa347b83e340b0ab09baaf0563d150e3af3384ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:55:11:74:2e:f6:6e:6e:3e:0e:17:11:d6:ec: 72:b7:bc:e7:80:5e:0c:3f:c0:f6:ef:e7:1e:da:96: 9f:e9:b5:c8:e9:fe:16:77:4e:59:ef:d8:43:fb:99: c4:8f:ae:c2:11:de:5d:41:be:1d:87:e7:a5:61:e6: e6:53:59:12:78:e6:8d:ee:49:ea:2d:28:62:33:37: f4:4c:62:c1:ec:75:bc:42:fe:36:57:6b:f7:86:08: c4:f0:a5:00:99:0d:36:af:96:79:31:b7:b0:a4:b7: 06:cb:59:d1:d5:64:2d:f1:26:a8:d2:a1:c1:e1:56: 6b:43:ce:62:7c:7f:b3:fe:e5:8e:8f:be:78:a5:7b: 72:5e:0f:f4:ce:49:57:00:18:05:3d:6a:f7:e9:0b: a6:f0:21:22:2c:49:ef:b8:01:04:8e:b5:c4:57:d9: 38:86:1e:05:25:ee:93:ed:b2:9f:08:0b:06:f9:de: 5e:4b:a5:5d:d1:5b:1d:29:80:bc:50:ce:03:2f:51: 8b:57:06:9a:22:6d:f6:13:d1:f4:66:7b:3b:80:d1: de:ca:6f:4a:3f:91:6f:a6:da:16:d9:fe:59:ef:74: c4:75:ee:71:d1:3d:72:15:36:22:67:23:2b:24:55: ac:97:c3:91:b4:5d:1b:26:11:30:85:82:8d:26:4b: 93:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:34:7B:83:E3:40:B0:AB:09:BA:AF:05:63:D1:50:E3:AF:33:84:AB X509v3 Authority Key Identifier: keyid:CB:95:2F:9C:33:9C:AB:D1:42:34:D0:0C:84:A2:52:D7:EC:71:A2:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y5UvnDOcq9FCNNAMhKJS1-xxoqI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/9098fd-7dc3-4e12-b893-fd22df3b57f6/1/y5UvnDOcq9FCNNAMhKJS1-xxoqI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/9098fd-7dc3-4e12-b893-fd22df3b57f6/1/y5UvnDOcq9FCNNAMhKJS1-xxoqI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:85:d8:a3:49:ab:8b:df:14:fb:64:c2:50:8e:2f:f9:a8:fc: 1b:68:e8:b4:2a:22:2e:0f:1a:f2:bf:70:96:fd:1b:eb:7c:a0: 13:56:0d:08:e9:c1:00:4b:74:ab:33:b4:a3:7b:c4:f8:11:65: 05:a3:74:74:89:ea:4b:e6:3d:e7:3f:29:0a:b2:c2:7f:6c:40: 47:01:11:7c:fc:d6:0e:31:9c:a0:60:ad:68:fb:75:58:0b:97: 62:39:71:54:ae:14:a3:f0:fc:d5:74:14:06:38:b8:d5:61:09: 4c:16:fa:3f:08:9b:49:a5:28:3e:3e:81:04:90:52:81:5b:e5: 1c:85:5c:a4:ea:30:82:fd:ca:6c:f9:9e:9c:3d:a5:c0:3c:d0: 2b:b4:24:f2:1f:b2:92:e1:de:5c:08:b4:13:9e:bb:38:5d:8b: fa:1b:6b:c3:48:36:da:d0:4c:93:43:d0:05:3a:22:e4:f5:a4: 09:70:04:33:a6:01:ba:d3:d7:1a:eb:b7:db:d1:1e:ea:44:ce: 98:df:c3:e8:42:a0:dd:ca:4a:29:2d:72:b4:a0:42:fa:e1:da: 13:94:7d:c8:fb:6a:11:08:a1:d0:84:4a:76:d5:1a:8f:ef:75: ad:91:22:21:50:ed:12:f0:8b:fc:f9:b6:da:c8:80:ba:fe:a9: f1:82:4a:ec -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtSYOwib0D2ryf4ZqMpEjqHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiOTUyZjljMzM5Y2FiZDE0MjM0ZDAwYzg0YTI1MmQ3ZWM3 MWEyYTIwHhcNMjUxMjI0MjIwMDQxWhcNMjUxMjI1MjIwMDQxWjAzMTEwLwYDVQQD EyhhYTM0N2I4M2UzNDBiMGFiMDliYWFmMDU2M2QxNTBlM2FmMzM4NGFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAolURdC72bm4+DhcR1uxyt7zngF4M P8D27+ce2paf6bXI6f4Wd05Z79hD+5nEj67CEd5dQb4dh+elYebmU1kSeOaN7knq LShiMzf0TGLB7HW8Qv42V2v3hgjE8KUAmQ02r5Z5MbewpLcGy1nR1WQt8Sao0qHB 4VZrQ85ifH+z/uWOj754pXtyXg/0zklXABgFPWr36Qum8CEiLEnvuAEEjrXEV9k4 hh4FJe6T7bKfCAsG+d5eS6Vd0VsdKYC8UM4DL1GLVwaaIm32E9H0Zns7gNHeym9K P5FvptoW2f5Z73TEde5x0T1yFTYiZyMrJFWsl8ORtF0bJhEwhYKNJkuTHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKo0e4PjQLCrCbqvBWPRUOOvM4SrMB8GA1UdIwQY MBaAFMuVL5wznKvRQjTQDISiUtfscaKiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveTVVdm5ET2NxOUZDTk5BTWhLSlMxLXh4b3FJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS85MDk4ZmQtN2RjMy00ZTEyLWI4OTMt ZmQyMmRmM2I1N2Y2LzEveTVVdm5ET2NxOUZDTk5BTWhLSlMxLXh4b3FJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS85MDk4ZmQtN2RjMy00ZTEyLWI4OTMtZmQyMmRmM2I1N2Y2 LzEveTVVdm5ET2NxOUZDTk5BTWhLSlMxLXh4b3FJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIIXYo0mr i98U+2TCUI4v+aj8G2jotCoiLg8a8r9wlv0b63ygE1YNCOnBAEt0qzO0o3vE+BFl BaN0dInqS+Y95z8pCrLCf2xARwERfPzWDjGcoGCtaPt1WAuXYjlxVK4Uo/D81XQU Bji41WEJTBb6PwibSaUoPj6BBJBSgVvlHIVcpOowgv3KbPmenD2lwDzQK7Qk8h+y kuHeXAi0E567OF2L+htrw0g22tBMk0PQBToi5PWkCXAEM6YButPXGuu329Ee6kTO mN/D6EKg3cpKKS1ytKBC+uHaE5R9yPtqEQih0IRKdtUaj+91rZEiIVDtEvCL/Pm2 2siAuv6p8YJK7A== -----END CERTIFICATE-----Generated at Wed Dec 24 23:26:25 2025 by rpki-client