This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/73e00f-e3e3-4d23-ad6b-76682e794cc3/1/y5Xhy8Z-eC2_n450TkNyaL3MOc4.mft File: y5Xhy8Z-eC2_n450TkNyaL3MOc4.mft (raw, json) Hash identifier: /inoaZEuTLBZ+jBrjMP6BNxdCS0H95YQwbUl5DqBtNg= Subject key identifier: 17:32:70:1B:44:63:E9:FA:A7:3A:BC:0E:24:95:8D:47:AF:BD:4F:91 Authority key identifier: CB:95:E1:CB:C6:7E:78:2D:BF:9F:8E:74:4E:43:72:68:BD:CC:39:CE Certificate issuer: /CN=cb95e1cbc67e782dbf9f8e744e437268bdcc39ce Certificate serial: 019B3C1014DB4AA57ED91C56AE11FC13A80F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y5Xhy8Z-eC2_n450TkNyaL3MOc4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/73e00f-e3e3-4d23-ad6b-76682e794cc3/1/y5Xhy8Z-eC2_n450TkNyaL3MOc4.mft Manifest number: 1785 Signing time: Sat 20 Dec 2025 14:00:45 +0000 Manifest this update: Sat 20 Dec 2025 14:00:45 +0000 Manifest next update: Sun 21 Dec 2025 14:00:45 +0000 Files and hashes: 1: YCt2PEu1c9s1UKpEDsPjqt0QhVE.roa (hash: J7vCJCdM4bkswGPTs/5K83jCz1I4iBeDKjR/fP3jctk=) 2: y5Xhy8Z-eC2_n450TkNyaL3MOc4.crl (hash: xdhXi3yFH+b9vKxK+KitF3/HrSw2rrx1nRDuv2QoNnc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/73e00f-e3e3-4d23-ad6b-76682e794cc3/1/y5Xhy8Z-eC2_n450TkNyaL3MOc4.crl rsync://rpki.ripe.net/repository/DEFAULT/ec/73e00f-e3e3-4d23-ad6b-76682e794cc3/1/y5Xhy8Z-eC2_n450TkNyaL3MOc4.mft rsync://rpki.ripe.net/repository/DEFAULT/y5Xhy8Z-eC2_n450TkNyaL3MOc4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:10:14:db:4a:a5:7e:d9:1c:56:ae:11:fc:13:a8:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb95e1cbc67e782dbf9f8e744e437268bdcc39ce Validity Not Before: Dec 20 14:00:45 2025 GMT Not After : Dec 21 14:00:45 2025 GMT Subject: CN=1732701b4463e9faa73abc0e24958d47afbd4f91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:25:e4:3a:53:81:74:c7:60:8d:2e:55:d8:f5: 4a:a0:f1:1d:1f:c6:79:9c:18:8e:92:7a:97:22:18: e9:aa:89:1f:d6:74:31:b4:08:6a:e1:35:28:ca:28: 7f:7c:d9:99:98:43:f5:12:25:7d:eb:c0:30:68:e2: f4:ea:bd:1d:20:ad:ca:a7:db:cc:ad:ec:63:38:3d: 7e:be:6b:c7:56:f0:80:d1:09:b2:02:e6:2d:d4:17: 43:78:ed:e6:5b:f9:45:53:4c:b7:2f:be:fb:10:5b: b6:6e:d0:89:40:15:61:66:c7:36:9f:a4:af:f4:62: 45:eb:be:bc:60:da:a0:ce:a5:d8:99:bd:8f:91:70: 61:45:63:ca:9e:ab:06:6a:36:65:a9:d3:52:80:4c: 4b:80:4c:b5:90:a6:8f:99:86:31:24:61:cc:95:36: 6e:fa:11:f2:3b:96:0e:f7:fb:77:1e:34:7d:d4:3d: 91:84:fa:d4:a6:61:ba:59:7b:c7:fa:a2:e3:ab:58: 46:23:fe:44:65:b5:df:8b:5a:a5:6a:c9:7c:c4:d2: d4:71:fb:91:1f:63:5b:91:97:a0:81:b5:72:df:fc: b3:9f:c7:93:c3:83:09:7d:b1:7a:94:dd:fa:97:74: 46:76:c6:10:ed:08:61:d9:e6:d3:c5:e8:d2:e6:f7: 0f:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:32:70:1B:44:63:E9:FA:A7:3A:BC:0E:24:95:8D:47:AF:BD:4F:91 X509v3 Authority Key Identifier: keyid:CB:95:E1:CB:C6:7E:78:2D:BF:9F:8E:74:4E:43:72:68:BD:CC:39:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y5Xhy8Z-eC2_n450TkNyaL3MOc4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/73e00f-e3e3-4d23-ad6b-76682e794cc3/1/y5Xhy8Z-eC2_n450TkNyaL3MOc4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/73e00f-e3e3-4d23-ad6b-76682e794cc3/1/y5Xhy8Z-eC2_n450TkNyaL3MOc4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:a8:c4:8a:bc:00:80:e1:ff:8b:7e:35:7f:e5:ec:8b:01:6f: dc:70:8b:bd:a1:28:3d:80:65:62:50:59:ac:a1:1b:20:c4:7c: 7d:a5:42:1d:0f:69:e1:da:d8:c8:79:e2:d6:f2:12:6b:ea:66: 17:21:27:da:70:5c:ca:13:55:fc:c5:2a:a0:bc:de:b9:d6:f7: f3:39:16:8d:c2:e3:62:de:d2:bc:11:1d:30:32:c8:4b:18:f6: dd:29:4c:9f:c1:f9:e2:e4:54:8c:75:26:7b:e5:0b:d1:e9:a1: 84:fb:ca:e5:a0:d7:d7:7f:ca:9b:88:2c:8f:29:c9:59:24:eb: a6:cf:a1:d8:2a:56:cf:3d:85:a0:e3:57:ed:a8:de:9b:c5:98: f6:f1:43:43:a6:28:3d:a1:be:69:48:6b:04:c2:01:16:9d:80: e7:ef:d5:1f:92:2f:5a:81:23:97:28:c4:87:db:74:5f:e4:90: 81:b2:21:1e:47:3e:ac:52:20:51:8e:49:bd:08:07:23:2c:f9: 2a:7f:be:24:66:a1:c8:76:8c:b0:ff:f6:13:8c:9f:92:f6:0a: 3b:87:19:07:77:1b:6c:dd:da:27:cf:06:6a:9e:0d:62:bd:3d: 84:ad:99:a8:5f:e8:19:59:7e:19:34:39:22:5e:98:0e:92:c2: 6f:25:ef:8b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8EBTbSqV+2RxWrhH8E6gPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiOTVlMWNiYzY3ZTc4MmRiZjlmOGU3NDRlNDM3MjY4YmRj YzM5Y2UwHhcNMjUxMjIwMTQwMDQ1WhcNMjUxMjIxMTQwMDQ1WjAzMTEwLwYDVQQD EygxNzMyNzAxYjQ0NjNlOWZhYTczYWJjMGUyNDk1OGQ0N2FmYmQ0ZjkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjiXkOlOBdMdgjS5V2PVKoPEdH8Z5 nBiOknqXIhjpqokf1nQxtAhq4TUoyih/fNmZmEP1EiV968AwaOL06r0dIK3Kp9vM rexjOD1+vmvHVvCA0QmyAuYt1BdDeO3mW/lFU0y3L777EFu2btCJQBVhZsc2n6Sv 9GJF6768YNqgzqXYmb2PkXBhRWPKnqsGajZlqdNSgExLgEy1kKaPmYYxJGHMlTZu +hHyO5YO9/t3HjR91D2RhPrUpmG6WXvH+qLjq1hGI/5EZbXfi1qlasl8xNLUcfuR H2NbkZeggbVy3/yzn8eTw4MJfbF6lN36l3RGdsYQ7Qhh2ebTxejS5vcPKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBcycBtEY+n6pzq8DiSVjUevvU+RMB8GA1UdIwQY MBaAFMuV4cvGfngtv5+OdE5Dcmi9zDnOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveTVYaHk4Wi1lQzJfbjQ1MFRrTnlhTDNNT2M0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy83M2UwMGYtZTNlMy00ZDIzLWFkNmIt NzY2ODJlNzk0Y2MzLzEveTVYaHk4Wi1lQzJfbjQ1MFRrTnlhTDNNT2M0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYy83M2UwMGYtZTNlMy00ZDIzLWFkNmItNzY2ODJlNzk0Y2Mz LzEveTVYaHk4Wi1lQzJfbjQ1MFRrTnlhTDNNT2M0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC6jEirwA gOH/i341f+XsiwFv3HCLvaEoPYBlYlBZrKEbIMR8faVCHQ9p4drYyHni1vISa+pm FyEn2nBcyhNV/MUqoLzeudb38zkWjcLjYt7SvBEdMDLISxj23SlMn8H54uRUjHUm e+UL0emhhPvK5aDX13/Km4gsjynJWSTrps+h2CpWzz2FoONX7ajem8WY9vFDQ6Yo PaG+aUhrBMIBFp2A5+/VH5IvWoEjlyjEh9t0X+SQgbIhHkc+rFIgUY5JvQgHIyz5 Kn++JGahyHaMsP/2E4yfkvYKO4cZB3cbbN3aJ88Gap4NYr09hK2ZqF/oGVl+GTQ5 Il6YDpLCbyXviw== -----END CERTIFICATE-----Generated at Sat Dec 20 15:58:27 2025 by rpki-client