This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/5da1e6-246f-4493-992e-22c79aea127c/1/y9wl6joKcp7Y5umnPaiW2E-VQ5w.mft File: y9wl6joKcp7Y5umnPaiW2E-VQ5w.mft (raw, json) Hash identifier: GJjYcx+ueER5cIxCjs01o+KEWAgfGTIjrYYsulbYvq8= Subject key identifier: 1D:B4:A0:66:A8:D5:85:56:CE:55:AE:F6:62:B0:A4:28:AF:73:29:D7 Authority key identifier: CB:DC:25:EA:3A:0A:72:9E:D8:E6:E9:A7:3D:A8:96:D8:4F:95:43:9C Certificate issuer: /CN=cbdc25ea3a0a729ed8e6e9a73da896d84f95439c Certificate serial: 019B38D87C5676BA517ACDAC8CBE354BEBBD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9wl6joKcp7Y5umnPaiW2E-VQ5w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/5da1e6-246f-4493-992e-22c79aea127c/1/y9wl6joKcp7Y5umnPaiW2E-VQ5w.mft Manifest number: 17DF Signing time: Fri 19 Dec 2025 23:01:10 +0000 Manifest this update: Fri 19 Dec 2025 23:01:10 +0000 Manifest next update: Sat 20 Dec 2025 23:01:10 +0000 Files and hashes: 1: 46nBDvj667zfOAp042BssRV0tGo.roa (hash: ijvMinyi7MX0fq0QyRdi2Vr4DZ+zPLFltRyx4COFtiw=) 2: y9wl6joKcp7Y5umnPaiW2E-VQ5w.crl (hash: 5wjdK/rmvvByxJ4fp2S8xdLGTvt10aJL4HKFxYiLaac=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/5da1e6-246f-4493-992e-22c79aea127c/1/y9wl6joKcp7Y5umnPaiW2E-VQ5w.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/5da1e6-246f-4493-992e-22c79aea127c/1/y9wl6joKcp7Y5umnPaiW2E-VQ5w.mft rsync://rpki.ripe.net/repository/DEFAULT/y9wl6joKcp7Y5umnPaiW2E-VQ5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 17:13:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:d8:7c:56:76:ba:51:7a:cd:ac:8c:be:35:4b:eb:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cbdc25ea3a0a729ed8e6e9a73da896d84f95439c Validity Not Before: Dec 19 23:01:10 2025 GMT Not After : Dec 20 23:01:10 2025 GMT Subject: CN=1db4a066a8d58556ce55aef662b0a428af7329d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:ee:2e:83:72:6b:41:bf:56:ef:c3:58:01:97: 2a:da:35:46:37:b5:07:dd:5b:fa:84:70:e1:a3:9b: 00:8e:d2:55:10:16:61:a3:62:c5:ec:41:cd:51:98: 69:bb:3f:52:5f:65:21:65:91:b3:ee:f1:52:58:e9: 5c:fb:40:0c:75:b1:ec:b5:78:84:3e:44:3f:53:54: 7f:be:b0:6b:51:5b:a1:ba:99:46:ea:f8:df:85:36: 5d:51:4e:ba:15:90:66:f2:67:cb:b5:3e:b1:dd:e1: 11:1d:0e:64:3e:dd:d7:48:e2:65:46:2c:79:71:58: 25:e2:d7:0f:18:95:f3:ac:de:48:a9:95:cf:72:2e: 63:5c:5d:0f:74:0b:4a:d8:ab:cf:bb:c8:98:7f:fd: 1a:47:6e:1b:73:0e:a6:43:05:3b:3d:56:26:ad:c5: 33:ba:39:e7:65:85:88:9a:f5:43:c4:fd:c4:73:7d: de:02:f5:db:db:bb:ef:64:f9:98:23:f0:33:ab:65: 70:42:68:81:9b:dc:27:72:0b:0c:f3:6f:7d:c9:e7: 1e:80:95:2f:52:d3:54:01:cf:7b:b5:93:ac:cb:21: e5:ea:d1:94:b3:10:d5:fd:40:7a:8b:53:9e:72:82: 1b:03:50:2b:b7:41:e2:d7:5b:87:e9:83:33:23:7d: df:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:B4:A0:66:A8:D5:85:56:CE:55:AE:F6:62:B0:A4:28:AF:73:29:D7 X509v3 Authority Key Identifier: keyid:CB:DC:25:EA:3A:0A:72:9E:D8:E6:E9:A7:3D:A8:96:D8:4F:95:43:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9wl6joKcp7Y5umnPaiW2E-VQ5w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/5da1e6-246f-4493-992e-22c79aea127c/1/y9wl6joKcp7Y5umnPaiW2E-VQ5w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/5da1e6-246f-4493-992e-22c79aea127c/1/y9wl6joKcp7Y5umnPaiW2E-VQ5w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:d6:5e:8e:eb:83:06:5b:0f:66:58:08:61:e1:58:89:50:2a: 8d:2f:ab:de:9b:cb:e3:bd:58:9a:5a:c1:57:4b:94:e2:fb:dd: f4:50:ec:2d:dd:3c:c3:a4:55:59:db:41:ff:1d:2e:52:e5:eb: 80:17:1f:bf:75:de:28:dd:c5:ce:c0:56:c0:63:ef:4c:9f:8a: 9c:fa:68:cb:7f:56:b5:ab:bd:3b:77:be:18:ac:11:3e:02:0e: 17:85:25:0a:66:ed:6e:d8:cd:4c:1d:6f:cc:90:78:ac:83:a2: 96:a0:b2:01:1a:a5:1b:80:bc:74:f7:51:47:63:28:cb:6f:28: 88:14:be:52:ef:43:94:2f:b9:bd:2c:26:fd:c8:ae:89:f5:2b: 01:64:51:82:86:6b:45:16:c9:e0:71:72:7e:d7:37:b4:bc:1a: e9:d4:71:1a:63:de:92:60:bc:12:96:17:31:91:51:57:e5:a0: 29:2c:41:a8:90:42:dd:62:26:71:d5:4a:04:fd:ed:12:e7:48: 13:bb:c2:30:8c:42:f3:13:32:53:ea:82:65:5f:40:4a:c7:59: a5:19:9e:91:e5:53:c2:2e:59:5d:04:e8:cf:41:81:26:2e:77: 1a:35:e8:3d:67:de:b6:bd:a6:3f:63:bd:59:6d:77:9e:4a:57: 4f:38:85:40 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs42HxWdrpRes2sjL41S+u9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiZGMyNWVhM2EwYTcyOWVkOGU2ZTlhNzNkYTg5NmQ4NGY5 NTQzOWMwHhcNMjUxMjE5MjMwMTEwWhcNMjUxMjIwMjMwMTEwWjAzMTEwLwYDVQQD EygxZGI0YTA2NmE4ZDU4NTU2Y2U1NWFlZjY2MmIwYTQyOGFmNzMyOWQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5e4ug3JrQb9W78NYAZcq2jVGN7UH 3Vv6hHDho5sAjtJVEBZho2LF7EHNUZhpuz9SX2UhZZGz7vFSWOlc+0AMdbHstXiE PkQ/U1R/vrBrUVuhuplG6vjfhTZdUU66FZBm8mfLtT6x3eERHQ5kPt3XSOJlRix5 cVgl4tcPGJXzrN5IqZXPci5jXF0PdAtK2KvPu8iYf/0aR24bcw6mQwU7PVYmrcUz ujnnZYWImvVDxP3Ec33eAvXb27vvZPmYI/Azq2VwQmiBm9wncgsM8299yecegJUv UtNUAc97tZOsyyHl6tGUsxDV/UB6i1OecoIbA1Art0Hi11uH6YMzI33ffwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB20oGao1YVWzlWu9mKwpCivcynXMB8GA1UdIwQY MBaAFMvcJeo6CnKe2Obppz2olthPlUOcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveTl3bDZqb0tjcDdZNXVtblBhaVcyRS1WUTV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS81ZGExZTYtMjQ2Zi00NDkzLTk5MmUt MjJjNzlhZWExMjdjLzEveTl3bDZqb0tjcDdZNXVtblBhaVcyRS1WUTV3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS81ZGExZTYtMjQ2Zi00NDkzLTk5MmUtMjJjNzlhZWExMjdj LzEveTl3bDZqb0tjcDdZNXVtblBhaVcyRS1WUTV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEActZejuuD BlsPZlgIYeFYiVAqjS+r3pvL471YmlrBV0uU4vvd9FDsLd08w6RVWdtB/x0uUuXr gBcfv3XeKN3FzsBWwGPvTJ+KnPpoy39Wtau9O3e+GKwRPgIOF4UlCmbtbtjNTB1v zJB4rIOilqCyARqlG4C8dPdRR2Moy28oiBS+Uu9DlC+5vSwm/ciuifUrAWRRgoZr RRbJ4HFyftc3tLwa6dRxGmPekmC8EpYXMZFRV+WgKSxBqJBC3WImcdVKBP3tEudI E7vCMIxC8xMyU+qCZV9ASsdZpRmekeVTwi5ZXQToz0GBJi53GjXoPWfetr2mP2O9 WW13nkpXTziFQA== -----END CERTIFICATE-----Generated at Sat Dec 20 03:29:27 2025 by rpki-client