This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/5da1e6-246f-4493-992e-22c79aea127c/1/y9wl6joKcp7Y5umnPaiW2E-VQ5w.mft File: y9wl6joKcp7Y5umnPaiW2E-VQ5w.mft (raw, json) Hash identifier: a/fAoGvW7IShQeSnyLUwREZBsBJjB6SwsxOcThgMg9w= Subject key identifier: 94:4B:13:C1:4D:79:EE:AF:42:43:5D:52:E4:19:78:2D:C9:EA:04:06 Authority key identifier: CB:DC:25:EA:3A:0A:72:9E:D8:E6:E9:A7:3D:A8:96:D8:4F:95:43:9C Certificate issuer: /CN=cbdc25ea3a0a729ed8e6e9a73da896d84f95439c Certificate serial: 019B465CEE0EF071FC0361C3CEC25CE65104 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9wl6joKcp7Y5umnPaiW2E-VQ5w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/5da1e6-246f-4493-992e-22c79aea127c/1/y9wl6joKcp7Y5umnPaiW2E-VQ5w.mft Manifest number: 17E6 Signing time: Mon 22 Dec 2025 14:00:53 +0000 Manifest this update: Mon 22 Dec 2025 14:00:53 +0000 Manifest next update: Tue 23 Dec 2025 14:00:53 +0000 Files and hashes: 1: 46nBDvj667zfOAp042BssRV0tGo.roa (hash: ijvMinyi7MX0fq0QyRdi2Vr4DZ+zPLFltRyx4COFtiw=) 2: y9wl6joKcp7Y5umnPaiW2E-VQ5w.crl (hash: ZDMYwTZxvIQOkOFPwbRAxPUFDG1LEESoHA0R2CpED14=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/5da1e6-246f-4493-992e-22c79aea127c/1/y9wl6joKcp7Y5umnPaiW2E-VQ5w.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/5da1e6-246f-4493-992e-22c79aea127c/1/y9wl6joKcp7Y5umnPaiW2E-VQ5w.mft rsync://rpki.ripe.net/repository/DEFAULT/y9wl6joKcp7Y5umnPaiW2E-VQ5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 14:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:46:5c:ee:0e:f0:71:fc:03:61:c3:ce:c2:5c:e6:51:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cbdc25ea3a0a729ed8e6e9a73da896d84f95439c Validity Not Before: Dec 22 14:00:53 2025 GMT Not After : Dec 23 14:00:53 2025 GMT Subject: CN=944b13c14d79eeaf42435d52e419782dc9ea0406 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:bc:65:36:3a:76:cb:3b:b5:12:17:84:c5:c9: a7:29:d8:e8:54:08:83:f8:ff:6c:ea:e6:c9:2f:18: b2:29:5c:ed:1b:cc:40:6c:90:ad:ad:f7:50:6c:a3: 23:fe:18:7b:85:a4:f1:fb:a9:91:77:45:91:01:69: e8:a7:4b:11:e9:eb:0a:c5:a3:19:ae:c9:c5:1a:e9: c2:ef:b2:a5:8a:e1:01:42:85:3e:2a:71:b9:59:3d: 17:53:d2:d3:f9:17:fb:01:bb:e7:c4:6e:c6:a3:4d: a7:7f:cd:49:34:31:c9:02:c1:44:97:05:40:6a:d5: 1b:ed:9c:8e:dd:c9:25:9b:aa:2a:e2:24:20:ee:3b: ff:25:f9:ce:b5:4e:4c:a5:26:fd:73:b3:39:55:1a: 0d:64:49:12:2a:46:13:45:c0:98:98:03:00:68:0e: 02:cf:b3:1e:c0:2c:44:e0:d2:46:cb:71:8e:67:62: aa:a7:40:96:16:de:5f:18:6d:d2:a5:4a:f2:5f:b5: e7:9e:db:7b:43:eb:01:ff:7f:ac:20:6b:78:6a:94: 3c:30:f6:fc:3e:0c:6f:4f:18:04:7c:09:f5:d2:5f: 3b:91:09:98:b0:ad:04:15:45:65:ac:1c:77:c0:42: f3:60:35:6f:a1:08:ff:73:2b:68:9e:2c:b9:d5:6f: 87:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:4B:13:C1:4D:79:EE:AF:42:43:5D:52:E4:19:78:2D:C9:EA:04:06 X509v3 Authority Key Identifier: keyid:CB:DC:25:EA:3A:0A:72:9E:D8:E6:E9:A7:3D:A8:96:D8:4F:95:43:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9wl6joKcp7Y5umnPaiW2E-VQ5w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/5da1e6-246f-4493-992e-22c79aea127c/1/y9wl6joKcp7Y5umnPaiW2E-VQ5w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/5da1e6-246f-4493-992e-22c79aea127c/1/y9wl6joKcp7Y5umnPaiW2E-VQ5w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:80:53:38:6d:9e:cf:32:5b:10:cf:40:10:e9:c0:34:1f:a7: d7:6d:87:29:8f:a9:16:ff:81:7b:c4:ca:93:4f:c2:16:d7:8d: 31:48:0e:ef:26:d1:e7:b4:42:c0:69:ec:73:64:76:a6:ad:99: fa:16:eb:30:1a:ae:17:a0:f6:c2:32:f2:34:37:3d:08:5b:f8: 5e:d4:2b:40:9a:71:80:6b:3c:c0:a3:e9:ce:26:80:3f:2a:c2: fe:56:28:d4:07:94:ab:67:45:8f:1b:40:42:7d:07:d4:bb:cd: d3:35:54:d6:e8:25:ae:46:84:c7:64:1e:f5:03:57:96:0e:6d: 7f:26:8e:f0:00:52:76:5c:f4:c2:95:0c:88:6e:10:b9:e2:45: 5d:ad:0c:a7:8d:a3:6c:c3:ed:5e:b0:52:77:e2:f5:d4:c5:07: 0e:2b:2d:02:c3:96:78:9b:d1:34:f7:32:ce:2e:23:93:68:e0: 2e:70:29:b2:cc:9a:39:e8:b0:7e:6d:48:b0:a2:05:f7:6a:25: fd:b9:0e:39:89:0d:bc:e5:76:6a:39:c5:e1:b2:77:94:d7:61: fe:f8:0a:4f:19:38:ed:0c:53:d2:c8:33:8b:e5:ec:d1:07:33: 30:dc:ad:2d:4c:a6:02:58:49:44:93:25:a7:16:e0:ba:cd:5a: 7c:cd:b4:4a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtGXO4O8HH8A2HDzsJc5lEEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiZGMyNWVhM2EwYTcyOWVkOGU2ZTlhNzNkYTg5NmQ4NGY5 NTQzOWMwHhcNMjUxMjIyMTQwMDUzWhcNMjUxMjIzMTQwMDUzWjAzMTEwLwYDVQQD Eyg5NDRiMTNjMTRkNzllZWFmNDI0MzVkNTJlNDE5NzgyZGM5ZWEwNDA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlrxlNjp2yzu1EheExcmnKdjoVAiD +P9s6ubJLxiyKVztG8xAbJCtrfdQbKMj/hh7haTx+6mRd0WRAWnop0sR6esKxaMZ rsnFGunC77KliuEBQoU+KnG5WT0XU9LT+Rf7AbvnxG7Go02nf81JNDHJAsFElwVA atUb7ZyO3cklm6oq4iQg7jv/JfnOtU5MpSb9c7M5VRoNZEkSKkYTRcCYmAMAaA4C z7MewCxE4NJGy3GOZ2Kqp0CWFt5fGG3SpUryX7Xnntt7Q+sB/3+sIGt4apQ8MPb8 PgxvTxgEfAn10l87kQmYsK0EFUVlrBx3wELzYDVvoQj/cytoniy51W+HtwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJRLE8FNee6vQkNdUuQZeC3J6gQGMB8GA1UdIwQY MBaAFMvcJeo6CnKe2Obppz2olthPlUOcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveTl3bDZqb0tjcDdZNXVtblBhaVcyRS1WUTV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS81ZGExZTYtMjQ2Zi00NDkzLTk5MmUt MjJjNzlhZWExMjdjLzEveTl3bDZqb0tjcDdZNXVtblBhaVcyRS1WUTV3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS81ZGExZTYtMjQ2Zi00NDkzLTk5MmUtMjJjNzlhZWExMjdj LzEveTl3bDZqb0tjcDdZNXVtblBhaVcyRS1WUTV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOIBTOG2e zzJbEM9AEOnANB+n122HKY+pFv+Be8TKk0/CFteNMUgO7ybR57RCwGnsc2R2pq2Z +hbrMBquF6D2wjLyNDc9CFv4XtQrQJpxgGs8wKPpziaAPyrC/lYo1AeUq2dFjxtA Qn0H1LvN0zVU1uglrkaEx2Qe9QNXlg5tfyaO8ABSdlz0wpUMiG4QueJFXa0Mp42j bMPtXrBSd+L11MUHDistAsOWeJvRNPcyzi4jk2jgLnApssyaOeiwfm1IsKIF92ol /bkOOYkNvOV2ajnF4bJ3lNdh/vgKTxk47QxT0sgzi+Xs0QczMNytLUymAlhJRJMl pxbgus1afM20Sg== -----END CERTIFICATE-----Generated at Mon Dec 22 22:58:51 2025 by rpki-client