This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/f841d9-5505-4e3d-a2ff-f7c1899cd7fa/1/y0W24SUWoP1eur56eBEILzp0Y5c.mft File: y0W24SUWoP1eur56eBEILzp0Y5c.mft (raw, json) Hash identifier: Ws+P2dUS2J41wsfkdmDTPqI0iKITYce7GbHRo5U1UfI= Subject key identifier: B0:0F:15:0C:A9:35:AA:F4:A3:AE:F0:65:85:31:2B:B6:55:C2:86:83 Authority key identifier: CB:45:B6:E1:25:16:A0:FD:5E:BA:BE:7A:78:11:08:2F:3A:74:63:97 Certificate issuer: /CN=cb45b6e12516a0fd5ebabe7a7811082f3a746397 Certificate serial: 019B5D89D98426ECE1A06E3B805830F02385 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y0W24SUWoP1eur56eBEILzp0Y5c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/f841d9-5505-4e3d-a2ff-f7c1899cd7fa/1/y0W24SUWoP1eur56eBEILzp0Y5c.mft Manifest number: 0CC2 Signing time: Sat 27 Dec 2025 02:01:13 +0000 Manifest this update: Sat 27 Dec 2025 02:01:13 +0000 Manifest next update: Sun 28 Dec 2025 02:01:13 +0000 Files and hashes: 1: d43Bbm-jTlxIEQu_UfTFZQFzBcE.roa (hash: UkexUnRIJprjhWor4Jilgkay/bVJfFqJkF7dBPx8pH8=) 2: y0W24SUWoP1eur56eBEILzp0Y5c.crl (hash: 3LXA7i8f/F4IDuYKKscNxCt4u+ggzqA2DMv8Ow58xW4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/f841d9-5505-4e3d-a2ff-f7c1899cd7fa/1/y0W24SUWoP1eur56eBEILzp0Y5c.crl rsync://rpki.ripe.net/repository/DEFAULT/f7/f841d9-5505-4e3d-a2ff-f7c1899cd7fa/1/y0W24SUWoP1eur56eBEILzp0Y5c.mft rsync://rpki.ripe.net/repository/DEFAULT/y0W24SUWoP1eur56eBEILzp0Y5c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5d:89:d9:84:26:ec:e1:a0:6e:3b:80:58:30:f0:23:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb45b6e12516a0fd5ebabe7a7811082f3a746397 Validity Not Before: Dec 27 02:01:13 2025 GMT Not After : Dec 28 02:01:13 2025 GMT Subject: CN=b00f150ca935aaf4a3aef06585312bb655c28683 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:22:8c:f9:8e:ed:af:88:a2:7b:61:65:bb:56: 6e:08:5d:1f:8c:84:50:51:9e:00:5c:bd:1b:da:8c: f2:b2:b5:0e:30:11:50:9b:06:3a:ca:39:b1:f6:8a: a6:38:5e:e3:45:6a:ae:2e:08:8b:4a:00:e6:b2:0b: 95:3f:6b:f1:e9:72:84:1a:c4:ee:44:61:f8:af:c0: 10:43:b4:f7:90:b5:2d:ca:fb:40:89:ec:f3:79:86: e4:ec:bc:e3:f4:04:58:3b:07:69:9d:72:1a:e7:d7: 95:6e:37:83:0a:eb:fc:a0:57:a3:fd:44:ed:19:30: 68:35:72:83:7e:66:4c:34:b6:08:58:3f:da:1f:f3: b2:fc:ad:11:4a:e3:75:89:d3:77:e2:24:3b:ab:da: 9b:17:5d:ba:06:0b:2d:cf:f1:67:1c:4c:35:47:94: 57:91:93:2a:5b:5c:a2:68:63:4f:04:a0:b3:00:b4: a7:ea:e4:5e:49:65:eb:47:90:41:8c:a0:01:3d:4b: 75:67:ca:87:38:bb:eb:44:d1:cd:1b:76:59:92:73: 01:d0:03:81:80:c5:13:3f:0e:83:f3:5a:fc:59:e7: 4e:80:9e:f5:13:73:8c:a6:58:0a:85:89:5c:ec:eb: f9:05:45:46:6a:67:20:5d:8f:56:26:d3:ca:93:99: e7:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:0F:15:0C:A9:35:AA:F4:A3:AE:F0:65:85:31:2B:B6:55:C2:86:83 X509v3 Authority Key Identifier: keyid:CB:45:B6:E1:25:16:A0:FD:5E:BA:BE:7A:78:11:08:2F:3A:74:63:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y0W24SUWoP1eur56eBEILzp0Y5c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f841d9-5505-4e3d-a2ff-f7c1899cd7fa/1/y0W24SUWoP1eur56eBEILzp0Y5c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f841d9-5505-4e3d-a2ff-f7c1899cd7fa/1/y0W24SUWoP1eur56eBEILzp0Y5c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:15:22:82:03:e6:1d:ae:c1:64:ef:4b:b1:4b:54:c7:89:fc: 5f:2e:2e:51:31:de:c7:81:9c:ce:97:bf:6c:19:2d:23:e5:1d: 14:e6:a6:23:90:ae:ff:b2:e6:93:74:ce:65:af:c1:5a:4d:fa: 12:53:92:81:e6:7d:f4:a3:a3:fe:65:0d:a5:01:68:95:c8:86: 3c:fb:4d:8d:40:70:89:f7:64:0c:8e:e7:09:63:c4:c3:33:55: 0c:cb:bb:f3:c0:6e:21:dc:53:b0:db:af:bc:c4:56:d8:c1:90: ef:4f:cf:10:50:d6:df:e9:e7:24:70:ac:02:26:de:7a:6b:91: e2:0b:fc:df:e5:c9:f4:3b:db:32:6b:fc:9c:bc:58:a9:a2:19: b4:4c:49:a8:94:a9:96:f7:df:c3:67:31:f3:61:e5:57:73:a4: 90:c7:d5:fd:99:37:88:e0:05:69:d6:73:e3:92:be:5c:94:43: 8c:e2:27:7b:1d:b5:76:9a:41:2e:f2:eb:bc:1d:93:0f:54:d6: f0:ed:6d:e1:aa:ea:7a:15:05:c3:f7:32:31:34:8a:cb:ca:5b: 66:81:41:10:e5:59:b7:a7:09:e2:30:8c:9f:45:4e:49:67:0c: 26:79:7d:ca:a8:03:99:21:f9:e9:90:0f:d5:c3:ce:ab:77:9a: 9c:41:fc:18 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtdidmEJuzhoG47gFgw8COFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiNDViNmUxMjUxNmEwZmQ1ZWJhYmU3YTc4MTEwODJmM2E3 NDYzOTcwHhcNMjUxMjI3MDIwMTEzWhcNMjUxMjI4MDIwMTEzWjAzMTEwLwYDVQQD EyhiMDBmMTUwY2E5MzVhYWY0YTNhZWYwNjU4NTMxMmJiNjU1YzI4NjgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArSKM+Y7tr4iie2Flu1ZuCF0fjIRQ UZ4AXL0b2ozysrUOMBFQmwY6yjmx9oqmOF7jRWquLgiLSgDmsguVP2vx6XKEGsTu RGH4r8AQQ7T3kLUtyvtAiezzeYbk7Lzj9ARYOwdpnXIa59eVbjeDCuv8oFej/UTt GTBoNXKDfmZMNLYIWD/aH/Oy/K0RSuN1idN34iQ7q9qbF126Bgstz/FnHEw1R5RX kZMqW1yiaGNPBKCzALSn6uReSWXrR5BBjKABPUt1Z8qHOLvrRNHNG3ZZknMB0AOB gMUTPw6D81r8WedOgJ71E3OMplgKhYlc7Ov5BUVGamcgXY9WJtPKk5nn2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLAPFQypNar0o67wZYUxK7ZVwoaDMB8GA1UdIwQY MBaAFMtFtuElFqD9Xrq+engRCC86dGOXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveTBXMjRTVVdvUDFldXI1NmVCRUlMenAwWTVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy9mODQxZDktNTUwNS00ZTNkLWEyZmYt ZjdjMTg5OWNkN2ZhLzEveTBXMjRTVVdvUDFldXI1NmVCRUlMenAwWTVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNy9mODQxZDktNTUwNS00ZTNkLWEyZmYtZjdjMTg5OWNkN2Zh LzEveTBXMjRTVVdvUDFldXI1NmVCRUlMenAwWTVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAURUiggPm Ha7BZO9LsUtUx4n8Xy4uUTHex4Gczpe/bBktI+UdFOamI5Cu/7Lmk3TOZa/BWk36 ElOSgeZ99KOj/mUNpQFolciGPPtNjUBwifdkDI7nCWPEwzNVDMu788BuIdxTsNuv vMRW2MGQ70/PEFDW3+nnJHCsAibeemuR4gv83+XJ9DvbMmv8nLxYqaIZtExJqJSp lvffw2cx82HlV3OkkMfV/Zk3iOAFadZz45K+XJRDjOInex21dppBLvLrvB2TD1TW 8O1t4arqehUFw/cyMTSKy8pbZoFBEOVZt6cJ4jCMn0VOSWcMJnl9yqgDmSH56ZAP 1cPOq3eanEH8GA== -----END CERTIFICATE-----Generated at Sat Dec 27 07:05:48 2025 by rpki-client