This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/b89e86-bfb4-4af6-8448-1f0dd9fdf5f3/1/y1Qn_V0gWF6XwvJ3HUgJv2NB2qE.mft File: y1Qn_V0gWF6XwvJ3HUgJv2NB2qE.mft (raw, json) Hash identifier: uu/wq9wYZBAOPREWZ0ig4vwWAAq41vxTBFOGxPV5xTo= Subject key identifier: 51:5E:30:F3:8F:59:C1:BC:92:3F:45:F8:42:3C:45:1B:01:79:EE:4F Authority key identifier: CB:54:27:FD:5D:20:58:5E:97:C2:F2:77:1D:48:09:BF:63:41:DA:A1 Certificate issuer: /CN=cb5427fd5d20585e97c2f2771d4809bf6341daa1 Certificate serial: 019B2B1CD1D04D29FECB3F46E9C6C5126698 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y1Qn_V0gWF6XwvJ3HUgJv2NB2qE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/b89e86-bfb4-4af6-8448-1f0dd9fdf5f3/1/y1Qn_V0gWF6XwvJ3HUgJv2NB2qE.mft Manifest number: 0887 Signing time: Wed 17 Dec 2025 07:01:07 +0000 Manifest this update: Wed 17 Dec 2025 07:01:07 +0000 Manifest next update: Thu 18 Dec 2025 07:01:07 +0000 Files and hashes: 1: Kukv8lguLlqo8syva8to6ZRKCQQ.roa (hash: 6TsYNWvLqQDFoSOz1kHCV3IHIsfRZkDxe8fDivBN+2k=) 2: y1Qn_V0gWF6XwvJ3HUgJv2NB2qE.crl (hash: I+7TFqp3OC9Fca+3Tjz3ULVNmqVX/rp+kib8TdqDY7I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/b89e86-bfb4-4af6-8448-1f0dd9fdf5f3/1/y1Qn_V0gWF6XwvJ3HUgJv2NB2qE.crl rsync://rpki.ripe.net/repository/DEFAULT/f9/b89e86-bfb4-4af6-8448-1f0dd9fdf5f3/1/y1Qn_V0gWF6XwvJ3HUgJv2NB2qE.mft rsync://rpki.ripe.net/repository/DEFAULT/y1Qn_V0gWF6XwvJ3HUgJv2NB2qE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 07:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:1c:d1:d0:4d:29:fe:cb:3f:46:e9:c6:c5:12:66:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb5427fd5d20585e97c2f2771d4809bf6341daa1 Validity Not Before: Dec 17 07:01:07 2025 GMT Not After : Dec 18 07:01:07 2025 GMT Subject: CN=515e30f38f59c1bc923f45f8423c451b0179ee4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:48:2a:da:a9:0a:03:84:33:b1:9d:9a:56:d0: f3:73:46:8c:31:cb:5b:4e:19:99:e5:c7:3f:ec:e1: 42:eb:1d:ac:6f:ed:27:d8:cc:aa:36:4d:7f:35:b2: f0:1e:04:32:36:d0:98:76:87:f2:8b:e3:00:cb:5f: 23:fe:57:83:ed:88:2f:c1:40:8b:52:8b:22:a3:24: a1:79:84:29:5b:c9:9d:58:a1:a2:7c:ac:5e:2e:c5: 33:22:23:c6:9a:e3:cd:34:83:f4:ac:d2:b3:24:82: b2:7c:e3:50:31:7c:fd:df:dd:e9:79:88:52:b6:53: 95:bf:4f:1e:0a:1d:1d:77:90:ec:c7:3d:41:38:a1: 06:8d:80:f6:9b:97:ed:f3:45:90:06:5e:0c:8e:c6: 54:2d:eb:18:ec:b6:ef:c9:32:86:97:c7:f9:6e:8a: 42:e8:35:3b:9a:57:d9:85:dc:c6:45:cf:d0:28:5d: 20:83:0a:da:ae:33:49:c9:dd:bb:be:7a:4b:b7:1c: 26:80:2a:a7:ce:d4:b5:3b:a4:b8:8a:80:fc:78:62: df:22:31:0a:d4:a1:b0:6f:f8:75:14:21:26:b0:ff: d1:d8:45:9e:a2:9e:b4:ec:6e:f9:ba:8d:92:2b:e9: 5a:e2:2f:10:49:5d:45:2a:57:23:f0:52:c6:43:f9: f4:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:5E:30:F3:8F:59:C1:BC:92:3F:45:F8:42:3C:45:1B:01:79:EE:4F X509v3 Authority Key Identifier: keyid:CB:54:27:FD:5D:20:58:5E:97:C2:F2:77:1D:48:09:BF:63:41:DA:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y1Qn_V0gWF6XwvJ3HUgJv2NB2qE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/b89e86-bfb4-4af6-8448-1f0dd9fdf5f3/1/y1Qn_V0gWF6XwvJ3HUgJv2NB2qE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/b89e86-bfb4-4af6-8448-1f0dd9fdf5f3/1/y1Qn_V0gWF6XwvJ3HUgJv2NB2qE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:4f:5a:6d:96:cb:d4:7d:b3:21:de:4b:96:03:01:eb:23:cd: b6:25:b2:d2:90:68:3f:95:a0:0e:93:30:b8:f0:1e:f6:15:b4: 9c:6a:33:dd:4f:b7:d4:69:4b:34:be:0f:66:f5:f3:bc:7b:48: 01:fa:ac:89:20:d1:9a:fc:e4:63:53:62:56:ec:ec:4d:df:8a: 7b:3e:3f:e2:5e:ae:d7:e5:c3:86:09:b4:72:b6:07:9c:8f:c2: 26:2d:ca:a6:9d:d2:67:5c:43:78:09:77:31:ed:44:ec:ec:8d: 36:8b:48:3d:f1:43:b3:0e:32:80:40:54:ed:17:6c:b1:c8:66: 8b:1e:31:f3:41:49:b7:f1:a7:4c:69:8c:00:1b:00:9a:c7:7b: 7c:5b:97:b7:3d:a0:df:b8:8a:f1:10:b2:89:88:76:bb:5c:0a: 59:7c:d8:95:ac:e3:56:7f:90:55:bc:f0:59:d1:63:ba:69:e7: c7:11:e7:3a:2d:ca:27:e5:01:01:f5:b3:50:19:57:d4:d0:28: 9c:3b:15:ca:68:52:f5:59:c3:3b:56:69:8a:6b:19:46:96:5d: 38:ed:c5:57:7f:df:cb:d3:88:79:9d:8d:ca:03:0b:48:86:5c: e3:8a:6f:7b:a7:05:fa:f5:cd:db:3e:6c:d9:9f:8f:de:4a:69: 19:ca:7b:9f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsrHNHQTSn+yz9G6cbFEmaYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiNTQyN2ZkNWQyMDU4NWU5N2MyZjI3NzFkNDgwOWJmNjM0 MWRhYTEwHhcNMjUxMjE3MDcwMTA3WhcNMjUxMjE4MDcwMTA3WjAzMTEwLwYDVQQD Eyg1MTVlMzBmMzhmNTljMWJjOTIzZjQ1Zjg0MjNjNDUxYjAxNzllZTRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq0gq2qkKA4QzsZ2aVtDzc0aMMctb ThmZ5cc/7OFC6x2sb+0n2MyqNk1/NbLwHgQyNtCYdofyi+MAy18j/leD7YgvwUCL UosioySheYQpW8mdWKGifKxeLsUzIiPGmuPNNIP0rNKzJIKyfONQMXz9393peYhS tlOVv08eCh0dd5Dsxz1BOKEGjYD2m5ft80WQBl4MjsZULesY7LbvyTKGl8f5bopC 6DU7mlfZhdzGRc/QKF0ggwrarjNJyd27vnpLtxwmgCqnztS1O6S4ioD8eGLfIjEK 1KGwb/h1FCEmsP/R2EWeop607G75uo2SK+la4i8QSV1FKlcj8FLGQ/n08wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFFeMPOPWcG8kj9F+EI8RRsBee5PMB8GA1UdIwQY MBaAFMtUJ/1dIFhel8Lydx1ICb9jQdqhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveTFRbl9WMGdXRjZYd3ZKM0hVZ0p2Mk5CMnFFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS9iODllODYtYmZiNC00YWY2LTg0NDgt MWYwZGQ5ZmRmNWYzLzEveTFRbl9WMGdXRjZYd3ZKM0hVZ0p2Mk5CMnFFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOS9iODllODYtYmZiNC00YWY2LTg0NDgtMWYwZGQ5ZmRmNWYz LzEveTFRbl9WMGdXRjZYd3ZKM0hVZ0p2Mk5CMnFFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY09abZbL 1H2zId5LlgMB6yPNtiWy0pBoP5WgDpMwuPAe9hW0nGoz3U+31GlLNL4PZvXzvHtI AfqsiSDRmvzkY1NiVuzsTd+Kez4/4l6u1+XDhgm0crYHnI/CJi3Kpp3SZ1xDeAl3 Me1E7OyNNotIPfFDsw4ygEBU7Rdsschmix4x80FJt/GnTGmMABsAmsd7fFuXtz2g 37iK8RCyiYh2u1wKWXzYlazjVn+QVbzwWdFjumnnxxHnOi3KJ+UBAfWzUBlX1NAo nDsVymhS9VnDO1ZpimsZRpZdOO3FV3/fy9OIeZ2NygMLSIZc44pve6cF+vXN2z5s 2Z+P3kppGcp7nw== -----END CERTIFICATE-----Generated at Wed Dec 17 11:21:38 2025 by rpki-client