This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/4e2150-669d-4554-b779-2bb8861a3e4d/1/y1VlbGnVU9qSt4OFDhWxcE6HbZM.mft File: y1VlbGnVU9qSt4OFDhWxcE6HbZM.mft (raw, json) Hash identifier: AmOylc8uNj+LG05CyliSE1y9IxqZ1rih+y2UGGRwoO0= Subject key identifier: 0B:1C:FD:38:15:A2:85:2E:98:35:37:31:24:71:43:93:15:EC:27:EF Authority key identifier: CB:55:65:6C:69:D5:53:DA:92:B7:83:85:0E:15:B1:70:4E:87:6D:93 Certificate issuer: /CN=cb55656c69d553da92b783850e15b1704e876d93 Certificate serial: 019B53AC05E6535A334BFAA387B4A5154330 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y1VlbGnVU9qSt4OFDhWxcE6HbZM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/4e2150-669d-4554-b779-2bb8861a3e4d/1/y1VlbGnVU9qSt4OFDhWxcE6HbZM.mft Manifest number: 14DA Signing time: Thu 25 Dec 2025 04:02:21 +0000 Manifest this update: Thu 25 Dec 2025 04:02:21 +0000 Manifest next update: Fri 26 Dec 2025 04:02:21 +0000 Files and hashes: 1: YyOogR6T7jG6zD-5lx-V8y_JBFA.roa (hash: jTd/5MNcv4fqMfKWtnfVXAAWAN6UzlPvaAV2hpZQQJw=) 2: y1VlbGnVU9qSt4OFDhWxcE6HbZM.crl (hash: owK6WzymPTVENmDnCXCsuAP5UlWGlUd1guQlAjrJraw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/4e2150-669d-4554-b779-2bb8861a3e4d/1/y1VlbGnVU9qSt4OFDhWxcE6HbZM.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/4e2150-669d-4554-b779-2bb8861a3e4d/1/y1VlbGnVU9qSt4OFDhWxcE6HbZM.mft rsync://rpki.ripe.net/repository/DEFAULT/y1VlbGnVU9qSt4OFDhWxcE6HbZM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 01:21:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:53:ac:05:e6:53:5a:33:4b:fa:a3:87:b4:a5:15:43:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb55656c69d553da92b783850e15b1704e876d93 Validity Not Before: Dec 25 04:02:21 2025 GMT Not After : Dec 26 04:02:21 2025 GMT Subject: CN=0b1cfd3815a2852e983537312471439315ec27ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:c3:9f:00:dd:70:11:0b:f3:3f:a9:09:1e:91: 82:e3:da:2c:7d:df:97:74:6a:f9:5d:cd:59:1a:f9: 76:56:8d:79:47:8d:73:ce:8e:4e:b6:e5:91:58:ff: bc:c0:4d:bc:17:61:53:19:34:dc:d9:67:22:fe:36: 5a:6b:19:7e:e3:9a:e1:7e:06:bd:d9:99:8a:e6:d5: a5:f0:9d:38:1a:53:11:ce:0a:1f:54:49:5f:7e:f6: 4c:ac:75:65:39:33:ed:bb:14:f5:ea:6a:4c:cd:fa: 28:39:06:f0:db:4a:a6:6d:d7:6b:56:fc:9b:38:96: 6c:ab:22:b6:44:1f:4c:20:a1:38:ff:37:2c:b2:a3: 84:48:79:62:ec:23:17:1b:9a:5f:81:ef:02:76:9b: 48:b0:4c:b2:27:ce:e2:89:41:cb:b7:73:41:02:29: 49:4f:d7:2b:a9:4e:b2:f4:d8:3c:c7:e8:a7:d7:62: df:86:4a:bb:08:5b:ab:8a:6c:bd:c2:52:ec:cb:d4: 69:22:c0:78:8e:03:ee:ed:8d:52:d4:47:06:06:37: 73:17:5b:72:e2:dc:cf:2b:33:4e:26:4e:29:0a:fa: e6:1f:97:b7:44:79:9b:46:a9:f4:e5:1f:98:86:40: 5e:34:ea:8c:67:73:c8:bd:5d:49:a4:a1:47:3b:1d: 21:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:1C:FD:38:15:A2:85:2E:98:35:37:31:24:71:43:93:15:EC:27:EF X509v3 Authority Key Identifier: keyid:CB:55:65:6C:69:D5:53:DA:92:B7:83:85:0E:15:B1:70:4E:87:6D:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y1VlbGnVU9qSt4OFDhWxcE6HbZM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/4e2150-669d-4554-b779-2bb8861a3e4d/1/y1VlbGnVU9qSt4OFDhWxcE6HbZM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/4e2150-669d-4554-b779-2bb8861a3e4d/1/y1VlbGnVU9qSt4OFDhWxcE6HbZM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bd:9e:40:e7:c8:c5:71:9a:a4:4b:ed:6c:68:59:93:9f:ae:75: 03:a8:76:e4:4e:ca:1a:24:85:60:3c:da:cd:96:6f:f4:c0:0c: 84:3e:7d:8c:6d:45:9b:60:93:84:2c:4f:7f:38:b0:76:ce:de: d0:9e:2f:f5:bc:41:cf:46:ae:b0:cd:b3:91:08:01:33:10:65: 33:41:95:75:19:f6:ad:f7:de:53:6f:b4:03:3c:18:a0:a0:96: d6:d4:f3:ed:90:dd:ae:7b:59:36:48:d3:da:4b:e3:d4:54:51: b4:b3:2e:b3:2f:3b:ee:87:9e:5e:b5:d1:67:a5:49:e7:9c:a7: ef:4f:00:e4:c6:b7:e0:96:8d:67:59:d1:71:3b:ca:8d:77:d3: 56:fd:b4:a0:f5:17:73:45:b7:9d:19:3e:83:f0:45:6e:ac:93: 0c:2d:e4:49:54:31:2f:dc:66:2f:1b:fe:76:9a:88:da:33:42: fc:92:6f:09:8c:1b:30:28:bb:f8:0c:d3:1e:5d:35:dd:51:8d: ea:6b:d2:ab:b1:bd:56:d2:33:9b:c1:c0:63:29:43:fc:66:75: 45:79:55:4a:3d:9b:e3:1a:88:37:a4:e0:ef:23:00:3b:70:10: e8:91:cb:46:bc:ca:4e:54:4f:9a:75:3f:df:db:ac:aa:eb:60: ce:fe:f7:16 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtTrAXmU1ozS/qjh7SlFUMwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiNTU2NTZjNjlkNTUzZGE5MmI3ODM4NTBlMTViMTcwNGU4 NzZkOTMwHhcNMjUxMjI1MDQwMjIxWhcNMjUxMjI2MDQwMjIxWjAzMTEwLwYDVQQD EygwYjFjZmQzODE1YTI4NTJlOTgzNTM3MzEyNDcxNDM5MzE1ZWMyN2VmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0MOfAN1wEQvzP6kJHpGC49osfd+X dGr5Xc1ZGvl2Vo15R41zzo5OtuWRWP+8wE28F2FTGTTc2Wci/jZaaxl+45rhfga9 2ZmK5tWl8J04GlMRzgofVElffvZMrHVlOTPtuxT16mpMzfooOQbw20qmbddrVvyb OJZsqyK2RB9MIKE4/zcssqOESHli7CMXG5pfge8CdptIsEyyJ87iiUHLt3NBAilJ T9crqU6y9Ng8x+in12Lfhkq7CFurimy9wlLsy9RpIsB4jgPu7Y1S1EcGBjdzF1ty 4tzPKzNOJk4pCvrmH5e3RHmbRqn05R+YhkBeNOqMZ3PIvV1JpKFHOx0hrwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAsc/TgVooUumDU3MSRxQ5MV7CfvMB8GA1UdIwQY MBaAFMtVZWxp1VPakreDhQ4VsXBOh22TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveTFWbGJHblZVOXFTdDRPRkRoV3hjRTZIYlpNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy80ZTIxNTAtNjY5ZC00NTU0LWI3Nzkt MmJiODg2MWEzZTRkLzEveTFWbGJHblZVOXFTdDRPRkRoV3hjRTZIYlpNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy80ZTIxNTAtNjY5ZC00NTU0LWI3NzktMmJiODg2MWEzZTRk LzEveTFWbGJHblZVOXFTdDRPRkRoV3hjRTZIYlpNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvZ5A58jF cZqkS+1saFmTn651A6h25E7KGiSFYDzazZZv9MAMhD59jG1Fm2CThCxPfziwds7e 0J4v9bxBz0ausM2zkQgBMxBlM0GVdRn2rffeU2+0AzwYoKCW1tTz7ZDdrntZNkjT 2kvj1FRRtLMusy877oeeXrXRZ6VJ55yn708A5Ma34JaNZ1nRcTvKjXfTVv20oPUX c0W3nRk+g/BFbqyTDC3kSVQxL9xmLxv+dpqI2jNC/JJvCYwbMCi7+AzTHl013VGN 6mvSq7G9VtIzm8HAYylD/GZ1RXlVSj2b4xqIN6Tg7yMAO3AQ6JHLRrzKTlRPmnU/ 39usqutgzv73Fg== -----END CERTIFICATE-----Generated at Thu Dec 25 06:34:41 2025 by rpki-client