This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/5efef4-6299-47cc-a9ca-d516f0e1487b/1/9y6ckUbte8WMhc2rbrhY5CKG7vQ.mft File: 9y6ckUbte8WMhc2rbrhY5CKG7vQ.mft (raw, json) Hash identifier: yWE+XzyoWMa6+lwBE3zDLcoW1XEwTMu7gIynPyzEm8g= Subject key identifier: A5:8D:2F:A6:55:84:09:7D:B1:3A:25:3A:1D:91:6C:0E:D3:6D:56:06 Authority key identifier: F7:2E:9C:91:46:ED:7B:C5:8C:85:CD:AB:6E:B8:58:E4:22:86:EE:F4 Certificate issuer: /CN=f72e9c9146ed7bc58c85cdab6eb858e42286eef4 Certificate serial: 019AAC834EF2B47FD5937CCC986AD0A64EC6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9y6ckUbte8WMhc2rbrhY5CKG7vQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/5efef4-6299-47cc-a9ca-d516f0e1487b/1/9y6ckUbte8WMhc2rbrhY5CKG7vQ.mft Manifest number: 070E Signing time: Sat 22 Nov 2025 17:01:17 +0000 Manifest this update: Sat 22 Nov 2025 17:01:17 +0000 Manifest next update: Sun 23 Nov 2025 17:01:17 +0000 Files and hashes: 1: 9y6ckUbte8WMhc2rbrhY5CKG7vQ.crl (hash: RQINO1z0jZzWanE3FxX/o2a8MHnPFCAJGFRsspt8Eh8=) 2: GaOIxHYrGt_x1xNOwfVe1mM1uls.roa (hash: 6h4qg1f7k4UwgHPBRYv76SUwfsVkd9pZo7L1FeBQMpI=) 3: S3-UGk16fgBKghN_7jlpmFhtevk.roa (hash: svmOkbDlORnE+JdlDBeTol63DbR+qbg9OLTtqku/fJk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/5efef4-6299-47cc-a9ca-d516f0e1487b/1/9y6ckUbte8WMhc2rbrhY5CKG7vQ.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/5efef4-6299-47cc-a9ca-d516f0e1487b/1/9y6ckUbte8WMhc2rbrhY5CKG7vQ.mft rsync://rpki.ripe.net/repository/DEFAULT/9y6ckUbte8WMhc2rbrhY5CKG7vQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 23 Nov 2025 12:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ac:83:4e:f2:b4:7f:d5:93:7c:cc:98:6a:d0:a6:4e:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f72e9c9146ed7bc58c85cdab6eb858e42286eef4 Validity Not Before: Nov 22 17:01:17 2025 GMT Not After : Nov 23 17:01:17 2025 GMT Subject: CN=a58d2fa65584097db13a253a1d916c0ed36d5606 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:c5:4b:29:65:aa:cd:dd:d1:e3:22:a1:ec:bb: c4:94:64:45:a7:14:26:9a:a5:ce:c6:9d:73:5b:d8: f4:92:34:64:e1:41:71:48:d2:69:7a:81:78:f3:f8: 75:12:e5:a5:0f:f0:1c:69:02:34:33:0c:7a:33:bf: 65:57:6c:52:98:d8:fd:23:66:47:a6:0f:fe:4d:51: 52:23:97:55:5c:e3:26:33:88:d7:e0:f9:61:63:ab: 93:f1:08:fd:f2:8f:3a:90:bb:17:cb:bb:fd:a8:68: 0f:4b:8e:1e:55:82:ff:d8:02:ea:74:f3:f5:bf:ec: c2:4e:62:2e:41:ea:a7:9e:b4:62:2d:9c:5e:e1:e0: 7e:82:6f:4a:fb:47:01:cc:71:2b:d6:bc:3a:78:61: 24:21:6b:b3:cd:a0:27:07:f0:51:8a:16:49:13:96: 26:6a:47:c4:7b:41:5e:e1:75:9a:c0:75:8a:04:fb: 8a:75:e8:69:32:a4:cd:2c:26:22:a0:17:8a:e6:1c: a9:a6:cf:73:6c:51:29:d9:03:98:e0:69:c5:aa:b5: 24:d2:99:70:d3:d3:4f:0f:d3:94:14:c7:52:f7:c9: dd:22:2c:48:f3:9e:96:c9:ef:65:e6:e1:3d:a5:a8: 5e:3f:c3:08:f3:2a:c2:ab:49:b9:33:2a:ff:96:73: ae:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:8D:2F:A6:55:84:09:7D:B1:3A:25:3A:1D:91:6C:0E:D3:6D:56:06 X509v3 Authority Key Identifier: keyid:F7:2E:9C:91:46:ED:7B:C5:8C:85:CD:AB:6E:B8:58:E4:22:86:EE:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9y6ckUbte8WMhc2rbrhY5CKG7vQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/5efef4-6299-47cc-a9ca-d516f0e1487b/1/9y6ckUbte8WMhc2rbrhY5CKG7vQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/5efef4-6299-47cc-a9ca-d516f0e1487b/1/9y6ckUbte8WMhc2rbrhY5CKG7vQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:84:dd:ce:12:6c:08:72:ba:ce:b2:7b:8d:b3:fd:50:a7:1e: c5:0a:56:7d:68:6d:e2:0d:1b:05:b6:fa:cb:91:c4:7e:de:7d: e9:4b:a8:e6:0b:c6:6c:82:9c:01:23:a5:41:f7:12:cf:0c:6d: cf:28:65:5a:91:c1:97:f8:57:86:57:10:c2:ac:4d:41:ea:e3: 63:80:7a:5f:0b:06:5e:76:c9:64:4e:88:38:a6:81:34:26:2d: 7a:79:0a:8c:ba:44:69:58:2e:6a:0c:ab:fd:11:d2:de:dd:eb: 44:18:6a:08:86:e8:32:fe:a1:ec:9a:e2:3f:fc:8a:4f:76:f7: 0b:c6:d9:93:4c:f7:88:9a:3d:42:ab:3f:e9:88:23:81:ee:ad: 3c:ce:5c:48:06:6d:4f:bd:b3:5c:11:db:8b:7f:e2:aa:2d:70: d8:1f:10:e4:e1:10:31:e0:c5:85:29:6f:4a:37:6f:fa:54:40: 0e:10:89:5c:98:be:a7:66:38:00:fc:91:79:0a:86:35:da:5e: 45:15:fc:9e:0a:10:5a:54:99:81:0a:c9:c8:4d:ac:be:4f:68: b9:54:70:ac:c7:7d:13:4e:f5:7a:12:fc:75:0c:1b:58:ca:90: ca:98:77:e9:b0:2f:a4:7d:fa:64:4e:6f:4e:47:64:11:9a:90: 63:f5:94:43 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZqsg07ytH/Vk3zMmGrQpk7GMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY3MmU5YzkxNDZlZDdiYzU4Yzg1Y2RhYjZlYjg1OGU0MjI4 NmVlZjQwHhcNMjUxMTIyMTcwMTE3WhcNMjUxMTIzMTcwMTE3WjAzMTEwLwYDVQQD EyhhNThkMmZhNjU1ODQwOTdkYjEzYTI1M2ExZDkxNmMwZWQzNmQ1NjA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkcVLKWWqzd3R4yKh7LvElGRFpxQm mqXOxp1zW9j0kjRk4UFxSNJpeoF48/h1EuWlD/AcaQI0Mwx6M79lV2xSmNj9I2ZH pg/+TVFSI5dVXOMmM4jX4PlhY6uT8Qj98o86kLsXy7v9qGgPS44eVYL/2ALqdPP1 v+zCTmIuQeqnnrRiLZxe4eB+gm9K+0cBzHEr1rw6eGEkIWuzzaAnB/BRihZJE5Ym akfEe0Fe4XWawHWKBPuKdehpMqTNLCYioBeK5hypps9zbFEp2QOY4GnFqrUk0plw 09NPD9OUFMdS98ndIixI856Wye9l5uE9paheP8MI8yrCq0m5Myr/lnOuywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKWNL6ZVhAl9sTolOh2RbA7TbVYGMB8GA1UdIwQY MBaAFPcunJFG7XvFjIXNq264WOQihu70MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOXk2Y2tVYnRlOFdNaGMycmJyaFk1Q0tHN3ZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC81ZWZlZjQtNjI5OS00N2NjLWE5Y2Et ZDUxNmYwZTE0ODdiLzEvOXk2Y2tVYnRlOFdNaGMycmJyaFk1Q0tHN3ZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC81ZWZlZjQtNjI5OS00N2NjLWE5Y2EtZDUxNmYwZTE0ODdi LzEvOXk2Y2tVYnRlOFdNaGMycmJyaFk1Q0tHN3ZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc4TdzhJs CHK6zrJ7jbP9UKcexQpWfWht4g0bBbb6y5HEft596Uuo5gvGbIKcASOlQfcSzwxt zyhlWpHBl/hXhlcQwqxNQerjY4B6XwsGXnbJZE6IOKaBNCYtenkKjLpEaVguagyr /RHS3t3rRBhqCIboMv6h7JriP/yKT3b3C8bZk0z3iJo9Qqs/6Ygjge6tPM5cSAZt T72zXBHbi3/iqi1w2B8Q5OEQMeDFhSlvSjdv+lRADhCJXJi+p2Y4APyReQqGNdpe RRX8ngoQWlSZgQrJyE2svk9ouVRwrMd9E071ehL8dQwbWMqQyph36bAvpH36ZE5v TkdkEZqQY/WUQw== -----END CERTIFICATE-----Generated at Sat Nov 22 21:40:33 2025 by rpki-client