This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/c5eb99-7289-4e3e-a8cd-05bbe4ef06c0/1/y9IWsAV0TBjLOE09CdEkBm1V9i0.mft File: y9IWsAV0TBjLOE09CdEkBm1V9i0.mft (raw, json) Hash identifier: nTm7+yrlWNBR9jFA85A8UkKW3tDsqR7g7qY513+eOco= Subject key identifier: 6F:DD:42:AD:59:9C:8E:42:B6:C6:26:D3:05:E5:14:82:04:2A:8B:00 Authority key identifier: CB:D2:16:B0:05:74:4C:18:CB:38:4D:3D:09:D1:24:06:6D:55:F6:2D Certificate issuer: /CN=cbd216b005744c18cb384d3d09d124066d55f62d Certificate serial: 019B1013AD1A5461AC5C2D07E4B2199C05AE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9IWsAV0TBjLOE09CdEkBm1V9i0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/c5eb99-7289-4e3e-a8cd-05bbe4ef06c0/1/y9IWsAV0TBjLOE09CdEkBm1V9i0.mft Manifest number: 089F Signing time: Fri 12 Dec 2025 01:01:23 +0000 Manifest this update: Fri 12 Dec 2025 01:01:23 +0000 Manifest next update: Sat 13 Dec 2025 01:01:23 +0000 Files and hashes: 1: UP5nddVRXKDFwn0rBo0YDADmUWk.roa (hash: c3q9Feje6DSdFs0M8UM9vMSjOtIoCDA85WxaounA6ns=) 2: y9IWsAV0TBjLOE09CdEkBm1V9i0.crl (hash: 80cpkUj+IpqkIjkdRrafInBbIIlrfKbDjZLe3/H1JnA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/c5eb99-7289-4e3e-a8cd-05bbe4ef06c0/1/y9IWsAV0TBjLOE09CdEkBm1V9i0.crl rsync://rpki.ripe.net/repository/DEFAULT/46/c5eb99-7289-4e3e-a8cd-05bbe4ef06c0/1/y9IWsAV0TBjLOE09CdEkBm1V9i0.mft rsync://rpki.ripe.net/repository/DEFAULT/y9IWsAV0TBjLOE09CdEkBm1V9i0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:13:ad:1a:54:61:ac:5c:2d:07:e4:b2:19:9c:05:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cbd216b005744c18cb384d3d09d124066d55f62d Validity Not Before: Dec 12 01:01:23 2025 GMT Not After : Dec 13 01:01:23 2025 GMT Subject: CN=6fdd42ad599c8e42b6c626d305e51482042a8b00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:93:ce:ce:e6:7a:f3:c7:ee:82:31:2e:5f:e3: 36:29:03:fd:8e:53:51:73:e1:9a:f0:20:80:5b:f7: 03:a9:a4:e9:d6:df:d3:b8:86:c4:21:94:e9:03:e1: c4:cc:17:15:e0:0b:3c:ae:b6:b5:bd:6c:de:d2:cd: 8a:58:12:69:1d:2f:80:d5:64:33:3e:fd:7f:79:37: 35:e6:d7:09:f0:63:c9:c3:0d:d5:23:f0:4a:47:e8: 47:d7:03:9e:53:f9:94:cd:de:0c:6e:c9:70:61:1e: 8b:63:ba:e5:aa:4b:25:90:f1:b2:39:34:3f:4f:a4: 2e:b9:0e:21:a8:d9:b5:e3:d8:65:c2:e6:37:ce:ad: ed:83:10:1f:41:43:1f:f1:4d:90:a0:3a:19:d5:92: c3:3b:5d:e0:7c:8a:68:31:06:32:2e:2d:a5:2e:d4: 12:42:d0:ff:9a:b7:95:60:d1:9c:f9:47:58:80:49: c1:5d:15:d6:a6:97:d6:e6:2c:72:c2:20:5e:5c:51: 21:dc:5d:bd:dd:e2:5c:f7:7e:a1:67:4b:17:25:f1: f7:46:1e:01:92:7c:7b:c4:f6:ca:b5:b0:68:86:c7: 30:6c:95:8e:da:ee:a3:66:0d:a8:dd:58:b2:fa:a3: a0:79:8c:e8:d8:cd:66:6a:d9:15:f7:a2:17:d7:58: 97:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:DD:42:AD:59:9C:8E:42:B6:C6:26:D3:05:E5:14:82:04:2A:8B:00 X509v3 Authority Key Identifier: keyid:CB:D2:16:B0:05:74:4C:18:CB:38:4D:3D:09:D1:24:06:6D:55:F6:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9IWsAV0TBjLOE09CdEkBm1V9i0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/c5eb99-7289-4e3e-a8cd-05bbe4ef06c0/1/y9IWsAV0TBjLOE09CdEkBm1V9i0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/c5eb99-7289-4e3e-a8cd-05bbe4ef06c0/1/y9IWsAV0TBjLOE09CdEkBm1V9i0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:57:67:c7:69:0d:3c:64:66:59:f1:b2:96:24:99:ce:3a:dd: 9d:45:af:7b:67:97:8c:fe:e2:02:c3:24:47:7b:00:14:94:00: 19:92:5f:00:65:f2:eb:06:d0:7b:04:9e:f0:af:44:6f:68:1d: 4b:22:2b:21:16:c0:45:e1:c5:68:de:27:6f:eb:1c:83:92:f3: 3e:0f:af:a7:ba:d8:44:50:9b:a9:ef:aa:ca:ae:03:bd:35:b4: 74:ef:3a:88:13:50:5e:8c:a4:c0:f7:59:39:f5:b0:ed:51:84: f4:c6:19:4e:b8:e9:0e:53:50:3f:a6:91:e2:f5:1d:ed:41:db: d9:62:29:e3:99:88:9e:0a:09:d5:89:66:a3:6a:a2:b7:43:e3: 4c:13:31:0e:16:d9:1d:31:67:e8:1d:be:4c:6c:c3:c6:a6:69: 80:d5:d2:61:9d:65:ae:43:3d:12:ea:9b:74:99:27:d1:9f:44: 1f:17:83:37:06:6c:ba:c0:ab:26:29:34:a0:17:a0:e6:12:58: cf:23:1a:df:32:4d:07:10:70:e0:40:80:90:26:8b:d4:2c:f7: b2:2e:b1:f5:5b:eb:35:5f:6e:98:05:39:21:6d:d1:1e:76:96: 6a:f6:42:d1:ae:ee:1c:bb:d9:be:8b:99:8e:eb:b8:06:88:12: 22:5a:0f:85 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsQE60aVGGsXC0H5LIZnAWuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiZDIxNmIwMDU3NDRjMThjYjM4NGQzZDA5ZDEyNDA2NmQ1 NWY2MmQwHhcNMjUxMjEyMDEwMTIzWhcNMjUxMjEzMDEwMTIzWjAzMTEwLwYDVQQD Eyg2ZmRkNDJhZDU5OWM4ZTQyYjZjNjI2ZDMwNWU1MTQ4MjA0MmE4YjAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA25POzuZ688fugjEuX+M2KQP9jlNR c+Ga8CCAW/cDqaTp1t/TuIbEIZTpA+HEzBcV4As8rra1vWze0s2KWBJpHS+A1WQz Pv1/eTc15tcJ8GPJww3VI/BKR+hH1wOeU/mUzd4MbslwYR6LY7rlqkslkPGyOTQ/ T6QuuQ4hqNm149hlwuY3zq3tgxAfQUMf8U2QoDoZ1ZLDO13gfIpoMQYyLi2lLtQS QtD/mreVYNGc+UdYgEnBXRXWppfW5ixywiBeXFEh3F293eJc936hZ0sXJfH3Rh4B knx7xPbKtbBohscwbJWO2u6jZg2o3Viy+qOgeYzo2M1matkV96IX11iXAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG/dQq1ZnI5CtsYm0wXlFIIEKosAMB8GA1UdIwQY MBaAFMvSFrAFdEwYyzhNPQnRJAZtVfYtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveTlJV3NBVjBUQmpMT0UwOUNkRWtCbTFWOWkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni9jNWViOTktNzI4OS00ZTNlLWE4Y2Qt MDViYmU0ZWYwNmMwLzEveTlJV3NBVjBUQmpMT0UwOUNkRWtCbTFWOWkwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni9jNWViOTktNzI4OS00ZTNlLWE4Y2QtMDViYmU0ZWYwNmMw LzEveTlJV3NBVjBUQmpMT0UwOUNkRWtCbTFWOWkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV1dnx2kN PGRmWfGyliSZzjrdnUWve2eXjP7iAsMkR3sAFJQAGZJfAGXy6wbQewSe8K9Eb2gd SyIrIRbAReHFaN4nb+scg5LzPg+vp7rYRFCbqe+qyq4DvTW0dO86iBNQXoykwPdZ OfWw7VGE9MYZTrjpDlNQP6aR4vUd7UHb2WIp45mIngoJ1Ylmo2qit0PjTBMxDhbZ HTFn6B2+TGzDxqZpgNXSYZ1lrkM9EuqbdJkn0Z9EHxeDNwZsusCrJik0oBeg5hJY zyMa3zJNBxBw4ECAkCaL1Cz3si6x9VvrNV9umAU5IW3RHnaWavZC0a7uHLvZvouZ juu4BogSIloPhQ== -----END CERTIFICATE-----Generated at Fri Dec 12 02:51:46 2025 by rpki-client