This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/ac7d5a-02bf-4803-86fe-e65d35883093/1/y9_aIe3gGO3_VJgRY1eoxhUux-8.mft File: y9_aIe3gGO3_VJgRY1eoxhUux-8.mft (raw, json) Hash identifier: ZlMWIkIVyDI+isX4cvtBpjiwVSW1p7A1Mps3zNUuz9I= Subject key identifier: BD:9B:24:1E:94:E4:12:C4:87:83:A6:7D:53:B5:93:08:F3:D2:80:8B Authority key identifier: CB:DF:DA:21:ED:E0:18:ED:FF:54:98:11:63:57:A8:C6:15:2E:C7:EF Certificate issuer: /CN=cbdfda21ede018edff5498116357a8c6152ec7ef Certificate serial: 019B3E6D7BF3AED5F7E07819CDE6A310BCA4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9_aIe3gGO3_VJgRY1eoxhUux-8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/ac7d5a-02bf-4803-86fe-e65d35883093/1/y9_aIe3gGO3_VJgRY1eoxhUux-8.mft Manifest number: 0AF9 Signing time: Sun 21 Dec 2025 01:02:01 +0000 Manifest this update: Sun 21 Dec 2025 01:02:01 +0000 Manifest next update: Mon 22 Dec 2025 01:02:01 +0000 Files and hashes: 1: 9qNQB_i0eu4jjJmVJKka4rzSK5w.roa (hash: NblnquqC2LajKbqJk5Dgnmv5h35qFu2LGP00XRuQHvU=) 2: y9_aIe3gGO3_VJgRY1eoxhUux-8.crl (hash: Z/EgU5mwRizI4RvpBYXG4sZvHwH2z3fSXSD6whUsSSY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/ac7d5a-02bf-4803-86fe-e65d35883093/1/y9_aIe3gGO3_VJgRY1eoxhUux-8.crl rsync://rpki.ripe.net/repository/DEFAULT/53/ac7d5a-02bf-4803-86fe-e65d35883093/1/y9_aIe3gGO3_VJgRY1eoxhUux-8.mft rsync://rpki.ripe.net/repository/DEFAULT/y9_aIe3gGO3_VJgRY1eoxhUux-8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:6d:7b:f3:ae:d5:f7:e0:78:19:cd:e6:a3:10:bc:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cbdfda21ede018edff5498116357a8c6152ec7ef Validity Not Before: Dec 21 01:02:01 2025 GMT Not After : Dec 22 01:02:01 2025 GMT Subject: CN=bd9b241e94e412c48783a67d53b59308f3d2808b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:3a:c7:e9:ce:7e:78:c4:b9:8e:ea:8f:07:e2: c3:a6:95:2b:00:be:ca:c9:0e:3f:29:8a:a6:4a:46: 58:d5:60:76:82:a4:e7:79:95:67:1c:aa:03:ab:ee: f6:63:da:73:70:f4:b2:af:1f:9d:dc:27:65:57:c8: 67:d4:b6:fc:cd:3a:b9:87:4b:3b:a2:f6:42:ef:23: b0:4e:4f:7b:60:e7:d6:c4:84:6c:b2:0f:48:eb:cc: 13:a8:f0:d6:f0:42:d9:0a:39:09:ec:cc:74:c0:07: c1:95:2d:b4:21:5b:47:4f:c5:0a:79:d7:74:73:13: bf:3f:d2:31:e9:91:c6:ca:5d:a5:a6:2c:3d:22:d5: e5:df:12:ce:35:4b:d7:9d:36:df:50:69:63:75:80: 0c:4b:5c:57:8d:bc:c0:42:07:57:1d:5d:0d:6e:da: 70:bc:91:4c:b3:f4:d8:66:8c:62:39:57:bc:e5:c5: aa:77:50:91:b9:33:75:8c:bb:7a:5b:80:ff:1a:4e: bf:12:da:fc:7a:fc:86:e8:f7:03:fe:b0:9e:d4:5b: 79:13:70:41:55:2b:1a:8b:da:15:ef:8d:83:bc:8b: 20:5e:8d:67:5a:86:0c:e9:6a:5c:1b:94:06:a4:68: 5b:b2:b5:01:25:16:11:62:2f:6e:a6:aa:1d:ff:30: f2:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:9B:24:1E:94:E4:12:C4:87:83:A6:7D:53:B5:93:08:F3:D2:80:8B X509v3 Authority Key Identifier: keyid:CB:DF:DA:21:ED:E0:18:ED:FF:54:98:11:63:57:A8:C6:15:2E:C7:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9_aIe3gGO3_VJgRY1eoxhUux-8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/ac7d5a-02bf-4803-86fe-e65d35883093/1/y9_aIe3gGO3_VJgRY1eoxhUux-8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/53/ac7d5a-02bf-4803-86fe-e65d35883093/1/y9_aIe3gGO3_VJgRY1eoxhUux-8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:a2:8d:1b:ba:21:c6:7d:4c:fa:0e:82:72:62:d9:c2:cd:cd: 61:b0:09:9a:19:44:77:8d:b3:01:a1:8a:fc:6c:b4:e2:3e:89: 5f:9b:40:ad:82:7e:db:60:b3:bf:f9:0d:7c:76:ac:ad:17:3f: c0:ea:54:0d:4b:b1:00:ba:aa:77:fa:ce:b9:53:80:b7:6c:5d: 97:ff:98:a7:28:56:51:77:54:56:2a:5c:44:b2:2f:bc:a1:6d: d8:59:4f:e8:b8:59:fd:85:c6:df:b3:62:a4:d6:ef:b8:da:0b: 84:d4:b4:6a:b6:ed:a5:48:20:ff:86:51:f8:37:dc:ea:35:85: 90:26:88:28:91:93:21:d0:82:be:ac:e4:2b:e2:58:30:b2:7a: b3:eb:a1:53:22:fc:e9:bd:8b:46:5a:72:b4:b8:a7:9c:41:98: ae:c0:dc:23:28:96:54:cf:43:d8:4d:46:90:95:5d:2e:10:11: ee:30:b0:70:7b:fe:14:7e:de:a6:a4:2e:74:ae:b9:33:28:6c: ec:42:d5:ae:00:db:67:dd:bc:d7:2a:a5:21:cc:f1:c6:db:1c: 5e:83:e6:ff:e0:1f:b5:0e:e6:2b:67:26:9f:39:35:43:a5:2a: ef:36:97:94:76:70:fd:27:c0:aa:8c:f4:ba:58:5e:29:ad:15: f1:ce:8d:99 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+bXvzrtX34HgZzeajELykMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiZGZkYTIxZWRlMDE4ZWRmZjU0OTgxMTYzNTdhOGM2MTUy ZWM3ZWYwHhcNMjUxMjIxMDEwMjAxWhcNMjUxMjIyMDEwMjAxWjAzMTEwLwYDVQQD EyhiZDliMjQxZTk0ZTQxMmM0ODc4M2E2N2Q1M2I1OTMwOGYzZDI4MDhiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0zrH6c5+eMS5juqPB+LDppUrAL7K yQ4/KYqmSkZY1WB2gqTneZVnHKoDq+72Y9pzcPSyrx+d3CdlV8hn1Lb8zTq5h0s7 ovZC7yOwTk97YOfWxIRssg9I68wTqPDW8ELZCjkJ7Mx0wAfBlS20IVtHT8UKedd0 cxO/P9Ix6ZHGyl2lpiw9ItXl3xLONUvXnTbfUGljdYAMS1xXjbzAQgdXHV0Nbtpw vJFMs/TYZoxiOVe85cWqd1CRuTN1jLt6W4D/Gk6/Etr8evyG6PcD/rCe1Ft5E3BB VSsai9oV742DvIsgXo1nWoYM6WpcG5QGpGhbsrUBJRYRYi9upqod/zDyiwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL2bJB6U5BLEh4OmfVO1kwjz0oCLMB8GA1UdIwQY MBaAFMvf2iHt4Bjt/1SYEWNXqMYVLsfvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveTlfYUllM2dHTzNfVkpnUlkxZW94aFV1eC04LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My9hYzdkNWEtMDJiZi00ODAzLTg2ZmUt ZTY1ZDM1ODgzMDkzLzEveTlfYUllM2dHTzNfVkpnUlkxZW94aFV1eC04Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81My9hYzdkNWEtMDJiZi00ODAzLTg2ZmUtZTY1ZDM1ODgzMDkz LzEveTlfYUllM2dHTzNfVkpnUlkxZW94aFV1eC04LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS6KNG7oh xn1M+g6CcmLZws3NYbAJmhlEd42zAaGK/Gy04j6JX5tArYJ+22Czv/kNfHasrRc/ wOpUDUuxALqqd/rOuVOAt2xdl/+YpyhWUXdUVipcRLIvvKFt2FlP6LhZ/YXG37Ni pNbvuNoLhNS0arbtpUgg/4ZR+Dfc6jWFkCaIKJGTIdCCvqzkK+JYMLJ6s+uhUyL8 6b2LRlpytLinnEGYrsDcIyiWVM9D2E1GkJVdLhAR7jCwcHv+FH7epqQudK65Myhs 7ELVrgDbZ9281yqlIczxxtscXoPm/+AftQ7mK2cmnzk1Q6Uq7zaXlHZw/SfAqoz0 ulheKa0V8c6NmQ== -----END CERTIFICATE-----Generated at Sun Dec 21 03:27:08 2025 by rpki-client