This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/6b329f-f4f5-4af0-a81e-92b6796c77cc/1/y9dF6_zsOC3yUsL3UNtkj08DSr8.mft File: y9dF6_zsOC3yUsL3UNtkj08DSr8.mft (raw, json) Hash identifier: zDJMXnv8SJO5dlZy4SOlX+60uXT0EoUAegByTzVONkc= Subject key identifier: 6B:EC:54:6D:56:28:67:0B:E1:9D:DF:01:1F:68:FB:DB:B4:60:84:E3 Authority key identifier: CB:D7:45:EB:FC:EC:38:2D:F2:52:C2:F7:50:DB:64:8F:4F:03:4A:BF Certificate issuer: /CN=cbd745ebfcec382df252c2f750db648f4f034abf Certificate serial: 019B0E92AFF2893D8E7AF5E4C2D85D21199C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9dF6_zsOC3yUsL3UNtkj08DSr8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/6b329f-f4f5-4af0-a81e-92b6796c77cc/1/y9dF6_zsOC3yUsL3UNtkj08DSr8.mft Manifest number: 10F4 Signing time: Thu 11 Dec 2025 18:00:52 +0000 Manifest this update: Thu 11 Dec 2025 18:00:52 +0000 Manifest next update: Fri 12 Dec 2025 18:00:52 +0000 Files and hashes: 1: GiEc-ANqrb63QcspGJXLFg9KsNI.roa (hash: Sdx7QGn6KBOh9cOI8uzLQw1JR4w8NsvJTOnn28cZmjk=) 2: y9dF6_zsOC3yUsL3UNtkj08DSr8.crl (hash: 1Wrr+5nck0zIUgaWhPGgNx7M7GFhGXo7KeQzqFi0IYQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/6b329f-f4f5-4af0-a81e-92b6796c77cc/1/y9dF6_zsOC3yUsL3UNtkj08DSr8.crl rsync://rpki.ripe.net/repository/DEFAULT/62/6b329f-f4f5-4af0-a81e-92b6796c77cc/1/y9dF6_zsOC3yUsL3UNtkj08DSr8.mft rsync://rpki.ripe.net/repository/DEFAULT/y9dF6_zsOC3yUsL3UNtkj08DSr8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 18:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:92:af:f2:89:3d:8e:7a:f5:e4:c2:d8:5d:21:19:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cbd745ebfcec382df252c2f750db648f4f034abf Validity Not Before: Dec 11 18:00:52 2025 GMT Not After : Dec 12 18:00:52 2025 GMT Subject: CN=6bec546d5628670be19ddf011f68fbdbb46084e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:63:95:3e:05:47:16:8b:33:71:89:ea:58:8c: 49:3f:ba:64:41:bd:5b:4a:84:b3:b6:7a:e6:0d:e9: ef:cb:d0:b9:e9:96:1d:a8:3a:91:8c:d4:9a:b7:06: 44:33:61:ba:a4:90:e3:a1:d1:e7:82:25:62:64:31: 54:a8:bb:43:41:38:de:7e:e2:20:3c:28:f0:a4:11: bc:84:3b:da:cb:bf:a2:4f:99:c5:cc:9f:8a:5d:77: a5:a8:69:73:c8:00:62:71:78:41:5b:85:b7:da:88: 68:75:a6:95:63:76:47:7b:c5:dc:04:55:42:46:84: 1f:b3:5f:8a:70:6c:04:2f:c4:5a:75:58:18:f8:c9: dc:b3:2e:34:f0:53:f3:ae:f8:5c:70:71:90:00:8c: ce:7a:d1:41:35:6c:ee:48:13:74:6f:31:5a:46:23: 5a:af:d4:a0:62:8a:cb:0d:f1:92:7d:fa:17:99:7c: 05:15:f4:5f:a9:f7:25:fc:e7:74:6f:3e:19:47:96: 54:e0:0c:5d:ea:64:28:1d:d2:47:e1:9c:1e:a5:7a: d9:4d:4f:cc:19:c6:db:8e:e8:9f:aa:b3:19:34:a5: 1f:a6:ed:89:50:b7:f6:5f:68:f1:ff:d8:73:db:0f: 43:1f:56:9e:59:66:ac:b7:56:ad:c4:15:ba:41:67: f8:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:EC:54:6D:56:28:67:0B:E1:9D:DF:01:1F:68:FB:DB:B4:60:84:E3 X509v3 Authority Key Identifier: keyid:CB:D7:45:EB:FC:EC:38:2D:F2:52:C2:F7:50:DB:64:8F:4F:03:4A:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9dF6_zsOC3yUsL3UNtkj08DSr8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/6b329f-f4f5-4af0-a81e-92b6796c77cc/1/y9dF6_zsOC3yUsL3UNtkj08DSr8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/6b329f-f4f5-4af0-a81e-92b6796c77cc/1/y9dF6_zsOC3yUsL3UNtkj08DSr8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:9f:b0:a9:b4:1f:1e:5f:39:68:c7:6f:5d:03:d5:90:2c:be: 39:c2:99:e4:b1:9f:14:8f:62:f1:c4:6c:38:a9:1d:d8:5e:e6: 76:62:40:79:48:b0:27:7b:7a:79:4e:cd:62:80:7e:42:cf:85: 73:0c:54:e7:bb:f8:13:63:f7:81:31:7a:f4:97:7a:12:41:7b: 08:36:2b:b1:0d:93:04:37:b6:bf:04:c0:77:e0:27:00:4d:a4: 5a:4d:01:63:10:3e:36:4e:71:77:29:6b:19:0f:f5:82:4f:b1: 1a:1a:02:2c:0c:aa:0d:cb:0e:e8:2b:2a:2a:91:42:68:81:cc: 91:62:6a:63:6f:af:7a:b4:db:fc:a7:aa:f8:2a:e3:38:cc:77: 70:83:12:ac:44:4e:9b:4d:29:0b:69:1a:85:ff:56:9a:0e:8d: 34:d7:bb:2b:cc:3a:12:10:ad:f5:df:05:0c:5d:ce:0f:44:40: 9b:9d:be:bc:de:6b:49:59:8e:ec:02:b5:c8:13:2a:ac:5f:29: 4a:ab:47:82:e2:14:12:70:c1:96:81:35:b4:65:74:50:ac:67: 31:a8:f8:97:88:23:2a:d8:24:e5:03:a4:a5:b2:5c:6f:a4:b7: ff:44:a4:3a:5e:00:1f:6a:d0:46:09:74:20:ae:e5:c6:e4:46: 30:71:12:19 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOkq/yiT2OevXkwthdIRmcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiZDc0NWViZmNlYzM4MmRmMjUyYzJmNzUwZGI2NDhmNGYw MzRhYmYwHhcNMjUxMjExMTgwMDUyWhcNMjUxMjEyMTgwMDUyWjAzMTEwLwYDVQQD Eyg2YmVjNTQ2ZDU2Mjg2NzBiZTE5ZGRmMDExZjY4ZmJkYmI0NjA4NGUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvWOVPgVHFoszcYnqWIxJP7pkQb1b SoSztnrmDenvy9C56ZYdqDqRjNSatwZEM2G6pJDjodHngiViZDFUqLtDQTjefuIg PCjwpBG8hDvay7+iT5nFzJ+KXXelqGlzyABicXhBW4W32ohodaaVY3ZHe8XcBFVC RoQfs1+KcGwEL8RadVgY+Mncsy408FPzrvhccHGQAIzOetFBNWzuSBN0bzFaRiNa r9SgYorLDfGSffoXmXwFFfRfqfcl/Od0bz4ZR5ZU4Axd6mQoHdJH4ZwepXrZTU/M GcbbjuifqrMZNKUfpu2JULf2X2jx/9hz2w9DH1aeWWast1atxBW6QWf4ZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGvsVG1WKGcL4Z3fAR9o+9u0YITjMB8GA1UdIwQY MBaAFMvXRev87Dgt8lLC91DbZI9PA0q/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveTlkRjZfenNPQzN5VXNMM1VOdGtqMDhEU3I4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi82YjMyOWYtZjRmNS00YWYwLWE4MWUt OTJiNjc5NmM3N2NjLzEveTlkRjZfenNPQzN5VXNMM1VOdGtqMDhEU3I4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi82YjMyOWYtZjRmNS00YWYwLWE4MWUtOTJiNjc5NmM3N2Nj LzEveTlkRjZfenNPQzN5VXNMM1VOdGtqMDhEU3I4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfJ+wqbQf Hl85aMdvXQPVkCy+OcKZ5LGfFI9i8cRsOKkd2F7mdmJAeUiwJ3t6eU7NYoB+Qs+F cwxU57v4E2P3gTF69Jd6EkF7CDYrsQ2TBDe2vwTAd+AnAE2kWk0BYxA+Nk5xdylr GQ/1gk+xGhoCLAyqDcsO6CsqKpFCaIHMkWJqY2+verTb/Keq+CrjOMx3cIMSrERO m00pC2kahf9Wmg6NNNe7K8w6EhCt9d8FDF3OD0RAm52+vN5rSVmO7AK1yBMqrF8p SqtHguIUEnDBloE1tGV0UKxnMaj4l4gjKtgk5QOkpbJcb6S3/0SkOl4AH2rQRgl0 IK7lxuRGMHESGQ== -----END CERTIFICATE-----Generated at Fri Dec 12 01:33:25 2025 by rpki-client