This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/082f12-513b-4eb9-a171-c6f6d444915f/1/y9lC2W7pSnpaZS73rIVdyUAUFd8.mft File: y9lC2W7pSnpaZS73rIVdyUAUFd8.mft (raw, json) Hash identifier: CWrQ0nWGapySaHmaAnyWxwwWEyZxI03r1uozEFS7lE0= Subject key identifier: 59:DF:17:11:A6:6A:CA:53:A2:3A:8A:44:B5:12:A1:5F:F6:77:66:2E Authority key identifier: CB:D9:42:D9:6E:E9:4A:7A:5A:65:2E:F7:AC:85:5D:C9:40:14:15:DF Certificate issuer: /CN=cbd942d96ee94a7a5a652ef7ac855dc9401415df Certificate serial: 019B37FCE6757E4D214AFC26417B203827E8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9lC2W7pSnpaZS73rIVdyUAUFd8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/082f12-513b-4eb9-a171-c6f6d444915f/1/y9lC2W7pSnpaZS73rIVdyUAUFd8.mft Manifest number: 1789 Signing time: Fri 19 Dec 2025 19:01:19 +0000 Manifest this update: Fri 19 Dec 2025 19:01:19 +0000 Manifest next update: Sat 20 Dec 2025 19:01:19 +0000 Files and hashes: 1: HD6zC7xfGA0SAuF4e7yz2Af08gs.roa (hash: VEGKVVclN7mqg9gsZ7F7LgAgXxZFarPfa+qJz1ng4Pg=) 2: y9lC2W7pSnpaZS73rIVdyUAUFd8.crl (hash: QjQP+UVHvV4QcBBlU2/Eqo1LSpO8/sUvhd8YPpwL1wg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/082f12-513b-4eb9-a171-c6f6d444915f/1/y9lC2W7pSnpaZS73rIVdyUAUFd8.crl rsync://rpki.ripe.net/repository/DEFAULT/77/082f12-513b-4eb9-a171-c6f6d444915f/1/y9lC2W7pSnpaZS73rIVdyUAUFd8.mft rsync://rpki.ripe.net/repository/DEFAULT/y9lC2W7pSnpaZS73rIVdyUAUFd8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:fc:e6:75:7e:4d:21:4a:fc:26:41:7b:20:38:27:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cbd942d96ee94a7a5a652ef7ac855dc9401415df Validity Not Before: Dec 19 19:01:19 2025 GMT Not After : Dec 20 19:01:19 2025 GMT Subject: CN=59df1711a66aca53a23a8a44b512a15ff677662e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:a9:b6:14:af:1d:18:95:84:be:68:81:15:1c: 4d:09:43:3d:3c:29:29:fa:e9:57:de:15:1b:65:e0: 9a:97:1c:a9:fd:33:28:b9:97:9c:48:24:c6:36:31: 4d:c4:8d:b9:bc:da:50:26:39:bd:a0:14:ba:54:45: 23:b3:7b:ac:66:51:8e:19:30:3f:89:a6:ab:81:d2: bc:cd:1e:60:a1:8b:3f:28:70:5b:31:71:88:b1:00: a6:28:1e:3f:ce:6b:fa:ef:60:f3:6b:a5:3d:0a:8e: 69:d5:2c:e4:75:b5:72:4d:f2:cd:4f:0f:71:86:ea: 43:da:e0:38:cb:07:3d:0d:b8:fd:6d:80:f1:df:0e: e6:a4:03:48:66:db:91:19:a2:e4:27:96:3f:16:6e: 64:d8:9f:c3:6e:a9:c5:89:7a:03:05:1f:50:a8:86: 7e:43:e8:58:68:ca:0c:95:02:6d:8c:4e:a7:36:1f: 61:f3:b2:ec:91:b4:75:60:22:3d:16:90:c2:66:17: 41:82:62:b1:ff:6c:a8:93:04:b1:e1:88:c6:d4:94: 63:61:0a:da:cd:80:ee:27:94:f1:6c:d4:0a:04:01: 3c:c4:73:fe:7b:22:81:07:72:13:7c:1b:c4:04:36: d7:5b:b4:38:68:e4:90:e3:97:ec:e9:33:2f:b7:eb: 35:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:DF:17:11:A6:6A:CA:53:A2:3A:8A:44:B5:12:A1:5F:F6:77:66:2E X509v3 Authority Key Identifier: keyid:CB:D9:42:D9:6E:E9:4A:7A:5A:65:2E:F7:AC:85:5D:C9:40:14:15:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9lC2W7pSnpaZS73rIVdyUAUFd8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/082f12-513b-4eb9-a171-c6f6d444915f/1/y9lC2W7pSnpaZS73rIVdyUAUFd8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/77/082f12-513b-4eb9-a171-c6f6d444915f/1/y9lC2W7pSnpaZS73rIVdyUAUFd8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:e5:66:60:62:9f:40:35:8f:c5:de:44:5c:02:7e:76:f2:c7: 7e:b1:0a:31:29:03:8f:44:81:5a:1b:57:8f:80:6d:a5:d5:7f: 14:fe:39:83:98:cf:29:c0:5b:cf:40:97:21:59:ec:3d:d1:9c: c8:da:40:97:48:e2:29:d2:47:1a:41:13:b1:9c:df:b9:f8:7a: 77:f3:b1:9a:50:5c:e2:ab:da:60:6a:61:cd:e8:84:84:2e:9b: 95:e3:0c:9d:f5:d3:16:23:ec:60:ec:42:7c:42:45:02:4d:ec: e5:f6:87:c2:4c:12:96:ad:08:06:54:4a:93:5d:04:89:20:8f: 89:90:32:2b:6d:22:d2:9a:85:be:19:34:f9:84:93:41:26:2b: 9f:21:df:e4:a1:98:53:7e:3b:73:44:cb:97:5a:90:18:c4:c2: 0d:e2:5a:bc:08:4e:79:a7:6b:68:b7:2d:26:f4:40:4b:87:19: 41:ac:0c:98:fe:42:1d:b8:ee:01:b7:80:58:9c:e5:e9:67:09: ec:27:77:6a:a4:4f:7b:c3:10:a5:92:9e:ba:5a:e1:bb:ca:39: 14:ae:40:75:2d:ca:bb:37:26:cb:91:fd:91:ff:85:67:60:28: d3:dc:c2:97:bd:a8:e9:55:4c:20:4a:f8:7d:14:67:7a:0b:62: 9c:ee:03:31 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3/OZ1fk0hSvwmQXsgOCfoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiZDk0MmQ5NmVlOTRhN2E1YTY1MmVmN2FjODU1ZGM5NDAx NDE1ZGYwHhcNMjUxMjE5MTkwMTE5WhcNMjUxMjIwMTkwMTE5WjAzMTEwLwYDVQQD Eyg1OWRmMTcxMWE2NmFjYTUzYTIzYThhNDRiNTEyYTE1ZmY2Nzc2NjJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm6m2FK8dGJWEvmiBFRxNCUM9PCkp +ulX3hUbZeCalxyp/TMouZecSCTGNjFNxI25vNpQJjm9oBS6VEUjs3usZlGOGTA/ iaargdK8zR5goYs/KHBbMXGIsQCmKB4/zmv672Dza6U9Co5p1SzkdbVyTfLNTw9x hupD2uA4ywc9Dbj9bYDx3w7mpANIZtuRGaLkJ5Y/Fm5k2J/DbqnFiXoDBR9QqIZ+ Q+hYaMoMlQJtjE6nNh9h87LskbR1YCI9FpDCZhdBgmKx/2yokwSx4YjG1JRjYQra zYDuJ5TxbNQKBAE8xHP+eyKBB3ITfBvEBDbXW7Q4aOSQ45fs6TMvt+s1kwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFnfFxGmaspTojqKRLUSoV/2d2YuMB8GA1UdIwQY MBaAFMvZQtlu6Up6WmUu96yFXclAFBXfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveTlsQzJXN3BTbnBhWlM3M3JJVmR5VUFVRmQ4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny8wODJmMTItNTEzYi00ZWI5LWExNzEt YzZmNmQ0NDQ5MTVmLzEveTlsQzJXN3BTbnBhWlM3M3JJVmR5VUFVRmQ4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ny8wODJmMTItNTEzYi00ZWI5LWExNzEtYzZmNmQ0NDQ5MTVm LzEveTlsQzJXN3BTbnBhWlM3M3JJVmR5VUFVRmQ4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb+VmYGKf QDWPxd5EXAJ+dvLHfrEKMSkDj0SBWhtXj4BtpdV/FP45g5jPKcBbz0CXIVnsPdGc yNpAl0jiKdJHGkETsZzfufh6d/OxmlBc4qvaYGphzeiEhC6bleMMnfXTFiPsYOxC fEJFAk3s5faHwkwSlq0IBlRKk10EiSCPiZAyK20i0pqFvhk0+YSTQSYrnyHf5KGY U347c0TLl1qQGMTCDeJavAhOeadraLctJvRAS4cZQawMmP5CHbjuAbeAWJzl6WcJ 7Cd3aqRPe8MQpZKeulrhu8o5FK5AdS3Kuzcmy5H9kf+FZ2Ao09zCl72o6VVMIEr4 fRRnegtinO4DMQ== -----END CERTIFICATE-----Generated at Sat Dec 20 01:49:09 2025 by rpki-client