This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/dc8c0d-f8c3-406c-b79e-b492d6ff483f/1/y9RxnXLSiKcyGNjBpJiCMzMpfiU.mft File: y9RxnXLSiKcyGNjBpJiCMzMpfiU.mft (raw, json) Hash identifier: 2FeHGtjU0teZoYzVp8yb/R9Y1MQ+f2mBpgXDiAc8MCk= Subject key identifier: 67:29:EB:C3:80:FC:35:D4:28:5A:3F:10:65:08:A8:25:66:2E:37:72 Authority key identifier: CB:D4:71:9D:72:D2:88:A7:32:18:D8:C1:A4:98:82:33:33:29:7E:25 Certificate issuer: /CN=cbd4719d72d288a73218d8c1a498823333297e25 Certificate serial: 019B35324E14822342CC0CBFCAF5B9BABD25 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9RxnXLSiKcyGNjBpJiCMzMpfiU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/dc8c0d-f8c3-406c-b79e-b492d6ff483f/1/y9RxnXLSiKcyGNjBpJiCMzMpfiU.mft Manifest number: 178B Signing time: Fri 19 Dec 2025 06:00:47 +0000 Manifest this update: Fri 19 Dec 2025 06:00:47 +0000 Manifest next update: Sat 20 Dec 2025 06:00:47 +0000 Files and hashes: 1: FCsvVRb4swZVn7i4DbPOyl1zfXM.roa (hash: pWG3xc+TD2BjxXH94IjEoL3ycjPpI1BrWH3pnVMhatw=) 2: d7nnb22eByZ3PgdzvIIdeg7bVrw.roa (hash: MtT+ZrWZXS09kZHHdiFFktcO1Kssl/83QQmCIziV1ms=) 3: fX9eMLnK7xVb4_2F9g2DOCYqfvU.roa (hash: 1sy/TAEfLZZfPClLeEAAWlanxJu879FILQU8C/alm0M=) 4: y9RxnXLSiKcyGNjBpJiCMzMpfiU.crl (hash: 0WKdmzi/pDZCfLQizDqlb/QH22vTNR7q+C5/MRuD8Ls=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/dc8c0d-f8c3-406c-b79e-b492d6ff483f/1/y9RxnXLSiKcyGNjBpJiCMzMpfiU.crl rsync://rpki.ripe.net/repository/DEFAULT/db/dc8c0d-f8c3-406c-b79e-b492d6ff483f/1/y9RxnXLSiKcyGNjBpJiCMzMpfiU.mft rsync://rpki.ripe.net/repository/DEFAULT/y9RxnXLSiKcyGNjBpJiCMzMpfiU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 06:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:32:4e:14:82:23:42:cc:0c:bf:ca:f5:b9:ba:bd:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cbd4719d72d288a73218d8c1a498823333297e25 Validity Not Before: Dec 19 06:00:47 2025 GMT Not After : Dec 20 06:00:47 2025 GMT Subject: CN=6729ebc380fc35d4285a3f106508a825662e3772 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:f9:4e:c0:2b:cc:17:7a:39:00:47:65:9a:d6: ec:6b:9b:64:b8:c4:4b:54:ec:3a:b3:f8:9b:a8:07: 5b:b6:b2:2a:50:c5:a4:2f:3f:55:d4:0f:44:48:53: 89:a6:8c:6d:8d:e0:c3:c9:79:63:e7:27:d3:bf:ab: ee:55:20:66:6a:e3:bb:3a:a4:dc:80:59:02:42:03: 42:3c:13:9a:1a:fa:d8:d9:a4:8b:e0:1c:ea:10:9a: ed:8e:e2:79:d6:7f:80:1e:65:3c:22:93:f1:3c:cc: 25:20:93:54:9a:01:9b:57:34:a1:54:a1:61:84:83: fd:09:0e:59:2e:fa:d9:41:05:f1:74:df:f2:5c:6e: cc:6e:02:39:64:3a:a2:7f:5f:cb:2e:d5:20:bb:1b: ff:ca:9b:14:31:4f:d5:b2:2a:57:ec:cb:08:04:be: 0a:7c:d6:31:25:da:9e:b2:db:cc:f4:18:49:84:cc: 5c:8b:5c:59:65:d7:c3:2a:78:ec:21:0e:06:21:67: 4b:60:e7:0a:cc:51:f2:28:ba:44:7e:1f:f8:ea:06: a1:8c:1a:e8:92:4f:ca:6c:c1:fb:54:48:dc:59:d5: 2d:d6:36:71:2b:7e:9b:5f:be:a2:d1:ce:02:09:a5: 0b:b6:13:b1:ae:3d:19:e1:72:9d:9a:d5:52:68:77: 73:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:29:EB:C3:80:FC:35:D4:28:5A:3F:10:65:08:A8:25:66:2E:37:72 X509v3 Authority Key Identifier: keyid:CB:D4:71:9D:72:D2:88:A7:32:18:D8:C1:A4:98:82:33:33:29:7E:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9RxnXLSiKcyGNjBpJiCMzMpfiU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/dc8c0d-f8c3-406c-b79e-b492d6ff483f/1/y9RxnXLSiKcyGNjBpJiCMzMpfiU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/dc8c0d-f8c3-406c-b79e-b492d6ff483f/1/y9RxnXLSiKcyGNjBpJiCMzMpfiU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:9b:d2:4b:fb:e2:0d:48:e9:b5:10:85:81:c0:ef:f9:86:02: 1e:99:37:37:2c:04:fa:d9:00:ea:ee:35:2a:87:bb:e8:63:62: c4:ba:88:2e:6e:1e:fa:8a:a3:d9:43:08:3a:88:e1:6c:e2:2e: 9a:aa:e7:08:c8:d3:ea:1f:2b:07:c8:5d:68:7a:af:73:fe:c9: 22:51:b3:ec:28:7e:bf:94:bf:8d:1d:d1:61:b7:70:25:44:3e: 4d:67:6f:19:c7:72:49:d5:c8:5f:a1:4d:d9:e2:99:b7:0e:f1: 31:46:9d:7a:d7:04:a1:29:fe:68:a6:8e:72:13:1d:2f:c3:7b: 5a:1f:57:d3:06:f1:33:f1:be:c8:ea:a8:00:e3:37:f3:99:75: d8:9c:d1:98:d5:a5:33:85:77:39:ce:ad:68:0a:fb:ad:e9:63: 0a:c6:db:60:3e:5d:69:a3:ce:24:1e:96:08:ea:3b:15:15:55: d0:7f:45:a9:de:27:41:ac:31:7d:0a:4f:e1:7f:c8:85:46:13: fd:b4:0e:9c:e3:5b:90:67:af:1b:26:1e:db:6d:86:75:35:bf: ec:bd:e4:5e:ca:10:1d:17:4b:d4:8f:41:14:3d:aa:dd:94:5b: ee:ff:cd:2e:23:74:74:4a:5c:33:37:25:01:01:a9:8e:ac:d7: c3:ad:36:2a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1Mk4UgiNCzAy/yvW5ur0lMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiZDQ3MTlkNzJkMjg4YTczMjE4ZDhjMWE0OTg4MjMzMzMy OTdlMjUwHhcNMjUxMjE5MDYwMDQ3WhcNMjUxMjIwMDYwMDQ3WjAzMTEwLwYDVQQD Eyg2NzI5ZWJjMzgwZmMzNWQ0Mjg1YTNmMTA2NTA4YTgyNTY2MmUzNzcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuflOwCvMF3o5AEdlmtbsa5tkuMRL VOw6s/ibqAdbtrIqUMWkLz9V1A9ESFOJpoxtjeDDyXlj5yfTv6vuVSBmauO7OqTc gFkCQgNCPBOaGvrY2aSL4BzqEJrtjuJ51n+AHmU8IpPxPMwlIJNUmgGbVzShVKFh hIP9CQ5ZLvrZQQXxdN/yXG7MbgI5ZDqif1/LLtUguxv/ypsUMU/VsipX7MsIBL4K fNYxJdqestvM9BhJhMxci1xZZdfDKnjsIQ4GIWdLYOcKzFHyKLpEfh/46gahjBro kk/KbMH7VEjcWdUt1jZxK36bX76i0c4CCaULthOxrj0Z4XKdmtVSaHdzeQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGcp68OA/DXUKFo/EGUIqCVmLjdyMB8GA1UdIwQY MBaAFMvUcZ1y0oinMhjYwaSYgjMzKX4lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveTlSeG5YTFNpS2N5R05qQnBKaUNNek1wZmlVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9kYzhjMGQtZjhjMy00MDZjLWI3OWUt YjQ5MmQ2ZmY0ODNmLzEveTlSeG5YTFNpS2N5R05qQnBKaUNNek1wZmlVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi9kYzhjMGQtZjhjMy00MDZjLWI3OWUtYjQ5MmQ2ZmY0ODNm LzEveTlSeG5YTFNpS2N5R05qQnBKaUNNek1wZmlVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcZvSS/vi DUjptRCFgcDv+YYCHpk3NywE+tkA6u41Koe76GNixLqILm4e+oqj2UMIOojhbOIu mqrnCMjT6h8rB8hdaHqvc/7JIlGz7Ch+v5S/jR3RYbdwJUQ+TWdvGcdySdXIX6FN 2eKZtw7xMUadetcEoSn+aKaOchMdL8N7Wh9X0wbxM/G+yOqoAOM385l12JzRmNWl M4V3Oc6taAr7reljCsbbYD5daaPOJB6WCOo7FRVV0H9Fqd4nQawxfQpP4X/IhUYT /bQOnONbkGevGyYe222GdTW/7L3kXsoQHRdL1I9BFD2q3ZRb7v/NLiN0dEpcMzcl AQGpjqzXw602Kg== -----END CERTIFICATE-----Generated at Fri Dec 19 12:19:26 2025 by rpki-client