This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/95ba80-0751-4cb9-8cb4-29f334e11a19/1/y9IrSt4O0dTVMo6uXzili-lT-Dg.mft File: y9IrSt4O0dTVMo6uXzili-lT-Dg.mft (raw, json) Hash identifier: 3OXd2e+ahfxi5d+TIwz8mW1/7I8nmVQz1qIOKioZJAI= Subject key identifier: 3B:9B:75:EA:79:5B:46:DB:A9:0E:5A:7A:CF:47:89:3F:21:3A:3E:96 Authority key identifier: CB:D2:2B:4A:DE:0E:D1:D4:D5:32:8E:AE:5F:38:A5:8B:E9:53:F8:38 Certificate issuer: /CN=cbd22b4ade0ed1d4d5328eae5f38a58be953f838 Certificate serial: 019B37C603521DE87F1CFFA2336CAB70BC6F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9IrSt4O0dTVMo6uXzili-lT-Dg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/95ba80-0751-4cb9-8cb4-29f334e11a19/1/y9IrSt4O0dTVMo6uXzili-lT-Dg.mft Manifest number: 0E6C Signing time: Fri 19 Dec 2025 18:01:22 +0000 Manifest this update: Fri 19 Dec 2025 18:01:22 +0000 Manifest next update: Sat 20 Dec 2025 18:01:22 +0000 Files and hashes: 1: 73c0jhSky3BnN0TXunRjeB--q1A.roa (hash: 1Lx5ICQYUA/HUXjaB+c1tYSpkcTCOv6g20/mLwIRufE=) 2: y9IrSt4O0dTVMo6uXzili-lT-Dg.crl (hash: VMmD/y5XeVShczrlafZpnLtOlCZVsYnn3UMUZVtwRm4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/95ba80-0751-4cb9-8cb4-29f334e11a19/1/y9IrSt4O0dTVMo6uXzili-lT-Dg.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/95ba80-0751-4cb9-8cb4-29f334e11a19/1/y9IrSt4O0dTVMo6uXzili-lT-Dg.mft rsync://rpki.ripe.net/repository/DEFAULT/y9IrSt4O0dTVMo6uXzili-lT-Dg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:c6:03:52:1d:e8:7f:1c:ff:a2:33:6c:ab:70:bc:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cbd22b4ade0ed1d4d5328eae5f38a58be953f838 Validity Not Before: Dec 19 18:01:22 2025 GMT Not After : Dec 20 18:01:22 2025 GMT Subject: CN=3b9b75ea795b46dba90e5a7acf47893f213a3e96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:20:38:5a:9c:65:fe:f5:18:21:6d:01:65:84: b2:7f:af:38:d5:5a:27:a6:3c:f4:23:a3:07:82:c0: 58:42:db:19:3f:2c:c2:82:8e:69:b4:13:ae:84:d9: a1:b0:a0:7d:a9:54:22:38:a4:ea:8c:c1:5a:2b:95: 48:28:91:85:4a:83:d9:61:63:25:39:e4:0c:bc:98: e4:c2:27:f1:fb:b3:72:49:0c:3f:de:ec:73:0b:23: 16:c8:26:33:04:f1:05:4c:d4:21:b1:60:ef:86:fd: 4f:d3:26:3e:5b:df:75:a9:8d:01:2c:55:65:fe:fe: f7:71:92:b6:ce:0f:53:17:e7:84:9b:91:55:05:f1: 86:54:d8:1a:c8:dc:c1:0a:0a:bc:6b:c3:7e:76:ff: 99:a1:e2:f8:0f:89:1e:52:f3:9a:4c:6d:ce:e9:5e: 2e:cf:b2:45:1e:34:8d:2e:35:15:e8:6a:66:15:fb: 90:57:86:9f:0e:0c:dd:c8:1b:6b:00:ac:41:9d:39: d2:9f:2c:05:07:62:15:d3:64:91:30:ab:d0:a6:00: f9:42:2a:4f:6a:db:1b:9e:5d:e0:36:ae:d1:94:bd: 82:16:86:89:66:0e:ea:4e:b2:17:83:89:79:d0:c3: 56:2d:a0:a5:02:83:fa:92:44:8f:67:12:d9:0a:88: c6:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:9B:75:EA:79:5B:46:DB:A9:0E:5A:7A:CF:47:89:3F:21:3A:3E:96 X509v3 Authority Key Identifier: keyid:CB:D2:2B:4A:DE:0E:D1:D4:D5:32:8E:AE:5F:38:A5:8B:E9:53:F8:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9IrSt4O0dTVMo6uXzili-lT-Dg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/95ba80-0751-4cb9-8cb4-29f334e11a19/1/y9IrSt4O0dTVMo6uXzili-lT-Dg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/95ba80-0751-4cb9-8cb4-29f334e11a19/1/y9IrSt4O0dTVMo6uXzili-lT-Dg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:25:e1:61:05:68:89:6a:61:00:61:b2:21:a9:32:36:b4:d9: 2c:68:b3:0a:99:f1:a8:9f:65:1d:88:d1:12:dd:a6:6e:da:c2: da:4e:f0:5e:2c:5c:b0:84:f7:fb:fd:04:1b:5b:35:65:ee:59: c8:5d:18:c2:f6:c8:f9:dc:b7:75:2e:65:f5:59:d8:ed:ef:8c: 10:c3:49:88:1e:ff:c4:53:3b:2e:2f:0e:db:c5:3d:5d:37:17: 5f:bd:33:17:af:11:32:47:cb:80:73:13:6e:42:6b:a3:54:7a: 95:b5:27:29:92:58:6a:79:98:ec:f2:17:e6:8a:03:9d:30:0a: 6a:27:4e:6e:71:2a:44:bf:d2:7c:52:b6:ed:1c:0f:d5:0a:2f: ce:86:4d:01:a3:6c:3d:8f:72:33:d2:84:7a:23:8e:cc:dd:1f: 06:39:31:f7:d2:54:02:30:e7:63:f1:13:f1:9d:9c:f3:54:70: 63:73:bc:57:80:41:70:2a:36:25:f9:50:c0:a5:85:cf:51:b6: 6f:7c:65:a3:bd:84:8f:5a:16:8c:af:16:36:99:25:14:ad:4e: df:18:d2:f0:82:d7:ac:da:a3:d5:a2:4c:02:2c:28:b0:13:b2: c0:3c:60:97:a4:b0:de:d4:9f:5c:b8:1b:d1:60:43:a2:6a:8b: 68:74:78:62 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3xgNSHeh/HP+iM2yrcLxvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiZDIyYjRhZGUwZWQxZDRkNTMyOGVhZTVmMzhhNThiZTk1 M2Y4MzgwHhcNMjUxMjE5MTgwMTIyWhcNMjUxMjIwMTgwMTIyWjAzMTEwLwYDVQQD EygzYjliNzVlYTc5NWI0NmRiYTkwZTVhN2FjZjQ3ODkzZjIxM2EzZTk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoCA4Wpxl/vUYIW0BZYSyf6841Von pjz0I6MHgsBYQtsZPyzCgo5ptBOuhNmhsKB9qVQiOKTqjMFaK5VIKJGFSoPZYWMl OeQMvJjkwifx+7NySQw/3uxzCyMWyCYzBPEFTNQhsWDvhv1P0yY+W991qY0BLFVl /v73cZK2zg9TF+eEm5FVBfGGVNgayNzBCgq8a8N+dv+ZoeL4D4keUvOaTG3O6V4u z7JFHjSNLjUV6GpmFfuQV4afDgzdyBtrAKxBnTnSnywFB2IV02SRMKvQpgD5QipP atsbnl3gNq7RlL2CFoaJZg7qTrIXg4l50MNWLaClAoP6kkSPZxLZCojG1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDubdep5W0bbqQ5aes9HiT8hOj6WMB8GA1UdIwQY MBaAFMvSK0reDtHU1TKOrl84pYvpU/g4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveTlJclN0NE8wZFRWTW82dVh6aWxpLWxULURnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS85NWJhODAtMDc1MS00Y2I5LThjYjQt MjlmMzM0ZTExYTE5LzEveTlJclN0NE8wZFRWTW82dVh6aWxpLWxULURnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS85NWJhODAtMDc1MS00Y2I5LThjYjQtMjlmMzM0ZTExYTE5 LzEveTlJclN0NE8wZFRWTW82dVh6aWxpLWxULURnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABiXhYQVo iWphAGGyIakyNrTZLGizCpnxqJ9lHYjREt2mbtrC2k7wXixcsIT3+/0EG1s1Ze5Z yF0YwvbI+dy3dS5l9VnY7e+MEMNJiB7/xFM7Li8O28U9XTcXX70zF68RMkfLgHMT bkJro1R6lbUnKZJYanmY7PIX5ooDnTAKaidObnEqRL/SfFK27RwP1QovzoZNAaNs PY9yM9KEeiOOzN0fBjkx99JUAjDnY/ET8Z2c81RwY3O8V4BBcCo2JflQwKWFz1G2 b3xlo72Ej1oWjK8WNpklFK1O3xjS8ILXrNqj1aJMAiwosBOywDxgl6Sw3tSfXLgb 0WBDomqLaHR4Yg== -----END CERTIFICATE-----Generated at Fri Dec 19 22:10:07 2025 by rpki-client