This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/b9bd06-96c8-4e71-ba12-937754cbb505/1/yTfS9vC3jA7XW478KACdeXlhQAM.mft File: yTfS9vC3jA7XW478KACdeXlhQAM.mft (raw, json) Hash identifier: xU/RRCU6s5GHsKle8aSc670OiIvh04Zgv6hF4sxfAQI= Subject key identifier: 6E:A0:50:DC:42:7A:CE:08:E4:B4:41:6F:A5:C6:5A:A4:A9:08:FF:6D Authority key identifier: C9:37:D2:F6:F0:B7:8C:0E:D7:5B:8E:FC:28:00:9D:79:79:61:40:03 Certificate issuer: /CN=c937d2f6f0b78c0ed75b8efc28009d7979614003 Certificate serial: 019B5D539FF9A47051DB094382413B382F36 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yTfS9vC3jA7XW478KACdeXlhQAM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/b9bd06-96c8-4e71-ba12-937754cbb505/1/yTfS9vC3jA7XW478KACdeXlhQAM.mft Manifest number: 06E8 Signing time: Sat 27 Dec 2025 01:02:00 +0000 Manifest this update: Sat 27 Dec 2025 01:02:00 +0000 Manifest next update: Sun 28 Dec 2025 01:02:00 +0000 Files and hashes: 1: S4tCuljlSDudC5hWFI16K1vZQrc.roa (hash: IVL1gZ3kqiPfJXguPGcyEwPZH9+ml2IO0/FYl1DVPU4=) 2: yTfS9vC3jA7XW478KACdeXlhQAM.crl (hash: SXmOdYWVAjuxyg14C91EaYzN+A5K+eNYRzS+32duhKo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/b9bd06-96c8-4e71-ba12-937754cbb505/1/yTfS9vC3jA7XW478KACdeXlhQAM.crl rsync://rpki.ripe.net/repository/DEFAULT/08/b9bd06-96c8-4e71-ba12-937754cbb505/1/yTfS9vC3jA7XW478KACdeXlhQAM.mft rsync://rpki.ripe.net/repository/DEFAULT/yTfS9vC3jA7XW478KACdeXlhQAM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5d:53:9f:f9:a4:70:51:db:09:43:82:41:3b:38:2f:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c937d2f6f0b78c0ed75b8efc28009d7979614003 Validity Not Before: Dec 27 01:02:00 2025 GMT Not After : Dec 28 01:02:00 2025 GMT Subject: CN=6ea050dc427ace08e4b4416fa5c65aa4a908ff6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:aa:50:30:32:70:bd:f1:dc:b7:f4:88:8a:76: 3d:da:75:f0:ef:55:b9:5d:83:09:a3:c6:6a:90:05: d0:39:44:74:35:28:9e:b0:76:46:e0:66:23:cb:c8: 32:bd:0e:03:95:f2:89:a6:76:86:b9:a5:d2:e8:a6: 8e:ad:84:31:23:a0:af:ad:09:7d:d4:61:9f:9a:61: 74:a1:16:be:13:ce:87:95:17:21:7e:b9:73:3a:9c: fd:9b:44:1d:15:62:e4:7c:2c:55:8e:d7:05:55:83: 2a:eb:c6:b7:79:6b:4a:ab:71:48:5f:b3:a9:e9:0d: 9e:43:7c:e4:4a:be:8e:ca:c3:87:90:32:ab:59:1a: 48:07:88:4c:87:c8:39:f2:68:57:b2:ae:62:4e:61: a1:10:0b:1a:f9:c1:f6:3e:4b:43:3c:78:d3:b0:1f: 99:5f:a0:fe:76:ea:bc:92:8e:23:22:68:1b:1a:a5: 01:33:fe:a8:6b:54:e7:28:37:b4:b6:d1:46:df:e6: 45:1c:6e:75:f0:21:40:a1:df:bf:46:04:fa:8d:03: 08:ef:6d:65:7b:bf:f9:f0:88:5b:85:65:08:c1:2a: 33:3d:82:d7:72:e6:58:ba:21:61:70:65:22:ec:a8: 25:cf:84:e2:2d:88:df:7d:2f:2d:8b:5a:61:e7:3d: 34:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:A0:50:DC:42:7A:CE:08:E4:B4:41:6F:A5:C6:5A:A4:A9:08:FF:6D X509v3 Authority Key Identifier: keyid:C9:37:D2:F6:F0:B7:8C:0E:D7:5B:8E:FC:28:00:9D:79:79:61:40:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yTfS9vC3jA7XW478KACdeXlhQAM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/b9bd06-96c8-4e71-ba12-937754cbb505/1/yTfS9vC3jA7XW478KACdeXlhQAM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/b9bd06-96c8-4e71-ba12-937754cbb505/1/yTfS9vC3jA7XW478KACdeXlhQAM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:6f:09:54:c7:13:2e:73:a8:8c:fb:04:12:5a:81:6d:3a:eb: 6e:84:dd:16:fb:b5:96:4c:7c:61:af:43:e5:6e:d0:db:d8:7b: 82:dc:c4:3a:ce:2f:47:7e:99:bf:bd:74:4f:02:00:0d:af:09: f6:ca:b7:c5:59:23:f7:0a:a6:a0:a4:e6:40:af:32:e3:fe:06: d7:8b:91:09:8f:d8:90:5b:84:34:bc:84:d2:a8:a0:f8:e7:bb: 13:8e:df:70:2b:21:d5:f5:39:4f:60:18:e0:86:88:32:fc:cd: 84:f6:ad:78:8b:b4:a3:73:a6:5a:80:a8:8e:8f:ab:0a:5b:9a: bf:77:b3:b8:7f:42:b5:5e:5f:96:86:0a:9f:16:8e:92:f3:d2: cd:4b:01:4b:d9:b8:98:65:67:2a:7a:a6:56:a4:c0:b8:2f:14: 02:a2:13:48:84:d0:31:ab:64:08:3f:1a:03:7e:2f:3a:3b:41: 98:0d:28:59:c8:9f:e5:1a:a9:e9:c7:e4:b4:e3:b4:58:b3:83: 1d:72:f4:a8:4b:42:5a:d2:fe:c8:f7:7e:6e:95:30:6e:08:c0: c7:31:86:16:6f:43:70:3e:5a:8f:dc:38:d2:38:2b:1c:11:ff: 1e:f4:e1:4e:7d:72:e7:79:d1:c9:cc:71:a9:90:28:8a:2a:f8: da:a1:15:34 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtdU5/5pHBR2wlDgkE7OC82MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5MzdkMmY2ZjBiNzhjMGVkNzViOGVmYzI4MDA5ZDc5Nzk2 MTQwMDMwHhcNMjUxMjI3MDEwMjAwWhcNMjUxMjI4MDEwMjAwWjAzMTEwLwYDVQQD Eyg2ZWEwNTBkYzQyN2FjZTA4ZTRiNDQxNmZhNWM2NWFhNGE5MDhmZjZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnqpQMDJwvfHct/SIinY92nXw71W5 XYMJo8ZqkAXQOUR0NSiesHZG4GYjy8gyvQ4DlfKJpnaGuaXS6KaOrYQxI6CvrQl9 1GGfmmF0oRa+E86HlRchfrlzOpz9m0QdFWLkfCxVjtcFVYMq68a3eWtKq3FIX7Op 6Q2eQ3zkSr6OysOHkDKrWRpIB4hMh8g58mhXsq5iTmGhEAsa+cH2PktDPHjTsB+Z X6D+duq8ko4jImgbGqUBM/6oa1TnKDe0ttFG3+ZFHG518CFAod+/RgT6jQMI721l e7/58IhbhWUIwSozPYLXcuZYuiFhcGUi7Kglz4TiLYjffS8ti1ph5z006QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG6gUNxCes4I5LRBb6XGWqSpCP9tMB8GA1UdIwQY MBaAFMk30vbwt4wO11uO/CgAnXl5YUADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveVRmUzl2QzNqQTdYVzQ3OEtBQ2RlWGxoUUFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9iOWJkMDYtOTZjOC00ZTcxLWJhMTIt OTM3NzU0Y2JiNTA1LzEveVRmUzl2QzNqQTdYVzQ3OEtBQ2RlWGxoUUFNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC9iOWJkMDYtOTZjOC00ZTcxLWJhMTItOTM3NzU0Y2JiNTA1 LzEveVRmUzl2QzNqQTdYVzQ3OEtBQ2RlWGxoUUFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHG8JVMcT LnOojPsEElqBbTrrboTdFvu1lkx8Ya9D5W7Q29h7gtzEOs4vR36Zv710TwIADa8J 9sq3xVkj9wqmoKTmQK8y4/4G14uRCY/YkFuENLyE0qig+Oe7E47fcCsh1fU5T2AY 4IaIMvzNhPateIu0o3OmWoCojo+rCluav3ezuH9CtV5floYKnxaOkvPSzUsBS9m4 mGVnKnqmVqTAuC8UAqITSITQMatkCD8aA34vOjtBmA0oWcif5Rqp6cfktOO0WLOD HXL0qEtCWtL+yPd+bpUwbgjAxzGGFm9DcD5aj9w40jgrHBH/HvThTn1y53nRycxx qZAoiir42qEVNA== -----END CERTIFICATE-----Generated at Sat Dec 27 07:03:34 2025 by rpki-client