This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/c5eb99-7289-4e3e-a8cd-05bbe4ef06c0/1/y9IWsAV0TBjLOE09CdEkBm1V9i0.mft File: y9IWsAV0TBjLOE09CdEkBm1V9i0.mft (raw, json) Hash identifier: w8h9f5TCL7gEmvC0pCeSZVOb+2tHi6026jApeetYF2E= Subject key identifier: 6D:D1:C7:A4:D4:19:4A:E4:C9:92:D3:13:00:E0:D3:93:0F:22:4B:86 Authority key identifier: CB:D2:16:B0:05:74:4C:18:CB:38:4D:3D:09:D1:24:06:6D:55:F6:2D Certificate issuer: /CN=cbd216b005744c18cb384d3d09d124066d55f62d Certificate serial: 019B3C7E77754367A64A502C6D0F04C53499 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9IWsAV0TBjLOE09CdEkBm1V9i0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/c5eb99-7289-4e3e-a8cd-05bbe4ef06c0/1/y9IWsAV0TBjLOE09CdEkBm1V9i0.mft Manifest number: 08B6 Signing time: Sat 20 Dec 2025 16:01:19 +0000 Manifest this update: Sat 20 Dec 2025 16:01:19 +0000 Manifest next update: Sun 21 Dec 2025 16:01:19 +0000 Files and hashes: 1: UP5nddVRXKDFwn0rBo0YDADmUWk.roa (hash: c3q9Feje6DSdFs0M8UM9vMSjOtIoCDA85WxaounA6ns=) 2: y9IWsAV0TBjLOE09CdEkBm1V9i0.crl (hash: V+08bK9R90wKfoolPmV0WlZpXv5tZVVfCQf23tE2Ed4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/c5eb99-7289-4e3e-a8cd-05bbe4ef06c0/1/y9IWsAV0TBjLOE09CdEkBm1V9i0.crl rsync://rpki.ripe.net/repository/DEFAULT/46/c5eb99-7289-4e3e-a8cd-05bbe4ef06c0/1/y9IWsAV0TBjLOE09CdEkBm1V9i0.mft rsync://rpki.ripe.net/repository/DEFAULT/y9IWsAV0TBjLOE09CdEkBm1V9i0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7e:77:75:43:67:a6:4a:50:2c:6d:0f:04:c5:34:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cbd216b005744c18cb384d3d09d124066d55f62d Validity Not Before: Dec 20 16:01:19 2025 GMT Not After : Dec 21 16:01:19 2025 GMT Subject: CN=6dd1c7a4d4194ae4c992d31300e0d3930f224b86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:63:50:8b:8f:22:f1:54:bd:88:92:b8:ce:75: 7d:d7:15:10:09:81:5d:2f:50:f0:0e:b2:e2:5f:3a: a6:bc:3d:cc:4d:09:45:bd:36:67:21:9d:1c:f5:2f: 32:79:d7:d6:6f:8c:c0:02:e8:86:8c:70:e6:10:36: 27:08:66:2b:ff:d2:10:1d:21:ea:34:b6:0e:1f:ee: d7:fd:70:19:21:73:bc:a1:19:b9:42:05:e0:39:16: 78:aa:f3:9d:9e:05:52:f4:e9:1c:3a:53:87:1b:26: 7c:55:70:ee:9c:be:3b:44:db:04:c6:b9:87:c8:9c: d9:78:1c:cc:3f:a2:f5:7e:41:cf:f2:9e:79:66:b2: 0a:25:1e:d9:9b:aa:da:69:3d:1b:3e:17:36:99:ea: 9a:8a:cd:7d:ac:d7:19:4c:0d:f0:2d:d7:05:8b:ce: b5:d7:80:e9:df:6c:21:c3:a0:04:52:4d:f9:de:4a: 90:ae:f0:e5:7f:0b:45:9f:b7:c0:ec:7a:f0:2d:4c: b5:e6:76:c1:32:de:4b:f4:6f:f7:c1:40:1b:f9:6b: 00:20:be:6f:b6:49:87:4c:a2:1b:f4:c4:1c:6c:ee: b3:cf:f5:38:c9:d0:0f:ce:20:44:a1:86:79:5e:f8: 57:ba:d2:94:75:8d:56:20:d8:8c:4e:2e:ab:ce:d7: b7:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:D1:C7:A4:D4:19:4A:E4:C9:92:D3:13:00:E0:D3:93:0F:22:4B:86 X509v3 Authority Key Identifier: keyid:CB:D2:16:B0:05:74:4C:18:CB:38:4D:3D:09:D1:24:06:6D:55:F6:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9IWsAV0TBjLOE09CdEkBm1V9i0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/c5eb99-7289-4e3e-a8cd-05bbe4ef06c0/1/y9IWsAV0TBjLOE09CdEkBm1V9i0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/c5eb99-7289-4e3e-a8cd-05bbe4ef06c0/1/y9IWsAV0TBjLOE09CdEkBm1V9i0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:e9:f4:fd:bf:7a:d4:87:47:b2:9f:48:73:ad:ba:61:8b:1f: 36:4d:ba:2a:22:ed:40:90:ec:cc:6d:40:7c:9f:e3:4c:56:8c: ec:ac:27:63:43:64:1b:81:03:09:87:25:99:6b:36:4d:21:db: 5f:eb:fd:02:c3:f9:97:7a:8b:d6:00:08:6d:66:8f:7a:c2:61: 77:f1:3c:0e:2e:5e:73:88:f8:e5:6f:d4:21:02:09:51:e5:3b: e5:03:22:22:58:48:d7:3d:ff:84:22:de:e8:e0:24:b2:dd:0b: 6b:aa:e8:cc:dd:d2:23:b0:76:a4:ae:45:22:72:07:55:0a:8e: ac:ed:21:63:d5:2c:36:73:22:d5:c5:6a:0b:78:44:3d:84:e7: 10:65:89:34:2f:d2:2c:ed:23:ff:7c:35:b2:49:0f:7b:d8:87: c2:d6:c6:a5:1e:18:b7:63:c4:93:7a:31:c1:49:c4:8e:02:b1: 66:96:dc:8f:d7:5a:ec:6b:7f:f7:c3:ca:e8:6f:3b:6a:19:c8: f8:21:82:32:4d:cd:08:b5:13:aa:e4:1e:4f:3c:be:29:c3:d1: 9d:d0:63:4a:e5:10:cc:a8:7e:7f:c3:6b:4c:d2:4a:1b:82:d9: 85:4e:bf:bf:8d:7d:4c:dc:cb:8b:aa:c4:8c:79:1d:2b:fa:e8: 9d:af:8c:59 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8fnd1Q2emSlAsbQ8ExTSZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiZDIxNmIwMDU3NDRjMThjYjM4NGQzZDA5ZDEyNDA2NmQ1 NWY2MmQwHhcNMjUxMjIwMTYwMTE5WhcNMjUxMjIxMTYwMTE5WjAzMTEwLwYDVQQD Eyg2ZGQxYzdhNGQ0MTk0YWU0Yzk5MmQzMTMwMGUwZDM5MzBmMjI0Yjg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuWNQi48i8VS9iJK4znV91xUQCYFd L1DwDrLiXzqmvD3MTQlFvTZnIZ0c9S8yedfWb4zAAuiGjHDmEDYnCGYr/9IQHSHq NLYOH+7X/XAZIXO8oRm5QgXgORZ4qvOdngVS9OkcOlOHGyZ8VXDunL47RNsExrmH yJzZeBzMP6L1fkHP8p55ZrIKJR7Zm6raaT0bPhc2meqais19rNcZTA3wLdcFi861 14Dp32whw6AEUk353kqQrvDlfwtFn7fA7HrwLUy15nbBMt5L9G/3wUAb+WsAIL5v tkmHTKIb9MQcbO6zz/U4ydAPziBEoYZ5XvhXutKUdY1WINiMTi6rzte3swIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG3Rx6TUGUrkyZLTEwDg05MPIkuGMB8GA1UdIwQY MBaAFMvSFrAFdEwYyzhNPQnRJAZtVfYtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveTlJV3NBVjBUQmpMT0UwOUNkRWtCbTFWOWkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni9jNWViOTktNzI4OS00ZTNlLWE4Y2Qt MDViYmU0ZWYwNmMwLzEveTlJV3NBVjBUQmpMT0UwOUNkRWtCbTFWOWkwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni9jNWViOTktNzI4OS00ZTNlLWE4Y2QtMDViYmU0ZWYwNmMw LzEveTlJV3NBVjBUQmpMT0UwOUNkRWtCbTFWOWkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiun0/b96 1IdHsp9Ic626YYsfNk26KiLtQJDszG1AfJ/jTFaM7KwnY0NkG4EDCYclmWs2TSHb X+v9AsP5l3qL1gAIbWaPesJhd/E8Di5ec4j45W/UIQIJUeU75QMiIlhI1z3/hCLe 6OAkst0La6rozN3SI7B2pK5FInIHVQqOrO0hY9UsNnMi1cVqC3hEPYTnEGWJNC/S LO0j/3w1skkPe9iHwtbGpR4Yt2PEk3oxwUnEjgKxZpbcj9da7Gt/98PK6G87ahnI +CGCMk3NCLUTquQeTzy+KcPRndBjSuUQzKh+f8NrTNJKG4LZhU6/v419TNzLi6rE jHkdK/rona+MWQ== -----END CERTIFICATE-----Generated at Sat Dec 20 23:59:34 2025 by rpki-client