This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/cc2083-f966-4e07-9207-79c410cb6458/1/y9CFAn3T0rkBJTOt_8kwXl_wpUg.mft File: y9CFAn3T0rkBJTOt_8kwXl_wpUg.mft (raw, json) Hash identifier: zkyAqkTDVj7TwI4vngpZL/jLcxL4MII4+RgqrFtjd4g= Subject key identifier: 66:90:40:E2:AE:E5:4C:0D:3F:A6:D0:8B:97:BD:48:F2:86:09:05:C8 Authority key identifier: CB:D0:85:02:7D:D3:D2:B9:01:25:33:AD:FF:C9:30:5E:5F:F0:A5:48 Certificate issuer: /CN=cbd085027dd3d2b9012533adffc9305e5ff0a548 Certificate serial: 019B299C63E300B0E224593A7EF522F5A9FC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9CFAn3T0rkBJTOt_8kwXl_wpUg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/cc2083-f966-4e07-9207-79c410cb6458/1/y9CFAn3T0rkBJTOt_8kwXl_wpUg.mft Manifest number: 177F Signing time: Wed 17 Dec 2025 00:01:13 +0000 Manifest this update: Wed 17 Dec 2025 00:01:13 +0000 Manifest next update: Thu 18 Dec 2025 00:01:13 +0000 Files and hashes: 1: fkJKmh5zDN0Kqn8rotQGh7tCyI4.roa (hash: quxYWHt6uVoxRIFcZvvj9cJG53rAivUXlL4xxrWHyXs=) 2: y9CFAn3T0rkBJTOt_8kwXl_wpUg.crl (hash: iZ6HlHrmLadPjB8laqFbZBHBT0NovPrrTYW//1b7GC0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/cc2083-f966-4e07-9207-79c410cb6458/1/y9CFAn3T0rkBJTOt_8kwXl_wpUg.crl rsync://rpki.ripe.net/repository/DEFAULT/57/cc2083-f966-4e07-9207-79c410cb6458/1/y9CFAn3T0rkBJTOt_8kwXl_wpUg.mft rsync://rpki.ripe.net/repository/DEFAULT/y9CFAn3T0rkBJTOt_8kwXl_wpUg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 00:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:29:9c:63:e3:00:b0:e2:24:59:3a:7e:f5:22:f5:a9:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cbd085027dd3d2b9012533adffc9305e5ff0a548 Validity Not Before: Dec 17 00:01:13 2025 GMT Not After : Dec 18 00:01:13 2025 GMT Subject: CN=669040e2aee54c0d3fa6d08b97bd48f2860905c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:92:6e:ce:ec:71:c2:56:35:8e:c9:4f:3e:f7: e7:a6:98:c6:f9:a8:30:10:a0:65:50:8e:49:08:63: 90:1e:05:97:4a:dc:67:f8:bc:2b:fd:ee:d3:7c:9d: 92:60:a3:01:2f:58:7c:e6:38:3e:af:c0:4a:2e:c3: 0c:69:e3:f8:8d:c0:47:7b:1b:cc:3d:88:5c:19:8a: 2a:8d:55:e3:d5:df:75:ff:02:ae:c1:73:5f:77:53: 72:18:8a:45:68:1a:86:00:f1:a5:8e:c6:07:df:e6: c3:6e:03:7e:cc:11:21:26:4d:9f:5f:5f:d3:fe:6c: e6:c8:96:1b:06:1a:4f:a0:e4:40:7b:f2:bb:9e:de: cc:2a:11:29:05:32:58:e0:4c:7c:9b:74:71:89:21: 75:2d:3c:53:c2:bd:50:00:49:52:5f:b1:20:3c:ed: b9:c1:e8:a6:38:04:19:43:10:3a:62:89:db:3d:a9: f9:56:eb:e7:d9:0c:7b:87:7a:56:88:f8:74:8e:ae: b0:11:32:72:62:b9:7b:ad:fa:3e:82:f4:83:a1:14: 53:af:ff:aa:39:d8:d9:b5:00:b1:72:f1:4c:ec:b4: 66:d7:e6:7c:7f:25:9e:65:e7:4f:76:f6:f6:36:45: 30:61:c1:e3:72:4d:b5:fc:b6:b0:79:cf:21:98:2b: 2b:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:90:40:E2:AE:E5:4C:0D:3F:A6:D0:8B:97:BD:48:F2:86:09:05:C8 X509v3 Authority Key Identifier: keyid:CB:D0:85:02:7D:D3:D2:B9:01:25:33:AD:FF:C9:30:5E:5F:F0:A5:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9CFAn3T0rkBJTOt_8kwXl_wpUg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/cc2083-f966-4e07-9207-79c410cb6458/1/y9CFAn3T0rkBJTOt_8kwXl_wpUg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/cc2083-f966-4e07-9207-79c410cb6458/1/y9CFAn3T0rkBJTOt_8kwXl_wpUg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:82:19:11:cf:8e:46:09:86:9e:82:15:a8:98:61:f0:0a:24: e3:ea:bf:b8:36:f6:3b:c3:06:a7:9d:8a:56:c0:13:af:d3:9b: 98:f7:87:23:3f:31:49:c5:8f:c3:7a:d8:a0:9a:7f:21:63:10: ea:a0:7a:ac:f2:e3:60:54:dd:e2:be:bc:f2:ce:9a:1a:2f:44: 22:8f:6e:83:ff:88:18:7e:c9:cf:03:09:f0:17:90:ae:2c:d7: 83:c6:d7:43:d5:1d:83:ff:de:09:31:77:f8:99:84:61:b1:42: fd:f4:32:31:fc:90:4a:81:ac:58:b2:e8:a7:8a:a5:79:b5:bf: e1:91:93:be:33:14:24:af:11:14:d6:42:d8:b8:e2:a1:9f:3e: 02:58:82:cd:a5:8c:7e:48:a3:f6:b6:57:59:aa:a9:35:b4:02: e2:e6:d1:cc:ce:60:30:41:3c:92:37:6f:56:e0:ff:29:e7:8c: 3d:96:22:fb:60:ab:19:57:64:39:00:78:7c:e7:fe:87:c0:88: d4:67:61:39:2b:f8:15:79:fd:a7:0d:80:f1:30:c4:9d:03:8d: 44:52:80:64:5e:31:4a:c8:85:02:3c:7d:79:4d:ef:7e:54:44: 15:3a:eb:24:fc:24:dc:89:79:94:25:6e:29:c7:a3:49:8d:b6: e8:76:3d:1d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZspnGPjALDiJFk6fvUi9an8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiZDA4NTAyN2RkM2QyYjkwMTI1MzNhZGZmYzkzMDVlNWZm MGE1NDgwHhcNMjUxMjE3MDAwMTEzWhcNMjUxMjE4MDAwMTEzWjAzMTEwLwYDVQQD Eyg2NjkwNDBlMmFlZTU0YzBkM2ZhNmQwOGI5N2JkNDhmMjg2MDkwNWM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA85JuzuxxwlY1jslPPvfnppjG+agw EKBlUI5JCGOQHgWXStxn+Lwr/e7TfJ2SYKMBL1h85jg+r8BKLsMMaeP4jcBHexvM PYhcGYoqjVXj1d91/wKuwXNfd1NyGIpFaBqGAPGljsYH3+bDbgN+zBEhJk2fX1/T /mzmyJYbBhpPoORAe/K7nt7MKhEpBTJY4Ex8m3RxiSF1LTxTwr1QAElSX7EgPO25 weimOAQZQxA6YonbPan5Vuvn2Qx7h3pWiPh0jq6wETJyYrl7rfo+gvSDoRRTr/+q OdjZtQCxcvFM7LRm1+Z8fyWeZedPdvb2NkUwYcHjck21/Lawec8hmCsrQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGaQQOKu5UwNP6bQi5e9SPKGCQXIMB8GA1UdIwQY MBaAFMvQhQJ909K5ASUzrf/JMF5f8KVIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveTlDRkFuM1QwcmtCSlRPdF84a3dYbF93cFVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny9jYzIwODMtZjk2Ni00ZTA3LTkyMDct NzljNDEwY2I2NDU4LzEveTlDRkFuM1QwcmtCSlRPdF84a3dYbF93cFVnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny9jYzIwODMtZjk2Ni00ZTA3LTkyMDctNzljNDEwY2I2NDU4 LzEveTlDRkFuM1QwcmtCSlRPdF84a3dYbF93cFVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApIIZEc+O RgmGnoIVqJhh8Aok4+q/uDb2O8MGp52KVsATr9ObmPeHIz8xScWPw3rYoJp/IWMQ 6qB6rPLjYFTd4r688s6aGi9EIo9ug/+IGH7JzwMJ8BeQrizXg8bXQ9Udg//eCTF3 +JmEYbFC/fQyMfyQSoGsWLLop4qlebW/4ZGTvjMUJK8RFNZC2LjioZ8+AliCzaWM fkij9rZXWaqpNbQC4ubRzM5gMEE8kjdvVuD/KeeMPZYi+2CrGVdkOQB4fOf+h8CI 1GdhOSv4FXn9pw2A8TDEnQONRFKAZF4xSsiFAjx9eU3vflREFTrrJPwk3Il5lCVu KcejSY226HY9HQ== -----END CERTIFICATE-----Generated at Wed Dec 17 09:46:50 2025 by rpki-client