This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/6b329f-f4f5-4af0-a81e-92b6796c77cc/1/y9dF6_zsOC3yUsL3UNtkj08DSr8.mft File: y9dF6_zsOC3yUsL3UNtkj08DSr8.mft (raw, json) Hash identifier: JTkIXFOwZn4X1H4oznHWi3n1m+dDYnIWEPVyZm/VhTc= Subject key identifier: C6:E2:80:70:83:A1:40:93:0E:87:E7:B4:2B:84:E2:33:51:BB:B4:C5 Authority key identifier: CB:D7:45:EB:FC:EC:38:2D:F2:52:C2:F7:50:DB:64:8F:4F:03:4A:BF Certificate issuer: /CN=cbd745ebfcec382df252c2f750db648f4f034abf Certificate serial: 019B3EDA0611ED6EB4AC478335DD2A200CC9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9dF6_zsOC3yUsL3UNtkj08DSr8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/6b329f-f4f5-4af0-a81e-92b6796c77cc/1/y9dF6_zsOC3yUsL3UNtkj08DSr8.mft Manifest number: 110D Signing time: Sun 21 Dec 2025 03:00:34 +0000 Manifest this update: Sun 21 Dec 2025 03:00:34 +0000 Manifest next update: Mon 22 Dec 2025 03:00:34 +0000 Files and hashes: 1: GiEc-ANqrb63QcspGJXLFg9KsNI.roa (hash: Sdx7QGn6KBOh9cOI8uzLQw1JR4w8NsvJTOnn28cZmjk=) 2: y9dF6_zsOC3yUsL3UNtkj08DSr8.crl (hash: XqV9KSC2iX/ajqYfuO+todOqrjKxg6bYIe3jvA1V+/k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/6b329f-f4f5-4af0-a81e-92b6796c77cc/1/y9dF6_zsOC3yUsL3UNtkj08DSr8.crl rsync://rpki.ripe.net/repository/DEFAULT/62/6b329f-f4f5-4af0-a81e-92b6796c77cc/1/y9dF6_zsOC3yUsL3UNtkj08DSr8.mft rsync://rpki.ripe.net/repository/DEFAULT/y9dF6_zsOC3yUsL3UNtkj08DSr8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:da:06:11:ed:6e:b4:ac:47:83:35:dd:2a:20:0c:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cbd745ebfcec382df252c2f750db648f4f034abf Validity Not Before: Dec 21 03:00:34 2025 GMT Not After : Dec 22 03:00:34 2025 GMT Subject: CN=c6e2807083a140930e87e7b42b84e23351bbb4c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:f1:87:f6:1c:9c:c9:4d:3e:cd:a1:70:38:0e: 41:9d:00:53:3a:cd:84:47:56:8a:6e:c6:ea:01:c8: a2:1f:4b:94:5a:9f:8c:55:00:81:90:7f:39:4c:83: 84:69:a3:64:0a:ba:f1:2f:8a:7f:0b:ca:9d:83:56: 6a:c9:06:f0:27:33:f8:be:62:50:6b:6b:a8:7c:97: 3d:e8:5e:b8:91:6b:9d:26:b0:52:22:ea:0b:61:65: e2:0a:ab:18:0f:e0:e3:61:bc:89:dd:6d:02:eb:6f: 30:70:65:1e:19:e4:cc:29:79:4e:9b:82:6a:18:29: 0e:4d:81:9b:27:3a:5f:a6:8a:f5:96:f3:67:0f:de: 67:5e:84:da:b5:78:32:a7:f3:fa:28:fa:5c:53:70: 05:ab:84:c1:c8:58:f0:ae:6a:fd:9b:1b:95:d5:bd: d5:84:22:cc:5a:46:bb:66:a5:14:ff:46:1f:71:3e: 44:6c:84:75:6c:b6:01:8a:96:21:4c:48:78:88:ef: 88:bd:d5:64:dc:43:9c:8c:73:93:26:fb:0a:04:72: 12:cc:89:6f:e4:d9:a4:96:9b:cb:82:37:e2:1a:29: 12:59:ba:df:33:75:0e:d1:86:7c:db:5e:30:15:ac: 59:83:80:b2:aa:b2:0c:73:e3:68:8c:bc:4d:ec:66: b0:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:E2:80:70:83:A1:40:93:0E:87:E7:B4:2B:84:E2:33:51:BB:B4:C5 X509v3 Authority Key Identifier: keyid:CB:D7:45:EB:FC:EC:38:2D:F2:52:C2:F7:50:DB:64:8F:4F:03:4A:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9dF6_zsOC3yUsL3UNtkj08DSr8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/6b329f-f4f5-4af0-a81e-92b6796c77cc/1/y9dF6_zsOC3yUsL3UNtkj08DSr8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/6b329f-f4f5-4af0-a81e-92b6796c77cc/1/y9dF6_zsOC3yUsL3UNtkj08DSr8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:3f:5d:73:bb:49:4a:0a:cd:86:2b:2a:7e:91:bd:f6:27:7a: 78:e8:54:17:d3:5e:b2:41:1f:8d:77:1f:dc:7f:87:d1:5b:78: 14:c9:5b:ad:e6:e3:72:4c:1d:ac:96:7f:d1:1a:6e:c6:5d:ed: 84:00:f2:13:ea:df:d6:7b:89:5b:e5:97:ec:2d:d8:93:5c:a7: db:cd:f1:98:24:50:d7:1c:8c:b9:04:34:5c:51:02:2b:36:96: c9:ce:d0:18:3c:de:f6:59:5f:5f:ff:d6:a0:b1:fa:be:ab:32: 6d:38:68:2d:7c:70:09:d5:a9:0b:b9:7b:99:c8:ee:b6:15:a5: e8:3b:33:55:36:f6:fb:88:a7:49:b1:50:3a:e3:47:f0:f8:fb: 51:38:ef:6e:df:38:2a:9b:b7:ad:d8:c1:d5:fe:68:11:14:3b: 6c:ad:54:80:7b:d2:06:f2:38:55:17:2d:40:79:71:60:84:d7: c1:33:8e:f9:f3:bb:3a:ab:08:c4:07:3e:7a:a0:fc:7d:8b:70: 9e:8f:e6:f7:83:48:99:65:3c:97:53:fa:23:87:56:06:99:df: 13:71:c9:53:d0:bd:f0:08:58:90:25:07:d8:67:4a:bc:c5:71: 01:65:ed:ab:7e:a9:3e:1d:a6:20:73:75:4e:b2:46:7e:2c:d1: 4f:1c:22:72 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+2gYR7W60rEeDNd0qIAzJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiZDc0NWViZmNlYzM4MmRmMjUyYzJmNzUwZGI2NDhmNGYw MzRhYmYwHhcNMjUxMjIxMDMwMDM0WhcNMjUxMjIyMDMwMDM0WjAzMTEwLwYDVQQD EyhjNmUyODA3MDgzYTE0MDkzMGU4N2U3YjQyYjg0ZTIzMzUxYmJiNGM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApPGH9hycyU0+zaFwOA5BnQBTOs2E R1aKbsbqAciiH0uUWp+MVQCBkH85TIOEaaNkCrrxL4p/C8qdg1ZqyQbwJzP4vmJQ a2uofJc96F64kWudJrBSIuoLYWXiCqsYD+DjYbyJ3W0C628wcGUeGeTMKXlOm4Jq GCkOTYGbJzpfpor1lvNnD95nXoTatXgyp/P6KPpcU3AFq4TByFjwrmr9mxuV1b3V hCLMWka7ZqUU/0YfcT5EbIR1bLYBipYhTEh4iO+IvdVk3EOcjHOTJvsKBHISzIlv 5NmklpvLgjfiGikSWbrfM3UO0YZ8214wFaxZg4CyqrIMc+NojLxN7Gaw6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMbigHCDoUCTDofntCuE4jNRu7TFMB8GA1UdIwQY MBaAFMvXRev87Dgt8lLC91DbZI9PA0q/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveTlkRjZfenNPQzN5VXNMM1VOdGtqMDhEU3I4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi82YjMyOWYtZjRmNS00YWYwLWE4MWUt OTJiNjc5NmM3N2NjLzEveTlkRjZfenNPQzN5VXNMM1VOdGtqMDhEU3I4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi82YjMyOWYtZjRmNS00YWYwLWE4MWUtOTJiNjc5NmM3N2Nj LzEveTlkRjZfenNPQzN5VXNMM1VOdGtqMDhEU3I4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYj9dc7tJ SgrNhisqfpG99id6eOhUF9NeskEfjXcf3H+H0Vt4FMlbrebjckwdrJZ/0Rpuxl3t hADyE+rf1nuJW+WX7C3Yk1yn283xmCRQ1xyMuQQ0XFECKzaWyc7QGDze9llfX//W oLH6vqsybThoLXxwCdWpC7l7mcjuthWl6DszVTb2+4inSbFQOuNH8Pj7UTjvbt84 Kpu3rdjB1f5oERQ7bK1UgHvSBvI4VRctQHlxYITXwTOO+fO7OqsIxAc+eqD8fYtw no/m94NImWU8l1P6I4dWBpnfE3HJU9C98AhYkCUH2GdKvMVxAWXtq36pPh2mIHN1 TrJGfizRTxwicg== -----END CERTIFICATE-----Generated at Sun Dec 21 08:35:37 2025 by rpki-client