This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/0df56c-68a9-4feb-bf53-d7f11d684737/1/b9YNm5Q7CMRHz35UmJ9SsN7F9-c.mft File: b9YNm5Q7CMRHz35UmJ9SsN7F9-c.mft (raw, json) Hash identifier: 5NhG3kbRX6kxk9YDoSaddLURqjrk0AztvIhDVAjxWV0= Subject key identifier: 31:67:AB:EB:6F:A7:80:14:13:10:31:7D:2C:40:90:7E:CF:D2:78:28 Authority key identifier: 6F:D6:0D:9B:94:3B:08:C4:47:CF:7E:54:98:9F:52:B0:DE:C5:F7:E7 Certificate issuer: /CN=6fd60d9b943b08c447cf7e54989f52b0dec5f7e7 Certificate serial: 019B2F306F7EAFF79F38F8C579ACD31CD41B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b9YNm5Q7CMRHz35UmJ9SsN7F9-c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/0df56c-68a9-4feb-bf53-d7f11d684737/1/b9YNm5Q7CMRHz35UmJ9SsN7F9-c.mft Manifest number: 1782 Signing time: Thu 18 Dec 2025 02:01:01 +0000 Manifest this update: Thu 18 Dec 2025 02:01:01 +0000 Manifest next update: Fri 19 Dec 2025 02:01:01 +0000 Files and hashes: 1: EtKR-kQx-fQIYWuQ-lYzi3aG73M.roa (hash: Tv2U/xkIvhOtN5S9AYeK8bEvblqxzhCnqAMAXe7i/DA=) 2: b9YNm5Q7CMRHz35UmJ9SsN7F9-c.crl (hash: pG8FEnomZ4qrhBtzID/GJKiNCOjdLJ/suJXreVOg7D0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/0df56c-68a9-4feb-bf53-d7f11d684737/1/b9YNm5Q7CMRHz35UmJ9SsN7F9-c.crl rsync://rpki.ripe.net/repository/DEFAULT/67/0df56c-68a9-4feb-bf53-d7f11d684737/1/b9YNm5Q7CMRHz35UmJ9SsN7F9-c.mft rsync://rpki.ripe.net/repository/DEFAULT/b9YNm5Q7CMRHz35UmJ9SsN7F9-c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 02:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:30:6f:7e:af:f7:9f:38:f8:c5:79:ac:d3:1c:d4:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6fd60d9b943b08c447cf7e54989f52b0dec5f7e7 Validity Not Before: Dec 18 02:01:01 2025 GMT Not After : Dec 19 02:01:01 2025 GMT Subject: CN=3167abeb6fa780141310317d2c40907ecfd27828 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:f3:ce:50:06:a4:09:91:2e:f8:60:bf:95:1d: ed:a8:b5:21:b7:5d:fb:28:cd:ca:2b:20:7d:b9:1f: 67:43:e5:77:fa:4e:77:be:7e:78:e1:86:a9:3e:11: 4a:a2:fd:f2:b0:87:5a:9b:8a:b4:50:60:cb:72:f0: 76:35:92:2e:b2:4e:e2:f6:b7:69:f1:1e:13:02:f0: 7b:12:70:17:c3:de:96:cd:ac:99:86:82:8b:36:3f: 1c:b1:49:f1:72:a7:68:e1:d0:ff:a1:a5:66:5f:85: 37:e0:47:7e:08:1f:a7:d2:77:b8:78:83:17:77:63: 75:38:a4:9c:eb:85:74:e6:64:8d:55:5d:b9:0a:93: be:f0:dc:67:ef:c2:68:aa:a4:97:3a:c2:84:b8:8b: f9:4b:13:dd:96:f0:87:b6:46:39:d8:07:87:ae:d0: 8a:9c:e3:94:61:ca:5c:3d:d1:02:d0:78:aa:77:3a: 56:c8:f9:b2:47:d7:bd:25:84:ec:9a:46:eb:ec:f0: de:75:6c:81:45:d6:5e:ba:4d:9f:98:6e:58:fe:be: cb:e1:8a:d9:49:6b:cc:b0:82:3f:e8:15:45:49:07: 3f:fb:ad:38:fc:71:98:1d:5c:ca:4d:ea:e1:98:7c: de:79:bc:38:38:74:17:2e:c2:a1:49:6f:8f:92:d5: 70:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:67:AB:EB:6F:A7:80:14:13:10:31:7D:2C:40:90:7E:CF:D2:78:28 X509v3 Authority Key Identifier: keyid:6F:D6:0D:9B:94:3B:08:C4:47:CF:7E:54:98:9F:52:B0:DE:C5:F7:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9YNm5Q7CMRHz35UmJ9SsN7F9-c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/0df56c-68a9-4feb-bf53-d7f11d684737/1/b9YNm5Q7CMRHz35UmJ9SsN7F9-c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/67/0df56c-68a9-4feb-bf53-d7f11d684737/1/b9YNm5Q7CMRHz35UmJ9SsN7F9-c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:b6:72:44:be:1a:f6:03:43:67:85:1e:64:70:97:e4:02:36: c1:77:61:bc:38:2f:e9:53:26:a6:57:50:47:3f:73:35:20:fc: e4:00:25:bc:67:0e:e1:51:c7:69:09:24:1b:2a:3e:95:25:00: 2b:2d:39:7c:fe:6d:88:0c:13:21:bb:d2:27:76:20:17:a2:50: 5a:7e:b9:a4:d9:a5:38:4e:d6:47:68:6c:12:f1:3c:fe:be:80: 67:a8:a7:0a:74:92:80:18:a4:71:b4:5e:ab:a4:a1:7a:c3:9e: 8d:fb:9f:8e:74:f3:3b:9a:bf:3c:06:70:52:4f:e8:5c:cd:7c: 48:4a:67:2b:88:bf:4e:03:01:a4:34:70:80:53:53:5f:8f:0c: 50:58:e8:93:6a:53:43:3f:57:93:59:85:f3:38:ea:37:1b:54: 34:35:9e:5f:30:e4:31:6f:d3:6e:32:93:96:9d:61:57:37:7a: 75:3b:b8:22:54:02:5a:f1:ee:56:d1:8f:f5:a2:ee:67:df:e7: bb:93:5e:bb:86:98:9e:d9:c5:20:e6:b3:02:38:e3:4b:09:27: d8:74:81:e4:e5:96:7b:82:18:3d:9b:4c:7e:02:33:02:e2:67: 8b:a0:90:4d:6a:23:4f:fb:5a:ae:a0:62:07:f7:97:be:57:59: f9:3a:c5:a4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsvMG9+r/efOPjFeazTHNQbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmZDYwZDliOTQzYjA4YzQ0N2NmN2U1NDk4OWY1MmIwZGVj NWY3ZTcwHhcNMjUxMjE4MDIwMTAxWhcNMjUxMjE5MDIwMTAxWjAzMTEwLwYDVQQD EygzMTY3YWJlYjZmYTc4MDE0MTMxMDMxN2QyYzQwOTA3ZWNmZDI3ODI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6PPOUAakCZEu+GC/lR3tqLUht137 KM3KKyB9uR9nQ+V3+k53vn544YapPhFKov3ysIdam4q0UGDLcvB2NZIusk7i9rdp 8R4TAvB7EnAXw96WzayZhoKLNj8csUnxcqdo4dD/oaVmX4U34Ed+CB+n0ne4eIMX d2N1OKSc64V05mSNVV25CpO+8Nxn78JoqqSXOsKEuIv5SxPdlvCHtkY52AeHrtCK nOOUYcpcPdEC0HiqdzpWyPmyR9e9JYTsmkbr7PDedWyBRdZeuk2fmG5Y/r7L4YrZ SWvMsII/6BVFSQc/+604/HGYHVzKTerhmHzeebw4OHQXLsKhSW+PktVwfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDFnq+tvp4AUExAxfSxAkH7P0ngoMB8GA1UdIwQY MBaAFG/WDZuUOwjER89+VJifUrDexffnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjlZTm01UTdDTVJIejM1VW1KOVNzTjdGOS1jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny8wZGY1NmMtNjhhOS00ZmViLWJmNTMt ZDdmMTFkNjg0NzM3LzEvYjlZTm01UTdDTVJIejM1VW1KOVNzTjdGOS1jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ny8wZGY1NmMtNjhhOS00ZmViLWJmNTMtZDdmMTFkNjg0NzM3 LzEvYjlZTm01UTdDTVJIejM1VW1KOVNzTjdGOS1jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASbZyRL4a 9gNDZ4UeZHCX5AI2wXdhvDgv6VMmpldQRz9zNSD85AAlvGcO4VHHaQkkGyo+lSUA Ky05fP5tiAwTIbvSJ3YgF6JQWn65pNmlOE7WR2hsEvE8/r6AZ6inCnSSgBikcbRe q6ShesOejfufjnTzO5q/PAZwUk/oXM18SEpnK4i/TgMBpDRwgFNTX48MUFjok2pT Qz9Xk1mF8zjqNxtUNDWeXzDkMW/TbjKTlp1hVzd6dTu4IlQCWvHuVtGP9aLuZ9/n u5Neu4aYntnFIOazAjjjSwkn2HSB5OWWe4IYPZtMfgIzAuJni6CQTWojT/tarqBi B/eXvldZ+TrFpA== -----END CERTIFICATE-----Generated at Thu Dec 18 11:12:17 2025 by rpki-client