This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/858143-af0c-493e-8ed1-9f5f780569a1/1/y_9_1-4R7_iRSjFQ_NFqZIo8fzA.mft File: y_9_1-4R7_iRSjFQ_NFqZIo8fzA.mft (raw, json) Hash identifier: 6bXzM0YstSumcHPhIuugdSY/we3175as6IFaO3y9D/s= Subject key identifier: EB:53:75:FE:FF:DE:95:0F:69:01:2F:94:A8:A1:01:86:33:68:FD:79 Authority key identifier: CB:FF:7F:D7:EE:11:EF:F8:91:4A:31:50:FC:D1:6A:64:8A:3C:7F:30 Certificate issuer: /CN=cbff7fd7ee11eff8914a3150fcd16a648a3c7f30 Certificate serial: 019B4513934260815FEAD92567581AB9A36E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y_9_1-4R7_iRSjFQ_NFqZIo8fzA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/858143-af0c-493e-8ed1-9f5f780569a1/1/y_9_1-4R7_iRSjFQ_NFqZIo8fzA.mft Manifest number: 06E8 Signing time: Mon 22 Dec 2025 08:01:09 +0000 Manifest this update: Mon 22 Dec 2025 08:01:09 +0000 Manifest next update: Tue 23 Dec 2025 08:01:09 +0000 Files and hashes: 1: meIfpWGWvt-OCR5hELolYg558lc.roa (hash: b6ypOtwfgJ3TZwPfNgJCJZ3JwL1dV4492jTSEMjG2cE=) 2: y_9_1-4R7_iRSjFQ_NFqZIo8fzA.crl (hash: fhb0vA57XAf5SzYfiUZTLfVN5Jyc3sBXLmRUSaH1Exg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/858143-af0c-493e-8ed1-9f5f780569a1/1/y_9_1-4R7_iRSjFQ_NFqZIo8fzA.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/858143-af0c-493e-8ed1-9f5f780569a1/1/y_9_1-4R7_iRSjFQ_NFqZIo8fzA.mft rsync://rpki.ripe.net/repository/DEFAULT/y_9_1-4R7_iRSjFQ_NFqZIo8fzA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 08:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:45:13:93:42:60:81:5f:ea:d9:25:67:58:1a:b9:a3:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cbff7fd7ee11eff8914a3150fcd16a648a3c7f30 Validity Not Before: Dec 22 08:01:09 2025 GMT Not After : Dec 23 08:01:09 2025 GMT Subject: CN=eb5375feffde950f69012f94a8a101863368fd79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:f8:43:56:f8:5f:06:de:42:fa:16:f7:50:d6: ec:24:a6:f2:56:55:f6:31:3c:79:9d:3e:ba:9c:10: 12:58:e8:7b:e1:7f:5b:0f:55:c2:54:e8:6b:5b:bc: b0:40:2a:bb:b8:4d:36:22:d1:b6:80:9e:30:dc:65: 7b:f6:1b:8a:ed:0d:b0:fa:b6:f0:fc:5e:be:47:b6: be:7a:e5:a8:7b:b8:f8:84:36:9e:88:75:1d:05:93: 71:23:c7:56:30:f5:da:ef:93:63:d9:ce:cb:bf:db: 1d:16:20:eb:bb:ac:95:2c:bd:69:c5:c7:05:4c:0f: 34:c4:05:60:90:47:63:23:9a:54:67:45:ac:28:70: f4:80:03:84:f5:2c:8d:37:e2:11:4f:c1:f9:6d:9a: a5:2a:83:e9:d1:9c:f1:bf:48:31:00:9d:d5:68:3a: 50:74:06:3f:69:b3:d6:8e:f3:fb:b2:95:a8:99:17: 40:04:35:ee:ee:24:22:0e:30:b6:f3:a9:1f:50:61: ce:7f:96:94:f7:8d:9d:cb:fd:b7:68:74:c6:ea:da: 86:43:8d:41:fe:f1:cc:fc:9f:41:80:5c:8c:cc:32: 48:26:b8:72:84:54:9e:c2:b1:2b:3c:41:c6:26:5b: 17:40:9b:30:2b:f4:63:3b:5b:89:8f:f4:c4:9f:ef: a3:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:53:75:FE:FF:DE:95:0F:69:01:2F:94:A8:A1:01:86:33:68:FD:79 X509v3 Authority Key Identifier: keyid:CB:FF:7F:D7:EE:11:EF:F8:91:4A:31:50:FC:D1:6A:64:8A:3C:7F:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y_9_1-4R7_iRSjFQ_NFqZIo8fzA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/858143-af0c-493e-8ed1-9f5f780569a1/1/y_9_1-4R7_iRSjFQ_NFqZIo8fzA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/858143-af0c-493e-8ed1-9f5f780569a1/1/y_9_1-4R7_iRSjFQ_NFqZIo8fzA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:06:26:b3:ab:98:00:b3:8c:5b:b9:14:90:d2:ae:7a:1a:15: 15:72:3e:94:ab:9b:4c:af:44:5c:bc:57:9c:a3:06:cf:86:06: 45:b7:1e:a6:17:e9:98:0e:7f:d5:6f:58:e1:c5:09:5c:98:fc: 7f:6c:53:38:28:96:81:14:35:93:56:e5:a9:87:f3:d8:1f:55: ae:53:43:b6:36:25:16:ff:19:b4:75:9b:ab:47:4d:7e:02:20: 9b:94:69:d5:e7:c8:4c:01:f6:7f:40:3c:a9:fc:d7:1c:3c:64: 62:5f:fb:76:06:07:a8:5c:05:69:18:1c:df:87:92:1f:75:e6: 37:c2:01:d2:03:23:fc:7f:6b:ed:95:89:88:ff:ad:d5:9d:e0: a8:65:e0:db:66:1a:4c:57:0e:f7:2b:ff:db:5a:68:03:17:31: 21:d6:b5:e4:c7:6b:22:8c:c1:3f:cc:7e:98:35:b2:02:4d:ac: 6a:7f:f2:d4:3c:05:bb:9b:b5:b5:11:7c:5f:38:42:a4:52:69: ac:3b:08:0a:cd:b4:09:48:74:b4:c5:4b:6e:ee:96:65:74:07: 83:5a:75:5f:19:82:c9:c3:38:88:46:2a:31:df:99:0d:45:53: c0:2f:00:09:56:2e:33:92:66:67:4a:da:0c:d1:a2:4c:cc:27: a6:31:43:4d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtFE5NCYIFf6tklZ1gauaNuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiZmY3ZmQ3ZWUxMWVmZjg5MTRhMzE1MGZjZDE2YTY0OGEz YzdmMzAwHhcNMjUxMjIyMDgwMTA5WhcNMjUxMjIzMDgwMTA5WjAzMTEwLwYDVQQD EyhlYjUzNzVmZWZmZGU5NTBmNjkwMTJmOTRhOGExMDE4NjMzNjhmZDc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsvhDVvhfBt5C+hb3UNbsJKbyVlX2 MTx5nT66nBASWOh74X9bD1XCVOhrW7ywQCq7uE02ItG2gJ4w3GV79huK7Q2w+rbw /F6+R7a+euWoe7j4hDaeiHUdBZNxI8dWMPXa75Nj2c7Lv9sdFiDru6yVLL1pxccF TA80xAVgkEdjI5pUZ0WsKHD0gAOE9SyNN+IRT8H5bZqlKoPp0Zzxv0gxAJ3VaDpQ dAY/abPWjvP7spWomRdABDXu7iQiDjC286kfUGHOf5aU942dy/23aHTG6tqGQ41B /vHM/J9BgFyMzDJIJrhyhFSewrErPEHGJlsXQJswK/RjO1uJj/TEn++jCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOtTdf7/3pUPaQEvlKihAYYzaP15MB8GA1UdIwQY MBaAFMv/f9fuEe/4kUoxUPzRamSKPH8wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveV85XzEtNFI3X2lSU2pGUV9ORnFaSW84ZnpBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi84NTgxNDMtYWYwYy00OTNlLThlZDEt OWY1Zjc4MDU2OWExLzEveV85XzEtNFI3X2lSU2pGUV9ORnFaSW84ZnpBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi84NTgxNDMtYWYwYy00OTNlLThlZDEtOWY1Zjc4MDU2OWEx LzEveV85XzEtNFI3X2lSU2pGUV9ORnFaSW84ZnpBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALwYms6uY ALOMW7kUkNKuehoVFXI+lKubTK9EXLxXnKMGz4YGRbcephfpmA5/1W9Y4cUJXJj8 f2xTOCiWgRQ1k1blqYfz2B9VrlNDtjYlFv8ZtHWbq0dNfgIgm5Rp1efITAH2f0A8 qfzXHDxkYl/7dgYHqFwFaRgc34eSH3XmN8IB0gMj/H9r7ZWJiP+t1Z3gqGXg22Ya TFcO9yv/21poAxcxIda15MdrIozBP8x+mDWyAk2san/y1DwFu5u1tRF8XzhCpFJp rDsICs20CUh0tMVLbu6WZXQHg1p1XxmCycM4iEYqMd+ZDUVTwC8ACVYuM5JmZ0ra DNGiTMwnpjFDTQ== -----END CERTIFICATE-----Generated at Mon Dec 22 11:28:54 2025 by rpki-client