This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/256cb6-dc42-41a5-b920-24cba1c03c99/1/yTksMnayQ6_3QKCCxYj7c5Qeu_c.mft File: yTksMnayQ6_3QKCCxYj7c5Qeu_c.mft (raw, json) Hash identifier: Rwy5rR3dpQinVq9MYAEd4TBJ6Ife2lJ/OoaY0Dieclc= Subject key identifier: 4B:6B:07:45:B1:88:9D:A2:BE:89:6D:97:6C:1F:35:01:06:B6:6E:1B Authority key identifier: C9:39:2C:32:76:B2:43:AF:F7:40:A0:82:C5:88:FB:73:94:1E:BB:F7 Certificate issuer: /CN=c9392c3276b243aff740a082c588fb73941ebbf7 Certificate serial: 019B3DC77F273DC10247F54D0365606DFC30 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yTksMnayQ6_3QKCCxYj7c5Qeu_c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/256cb6-dc42-41a5-b920-24cba1c03c99/1/yTksMnayQ6_3QKCCxYj7c5Qeu_c.mft Manifest number: 06FB Signing time: Sat 20 Dec 2025 22:00:42 +0000 Manifest this update: Sat 20 Dec 2025 22:00:42 +0000 Manifest next update: Sun 21 Dec 2025 22:00:42 +0000 Files and hashes: 1: aC22qm65HmlnQmRshJm7pr66v5M.roa (hash: LObDHQ4gNcpulvuWrsjsmncwDPjtYz0pJfy6Qo6CsRI=) 2: yTksMnayQ6_3QKCCxYj7c5Qeu_c.crl (hash: cpUbydCz0Y5wmVZvy8NdZlBue12csPD1vNDsC/v867s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/256cb6-dc42-41a5-b920-24cba1c03c99/1/yTksMnayQ6_3QKCCxYj7c5Qeu_c.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/256cb6-dc42-41a5-b920-24cba1c03c99/1/yTksMnayQ6_3QKCCxYj7c5Qeu_c.mft rsync://rpki.ripe.net/repository/DEFAULT/yTksMnayQ6_3QKCCxYj7c5Qeu_c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:c7:7f:27:3d:c1:02:47:f5:4d:03:65:60:6d:fc:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c9392c3276b243aff740a082c588fb73941ebbf7 Validity Not Before: Dec 20 22:00:42 2025 GMT Not After : Dec 21 22:00:42 2025 GMT Subject: CN=4b6b0745b1889da2be896d976c1f350106b66e1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:3d:42:10:2d:b3:6c:19:a5:9d:81:ab:be:b3: 97:8b:b5:ef:d0:a3:ac:90:4e:30:9c:2e:a5:44:39: f3:50:fd:e8:6e:53:91:e6:83:d0:99:64:72:07:5d: 9a:fc:93:fb:5f:4a:2d:ff:5b:15:ef:e3:37:8a:45: 3f:7c:21:1c:df:e0:ca:bc:ca:9a:4b:b3:39:e2:0c: 66:66:c1:9d:77:e8:c6:34:ee:c4:e4:cb:da:95:20: 8b:46:80:a9:cf:3a:50:0a:a2:77:a1:8f:1c:5f:81: 0b:d1:9c:15:53:5c:9e:9e:35:13:a3:70:cc:4a:31: f4:b5:ef:af:2f:1a:d4:aa:3a:a9:8f:9f:65:7f:ae: 60:8e:ed:07:9d:4c:43:2d:1f:36:1c:35:ed:b6:61: 97:87:83:0d:c0:77:c4:a4:63:bd:35:4c:c4:ef:cf: f5:f6:8b:dc:29:12:2e:33:8e:69:35:fd:c8:19:c6: e8:52:9a:ab:8a:39:d3:b3:21:8a:cc:85:36:28:fe: e0:dd:cd:51:e2:82:25:36:12:4b:5f:cd:3e:5d:01: a2:b5:51:44:a4:70:96:9b:bd:05:69:09:76:2c:0d: e4:38:93:02:c4:a8:68:66:3d:38:f3:5b:55:13:83: b8:6d:02:f2:ff:f1:54:4e:98:ce:b4:1d:5c:dc:0d: dd:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:6B:07:45:B1:88:9D:A2:BE:89:6D:97:6C:1F:35:01:06:B6:6E:1B X509v3 Authority Key Identifier: keyid:C9:39:2C:32:76:B2:43:AF:F7:40:A0:82:C5:88:FB:73:94:1E:BB:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yTksMnayQ6_3QKCCxYj7c5Qeu_c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/256cb6-dc42-41a5-b920-24cba1c03c99/1/yTksMnayQ6_3QKCCxYj7c5Qeu_c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/256cb6-dc42-41a5-b920-24cba1c03c99/1/yTksMnayQ6_3QKCCxYj7c5Qeu_c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:e6:b7:9e:9f:2e:d3:d5:20:6b:5c:0d:bd:f6:7d:88:ba:1d: fa:2d:2a:b9:9b:7a:77:40:23:6d:b2:53:ee:1a:ab:70:3b:90: 4d:be:8b:e6:7c:dc:28:07:65:fc:40:5f:a8:67:8e:b6:49:a7: f1:69:4b:dd:93:00:59:33:42:1a:4b:b7:69:ae:b3:21:3a:dd: 12:57:74:44:00:80:1b:5d:a5:1d:1e:bc:e5:81:8c:36:62:0d: 7d:c1:ae:3b:5e:0c:57:b5:57:47:28:e6:4d:81:5e:20:89:40: 7c:34:f8:be:bd:b0:b6:e7:34:3e:a8:7f:69:6c:b6:33:d3:ed: 2d:14:ac:5e:24:bc:30:a0:e3:46:0c:87:95:d0:23:f4:65:48: c2:25:10:72:9f:e4:4d:20:55:4e:17:63:99:db:15:d3:7d:de: 1a:1d:08:fd:c5:f0:7b:4f:e2:7e:43:21:f6:77:27:4d:06:0b: 54:8c:90:1f:a0:b1:4a:d8:36:56:b8:2b:1e:78:f7:f7:57:aa: ba:97:fb:98:1c:fb:14:82:6b:d0:11:13:70:50:4b:0f:11:b5: e3:d4:c2:65:fc:c8:fd:7b:a3:2d:cf:2f:32:94:50:5f:14:6e: ee:96:dc:2f:6a:55:8e:5b:f6:e3:00:de:9f:6e:04:c1:e2:33: 2c:0e:cc:a7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9x38nPcECR/VNA2VgbfwwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5MzkyYzMyNzZiMjQzYWZmNzQwYTA4MmM1ODhmYjczOTQx ZWJiZjcwHhcNMjUxMjIwMjIwMDQyWhcNMjUxMjIxMjIwMDQyWjAzMTEwLwYDVQQD Eyg0YjZiMDc0NWIxODg5ZGEyYmU4OTZkOTc2YzFmMzUwMTA2YjY2ZTFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7T1CEC2zbBmlnYGrvrOXi7Xv0KOs kE4wnC6lRDnzUP3oblOR5oPQmWRyB12a/JP7X0ot/1sV7+M3ikU/fCEc3+DKvMqa S7M54gxmZsGdd+jGNO7E5MvalSCLRoCpzzpQCqJ3oY8cX4EL0ZwVU1yenjUTo3DM SjH0te+vLxrUqjqpj59lf65gju0HnUxDLR82HDXttmGXh4MNwHfEpGO9NUzE78/1 9ovcKRIuM45pNf3IGcboUpqrijnTsyGKzIU2KP7g3c1R4oIlNhJLX80+XQGitVFE pHCWm70FaQl2LA3kOJMCxKhoZj0481tVE4O4bQLy//FUTpjOtB1c3A3dcwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEtrB0WxiJ2ivoltl2wfNQEGtm4bMB8GA1UdIwQY MBaAFMk5LDJ2skOv90CggsWI+3OUHrv3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveVRrc01uYXlRNl8zUUtDQ3hZajdjNVFldV9jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS8yNTZjYjYtZGM0Mi00MWE1LWI5MjAt MjRjYmExYzAzYzk5LzEveVRrc01uYXlRNl8zUUtDQ3hZajdjNVFldV9jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS8yNTZjYjYtZGM0Mi00MWE1LWI5MjAtMjRjYmExYzAzYzk5 LzEveVRrc01uYXlRNl8zUUtDQ3hZajdjNVFldV9jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh+a3np8u 09Uga1wNvfZ9iLod+i0quZt6d0AjbbJT7hqrcDuQTb6L5nzcKAdl/EBfqGeOtkmn 8WlL3ZMAWTNCGku3aa6zITrdEld0RACAG12lHR685YGMNmINfcGuO14MV7VXRyjm TYFeIIlAfDT4vr2wtuc0Pqh/aWy2M9PtLRSsXiS8MKDjRgyHldAj9GVIwiUQcp/k TSBVThdjmdsV033eGh0I/cXwe0/ifkMh9ncnTQYLVIyQH6CxStg2VrgrHnj391eq upf7mBz7FIJr0BETcFBLDxG149TCZfzI/XujLc8vMpRQXxRu7pbcL2pVjlv24wDe n24EweIzLA7Mpw== -----END CERTIFICATE-----Generated at Sun Dec 21 05:02:14 2025 by rpki-client