This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/5571f9-d9bb-4e78-bad6-09d4231c1c99/1/y7mW_wVdZXXgHy5k2aOzgoNHAtE.mft File: y7mW_wVdZXXgHy5k2aOzgoNHAtE.mft (raw, json) Hash identifier: BNx5GCVjNl2EdDsIUTxT7VuJqPbxTXe1b4K82OtyAPI= Subject key identifier: 9F:99:8D:A6:D2:E9:BA:A3:28:6A:57:F6:E4:17:C5:2B:51:51:55:36 Authority key identifier: CB:B9:96:FF:05:5D:65:75:E0:1F:2E:64:D9:A3:B3:82:83:47:02:D1 Certificate issuer: /CN=cbb996ff055d6575e01f2e64d9a3b382834702d1 Certificate serial: 019B6A329CA6271CBBFC77E4FF4F8D221200 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y7mW_wVdZXXgHy5k2aOzgoNHAtE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/5571f9-d9bb-4e78-bad6-09d4231c1c99/1/y7mW_wVdZXXgHy5k2aOzgoNHAtE.mft Manifest number: 0C7B Signing time: Mon 29 Dec 2025 13:01:00 +0000 Manifest this update: Mon 29 Dec 2025 13:01:00 +0000 Manifest next update: Tue 30 Dec 2025 13:01:00 +0000 Files and hashes: 1: hUKLcWa9OHC5GxmVq6KR5PIsB6o.roa (hash: scGqiYOmrM2j/apqj1QvggRupECIf8XpZkFfLXcvrsc=) 2: y7mW_wVdZXXgHy5k2aOzgoNHAtE.crl (hash: Pl7Kl7q77Aqnp8RMviKjp4VTyTayOQzbpDSJvKhP2nc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/5571f9-d9bb-4e78-bad6-09d4231c1c99/1/y7mW_wVdZXXgHy5k2aOzgoNHAtE.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/5571f9-d9bb-4e78-bad6-09d4231c1c99/1/y7mW_wVdZXXgHy5k2aOzgoNHAtE.mft rsync://rpki.ripe.net/repository/DEFAULT/y7mW_wVdZXXgHy5k2aOzgoNHAtE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 13:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6a:32:9c:a6:27:1c:bb:fc:77:e4:ff:4f:8d:22:12:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cbb996ff055d6575e01f2e64d9a3b382834702d1 Validity Not Before: Dec 29 13:01:00 2025 GMT Not After : Dec 30 13:01:00 2025 GMT Subject: CN=9f998da6d2e9baa3286a57f6e417c52b51515536 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:66:23:ba:85:ae:0e:25:9d:d7:a2:a1:ab:e5: 1a:14:4a:45:19:d0:32:09:bb:ba:ad:de:dc:c5:92: 46:0d:5e:f8:49:3f:85:1f:8b:5a:8c:14:d9:13:d4: 68:70:2d:c2:4f:a5:52:84:2b:56:f0:f5:c4:28:6b: 96:56:36:7b:84:3e:ff:81:97:a9:28:88:31:4e:d1: 4f:7d:cd:e8:fa:08:b0:ce:d6:51:8a:53:36:d0:ff: fd:51:30:de:a5:97:53:61:53:b1:54:be:f1:9d:c8: 5c:d8:02:ab:5f:34:74:94:e3:a7:f2:88:d6:22:6c: 41:8f:30:c8:2b:a9:6b:9c:4b:6b:81:0c:01:4c:b4: 3b:bf:7f:0a:73:5a:b7:53:4d:59:f0:4f:92:77:e8: c7:8b:da:f3:5d:d2:b7:a4:ee:3f:73:77:79:4c:6e: 4d:c4:ed:59:6d:80:88:c7:61:e6:0c:77:6a:43:6a: 0f:ae:a9:e5:43:b0:59:f4:6d:b6:cb:e4:e2:a9:3d: 8b:19:10:31:7f:e5:9e:0f:ae:74:46:b1:4d:1d:23: 8d:14:37:ed:e2:3c:74:fb:3b:20:e1:01:60:74:11: 55:bd:12:8e:ff:ec:3a:a4:04:5b:b1:97:3a:cd:0b: da:a3:31:24:c3:6e:06:88:b1:91:fc:bf:43:b8:53: 8f:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:99:8D:A6:D2:E9:BA:A3:28:6A:57:F6:E4:17:C5:2B:51:51:55:36 X509v3 Authority Key Identifier: keyid:CB:B9:96:FF:05:5D:65:75:E0:1F:2E:64:D9:A3:B3:82:83:47:02:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y7mW_wVdZXXgHy5k2aOzgoNHAtE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/5571f9-d9bb-4e78-bad6-09d4231c1c99/1/y7mW_wVdZXXgHy5k2aOzgoNHAtE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/5571f9-d9bb-4e78-bad6-09d4231c1c99/1/y7mW_wVdZXXgHy5k2aOzgoNHAtE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:1d:a6:96:83:df:a5:95:b1:09:17:54:ea:c2:d9:a5:54:bc: f8:df:f8:b3:f7:47:0a:86:67:d9:48:bc:79:cc:ac:d9:cc:43: 1e:ef:20:80:69:34:dc:f3:c4:75:a8:59:b3:9e:09:60:23:8b: 9a:10:9b:8b:b4:cb:a1:6f:29:25:6a:cb:87:be:1e:92:3b:1e: 9d:c7:39:ec:cf:8e:29:1c:1a:91:b7:62:dd:0d:4d:e0:7d:bd: 58:a9:90:d9:bb:bf:ec:9a:c9:9e:23:76:62:46:bb:f3:ca:c5: 1d:24:63:67:d0:ed:80:12:5c:0e:8f:4e:15:3a:2b:e3:05:83: 6b:a5:c4:dc:0b:bf:41:24:c8:ea:9c:6b:84:03:8a:2c:95:90: a7:10:f2:e0:53:0e:a5:db:b0:2f:4b:c9:bb:72:3b:f4:8a:72: df:5a:4e:60:40:83:34:6b:84:f6:40:e6:47:e4:a2:71:1b:78: 0b:1f:a3:fb:4d:4d:8a:b3:50:85:b8:96:8e:4f:c3:eb:3c:fc: 88:f9:bb:0e:14:68:b6:4b:72:d5:88:24:d3:c8:af:5c:f8:0b: 42:ff:4b:19:dc:0f:d4:d4:46:2c:1d:c1:68:db:40:a0:46:26: c8:83:65:3f:cd:c8:83:e5:77:5e:a6:60:fe:1f:3a:82:8a:5e: a9:64:0d:5e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtqMpymJxy7/Hfk/0+NIhIAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiYjk5NmZmMDU1ZDY1NzVlMDFmMmU2NGQ5YTNiMzgyODM0 NzAyZDEwHhcNMjUxMjI5MTMwMTAwWhcNMjUxMjMwMTMwMTAwWjAzMTEwLwYDVQQD Eyg5Zjk5OGRhNmQyZTliYWEzMjg2YTU3ZjZlNDE3YzUyYjUxNTE1NTM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxGYjuoWuDiWd16Khq+UaFEpFGdAy Cbu6rd7cxZJGDV74ST+FH4tajBTZE9RocC3CT6VShCtW8PXEKGuWVjZ7hD7/gZep KIgxTtFPfc3o+giwztZRilM20P/9UTDepZdTYVOxVL7xnchc2AKrXzR0lOOn8ojW ImxBjzDIK6lrnEtrgQwBTLQ7v38Kc1q3U01Z8E+Sd+jHi9rzXdK3pO4/c3d5TG5N xO1ZbYCIx2HmDHdqQ2oPrqnlQ7BZ9G22y+TiqT2LGRAxf+WeD650RrFNHSONFDft 4jx0+zsg4QFgdBFVvRKO/+w6pARbsZc6zQvaozEkw24GiLGR/L9DuFOP8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ+ZjabS6bqjKGpX9uQXxStRUVU2MB8GA1UdIwQY MBaAFMu5lv8FXWV14B8uZNmjs4KDRwLRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveTdtV193VmRaWFhnSHk1azJhT3pnb05IQXRFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC81NTcxZjktZDliYi00ZTc4LWJhZDYt MDlkNDIzMWMxYzk5LzEveTdtV193VmRaWFhnSHk1azJhT3pnb05IQXRFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC81NTcxZjktZDliYi00ZTc4LWJhZDYtMDlkNDIzMWMxYzk5 LzEveTdtV193VmRaWFhnSHk1azJhT3pnb05IQXRFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVB2mloPf pZWxCRdU6sLZpVS8+N/4s/dHCoZn2Ui8ecys2cxDHu8ggGk03PPEdahZs54JYCOL mhCbi7TLoW8pJWrLh74ekjsencc57M+OKRwakbdi3Q1N4H29WKmQ2bu/7JrJniN2 Yka788rFHSRjZ9DtgBJcDo9OFTor4wWDa6XE3Au/QSTI6pxrhAOKLJWQpxDy4FMO pduwL0vJu3I79Ipy31pOYECDNGuE9kDmR+SicRt4Cx+j+01NirNQhbiWjk/D6zz8 iPm7DhRotkty1Ygk08ivXPgLQv9LGdwP1NRGLB3BaNtAoEYmyINlP83Ig+V3XqZg /h86gopeqWQNXg== -----END CERTIFICATE-----Generated at Mon Dec 29 16:26:36 2025 by rpki-client