This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/d16463-89be-4f5b-b2f2-acc41cacf7e1/1/y9lerW0qHa8u9oestMKedgdrKAk.mft File: y9lerW0qHa8u9oestMKedgdrKAk.mft (raw, json) Hash identifier: SUy7r4QTfI6pFyWNmXDqrKFa8Go6c0r39a93xy1ql3o= Subject key identifier: E2:82:3A:30:6B:87:EF:88:9F:34:26:3E:71:3C:02:79:D7:EA:4B:DB Authority key identifier: CB:D9:5E:AD:6D:2A:1D:AF:2E:F6:87:AC:B4:C2:9E:76:07:6B:28:09 Certificate issuer: /CN=cbd95ead6d2a1daf2ef687acb4c29e76076b2809 Certificate serial: 019B416D44DE61958131814B46FD107620BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9lerW0qHa8u9oestMKedgdrKAk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/d16463-89be-4f5b-b2f2-acc41cacf7e1/1/y9lerW0qHa8u9oestMKedgdrKAk.mft Manifest number: 0B6C Signing time: Sun 21 Dec 2025 15:00:38 +0000 Manifest this update: Sun 21 Dec 2025 15:00:38 +0000 Manifest next update: Mon 22 Dec 2025 15:00:38 +0000 Files and hashes: 1: dLJ0i3DKxKOgLSZU6DT_1_-wzDs.roa (hash: R+7BGQyfLFShlywgi4Re33H2XJ0XnH/YSJRVXJB4EDE=) 2: y9lerW0qHa8u9oestMKedgdrKAk.crl (hash: HJaGSM56vG6yXlJC4/ZT35g3/sQXGK1FDxNH2Q1D3+4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/d16463-89be-4f5b-b2f2-acc41cacf7e1/1/y9lerW0qHa8u9oestMKedgdrKAk.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/d16463-89be-4f5b-b2f2-acc41cacf7e1/1/y9lerW0qHa8u9oestMKedgdrKAk.mft rsync://rpki.ripe.net/repository/DEFAULT/y9lerW0qHa8u9oestMKedgdrKAk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:6d:44:de:61:95:81:31:81:4b:46:fd:10:76:20:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cbd95ead6d2a1daf2ef687acb4c29e76076b2809 Validity Not Before: Dec 21 15:00:38 2025 GMT Not After : Dec 22 15:00:38 2025 GMT Subject: CN=e2823a306b87ef889f34263e713c0279d7ea4bdb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:3e:2c:41:d4:9f:7e:fd:a4:2f:09:34:9a:0a: eb:bc:ae:04:41:ac:b1:8a:c6:85:b0:72:0f:f4:90: 5a:1d:12:55:29:0b:19:a1:1b:7c:a4:fe:c2:5e:62: 8b:c4:63:1e:88:e7:f9:05:5b:a9:b1:66:99:0f:30: 80:ac:7b:2c:6a:c8:e1:41:ae:42:18:ae:80:46:c8: 37:64:60:29:e7:fd:67:a6:38:f8:80:c6:da:bd:f1: 8b:33:e6:46:f9:12:3d:15:3c:f5:f6:29:c5:40:b2: 2f:74:07:e5:8f:d6:1c:0e:56:4d:1e:9c:42:1a:e8: 3e:ea:89:57:1a:eb:51:42:20:e1:1b:0b:4c:c7:05: 98:a9:bb:4c:09:74:d3:42:56:fc:1a:79:aa:77:99: d9:03:a0:10:be:28:c4:7e:76:76:4c:96:1f:e1:ae: 5c:ee:9a:61:d4:b9:ee:56:89:5b:de:df:c9:3e:88: 5a:3f:d1:89:8a:65:01:60:04:8c:85:6a:37:3c:29: 63:74:71:75:30:88:10:d6:e0:9e:4e:85:13:17:df: d4:4e:3f:ed:da:eb:5b:8e:10:16:f7:83:7b:6d:27: fa:48:24:b1:da:88:a2:c0:49:82:4b:af:a7:ef:53: 51:97:f6:52:67:c1:a3:1a:55:93:ba:53:c7:01:ea: 3b:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:82:3A:30:6B:87:EF:88:9F:34:26:3E:71:3C:02:79:D7:EA:4B:DB X509v3 Authority Key Identifier: keyid:CB:D9:5E:AD:6D:2A:1D:AF:2E:F6:87:AC:B4:C2:9E:76:07:6B:28:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9lerW0qHa8u9oestMKedgdrKAk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/d16463-89be-4f5b-b2f2-acc41cacf7e1/1/y9lerW0qHa8u9oestMKedgdrKAk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/d16463-89be-4f5b-b2f2-acc41cacf7e1/1/y9lerW0qHa8u9oestMKedgdrKAk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:3a:37:b3:9e:67:52:9c:05:9e:ac:92:a8:a0:0e:9f:49:fd: 73:1b:33:7c:37:88:22:d0:8a:6c:fb:c9:93:f1:ff:0b:85:e8: 29:9b:b7:55:57:8c:e3:67:19:f3:d5:8c:04:e7:f6:49:cf:0d: 15:e6:5a:b5:6f:a5:89:8c:2c:8a:f0:32:14:c4:71:07:5d:61: 2e:50:19:fc:d6:ac:d9:5b:38:bf:81:b8:d1:72:3f:49:2c:6d: 06:e9:cf:e9:76:61:00:e2:22:7f:d1:9b:31:fb:4b:67:78:42: 76:38:05:dd:19:44:60:b9:69:c6:a9:35:23:e4:73:5a:45:aa: d0:2b:7a:2e:aa:00:08:96:93:ef:e9:a4:dc:82:ea:10:36:74: f9:17:c1:79:9e:47:b8:23:7c:7e:8a:76:8c:09:5e:67:6c:7d: 5e:ab:2b:e6:b4:30:74:11:3b:11:26:79:db:a5:c3:46:16:e1: 87:85:a2:b7:93:99:84:7e:f7:36:af:14:e4:0a:5d:21:bb:df: df:6c:5e:66:e3:40:75:e4:88:27:7c:7b:91:c1:3d:7f:d3:6d: a2:93:43:d1:78:02:ca:11:13:e9:e4:0d:fc:41:27:41:74:3b: 30:a8:78:e3:1e:20:f6:dd:96:fc:e4:be:77:7d:c7:f7:7d:23: 13:d8:39:0d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtBbUTeYZWBMYFLRv0QdiC8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiZDk1ZWFkNmQyYTFkYWYyZWY2ODdhY2I0YzI5ZTc2MDc2 YjI4MDkwHhcNMjUxMjIxMTUwMDM4WhcNMjUxMjIyMTUwMDM4WjAzMTEwLwYDVQQD EyhlMjgyM2EzMDZiODdlZjg4OWYzNDI2M2U3MTNjMDI3OWQ3ZWE0YmRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmj4sQdSffv2kLwk0mgrrvK4EQayx isaFsHIP9JBaHRJVKQsZoRt8pP7CXmKLxGMeiOf5BVupsWaZDzCArHssasjhQa5C GK6ARsg3ZGAp5/1npjj4gMbavfGLM+ZG+RI9FTz19inFQLIvdAflj9YcDlZNHpxC Gug+6olXGutRQiDhGwtMxwWYqbtMCXTTQlb8Gnmqd5nZA6AQvijEfnZ2TJYf4a5c 7pph1LnuVolb3t/JPohaP9GJimUBYASMhWo3PCljdHF1MIgQ1uCeToUTF9/UTj/t 2utbjhAW94N7bSf6SCSx2oiiwEmCS6+n71NRl/ZSZ8GjGlWTulPHAeo7nQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOKCOjBrh++InzQmPnE8AnnX6kvbMB8GA1UdIwQY MBaAFMvZXq1tKh2vLvaHrLTCnnYHaygJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveTlsZXJXMHFIYTh1OW9lc3RNS2VkZ2RyS0FrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9kMTY0NjMtODliZS00ZjViLWIyZjIt YWNjNDFjYWNmN2UxLzEveTlsZXJXMHFIYTh1OW9lc3RNS2VkZ2RyS0FrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC9kMTY0NjMtODliZS00ZjViLWIyZjItYWNjNDFjYWNmN2Ux LzEveTlsZXJXMHFIYTh1OW9lc3RNS2VkZ2RyS0FrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJDo3s55n UpwFnqySqKAOn0n9cxszfDeIItCKbPvJk/H/C4XoKZu3VVeM42cZ89WMBOf2Sc8N FeZatW+liYwsivAyFMRxB11hLlAZ/Nas2Vs4v4G40XI/SSxtBunP6XZhAOIif9Gb MftLZ3hCdjgF3RlEYLlpxqk1I+RzWkWq0Ct6LqoACJaT7+mk3ILqEDZ0+RfBeZ5H uCN8fop2jAleZ2x9Xqsr5rQwdBE7ESZ526XDRhbhh4Wit5OZhH73Nq8U5ApdIbvf 32xeZuNAdeSIJ3x7kcE9f9NtopND0XgCyhET6eQN/EEnQXQ7MKh44x4g9t2W/OS+ d33H930jE9g5DQ== -----END CERTIFICATE-----Generated at Sun Dec 21 17:18:58 2025 by rpki-client