This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/f9f4a9-a0cd-4107-aa41-d52a18985999/1/Yy49A3vwUHVxsqBoy5Awg3TOU-0.mft File: Yy49A3vwUHVxsqBoy5Awg3TOU-0.mft (raw, json) Hash identifier: HkzU5rm0tcmvhDbXM/uz3pK583vORKohOVrimosybkg= Subject key identifier: 9F:30:AE:18:1C:BF:60:18:A1:CB:C6:F6:36:38:78:9D:4F:70:96:B0 Authority key identifier: 63:2E:3D:03:7B:F0:50:75:71:B2:A0:68:CB:90:30:83:74:CE:53:ED Certificate issuer: /CN=632e3d037bf0507571b2a068cb90308374ce53ed Certificate serial: 019B3B6BE6596C3D1C934475B811390C680C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yy49A3vwUHVxsqBoy5Awg3TOU-0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/f9f4a9-a0cd-4107-aa41-d52a18985999/1/Yy49A3vwUHVxsqBoy5Awg3TOU-0.mft Manifest number: 09B5 Signing time: Sat 20 Dec 2025 11:01:25 +0000 Manifest this update: Sat 20 Dec 2025 11:01:25 +0000 Manifest next update: Sun 21 Dec 2025 11:01:25 +0000 Files and hashes: 1: L3qEBBzeJh8D6UqzEEk-9tnLcMA.roa (hash: shN2h6IdPkthKGJ1t7rh4Tc86Qf0XZxCIaY0/EgLJfA=) 2: U47KHWtk8fl1zeBfptx2dxwuW-0.roa (hash: MCpZ0AwLfoDIQ9+ASI13wQUEawZmPsd+gtRUPbEtBbI=) 3: Yy49A3vwUHVxsqBoy5Awg3TOU-0.crl (hash: wr845gSZEyqsAUoIFubmH6ATML+Q1mY8Mauuws0qGv8=) 4: yMbSdUOBKCqn_NswdvutijlK684.roa (hash: K0IjYQFHztO8K2x6H3KgphHn4JSijnZlB4Ox3bR44Pk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/f9f4a9-a0cd-4107-aa41-d52a18985999/1/Yy49A3vwUHVxsqBoy5Awg3TOU-0.crl rsync://rpki.ripe.net/repository/DEFAULT/f9/f9f4a9-a0cd-4107-aa41-d52a18985999/1/Yy49A3vwUHVxsqBoy5Awg3TOU-0.mft rsync://rpki.ripe.net/repository/DEFAULT/Yy49A3vwUHVxsqBoy5Awg3TOU-0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 11:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:6b:e6:59:6c:3d:1c:93:44:75:b8:11:39:0c:68:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=632e3d037bf0507571b2a068cb90308374ce53ed Validity Not Before: Dec 20 11:01:25 2025 GMT Not After : Dec 21 11:01:25 2025 GMT Subject: CN=9f30ae181cbf6018a1cbc6f63638789d4f7096b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:5c:a0:c9:dd:e0:d0:e4:43:77:83:c6:9b:b7: 93:24:d4:74:26:b4:82:7c:c8:5f:41:09:53:52:5f: 9d:ff:45:fa:21:57:21:bd:e1:d9:52:78:91:a6:9d: 1c:e4:4f:4f:c0:aa:3b:f6:34:07:a5:56:75:1c:57: 68:15:64:3c:12:da:c4:eb:c1:cc:03:c8:37:87:a2: 5f:eb:e1:e9:7d:5a:ce:d1:3f:2d:79:1e:6c:f6:6d: e7:80:73:94:87:c2:d2:2e:99:ae:6d:6c:2a:d5:23: 20:c9:88:64:a3:ea:8d:36:90:8d:d8:0f:78:c2:6b: ad:38:db:38:f9:82:eb:04:ba:61:0e:9a:bb:f5:af: 57:c5:2a:00:c5:26:62:0d:56:af:ca:f2:93:69:60: ae:cc:9b:71:4b:f7:6b:1a:f6:0d:c0:a7:d6:fb:41: ed:74:49:3d:a0:5c:f5:e4:52:db:64:a9:2e:bf:f0: 3c:4e:e8:65:93:94:94:d6:3a:5f:39:ca:8d:dd:64: 06:40:0b:e7:94:5d:f4:b6:f4:ba:0f:a5:dc:a9:28: 4c:52:76:60:d7:37:3e:5a:42:52:35:05:10:60:0a: 29:a4:7b:8d:fe:46:2b:25:44:7a:61:69:68:ee:d4: 69:d0:da:61:f9:61:41:b6:20:68:d9:05:af:a1:15: e4:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:30:AE:18:1C:BF:60:18:A1:CB:C6:F6:36:38:78:9D:4F:70:96:B0 X509v3 Authority Key Identifier: keyid:63:2E:3D:03:7B:F0:50:75:71:B2:A0:68:CB:90:30:83:74:CE:53:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yy49A3vwUHVxsqBoy5Awg3TOU-0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/f9f4a9-a0cd-4107-aa41-d52a18985999/1/Yy49A3vwUHVxsqBoy5Awg3TOU-0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/f9f4a9-a0cd-4107-aa41-d52a18985999/1/Yy49A3vwUHVxsqBoy5Awg3TOU-0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:20:5b:8b:ab:98:e0:b5:a6:87:13:47:e0:80:28:c8:84:f6: a9:72:c7:25:2e:e7:26:35:80:b7:fb:11:eb:8e:f1:d4:e1:bc: 2b:b6:18:ad:be:1e:77:21:5c:e9:e9:84:6b:27:cd:dc:19:15: e9:5c:92:3a:c4:d3:09:fe:64:b2:95:4d:80:a5:54:36:c0:12: 7b:fa:f3:73:db:ee:83:55:be:b6:3e:36:09:78:34:1f:0d:1a: 58:b4:8b:a7:90:9e:48:41:6a:aa:ea:e7:8b:71:f8:02:5c:53: 56:a7:58:ea:96:c6:db:f9:6d:4c:84:5d:8e:75:ba:a6:ce:38: 5b:47:d1:2c:3d:71:90:55:e1:fb:e9:1a:d9:49:4c:4e:77:e4: a2:bb:4b:d2:fa:67:19:9c:f9:ab:fd:c9:c5:d8:87:d4:20:db: c6:29:68:6f:69:0d:fa:d1:54:c5:b1:29:99:09:38:7b:b7:60: 2b:0b:15:dc:f7:29:2e:f7:df:10:bf:ed:f1:97:0c:fd:6a:8f: 89:f8:87:27:7b:59:69:3a:24:dd:4a:72:b8:54:00:8c:72:4b: e6:53:df:66:3d:19:0d:16:80:b1:bd:c5:db:30:48:72:1c:a3: 54:78:e1:c6:96:67:c1:30:17:e6:d8:30:54:8c:91:f8:99:2c: 6e:9e:7f:d5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7a+ZZbD0ck0R1uBE5DGgMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzMmUzZDAzN2JmMDUwNzU3MWIyYTA2OGNiOTAzMDgzNzRj ZTUzZWQwHhcNMjUxMjIwMTEwMTI1WhcNMjUxMjIxMTEwMTI1WjAzMTEwLwYDVQQD Eyg5ZjMwYWUxODFjYmY2MDE4YTFjYmM2ZjYzNjM4Nzg5ZDRmNzA5NmIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuVygyd3g0ORDd4PGm7eTJNR0JrSC fMhfQQlTUl+d/0X6IVchveHZUniRpp0c5E9PwKo79jQHpVZ1HFdoFWQ8EtrE68HM A8g3h6Jf6+HpfVrO0T8teR5s9m3ngHOUh8LSLpmubWwq1SMgyYhko+qNNpCN2A94 wmutONs4+YLrBLphDpq79a9XxSoAxSZiDVavyvKTaWCuzJtxS/drGvYNwKfW+0Ht dEk9oFz15FLbZKkuv/A8Tuhlk5SU1jpfOcqN3WQGQAvnlF30tvS6D6XcqShMUnZg 1zc+WkJSNQUQYAoppHuN/kYrJUR6YWlo7tRp0Nph+WFBtiBo2QWvoRXkAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ8wrhgcv2AYocvG9jY4eJ1PcJawMB8GA1UdIwQY MBaAFGMuPQN78FB1cbKgaMuQMIN0zlPtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWXk0OUEzdndVSFZ4c3FCb3k1QXdnM1RPVS0wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS9mOWY0YTktYTBjZC00MTA3LWFhNDEt ZDUyYTE4OTg1OTk5LzEvWXk0OUEzdndVSFZ4c3FCb3k1QXdnM1RPVS0wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOS9mOWY0YTktYTBjZC00MTA3LWFhNDEtZDUyYTE4OTg1OTk5 LzEvWXk0OUEzdndVSFZ4c3FCb3k1QXdnM1RPVS0wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAECBbi6uY 4LWmhxNH4IAoyIT2qXLHJS7nJjWAt/sR647x1OG8K7YYrb4edyFc6emEayfN3BkV 6VySOsTTCf5kspVNgKVUNsASe/rzc9vug1W+tj42CXg0Hw0aWLSLp5CeSEFqqurn i3H4AlxTVqdY6pbG2/ltTIRdjnW6ps44W0fRLD1xkFXh++ka2UlMTnfkortL0vpn GZz5q/3JxdiH1CDbxilob2kN+tFUxbEpmQk4e7dgKwsV3PcpLvffEL/t8ZcM/WqP ifiHJ3tZaTok3UpyuFQAjHJL5lPfZj0ZDRaAsb3F2zBIchyjVHjhxpZnwTAX5tgw VIyR+Jksbp5/1Q== -----END CERTIFICATE-----Generated at Sat Dec 20 21:07:53 2025 by rpki-client