This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/95ba80-0751-4cb9-8cb4-29f334e11a19/1/y9IrSt4O0dTVMo6uXzili-lT-Dg.mft File: y9IrSt4O0dTVMo6uXzili-lT-Dg.mft (raw, json) Hash identifier: JabFM0g1JlwU6s+8ezYFDJPN2mvrs8wGDB6Ky4QV3go= Subject key identifier: EE:A6:A5:60:3B:62:50:64:85:47:A0:83:4D:62:AC:2C:51:49:A8:BA Authority key identifier: CB:D2:2B:4A:DE:0E:D1:D4:D5:32:8E:AE:5F:38:A5:8B:E9:53:F8:38 Certificate issuer: /CN=cbd22b4ade0ed1d4d5328eae5f38a58be953f838 Certificate serial: 019B39B3D72E071C3059FE94E8CFDD386F99 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9IrSt4O0dTVMo6uXzili-lT-Dg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/95ba80-0751-4cb9-8cb4-29f334e11a19/1/y9IrSt4O0dTVMo6uXzili-lT-Dg.mft Manifest number: 0E6D Signing time: Sat 20 Dec 2025 03:00:45 +0000 Manifest this update: Sat 20 Dec 2025 03:00:45 +0000 Manifest next update: Sun 21 Dec 2025 03:00:45 +0000 Files and hashes: 1: 73c0jhSky3BnN0TXunRjeB--q1A.roa (hash: 1Lx5ICQYUA/HUXjaB+c1tYSpkcTCOv6g20/mLwIRufE=) 2: y9IrSt4O0dTVMo6uXzili-lT-Dg.crl (hash: IdKEn4hCAfxFo62g1Oh38PjuWSY4OXLCh0LDqN14rQk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/95ba80-0751-4cb9-8cb4-29f334e11a19/1/y9IrSt4O0dTVMo6uXzili-lT-Dg.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/95ba80-0751-4cb9-8cb4-29f334e11a19/1/y9IrSt4O0dTVMo6uXzili-lT-Dg.mft rsync://rpki.ripe.net/repository/DEFAULT/y9IrSt4O0dTVMo6uXzili-lT-Dg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:b3:d7:2e:07:1c:30:59:fe:94:e8:cf:dd:38:6f:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cbd22b4ade0ed1d4d5328eae5f38a58be953f838 Validity Not Before: Dec 20 03:00:45 2025 GMT Not After : Dec 21 03:00:45 2025 GMT Subject: CN=eea6a5603b6250648547a0834d62ac2c5149a8ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:0a:0f:d4:f9:5a:e0:5e:fd:06:c7:9f:8f:a2: 4c:8d:9a:b4:d4:98:4e:96:3d:54:a3:5d:f1:23:b1: c2:ef:85:e2:3e:16:25:f8:0f:47:be:7b:73:93:7e: bb:3b:18:99:61:4c:f4:6a:5f:b2:3f:76:0e:55:3f: 21:93:48:af:1d:36:ea:f4:12:ab:eb:aa:a1:99:b8: 73:34:b3:7b:b6:34:5d:8c:a8:14:f7:1d:b9:9e:27: a1:11:e7:19:72:3c:83:13:f8:b8:56:8a:92:f4:50: a8:c5:47:8f:63:3c:00:e4:bc:c7:03:88:07:ea:a3: 2c:06:10:c0:83:12:28:ea:bc:3f:d3:2b:33:06:7a: 2f:15:45:ab:19:90:36:c0:4a:c0:b3:59:aa:f0:2d: 00:63:d3:d5:dd:b0:a5:ee:21:cf:39:f4:70:d0:7f: da:fa:7d:0c:36:ec:d8:9a:45:24:a1:d9:30:81:8f: 19:ab:d8:c5:93:ae:01:d8:e0:d2:44:e3:9d:f2:2a: 27:be:38:c9:04:25:17:eb:ee:7f:c7:aa:8b:c2:f9: 9e:c6:ca:a8:03:6e:ef:5c:6f:cd:66:13:5f:6e:fe: 3e:9c:8c:f5:42:b1:10:b6:58:3b:83:5e:9e:05:53: d6:bb:e0:4e:6e:4b:17:24:10:3a:14:7f:01:74:0f: 38:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:A6:A5:60:3B:62:50:64:85:47:A0:83:4D:62:AC:2C:51:49:A8:BA X509v3 Authority Key Identifier: keyid:CB:D2:2B:4A:DE:0E:D1:D4:D5:32:8E:AE:5F:38:A5:8B:E9:53:F8:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9IrSt4O0dTVMo6uXzili-lT-Dg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/95ba80-0751-4cb9-8cb4-29f334e11a19/1/y9IrSt4O0dTVMo6uXzili-lT-Dg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/95ba80-0751-4cb9-8cb4-29f334e11a19/1/y9IrSt4O0dTVMo6uXzili-lT-Dg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:37:4d:df:aa:20:01:12:c8:d2:2b:0f:a1:30:79:bb:f5:6f: 4a:d1:c6:73:33:5e:61:1b:44:80:37:a8:7d:18:26:9b:1a:5f: de:50:8d:1a:47:fd:8e:05:b4:0a:67:8e:20:0a:8c:bf:04:e7: dc:75:96:01:1e:2d:63:55:18:0f:69:59:bd:f3:c1:d5:a4:cf: 43:3a:18:34:8f:4c:e9:f3:df:e4:95:35:35:6f:99:42:72:83: 2d:62:08:15:93:a7:64:82:bd:dc:a9:64:b2:61:2a:d3:28:0c: f7:64:74:df:cf:a0:d3:dc:44:d0:53:33:5e:43:08:53:7d:06: c3:e1:45:e3:36:f3:14:1f:03:64:df:14:68:cb:06:cb:48:26: 96:76:02:ff:29:a6:96:a9:77:c8:eb:4d:fe:71:b3:fc:f1:19: 30:37:b4:df:30:b6:6f:e8:21:58:f9:70:32:75:a5:43:80:1a: f4:67:2f:a3:18:aa:35:c4:b4:84:c4:a2:d9:f0:f0:09:98:11: 9d:11:7f:a3:2d:22:a1:12:06:77:d1:ae:78:df:ba:2f:f0:ef: 29:31:f3:d7:ea:8c:35:87:1c:8c:c5:6e:42:5c:a2:53:84:53: b5:97:57:98:9a:a4:c3:24:90:6e:a8:74:81:75:d8:7a:d5:b9: e1:34:fc:34 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5s9cuBxwwWf6U6M/dOG+ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiZDIyYjRhZGUwZWQxZDRkNTMyOGVhZTVmMzhhNThiZTk1 M2Y4MzgwHhcNMjUxMjIwMDMwMDQ1WhcNMjUxMjIxMDMwMDQ1WjAzMTEwLwYDVQQD EyhlZWE2YTU2MDNiNjI1MDY0ODU0N2EwODM0ZDYyYWMyYzUxNDlhOGJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuQoP1Pla4F79Bsefj6JMjZq01JhO lj1Uo13xI7HC74XiPhYl+A9Hvntzk367OxiZYUz0al+yP3YOVT8hk0ivHTbq9BKr 66qhmbhzNLN7tjRdjKgU9x25niehEecZcjyDE/i4VoqS9FCoxUePYzwA5LzHA4gH 6qMsBhDAgxIo6rw/0yszBnovFUWrGZA2wErAs1mq8C0AY9PV3bCl7iHPOfRw0H/a +n0MNuzYmkUkodkwgY8Zq9jFk64B2ODSROOd8ionvjjJBCUX6+5/x6qLwvmexsqo A27vXG/NZhNfbv4+nIz1QrEQtlg7g16eBVPWu+BObksXJBA6FH8BdA84ewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO6mpWA7YlBkhUegg01irCxRSai6MB8GA1UdIwQY MBaAFMvSK0reDtHU1TKOrl84pYvpU/g4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveTlJclN0NE8wZFRWTW82dVh6aWxpLWxULURnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS85NWJhODAtMDc1MS00Y2I5LThjYjQt MjlmMzM0ZTExYTE5LzEveTlJclN0NE8wZFRWTW82dVh6aWxpLWxULURnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS85NWJhODAtMDc1MS00Y2I5LThjYjQtMjlmMzM0ZTExYTE5 LzEveTlJclN0NE8wZFRWTW82dVh6aWxpLWxULURnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACTdN36og ARLI0isPoTB5u/VvStHGczNeYRtEgDeofRgmmxpf3lCNGkf9jgW0CmeOIAqMvwTn 3HWWAR4tY1UYD2lZvfPB1aTPQzoYNI9M6fPf5JU1NW+ZQnKDLWIIFZOnZIK93Klk smEq0ygM92R038+g09xE0FMzXkMIU30Gw+FF4zbzFB8DZN8UaMsGy0gmlnYC/ymm lql3yOtN/nGz/PEZMDe03zC2b+ghWPlwMnWlQ4Aa9GcvoxiqNcS0hMSi2fDwCZgR nRF/oy0ioRIGd9GueN+6L/DvKTHz1+qMNYccjMVuQlyiU4RTtZdXmJqkwySQbqh0 gXXYetW54TT8NA== -----END CERTIFICATE-----Generated at Sat Dec 20 10:04:37 2025 by rpki-client