This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/bdc09a-2b2a-4797-a296-9cfdf3c2b348/1/y9dX6ROqzkNObdbW1Qp-33LOiIw.mft File: y9dX6ROqzkNObdbW1Qp-33LOiIw.mft (raw, json) Hash identifier: V1D8OJx03IUu9xavqIo9vSYJgddxTRLRhYnhsF5xKuI= Subject key identifier: CA:AA:40:5A:37:55:8E:1A:DB:7A:24:32:72:87:AD:4E:FA:8E:17:E2 Authority key identifier: CB:D7:57:E9:13:AA:CE:43:4E:6D:D6:D6:D5:0A:7E:DF:72:CE:88:8C Certificate issuer: /CN=cbd757e913aace434e6dd6d6d50a7edf72ce888c Certificate serial: 019AF3F7979C09E587241AFF97D306E1CBB3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9dX6ROqzkNObdbW1Qp-33LOiIw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/bdc09a-2b2a-4797-a296-9cfdf3c2b348/1/y9dX6ROqzkNObdbW1Qp-33LOiIw.mft Manifest number: 112F Signing time: Sat 06 Dec 2025 14:01:20 +0000 Manifest this update: Sat 06 Dec 2025 14:01:20 +0000 Manifest next update: Sun 07 Dec 2025 14:01:20 +0000 Files and hashes: 1: xXYCNUnm-3UsiS0Y2j4IJt8GJmU.roa (hash: kfa/1BPOG2GKMxXo/zgSWZ2DSaf3+pCaWIgYdprI0TU=) 2: y9dX6ROqzkNObdbW1Qp-33LOiIw.crl (hash: hjTnqOn/25tDfyZ+1XriVrEX5+hIl/v/MsHYA2n45Ko=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/bdc09a-2b2a-4797-a296-9cfdf3c2b348/1/y9dX6ROqzkNObdbW1Qp-33LOiIw.crl rsync://rpki.ripe.net/repository/DEFAULT/06/bdc09a-2b2a-4797-a296-9cfdf3c2b348/1/y9dX6ROqzkNObdbW1Qp-33LOiIw.mft rsync://rpki.ripe.net/repository/DEFAULT/y9dX6ROqzkNObdbW1Qp-33LOiIw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f7:97:9c:09:e5:87:24:1a:ff:97:d3:06:e1:cb:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cbd757e913aace434e6dd6d6d50a7edf72ce888c Validity Not Before: Dec 6 14:01:20 2025 GMT Not After : Dec 7 14:01:20 2025 GMT Subject: CN=caaa405a37558e1adb7a24327287ad4efa8e17e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:3f:ad:76:ab:52:04:a4:96:df:3d:a1:59:41: bd:44:3a:38:6c:c7:be:e4:2a:fd:22:42:56:a2:11: cc:4e:7e:0d:e9:b8:f4:6b:39:6a:0a:fe:88:fd:8b: 9e:5e:22:45:4f:b5:ba:23:b5:6e:a0:58:41:4a:3e: 25:34:ba:e2:02:ec:fb:86:a8:2d:b8:71:07:2d:70: b4:07:a7:52:3e:8d:b0:13:4d:88:4f:4f:f5:a8:f3: d3:10:c0:c9:9b:23:76:41:d7:d4:59:bb:33:5b:1d: 85:e5:de:45:f3:64:b1:da:5e:7a:ca:b9:3b:57:b2: 06:6c:71:20:5d:52:9c:5b:17:e9:f8:b6:2b:e7:cb: f6:c9:9e:9a:85:42:5c:01:4a:d4:12:41:63:56:2f: a5:83:f0:61:a5:5a:13:39:bc:17:84:5b:f4:1f:38: 5a:16:93:fe:d3:bd:40:b7:21:64:8c:ec:07:f7:ea: 74:96:05:37:72:37:88:4d:15:81:80:d2:70:54:73: dd:74:e2:48:30:41:1a:d6:78:d1:67:ff:f0:a9:d5: 89:7d:ba:92:a1:d5:55:12:5a:55:80:de:17:bd:5d: 4c:57:0f:e1:09:b0:43:f3:91:0d:09:44:5c:ab:28: 3c:ea:bf:7e:6a:be:7c:d8:5d:54:e8:d3:2e:d3:83: 41:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:AA:40:5A:37:55:8E:1A:DB:7A:24:32:72:87:AD:4E:FA:8E:17:E2 X509v3 Authority Key Identifier: keyid:CB:D7:57:E9:13:AA:CE:43:4E:6D:D6:D6:D5:0A:7E:DF:72:CE:88:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9dX6ROqzkNObdbW1Qp-33LOiIw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/bdc09a-2b2a-4797-a296-9cfdf3c2b348/1/y9dX6ROqzkNObdbW1Qp-33LOiIw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/06/bdc09a-2b2a-4797-a296-9cfdf3c2b348/1/y9dX6ROqzkNObdbW1Qp-33LOiIw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:3e:e7:51:37:20:11:c1:55:83:5e:9a:06:cb:96:ea:14:df: f9:e0:c9:d7:a2:8c:dd:06:a1:21:85:14:49:58:81:46:3d:69: fb:58:33:88:8b:05:6d:b6:7d:ad:16:36:b3:c2:d5:f6:f8:d9: 15:e7:fc:10:b3:0a:cc:bd:80:5e:2f:bf:28:e4:87:cf:72:4d: f9:98:cd:41:39:15:51:0e:38:64:5a:b0:4a:34:81:96:21:ea: 7f:dc:08:40:b8:8c:10:74:67:f2:f4:5e:80:28:29:90:13:61: 66:e5:29:3b:ca:28:8d:ea:c0:11:6d:b6:26:3d:1a:75:9d:1c: 3c:94:60:69:ea:56:87:a3:cf:a7:c3:e6:1c:8a:2f:7e:b7:ad: 12:9f:a5:b5:93:3d:f2:c9:ef:78:0b:b9:ec:27:bb:00:5a:e1: ce:73:d0:19:1a:b9:d5:db:08:13:08:09:f5:4c:e8:79:ca:c4: c6:5e:62:ca:dd:ab:7e:2b:7a:3d:f4:e3:19:a8:fe:5a:47:3c: 3d:36:91:0f:f0:f2:53:c5:54:56:f2:92:73:a2:3e:68:0e:33: 13:bd:bb:ff:dd:58:1a:dc:6f:03:14:5c:fb:d9:7b:94:df:fe: e3:af:c7:31:71:e8:ae:4d:e9:7b:69:db:8a:33:28:42:d7:a3: fb:16:91:b7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz95ecCeWHJBr/l9MG4cuzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiZDc1N2U5MTNhYWNlNDM0ZTZkZDZkNmQ1MGE3ZWRmNzJj ZTg4OGMwHhcNMjUxMjA2MTQwMTIwWhcNMjUxMjA3MTQwMTIwWjAzMTEwLwYDVQQD EyhjYWFhNDA1YTM3NTU4ZTFhZGI3YTI0MzI3Mjg3YWQ0ZWZhOGUxN2UyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnz+tdqtSBKSW3z2hWUG9RDo4bMe+ 5Cr9IkJWohHMTn4N6bj0azlqCv6I/YueXiJFT7W6I7VuoFhBSj4lNLriAuz7hqgt uHEHLXC0B6dSPo2wE02IT0/1qPPTEMDJmyN2QdfUWbszWx2F5d5F82Sx2l56yrk7 V7IGbHEgXVKcWxfp+LYr58v2yZ6ahUJcAUrUEkFjVi+lg/BhpVoTObwXhFv0Hzha FpP+071AtyFkjOwH9+p0lgU3cjeITRWBgNJwVHPddOJIMEEa1njRZ//wqdWJfbqS odVVElpVgN4XvV1MVw/hCbBD85ENCURcqyg86r9+ar582F1U6NMu04NBaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMqqQFo3VY4a23okMnKHrU76jhfiMB8GA1UdIwQY MBaAFMvXV+kTqs5DTm3W1tUKft9yzoiMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveTlkWDZST3F6a05PYmRiVzFRcC0zM0xPaUl3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi9iZGMwOWEtMmIyYS00Nzk3LWEyOTYt OWNmZGYzYzJiMzQ4LzEveTlkWDZST3F6a05PYmRiVzFRcC0zM0xPaUl3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNi9iZGMwOWEtMmIyYS00Nzk3LWEyOTYtOWNmZGYzYzJiMzQ4 LzEveTlkWDZST3F6a05PYmRiVzFRcC0zM0xPaUl3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXT7nUTcg EcFVg16aBsuW6hTf+eDJ16KM3QahIYUUSViBRj1p+1gziIsFbbZ9rRY2s8LV9vjZ Fef8ELMKzL2AXi+/KOSHz3JN+ZjNQTkVUQ44ZFqwSjSBliHqf9wIQLiMEHRn8vRe gCgpkBNhZuUpO8oojerAEW22Jj0adZ0cPJRgaepWh6PPp8PmHIovfretEp+ltZM9 8snveAu57Ce7AFrhznPQGRq51dsIEwgJ9UzoecrExl5iyt2rfit6PfTjGaj+Wkc8 PTaRD/DyU8VUVvKSc6I+aA4zE727/91YGtxvAxRc+9l7lN/+46/HMXHork3pe2nb ijMoQtej+xaRtw== -----END CERTIFICATE-----Generated at Sat Dec 6 15:57:32 2025 by rpki-client