This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/b9bd06-96c8-4e71-ba12-937754cbb505/1/yTfS9vC3jA7XW478KACdeXlhQAM.mft File: yTfS9vC3jA7XW478KACdeXlhQAM.mft (raw, json) Hash identifier: xEIbbBaIULMjI6bottwoUzt/I5CauzJuLwmNbI1ONrM= Subject key identifier: 43:27:3E:00:54:F0:56:5D:1E:65:92:F3:31:E8:0F:45:90:20:F0:DE Authority key identifier: C9:37:D2:F6:F0:B7:8C:0E:D7:5B:8E:FC:28:00:9D:79:79:61:40:03 Certificate issuer: /CN=c937d2f6f0b78c0ed75b8efc28009d7979614003 Certificate serial: 019B3E6E01CCAA105BE5D0B22E851014B4EE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yTfS9vC3jA7XW478KACdeXlhQAM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/b9bd06-96c8-4e71-ba12-937754cbb505/1/yTfS9vC3jA7XW478KACdeXlhQAM.mft Manifest number: 06D8 Signing time: Sun 21 Dec 2025 01:02:35 +0000 Manifest this update: Sun 21 Dec 2025 01:02:35 +0000 Manifest next update: Mon 22 Dec 2025 01:02:35 +0000 Files and hashes: 1: S4tCuljlSDudC5hWFI16K1vZQrc.roa (hash: IVL1gZ3kqiPfJXguPGcyEwPZH9+ml2IO0/FYl1DVPU4=) 2: yTfS9vC3jA7XW478KACdeXlhQAM.crl (hash: NGV/8LqPyAqyzc8nSEp2eCf5UtM//+y6nRxgIaUPDt0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/b9bd06-96c8-4e71-ba12-937754cbb505/1/yTfS9vC3jA7XW478KACdeXlhQAM.crl rsync://rpki.ripe.net/repository/DEFAULT/08/b9bd06-96c8-4e71-ba12-937754cbb505/1/yTfS9vC3jA7XW478KACdeXlhQAM.mft rsync://rpki.ripe.net/repository/DEFAULT/yTfS9vC3jA7XW478KACdeXlhQAM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:6e:01:cc:aa:10:5b:e5:d0:b2:2e:85:10:14:b4:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c937d2f6f0b78c0ed75b8efc28009d7979614003 Validity Not Before: Dec 21 01:02:35 2025 GMT Not After : Dec 22 01:02:35 2025 GMT Subject: CN=43273e0054f0565d1e6592f331e80f459020f0de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:3e:61:19:bb:29:7f:bb:37:60:29:b4:51:5c: f8:d6:fb:41:56:da:56:bb:48:12:19:3e:af:43:4f: 4d:51:31:40:05:78:9c:20:23:04:76:c3:f4:2d:3d: f0:f2:f2:a8:13:0c:00:c1:b3:2e:1c:62:72:98:e1: 3a:4d:3c:0f:fb:81:8f:da:48:95:9d:2e:bd:a6:e5: b1:b5:16:c6:bd:56:18:09:53:b1:5f:34:9c:95:ff: 5f:fa:12:94:23:b4:f6:b2:c0:bb:37:d2:05:9f:99: 2d:94:7b:5f:2b:f9:dc:22:32:4c:64:12:c9:1d:c9: c4:fa:36:9e:d8:0c:40:18:e5:41:7e:e5:49:0e:d1: 23:d4:9d:0b:52:8e:14:94:60:6e:90:3b:03:aa:3e: 7a:be:6a:c1:85:a6:a1:d1:c3:00:71:ac:b3:92:0c: 30:57:8a:30:7f:9f:9c:2f:16:bc:71:cd:dd:49:cf: 1b:42:57:ef:1c:b6:ab:f3:35:24:c1:03:a5:8b:23: 30:bb:56:ae:91:84:21:65:62:36:fd:33:d6:b6:be: 5b:8a:53:3b:3b:07:99:66:cb:35:d8:e2:e5:6b:12: b4:ab:1e:c9:22:8b:0d:67:c9:7e:f6:2d:bb:1a:11: 2b:ee:1b:3a:80:ec:33:26:2a:6b:89:5a:34:d5:b2: c7:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:27:3E:00:54:F0:56:5D:1E:65:92:F3:31:E8:0F:45:90:20:F0:DE X509v3 Authority Key Identifier: keyid:C9:37:D2:F6:F0:B7:8C:0E:D7:5B:8E:FC:28:00:9D:79:79:61:40:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yTfS9vC3jA7XW478KACdeXlhQAM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/b9bd06-96c8-4e71-ba12-937754cbb505/1/yTfS9vC3jA7XW478KACdeXlhQAM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/b9bd06-96c8-4e71-ba12-937754cbb505/1/yTfS9vC3jA7XW478KACdeXlhQAM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:29:9e:4b:b2:a4:05:71:40:c9:32:92:54:d0:fc:4f:24:d7: 45:e9:b1:28:4e:46:d3:b9:61:1e:38:3d:4e:4d:11:60:85:d1: c6:ba:0e:a6:d8:1a:1f:45:ac:52:5f:74:fc:4c:a6:2d:fb:82: 7c:25:98:0d:60:bf:ba:d4:6f:93:02:1f:73:f7:86:25:c2:09: 7d:6b:bd:75:c1:06:f1:0c:9c:98:18:46:6f:86:51:3a:30:4e: 01:20:05:3d:3a:cb:96:bd:ca:c6:5a:d3:17:72:25:c4:1c:ba: 97:70:12:61:6f:8e:9b:e5:9e:72:06:a3:6c:9a:12:87:5b:89: b5:16:f1:45:ab:42:ce:69:ef:dc:9c:d6:02:5b:e7:c9:ce:cc: 29:c5:ac:a0:a6:d3:bf:76:0b:39:c2:51:4d:a3:4d:07:00:65: 41:97:3d:a0:bf:2a:d4:2c:8e:7a:3b:d4:c3:e2:b3:28:74:71: 71:8f:8d:76:0c:da:b6:f6:f9:b5:9d:73:cc:2b:5c:26:97:bc: 3e:22:51:b8:6f:4e:64:79:f0:85:6d:d7:4c:8f:1f:b8:79:91: 58:be:1a:53:13:b4:8d:4e:5f:91:4d:c4:b4:49:87:0c:a0:b4: da:97:4d:6c:52:ea:d0:03:03:03:02:b7:9f:d5:83:b5:71:e3: 2c:ec:31:11 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+bgHMqhBb5dCyLoUQFLTuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5MzdkMmY2ZjBiNzhjMGVkNzViOGVmYzI4MDA5ZDc5Nzk2 MTQwMDMwHhcNMjUxMjIxMDEwMjM1WhcNMjUxMjIyMDEwMjM1WjAzMTEwLwYDVQQD Eyg0MzI3M2UwMDU0ZjA1NjVkMWU2NTkyZjMzMWU4MGY0NTkwMjBmMGRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuT5hGbspf7s3YCm0UVz41vtBVtpW u0gSGT6vQ09NUTFABXicICMEdsP0LT3w8vKoEwwAwbMuHGJymOE6TTwP+4GP2kiV nS69puWxtRbGvVYYCVOxXzSclf9f+hKUI7T2ssC7N9IFn5ktlHtfK/ncIjJMZBLJ HcnE+jae2AxAGOVBfuVJDtEj1J0LUo4UlGBukDsDqj56vmrBhaah0cMAcayzkgww V4owf5+cLxa8cc3dSc8bQlfvHLar8zUkwQOliyMwu1aukYQhZWI2/TPWtr5bilM7 OweZZss12OLlaxK0qx7JIosNZ8l+9i27GhEr7hs6gOwzJipriVo01bLHxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEMnPgBU8FZdHmWS8zHoD0WQIPDeMB8GA1UdIwQY MBaAFMk30vbwt4wO11uO/CgAnXl5YUADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveVRmUzl2QzNqQTdYVzQ3OEtBQ2RlWGxoUUFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9iOWJkMDYtOTZjOC00ZTcxLWJhMTIt OTM3NzU0Y2JiNTA1LzEveVRmUzl2QzNqQTdYVzQ3OEtBQ2RlWGxoUUFNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC9iOWJkMDYtOTZjOC00ZTcxLWJhMTItOTM3NzU0Y2JiNTA1 LzEveVRmUzl2QzNqQTdYVzQ3OEtBQ2RlWGxoUUFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARSmeS7Kk BXFAyTKSVND8TyTXRemxKE5G07lhHjg9Tk0RYIXRxroOptgaH0WsUl90/EymLfuC fCWYDWC/utRvkwIfc/eGJcIJfWu9dcEG8QycmBhGb4ZROjBOASAFPTrLlr3KxlrT F3IlxBy6l3ASYW+Om+WecgajbJoSh1uJtRbxRatCzmnv3JzWAlvnyc7MKcWsoKbT v3YLOcJRTaNNBwBlQZc9oL8q1CyOejvUw+KzKHRxcY+Ndgzatvb5tZ1zzCtcJpe8 PiJRuG9OZHnwhW3XTI8fuHmRWL4aUxO0jU5fkU3EtEmHDKC02pdNbFLq0AMDAwK3 n9WDtXHjLOwxEQ== -----END CERTIFICATE-----Generated at Sun Dec 21 06:52:51 2025 by rpki-client