This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/c5eb99-7289-4e3e-a8cd-05bbe4ef06c0/1/y9IWsAV0TBjLOE09CdEkBm1V9i0.mft File: y9IWsAV0TBjLOE09CdEkBm1V9i0.mft (raw, json) Hash identifier: 6R3339YCpyvb3/dYTDcvE79ZcEUe6gSvwQR1oFi8rlU= Subject key identifier: FD:30:EB:3D:B0:DC:4A:F3:04:96:F0:20:00:03:41:8D:FF:25:32:B3 Authority key identifier: CB:D2:16:B0:05:74:4C:18:CB:38:4D:3D:09:D1:24:06:6D:55:F6:2D Certificate issuer: /CN=cbd216b005744c18cb384d3d09d124066d55f62d Certificate serial: 019AF12CFB06CAAF752650D4A374EF3A06B2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9IWsAV0TBjLOE09CdEkBm1V9i0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/c5eb99-7289-4e3e-a8cd-05bbe4ef06c0/1/y9IWsAV0TBjLOE09CdEkBm1V9i0.mft Manifest number: 088F Signing time: Sat 06 Dec 2025 01:00:48 +0000 Manifest this update: Sat 06 Dec 2025 01:00:48 +0000 Manifest next update: Sun 07 Dec 2025 01:00:48 +0000 Files and hashes: 1: UP5nddVRXKDFwn0rBo0YDADmUWk.roa (hash: c3q9Feje6DSdFs0M8UM9vMSjOtIoCDA85WxaounA6ns=) 2: y9IWsAV0TBjLOE09CdEkBm1V9i0.crl (hash: UU6MyxyY/NLQtZgIZc2hFQlBg/v+5zMIZkUjDsZfUqI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/c5eb99-7289-4e3e-a8cd-05bbe4ef06c0/1/y9IWsAV0TBjLOE09CdEkBm1V9i0.crl rsync://rpki.ripe.net/repository/DEFAULT/46/c5eb99-7289-4e3e-a8cd-05bbe4ef06c0/1/y9IWsAV0TBjLOE09CdEkBm1V9i0.mft rsync://rpki.ripe.net/repository/DEFAULT/y9IWsAV0TBjLOE09CdEkBm1V9i0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2c:fb:06:ca:af:75:26:50:d4:a3:74:ef:3a:06:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cbd216b005744c18cb384d3d09d124066d55f62d Validity Not Before: Dec 6 01:00:48 2025 GMT Not After : Dec 7 01:00:48 2025 GMT Subject: CN=fd30eb3db0dc4af30496f0200003418dff2532b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:25:9b:b5:bb:4d:d7:4d:fa:5b:a2:e0:e3:a0: be:a8:49:16:99:b9:c5:74:3a:55:93:6d:43:03:d1: e4:f8:d4:2a:bd:46:aa:e7:4d:91:07:05:39:d0:bb: db:c6:07:c6:4c:25:da:2b:7d:3d:e1:f7:e9:4d:5e: 5b:8a:17:87:7f:67:3e:8e:db:e3:61:b5:c6:d5:42: b4:f1:f7:93:41:fd:01:85:3f:f8:18:21:5f:fa:55: 60:e6:32:5e:81:f0:e6:51:ed:43:29:3d:52:6f:96: a5:01:50:8e:46:31:af:0d:07:9a:f7:3a:76:41:4d: 6c:03:4f:c0:20:70:ae:bc:ae:6b:40:04:f5:06:ba: ad:55:e9:90:bd:aa:05:4c:a2:f1:7d:44:f2:98:ea: e9:e3:f8:d0:20:c8:ac:af:4d:91:b8:e3:b5:49:2d: 24:ce:03:14:6a:70:af:45:ce:bf:73:32:34:35:fb: 7a:ef:93:35:ad:78:1f:27:7d:b5:4d:74:4a:61:a0: bd:29:13:c6:56:5a:73:a8:23:54:13:23:29:81:16: a5:70:df:c4:a9:b3:c4:01:7b:a3:83:b1:9a:15:db: 0f:fd:e9:2f:2c:8e:a3:e1:82:3a:97:fa:c1:c0:44: 87:d4:ee:af:8b:5f:61:9b:a4:62:95:97:c5:17:f9: 37:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:30:EB:3D:B0:DC:4A:F3:04:96:F0:20:00:03:41:8D:FF:25:32:B3 X509v3 Authority Key Identifier: keyid:CB:D2:16:B0:05:74:4C:18:CB:38:4D:3D:09:D1:24:06:6D:55:F6:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9IWsAV0TBjLOE09CdEkBm1V9i0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/c5eb99-7289-4e3e-a8cd-05bbe4ef06c0/1/y9IWsAV0TBjLOE09CdEkBm1V9i0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/c5eb99-7289-4e3e-a8cd-05bbe4ef06c0/1/y9IWsAV0TBjLOE09CdEkBm1V9i0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:5d:e1:90:ee:87:f5:94:fd:78:f8:1c:1f:7b:e3:47:a4:39: 71:93:3c:ca:2c:4e:f1:73:fc:42:90:f4:79:49:68:d8:f1:d5: ed:5c:ce:5d:93:f9:7c:8b:91:5f:51:05:85:e0:ef:06:a8:b5: c6:e8:39:82:2c:86:b7:9f:eb:c9:74:76:c4:01:f2:28:3c:7f: f8:a6:0f:a5:b2:75:fb:d7:67:0f:01:52:10:72:5c:01:69:73: 8a:92:c0:64:06:1a:19:b4:fb:f1:37:f3:cb:bf:e2:65:5e:fd: 4b:d7:d4:16:aa:3f:11:b9:f5:27:9f:44:bd:c8:29:a4:0d:1e: 7c:8e:c6:04:31:03:60:02:a2:9a:d9:e7:da:bb:20:8d:9f:39: 82:41:d5:69:5d:50:51:0b:86:e3:ac:29:93:d4:7b:3e:5a:c4: 42:59:c7:01:2b:37:47:1d:a2:93:a9:cf:38:11:86:59:3a:6c: 7c:d9:6c:e6:4a:4a:9f:f6:e8:47:37:4c:a1:e3:c6:d4:49:8c: f3:f6:b7:16:ae:97:62:56:e6:23:bb:6d:0b:60:78:89:75:0d: 8d:7c:07:9c:b8:cc:63:cd:f1:22:60:5a:37:91:02:f0:e6:c9: b5:97:c4:f0:41:c9:32:c9:04:92:29:e4:b3:9c:f5:71:e8:b6: 34:8c:ef:10 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLPsGyq91JlDUo3TvOgayMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiZDIxNmIwMDU3NDRjMThjYjM4NGQzZDA5ZDEyNDA2NmQ1 NWY2MmQwHhcNMjUxMjA2MDEwMDQ4WhcNMjUxMjA3MDEwMDQ4WjAzMTEwLwYDVQQD EyhmZDMwZWIzZGIwZGM0YWYzMDQ5NmYwMjAwMDAzNDE4ZGZmMjUzMmIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlCWbtbtN1036W6Lg46C+qEkWmbnF dDpVk21DA9Hk+NQqvUaq502RBwU50LvbxgfGTCXaK3094ffpTV5biheHf2c+jtvj YbXG1UK08feTQf0BhT/4GCFf+lVg5jJegfDmUe1DKT1Sb5alAVCORjGvDQea9zp2 QU1sA0/AIHCuvK5rQAT1BrqtVemQvaoFTKLxfUTymOrp4/jQIMisr02RuOO1SS0k zgMUanCvRc6/czI0Nft675M1rXgfJ321TXRKYaC9KRPGVlpzqCNUEyMpgRalcN/E qbPEAXujg7GaFdsP/ekvLI6j4YI6l/rBwESH1O6vi19hm6RilZfFF/k3dwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP0w6z2w3ErzBJbwIAADQY3/JTKzMB8GA1UdIwQY MBaAFMvSFrAFdEwYyzhNPQnRJAZtVfYtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveTlJV3NBVjBUQmpMT0UwOUNkRWtCbTFWOWkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni9jNWViOTktNzI4OS00ZTNlLWE4Y2Qt MDViYmU0ZWYwNmMwLzEveTlJV3NBVjBUQmpMT0UwOUNkRWtCbTFWOWkwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni9jNWViOTktNzI4OS00ZTNlLWE4Y2QtMDViYmU0ZWYwNmMw LzEveTlJV3NBVjBUQmpMT0UwOUNkRWtCbTFWOWkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALl3hkO6H 9ZT9ePgcH3vjR6Q5cZM8yixO8XP8QpD0eUlo2PHV7VzOXZP5fIuRX1EFheDvBqi1 xug5giyGt5/ryXR2xAHyKDx/+KYPpbJ1+9dnDwFSEHJcAWlzipLAZAYaGbT78Tfz y7/iZV79S9fUFqo/Ebn1J59EvcgppA0efI7GBDEDYAKimtnn2rsgjZ85gkHVaV1Q UQuG46wpk9R7PlrEQlnHASs3Rx2ik6nPOBGGWTpsfNls5kpKn/boRzdMoePG1EmM 8/a3Fq6XYlbmI7ttC2B4iXUNjXwHnLjMY83xImBaN5EC8ObJtZfE8EHJMskEkink s5z1cei2NIzvEA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:25:05 2025 by rpki-client