This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/cad520-bb1a-4001-92bd-0daed984e849/1/y9eXO2o8Mi5xlG59pwD_vTsKCX4.mft File: y9eXO2o8Mi5xlG59pwD_vTsKCX4.mft (raw, json) Hash identifier: AMvdm0gKr8E3e/T4Ry+87eECE2Bcpr5/zcY8ggaO3r0= Subject key identifier: F9:F1:42:0D:A2:64:0A:27:CF:F1:72:3B:B0:66:C1:89:C5:D2:E1:44 Authority key identifier: CB:D7:97:3B:6A:3C:32:2E:71:94:6E:7D:A7:00:FF:BD:3B:0A:09:7E Certificate issuer: /CN=cbd7973b6a3c322e71946e7da700ffbd3b0a097e Certificate serial: 019AF19AEFBB8BDCBECA4D9A6D6115809AAF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9eXO2o8Mi5xlG59pwD_vTsKCX4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/cad520-bb1a-4001-92bd-0daed984e849/1/y9eXO2o8Mi5xlG59pwD_vTsKCX4.mft Manifest number: 0190 Signing time: Sat 06 Dec 2025 03:00:54 +0000 Manifest this update: Sat 06 Dec 2025 03:00:54 +0000 Manifest next update: Sun 07 Dec 2025 03:00:54 +0000 Files and hashes: 1: y9eXO2o8Mi5xlG59pwD_vTsKCX4.crl (hash: UbPb324nFqrQ7qdm4ooUtfEmPqJL9h76OYpGObBZOTY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/cad520-bb1a-4001-92bd-0daed984e849/1/y9eXO2o8Mi5xlG59pwD_vTsKCX4.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/cad520-bb1a-4001-92bd-0daed984e849/1/y9eXO2o8Mi5xlG59pwD_vTsKCX4.mft rsync://rpki.ripe.net/repository/DEFAULT/y9eXO2o8Mi5xlG59pwD_vTsKCX4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:ef:bb:8b:dc:be:ca:4d:9a:6d:61:15:80:9a:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cbd7973b6a3c322e71946e7da700ffbd3b0a097e Validity Not Before: Dec 6 03:00:54 2025 GMT Not After : Dec 7 03:00:54 2025 GMT Subject: CN=f9f1420da2640a27cff1723bb066c189c5d2e144 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:e7:dd:06:88:f3:8c:2d:7a:80:4d:28:3d:c8: c5:88:8e:01:2e:d3:52:27:8a:22:af:01:75:e9:dc: 96:12:73:f5:57:93:fd:2c:5e:96:c3:0d:7e:88:c1: eb:b7:5f:7f:be:13:99:f9:b1:34:20:b7:cc:9c:ef: ea:58:e8:50:bc:88:54:0a:cd:52:c1:d4:b7:44:96: c7:36:a1:e2:8b:a2:14:d8:90:5c:ba:35:89:dc:b0: 60:17:83:76:f5:6c:64:bb:63:96:a2:da:d6:3a:d0: 0d:47:2f:1b:f4:69:be:a2:ab:da:43:e5:92:32:cb: 39:64:40:f2:bd:eb:b8:15:86:02:83:6c:b3:0b:4a: 5d:8c:48:24:8e:94:7b:db:a6:47:3a:e2:3c:a8:da: db:65:fe:99:0a:f6:b8:80:06:0e:40:6f:aa:8a:bd: 64:c7:7a:8d:c3:72:1d:ea:6a:7e:83:53:0c:6e:1a: d3:47:50:68:30:85:de:d2:d9:dd:02:01:4f:7f:1b: 08:ce:14:c5:23:3f:e9:7b:2d:94:95:71:b6:ae:31: 5d:ef:79:90:18:28:ca:2f:d8:62:fc:af:9f:91:98: 31:d9:c1:5e:d6:e9:cc:a3:ef:1a:cf:3f:f7:53:2b: 4b:71:4a:5c:9e:55:15:6a:1e:c4:ce:36:11:77:81: 33:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:F1:42:0D:A2:64:0A:27:CF:F1:72:3B:B0:66:C1:89:C5:D2:E1:44 X509v3 Authority Key Identifier: keyid:CB:D7:97:3B:6A:3C:32:2E:71:94:6E:7D:A7:00:FF:BD:3B:0A:09:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9eXO2o8Mi5xlG59pwD_vTsKCX4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/cad520-bb1a-4001-92bd-0daed984e849/1/y9eXO2o8Mi5xlG59pwD_vTsKCX4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/cad520-bb1a-4001-92bd-0daed984e849/1/y9eXO2o8Mi5xlG59pwD_vTsKCX4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:0f:ab:13:e2:98:a3:05:14:b1:c6:b3:48:b0:86:b1:f8:3c: 0f:f0:a4:63:cf:c2:d6:88:ed:9a:b6:8f:1e:41:81:18:fb:69: 32:8b:e7:98:a6:10:1f:3d:77:fe:76:2f:b2:f5:f2:9e:65:71: 5c:8d:e7:c6:d7:52:a8:c4:0c:36:5f:e1:c3:c0:8b:be:98:a4: d5:fd:e5:d5:9a:ab:fa:8c:1c:a3:48:86:6c:17:cf:a6:dd:83: 1f:8a:db:cf:a4:79:27:b3:6a:a4:32:13:d2:71:79:c3:c9:db: 67:13:dd:6b:bc:f1:69:26:bd:a8:9b:14:bb:e2:a4:a2:f1:1b: fc:09:18:1d:67:ff:57:b2:71:83:70:27:83:1f:81:47:4a:ca: 8e:c5:26:48:6f:80:29:93:4d:e4:80:3c:87:51:8f:1b:f8:1f: 9a:53:ba:f9:eb:d1:d0:50:2d:54:6d:1f:b8:c7:9f:91:07:17: 25:1f:26:82:90:fa:70:95:0b:fc:b6:d8:7a:5a:29:80:3a:59: 94:18:cb:c2:a9:ea:08:66:b7:39:e4:e4:1b:75:25:b7:ed:51: 75:73:d6:7d:b2:cb:1e:a5:59:13:33:ce:f7:6c:ea:a4:33:fa: aa:03:06:60:16:d8:bd:df:f5:b8:c3:40:b0:03:9a:5f:09:b9: 65:50:4c:b4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmu+7i9y+yk2abWEVgJqvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiZDc5NzNiNmEzYzMyMmU3MTk0NmU3ZGE3MDBmZmJkM2Iw YTA5N2UwHhcNMjUxMjA2MDMwMDU0WhcNMjUxMjA3MDMwMDU0WjAzMTEwLwYDVQQD EyhmOWYxNDIwZGEyNjQwYTI3Y2ZmMTcyM2JiMDY2YzE4OWM1ZDJlMTQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0efdBojzjC16gE0oPcjFiI4BLtNS J4oirwF16dyWEnP1V5P9LF6Www1+iMHrt19/vhOZ+bE0ILfMnO/qWOhQvIhUCs1S wdS3RJbHNqHii6IU2JBcujWJ3LBgF4N29Wxku2OWotrWOtANRy8b9Gm+oqvaQ+WS Mss5ZEDyveu4FYYCg2yzC0pdjEgkjpR726ZHOuI8qNrbZf6ZCva4gAYOQG+qir1k x3qNw3Id6mp+g1MMbhrTR1BoMIXe0tndAgFPfxsIzhTFIz/pey2UlXG2rjFd73mQ GCjKL9hi/K+fkZgx2cFe1unMo+8azz/3UytLcUpcnlUVah7EzjYRd4EzeQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPnxQg2iZAonz/FyO7BmwYnF0uFEMB8GA1UdIwQY MBaAFMvXlztqPDIucZRufacA/707Cgl+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveTllWE8ybzhNaTV4bEc1OXB3RF92VHNLQ1g0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC9jYWQ1MjAtYmIxYS00MDAxLTkyYmQt MGRhZWQ5ODRlODQ5LzEveTllWE8ybzhNaTV4bEc1OXB3RF92VHNLQ1g0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZC9jYWQ1MjAtYmIxYS00MDAxLTkyYmQtMGRhZWQ5ODRlODQ5 LzEveTllWE8ybzhNaTV4bEc1OXB3RF92VHNLQ1g0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABg+rE+KY owUUscazSLCGsfg8D/CkY8/C1ojtmraPHkGBGPtpMovnmKYQHz13/nYvsvXynmVx XI3nxtdSqMQMNl/hw8CLvpik1f3l1Zqr+owco0iGbBfPpt2DH4rbz6R5J7NqpDIT 0nF5w8nbZxPda7zxaSa9qJsUu+KkovEb/AkYHWf/V7Jxg3Angx+BR0rKjsUmSG+A KZNN5IA8h1GPG/gfmlO6+evR0FAtVG0fuMefkQcXJR8mgpD6cJUL/LbYelopgDpZ lBjLwqnqCGa3OeTkG3Ult+1RdXPWfbLLHqVZEzPO92zqpDP6qgMGYBbYvd/1uMNA sAOaXwm5ZVBMtA== -----END CERTIFICATE-----Generated at Sat Dec 6 09:31:35 2025 by rpki-client