This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/cc2083-f966-4e07-9207-79c410cb6458/1/y9CFAn3T0rkBJTOt_8kwXl_wpUg.mft File: y9CFAn3T0rkBJTOt_8kwXl_wpUg.mft (raw, json) Hash identifier: aH4Q7i8PItebPPLLfq5lPFsXBTMJ7YJVf0h/EXPx6x0= Subject key identifier: 5F:F0:35:98:1B:EC:74:32:DC:21:19:AA:B8:17:26:45:AC:35:7D:6D Authority key identifier: CB:D0:85:02:7D:D3:D2:B9:01:25:33:AD:FF:C9:30:5E:5F:F0:A5:48 Certificate issuer: /CN=cbd085027dd3d2b9012533adffc9305e5ff0a548 Certificate serial: 019AF389BCABDAB90CA74621A43D8B37E7A4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9CFAn3T0rkBJTOt_8kwXl_wpUg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/cc2083-f966-4e07-9207-79c410cb6458/1/y9CFAn3T0rkBJTOt_8kwXl_wpUg.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 12:01:21 +0000 Manifest this update: Sat 06 Dec 2025 12:01:21 +0000 Manifest next update: Sun 07 Dec 2025 12:01:21 +0000 Files and hashes: 1: fkJKmh5zDN0Kqn8rotQGh7tCyI4.roa (hash: quxYWHt6uVoxRIFcZvvj9cJG53rAivUXlL4xxrWHyXs=) 2: y9CFAn3T0rkBJTOt_8kwXl_wpUg.crl (hash: xnn8HaOVhCD3ue8lKpqs0xQJ+O9u5dOpB3lnqbDgSys=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/cc2083-f966-4e07-9207-79c410cb6458/1/y9CFAn3T0rkBJTOt_8kwXl_wpUg.crl rsync://rpki.ripe.net/repository/DEFAULT/57/cc2083-f966-4e07-9207-79c410cb6458/1/y9CFAn3T0rkBJTOt_8kwXl_wpUg.mft rsync://rpki.ripe.net/repository/DEFAULT/y9CFAn3T0rkBJTOt_8kwXl_wpUg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:bc:ab:da:b9:0c:a7:46:21:a4:3d:8b:37:e7:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cbd085027dd3d2b9012533adffc9305e5ff0a548 Validity Not Before: Dec 6 12:01:21 2025 GMT Not After : Dec 7 12:01:21 2025 GMT Subject: CN=5ff035981bec7432dc2119aab8172645ac357d6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:63:16:24:ea:cb:50:6c:98:51:f0:e8:41:15: 28:dd:e7:ae:fc:c5:f5:67:04:58:a4:58:86:04:2c: e7:96:b0:75:aa:74:d9:a2:c9:c4:ee:e3:a2:d6:c6: 03:f3:f6:ca:eb:45:a9:02:65:0f:2b:33:4a:a8:90: 0c:6e:af:ac:2a:5f:87:1b:c5:a0:f1:73:a6:fb:ee: c4:09:7a:9c:70:24:ed:47:9b:8e:8a:c4:31:74:92: 54:41:9e:73:ac:40:af:be:6c:07:dd:5b:37:ff:13: 4a:25:c2:a6:82:11:f5:0d:8f:b3:72:79:dd:41:9d: a2:6c:d8:c1:d9:01:6b:23:81:1e:20:52:b6:d5:1f: b4:c5:9c:65:e6:b7:7b:1d:17:ca:e5:4d:09:2b:0a: 0c:55:5c:45:dd:f5:44:b4:c6:de:20:8b:a6:3a:6f: 36:df:31:ab:5b:9a:9d:ca:6b:27:a1:f2:58:4a:66: b9:0d:ff:a5:57:f7:06:9f:24:2c:3a:a7:cd:41:bb: 21:9a:a2:c0:4d:6b:a4:2f:94:ae:77:85:ca:c6:05: fc:ff:84:3b:a5:61:7f:ce:ca:a2:2f:64:8a:39:05: e4:59:7d:53:12:7b:35:44:61:3c:b4:e4:52:f6:5e: d0:6b:1e:76:c6:15:c6:46:f2:0d:6d:c0:0e:e2:d2: f5:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:F0:35:98:1B:EC:74:32:DC:21:19:AA:B8:17:26:45:AC:35:7D:6D X509v3 Authority Key Identifier: keyid:CB:D0:85:02:7D:D3:D2:B9:01:25:33:AD:FF:C9:30:5E:5F:F0:A5:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9CFAn3T0rkBJTOt_8kwXl_wpUg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/cc2083-f966-4e07-9207-79c410cb6458/1/y9CFAn3T0rkBJTOt_8kwXl_wpUg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/cc2083-f966-4e07-9207-79c410cb6458/1/y9CFAn3T0rkBJTOt_8kwXl_wpUg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:26:cd:0e:d5:ce:37:54:67:73:e9:9b:4d:87:31:84:74:c0: 97:54:22:cd:93:47:cb:71:e7:38:9f:e4:0a:56:2f:f0:4e:0b: 8a:d6:e4:0c:30:15:06:ee:83:71:f1:b2:3d:6a:ef:a9:12:0f: 79:27:01:fd:e2:1d:07:bb:9b:8d:d2:32:0c:0c:2f:80:a7:24: ad:ac:75:62:ba:94:75:fd:5b:77:7a:77:c4:be:b4:bb:ea:54: 37:e1:9b:d5:8d:ad:ea:25:90:dd:b9:76:7d:42:11:83:28:d6: 29:fc:03:d4:ae:cd:98:fc:fe:f8:7a:6a:13:d0:48:8a:7a:7c: 17:0d:46:49:65:73:a0:4e:0e:bb:b9:ec:e2:d3:48:fb:89:64: e9:b7:36:f3:32:c7:db:97:a2:a3:0c:94:77:03:c4:27:0f:5f: 66:05:e8:26:5a:6d:48:0e:a5:4e:a3:93:8a:f1:e1:93:2f:ee: c5:24:6c:50:10:db:b1:37:96:2c:b8:1c:69:71:12:88:ae:7b: f2:11:03:66:3c:d2:59:d3:c9:dd:12:a8:b9:69:6f:44:fa:14: 10:cf:30:c1:2c:29:c2:43:7b:dc:e8:ee:32:5f:b7:a0:2f:35: e8:cf:7e:29:a8:41:52:60:5d:03:3b:2c:4e:49:d7:77:2a:c0: 2e:2c:16:d0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzibyr2rkMp0YhpD2LN+ekMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiZDA4NTAyN2RkM2QyYjkwMTI1MzNhZGZmYzkzMDVlNWZm MGE1NDgwHhcNMjUxMjA2MTIwMTIxWhcNMjUxMjA3MTIwMTIxWjAzMTEwLwYDVQQD Eyg1ZmYwMzU5ODFiZWM3NDMyZGMyMTE5YWFiODE3MjY0NWFjMzU3ZDZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp2MWJOrLUGyYUfDoQRUo3eeu/MX1 ZwRYpFiGBCznlrB1qnTZosnE7uOi1sYD8/bK60WpAmUPKzNKqJAMbq+sKl+HG8Wg 8XOm++7ECXqccCTtR5uOisQxdJJUQZ5zrECvvmwH3Vs3/xNKJcKmghH1DY+zcnnd QZ2ibNjB2QFrI4EeIFK21R+0xZxl5rd7HRfK5U0JKwoMVVxF3fVEtMbeIIumOm82 3zGrW5qdymsnofJYSma5Df+lV/cGnyQsOqfNQbshmqLATWukL5Sud4XKxgX8/4Q7 pWF/zsqiL2SKOQXkWX1TEns1RGE8tORS9l7Qax52xhXGRvINbcAO4tL15wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF/wNZgb7HQy3CEZqrgXJkWsNX1tMB8GA1UdIwQY MBaAFMvQhQJ909K5ASUzrf/JMF5f8KVIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveTlDRkFuM1QwcmtCSlRPdF84a3dYbF93cFVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny9jYzIwODMtZjk2Ni00ZTA3LTkyMDct NzljNDEwY2I2NDU4LzEveTlDRkFuM1QwcmtCSlRPdF84a3dYbF93cFVnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny9jYzIwODMtZjk2Ni00ZTA3LTkyMDctNzljNDEwY2I2NDU4 LzEveTlDRkFuM1QwcmtCSlRPdF84a3dYbF93cFVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAECbNDtXO N1Rnc+mbTYcxhHTAl1QizZNHy3HnOJ/kClYv8E4LitbkDDAVBu6DcfGyPWrvqRIP eScB/eIdB7ubjdIyDAwvgKckrax1YrqUdf1bd3p3xL60u+pUN+Gb1Y2t6iWQ3bl2 fUIRgyjWKfwD1K7NmPz++HpqE9BIinp8Fw1GSWVzoE4Ou7ns4tNI+4lk6bc28zLH 25eiowyUdwPEJw9fZgXoJlptSA6lTqOTivHhky/uxSRsUBDbsTeWLLgcaXESiK57 8hEDZjzSWdPJ3RKouWlvRPoUEM8wwSwpwkN73OjuMl+3oC816M9+KahBUmBdAzss TknXdyrALiwW0A== -----END CERTIFICATE-----Generated at Sat Dec 6 19:40:11 2025 by rpki-client