This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/6b329f-f4f5-4af0-a81e-92b6796c77cc/1/y9dF6_zsOC3yUsL3UNtkj08DSr8.mft File: y9dF6_zsOC3yUsL3UNtkj08DSr8.mft (raw, json) Hash identifier: 3xvoF1dAMRG6LKiopSHoCxmkSvvhUVdklBA/j94IE1A= Subject key identifier: 63:E2:31:71:D5:D0:C8:7F:AE:5D:21:72:E6:AC:E5:0C:B4:46:9D:9D Authority key identifier: CB:D7:45:EB:FC:EC:38:2D:F2:52:C2:F7:50:DB:64:8F:4F:03:4A:BF Certificate issuer: /CN=cbd745ebfcec382df252c2f750db648f4f034abf Certificate serial: 019B2F67C7D2FB8514FF1089BDE4131CE77A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9dF6_zsOC3yUsL3UNtkj08DSr8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/6b329f-f4f5-4af0-a81e-92b6796c77cc/1/y9dF6_zsOC3yUsL3UNtkj08DSr8.mft Manifest number: 1105 Signing time: Thu 18 Dec 2025 03:01:29 +0000 Manifest this update: Thu 18 Dec 2025 03:01:29 +0000 Manifest next update: Fri 19 Dec 2025 03:01:29 +0000 Files and hashes: 1: GiEc-ANqrb63QcspGJXLFg9KsNI.roa (hash: Sdx7QGn6KBOh9cOI8uzLQw1JR4w8NsvJTOnn28cZmjk=) 2: y9dF6_zsOC3yUsL3UNtkj08DSr8.crl (hash: EGZA6Qo+iMHWOLGYvh0+Cgl2fPNzNyosIz6DSJzPMpM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/6b329f-f4f5-4af0-a81e-92b6796c77cc/1/y9dF6_zsOC3yUsL3UNtkj08DSr8.crl rsync://rpki.ripe.net/repository/DEFAULT/62/6b329f-f4f5-4af0-a81e-92b6796c77cc/1/y9dF6_zsOC3yUsL3UNtkj08DSr8.mft rsync://rpki.ripe.net/repository/DEFAULT/y9dF6_zsOC3yUsL3UNtkj08DSr8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 01:18:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:67:c7:d2:fb:85:14:ff:10:89:bd:e4:13:1c:e7:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cbd745ebfcec382df252c2f750db648f4f034abf Validity Not Before: Dec 18 03:01:29 2025 GMT Not After : Dec 19 03:01:29 2025 GMT Subject: CN=63e23171d5d0c87fae5d2172e6ace50cb4469d9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:b7:b6:2c:ec:af:73:f3:44:c7:f1:09:48:5b: e2:98:bd:2c:b6:32:22:f1:76:55:4c:ed:59:45:ba: 0c:22:7d:44:51:33:97:6a:d5:e6:0b:f3:9c:ac:cd: e3:eb:60:55:24:91:0f:25:3e:45:b2:75:ca:90:c6: 16:c3:b7:a6:29:32:c7:34:7f:03:ce:43:55:71:7d: 1f:93:dd:5c:f5:2e:a9:bb:62:2e:49:1a:ba:ce:e3: d9:eb:6f:c1:60:c3:25:d8:57:d4:d9:94:c0:85:1b: 8f:54:e1:22:8b:92:e4:4a:9d:49:ba:0a:83:e2:be: b2:c5:97:81:5a:98:c4:f5:3a:03:cf:a8:dc:37:15: 0c:8e:80:01:50:9d:96:62:aa:f6:d4:aa:14:d6:78: 93:44:d3:eb:bb:1f:3c:4a:6c:e4:7b:94:89:98:e3: 75:1b:41:93:87:3a:06:40:32:b8:04:79:32:53:29: 52:08:93:2a:cb:b2:6b:a9:dd:1e:53:31:8d:93:f2: 29:14:d8:44:b3:fc:8e:54:65:74:2e:fd:4b:32:0b: 67:3d:07:31:d6:0d:67:20:1e:3c:2a:b7:35:c4:80: ca:25:ce:9d:dc:19:7c:e8:01:09:b3:af:ef:e7:c6: a5:ba:06:ed:fd:b0:7c:5b:11:7d:3a:05:82:44:73: d4:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:E2:31:71:D5:D0:C8:7F:AE:5D:21:72:E6:AC:E5:0C:B4:46:9D:9D X509v3 Authority Key Identifier: keyid:CB:D7:45:EB:FC:EC:38:2D:F2:52:C2:F7:50:DB:64:8F:4F:03:4A:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9dF6_zsOC3yUsL3UNtkj08DSr8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/6b329f-f4f5-4af0-a81e-92b6796c77cc/1/y9dF6_zsOC3yUsL3UNtkj08DSr8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/6b329f-f4f5-4af0-a81e-92b6796c77cc/1/y9dF6_zsOC3yUsL3UNtkj08DSr8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:dc:7b:f0:95:a6:96:39:5d:f5:71:2c:54:c1:fd:0d:93:bc: 76:f9:b7:d0:d3:c4:fa:73:83:8a:b7:5f:86:e3:3f:77:06:da: 45:21:29:75:f3:c1:7b:24:23:c0:45:ec:54:a2:46:cd:ae:3b: 5c:71:a2:db:01:17:3c:d8:5a:94:66:b2:33:e3:46:8e:f6:4f: c2:3e:c0:cc:34:f1:22:ae:bf:cd:56:fa:ec:01:ba:98:9b:95: 44:b0:2c:99:a6:d9:35:07:fa:95:a5:ed:c7:26:0f:96:05:c7: a6:6e:99:db:f2:3f:b7:da:78:0c:a1:81:6c:c1:5d:50:b4:00: ad:4a:42:cb:ce:c0:2f:c6:ba:34:f5:83:19:8c:6f:47:a8:c5: e3:50:e9:2e:e8:0a:31:ef:0a:2b:9a:03:9c:89:ad:3a:e5:47: f4:9c:37:0b:df:2f:39:30:59:16:e5:f7:2b:58:61:e6:2a:d9: 29:a2:6a:43:71:31:00:f4:22:75:a7:06:55:94:0a:bb:7c:a7: f7:1c:e1:30:28:13:4c:b8:fa:98:62:08:68:34:24:91:26:b3: c7:c9:bd:04:60:e3:2f:ca:da:53:2a:c9:ae:bc:21:f0:10:2b: 2d:d7:75:12:c9:c7:f8:dc:29:8d:02:cd:e4:bc:57:05:5c:51: bc:9e:66:cf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsvZ8fS+4UU/xCJveQTHOd6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiZDc0NWViZmNlYzM4MmRmMjUyYzJmNzUwZGI2NDhmNGYw MzRhYmYwHhcNMjUxMjE4MDMwMTI5WhcNMjUxMjE5MDMwMTI5WjAzMTEwLwYDVQQD Eyg2M2UyMzE3MWQ1ZDBjODdmYWU1ZDIxNzJlNmFjZTUwY2I0NDY5ZDlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxre2LOyvc/NEx/EJSFvimL0stjIi 8XZVTO1ZRboMIn1EUTOXatXmC/OcrM3j62BVJJEPJT5FsnXKkMYWw7emKTLHNH8D zkNVcX0fk91c9S6pu2IuSRq6zuPZ62/BYMMl2FfU2ZTAhRuPVOEii5LkSp1JugqD 4r6yxZeBWpjE9ToDz6jcNxUMjoABUJ2WYqr21KoU1niTRNPrux88Smzke5SJmON1 G0GThzoGQDK4BHkyUylSCJMqy7Jrqd0eUzGNk/IpFNhEs/yOVGV0Lv1LMgtnPQcx 1g1nIB48Krc1xIDKJc6d3Bl86AEJs6/v58alugbt/bB8WxF9OgWCRHPUawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGPiMXHV0Mh/rl0hcuas5Qy0Rp2dMB8GA1UdIwQY MBaAFMvXRev87Dgt8lLC91DbZI9PA0q/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveTlkRjZfenNPQzN5VXNMM1VOdGtqMDhEU3I4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi82YjMyOWYtZjRmNS00YWYwLWE4MWUt OTJiNjc5NmM3N2NjLzEveTlkRjZfenNPQzN5VXNMM1VOdGtqMDhEU3I4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi82YjMyOWYtZjRmNS00YWYwLWE4MWUtOTJiNjc5NmM3N2Nj LzEveTlkRjZfenNPQzN5VXNMM1VOdGtqMDhEU3I4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAktx78JWm ljld9XEsVMH9DZO8dvm30NPE+nODirdfhuM/dwbaRSEpdfPBeyQjwEXsVKJGza47 XHGi2wEXPNhalGayM+NGjvZPwj7AzDTxIq6/zVb67AG6mJuVRLAsmabZNQf6laXt xyYPlgXHpm6Z2/I/t9p4DKGBbMFdULQArUpCy87AL8a6NPWDGYxvR6jF41DpLugK Me8KK5oDnImtOuVH9Jw3C98vOTBZFuX3K1hh5irZKaJqQ3ExAPQidacGVZQKu3yn 9xzhMCgTTLj6mGIIaDQkkSazx8m9BGDjL8raUyrJrrwh8BArLdd1EsnH+NwpjQLN 5LxXBVxRvJ5mzw== -----END CERTIFICATE-----Generated at Thu Dec 18 07:09:04 2025 by rpki-client