This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/0df56c-68a9-4feb-bf53-d7f11d684737/1/b9YNm5Q7CMRHz35UmJ9SsN7F9-c.mft File: b9YNm5Q7CMRHz35UmJ9SsN7F9-c.mft (raw, json) Hash identifier: KacCRhn53P1jVEGNXqpMDUA9Hzu6FUQcZwofmYLB7Ys= Subject key identifier: 51:7E:4F:39:9A:17:F9:A8:95:9A:9F:8D:CE:D3:9E:81:7B:B6:E6:0D Authority key identifier: 6F:D6:0D:9B:94:3B:08:C4:47:CF:7E:54:98:9F:52:B0:DE:C5:F7:E7 Certificate issuer: /CN=6fd60d9b943b08c447cf7e54989f52b0dec5f7e7 Certificate serial: 019AF352780E8FE5D25B4A0E734AB2D82E7D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b9YNm5Q7CMRHz35UmJ9SsN7F9-c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/0df56c-68a9-4feb-bf53-d7f11d684737/1/b9YNm5Q7CMRHz35UmJ9SsN7F9-c.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 11:00:59 +0000 Manifest this update: Sat 06 Dec 2025 11:00:59 +0000 Manifest next update: Sun 07 Dec 2025 11:00:59 +0000 Files and hashes: 1: EtKR-kQx-fQIYWuQ-lYzi3aG73M.roa (hash: Tv2U/xkIvhOtN5S9AYeK8bEvblqxzhCnqAMAXe7i/DA=) 2: b9YNm5Q7CMRHz35UmJ9SsN7F9-c.crl (hash: jLcQt2pyDMssvJy6ER5mhEpdZ+YEal5cNFDj2zImsZQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/0df56c-68a9-4feb-bf53-d7f11d684737/1/b9YNm5Q7CMRHz35UmJ9SsN7F9-c.crl rsync://rpki.ripe.net/repository/DEFAULT/67/0df56c-68a9-4feb-bf53-d7f11d684737/1/b9YNm5Q7CMRHz35UmJ9SsN7F9-c.mft rsync://rpki.ripe.net/repository/DEFAULT/b9YNm5Q7CMRHz35UmJ9SsN7F9-c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 11:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:78:0e:8f:e5:d2:5b:4a:0e:73:4a:b2:d8:2e:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6fd60d9b943b08c447cf7e54989f52b0dec5f7e7 Validity Not Before: Dec 6 11:00:59 2025 GMT Not After : Dec 7 11:00:59 2025 GMT Subject: CN=517e4f399a17f9a8959a9f8dced39e817bb6e60d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:bb:69:2d:66:41:bc:1e:0a:4c:ec:6b:49:a7: e2:5e:b2:6a:38:c7:88:56:b1:7e:c7:0c:eb:1d:eb: d9:69:2c:2d:7b:1f:6b:da:4d:bf:f8:ee:d6:4a:31: ea:c4:38:fc:71:ee:d1:42:23:6d:7b:62:fb:a7:14: dd:79:b8:6a:8c:28:fc:9a:6e:7e:a9:d3:35:6e:d7: 92:8c:7c:49:87:01:1c:ee:1b:42:6d:25:26:5c:5c: 77:6e:3d:59:b8:8a:80:59:0b:2c:f8:75:f2:b1:3c: 5c:20:2a:5e:c1:7f:0f:f6:4a:36:b3:8a:9f:cd:2b: 08:e7:b0:a4:9d:de:37:d0:39:11:be:cf:98:11:a6: 79:4d:63:e7:56:63:3f:43:a4:c8:9a:85:c9:11:ee: c3:4c:d0:24:dc:55:b4:82:cc:24:d7:68:53:12:d0: 8c:39:7c:68:6b:72:59:0b:f3:9d:e2:31:28:81:a8: 7f:8c:91:28:90:57:de:8e:d6:bd:de:39:d0:cc:87: 63:56:a1:99:17:bf:1d:3e:ad:66:4c:c3:29:73:60: 7a:09:fd:cb:87:ce:08:04:92:dd:91:fc:3e:d3:c6: d3:08:0d:65:18:37:6f:2f:b3:c0:b0:f6:64:8d:96: ef:e3:4e:5d:0f:1e:49:6c:ff:c8:0c:24:c9:d8:93: 2c:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:7E:4F:39:9A:17:F9:A8:95:9A:9F:8D:CE:D3:9E:81:7B:B6:E6:0D X509v3 Authority Key Identifier: keyid:6F:D6:0D:9B:94:3B:08:C4:47:CF:7E:54:98:9F:52:B0:DE:C5:F7:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9YNm5Q7CMRHz35UmJ9SsN7F9-c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/0df56c-68a9-4feb-bf53-d7f11d684737/1/b9YNm5Q7CMRHz35UmJ9SsN7F9-c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/67/0df56c-68a9-4feb-bf53-d7f11d684737/1/b9YNm5Q7CMRHz35UmJ9SsN7F9-c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:60:f0:85:12:27:7e:6c:88:09:71:38:99:fc:b6:67:46:9a: b9:7b:90:55:2d:82:cc:37:9f:0c:ab:84:bd:f1:7e:04:43:48: e2:d1:9e:f5:7c:5b:4a:ce:bb:7f:a8:3d:19:fe:ba:94:63:ff: 07:e2:57:76:21:20:66:cb:d0:4c:3a:af:6a:14:62:0a:40:9d: 27:4f:e9:5c:9a:f4:c7:e4:21:93:cf:9c:8b:e6:ad:6c:fc:28: ee:d5:0e:fb:1a:73:ea:61:e8:b8:99:13:de:04:39:9f:07:2d: 0a:de:3f:f9:1f:05:c7:e9:c5:e2:6b:14:e1:c2:8d:31:25:39: 8a:5d:0d:2a:60:f3:d1:ec:97:39:be:0a:80:38:35:40:b2:46: 35:98:d6:b0:63:57:d9:5a:50:37:d0:b1:d2:8d:a3:c0:e3:70: 43:22:3c:56:d0:c2:cc:9b:cf:5b:cc:57:b5:5d:42:3b:ff:a6: cf:d9:1b:cd:87:62:6c:7e:24:1e:08:15:ac:21:c6:52:51:03: d9:a8:01:d6:84:88:88:50:de:32:06:e0:d4:17:09:91:f1:8f: 7a:7d:bb:f0:6a:28:cc:3d:74:06:29:a9:b6:38:1e:de:e4:a8: d7:a6:e6:3f:0d:98:03:06:3f:3a:8d:d2:e8:3a:2e:46:34:70: 05:aa:12:8f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzUngOj+XSW0oOc0qy2C59MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmZDYwZDliOTQzYjA4YzQ0N2NmN2U1NDk4OWY1MmIwZGVj NWY3ZTcwHhcNMjUxMjA2MTEwMDU5WhcNMjUxMjA3MTEwMDU5WjAzMTEwLwYDVQQD Eyg1MTdlNGYzOTlhMTdmOWE4OTU5YTlmOGRjZWQzOWU4MTdiYjZlNjBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArrtpLWZBvB4KTOxrSafiXrJqOMeI VrF+xwzrHevZaSwtex9r2k2/+O7WSjHqxDj8ce7RQiNte2L7pxTdebhqjCj8mm5+ qdM1bteSjHxJhwEc7htCbSUmXFx3bj1ZuIqAWQss+HXysTxcICpewX8P9ko2s4qf zSsI57Cknd430DkRvs+YEaZ5TWPnVmM/Q6TImoXJEe7DTNAk3FW0gswk12hTEtCM OXxoa3JZC/Od4jEogah/jJEokFfejta93jnQzIdjVqGZF78dPq1mTMMpc2B6Cf3L h84IBJLdkfw+08bTCA1lGDdvL7PAsPZkjZbv405dDx5JbP/IDCTJ2JMsVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFF+TzmaF/molZqfjc7TnoF7tuYNMB8GA1UdIwQY MBaAFG/WDZuUOwjER89+VJifUrDexffnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjlZTm01UTdDTVJIejM1VW1KOVNzTjdGOS1jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny8wZGY1NmMtNjhhOS00ZmViLWJmNTMt ZDdmMTFkNjg0NzM3LzEvYjlZTm01UTdDTVJIejM1VW1KOVNzTjdGOS1jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ny8wZGY1NmMtNjhhOS00ZmViLWJmNTMtZDdmMTFkNjg0NzM3 LzEvYjlZTm01UTdDTVJIejM1VW1KOVNzTjdGOS1jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF2DwhRIn fmyICXE4mfy2Z0aauXuQVS2CzDefDKuEvfF+BENI4tGe9XxbSs67f6g9Gf66lGP/ B+JXdiEgZsvQTDqvahRiCkCdJ0/pXJr0x+Qhk8+ci+atbPwo7tUO+xpz6mHouJkT 3gQ5nwctCt4/+R8Fx+nF4msU4cKNMSU5il0NKmDz0eyXOb4KgDg1QLJGNZjWsGNX 2VpQN9Cx0o2jwONwQyI8VtDCzJvPW8xXtV1CO/+mz9kbzYdibH4kHggVrCHGUlED 2agB1oSIiFDeMgbg1BcJkfGPen278GoozD10Bimptjge3uSo16bmPw2YAwY/Oo3S 6DouRjRwBaoSjw== -----END CERTIFICATE-----Generated at Sat Dec 6 15:45:41 2025 by rpki-client