This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/082f12-513b-4eb9-a171-c6f6d444915f/1/y9lC2W7pSnpaZS73rIVdyUAUFd8.mft File: y9lC2W7pSnpaZS73rIVdyUAUFd8.mft (raw, json) Hash identifier: lJ22W/ZdlQ1fBD7/tlqMAEAoh5nTtwFL5GkzGnP0OYY= Subject key identifier: 82:C9:4B:4A:21:1D:7E:71:4B:D2:22:C8:68:C0:96:4F:F4:21:B9:85 Authority key identifier: CB:D9:42:D9:6E:E9:4A:7A:5A:65:2E:F7:AC:85:5D:C9:40:14:15:DF Certificate issuer: /CN=cbd942d96ee94a7a5a652ef7ac855dc9401415df Certificate serial: 019AF0882F3B7F962B1DC6F08E4F9FF53EDD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9lC2W7pSnpaZS73rIVdyUAUFd8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/082f12-513b-4eb9-a171-c6f6d444915f/1/y9lC2W7pSnpaZS73rIVdyUAUFd8.mft Manifest number: 1764 Signing time: Fri 05 Dec 2025 22:00:47 +0000 Manifest this update: Fri 05 Dec 2025 22:00:47 +0000 Manifest next update: Sat 06 Dec 2025 22:00:47 +0000 Files and hashes: 1: HD6zC7xfGA0SAuF4e7yz2Af08gs.roa (hash: VEGKVVclN7mqg9gsZ7F7LgAgXxZFarPfa+qJz1ng4Pg=) 2: y9lC2W7pSnpaZS73rIVdyUAUFd8.crl (hash: iaHy9aSK58fAICYBNMa2ORUXa9HTRUdG8T6Mymd3760=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/082f12-513b-4eb9-a171-c6f6d444915f/1/y9lC2W7pSnpaZS73rIVdyUAUFd8.crl rsync://rpki.ripe.net/repository/DEFAULT/77/082f12-513b-4eb9-a171-c6f6d444915f/1/y9lC2W7pSnpaZS73rIVdyUAUFd8.mft rsync://rpki.ripe.net/repository/DEFAULT/y9lC2W7pSnpaZS73rIVdyUAUFd8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:88:2f:3b:7f:96:2b:1d:c6:f0:8e:4f:9f:f5:3e:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cbd942d96ee94a7a5a652ef7ac855dc9401415df Validity Not Before: Dec 5 22:00:47 2025 GMT Not After : Dec 6 22:00:47 2025 GMT Subject: CN=82c94b4a211d7e714bd222c868c0964ff421b985 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:91:ff:04:7d:4b:f0:63:9a:99:da:40:2b:46: 86:73:a1:94:14:1e:88:ba:c7:28:e7:b5:62:ad:c6: 68:d5:9f:40:02:e3:38:fe:97:5d:e5:db:48:89:b0: 16:63:0c:fe:49:44:64:e9:81:9d:f0:c0:c8:8e:44: 03:ed:cc:d5:9e:2b:64:11:e7:7a:9c:56:6c:59:ea: 15:2b:ab:09:a1:76:fe:71:9b:51:bc:1c:e2:21:c4: c5:2d:7c:be:dc:d2:18:79:15:93:cd:7c:68:57:ea: 46:ed:fc:06:fc:c8:e5:d0:96:91:f0:67:9b:55:e8: 90:53:4c:5d:5b:4c:cd:6e:a9:29:69:fc:3d:00:ca: 25:cc:1b:4c:92:62:e3:92:12:40:d2:96:3b:fb:2d: 49:68:51:80:cf:e2:03:92:e6:01:0a:4c:71:01:a6: 34:c8:be:e6:96:4c:ec:f3:79:a2:60:6b:06:b8:49: a0:eb:59:28:46:c1:f5:de:9f:d7:60:ee:99:c6:4b: 68:61:a2:71:70:f5:38:1a:a5:55:27:47:1b:c4:24: eb:2d:f4:bb:f4:23:cb:75:49:fd:6e:35:b6:a5:05: a1:84:07:1f:e5:51:4b:11:9f:f2:88:96:f5:29:2b: 53:99:85:41:18:c4:72:86:7d:98:e3:6a:7f:a1:39: d5:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:C9:4B:4A:21:1D:7E:71:4B:D2:22:C8:68:C0:96:4F:F4:21:B9:85 X509v3 Authority Key Identifier: keyid:CB:D9:42:D9:6E:E9:4A:7A:5A:65:2E:F7:AC:85:5D:C9:40:14:15:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9lC2W7pSnpaZS73rIVdyUAUFd8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/082f12-513b-4eb9-a171-c6f6d444915f/1/y9lC2W7pSnpaZS73rIVdyUAUFd8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/77/082f12-513b-4eb9-a171-c6f6d444915f/1/y9lC2W7pSnpaZS73rIVdyUAUFd8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:64:09:f0:21:8d:ef:dd:d4:a1:de:71:c9:f5:d3:25:09:5c: 58:b4:1b:a4:46:c5:44:29:6a:43:00:7d:32:be:d4:6f:a0:a3: 56:e0:6c:62:75:f3:65:36:b9:75:6e:be:0e:5f:6d:eb:06:fa: d3:0d:a2:36:0a:2c:bb:2c:8b:77:de:8f:56:db:d4:dc:6c:53: bc:03:55:ba:3e:9c:65:36:06:af:0e:6a:46:de:ce:66:5e:a7: 6b:e8:ac:d6:e0:9c:f6:cc:20:67:87:37:47:19:61:e6:7c:43: 69:69:30:00:6d:ce:be:87:6a:f7:ea:6c:41:32:74:12:30:b9: 2e:fb:f8:2f:2b:e1:ca:4e:dd:d1:1c:76:56:3d:40:ba:af:6e: 83:58:bf:6c:9b:c5:5e:2b:d3:d1:49:c3:03:c8:cb:b3:50:2d: f1:f3:7a:55:94:a3:7b:74:06:f4:00:45:31:d9:0c:20:5a:91: df:3d:a3:3d:81:79:c7:d9:e7:aa:c8:f7:f1:05:a1:94:84:a7: c2:38:4e:ba:96:41:6c:5c:f9:25:15:6d:dd:a9:be:49:34:01: 75:08:20:78:9a:c6:34:f8:35:fe:04:67:75:66:80:02:a9:f0: 94:dd:70:79:00:6e:89:44:8d:e4:a0:ee:28:aa:e1:53:0c:5b: 0b:24:c3:26 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwiC87f5YrHcbwjk+f9T7dMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiZDk0MmQ5NmVlOTRhN2E1YTY1MmVmN2FjODU1ZGM5NDAx NDE1ZGYwHhcNMjUxMjA1MjIwMDQ3WhcNMjUxMjA2MjIwMDQ3WjAzMTEwLwYDVQQD Eyg4MmM5NGI0YTIxMWQ3ZTcxNGJkMjIyYzg2OGMwOTY0ZmY0MjFiOTg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvZH/BH1L8GOamdpAK0aGc6GUFB6I usco57VircZo1Z9AAuM4/pdd5dtIibAWYwz+SURk6YGd8MDIjkQD7czVnitkEed6 nFZsWeoVK6sJoXb+cZtRvBziIcTFLXy+3NIYeRWTzXxoV+pG7fwG/Mjl0JaR8Geb VeiQU0xdW0zNbqkpafw9AMolzBtMkmLjkhJA0pY7+y1JaFGAz+IDkuYBCkxxAaY0 yL7mlkzs83miYGsGuEmg61koRsH13p/XYO6ZxktoYaJxcPU4GqVVJ0cbxCTrLfS7 9CPLdUn9bjW2pQWhhAcf5VFLEZ/yiJb1KStTmYVBGMRyhn2Y42p/oTnVqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFILJS0ohHX5xS9IiyGjAlk/0IbmFMB8GA1UdIwQY MBaAFMvZQtlu6Up6WmUu96yFXclAFBXfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveTlsQzJXN3BTbnBhWlM3M3JJVmR5VUFVRmQ4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny8wODJmMTItNTEzYi00ZWI5LWExNzEt YzZmNmQ0NDQ5MTVmLzEveTlsQzJXN3BTbnBhWlM3M3JJVmR5VUFVRmQ4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ny8wODJmMTItNTEzYi00ZWI5LWExNzEtYzZmNmQ0NDQ5MTVm LzEveTlsQzJXN3BTbnBhWlM3M3JJVmR5VUFVRmQ4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK2QJ8CGN 793Uod5xyfXTJQlcWLQbpEbFRClqQwB9Mr7Ub6CjVuBsYnXzZTa5dW6+Dl9t6wb6 0w2iNgosuyyLd96PVtvU3GxTvANVuj6cZTYGrw5qRt7OZl6na+is1uCc9swgZ4c3 Rxlh5nxDaWkwAG3Ovodq9+psQTJ0EjC5Lvv4Lyvhyk7d0Rx2Vj1Auq9ug1i/bJvF XivT0UnDA8jLs1At8fN6VZSje3QG9ABFMdkMIFqR3z2jPYF5x9nnqsj38QWhlISn wjhOupZBbFz5JRVt3am+STQBdQggeJrGNPg1/gRndWaAAqnwlN1weQBuiUSN5KDu KKrhUwxbCyTDJg== -----END CERTIFICATE-----Generated at Sat Dec 6 08:01:17 2025 by rpki-client