This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/a20963-fad7-4e34-bf1e-658b800a5d61/1/cYbmS1gjxMYSh4WNl3DHDfcGsMw.mft File: cYbmS1gjxMYSh4WNl3DHDfcGsMw.mft (raw, json) Hash identifier: L5r7Ee7/jguFAncAnLtXr4wljZZx+KmiVRPRmfkYO+8= Subject key identifier: 6A:AC:6D:BC:DE:17:82:5B:6E:98:51:C2:07:04:EF:DF:AE:CB:8E:4C Authority key identifier: 71:86:E6:4B:58:23:C4:C6:12:87:85:8D:97:70:C7:0D:F7:06:B0:CC Certificate issuer: /CN=7186e64b5823c4c61287858d9770c70df706b0cc Certificate serial: 019AF209994654A060BDB235A375F90049E4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cYbmS1gjxMYSh4WNl3DHDfcGsMw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/a20963-fad7-4e34-bf1e-658b800a5d61/1/cYbmS1gjxMYSh4WNl3DHDfcGsMw.mft Manifest number: 1765 Signing time: Sat 06 Dec 2025 05:01:46 +0000 Manifest this update: Sat 06 Dec 2025 05:01:46 +0000 Manifest next update: Sun 07 Dec 2025 05:01:46 +0000 Files and hashes: 1: b88Rl7W3m-ZgN433QwmekbZFP6o.roa (hash: NoA21W8ly2WxwAuP2zZWwmclSVAV10KXOOvNxpP+/rg=) 2: cYbmS1gjxMYSh4WNl3DHDfcGsMw.crl (hash: yOOf0J16s5/rqXfOAaClZ4EhiJB5oC9l/zW9V+fCwsM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/a20963-fad7-4e34-bf1e-658b800a5d61/1/cYbmS1gjxMYSh4WNl3DHDfcGsMw.crl rsync://rpki.ripe.net/repository/DEFAULT/91/a20963-fad7-4e34-bf1e-658b800a5d61/1/cYbmS1gjxMYSh4WNl3DHDfcGsMw.mft rsync://rpki.ripe.net/repository/DEFAULT/cYbmS1gjxMYSh4WNl3DHDfcGsMw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:99:46:54:a0:60:bd:b2:35:a3:75:f9:00:49:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7186e64b5823c4c61287858d9770c70df706b0cc Validity Not Before: Dec 6 05:01:46 2025 GMT Not After : Dec 7 05:01:46 2025 GMT Subject: CN=6aac6dbcde17825b6e9851c20704efdfaecb8e4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:9c:de:9f:da:78:7b:a4:bd:80:89:f0:dd:c8: e9:38:70:cf:4b:b0:b6:d3:78:e4:21:1f:0a:71:85: 85:01:4a:b6:b8:53:69:e8:b3:8b:66:78:e3:91:af: cc:df:3b:c6:3e:54:e2:50:2c:ec:d1:60:28:d7:ea: 81:aa:1c:a3:02:32:62:17:0b:9c:f8:e0:81:3a:e4: 02:3f:b1:2a:81:21:5b:0f:bb:9b:7f:54:af:02:10: eb:0e:cd:d7:a3:44:3d:09:28:2e:c7:b1:95:59:3e: 1e:b3:37:29:a0:46:8f:3f:9b:28:d0:f4:90:0f:ce: 9e:35:9f:e7:84:24:06:be:76:a7:1f:4f:84:80:ab: ac:ce:ac:32:13:e5:a1:71:b4:e3:cb:8b:41:4b:35: 8f:5d:16:c3:d4:88:9e:1d:01:e3:75:e8:98:39:c2: ee:91:09:c3:65:aa:55:0d:1e:a9:7c:46:72:03:42: a8:85:8b:0e:8c:18:7d:78:2e:5d:10:54:6a:2d:8d: f6:07:c4:a6:71:da:de:b7:de:54:fe:83:c8:a5:84: a6:b4:0b:1b:6a:5e:6c:44:83:8b:a2:7a:e8:51:8d: 18:f8:b1:1c:93:1f:7c:58:50:77:e7:78:ad:24:ae: d6:4b:58:8c:fa:b7:95:1b:2f:6a:55:b6:d6:f5:c0: c3:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:AC:6D:BC:DE:17:82:5B:6E:98:51:C2:07:04:EF:DF:AE:CB:8E:4C X509v3 Authority Key Identifier: keyid:71:86:E6:4B:58:23:C4:C6:12:87:85:8D:97:70:C7:0D:F7:06:B0:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cYbmS1gjxMYSh4WNl3DHDfcGsMw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/a20963-fad7-4e34-bf1e-658b800a5d61/1/cYbmS1gjxMYSh4WNl3DHDfcGsMw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/91/a20963-fad7-4e34-bf1e-658b800a5d61/1/cYbmS1gjxMYSh4WNl3DHDfcGsMw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:26:dc:7e:f9:59:31:fa:13:78:34:7d:2c:ed:14:30:31:fb: ae:20:68:5e:1e:24:4f:88:3d:d6:08:90:56:5f:de:9d:62:fc: bf:89:1b:a5:4b:a3:ad:91:6e:78:66:19:7e:63:ac:db:58:7c: 7e:53:24:1f:ad:f0:56:81:c4:40:29:fa:6a:68:87:65:82:09: ac:c7:96:e9:85:56:71:18:db:e4:02:e4:39:4b:cb:af:be:6d: 1b:1a:17:5f:67:9d:9a:4e:aa:5d:ef:bf:ae:2c:c0:97:d8:54: 15:05:8f:b7:21:61:41:08:ce:d3:0d:29:5a:86:d7:ce:4a:e0: 49:4b:f9:7b:12:4e:a6:6c:93:0a:e5:55:7b:ae:e3:cb:81:57: b6:cd:50:a8:70:03:a1:b9:4f:57:9d:aa:15:7c:18:f8:a7:93: 2f:fc:17:f0:a9:69:4e:09:c0:83:ce:78:39:4d:10:b9:7b:17: f0:81:c1:58:72:83:77:9e:b0:12:4d:ea:e9:eb:8e:00:01:f7: 67:12:7e:87:64:05:f7:ca:98:14:1b:bb:c7:e8:c7:7d:ff:cf: 82:a5:93:f2:88:0b:54:c1:54:66:d3:f7:e0:eb:bd:34:03:9a: 49:9e:86:6e:6e:c3:ea:de:cd:57:c9:ff:4c:f9:74:c6:e4:65: d6:3c:11:42 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCZlGVKBgvbI1o3X5AEnkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcxODZlNjRiNTgyM2M0YzYxMjg3ODU4ZDk3NzBjNzBkZjcw NmIwY2MwHhcNMjUxMjA2MDUwMTQ2WhcNMjUxMjA3MDUwMTQ2WjAzMTEwLwYDVQQD Eyg2YWFjNmRiY2RlMTc4MjViNmU5ODUxYzIwNzA0ZWZkZmFlY2I4ZTRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAspzen9p4e6S9gInw3cjpOHDPS7C2 03jkIR8KcYWFAUq2uFNp6LOLZnjjka/M3zvGPlTiUCzs0WAo1+qBqhyjAjJiFwuc +OCBOuQCP7EqgSFbD7ubf1SvAhDrDs3Xo0Q9CSgux7GVWT4eszcpoEaPP5so0PSQ D86eNZ/nhCQGvnanH0+EgKuszqwyE+WhcbTjy4tBSzWPXRbD1IieHQHjdeiYOcLu kQnDZapVDR6pfEZyA0KohYsOjBh9eC5dEFRqLY32B8Smcdret95U/oPIpYSmtAsb al5sRIOLonroUY0Y+LEckx98WFB353itJK7WS1iM+reVGy9qVbbW9cDDPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGqsbbzeF4JbbphRwgcE79+uy45MMB8GA1UdIwQY MBaAFHGG5ktYI8TGEoeFjZdwxw33BrDMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY1libVMxZ2p4TVlTaDRXTmwzREhEZmNHc013LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS9hMjA5NjMtZmFkNy00ZTM0LWJmMWUt NjU4YjgwMGE1ZDYxLzEvY1libVMxZ2p4TVlTaDRXTmwzREhEZmNHc013Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MS9hMjA5NjMtZmFkNy00ZTM0LWJmMWUtNjU4YjgwMGE1ZDYx LzEvY1libVMxZ2p4TVlTaDRXTmwzREhEZmNHc013LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAECbcfvlZ MfoTeDR9LO0UMDH7riBoXh4kT4g91giQVl/enWL8v4kbpUujrZFueGYZfmOs21h8 flMkH63wVoHEQCn6amiHZYIJrMeW6YVWcRjb5ALkOUvLr75tGxoXX2edmk6qXe+/ rizAl9hUFQWPtyFhQQjO0w0pWobXzkrgSUv5exJOpmyTCuVVe67jy4FXts1QqHAD oblPV52qFXwY+KeTL/wX8KlpTgnAg854OU0QuXsX8IHBWHKDd56wEk3q6euOAAH3 ZxJ+h2QF98qYFBu7x+jHff/PgqWT8ogLVMFUZtP34Ou9NAOaSZ6Gbm7D6t7NV8n/ TPl0xuRl1jwRQg== -----END CERTIFICATE-----Generated at Sat Dec 6 12:16:27 2025 by rpki-client