This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/858143-af0c-493e-8ed1-9f5f780569a1/1/y_9_1-4R7_iRSjFQ_NFqZIo8fzA.mft File: y_9_1-4R7_iRSjFQ_NFqZIo8fzA.mft (raw, json) Hash identifier: d8MMiDGwxiFxXm0iXluUy5UH5f4kzY8WFmwePDV5ZbA= Subject key identifier: 25:83:0E:60:E9:27:B3:89:EB:68:D5:37:A0:C2:B6:ED:26:44:5E:64 Authority key identifier: CB:FF:7F:D7:EE:11:EF:F8:91:4A:31:50:FC:D1:6A:64:8A:3C:7F:30 Certificate issuer: /CN=cbff7fd7ee11eff8914a3150fcd16a648a3c7f30 Certificate serial: 019AF3F7B567851817B3ED8D3D57E7DA98D6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y_9_1-4R7_iRSjFQ_NFqZIo8fzA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/858143-af0c-493e-8ed1-9f5f780569a1/1/y_9_1-4R7_iRSjFQ_NFqZIo8fzA.mft Manifest number: 06BE Signing time: Sat 06 Dec 2025 14:01:28 +0000 Manifest this update: Sat 06 Dec 2025 14:01:28 +0000 Manifest next update: Sun 07 Dec 2025 14:01:28 +0000 Files and hashes: 1: meIfpWGWvt-OCR5hELolYg558lc.roa (hash: b6ypOtwfgJ3TZwPfNgJCJZ3JwL1dV4492jTSEMjG2cE=) 2: y_9_1-4R7_iRSjFQ_NFqZIo8fzA.crl (hash: bDd+65PBz7w5miXk3YfKXGqudndf8doQfsGK8sR3axw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/858143-af0c-493e-8ed1-9f5f780569a1/1/y_9_1-4R7_iRSjFQ_NFqZIo8fzA.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/858143-af0c-493e-8ed1-9f5f780569a1/1/y_9_1-4R7_iRSjFQ_NFqZIo8fzA.mft rsync://rpki.ripe.net/repository/DEFAULT/y_9_1-4R7_iRSjFQ_NFqZIo8fzA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f7:b5:67:85:18:17:b3:ed:8d:3d:57:e7:da:98:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cbff7fd7ee11eff8914a3150fcd16a648a3c7f30 Validity Not Before: Dec 6 14:01:28 2025 GMT Not After : Dec 7 14:01:28 2025 GMT Subject: CN=25830e60e927b389eb68d537a0c2b6ed26445e64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:bf:6a:c6:2e:ff:3d:0b:b3:4a:84:38:ae:88: 48:bd:63:63:cc:ec:4d:05:12:04:32:8c:0d:83:80: 79:50:0b:42:98:c6:69:6f:90:97:18:c8:b8:c3:cb: 87:9a:c1:21:03:1c:d7:d6:62:6b:a3:82:1f:bf:63: 33:04:b1:c2:b9:6a:a8:2f:5c:f5:4a:1e:00:34:6a: 20:15:2c:3d:17:69:a5:1b:7a:e7:5a:4e:ad:69:8b: 59:81:d3:bc:2f:05:ae:6d:09:a3:22:9d:26:12:08: b5:bf:a6:5f:60:2a:bb:5f:df:b8:75:60:45:e5:67: 1a:55:b3:27:82:69:9d:91:71:b3:0d:70:f6:2f:dc: 8f:62:fc:36:c8:b8:09:2e:e7:54:1f:6b:f8:9f:50: 89:3b:0c:37:98:f4:c1:68:03:05:42:ac:22:77:e1: 77:aa:3c:ea:36:4f:b5:6a:71:2a:31:ca:c4:02:d2: 14:92:a5:11:fd:bf:7a:fb:7d:f1:22:6b:6b:da:93: 5e:4a:40:7f:c8:63:eb:2c:1a:4b:60:ba:37:80:1a: a5:5a:e8:9b:de:57:a0:fc:e3:28:bf:a8:56:c3:20: 23:63:0a:80:ca:88:0c:75:0a:7a:fd:ee:98:7c:69: 07:07:cf:38:47:49:22:91:8f:f0:dd:5a:61:8c:4e: ca:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:83:0E:60:E9:27:B3:89:EB:68:D5:37:A0:C2:B6:ED:26:44:5E:64 X509v3 Authority Key Identifier: keyid:CB:FF:7F:D7:EE:11:EF:F8:91:4A:31:50:FC:D1:6A:64:8A:3C:7F:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y_9_1-4R7_iRSjFQ_NFqZIo8fzA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/858143-af0c-493e-8ed1-9f5f780569a1/1/y_9_1-4R7_iRSjFQ_NFqZIo8fzA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/858143-af0c-493e-8ed1-9f5f780569a1/1/y_9_1-4R7_iRSjFQ_NFqZIo8fzA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:7b:12:87:07:6f:cd:30:0f:a9:5b:2f:2d:70:6d:8c:f8:9b: 16:10:33:23:15:44:56:d6:3a:c6:fb:e1:d9:62:2f:3a:95:37: eb:ba:eb:e5:e3:d8:87:e7:cc:e8:d9:a5:08:11:0b:8d:18:e6: 57:6f:fa:f5:ba:ed:61:cf:2a:a3:7d:5c:26:4c:48:17:8d:2d: 6a:cf:74:92:5c:6c:9d:43:5f:51:18:6e:75:4e:fc:d4:c1:16: 86:2b:6b:82:a1:95:e1:1c:c6:ac:1c:2b:f7:8c:80:fa:ae:fc: 2f:7b:cf:0b:87:5e:09:ac:d0:79:c9:b6:fb:18:aa:c8:82:c9: b8:4d:66:b2:59:28:2e:9f:3f:41:56:b1:48:38:ac:cf:01:06: 5a:8e:2e:94:27:8d:04:78:fe:d6:4d:d8:ef:10:78:8a:61:7c: 96:2c:f6:1f:b0:26:e6:68:cd:94:da:ce:62:80:86:95:a3:53: 46:89:c2:57:6c:5d:65:23:e4:3a:e8:cf:9a:d1:97:bf:e0:94: 9a:b4:bd:02:c8:3f:7b:17:34:31:91:cc:d4:8d:24:a4:06:63: 2d:9f:d8:8e:f1:a8:3d:5b:a3:86:01:57:da:82:ee:9e:a4:fa: a6:4b:92:42:d2:3c:63:68:5b:0a:12:a0:ad:35:8a:f5:04:f4: f1:98:c5:95 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz97VnhRgXs+2NPVfn2pjWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiZmY3ZmQ3ZWUxMWVmZjg5MTRhMzE1MGZjZDE2YTY0OGEz YzdmMzAwHhcNMjUxMjA2MTQwMTI4WhcNMjUxMjA3MTQwMTI4WjAzMTEwLwYDVQQD EygyNTgzMGU2MGU5MjdiMzg5ZWI2OGQ1MzdhMGMyYjZlZDI2NDQ1ZTY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsL9qxi7/PQuzSoQ4rohIvWNjzOxN BRIEMowNg4B5UAtCmMZpb5CXGMi4w8uHmsEhAxzX1mJro4Ifv2MzBLHCuWqoL1z1 Sh4ANGogFSw9F2mlG3rnWk6taYtZgdO8LwWubQmjIp0mEgi1v6ZfYCq7X9+4dWBF 5WcaVbMngmmdkXGzDXD2L9yPYvw2yLgJLudUH2v4n1CJOww3mPTBaAMFQqwid+F3 qjzqNk+1anEqMcrEAtIUkqUR/b96+33xImtr2pNeSkB/yGPrLBpLYLo3gBqlWuib 3leg/OMov6hWwyAjYwqAyogMdQp6/e6YfGkHB884R0kikY/w3VphjE7KdQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCWDDmDpJ7OJ62jVN6DCtu0mRF5kMB8GA1UdIwQY MBaAFMv/f9fuEe/4kUoxUPzRamSKPH8wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveV85XzEtNFI3X2lSU2pGUV9ORnFaSW84ZnpBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi84NTgxNDMtYWYwYy00OTNlLThlZDEt OWY1Zjc4MDU2OWExLzEveV85XzEtNFI3X2lSU2pGUV9ORnFaSW84ZnpBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi84NTgxNDMtYWYwYy00OTNlLThlZDEtOWY1Zjc4MDU2OWEx LzEveV85XzEtNFI3X2lSU2pGUV9ORnFaSW84ZnpBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcHsShwdv zTAPqVsvLXBtjPibFhAzIxVEVtY6xvvh2WIvOpU367rr5ePYh+fM6NmlCBELjRjm V2/69brtYc8qo31cJkxIF40tas90klxsnUNfURhudU781MEWhitrgqGV4RzGrBwr 94yA+q78L3vPC4deCazQecm2+xiqyILJuE1mslkoLp8/QVaxSDiszwEGWo4ulCeN BHj+1k3Y7xB4imF8liz2H7Am5mjNlNrOYoCGlaNTRonCV2xdZSPkOujPmtGXv+CU mrS9Asg/exc0MZHM1I0kpAZjLZ/YjvGoPVujhgFX2oLunqT6pkuSQtI8Y2hbChKg rTWK9QT08ZjFlQ== -----END CERTIFICATE-----Generated at Sat Dec 6 23:55:01 2025 by rpki-client