This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/256cb6-dc42-41a5-b920-24cba1c03c99/1/yTksMnayQ6_3QKCCxYj7c5Qeu_c.mft File: yTksMnayQ6_3QKCCxYj7c5Qeu_c.mft (raw, json) Hash identifier: h53DwWli+lGq0c7GRmnICzwJ+sU3BBgkiLoJvdd61EU= Subject key identifier: 5D:D8:E2:63:84:0A:8D:48:3A:7D:5E:65:81:D8:66:6A:8B:38:29:55 Authority key identifier: C9:39:2C:32:76:B2:43:AF:F7:40:A0:82:C5:88:FB:73:94:1E:BB:F7 Certificate issuer: /CN=c9392c3276b243aff740a082c588fb73941ebbf7 Certificate serial: 019AF277025A2702B638B08677B693806A70 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yTksMnayQ6_3QKCCxYj7c5Qeu_c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/256cb6-dc42-41a5-b920-24cba1c03c99/1/yTksMnayQ6_3QKCCxYj7c5Qeu_c.mft Manifest number: 06D4 Signing time: Sat 06 Dec 2025 07:01:16 +0000 Manifest this update: Sat 06 Dec 2025 07:01:16 +0000 Manifest next update: Sun 07 Dec 2025 07:01:16 +0000 Files and hashes: 1: aC22qm65HmlnQmRshJm7pr66v5M.roa (hash: LObDHQ4gNcpulvuWrsjsmncwDPjtYz0pJfy6Qo6CsRI=) 2: yTksMnayQ6_3QKCCxYj7c5Qeu_c.crl (hash: yEtfxbrxC0pP22FqEv5VdrcCfQtQ+NO2PiKbamtQs/s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/256cb6-dc42-41a5-b920-24cba1c03c99/1/yTksMnayQ6_3QKCCxYj7c5Qeu_c.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/256cb6-dc42-41a5-b920-24cba1c03c99/1/yTksMnayQ6_3QKCCxYj7c5Qeu_c.mft rsync://rpki.ripe.net/repository/DEFAULT/yTksMnayQ6_3QKCCxYj7c5Qeu_c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:77:02:5a:27:02:b6:38:b0:86:77:b6:93:80:6a:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c9392c3276b243aff740a082c588fb73941ebbf7 Validity Not Before: Dec 6 07:01:16 2025 GMT Not After : Dec 7 07:01:16 2025 GMT Subject: CN=5dd8e263840a8d483a7d5e6581d8666a8b382955 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:cf:49:0d:68:b1:9c:a6:df:25:26:77:1d:f5: 87:5d:62:4e:56:b3:3d:e4:8f:2f:6a:79:9a:f4:96: db:4d:9f:1e:bb:38:ac:b8:be:05:f4:dd:9d:7a:77: a5:16:f5:43:a0:31:5d:57:dc:c3:7f:00:00:12:cb: bc:ad:39:d0:28:38:30:49:2b:9d:56:c8:29:f9:07: 01:6f:b8:79:0b:10:3c:4e:d0:d9:1e:de:70:a8:66: 1a:cc:b3:f8:25:3c:01:ba:61:d9:23:1e:a7:8a:11: 2f:9b:22:19:49:58:3a:d5:38:2a:eb:c4:e9:05:94: 38:a9:62:51:0f:5a:be:ff:4e:02:2f:af:61:be:ef: 7d:00:ae:a7:f7:6a:3e:59:15:c4:74:4b:ed:7f:32: 64:3a:9b:ea:66:79:5f:25:5e:cd:5f:a1:d4:6b:8d: a1:d1:34:78:84:87:e3:8a:a5:48:4c:9f:aa:31:f4: 70:62:e9:5f:59:15:6d:3d:9c:4a:f9:fe:e4:6c:e0: df:5b:be:ea:3d:e2:54:11:25:f4:14:49:32:01:a0: e4:5f:e4:19:db:c1:6f:8e:18:e5:e8:4d:88:e3:dc: 87:b0:2e:71:68:f0:6b:c7:af:a7:66:2d:99:59:64: da:57:e3:fc:0f:e0:6c:d4:09:a5:39:1a:58:54:ab: 79:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:D8:E2:63:84:0A:8D:48:3A:7D:5E:65:81:D8:66:6A:8B:38:29:55 X509v3 Authority Key Identifier: keyid:C9:39:2C:32:76:B2:43:AF:F7:40:A0:82:C5:88:FB:73:94:1E:BB:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yTksMnayQ6_3QKCCxYj7c5Qeu_c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/256cb6-dc42-41a5-b920-24cba1c03c99/1/yTksMnayQ6_3QKCCxYj7c5Qeu_c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/256cb6-dc42-41a5-b920-24cba1c03c99/1/yTksMnayQ6_3QKCCxYj7c5Qeu_c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:6f:d1:a6:0b:f8:a1:e3:82:60:51:80:6b:49:b6:59:80:56: e0:fa:06:96:aa:aa:99:f5:89:1c:53:eb:dc:89:a4:ee:ed:87: e1:56:9d:e6:a3:f8:82:74:1b:b2:75:5d:10:23:fd:0c:e7:07: bf:df:d3:55:dd:b3:e1:0f:cb:19:3d:3a:40:46:a9:89:b5:41: 6b:da:68:88:e7:ba:a7:7f:e9:fd:95:36:11:c6:18:0e:c4:d5: 3c:64:67:1b:4b:9d:92:35:b4:c5:e8:61:bd:ab:e0:51:86:2e: 33:37:5d:5c:19:da:e6:30:5e:2e:55:9b:e3:87:dd:27:da:52: 36:93:43:fd:8f:95:ac:66:20:8d:83:05:29:1b:5a:d4:ad:27: 46:bf:38:df:4b:91:53:21:34:7c:dc:bc:0f:bb:2d:b2:9d:98: d9:27:db:47:0d:cf:1f:73:3b:8b:1d:c4:6c:38:37:ba:5c:c6: a9:ea:68:b2:35:b0:9c:6c:b7:ca:79:e4:03:f1:6c:63:05:cf: 40:d4:8f:37:f7:2d:f2:fe:2a:83:c9:3d:db:99:e8:0a:d4:69: 58:7c:93:d8:91:7a:86:4b:5d:f0:c8:49:84:c8:33:aa:a5:ff: b4:d2:d7:b8:c6:91:09:b9:11:a2:f4:f5:71:e1:2d:f9:df:43: ae:84:88:9d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydwJaJwK2OLCGd7aTgGpwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5MzkyYzMyNzZiMjQzYWZmNzQwYTA4MmM1ODhmYjczOTQx ZWJiZjcwHhcNMjUxMjA2MDcwMTE2WhcNMjUxMjA3MDcwMTE2WjAzMTEwLwYDVQQD Eyg1ZGQ4ZTI2Mzg0MGE4ZDQ4M2E3ZDVlNjU4MWQ4NjY2YThiMzgyOTU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA189JDWixnKbfJSZ3HfWHXWJOVrM9 5I8vanma9JbbTZ8euzisuL4F9N2denelFvVDoDFdV9zDfwAAEsu8rTnQKDgwSSud Vsgp+QcBb7h5CxA8TtDZHt5wqGYazLP4JTwBumHZIx6nihEvmyIZSVg61Tgq68Tp BZQ4qWJRD1q+/04CL69hvu99AK6n92o+WRXEdEvtfzJkOpvqZnlfJV7NX6HUa42h 0TR4hIfjiqVITJ+qMfRwYulfWRVtPZxK+f7kbODfW77qPeJUESX0FEkyAaDkX+QZ 28Fvjhjl6E2I49yHsC5xaPBrx6+nZi2ZWWTaV+P8D+Bs1AmlORpYVKt5WwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF3Y4mOECo1IOn1eZYHYZmqLOClVMB8GA1UdIwQY MBaAFMk5LDJ2skOv90CggsWI+3OUHrv3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveVRrc01uYXlRNl8zUUtDQ3hZajdjNVFldV9jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS8yNTZjYjYtZGM0Mi00MWE1LWI5MjAt MjRjYmExYzAzYzk5LzEveVRrc01uYXlRNl8zUUtDQ3hZajdjNVFldV9jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS8yNTZjYjYtZGM0Mi00MWE1LWI5MjAtMjRjYmExYzAzYzk5 LzEveVRrc01uYXlRNl8zUUtDQ3hZajdjNVFldV9jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdm/Rpgv4 oeOCYFGAa0m2WYBW4PoGlqqqmfWJHFPr3Imk7u2H4Vad5qP4gnQbsnVdECP9DOcH v9/TVd2z4Q/LGT06QEapibVBa9poiOe6p3/p/ZU2EcYYDsTVPGRnG0udkjW0xehh vavgUYYuMzddXBna5jBeLlWb44fdJ9pSNpND/Y+VrGYgjYMFKRta1K0nRr8430uR UyE0fNy8D7stsp2Y2SfbRw3PH3M7ix3EbDg3ulzGqeposjWwnGy3ynnkA/FsYwXP QNSPN/ct8v4qg8k925noCtRpWHyT2JF6hktd8MhJhMgzqqX/tNLXuMaRCbkRovT1 ceEt+d9DroSInQ== -----END CERTIFICATE-----Generated at Sat Dec 6 09:06:57 2025 by rpki-client