This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/ae175a-1c00-4091-a061-9ba4ec31cb6b/1/9YmCO6FHWAB83oc69L9H_Zw5c3s.mft File: 9YmCO6FHWAB83oc69L9H_Zw5c3s.mft (raw, json) Hash identifier: 5HJeZUsSyhthXmBPJ6p4fyP3jY/XwwvdWOwK7c2OmpE= Subject key identifier: 41:50:44:3E:73:71:B7:A4:FC:A2:9A:4D:7F:64:E7:FC:4E:48:FC:7E Authority key identifier: F5:89:82:3B:A1:47:58:00:7C:DE:87:3A:F4:BF:47:FD:9C:39:73:7B Certificate issuer: /CN=f589823ba14758007cde873af4bf47fd9c39737b Certificate serial: 019AF31C5A0D7EE8DEB5EAC26B51E5CE626D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9YmCO6FHWAB83oc69L9H_Zw5c3s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/ae175a-1c00-4091-a061-9ba4ec31cb6b/1/9YmCO6FHWAB83oc69L9H_Zw5c3s.mft Manifest number: 1243 Signing time: Sat 06 Dec 2025 10:01:52 +0000 Manifest this update: Sat 06 Dec 2025 10:01:52 +0000 Manifest next update: Sun 07 Dec 2025 10:01:52 +0000 Files and hashes: 1: 9YmCO6FHWAB83oc69L9H_Zw5c3s.crl (hash: qo7jjobwYdNDrGS9SlVbQ9Tkf+bKbb3LU9HHwc+S8P4=) 2: cwCE2hhjusn86QvOu2pcA9KTbHA.roa (hash: NxYhK1mgxO/73LOxU0Rf/stDIA61i1imewNDavbu5Zs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/ae175a-1c00-4091-a061-9ba4ec31cb6b/1/9YmCO6FHWAB83oc69L9H_Zw5c3s.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/ae175a-1c00-4091-a061-9ba4ec31cb6b/1/9YmCO6FHWAB83oc69L9H_Zw5c3s.mft rsync://rpki.ripe.net/repository/DEFAULT/9YmCO6FHWAB83oc69L9H_Zw5c3s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:01:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:5a:0d:7e:e8:de:b5:ea:c2:6b:51:e5:ce:62:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f589823ba14758007cde873af4bf47fd9c39737b Validity Not Before: Dec 6 10:01:52 2025 GMT Not After : Dec 7 10:01:52 2025 GMT Subject: CN=4150443e7371b7a4fca29a4d7f64e7fc4e48fc7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:d9:9a:13:9d:69:7a:b4:dd:73:f7:d4:87:c2: 42:fa:c0:1c:43:fc:3b:a4:b7:aa:f3:9b:35:70:65: 3f:05:14:26:27:16:6a:56:b4:74:22:8f:21:7f:5c: e3:d1:ed:83:4b:2c:63:3b:9a:72:83:a9:74:49:b0: 05:d8:68:e1:32:8a:34:6f:51:9c:f0:01:f4:61:1e: 27:b4:17:41:45:c5:99:2d:46:97:51:15:94:75:63: 03:94:f2:f7:2b:4a:a5:41:65:cd:4a:0e:9a:3f:9a: a5:fa:6a:4a:85:cc:8d:a3:30:5a:62:c7:2b:ef:9c: 6a:7c:6e:b2:5a:88:ed:7a:2e:6e:2b:60:99:67:53: e3:a9:0a:9a:32:82:84:f6:8c:cf:c3:73:a3:ce:0e: 47:d3:b4:62:9c:d1:8b:91:ba:91:e3:14:91:20:53: 66:98:5d:f7:93:9f:9b:86:52:83:30:1b:bf:be:d0: b3:b2:01:0e:b0:87:82:80:5f:89:73:a9:58:7c:86: 75:54:b1:f0:cc:80:03:59:bb:7c:5b:05:02:1c:ff: bf:3c:12:a2:4a:db:99:2e:26:2e:db:3b:69:cc:73: 5a:23:87:fc:8b:d2:80:17:5a:88:6c:ba:1e:90:13: 07:db:15:ee:a9:39:a3:59:9a:c3:9f:4c:9f:55:d5: 91:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:50:44:3E:73:71:B7:A4:FC:A2:9A:4D:7F:64:E7:FC:4E:48:FC:7E X509v3 Authority Key Identifier: keyid:F5:89:82:3B:A1:47:58:00:7C:DE:87:3A:F4:BF:47:FD:9C:39:73:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9YmCO6FHWAB83oc69L9H_Zw5c3s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ae175a-1c00-4091-a061-9ba4ec31cb6b/1/9YmCO6FHWAB83oc69L9H_Zw5c3s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ae175a-1c00-4091-a061-9ba4ec31cb6b/1/9YmCO6FHWAB83oc69L9H_Zw5c3s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:a9:e2:df:6c:f1:de:ee:52:9e:f1:65:e2:04:04:74:47:03: 7d:db:6e:96:f0:55:bc:43:45:84:4b:1d:01:b1:9f:bc:15:69: 3a:b9:be:fe:c1:0f:26:95:29:0b:a4:bf:bd:9b:9e:4a:42:3e: 07:af:65:3c:5b:cb:b5:92:b1:34:80:0b:1e:26:7b:63:b1:db: 94:c3:e8:27:42:53:aa:db:cc:5f:18:08:11:ff:0d:09:fa:74: 8e:1c:ac:a9:d5:5c:ba:d4:f4:38:5a:96:9e:ea:33:8d:2f:b7: a4:fc:b1:cd:13:3b:6a:01:4b:9a:ef:fa:a8:f8:ea:02:6f:1d: 38:bd:c2:f5:ee:ac:81:e5:da:0e:51:58:f5:88:ef:14:bc:96: 35:f8:4a:fc:35:24:57:0b:1a:36:8b:57:66:33:1d:4e:72:d4: 83:9c:a0:78:ea:03:72:c3:b5:c2:9a:12:6c:b2:b0:be:b1:84: 06:7e:ac:75:45:ba:0b:73:62:03:b7:4f:38:b0:22:b6:f5:6b: b4:d7:44:9b:5f:4b:be:45:b0:ad:50:f8:18:59:e6:43:cc:f3: 81:5e:8f:58:1a:d6:cd:30:81:e5:ed:30:92:81:7a:9e:e1:4e: 93:ea:0e:3a:42:9f:2b:c0:bc:88:5e:0d:a0:e2:b8:46:01:e2: 23:49:41:a8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHFoNfujeterCa1HlzmJtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1ODk4MjNiYTE0NzU4MDA3Y2RlODczYWY0YmY0N2ZkOWMz OTczN2IwHhcNMjUxMjA2MTAwMTUyWhcNMjUxMjA3MTAwMTUyWjAzMTEwLwYDVQQD Eyg0MTUwNDQzZTczNzFiN2E0ZmNhMjlhNGQ3ZjY0ZTdmYzRlNDhmYzdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAytmaE51perTdc/fUh8JC+sAcQ/w7 pLeq85s1cGU/BRQmJxZqVrR0Io8hf1zj0e2DSyxjO5pyg6l0SbAF2GjhMoo0b1Gc 8AH0YR4ntBdBRcWZLUaXURWUdWMDlPL3K0qlQWXNSg6aP5ql+mpKhcyNozBaYscr 75xqfG6yWojtei5uK2CZZ1PjqQqaMoKE9ozPw3Ojzg5H07RinNGLkbqR4xSRIFNm mF33k5+bhlKDMBu/vtCzsgEOsIeCgF+Jc6lYfIZ1VLHwzIADWbt8WwUCHP+/PBKi StuZLiYu2ztpzHNaI4f8i9KAF1qIbLoekBMH2xXuqTmjWZrDn0yfVdWRzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEFQRD5zcbek/KKaTX9k5/xOSPx+MB8GA1UdIwQY MBaAFPWJgjuhR1gAfN6HOvS/R/2cOXN7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOVltQ082RkhXQUI4M29jNjlMOUhfWnc1YzNzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC9hZTE3NWEtMWMwMC00MDkxLWEwNjEt OWJhNGVjMzFjYjZiLzEvOVltQ082RkhXQUI4M29jNjlMOUhfWnc1YzNzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC9hZTE3NWEtMWMwMC00MDkxLWEwNjEtOWJhNGVjMzFjYjZi LzEvOVltQ082RkhXQUI4M29jNjlMOUhfWnc1YzNzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO6ni32zx 3u5SnvFl4gQEdEcDfdtulvBVvENFhEsdAbGfvBVpOrm+/sEPJpUpC6S/vZueSkI+ B69lPFvLtZKxNIALHiZ7Y7HblMPoJ0JTqtvMXxgIEf8NCfp0jhysqdVcutT0OFqW nuozjS+3pPyxzRM7agFLmu/6qPjqAm8dOL3C9e6sgeXaDlFY9YjvFLyWNfhK/DUk VwsaNotXZjMdTnLUg5ygeOoDcsO1wpoSbLKwvrGEBn6sdUW6C3NiA7dPOLAitvVr tNdEm19LvkWwrVD4GFnmQ8zzgV6PWBrWzTCB5e0wkoF6nuFOk+oOOkKfK8C8iF4N oOK4RgHiI0lBqA== -----END CERTIFICATE-----Generated at Sat Dec 6 16:46:35 2025 by rpki-client