This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/11d4e7-e978-4037-ab09-c09ff16fc34b/1/iD9yYGUAJrlzoYp_PplY0yHs4ds.mft File: iD9yYGUAJrlzoYp_PplY0yHs4ds.mft (raw, json) Hash identifier: y00fEjMwExF9tQMZxnFUylUKfCE4VgagxSos/EGiEx0= Subject key identifier: 48:2F:20:45:A1:1A:C5:25:05:B7:BE:FA:64:78:70:DE:EE:29:D4:8C Authority key identifier: 88:3F:72:60:65:00:26:B9:73:A1:8A:7F:3E:99:58:D3:21:EC:E1:DB Certificate issuer: /CN=883f7260650026b973a18a7f3e9958d321ece1db Certificate serial: 019AF2765D09CB8EEA03693762DDA633BF22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iD9yYGUAJrlzoYp_PplY0yHs4ds.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/11d4e7-e978-4037-ab09-c09ff16fc34b/1/iD9yYGUAJrlzoYp_PplY0yHs4ds.mft Manifest number: 01AB Signing time: Sat 06 Dec 2025 07:00:34 +0000 Manifest this update: Sat 06 Dec 2025 07:00:34 +0000 Manifest next update: Sun 07 Dec 2025 07:00:34 +0000 Files and hashes: 1: YkbGKc-LGqIQZMDerpDN8XDOTbw.roa (hash: RY+DUa9ZajYzyfuzC6xFjBj7ICr29ESsVlrxpHdgeWw=) 2: iD9yYGUAJrlzoYp_PplY0yHs4ds.crl (hash: w1THTLVmssHpi52EhRIVFsM+9M9kfNdkkf3ehurWAzU=) 3: zGrKv0NNYS_xjhh1uLNHNu5c_wY.roa (hash: OEzd69K7Il75QSQW6UQvA0dRBfsE2azJdJL9XybJ68I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/11d4e7-e978-4037-ab09-c09ff16fc34b/1/iD9yYGUAJrlzoYp_PplY0yHs4ds.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/11d4e7-e978-4037-ab09-c09ff16fc34b/1/iD9yYGUAJrlzoYp_PplY0yHs4ds.mft rsync://rpki.ripe.net/repository/DEFAULT/iD9yYGUAJrlzoYp_PplY0yHs4ds.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:5d:09:cb:8e:ea:03:69:37:62:dd:a6:33:bf:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=883f7260650026b973a18a7f3e9958d321ece1db Validity Not Before: Dec 6 07:00:34 2025 GMT Not After : Dec 7 07:00:34 2025 GMT Subject: CN=482f2045a11ac52505b7befa647870deee29d48c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:a4:cb:ee:9d:0d:64:ea:86:2f:62:ce:b1:8c: 70:c1:db:c4:3b:32:ee:5b:e4:b9:52:3a:09:bc:3f: bc:1c:3e:9f:34:12:88:12:76:f4:73:67:4a:e4:f0: 31:f5:fb:4a:4a:ae:81:ca:e0:7d:32:c3:5c:27:8c: fd:64:74:56:d3:13:66:9e:78:38:8e:be:7c:58:bc: 79:8d:c9:f2:2c:1f:aa:09:2d:a7:1e:64:fa:ed:82: 26:ce:09:4c:89:e6:4b:04:9e:c7:e4:9a:55:82:5e: e0:36:7a:87:55:5e:6c:de:47:ef:5b:98:a9:5c:10: 8b:23:fe:20:9a:67:07:c4:87:b5:e0:9a:8f:d4:b8: 8f:92:e2:3f:14:33:53:bb:d4:2f:19:a8:5a:05:ac: 63:89:b0:c2:ef:14:6c:ae:86:7d:f1:0e:4f:0e:dd: 59:34:0c:a0:61:0e:3f:bf:bf:1c:91:b1:88:fa:86: a9:0b:d4:6b:c0:e4:ab:71:b9:a6:9d:c9:1d:d5:26: 3e:78:10:74:d2:f0:b3:04:8e:a2:9b:b3:79:d4:a1: 1e:45:51:41:26:2f:f8:2a:c9:f3:71:b4:9a:53:7b: 0f:01:6a:d4:f2:ae:dd:20:6f:9a:fa:c4:e1:46:9d: f0:66:fe:df:4b:ce:3c:10:0e:a1:a4:5a:d7:92:4f: 88:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:2F:20:45:A1:1A:C5:25:05:B7:BE:FA:64:78:70:DE:EE:29:D4:8C X509v3 Authority Key Identifier: keyid:88:3F:72:60:65:00:26:B9:73:A1:8A:7F:3E:99:58:D3:21:EC:E1:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iD9yYGUAJrlzoYp_PplY0yHs4ds.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/11d4e7-e978-4037-ab09-c09ff16fc34b/1/iD9yYGUAJrlzoYp_PplY0yHs4ds.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/11d4e7-e978-4037-ab09-c09ff16fc34b/1/iD9yYGUAJrlzoYp_PplY0yHs4ds.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:a7:15:f6:ff:c4:10:d8:64:02:81:f3:2c:76:a3:b2:a0:06: 8f:09:56:53:4f:3a:9d:c8:91:fa:da:78:bf:a1:ac:f7:64:4d: 79:28:9e:58:7f:96:2e:fb:c7:ab:3c:52:e9:0a:6c:fc:56:a0: 29:ac:79:e9:9f:08:25:b2:3b:43:2c:50:3f:2f:32:f8:67:04: 7d:63:31:1e:b1:46:92:c3:f1:eb:48:88:e8:33:55:f5:b2:45: fe:be:73:39:de:4c:39:63:57:91:d9:f7:af:b6:6f:67:32:27: eb:2f:e1:bf:da:82:53:73:82:51:9b:74:f0:cf:49:ff:7c:0f: b8:f4:7c:53:15:44:ff:2c:a8:5d:b0:94:97:9f:ca:c4:e4:7f: 70:76:2d:6b:e6:2c:d2:80:af:99:e6:91:66:97:95:c8:cf:0f: 2c:f5:8b:90:e7:f4:47:46:10:50:e3:e2:dd:06:9e:ba:34:94: 99:8c:1d:b2:93:93:05:8e:b8:fd:a1:21:2b:d9:55:f4:32:79: 64:7d:37:61:c2:a3:ff:d9:da:d7:dc:28:dd:3b:ec:4d:00:e5: 0e:59:0a:bf:c4:d5:53:ec:82:61:dc:26:35:07:35:c4:1c:5a: a3:ad:d2:25:9a:9e:b0:7f:bd:7d:0f:59:13:e8:ed:7e:f7:18: c5:ab:c3:64 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydl0Jy47qA2k3Yt2mM78iMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4M2Y3MjYwNjUwMDI2Yjk3M2ExOGE3ZjNlOTk1OGQzMjFl Y2UxZGIwHhcNMjUxMjA2MDcwMDM0WhcNMjUxMjA3MDcwMDM0WjAzMTEwLwYDVQQD Eyg0ODJmMjA0NWExMWFjNTI1MDViN2JlZmE2NDc4NzBkZWVlMjlkNDhjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuqTL7p0NZOqGL2LOsYxwwdvEOzLu W+S5UjoJvD+8HD6fNBKIEnb0c2dK5PAx9ftKSq6ByuB9MsNcJ4z9ZHRW0xNmnng4 jr58WLx5jcnyLB+qCS2nHmT67YImzglMieZLBJ7H5JpVgl7gNnqHVV5s3kfvW5ip XBCLI/4gmmcHxIe14JqP1LiPkuI/FDNTu9QvGahaBaxjibDC7xRsroZ98Q5PDt1Z NAygYQ4/v78ckbGI+oapC9RrwOSrcbmmnckd1SY+eBB00vCzBI6im7N51KEeRVFB Ji/4KsnzcbSaU3sPAWrU8q7dIG+a+sThRp3wZv7fS848EA6hpFrXkk+ItQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEgvIEWhGsUlBbe++mR4cN7uKdSMMB8GA1UdIwQY MBaAFIg/cmBlACa5c6GKfz6ZWNMh7OHbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaUQ5eVlHVUFKcmx6b1lwX1BwbFkweUhzNGRzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS8xMWQ0ZTctZTk3OC00MDM3LWFiMDkt YzA5ZmYxNmZjMzRiLzEvaUQ5eVlHVUFKcmx6b1lwX1BwbFkweUhzNGRzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS8xMWQ0ZTctZTk3OC00MDM3LWFiMDktYzA5ZmYxNmZjMzRi LzEvaUQ5eVlHVUFKcmx6b1lwX1BwbFkweUhzNGRzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATqcV9v/E ENhkAoHzLHajsqAGjwlWU086nciR+tp4v6Gs92RNeSieWH+WLvvHqzxS6Qps/Fag Kax56Z8IJbI7QyxQPy8y+GcEfWMxHrFGksPx60iI6DNV9bJF/r5zOd5MOWNXkdn3 r7ZvZzIn6y/hv9qCU3OCUZt08M9J/3wPuPR8UxVE/yyoXbCUl5/KxOR/cHYta+Ys 0oCvmeaRZpeVyM8PLPWLkOf0R0YQUOPi3QaeujSUmYwdspOTBY64/aEhK9lV9DJ5 ZH03YcKj/9na19wo3TvsTQDlDlkKv8TVU+yCYdwmNQc1xBxao63SJZqesH+9fQ9Z E+jtfvcYxavDZA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:58:52 2025 by rpki-client