This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/dc8c0d-f8c3-406c-b79e-b492d6ff483f/1/y9RxnXLSiKcyGNjBpJiCMzMpfiU.mft File: y9RxnXLSiKcyGNjBpJiCMzMpfiU.mft (raw, json) Hash identifier: 4WlgzyIGiAKS888tx5v434JaaMbjHfhwOynunN44qtk= Subject key identifier: FF:5D:3D:2D:01:8A:78:F9:6D:33:7E:4D:77:49:99:22:F2:1E:F7:6F Authority key identifier: CB:D4:71:9D:72:D2:88:A7:32:18:D8:C1:A4:98:82:33:33:29:7E:25 Certificate issuer: /CN=cbd4719d72d288a73218d8c1a498823333297e25 Certificate serial: 019AF19AB02CD258635D44A923D3C5FA4C90 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9RxnXLSiKcyGNjBpJiCMzMpfiU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/dc8c0d-f8c3-406c-b79e-b492d6ff483f/1/y9RxnXLSiKcyGNjBpJiCMzMpfiU.mft Manifest number: 1768 Signing time: Sat 06 Dec 2025 03:00:37 +0000 Manifest this update: Sat 06 Dec 2025 03:00:37 +0000 Manifest next update: Sun 07 Dec 2025 03:00:37 +0000 Files and hashes: 1: FCsvVRb4swZVn7i4DbPOyl1zfXM.roa (hash: pWG3xc+TD2BjxXH94IjEoL3ycjPpI1BrWH3pnVMhatw=) 2: d7nnb22eByZ3PgdzvIIdeg7bVrw.roa (hash: MtT+ZrWZXS09kZHHdiFFktcO1Kssl/83QQmCIziV1ms=) 3: fX9eMLnK7xVb4_2F9g2DOCYqfvU.roa (hash: 1sy/TAEfLZZfPClLeEAAWlanxJu879FILQU8C/alm0M=) 4: y9RxnXLSiKcyGNjBpJiCMzMpfiU.crl (hash: 1zQSsxy/oDfeMHa6ScRGfBr4TxejmYRwWDk16Bev4y4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/dc8c0d-f8c3-406c-b79e-b492d6ff483f/1/y9RxnXLSiKcyGNjBpJiCMzMpfiU.crl rsync://rpki.ripe.net/repository/DEFAULT/db/dc8c0d-f8c3-406c-b79e-b492d6ff483f/1/y9RxnXLSiKcyGNjBpJiCMzMpfiU.mft rsync://rpki.ripe.net/repository/DEFAULT/y9RxnXLSiKcyGNjBpJiCMzMpfiU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:b0:2c:d2:58:63:5d:44:a9:23:d3:c5:fa:4c:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cbd4719d72d288a73218d8c1a498823333297e25 Validity Not Before: Dec 6 03:00:37 2025 GMT Not After : Dec 7 03:00:37 2025 GMT Subject: CN=ff5d3d2d018a78f96d337e4d77499922f21ef76f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:bd:9e:62:39:65:4c:b2:94:8c:76:3e:4a:ca: 3a:1c:ac:24:4c:0a:b4:d0:04:32:3a:0a:c3:68:08: 7b:0e:59:e8:50:5c:02:4c:31:56:e5:32:d2:09:9d: 04:95:e3:7f:5c:45:d4:0f:81:c0:0f:16:2a:bc:f7: f3:60:0b:14:ae:b9:e2:4f:9b:6f:90:e4:2d:3f:62: 4e:6e:98:67:bd:26:25:85:13:a5:ea:f4:a5:a1:80: af:a4:c7:9a:1d:59:1d:94:d2:5e:47:58:43:f9:8f: c7:39:80:a7:8a:60:d4:b7:e2:23:c4:07:ea:37:65: 88:3c:d4:6a:25:79:dc:09:f3:76:d3:48:c8:8e:12: 94:50:0e:ca:21:f8:de:1e:ec:8c:04:a3:06:24:b2: 55:a9:c7:01:f0:17:64:e4:83:fd:4d:9f:c1:4c:8e: 70:5a:7d:f2:91:37:f0:52:16:4e:35:97:c0:de:6f: cd:f8:97:e3:d4:15:61:a7:7a:37:0e:42:16:74:c0: 25:f9:af:c9:d2:41:66:d4:26:25:07:aa:35:2f:f3: b0:e5:cf:0e:74:64:a1:4a:5f:17:e5:0e:be:21:fb: a9:08:96:a9:a2:fc:ac:a8:0a:91:2d:0a:13:1a:20: a6:4d:bb:28:c7:c4:51:b0:ed:41:7a:e2:79:92:0e: 19:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:5D:3D:2D:01:8A:78:F9:6D:33:7E:4D:77:49:99:22:F2:1E:F7:6F X509v3 Authority Key Identifier: keyid:CB:D4:71:9D:72:D2:88:A7:32:18:D8:C1:A4:98:82:33:33:29:7E:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9RxnXLSiKcyGNjBpJiCMzMpfiU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/dc8c0d-f8c3-406c-b79e-b492d6ff483f/1/y9RxnXLSiKcyGNjBpJiCMzMpfiU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/dc8c0d-f8c3-406c-b79e-b492d6ff483f/1/y9RxnXLSiKcyGNjBpJiCMzMpfiU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:4c:17:9f:60:95:2a:63:d9:11:73:1b:34:f1:b7:ca:84:50: 96:95:fc:af:fa:2f:6f:07:cb:b3:99:67:c6:59:fd:24:f2:b4: 65:5f:f6:d3:cb:e5:b4:db:e9:78:24:5c:d7:5c:21:c6:5c:bc: 80:f4:2d:22:fe:04:52:b0:bf:c2:9f:a0:91:7c:5a:7d:78:c7: de:09:bc:fa:b5:77:05:0e:60:27:38:f6:f1:84:cb:ee:88:5f: 5c:98:91:45:e6:1f:bb:05:f2:39:ee:b9:63:eb:d6:4e:30:5e: c4:b2:72:e3:77:7a:d6:2f:cc:cc:22:36:cc:c4:78:69:dd:f2: 1a:f7:4e:45:4a:49:ce:7a:0f:ba:c0:73:98:82:4e:54:75:e6: bb:23:1f:4b:0f:14:07:78:72:2f:d0:da:6d:31:0c:d9:fe:d3: c4:4b:60:2b:e2:9c:2e:89:6b:55:f9:49:5d:56:96:00:8e:1b: 4f:55:66:ef:fa:f2:ae:2a:b4:8e:09:e4:b7:2c:3f:e2:1e:09: b6:e1:24:d9:9d:e5:9b:8d:0e:fa:92:5d:36:1a:f8:54:77:fd: 24:8b:fe:87:99:91:9e:cc:6c:0e:ed:f9:b5:90:a9:fc:5a:b7: 66:2b:73:25:24:59:70:3b:f8:56:95:ad:d3:66:09:2b:e1:01: fb:54:82:f6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmrAs0lhjXUSpI9PF+kyQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiZDQ3MTlkNzJkMjg4YTczMjE4ZDhjMWE0OTg4MjMzMzMy OTdlMjUwHhcNMjUxMjA2MDMwMDM3WhcNMjUxMjA3MDMwMDM3WjAzMTEwLwYDVQQD EyhmZjVkM2QyZDAxOGE3OGY5NmQzMzdlNGQ3NzQ5OTkyMmYyMWVmNzZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlL2eYjllTLKUjHY+Sso6HKwkTAq0 0AQyOgrDaAh7DlnoUFwCTDFW5TLSCZ0EleN/XEXUD4HADxYqvPfzYAsUrrniT5tv kOQtP2JObphnvSYlhROl6vSloYCvpMeaHVkdlNJeR1hD+Y/HOYCnimDUt+IjxAfq N2WIPNRqJXncCfN200jIjhKUUA7KIfjeHuyMBKMGJLJVqccB8Bdk5IP9TZ/BTI5w Wn3ykTfwUhZONZfA3m/N+Jfj1BVhp3o3DkIWdMAl+a/J0kFm1CYlB6o1L/Ow5c8O dGShSl8X5Q6+IfupCJapovysqAqRLQoTGiCmTbsox8RRsO1BeuJ5kg4Z3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP9dPS0Binj5bTN+TXdJmSLyHvdvMB8GA1UdIwQY MBaAFMvUcZ1y0oinMhjYwaSYgjMzKX4lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveTlSeG5YTFNpS2N5R05qQnBKaUNNek1wZmlVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9kYzhjMGQtZjhjMy00MDZjLWI3OWUt YjQ5MmQ2ZmY0ODNmLzEveTlSeG5YTFNpS2N5R05qQnBKaUNNek1wZmlVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi9kYzhjMGQtZjhjMy00MDZjLWI3OWUtYjQ5MmQ2ZmY0ODNm LzEveTlSeG5YTFNpS2N5R05qQnBKaUNNek1wZmlVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANkwXn2CV KmPZEXMbNPG3yoRQlpX8r/ovbwfLs5lnxln9JPK0ZV/208vltNvpeCRc11whxly8 gPQtIv4EUrC/wp+gkXxafXjH3gm8+rV3BQ5gJzj28YTL7ohfXJiRReYfuwXyOe65 Y+vWTjBexLJy43d61i/MzCI2zMR4ad3yGvdORUpJznoPusBzmIJOVHXmuyMfSw8U B3hyL9DabTEM2f7TxEtgK+KcLolrVflJXVaWAI4bT1Vm7/ryriq0jgnktyw/4h4J tuEk2Z3lm40O+pJdNhr4VHf9JIv+h5mRnsxsDu35tZCp/Fq3ZitzJSRZcDv4VpWt 02YJK+EB+1SC9g== -----END CERTIFICATE-----Generated at Sat Dec 6 13:15:43 2025 by rpki-client