This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/74a1b5-3c2e-48e2-90fd-b49d89e30ddd/1/y9_OOlNV-GH9xIwyASx4ydr5paQ.mft File: y9_OOlNV-GH9xIwyASx4ydr5paQ.mft (raw, json) Hash identifier: Dhc1zANBBvzuLCqqQZgoGnjpTCqX8B2pzrZbIscHf9k= Subject key identifier: 9C:3E:EB:8B:15:04:C4:DE:A9:A5:CB:F0:AC:41:57:28:BF:9D:36:E3 Authority key identifier: CB:DF:CE:3A:53:55:F8:61:FD:C4:8C:32:01:2C:78:C9:DA:F9:A5:A4 Certificate issuer: /CN=cbdfce3a5355f861fdc48c32012c78c9daf9a5a4 Certificate serial: 019AF4658ACD85CDF25292E69BFBF8A6038D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9_OOlNV-GH9xIwyASx4ydr5paQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/74a1b5-3c2e-48e2-90fd-b49d89e30ddd/1/y9_OOlNV-GH9xIwyASx4ydr5paQ.mft Manifest number: 1757 Signing time: Sat 06 Dec 2025 16:01:26 +0000 Manifest this update: Sat 06 Dec 2025 16:01:26 +0000 Manifest next update: Sun 07 Dec 2025 16:01:26 +0000 Files and hashes: 1: aCI8Jo962pd2BoQhf-dPqcGKVgE.roa (hash: M5raHpaPR3ugbk/T1ToK6O7tBcNA5IW/XHB83K5aUEA=) 2: u_6Z2m-kttn1KGvW0DMCRJb-wGc.roa (hash: 8dKKNumWXSexpArn6diHEL6UixSl6qSaZ9jIxuDxNf0=) 3: y9_OOlNV-GH9xIwyASx4ydr5paQ.crl (hash: wIl/aWfyr4l5feduwamPhwp9yuuSMpT0OKOGXRANRXI=) 4: zDW63VDxhl9P505zOu3VSRjg2i8.roa (hash: EzqIt3I5mIkchtA/ykq/H3HkJ82nAlwDFFB+//7vPWc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/74a1b5-3c2e-48e2-90fd-b49d89e30ddd/1/y9_OOlNV-GH9xIwyASx4ydr5paQ.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/74a1b5-3c2e-48e2-90fd-b49d89e30ddd/1/y9_OOlNV-GH9xIwyASx4ydr5paQ.mft rsync://rpki.ripe.net/repository/DEFAULT/y9_OOlNV-GH9xIwyASx4ydr5paQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:65:8a:cd:85:cd:f2:52:92:e6:9b:fb:f8:a6:03:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cbdfce3a5355f861fdc48c32012c78c9daf9a5a4 Validity Not Before: Dec 6 16:01:26 2025 GMT Not After : Dec 7 16:01:26 2025 GMT Subject: CN=9c3eeb8b1504c4dea9a5cbf0ac415728bf9d36e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:b7:09:2e:0d:82:a9:18:15:f6:27:74:81:74: 55:49:4c:7a:72:bb:ac:f1:be:5d:01:b8:48:a1:d8: b8:3f:ab:c7:bf:63:3b:5d:50:b3:72:b7:1e:21:50: 0a:d7:f7:38:23:07:62:6c:04:59:f2:aa:6a:5e:2a: 78:34:8b:33:39:10:91:83:6f:72:81:39:5b:ea:51: 72:bc:cc:c9:28:eb:b1:40:60:ad:29:09:53:14:74: d2:3a:24:1e:37:86:b9:b6:7d:e2:f3:0f:d8:42:3b: aa:06:52:21:46:dd:18:46:dc:b3:b7:88:28:01:78: a6:c7:06:73:64:ff:6c:1a:eb:1a:9d:1d:70:b2:c6: 3b:10:9f:e1:8f:57:86:ad:67:2a:23:97:d4:6c:9f: d9:be:e6:20:6c:9c:98:a3:ce:29:1a:6e:9e:0f:05: 75:18:67:71:a6:2d:a8:d9:ef:cd:0a:3a:8a:de:30: b5:8a:98:c4:6c:12:46:25:3b:a8:ec:b9:57:08:17: 0d:a4:bf:d2:c5:13:8c:62:e4:ef:8a:9c:59:7f:76: 64:97:8b:7b:8d:28:fe:c4:53:0e:2a:47:32:1e:7c: 2c:cd:46:fd:fd:9c:22:a3:28:1d:2c:f8:1a:39:8a: c9:ac:ea:75:70:43:95:2a:c9:60:f5:bf:10:43:6b: 3b:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:3E:EB:8B:15:04:C4:DE:A9:A5:CB:F0:AC:41:57:28:BF:9D:36:E3 X509v3 Authority Key Identifier: keyid:CB:DF:CE:3A:53:55:F8:61:FD:C4:8C:32:01:2C:78:C9:DA:F9:A5:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9_OOlNV-GH9xIwyASx4ydr5paQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/74a1b5-3c2e-48e2-90fd-b49d89e30ddd/1/y9_OOlNV-GH9xIwyASx4ydr5paQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/74a1b5-3c2e-48e2-90fd-b49d89e30ddd/1/y9_OOlNV-GH9xIwyASx4ydr5paQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:08:cd:c1:5c:65:5d:9b:4c:bf:e8:ed:44:d2:43:5a:71:f0: ef:e9:ec:bb:9a:9f:b5:a2:78:bc:1a:0f:02:fb:7b:72:7f:cc: 1b:c2:82:a9:6d:d3:48:af:03:a5:9b:d8:98:c6:1a:0c:9d:95: ca:4c:ac:e2:85:dd:a1:32:ce:a4:d4:3d:05:20:b5:4e:1f:ca: 02:63:83:fc:80:99:e9:97:b0:5a:ac:5b:5c:1c:92:8a:b5:33: c9:0b:8a:21:da:b6:97:e8:94:1f:85:a8:14:06:f8:be:b2:a8: ee:8b:db:ad:dd:89:7c:e6:cc:bf:59:3e:db:7a:4f:55:4a:94: c7:8f:8e:36:a2:58:88:54:79:b3:82:bc:f1:d6:0a:5e:dd:4a: a7:88:13:df:e4:e2:d7:f2:e2:cc:f7:e1:40:b0:16:02:8d:6a: 2f:7b:c2:95:b1:86:b5:29:b7:cc:98:58:cb:6d:ab:eb:58:6c: 56:a3:bd:b2:c1:a1:89:81:4b:70:b3:b9:a6:4e:0a:9c:a8:c4: 19:bf:c5:01:01:5b:a8:7f:a2:2c:6e:ec:62:dc:da:3b:9f:1f: 55:47:35:46:54:a0:ef:86:6d:e6:4b:e6:c2:38:fd:c2:eb:6d: bd:fb:1c:38:f3:13:de:e8:37:2c:be:57:a2:0a:35:87:74:a2: 9b:14:31:2f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0ZYrNhc3yUpLmm/v4pgONMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiZGZjZTNhNTM1NWY4NjFmZGM0OGMzMjAxMmM3OGM5ZGFm OWE1YTQwHhcNMjUxMjA2MTYwMTI2WhcNMjUxMjA3MTYwMTI2WjAzMTEwLwYDVQQD Eyg5YzNlZWI4YjE1MDRjNGRlYTlhNWNiZjBhYzQxNTcyOGJmOWQzNmUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz7cJLg2CqRgV9id0gXRVSUx6crus 8b5dAbhIodi4P6vHv2M7XVCzcrceIVAK1/c4IwdibARZ8qpqXip4NIszORCRg29y gTlb6lFyvMzJKOuxQGCtKQlTFHTSOiQeN4a5tn3i8w/YQjuqBlIhRt0YRtyzt4go AXimxwZzZP9sGusanR1wssY7EJ/hj1eGrWcqI5fUbJ/ZvuYgbJyYo84pGm6eDwV1 GGdxpi2o2e/NCjqK3jC1ipjEbBJGJTuo7LlXCBcNpL/SxROMYuTvipxZf3Zkl4t7 jSj+xFMOKkcyHnwszUb9/ZwioygdLPgaOYrJrOp1cEOVKslg9b8QQ2s7KQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJw+64sVBMTeqaXL8KxBVyi/nTbjMB8GA1UdIwQY MBaAFMvfzjpTVfhh/cSMMgEseMna+aWkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveTlfT09sTlYtR0g5eEl3eUFTeDR5ZHI1cGFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi83NGExYjUtM2MyZS00OGUyLTkwZmQt YjQ5ZDg5ZTMwZGRkLzEveTlfT09sTlYtR0g5eEl3eUFTeDR5ZHI1cGFRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi83NGExYjUtM2MyZS00OGUyLTkwZmQtYjQ5ZDg5ZTMwZGRk LzEveTlfT09sTlYtR0g5eEl3eUFTeDR5ZHI1cGFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAwjNwVxl XZtMv+jtRNJDWnHw7+nsu5qftaJ4vBoPAvt7cn/MG8KCqW3TSK8DpZvYmMYaDJ2V ykys4oXdoTLOpNQ9BSC1Th/KAmOD/ICZ6ZewWqxbXBySirUzyQuKIdq2l+iUH4Wo FAb4vrKo7ovbrd2JfObMv1k+23pPVUqUx4+ONqJYiFR5s4K88dYKXt1Kp4gT3+Ti 1/LizPfhQLAWAo1qL3vClbGGtSm3zJhYy22r61hsVqO9ssGhiYFLcLO5pk4KnKjE Gb/FAQFbqH+iLG7sYtzaO58fVUc1RlSg74Zt5kvmwjj9wuttvfscOPMT3ug3LL5X ogo1h3SimxQxLw== -----END CERTIFICATE-----Generated at Sat Dec 6 20:47:13 2025 by rpki-client