This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/95ba80-0751-4cb9-8cb4-29f334e11a19/1/y9IrSt4O0dTVMo6uXzili-lT-Dg.mft File: y9IrSt4O0dTVMo6uXzili-lT-Dg.mft (raw, json) Hash identifier: N3ox4LCMV3emCU0ENROVIf116KtH3CR2jd1Skl+JtWs= Subject key identifier: 17:9D:2A:71:9D:06:CC:37:1C:FD:A0:6A:5F:6A:C2:79:61:5D:F0:11 Authority key identifier: CB:D2:2B:4A:DE:0E:D1:D4:D5:32:8E:AE:5F:38:A5:8B:E9:53:F8:38 Certificate issuer: /CN=cbd22b4ade0ed1d4d5328eae5f38a58be953f838 Certificate serial: 019AF23FB1B484474655C3312CFF83B327A8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9IrSt4O0dTVMo6uXzili-lT-Dg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/95ba80-0751-4cb9-8cb4-29f334e11a19/1/y9IrSt4O0dTVMo6uXzili-lT-Dg.mft Manifest number: 0E48 Signing time: Sat 06 Dec 2025 06:00:51 +0000 Manifest this update: Sat 06 Dec 2025 06:00:51 +0000 Manifest next update: Sun 07 Dec 2025 06:00:51 +0000 Files and hashes: 1: 73c0jhSky3BnN0TXunRjeB--q1A.roa (hash: 1Lx5ICQYUA/HUXjaB+c1tYSpkcTCOv6g20/mLwIRufE=) 2: y9IrSt4O0dTVMo6uXzili-lT-Dg.crl (hash: vKF1FN+fQFEa2j4ZC3drpr1RM1h6e7Tqg6GhyYBDfdE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/95ba80-0751-4cb9-8cb4-29f334e11a19/1/y9IrSt4O0dTVMo6uXzili-lT-Dg.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/95ba80-0751-4cb9-8cb4-29f334e11a19/1/y9IrSt4O0dTVMo6uXzili-lT-Dg.mft rsync://rpki.ripe.net/repository/DEFAULT/y9IrSt4O0dTVMo6uXzili-lT-Dg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:b1:b4:84:47:46:55:c3:31:2c:ff:83:b3:27:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cbd22b4ade0ed1d4d5328eae5f38a58be953f838 Validity Not Before: Dec 6 06:00:51 2025 GMT Not After : Dec 7 06:00:51 2025 GMT Subject: CN=179d2a719d06cc371cfda06a5f6ac279615df011 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:67:0f:e0:42:fe:76:5e:64:72:13:a9:60:36: 75:36:89:e3:d5:c0:e6:dc:6c:ee:86:be:27:ae:0a: c2:c9:3e:ff:f6:a2:ab:a4:41:80:9f:80:f9:d3:79: fb:6d:1b:5f:d0:9f:9f:b8:37:50:d6:c6:ef:cb:55: c3:ce:91:44:02:93:f8:be:f9:4b:44:dd:55:e1:9a: 43:db:c7:20:45:f7:eb:a1:0c:fc:72:af:b2:f0:dd: 51:a9:6f:cc:93:a4:bb:b1:25:89:3a:07:92:4b:f0: 99:23:d2:27:9c:ca:5e:68:a0:e5:a1:3c:47:08:6f: 12:e4:79:a6:18:90:f3:ea:0b:18:35:df:e7:c5:05: d6:d9:da:aa:97:6c:87:98:35:f8:fb:dd:39:36:17: 81:b4:46:8b:29:48:7e:d6:20:d0:b9:45:95:7b:42: ad:f8:cd:72:63:00:60:e9:60:ab:30:0c:8c:cd:b1: 61:82:69:ce:3d:af:7c:04:e9:9a:9e:8d:35:e5:7f: b6:3b:20:c0:d3:bc:e8:63:39:f7:5a:e4:b0:73:1a: ac:85:2d:e7:9b:07:68:10:8f:2f:e2:3e:ab:08:9a: a8:ea:6f:57:e6:7d:b0:cc:fc:37:8d:8a:62:6b:5c: 47:27:22:33:64:48:34:3b:8f:31:8c:11:57:12:e2: f0:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:9D:2A:71:9D:06:CC:37:1C:FD:A0:6A:5F:6A:C2:79:61:5D:F0:11 X509v3 Authority Key Identifier: keyid:CB:D2:2B:4A:DE:0E:D1:D4:D5:32:8E:AE:5F:38:A5:8B:E9:53:F8:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9IrSt4O0dTVMo6uXzili-lT-Dg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/95ba80-0751-4cb9-8cb4-29f334e11a19/1/y9IrSt4O0dTVMo6uXzili-lT-Dg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/95ba80-0751-4cb9-8cb4-29f334e11a19/1/y9IrSt4O0dTVMo6uXzili-lT-Dg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:54:7a:a5:e6:aa:ca:57:6a:b3:e4:b0:1e:f2:43:95:a9:c5: ce:56:59:c6:ed:15:78:0c:92:60:82:c5:75:30:65:33:fb:15: 21:4a:f1:24:5e:cd:27:c9:0e:07:53:25:60:ae:ef:f5:ab:39: ac:85:2d:d1:f3:bc:c1:2c:5c:77:09:3e:c4:b4:7a:55:d5:6b: cd:6f:06:f9:13:c6:76:c7:e5:f0:91:39:08:a5:c0:bb:5f:5d: bf:a1:2f:1d:56:ee:6b:1b:e9:c2:8c:08:36:13:67:2a:b9:fe: d0:ef:7c:29:d2:bd:96:89:b1:82:4b:70:9a:cf:c2:34:29:b9: 86:a8:f9:8b:ba:ad:32:bf:b1:27:26:ad:e2:1e:00:64:07:33: 92:4b:c3:7a:ba:3f:65:78:fc:9c:80:d5:06:bb:e3:03:5b:aa: 3e:2a:96:bb:55:98:17:6b:2e:c7:f6:4c:a8:3f:83:ed:a8:ea: b3:60:d0:39:6a:02:62:d6:41:89:bc:cc:b5:04:3e:c8:85:b7: ba:97:de:66:71:41:5e:b0:15:80:78:b0:ee:6a:ac:a3:43:44: 7e:ac:8a:0f:6c:df:a4:b3:89:f3:fb:c0:45:00:bd:6f:10:43: da:1a:db:00:e7:4a:10:d7:38:2c:e8:83:5d:19:03:bf:e6:c4: dc:9e:54:00 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP7G0hEdGVcMxLP+DsyeoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiZDIyYjRhZGUwZWQxZDRkNTMyOGVhZTVmMzhhNThiZTk1 M2Y4MzgwHhcNMjUxMjA2MDYwMDUxWhcNMjUxMjA3MDYwMDUxWjAzMTEwLwYDVQQD EygxNzlkMmE3MTlkMDZjYzM3MWNmZGEwNmE1ZjZhYzI3OTYxNWRmMDExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwWcP4EL+dl5kchOpYDZ1Nonj1cDm 3Gzuhr4nrgrCyT7/9qKrpEGAn4D503n7bRtf0J+fuDdQ1sbvy1XDzpFEApP4vvlL RN1V4ZpD28cgRffroQz8cq+y8N1RqW/Mk6S7sSWJOgeSS/CZI9InnMpeaKDloTxH CG8S5HmmGJDz6gsYNd/nxQXW2dqql2yHmDX4+905NheBtEaLKUh+1iDQuUWVe0Kt +M1yYwBg6WCrMAyMzbFhgmnOPa98BOmano015X+2OyDA07zoYzn3WuSwcxqshS3n mwdoEI8v4j6rCJqo6m9X5n2wzPw3jYpia1xHJyIzZEg0O48xjBFXEuLw2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBedKnGdBsw3HP2gal9qwnlhXfARMB8GA1UdIwQY MBaAFMvSK0reDtHU1TKOrl84pYvpU/g4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveTlJclN0NE8wZFRWTW82dVh6aWxpLWxULURnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS85NWJhODAtMDc1MS00Y2I5LThjYjQt MjlmMzM0ZTExYTE5LzEveTlJclN0NE8wZFRWTW82dVh6aWxpLWxULURnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS85NWJhODAtMDc1MS00Y2I5LThjYjQtMjlmMzM0ZTExYTE5 LzEveTlJclN0NE8wZFRWTW82dVh6aWxpLWxULURnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABFR6peaq yldqs+SwHvJDlanFzlZZxu0VeAySYILFdTBlM/sVIUrxJF7NJ8kOB1MlYK7v9as5 rIUt0fO8wSxcdwk+xLR6VdVrzW8G+RPGdsfl8JE5CKXAu19dv6EvHVbuaxvpwowI NhNnKrn+0O98KdK9lomxgktwms/CNCm5hqj5i7qtMr+xJyat4h4AZAczkkvDero/ ZXj8nIDVBrvjA1uqPiqWu1WYF2sux/ZMqD+D7ajqs2DQOWoCYtZBibzMtQQ+yIW3 upfeZnFBXrAVgHiw7mqso0NEfqyKD2zfpLOJ8/vARQC9bxBD2hrbAOdKENc4LOiD XRkDv+bE3J5UAA== -----END CERTIFICATE-----Generated at Sat Dec 6 13:50:40 2025 by rpki-client