This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/b1ca51-75dd-41c9-9484-2bc1ae3dbdbe/1/9Y4MO5Mzy2_UE55FWlq7r9VpUyo.mft File: 9Y4MO5Mzy2_UE55FWlq7r9VpUyo.mft (raw, json) Hash identifier: AMjucbU1a+9VsR+mL0r3zrNPJ/xr6VCWu2beuGdyv/c= Subject key identifier: 33:4B:BB:BA:CE:E0:7F:0A:E9:5F:9F:73:3F:5D:D1:91:E0:4C:7E:E6 Authority key identifier: F5:8E:0C:3B:93:33:CB:6F:D4:13:9E:45:5A:5A:BB:AF:D5:69:53:2A Certificate issuer: /CN=f58e0c3b9333cb6fd4139e455a5abbafd569532a Certificate serial: 019AF2090E35F7F9765CDA9A6D89E0EEB0BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Y4MO5Mzy2_UE55FWlq7r9VpUyo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/b1ca51-75dd-41c9-9484-2bc1ae3dbdbe/1/9Y4MO5Mzy2_UE55FWlq7r9VpUyo.mft Manifest number: 03B5 Signing time: Sat 06 Dec 2025 05:01:10 +0000 Manifest this update: Sat 06 Dec 2025 05:01:10 +0000 Manifest next update: Sun 07 Dec 2025 05:01:10 +0000 Files and hashes: 1: 9Y4MO5Mzy2_UE55FWlq7r9VpUyo.crl (hash: +Rc2O0Wjsc8lYHuvhf/0aAqhBBA1PQVNCCjjY9wrSi8=) 2: QYL-bJP18_uE1vIYufetQA8LNBw.roa (hash: 5iykeFNsIB7WkpEwkyxi6tSK6cOuYKMgbt5OfyYFMpc=) 3: mfDwEiGRmiWMmFDQIE-xmSECzg8.roa (hash: iS/PokmAhVq2sVGbLhXCo+Ur9JIXXT1eTOi1veSDLr4=) 4: mfVSR44fIY6bkhiOSueC1ITxv6w.roa (hash: xZqOi81DoSglCV29EBbiUSqFQDxJr7C1mJvYXhv2Pug=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/b1ca51-75dd-41c9-9484-2bc1ae3dbdbe/1/9Y4MO5Mzy2_UE55FWlq7r9VpUyo.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/b1ca51-75dd-41c9-9484-2bc1ae3dbdbe/1/9Y4MO5Mzy2_UE55FWlq7r9VpUyo.mft rsync://rpki.ripe.net/repository/DEFAULT/9Y4MO5Mzy2_UE55FWlq7r9VpUyo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:0e:35:f7:f9:76:5c:da:9a:6d:89:e0:ee:b0:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f58e0c3b9333cb6fd4139e455a5abbafd569532a Validity Not Before: Dec 6 05:01:10 2025 GMT Not After : Dec 7 05:01:10 2025 GMT Subject: CN=334bbbbacee07f0ae95f9f733f5dd191e04c7ee6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:a7:ad:91:b2:78:9d:6c:d0:52:70:96:f4:16: 80:0a:e0:63:6d:36:5b:12:a2:32:88:e7:bd:82:43: 38:62:9d:56:30:bb:f5:ad:fc:a0:2a:f1:f5:f0:c1: ee:89:c4:e4:04:ab:5c:c5:17:cf:07:bb:93:20:8f: a0:04:99:be:b2:8b:ca:26:1b:24:08:1d:96:9c:85: 31:6e:bf:12:6e:5d:1c:a3:38:b7:74:03:de:e0:9c: 38:92:9e:fe:a3:e5:ca:52:48:66:e3:49:1c:ac:be: cb:c3:b1:34:d2:3e:27:49:aa:a0:83:bf:46:d7:53: 6c:7b:19:73:18:40:d8:64:8f:49:30:08:c5:86:ee: 49:ec:5d:ed:c5:9a:4a:fd:fb:72:d9:be:29:10:59: 94:3a:e7:c5:4e:c1:e0:5f:65:81:98:10:9d:26:dd: 37:80:41:42:60:e5:18:e0:5e:ac:37:03:8e:1b:41: 7e:0f:3f:2d:b4:63:54:be:82:71:14:93:62:ec:0e: 64:7f:ba:4c:08:a4:4b:a7:c9:ce:aa:86:d5:5a:61: 58:80:98:7f:42:91:28:60:b3:b0:5e:9b:e8:d5:36: d4:da:35:74:04:71:42:16:3e:2c:65:a3:99:f3:e1: dd:ae:51:33:14:46:e5:d6:9c:18:db:13:a9:1c:05: 98:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:4B:BB:BA:CE:E0:7F:0A:E9:5F:9F:73:3F:5D:D1:91:E0:4C:7E:E6 X509v3 Authority Key Identifier: keyid:F5:8E:0C:3B:93:33:CB:6F:D4:13:9E:45:5A:5A:BB:AF:D5:69:53:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Y4MO5Mzy2_UE55FWlq7r9VpUyo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b1ca51-75dd-41c9-9484-2bc1ae3dbdbe/1/9Y4MO5Mzy2_UE55FWlq7r9VpUyo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b1ca51-75dd-41c9-9484-2bc1ae3dbdbe/1/9Y4MO5Mzy2_UE55FWlq7r9VpUyo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:07:25:35:3b:dd:e3:c5:e8:be:c0:f0:b0:a0:57:99:2e:6f: ac:50:c6:b5:04:4f:ad:75:e8:93:f4:20:b7:ba:01:ef:5e:57: d7:61:3b:3f:89:1a:24:1e:30:c2:76:82:3d:8a:a1:e4:c8:04: 5c:0b:fd:28:c2:f1:11:2a:c7:21:21:11:ce:cb:b5:fd:83:6e: ac:db:dc:a1:55:a4:38:3f:15:4c:ca:1d:4a:66:e2:53:c7:d1: 21:29:97:bf:9f:60:7c:a8:d0:5a:99:59:15:8b:d7:63:01:10: 9e:fe:d7:db:69:11:91:ad:6f:d0:94:90:26:ba:9b:7d:27:8b: 82:80:d5:0e:7b:b4:82:51:e7:60:0f:1a:bd:52:48:02:64:13: 34:09:16:5f:25:1e:68:62:c0:16:82:ff:e3:ab:15:65:2c:6d: 0d:ad:45:3e:73:66:28:62:c9:eb:a5:ca:9d:c2:df:99:56:24: 2a:9f:f4:96:19:14:29:42:3b:c1:74:55:a5:d8:b5:ec:6b:2b: 4c:c3:00:65:3e:9a:83:f0:ea:09:7a:75:74:c9:d6:8d:05:f9: bf:94:c1:e4:17:b8:ba:ad:2c:b3:f7:0e:7b:5c:0c:4c:0b:07: a2:48:a6:46:1e:90:19:ea:6f:b4:5b:3e:8b:51:dd:51:0c:3a: 70:59:d5:0c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCQ419/l2XNqabYng7rC+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1OGUwYzNiOTMzM2NiNmZkNDEzOWU0NTVhNWFiYmFmZDU2 OTUzMmEwHhcNMjUxMjA2MDUwMTEwWhcNMjUxMjA3MDUwMTEwWjAzMTEwLwYDVQQD EygzMzRiYmJiYWNlZTA3ZjBhZTk1ZjlmNzMzZjVkZDE5MWUwNGM3ZWU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr6etkbJ4nWzQUnCW9BaACuBjbTZb EqIyiOe9gkM4Yp1WMLv1rfygKvH18MHuicTkBKtcxRfPB7uTII+gBJm+sovKJhsk CB2WnIUxbr8Sbl0cozi3dAPe4Jw4kp7+o+XKUkhm40kcrL7Lw7E00j4nSaqgg79G 11NsexlzGEDYZI9JMAjFhu5J7F3txZpK/fty2b4pEFmUOufFTsHgX2WBmBCdJt03 gEFCYOUY4F6sNwOOG0F+Dz8ttGNUvoJxFJNi7A5kf7pMCKRLp8nOqobVWmFYgJh/ QpEoYLOwXpvo1TbU2jV0BHFCFj4sZaOZ8+HdrlEzFEbl1pwY2xOpHAWYOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDNLu7rO4H8K6V+fcz9d0ZHgTH7mMB8GA1UdIwQY MBaAFPWODDuTM8tv1BOeRVpau6/VaVMqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOVk0TU81TXp5Ml9VRTU1RldscTdyOVZwVXlvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi9iMWNhNTEtNzVkZC00MWM5LTk0ODQt MmJjMWFlM2RiZGJlLzEvOVk0TU81TXp5Ml9VRTU1RldscTdyOVZwVXlvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi9iMWNhNTEtNzVkZC00MWM5LTk0ODQtMmJjMWFlM2RiZGJl LzEvOVk0TU81TXp5Ml9VRTU1RldscTdyOVZwVXlvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWwclNTvd 48XovsDwsKBXmS5vrFDGtQRPrXXok/Qgt7oB715X12E7P4kaJB4wwnaCPYqh5MgE XAv9KMLxESrHISERzsu1/YNurNvcoVWkOD8VTModSmbiU8fRISmXv59gfKjQWplZ FYvXYwEQnv7X22kRka1v0JSQJrqbfSeLgoDVDnu0glHnYA8avVJIAmQTNAkWXyUe aGLAFoL/46sVZSxtDa1FPnNmKGLJ66XKncLfmVYkKp/0lhkUKUI7wXRVpdi17Gsr TMMAZT6ag/DqCXp1dMnWjQX5v5TB5Be4uq0ss/cOe1wMTAsHokimRh6QGepvtFs+ i1HdUQw6cFnVDA== -----END CERTIFICATE-----Generated at Sat Dec 6 13:05:04 2025 by rpki-client