This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/757786-cea5-49ba-8ef3-ac38d5a20afe/1/Y2-s66M0MntpXrOwyV6yMJL5PgE.mft File: Y2-s66M0MntpXrOwyV6yMJL5PgE.mft (raw, json) Hash identifier: 76QtbvFugNjCtkC+n0PTu/COnkGm9Zn5XVq6xJsPh38= Subject key identifier: 8D:17:63:20:5F:2B:CD:78:1D:04:22:BC:A8:9A:A2:A8:90:B6:9F:76 Authority key identifier: 63:6F:AC:EB:A3:34:32:7B:69:5E:B3:B0:C9:5E:B2:30:92:F9:3E:01 Certificate issuer: /CN=636faceba334327b695eb3b0c95eb23092f93e01 Certificate serial: 019B32D7E496823108CC014DED09532D8C7A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y2-s66M0MntpXrOwyV6yMJL5PgE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/757786-cea5-49ba-8ef3-ac38d5a20afe/1/Y2-s66M0MntpXrOwyV6yMJL5PgE.mft Manifest number: 1270 Signing time: Thu 18 Dec 2025 19:02:48 +0000 Manifest this update: Thu 18 Dec 2025 19:02:48 +0000 Manifest next update: Fri 19 Dec 2025 19:02:48 +0000 Files and hashes: 1: Y2-s66M0MntpXrOwyV6yMJL5PgE.crl (hash: 9GIY0WZ9dpg65IUEBsaupCwyx/zBSc8GRvfD3q01jHo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/757786-cea5-49ba-8ef3-ac38d5a20afe/1/Y2-s66M0MntpXrOwyV6yMJL5PgE.crl rsync://rpki.ripe.net/repository/DEFAULT/03/757786-cea5-49ba-8ef3-ac38d5a20afe/1/Y2-s66M0MntpXrOwyV6yMJL5PgE.mft rsync://rpki.ripe.net/repository/DEFAULT/Y2-s66M0MntpXrOwyV6yMJL5PgE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 19:02:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:d7:e4:96:82:31:08:cc:01:4d:ed:09:53:2d:8c:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=636faceba334327b695eb3b0c95eb23092f93e01 Validity Not Before: Dec 18 19:02:48 2025 GMT Not After : Dec 19 19:02:48 2025 GMT Subject: CN=8d1763205f2bcd781d0422bca89aa2a890b69f76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:24:db:cc:48:9d:f5:40:97:9c:83:bc:64:53: 68:f1:e4:da:44:71:fd:c8:e3:95:b6:0b:95:0f:9b: 94:88:6a:3e:d5:6e:4c:6e:06:ab:df:cf:8e:37:db: f4:c4:a0:34:5e:8f:ee:e7:5a:5e:4f:c2:b0:a0:a9: 2a:27:ad:a3:c7:83:4e:d8:21:ff:9e:a3:f6:db:d7: 03:ee:c9:01:f2:db:88:f7:9a:cd:e9:0e:1b:96:43: 99:26:25:4b:e1:f4:43:51:35:53:d9:90:5a:5d:e9: f5:40:2b:dc:e4:06:78:5d:a7:f4:82:d1:7c:44:fc: a8:c2:a8:90:19:36:f9:6f:d9:eb:d3:3e:ce:01:65: cf:41:3c:b8:cc:3f:77:07:73:37:56:8e:c1:84:c7: cb:13:15:db:c9:73:59:a1:4c:4b:e7:94:74:0a:2f: e4:ae:4c:b2:eb:ab:9f:94:24:36:34:1f:33:f7:8b: da:fe:1a:9a:c9:dc:01:f6:d4:d7:7f:a0:80:d2:14: 58:3b:45:dc:3c:b1:13:35:cc:30:c7:e5:09:3d:97: 34:13:d0:25:42:fe:f3:1a:cd:01:59:37:01:d7:08: eb:ac:06:a7:13:29:ca:84:c6:c6:e3:58:40:a6:95: a8:13:d8:9b:0a:87:7a:0f:ea:15:dd:04:06:3a:9a: 0a:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:17:63:20:5F:2B:CD:78:1D:04:22:BC:A8:9A:A2:A8:90:B6:9F:76 X509v3 Authority Key Identifier: keyid:63:6F:AC:EB:A3:34:32:7B:69:5E:B3:B0:C9:5E:B2:30:92:F9:3E:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y2-s66M0MntpXrOwyV6yMJL5PgE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/757786-cea5-49ba-8ef3-ac38d5a20afe/1/Y2-s66M0MntpXrOwyV6yMJL5PgE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/757786-cea5-49ba-8ef3-ac38d5a20afe/1/Y2-s66M0MntpXrOwyV6yMJL5PgE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:f2:be:ae:6c:bf:8e:a2:bd:ae:9c:d8:8c:87:b2:22:4e:2d: 03:ce:7e:d0:a0:84:20:6e:4d:55:4a:b3:c2:16:46:c8:39:78: 5d:9b:45:80:b4:5f:19:da:e1:53:66:48:a8:a6:5c:af:d5:85: 1c:7d:bb:5f:fd:b3:2b:de:51:ac:7f:94:8a:67:50:7b:0c:bd: 9f:24:78:ff:f0:99:1f:32:25:a7:2b:d0:81:d9:16:76:ec:86: c3:5f:98:5f:6e:c6:8e:16:49:8f:c7:c3:3a:0c:6f:a0:a4:95: 22:1d:d5:89:a6:03:f9:81:aa:79:91:5c:dc:69:24:be:85:ec: b9:15:9f:73:17:36:08:3a:17:27:52:35:80:ed:86:60:8a:35: af:1b:36:1f:c4:b8:d0:65:d2:7d:e2:ea:41:d3:ed:63:0b:1e: cc:d8:f5:54:dd:53:f3:3f:15:96:b7:77:08:21:f8:69:6b:ac: d4:46:91:a0:db:3b:78:a7:b9:72:d1:69:90:a1:18:57:a6:c7: fd:65:76:c2:a6:f5:ed:92:97:5c:55:c2:6a:39:67:aa:95:57: fd:44:d8:a2:a3:19:27:b4:2e:f6:15:e1:e4:d7:7a:a0:f7:89: 33:ea:2c:b5:d1:0e:e7:bc:d4:ae:c1:71:05:41:b0:53:82:3e: fd:c3:cc:ca -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsy1+SWgjEIzAFN7QlTLYx6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzNmZhY2ViYTMzNDMyN2I2OTVlYjNiMGM5NWViMjMwOTJm OTNlMDEwHhcNMjUxMjE4MTkwMjQ4WhcNMjUxMjE5MTkwMjQ4WjAzMTEwLwYDVQQD Eyg4ZDE3NjMyMDVmMmJjZDc4MWQwNDIyYmNhODlhYTJhODkwYjY5Zjc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxCTbzEid9UCXnIO8ZFNo8eTaRHH9 yOOVtguVD5uUiGo+1W5Mbgar38+ON9v0xKA0Xo/u51peT8KwoKkqJ62jx4NO2CH/ nqP229cD7skB8tuI95rN6Q4blkOZJiVL4fRDUTVT2ZBaXen1QCvc5AZ4Xaf0gtF8 RPyowqiQGTb5b9nr0z7OAWXPQTy4zD93B3M3Vo7BhMfLExXbyXNZoUxL55R0Ci/k rkyy66uflCQ2NB8z94va/hqaydwB9tTXf6CA0hRYO0XcPLETNcwwx+UJPZc0E9Al Qv7zGs0BWTcB1wjrrAanEynKhMbG41hAppWoE9ibCod6D+oV3QQGOpoKDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI0XYyBfK814HQQivKiaoqiQtp92MB8GA1UdIwQY MBaAFGNvrOujNDJ7aV6zsMlesjCS+T4BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWTItczY2TTBNbnRwWHJPd3lWNnlNSkw1UGdFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy83NTc3ODYtY2VhNS00OWJhLThlZjMt YWMzOGQ1YTIwYWZlLzEvWTItczY2TTBNbnRwWHJPd3lWNnlNSkw1UGdFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy83NTc3ODYtY2VhNS00OWJhLThlZjMtYWMzOGQ1YTIwYWZl LzEvWTItczY2TTBNbnRwWHJPd3lWNnlNSkw1UGdFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADvK+rmy/ jqK9rpzYjIeyIk4tA85+0KCEIG5NVUqzwhZGyDl4XZtFgLRfGdrhU2ZIqKZcr9WF HH27X/2zK95RrH+UimdQewy9nyR4//CZHzIlpyvQgdkWduyGw1+YX27GjhZJj8fD OgxvoKSVIh3ViaYD+YGqeZFc3GkkvoXsuRWfcxc2CDoXJ1I1gO2GYIo1rxs2H8S4 0GXSfeLqQdPtYwsezNj1VN1T8z8Vlrd3CCH4aWus1EaRoNs7eKe5ctFpkKEYV6bH /WV2wqb17ZKXXFXCajlnqpVX/UTYoqMZJ7Qu9hXh5Nd6oPeJM+ostdEO57zUrsFx BUGwU4I+/cPMyg== -----END CERTIFICATE-----Generated at Fri Dec 19 03:01:52 2025 by rpki-client