This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/4574bc-296d-4a58-aef7-d2bbd949c452/1/Y1mmSbA2ED6Ao86PPRsBOKYFgdc.mft File: Y1mmSbA2ED6Ao86PPRsBOKYFgdc.mft (raw, json) Hash identifier: R7UNPv//QNHDC2G3tVF7N1+9v9YwSu80vGmc87pV+RM= Subject key identifier: EF:34:FF:7E:E7:98:C4:B7:CD:3C:9D:24:4B:C6:CC:50:5E:E0:6F:38 Authority key identifier: 63:59:A6:49:B0:36:10:3E:80:A3:CE:8F:3D:1B:01:38:A6:05:81:D7 Certificate issuer: /CN=6359a649b036103e80a3ce8f3d1b0138a60581d7 Certificate serial: 019B27AE3969761AD5CFF7A7C1DF9FA36B7B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y1mmSbA2ED6Ao86PPRsBOKYFgdc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/4574bc-296d-4a58-aef7-d2bbd949c452/1/Y1mmSbA2ED6Ao86PPRsBOKYFgdc.mft Manifest number: 0B8D Signing time: Tue 16 Dec 2025 15:01:27 +0000 Manifest this update: Tue 16 Dec 2025 15:01:27 +0000 Manifest next update: Wed 17 Dec 2025 15:01:27 +0000 Files and hashes: 1: X6ZYSC-zk_X-vkVmhmsDz5ImQYg.roa (hash: ejdwRSw1lilKiCxqAuj8PMfvm39/1GCNMitYFT+EINw=) 2: Y1mmSbA2ED6Ao86PPRsBOKYFgdc.crl (hash: SZ/BqZgjnJ1fQbs1C0TzUJoku+9MvyCJpDw3qj+uqlg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/4574bc-296d-4a58-aef7-d2bbd949c452/1/Y1mmSbA2ED6Ao86PPRsBOKYFgdc.crl rsync://rpki.ripe.net/repository/DEFAULT/06/4574bc-296d-4a58-aef7-d2bbd949c452/1/Y1mmSbA2ED6Ao86PPRsBOKYFgdc.mft rsync://rpki.ripe.net/repository/DEFAULT/Y1mmSbA2ED6Ao86PPRsBOKYFgdc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 14:45:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:27:ae:39:69:76:1a:d5:cf:f7:a7:c1:df:9f:a3:6b:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6359a649b036103e80a3ce8f3d1b0138a60581d7 Validity Not Before: Dec 16 15:01:27 2025 GMT Not After : Dec 17 15:01:27 2025 GMT Subject: CN=ef34ff7ee798c4b7cd3c9d244bc6cc505ee06f38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:fd:ab:1c:65:fe:4f:8c:6a:94:14:cb:54:0f: 5a:fb:fe:7c:eb:31:d1:ca:07:a8:74:67:c5:7a:61: bf:9d:24:c5:2e:0e:73:e5:b6:47:09:b4:b9:0b:c1: 89:b9:b0:26:87:5c:20:2d:bc:04:18:65:15:7f:a6: 8e:5e:31:f9:88:5a:aa:97:db:12:81:f2:42:1c:bd: c9:4d:0e:29:89:d2:1b:ed:c6:dc:fb:67:8e:2c:a2: f2:14:46:74:f2:89:aa:c4:4d:db:44:03:4a:f5:4e: 29:ad:69:e1:e4:f7:36:d1:3d:9b:49:47:33:83:91: 6e:76:38:7a:1f:c5:af:d5:d0:ec:5a:44:cf:f5:1f: b4:fb:76:09:d9:f5:35:37:f7:47:87:24:1d:fa:1e: 49:28:91:c3:9d:24:29:df:61:99:44:67:c0:df:3a: d6:3f:8b:60:34:7d:0a:36:f9:b1:79:be:f2:db:0c: 5a:ff:42:d3:3f:61:e4:ed:5d:09:dc:f4:ee:e4:ec: d6:e7:87:6b:56:04:dc:00:09:8e:06:32:19:39:2a: 25:f4:cc:68:d4:e9:bb:b2:ea:db:14:aa:5b:3a:13: 81:5a:9e:c1:b2:0e:bc:df:61:88:f4:64:f3:e5:0a: 6a:d6:bb:ec:50:15:c7:58:28:e8:5d:7a:0d:6b:5d: df:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:34:FF:7E:E7:98:C4:B7:CD:3C:9D:24:4B:C6:CC:50:5E:E0:6F:38 X509v3 Authority Key Identifier: keyid:63:59:A6:49:B0:36:10:3E:80:A3:CE:8F:3D:1B:01:38:A6:05:81:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y1mmSbA2ED6Ao86PPRsBOKYFgdc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/4574bc-296d-4a58-aef7-d2bbd949c452/1/Y1mmSbA2ED6Ao86PPRsBOKYFgdc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/06/4574bc-296d-4a58-aef7-d2bbd949c452/1/Y1mmSbA2ED6Ao86PPRsBOKYFgdc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:4d:d6:4d:84:1a:d9:cc:9b:fb:32:a2:c5:4a:15:7a:a9:b4: ab:29:ed:75:21:d1:a9:cb:a5:c8:f1:23:1b:a7:6b:f9:dc:89: 92:8d:80:9e:1d:b5:42:f2:37:d7:92:cb:26:fc:82:f9:89:51: c4:2a:45:31:a8:f6:98:1d:1c:9b:4f:7d:52:ce:4d:6f:b0:de: cb:06:2e:10:ca:99:ad:08:52:b3:5a:18:6c:e0:34:e8:80:6c: 98:4b:84:60:78:48:28:0b:0f:94:c6:4d:70:c6:bc:27:71:b6: 54:5d:b2:be:e4:e7:78:89:a5:3e:23:07:57:ac:bb:19:a0:c0: b9:49:d1:16:63:dd:c4:cf:ea:39:8c:6c:e7:cf:8f:70:30:65: f3:f2:e2:54:17:6d:5c:63:37:c7:a4:0f:ae:37:69:22:a2:70: 0a:c2:95:ed:69:c0:e6:c0:cd:58:68:ec:fe:87:16:f5:f3:96: dc:27:0b:96:b8:fd:a7:fb:ab:22:ea:da:2c:f2:94:3d:a1:d2: d4:64:7e:18:35:fe:90:67:a6:1a:84:92:71:a7:88:e4:7c:ab: 4d:4e:df:50:85:7f:97:bc:82:4f:67:ea:f8:fd:ca:04:ad:5c: 13:56:df:f0:09:d8:cb:f5:e1:b0:8e:2b:dd:7d:be:fa:f3:47: 0d:57:ed:16 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsnrjlpdhrVz/enwd+fo2t7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzNTlhNjQ5YjAzNjEwM2U4MGEzY2U4ZjNkMWIwMTM4YTYw NTgxZDcwHhcNMjUxMjE2MTUwMTI3WhcNMjUxMjE3MTUwMTI3WjAzMTEwLwYDVQQD EyhlZjM0ZmY3ZWU3OThjNGI3Y2QzYzlkMjQ0YmM2Y2M1MDVlZTA2ZjM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnP2rHGX+T4xqlBTLVA9a+/586zHR ygeodGfFemG/nSTFLg5z5bZHCbS5C8GJubAmh1wgLbwEGGUVf6aOXjH5iFqql9sS gfJCHL3JTQ4pidIb7cbc+2eOLKLyFEZ08omqxE3bRANK9U4prWnh5Pc20T2bSUcz g5Fudjh6H8Wv1dDsWkTP9R+0+3YJ2fU1N/dHhyQd+h5JKJHDnSQp32GZRGfA3zrW P4tgNH0KNvmxeb7y2wxa/0LTP2Hk7V0J3PTu5OzW54drVgTcAAmOBjIZOSol9Mxo 1Om7surbFKpbOhOBWp7Bsg6832GI9GTz5Qpq1rvsUBXHWCjoXXoNa13fmQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO80/37nmMS3zTydJEvGzFBe4G84MB8GA1UdIwQY MBaAFGNZpkmwNhA+gKPOjz0bATimBYHXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWTFtbVNiQTJFRDZBbzg2UFBSc0JPS1lGZ2RjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi80NTc0YmMtMjk2ZC00YTU4LWFlZjct ZDJiYmQ5NDljNDUyLzEvWTFtbVNiQTJFRDZBbzg2UFBSc0JPS1lGZ2RjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNi80NTc0YmMtMjk2ZC00YTU4LWFlZjctZDJiYmQ5NDljNDUy LzEvWTFtbVNiQTJFRDZBbzg2UFBSc0JPS1lGZ2RjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMk3WTYQa 2cyb+zKixUoVeqm0qyntdSHRqculyPEjG6dr+dyJko2Anh21QvI315LLJvyC+YlR xCpFMaj2mB0cm099Us5Nb7DeywYuEMqZrQhSs1oYbOA06IBsmEuEYHhIKAsPlMZN cMa8J3G2VF2yvuTneImlPiMHV6y7GaDAuUnRFmPdxM/qOYxs58+PcDBl8/LiVBdt XGM3x6QPrjdpIqJwCsKV7WnA5sDNWGjs/ocW9fOW3CcLlrj9p/urIuraLPKUPaHS 1GR+GDX+kGemGoSScaeI5HyrTU7fUIV/l7yCT2fq+P3KBK1cE1bf8AnYy/XhsI4r 3X2++vNHDVftFg== -----END CERTIFICATE-----Generated at Tue Dec 16 19:15:47 2025 by rpki-client