This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/bf9cdb-6e87-479f-93a1-65a5ef0af0b4/1/Y_pxXC9LkAjI9LYGVPfzx2NTrmc.mft File: Y_pxXC9LkAjI9LYGVPfzx2NTrmc.mft (raw, json) Hash identifier: lr2x++IfiWuXq8QbhDj5mQZmJoe3sTgXqDXS4VSSM1M= Subject key identifier: 67:DC:2C:55:95:BB:62:A4:92:AA:C7:E6:FE:5C:53:35:A5:DC:A3:3E Authority key identifier: 63:FA:71:5C:2F:4B:90:08:C8:F4:B6:06:54:F7:F3:C7:63:53:AE:67 Certificate issuer: /CN=63fa715c2f4b9008c8f4b60654f7f3c76353ae67 Certificate serial: 019AF12D8273AEB6A9BC3DC884936FF6F3A2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y_pxXC9LkAjI9LYGVPfzx2NTrmc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/bf9cdb-6e87-479f-93a1-65a5ef0af0b4/1/Y_pxXC9LkAjI9LYGVPfzx2NTrmc.mft Manifest number: 0A96 Signing time: Sat 06 Dec 2025 01:01:22 +0000 Manifest this update: Sat 06 Dec 2025 01:01:22 +0000 Manifest next update: Sun 07 Dec 2025 01:01:22 +0000 Files and hashes: 1: RiW5W8SWQ6-vverb8NRdVDj6CjU.roa (hash: 4IAwVod5pwysrRco/iSy8Lzx8KDdHZ/Q8/hyLLW5E4w=) 2: Y_pxXC9LkAjI9LYGVPfzx2NTrmc.crl (hash: YTHgrqxHBY8U1cf6NZs7bMQbRUpWdPLr+m1znYHWWKk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/bf9cdb-6e87-479f-93a1-65a5ef0af0b4/1/Y_pxXC9LkAjI9LYGVPfzx2NTrmc.crl rsync://rpki.ripe.net/repository/DEFAULT/0a/bf9cdb-6e87-479f-93a1-65a5ef0af0b4/1/Y_pxXC9LkAjI9LYGVPfzx2NTrmc.mft rsync://rpki.ripe.net/repository/DEFAULT/Y_pxXC9LkAjI9LYGVPfzx2NTrmc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:82:73:ae:b6:a9:bc:3d:c8:84:93:6f:f6:f3:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63fa715c2f4b9008c8f4b60654f7f3c76353ae67 Validity Not Before: Dec 6 01:01:22 2025 GMT Not After : Dec 7 01:01:22 2025 GMT Subject: CN=67dc2c5595bb62a492aac7e6fe5c5335a5dca33e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:8e:51:cd:1a:a0:69:d8:47:84:3e:63:b6:3f: a6:c6:2f:b3:8c:a5:86:14:b8:22:af:e2:bb:c8:e0: 3f:d6:46:f9:ab:cf:41:97:4a:53:8d:df:83:bb:51: d1:4d:a0:81:42:f4:6a:39:8a:00:cc:4c:0c:f9:d5: 77:4c:6d:04:d3:e5:a8:2a:af:52:d1:29:63:0b:2b: f6:2b:2f:dd:8f:cf:c1:4b:34:cb:1e:96:7c:7b:02: 98:19:60:00:24:fc:93:29:b1:24:63:a5:88:6b:92: 08:27:70:bb:0e:82:82:ea:d4:6c:01:ce:65:b9:88: 72:4e:2a:e8:2a:1e:c3:9a:75:aa:b0:55:ed:d0:d9: 92:07:48:9d:83:5d:ef:dc:27:f0:ed:f3:72:0e:f4: 85:a7:a8:0f:91:f4:8e:e2:5b:6f:a8:ef:50:f3:8d: 50:8a:f6:41:fe:33:09:be:b6:c5:32:03:a4:12:10: 4e:fb:f2:25:26:95:f7:ed:f2:e6:60:10:40:be:b3: 49:3f:3c:40:14:30:b2:aa:eb:ac:a6:c9:3c:2d:cc: f3:b9:04:20:f7:a1:14:2b:96:4d:c8:4e:b5:12:77: 0e:e8:ff:9d:c3:c0:86:15:c5:cd:30:74:d1:fb:4e: c8:56:4f:12:d3:6a:83:a8:9d:ee:30:3d:94:de:d2: cf:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:DC:2C:55:95:BB:62:A4:92:AA:C7:E6:FE:5C:53:35:A5:DC:A3:3E X509v3 Authority Key Identifier: keyid:63:FA:71:5C:2F:4B:90:08:C8:F4:B6:06:54:F7:F3:C7:63:53:AE:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y_pxXC9LkAjI9LYGVPfzx2NTrmc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/bf9cdb-6e87-479f-93a1-65a5ef0af0b4/1/Y_pxXC9LkAjI9LYGVPfzx2NTrmc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/bf9cdb-6e87-479f-93a1-65a5ef0af0b4/1/Y_pxXC9LkAjI9LYGVPfzx2NTrmc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:c1:fe:89:54:b1:08:1d:01:06:ea:f5:a0:cd:4c:fe:a0:97: b6:96:b1:22:c6:2b:db:15:99:a4:0d:4f:8a:ae:5b:b4:fd:10: fa:7d:38:ce:66:38:b2:da:a9:99:a3:55:ea:51:8c:52:cc:11: f6:d2:b5:5b:66:03:d6:fe:31:63:1b:fa:a4:d2:46:6a:0b:b2: b1:c2:f8:b0:95:1a:2c:23:e7:e9:58:16:a5:35:b1:f5:06:ce: a4:a6:97:22:6a:7f:c3:c5:20:08:53:a1:c5:9b:c4:af:2f:fc: ff:28:e9:0f:9b:ea:f6:80:5e:30:78:01:9c:d5:6b:5a:29:e8: 1f:e6:9a:ad:39:c0:70:1e:37:bc:76:b5:3d:2f:fe:78:a3:8e: 79:e2:57:bf:3d:63:59:94:14:c5:51:80:dd:78:93:c8:1d:a6: ac:a3:c2:e6:2e:70:9d:db:0f:9a:e7:4d:53:b7:f2:9d:9a:fe: 0f:b1:e6:b3:b1:d0:be:78:76:01:c0:1f:c3:ac:87:e6:f8:bf: d3:7e:b4:8d:52:01:cf:d5:4f:b4:3d:32:fd:03:2c:ac:85:9a: 86:b5:1d:0f:47:21:d7:35:69:5e:41:de:09:fd:39:cc:cd:70: c2:1d:ed:a5:92:33:4b:92:09:e2:c9:63:62:7f:5b:f2:4b:5f: 44:71:d9:74 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLYJzrrapvD3IhJNv9vOiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZmE3MTVjMmY0YjkwMDhjOGY0YjYwNjU0ZjdmM2M3NjM1 M2FlNjcwHhcNMjUxMjA2MDEwMTIyWhcNMjUxMjA3MDEwMTIyWjAzMTEwLwYDVQQD Eyg2N2RjMmM1NTk1YmI2MmE0OTJhYWM3ZTZmZTVjNTMzNWE1ZGNhMzNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiY5RzRqgadhHhD5jtj+mxi+zjKWG FLgir+K7yOA/1kb5q89Bl0pTjd+Du1HRTaCBQvRqOYoAzEwM+dV3TG0E0+WoKq9S 0SljCyv2Ky/dj8/BSzTLHpZ8ewKYGWAAJPyTKbEkY6WIa5IIJ3C7DoKC6tRsAc5l uYhyTiroKh7DmnWqsFXt0NmSB0idg13v3Cfw7fNyDvSFp6gPkfSO4ltvqO9Q841Q ivZB/jMJvrbFMgOkEhBO+/IlJpX37fLmYBBAvrNJPzxAFDCyquuspsk8LczzuQQg 96EUK5ZNyE61EncO6P+dw8CGFcXNMHTR+07IVk8S02qDqJ3uMD2U3tLPRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGfcLFWVu2KkkqrH5v5cUzWl3KM+MB8GA1UdIwQY MBaAFGP6cVwvS5AIyPS2BlT388djU65nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWV9weFhDOUxrQWpJOUxZR1ZQZnp4Mk5Ucm1jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS9iZjljZGItNmU4Ny00NzlmLTkzYTEt NjVhNWVmMGFmMGI0LzEvWV9weFhDOUxrQWpJOUxZR1ZQZnp4Mk5Ucm1jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYS9iZjljZGItNmU4Ny00NzlmLTkzYTEtNjVhNWVmMGFmMGI0 LzEvWV9weFhDOUxrQWpJOUxZR1ZQZnp4Mk5Ucm1jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdMH+iVSx CB0BBur1oM1M/qCXtpaxIsYr2xWZpA1Piq5btP0Q+n04zmY4stqpmaNV6lGMUswR 9tK1W2YD1v4xYxv6pNJGaguyscL4sJUaLCPn6VgWpTWx9QbOpKaXImp/w8UgCFOh xZvEry/8/yjpD5vq9oBeMHgBnNVrWinoH+aarTnAcB43vHa1PS/+eKOOeeJXvz1j WZQUxVGA3XiTyB2mrKPC5i5wndsPmudNU7fynZr+D7Hms7HQvnh2AcAfw6yH5vi/ 0360jVIBz9VPtD0y/QMsrIWahrUdD0ch1zVpXkHeCf05zM1wwh3tpZIzS5IJ4slj Yn9b8ktfRHHZdA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:24:59 2025 by rpki-client