This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/26d917-8c91-45ab-8442-e4e52ac0fefe/1/Y9krglYVmJTSubJfTYWYbBcnI8M.mft File: Y9krglYVmJTSubJfTYWYbBcnI8M.mft (raw, json) Hash identifier: mYrw5nsiBJ3KrTKAL46+V5yJ9dt+7jh4z7epXpYvL78= Subject key identifier: 90:16:EF:6C:4E:EF:6A:00:A9:DD:C1:10:CF:D2:83:85:BA:A9:BC:EB Authority key identifier: 63:D9:2B:82:56:15:98:94:D2:B9:B2:5F:4D:85:98:6C:17:27:23:C3 Certificate issuer: /CN=63d92b8256159894d2b9b25f4d85986c172723c3 Certificate serial: 019B3F48343B94D320D8515AAFFC13649EEF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y9krglYVmJTSubJfTYWYbBcnI8M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/26d917-8c91-45ab-8442-e4e52ac0fefe/1/Y9krglYVmJTSubJfTYWYbBcnI8M.mft Manifest number: 0F53 Signing time: Sun 21 Dec 2025 05:00:55 +0000 Manifest this update: Sun 21 Dec 2025 05:00:55 +0000 Manifest next update: Mon 22 Dec 2025 05:00:55 +0000 Files and hashes: 1: VWwybFqWy2MXRW4GlH3TydNfWoU.roa (hash: AWURtsDjcCoYL2cv7BnBoU4GwDRl+uRuBqffs+8EChU=) 2: VsWH0dh23uHGDE4kVE5VRVWnLr0.roa (hash: hOVkpMTlrRKsdZ/dZuqLj9eHRUgLLpUyv0shzANzums=) 3: Y9krglYVmJTSubJfTYWYbBcnI8M.crl (hash: GFNsfa1zrT90Yz4oycfemKrlqRLT/ZFIFn4jbm8bxaE=) 4: gUlf15cCFOrr7zCpeZmrXHzHdJI.roa (hash: BZcCVc7umSblQi+mV0dsvmWzWVZejT4EU9eRPoEWNCA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/26d917-8c91-45ab-8442-e4e52ac0fefe/1/Y9krglYVmJTSubJfTYWYbBcnI8M.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/26d917-8c91-45ab-8442-e4e52ac0fefe/1/Y9krglYVmJTSubJfTYWYbBcnI8M.mft rsync://rpki.ripe.net/repository/DEFAULT/Y9krglYVmJTSubJfTYWYbBcnI8M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:48:34:3b:94:d3:20:d8:51:5a:af:fc:13:64:9e:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63d92b8256159894d2b9b25f4d85986c172723c3 Validity Not Before: Dec 21 05:00:55 2025 GMT Not After : Dec 22 05:00:55 2025 GMT Subject: CN=9016ef6c4eef6a00a9ddc110cfd28385baa9bceb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:fe:ed:5d:1b:40:3d:b0:f3:27:29:a7:43:5a: b5:f4:c4:26:30:dc:2d:fe:dd:d8:98:5f:27:1d:1f: 67:f9:94:08:d6:57:62:23:72:ab:6c:c3:f8:f7:da: 09:2a:a2:fa:a1:99:1e:df:8b:89:69:fd:08:6b:da: 8f:68:46:f7:76:63:41:1d:c1:99:e6:ab:6a:02:0d: 8a:30:c1:92:74:b2:fa:f9:05:78:23:5a:ff:12:0d: b1:50:ee:4d:e1:4a:35:49:b6:99:34:98:24:37:7f: c2:6a:95:16:d7:48:9c:5a:d7:b7:1a:40:c1:22:30: d0:20:dd:b2:a1:f9:d0:0e:5f:83:33:5b:09:c3:f5: c7:73:31:5b:1e:73:69:f3:2f:9a:71:8c:58:87:3b: 20:76:26:0c:c7:cb:90:b9:40:15:87:75:e4:d0:d8: 3b:e3:bd:0f:1a:7b:df:14:b3:da:e1:11:8c:0f:f0: 5b:11:42:dd:f7:38:96:69:33:45:e9:09:42:51:cf: b3:f9:23:39:72:e3:89:b7:5e:da:e2:dd:38:11:bd: 66:fd:1e:d5:d3:ea:3d:8c:af:66:91:5b:0a:fa:e8: 94:35:22:a5:6d:bc:f6:5c:25:6e:c7:d1:9c:af:e1: d9:0d:6e:52:fe:1f:28:d3:e9:8a:96:40:d3:7c:35: f5:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:16:EF:6C:4E:EF:6A:00:A9:DD:C1:10:CF:D2:83:85:BA:A9:BC:EB X509v3 Authority Key Identifier: keyid:63:D9:2B:82:56:15:98:94:D2:B9:B2:5F:4D:85:98:6C:17:27:23:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y9krglYVmJTSubJfTYWYbBcnI8M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/26d917-8c91-45ab-8442-e4e52ac0fefe/1/Y9krglYVmJTSubJfTYWYbBcnI8M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/26d917-8c91-45ab-8442-e4e52ac0fefe/1/Y9krglYVmJTSubJfTYWYbBcnI8M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:a2:bd:c0:94:a8:7f:41:a6:b6:8b:4b:a2:fb:12:1a:be:0c: 3e:a2:08:92:17:12:3b:48:4d:ef:d0:67:9a:e6:52:23:8b:0d: b2:5e:83:93:eb:a7:79:10:1b:5c:4b:14:9b:d0:08:5b:fd:b4: e2:df:0c:58:6e:a3:da:21:78:5a:4c:fe:af:12:13:8f:4c:21: 0b:18:74:4f:8c:d3:12:c3:24:6c:ec:b6:9a:66:79:14:17:9a: 58:af:a7:d0:26:a9:03:b4:ad:09:cd:4b:19:05:05:af:17:f8: a9:c1:7d:17:2e:6d:db:0a:ed:cf:09:cf:96:cd:3f:47:f9:5c: ac:3f:f0:b7:50:d2:0e:38:2e:1b:0d:5c:72:1d:e0:c6:db:22: 6f:52:80:93:6a:07:50:d2:f7:c8:02:03:24:18:69:88:2d:d2: 47:67:fe:f1:81:d2:1b:96:1f:32:94:c4:e0:48:b3:65:a7:10: 72:d4:f2:89:32:ab:3d:ef:6b:ad:1f:0e:36:48:68:ac:d6:de: 4a:82:0d:ee:5e:98:97:cf:a5:9d:57:d7:73:68:83:a3:a2:ad: 54:f3:7e:bb:02:82:5b:b2:52:71:b1:2d:6a:60:de:25:42:c1: d6:61:ea:06:3f:14:34:20:28:a8:90:7d:97:ce:cc:2d:f8:32: b7:4b:04:3a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/SDQ7lNMg2FFar/wTZJ7vMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZDkyYjgyNTYxNTk4OTRkMmI5YjI1ZjRkODU5ODZjMTcy NzIzYzMwHhcNMjUxMjIxMDUwMDU1WhcNMjUxMjIyMDUwMDU1WjAzMTEwLwYDVQQD Eyg5MDE2ZWY2YzRlZWY2YTAwYTlkZGMxMTBjZmQyODM4NWJhYTliY2ViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu/7tXRtAPbDzJymnQ1q19MQmMNwt /t3YmF8nHR9n+ZQI1ldiI3KrbMP499oJKqL6oZke34uJaf0Ia9qPaEb3dmNBHcGZ 5qtqAg2KMMGSdLL6+QV4I1r/Eg2xUO5N4Uo1SbaZNJgkN3/CapUW10icWte3GkDB IjDQIN2yofnQDl+DM1sJw/XHczFbHnNp8y+acYxYhzsgdiYMx8uQuUAVh3Xk0Ng7 470PGnvfFLPa4RGMD/BbEULd9ziWaTNF6QlCUc+z+SM5cuOJt17a4t04Eb1m/R7V 0+o9jK9mkVsK+uiUNSKlbbz2XCVux9Gcr+HZDW5S/h8o0+mKlkDTfDX1HQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJAW72xO72oAqd3BEM/Sg4W6qbzrMB8GA1UdIwQY MBaAFGPZK4JWFZiU0rmyX02FmGwXJyPDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWTlrcmdsWVZtSlRTdWJKZlRZV1liQmNuSThNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi8yNmQ5MTctOGM5MS00NWFiLTg0NDIt ZTRlNTJhYzBmZWZlLzEvWTlrcmdsWVZtSlRTdWJKZlRZV1liQmNuSThNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi8yNmQ5MTctOGM5MS00NWFiLTg0NDItZTRlNTJhYzBmZWZl LzEvWTlrcmdsWVZtSlRTdWJKZlRZV1liQmNuSThNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqqK9wJSo f0GmtotLovsSGr4MPqIIkhcSO0hN79BnmuZSI4sNsl6Dk+uneRAbXEsUm9AIW/20 4t8MWG6j2iF4Wkz+rxITj0whCxh0T4zTEsMkbOy2mmZ5FBeaWK+n0CapA7StCc1L GQUFrxf4qcF9Fy5t2wrtzwnPls0/R/lcrD/wt1DSDjguGw1cch3gxtsib1KAk2oH UNL3yAIDJBhpiC3SR2f+8YHSG5YfMpTE4EizZacQctTyiTKrPe9rrR8ONkhorNbe SoIN7l6Yl8+lnVfXc2iDo6KtVPN+uwKCW7JScbEtamDeJULB1mHqBj8UNCAoqJB9 l87MLfgyt0sEOg== -----END CERTIFICATE-----Generated at Sun Dec 21 08:38:10 2025 by rpki-client