This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/26d917-8c91-45ab-8442-e4e52ac0fefe/1/Y9krglYVmJTSubJfTYWYbBcnI8M.mft File: Y9krglYVmJTSubJfTYWYbBcnI8M.mft (raw, json) Hash identifier: s47gixzNDDl9TCen8Y+zLRzH4QGgPwEYERSKSsCjzJY= Subject key identifier: 11:51:3A:D1:87:B2:5E:A8:60:E7:E2:68:03:31:17:BD:A8:FA:47:EC Authority key identifier: 63:D9:2B:82:56:15:98:94:D2:B9:B2:5F:4D:85:98:6C:17:27:23:C3 Certificate issuer: /CN=63d92b8256159894d2b9b25f4d85986c172723c3 Certificate serial: 019AF3F72BD4FA3E3FE826D8C504189D51DE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y9krglYVmJTSubJfTYWYbBcnI8M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/26d917-8c91-45ab-8442-e4e52ac0fefe/1/Y9krglYVmJTSubJfTYWYbBcnI8M.mft Manifest number: 0F2C Signing time: Sat 06 Dec 2025 14:00:53 +0000 Manifest this update: Sat 06 Dec 2025 14:00:53 +0000 Manifest next update: Sun 07 Dec 2025 14:00:53 +0000 Files and hashes: 1: VWwybFqWy2MXRW4GlH3TydNfWoU.roa (hash: AWURtsDjcCoYL2cv7BnBoU4GwDRl+uRuBqffs+8EChU=) 2: VsWH0dh23uHGDE4kVE5VRVWnLr0.roa (hash: hOVkpMTlrRKsdZ/dZuqLj9eHRUgLLpUyv0shzANzums=) 3: Y9krglYVmJTSubJfTYWYbBcnI8M.crl (hash: ydakO8v8H0hMKFRm1xlrUFCKldBVngNNdWQUAbmyfEA=) 4: gUlf15cCFOrr7zCpeZmrXHzHdJI.roa (hash: BZcCVc7umSblQi+mV0dsvmWzWVZejT4EU9eRPoEWNCA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/26d917-8c91-45ab-8442-e4e52ac0fefe/1/Y9krglYVmJTSubJfTYWYbBcnI8M.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/26d917-8c91-45ab-8442-e4e52ac0fefe/1/Y9krglYVmJTSubJfTYWYbBcnI8M.mft rsync://rpki.ripe.net/repository/DEFAULT/Y9krglYVmJTSubJfTYWYbBcnI8M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f7:2b:d4:fa:3e:3f:e8:26:d8:c5:04:18:9d:51:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63d92b8256159894d2b9b25f4d85986c172723c3 Validity Not Before: Dec 6 14:00:53 2025 GMT Not After : Dec 7 14:00:53 2025 GMT Subject: CN=11513ad187b25ea860e7e268033117bda8fa47ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:bf:5c:06:9c:71:23:e7:ac:97:95:dc:0c:6b: 57:fd:c6:c2:8d:20:c8:aa:f8:a4:db:d9:65:54:a3: b3:36:e4:3e:28:04:46:aa:86:5a:06:c5:aa:10:c3: 24:1e:33:91:1b:92:0b:33:4d:97:81:f4:17:99:4e: fa:7b:5d:d0:92:1b:70:b8:95:31:05:2a:99:c6:3a: 46:46:8f:9a:e6:60:78:13:4c:56:47:cc:de:e1:04: 1e:e6:33:11:49:5f:72:b9:9b:ea:63:1f:8d:58:34: 3c:8c:20:c5:31:20:f6:c0:99:6a:2c:08:0d:6f:34: e6:eb:ed:0d:5b:59:fd:ad:4a:69:1f:97:fc:79:6e: 25:f4:68:ac:68:71:89:6b:b1:22:e2:b6:cd:b0:89: 5a:2c:34:f5:5b:70:4b:0f:1f:61:be:d6:ca:0e:a3: 5b:51:0f:5f:15:2c:19:76:d4:2d:3b:66:fd:18:ac: 74:6a:2f:98:df:42:36:d8:ac:9d:d4:9f:d5:b9:79: 01:1f:6c:95:07:ed:95:73:33:6a:ef:20:e0:9c:ae: 2e:bf:81:8e:8a:3e:a0:56:33:c4:4f:bd:2c:59:47: 39:86:37:29:9b:e8:78:b4:39:3a:15:44:24:47:3c: 25:7e:be:9d:8c:55:8b:2a:b1:44:f7:f5:d4:18:a0: 25:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:51:3A:D1:87:B2:5E:A8:60:E7:E2:68:03:31:17:BD:A8:FA:47:EC X509v3 Authority Key Identifier: keyid:63:D9:2B:82:56:15:98:94:D2:B9:B2:5F:4D:85:98:6C:17:27:23:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y9krglYVmJTSubJfTYWYbBcnI8M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/26d917-8c91-45ab-8442-e4e52ac0fefe/1/Y9krglYVmJTSubJfTYWYbBcnI8M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/26d917-8c91-45ab-8442-e4e52ac0fefe/1/Y9krglYVmJTSubJfTYWYbBcnI8M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:1a:a1:a4:f2:85:36:f4:9c:59:6f:b9:df:a3:1d:5d:22:21: fa:8d:26:c9:d7:d1:10:91:a7:fa:de:6d:60:2e:0a:1d:e5:8a: a8:fb:6e:4d:e7:94:f1:31:0a:23:e1:50:94:07:ae:25:c3:ac: 7f:a7:41:cd:26:5d:9f:f2:b4:18:fe:05:76:b4:a4:d9:95:39: 32:d6:d9:a9:bc:f6:ec:8c:6e:98:e3:be:42:07:90:d9:99:ea: cb:11:fe:06:09:8a:e8:c7:c4:37:16:b8:69:8e:88:cc:00:33: eb:20:30:fb:ca:63:ea:b8:56:84:3f:ce:cd:71:d4:7f:01:31: 96:c3:87:bc:4a:df:6b:64:8c:bb:43:9e:f7:6c:fa:cb:ee:de: 67:ab:3d:aa:d1:db:ea:c9:5f:ef:cf:b4:05:be:3e:11:e5:a5: 0a:7c:cc:da:98:73:78:c4:48:ac:79:13:d7:79:c5:89:2e:7a: d6:a6:2b:ae:13:cd:14:3d:5b:77:87:7b:f1:0d:10:ab:d0:83: 23:93:49:b2:76:c3:07:40:c2:68:a2:e0:ef:ef:c1:b2:59:49: db:b6:9f:52:d8:27:da:af:be:ec:99:76:eb:b3:b2:57:9f:23: d5:c0:20:05:c8:23:6e:a8:6c:1b:bc:a0:44:bc:c0:af:4d:2d: 5a:08:a7:a8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz9yvU+j4/6CbYxQQYnVHeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZDkyYjgyNTYxNTk4OTRkMmI5YjI1ZjRkODU5ODZjMTcy NzIzYzMwHhcNMjUxMjA2MTQwMDUzWhcNMjUxMjA3MTQwMDUzWjAzMTEwLwYDVQQD EygxMTUxM2FkMTg3YjI1ZWE4NjBlN2UyNjgwMzMxMTdiZGE4ZmE0N2VjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArb9cBpxxI+esl5XcDGtX/cbCjSDI qvik29llVKOzNuQ+KARGqoZaBsWqEMMkHjORG5ILM02XgfQXmU76e13QkhtwuJUx BSqZxjpGRo+a5mB4E0xWR8ze4QQe5jMRSV9yuZvqYx+NWDQ8jCDFMSD2wJlqLAgN bzTm6+0NW1n9rUppH5f8eW4l9GisaHGJa7Ei4rbNsIlaLDT1W3BLDx9hvtbKDqNb UQ9fFSwZdtQtO2b9GKx0ai+Y30I22Kyd1J/VuXkBH2yVB+2VczNq7yDgnK4uv4GO ij6gVjPET70sWUc5hjcpm+h4tDk6FUQkRzwlfr6djFWLKrFE9/XUGKAl7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBFROtGHsl6oYOfiaAMxF72o+kfsMB8GA1UdIwQY MBaAFGPZK4JWFZiU0rmyX02FmGwXJyPDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWTlrcmdsWVZtSlRTdWJKZlRZV1liQmNuSThNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi8yNmQ5MTctOGM5MS00NWFiLTg0NDIt ZTRlNTJhYzBmZWZlLzEvWTlrcmdsWVZtSlRTdWJKZlRZV1liQmNuSThNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi8yNmQ5MTctOGM5MS00NWFiLTg0NDItZTRlNTJhYzBmZWZl LzEvWTlrcmdsWVZtSlRTdWJKZlRZV1liQmNuSThNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKBqhpPKF NvScWW+536MdXSIh+o0mydfREJGn+t5tYC4KHeWKqPtuTeeU8TEKI+FQlAeuJcOs f6dBzSZdn/K0GP4FdrSk2ZU5MtbZqbz27IxumOO+QgeQ2ZnqyxH+BgmK6MfENxa4 aY6IzAAz6yAw+8pj6rhWhD/OzXHUfwExlsOHvErfa2SMu0Oe92z6y+7eZ6s9qtHb 6slf78+0Bb4+EeWlCnzM2phzeMRIrHkT13nFiS561qYrrhPNFD1bd4d78Q0Qq9CD I5NJsnbDB0DCaKLg7+/BsllJ27afUtgn2q++7Jl267OyV58j1cAgBcgjbqhsG7yg RLzAr00tWginqA== -----END CERTIFICATE-----Generated at Sat Dec 6 19:11:22 2025 by rpki-client