This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/fc8cb4-ce84-43e4-aa2a-f391dc117fe9/1/Y7UHKgcBIh4dKR8C3rjNUWnmrDI.mft File: Y7UHKgcBIh4dKR8C3rjNUWnmrDI.mft (raw, json) Hash identifier: a1ONhzDM5RLRzxD/ucncAbqW7DguBQK2uheKauSB9Q4= Subject key identifier: 11:E9:28:B5:7C:C2:CB:BE:17:97:21:5F:BE:D4:93:3E:38:C2:25:DB Authority key identifier: 63:B5:07:2A:07:01:22:1E:1D:29:1F:02:DE:B8:CD:51:69:E6:AC:32 Certificate issuer: /CN=63b5072a0701221e1d291f02deb8cd5169e6ac32 Certificate serial: 019AF31B56C17A5CE812FE3FEDA9E424CBD0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y7UHKgcBIh4dKR8C3rjNUWnmrDI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/fc8cb4-ce84-43e4-aa2a-f391dc117fe9/1/Y7UHKgcBIh4dKR8C3rjNUWnmrDI.mft Manifest number: 072B Signing time: Sat 06 Dec 2025 10:00:46 +0000 Manifest this update: Sat 06 Dec 2025 10:00:46 +0000 Manifest next update: Sun 07 Dec 2025 10:00:46 +0000 Files and hashes: 1: Y7UHKgcBIh4dKR8C3rjNUWnmrDI.crl (hash: UV+BmJaP3EO1b2JMT2G1mmJXn13lgAdzcadkn+R4yZs=) 2: YUQVyrq4PHervTbSyhk_DAk9Eqc.roa (hash: awqm1ZtQIXxZlbailLUEsiOtmvaS6joj09FbNkED+tQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/fc8cb4-ce84-43e4-aa2a-f391dc117fe9/1/Y7UHKgcBIh4dKR8C3rjNUWnmrDI.crl rsync://rpki.ripe.net/repository/DEFAULT/13/fc8cb4-ce84-43e4-aa2a-f391dc117fe9/1/Y7UHKgcBIh4dKR8C3rjNUWnmrDI.mft rsync://rpki.ripe.net/repository/DEFAULT/Y7UHKgcBIh4dKR8C3rjNUWnmrDI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:56:c1:7a:5c:e8:12:fe:3f:ed:a9:e4:24:cb:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63b5072a0701221e1d291f02deb8cd5169e6ac32 Validity Not Before: Dec 6 10:00:46 2025 GMT Not After : Dec 7 10:00:46 2025 GMT Subject: CN=11e928b57cc2cbbe1797215fbed4933e38c225db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:63:22:8d:b9:89:ad:77:1a:81:52:27:43:2f: 37:2d:56:7e:18:d1:65:1c:13:b9:15:14:00:b6:6c: 6e:63:be:5a:a7:dd:ce:60:a4:c3:cf:c4:c8:04:16: 69:22:43:7c:0a:71:f1:51:85:2e:f9:ba:54:db:74: 34:3a:ba:82:fa:3c:8d:f4:b0:4a:c7:5a:ca:af:e9: d0:70:83:af:3d:25:8b:c4:27:62:5a:8c:f5:1b:8c: d9:9c:e7:8f:10:66:27:1e:aa:07:ef:5d:99:21:a1: f6:e2:63:25:3a:0a:56:b9:41:5e:50:8d:b5:5e:d8: 63:7c:16:8d:ee:1c:d7:cb:78:1d:a0:e0:ed:83:9d: 55:30:ea:25:e9:66:bb:63:01:64:89:18:eb:3b:a9: 9f:88:0f:e1:71:2a:ce:a6:df:0a:0d:e6:0c:f9:bd: 42:19:6f:2a:6f:3b:43:a5:c6:78:78:cc:9c:79:4c: b9:27:54:df:6d:be:0b:3d:bb:61:8b:ec:84:ad:c8: 94:af:35:b7:8b:6e:d7:bf:32:58:b1:e7:46:7f:b8: e5:42:ec:9c:31:dc:5f:ce:b9:21:68:1d:0b:82:22: 31:0c:8f:74:94:18:8e:10:aa:ca:d0:d5:8e:b3:56: b3:e5:95:61:26:d2:ae:d4:73:03:32:1f:45:00:ba: e9:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:E9:28:B5:7C:C2:CB:BE:17:97:21:5F:BE:D4:93:3E:38:C2:25:DB X509v3 Authority Key Identifier: keyid:63:B5:07:2A:07:01:22:1E:1D:29:1F:02:DE:B8:CD:51:69:E6:AC:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y7UHKgcBIh4dKR8C3rjNUWnmrDI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/fc8cb4-ce84-43e4-aa2a-f391dc117fe9/1/Y7UHKgcBIh4dKR8C3rjNUWnmrDI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/fc8cb4-ce84-43e4-aa2a-f391dc117fe9/1/Y7UHKgcBIh4dKR8C3rjNUWnmrDI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:31:fb:7e:1a:e2:7d:60:56:42:e0:11:3b:89:e3:81:4b:65: b5:e7:37:f2:92:04:cb:af:d4:90:b4:1b:f2:fc:4f:c5:e2:51: 96:c4:33:01:6c:82:48:c0:67:30:ee:fc:76:0d:ac:04:77:f0: 20:c3:f4:69:4c:6f:20:bd:72:61:81:7b:2f:1a:18:4b:ad:99: f1:01:be:0b:40:b9:4e:9b:bc:c3:bc:fb:cb:1a:1e:30:97:d8: 7a:2b:59:cf:cb:0c:b5:f9:14:e6:ce:46:f2:fc:2c:03:c9:db: e0:d2:ce:7d:2d:a4:22:11:d2:24:30:17:4c:06:ed:4e:f0:78: 96:78:26:31:75:81:a1:43:af:04:1f:5d:db:f7:4f:60:a3:72: d1:0b:98:26:b0:c7:79:54:ea:14:8d:e8:cd:6f:45:f6:3c:0b: da:4e:2b:c0:d3:76:41:d8:08:75:1a:c3:51:cd:4c:b6:93:82: 5b:83:8c:21:df:25:ec:38:bb:f3:6b:7e:f1:a1:f8:db:87:19: 30:a8:8c:14:fe:13:60:07:71:6b:bc:af:4c:24:8e:4a:31:ee: 0a:ec:49:ef:1d:95:10:df:5c:b4:ce:85:44:89:cc:f2:a6:33: a2:6f:5d:53:9d:65:8b:73:9a:7c:fa:f3:5a:14:eb:f8:f3:9a: df:39:d7:ac -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG1bBelzoEv4/7ankJMvQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzYjUwNzJhMDcwMTIyMWUxZDI5MWYwMmRlYjhjZDUxNjll NmFjMzIwHhcNMjUxMjA2MTAwMDQ2WhcNMjUxMjA3MTAwMDQ2WjAzMTEwLwYDVQQD EygxMWU5MjhiNTdjYzJjYmJlMTc5NzIxNWZiZWQ0OTMzZTM4YzIyNWRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu2MijbmJrXcagVInQy83LVZ+GNFl HBO5FRQAtmxuY75ap93OYKTDz8TIBBZpIkN8CnHxUYUu+bpU23Q0OrqC+jyN9LBK x1rKr+nQcIOvPSWLxCdiWoz1G4zZnOePEGYnHqoH712ZIaH24mMlOgpWuUFeUI21 XthjfBaN7hzXy3gdoODtg51VMOol6Wa7YwFkiRjrO6mfiA/hcSrOpt8KDeYM+b1C GW8qbztDpcZ4eMyceUy5J1Tfbb4LPbthi+yErciUrzW3i27XvzJYsedGf7jlQuyc MdxfzrkhaB0LgiIxDI90lBiOEKrK0NWOs1az5ZVhJtKu1HMDMh9FALrp0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBHpKLV8wsu+F5chX77Ukz44wiXbMB8GA1UdIwQY MBaAFGO1ByoHASIeHSkfAt64zVFp5qwyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWTdVSEtnY0JJaDRkS1I4QzNyak5VV25tckRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9mYzhjYjQtY2U4NC00M2U0LWFhMmEt ZjM5MWRjMTE3ZmU5LzEvWTdVSEtnY0JJaDRkS1I4QzNyak5VV25tckRJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy9mYzhjYjQtY2U4NC00M2U0LWFhMmEtZjM5MWRjMTE3ZmU5 LzEvWTdVSEtnY0JJaDRkS1I4QzNyak5VV25tckRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADTH7fhri fWBWQuARO4njgUtltec38pIEy6/UkLQb8vxPxeJRlsQzAWyCSMBnMO78dg2sBHfw IMP0aUxvIL1yYYF7LxoYS62Z8QG+C0C5Tpu8w7z7yxoeMJfYeitZz8sMtfkU5s5G 8vwsA8nb4NLOfS2kIhHSJDAXTAbtTvB4lngmMXWBoUOvBB9d2/dPYKNy0QuYJrDH eVTqFI3ozW9F9jwL2k4rwNN2QdgIdRrDUc1MtpOCW4OMId8l7Di782t+8aH424cZ MKiMFP4TYAdxa7yvTCSOSjHuCuxJ7x2VEN9ctM6FRInM8qYzom9dU51li3OafPrz WhTr+POa3znXrA== -----END CERTIFICATE-----Generated at Sat Dec 6 18:06:05 2025 by rpki-client