This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/5dc1d9-eba4-42c8-b3d6-d1c5f1b51e17/1/Y-5tHR7Mr5eZu9XyttrORtht9Is.mft File: Y-5tHR7Mr5eZu9XyttrORtht9Is.mft (raw, json) Hash identifier: KPR+NpPQi7OZuJgK5kZykCGg0qEvCUxGB/Px6NcXrCk= Subject key identifier: 32:C8:EB:D1:5F:18:E8:41:57:D2:1D:0F:E0:2B:19:34:2A:AD:71:10 Authority key identifier: 63:EE:6D:1D:1E:CC:AF:97:99:BB:D5:F2:B6:DA:CE:46:D8:6D:F4:8B Certificate issuer: /CN=63ee6d1d1eccaf9799bbd5f2b6dace46d86df48b Certificate serial: 019AF16420A2BF6E4BDF052B3426F6BD6BB2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-5tHR7Mr5eZu9XyttrORtht9Is.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/5dc1d9-eba4-42c8-b3d6-d1c5f1b51e17/1/Y-5tHR7Mr5eZu9XyttrORtht9Is.mft Manifest number: 063A Signing time: Sat 06 Dec 2025 02:01:02 +0000 Manifest this update: Sat 06 Dec 2025 02:01:02 +0000 Manifest next update: Sun 07 Dec 2025 02:01:02 +0000 Files and hashes: 1: GtwJZcMJzJfVot1AbvXcNrWZuUA.roa (hash: ntPN44ZmmFojLPzowglrHCEuS924DT/SbCX/IExl0bg=) 2: Y-5tHR7Mr5eZu9XyttrORtht9Is.crl (hash: 09bTVei7YqGEblLFgtLuvTOYc0buQByWJnyKqXuk63g=) 3: v9BFv3-TNowegyiv09vLFLV5UTQ.roa (hash: dKR68pnVeUnoZwpMGIMPLXESwr/B50jGdFPF9i1PucA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/5dc1d9-eba4-42c8-b3d6-d1c5f1b51e17/1/Y-5tHR7Mr5eZu9XyttrORtht9Is.crl rsync://rpki.ripe.net/repository/DEFAULT/17/5dc1d9-eba4-42c8-b3d6-d1c5f1b51e17/1/Y-5tHR7Mr5eZu9XyttrORtht9Is.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-5tHR7Mr5eZu9XyttrORtht9Is.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:20:a2:bf:6e:4b:df:05:2b:34:26:f6:bd:6b:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63ee6d1d1eccaf9799bbd5f2b6dace46d86df48b Validity Not Before: Dec 6 02:01:02 2025 GMT Not After : Dec 7 02:01:02 2025 GMT Subject: CN=32c8ebd15f18e84157d21d0fe02b19342aad7110 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:10:7b:2c:d9:6c:3a:15:66:36:82:ab:a7:8c: 2d:c3:6b:6c:ee:07:15:de:83:24:94:3b:94:f7:f9: 0c:04:35:f9:d8:aa:e7:4e:82:70:37:0d:78:58:29: 42:ed:55:15:17:e1:91:8b:58:3a:bd:e7:07:45:a7: 02:f1:90:36:83:42:ab:03:45:23:fb:bc:7a:96:fc: d2:23:c2:5c:8c:7e:21:5b:77:e2:e3:d0:ae:39:83: 97:b3:7b:1a:fb:b4:79:b4:fd:74:1d:16:78:ee:8c: f1:07:60:f0:81:b8:1f:75:cf:d7:84:3c:ca:cf:da: 2d:99:f3:e5:0b:d5:e6:a9:4a:c0:99:89:1f:4f:34: 50:30:c7:36:08:0f:73:05:4a:f0:ec:80:5c:4f:1a: 2a:8b:86:e1:ea:c9:ae:5a:9d:c3:01:12:cc:6a:29: 81:51:2e:0b:d8:4a:60:91:8e:ba:98:20:f5:70:59: 34:76:d9:e8:48:52:2e:c4:9e:92:e6:49:66:78:1d: b6:b2:7b:c8:56:cd:ec:98:13:c7:13:f3:12:4f:5f: 63:84:b4:bb:5e:01:1b:d8:bc:e6:ff:16:8b:4b:e7: 46:0a:cb:d0:76:37:70:b5:d5:36:00:77:3d:a7:2a: f6:96:03:fc:18:1f:ee:1b:b4:e8:2d:0c:7a:2e:b5: cc:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:C8:EB:D1:5F:18:E8:41:57:D2:1D:0F:E0:2B:19:34:2A:AD:71:10 X509v3 Authority Key Identifier: keyid:63:EE:6D:1D:1E:CC:AF:97:99:BB:D5:F2:B6:DA:CE:46:D8:6D:F4:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-5tHR7Mr5eZu9XyttrORtht9Is.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/5dc1d9-eba4-42c8-b3d6-d1c5f1b51e17/1/Y-5tHR7Mr5eZu9XyttrORtht9Is.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/5dc1d9-eba4-42c8-b3d6-d1c5f1b51e17/1/Y-5tHR7Mr5eZu9XyttrORtht9Is.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:98:6a:fe:fb:f7:3d:1c:03:e2:69:92:db:04:f0:ef:e8:2a: b4:82:46:38:c8:31:32:e8:00:65:1d:76:59:01:32:02:6e:fb: f0:a1:29:c6:5c:5d:de:b9:37:72:39:7f:c0:d1:22:69:ba:2d: 7d:bf:cd:03:6b:e6:f9:c4:c2:dc:ee:22:fd:9a:c1:6a:67:eb: 34:4e:8c:f0:04:6e:1d:a8:35:44:51:6e:55:c0:85:a0:cc:56: 37:90:24:08:02:25:c6:53:b4:0d:3a:6e:12:60:f3:8d:69:b4: d4:0a:c2:13:b8:7f:db:1e:3e:af:2e:0d:f8:c5:bb:5b:4a:d7: cf:4e:fd:10:f3:cf:90:e6:55:4d:16:a7:a6:7b:d4:60:34:fd: 01:4b:a1:09:90:3a:b8:14:2f:fa:8b:31:ff:d4:7b:6f:43:05: ca:f3:0a:fc:27:7c:43:73:2c:a9:4c:2e:c6:88:62:21:9c:a7: e0:c3:e1:12:cd:24:39:dd:71:f9:aa:47:e2:03:b7:a8:ca:09: 2e:a2:7d:09:c8:60:03:ef:26:0e:39:8b:14:4b:82:16:b3:7d: ca:0e:bb:e9:8c:1d:e1:0f:7b:07:40:93:e8:19:ee:20:a3:07: 66:b4:9e:03:41:98:e9:04:f5:0c:39:b6:ef:7d:2c:cb:19:09: 92:ce:9f:2e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZCCiv25L3wUrNCb2vWuyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZWU2ZDFkMWVjY2FmOTc5OWJiZDVmMmI2ZGFjZTQ2ZDg2 ZGY0OGIwHhcNMjUxMjA2MDIwMTAyWhcNMjUxMjA3MDIwMTAyWjAzMTEwLwYDVQQD EygzMmM4ZWJkMTVmMThlODQxNTdkMjFkMGZlMDJiMTkzNDJhYWQ3MTEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6hB7LNlsOhVmNoKrp4wtw2ts7gcV 3oMklDuU9/kMBDX52KrnToJwNw14WClC7VUVF+GRi1g6vecHRacC8ZA2g0KrA0Uj +7x6lvzSI8JcjH4hW3fi49CuOYOXs3sa+7R5tP10HRZ47ozxB2Dwgbgfdc/XhDzK z9otmfPlC9XmqUrAmYkfTzRQMMc2CA9zBUrw7IBcTxoqi4bh6smuWp3DARLMaimB US4L2EpgkY66mCD1cFk0dtnoSFIuxJ6S5klmeB22snvIVs3smBPHE/MST19jhLS7 XgEb2Lzm/xaLS+dGCsvQdjdwtdU2AHc9pyr2lgP8GB/uG7ToLQx6LrXM6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDLI69FfGOhBV9IdD+ArGTQqrXEQMB8GA1UdIwQY MBaAFGPubR0ezK+XmbvV8rbazkbYbfSLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS01dEhSN01yNWVadTlYeXR0ck9SdGh0OUlzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy81ZGMxZDktZWJhNC00MmM4LWIzZDYt ZDFjNWYxYjUxZTE3LzEvWS01dEhSN01yNWVadTlYeXR0ck9SdGh0OUlzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy81ZGMxZDktZWJhNC00MmM4LWIzZDYtZDFjNWYxYjUxZTE3 LzEvWS01dEhSN01yNWVadTlYeXR0ck9SdGh0OUlzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYZhq/vv3 PRwD4mmS2wTw7+gqtIJGOMgxMugAZR12WQEyAm778KEpxlxd3rk3cjl/wNEiabot fb/NA2vm+cTC3O4i/ZrBamfrNE6M8ARuHag1RFFuVcCFoMxWN5AkCAIlxlO0DTpu EmDzjWm01ArCE7h/2x4+ry4N+MW7W0rXz079EPPPkOZVTRanpnvUYDT9AUuhCZA6 uBQv+osx/9R7b0MFyvMK/Cd8Q3MsqUwuxohiIZyn4MPhEs0kOd1x+apH4gO3qMoJ LqJ9CchgA+8mDjmLFEuCFrN9yg676Ywd4Q97B0CT6BnuIKMHZrSeA0GY6QT1DDm2 730syxkJks6fLg== -----END CERTIFICATE-----Generated at Sat Dec 6 11:05:12 2025 by rpki-client