This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/0cf6d7-d8ef-44a8-aa07-7768d4fbdcd3/1/Y42aUATFktCTzImw2QdS4nnVGFQ.mft File: Y42aUATFktCTzImw2QdS4nnVGFQ.mft (raw, json) Hash identifier: O+yYKrgn5Q+yzqF343DtgcGPb4fFMoGz7BONfjjuS/4= Subject key identifier: 65:23:60:9A:43:0C:89:C3:EF:45:43:95:E9:AD:C2:AF:1F:63:EB:A9 Authority key identifier: 63:8D:9A:50:04:C5:92:D0:93:CC:89:B0:D9:07:52:E2:79:D5:18:54 Certificate issuer: /CN=638d9a5004c592d093cc89b0d90752e279d51854 Certificate serial: 019AF19AB604BAA1C2D7F4A53EDD810B4E00 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y42aUATFktCTzImw2QdS4nnVGFQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/0cf6d7-d8ef-44a8-aa07-7768d4fbdcd3/1/Y42aUATFktCTzImw2QdS4nnVGFQ.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 03:00:39 +0000 Manifest this update: Sat 06 Dec 2025 03:00:39 +0000 Manifest next update: Sun 07 Dec 2025 03:00:39 +0000 Files and hashes: 1: 5t5Dcx5tNkWQ_sy57yYX9uF0BSc.roa (hash: PzSrKv8Rw8leyPQ1z/odwxbCskApuD1oeaEEXKXPsNc=) 2: Y42aUATFktCTzImw2QdS4nnVGFQ.crl (hash: Belu7OESp5Q74CS0pDw+dlxt4sex1E5ZXX4xxrF2/Oc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/0cf6d7-d8ef-44a8-aa07-7768d4fbdcd3/1/Y42aUATFktCTzImw2QdS4nnVGFQ.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/0cf6d7-d8ef-44a8-aa07-7768d4fbdcd3/1/Y42aUATFktCTzImw2QdS4nnVGFQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Y42aUATFktCTzImw2QdS4nnVGFQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:b6:04:ba:a1:c2:d7:f4:a5:3e:dd:81:0b:4e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=638d9a5004c592d093cc89b0d90752e279d51854 Validity Not Before: Dec 6 03:00:39 2025 GMT Not After : Dec 7 03:00:39 2025 GMT Subject: CN=6523609a430c89c3ef454395e9adc2af1f63eba9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:f7:d7:ab:7c:09:fe:66:bd:06:a5:05:b4:a5: be:b2:80:bb:2c:a6:29:54:02:c0:b2:7b:e5:85:3b: 30:66:b6:3d:11:a1:e8:51:83:98:45:7a:95:97:95: 07:f7:78:33:41:13:ba:67:43:bd:e7:6b:2a:2c:85: 9a:66:39:37:10:35:e0:34:42:fe:35:bb:e9:ce:6d: a2:4a:ca:8b:76:e7:24:27:0b:09:54:e6:eb:4f:54: f3:ba:32:56:71:64:f0:4d:2b:18:b0:0d:bd:9b:b3: c3:8b:6a:12:c9:0f:c2:a0:1b:65:b6:56:7f:49:f6: 08:62:15:54:e9:55:6e:01:18:8f:94:8d:23:9a:08: 59:7e:ab:a1:e1:9e:9c:d3:14:a3:06:31:fa:cd:22: d0:d8:be:9f:87:87:b5:3a:55:58:de:e0:bc:35:df: f5:ff:80:ec:a5:d8:21:16:6a:cd:d1:03:e1:ca:02: 94:c8:da:2d:73:d5:26:2a:8a:b9:f6:6b:ae:d2:6a: 8b:e3:c1:66:86:30:7b:25:df:bc:46:10:b5:c8:6d: 84:9f:0f:96:97:84:b5:9a:d5:26:88:36:4a:92:6f: f7:28:6e:e1:35:3c:45:3a:bc:35:b4:97:f1:c0:d8: f0:ba:d9:83:cf:36:2a:6f:b6:f0:01:f8:94:d7:9a: b5:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:23:60:9A:43:0C:89:C3:EF:45:43:95:E9:AD:C2:AF:1F:63:EB:A9 X509v3 Authority Key Identifier: keyid:63:8D:9A:50:04:C5:92:D0:93:CC:89:B0:D9:07:52:E2:79:D5:18:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y42aUATFktCTzImw2QdS4nnVGFQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/0cf6d7-d8ef-44a8-aa07-7768d4fbdcd3/1/Y42aUATFktCTzImw2QdS4nnVGFQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/0cf6d7-d8ef-44a8-aa07-7768d4fbdcd3/1/Y42aUATFktCTzImw2QdS4nnVGFQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bf:17:79:25:68:a4:8b:52:af:12:be:e7:d3:ea:0c:b1:5f:9d: 62:c9:76:94:7b:43:bb:ce:28:7b:ac:b0:bc:df:25:45:9e:9a: 7e:62:61:1a:63:ad:89:b5:5b:c4:b3:4f:6a:01:16:52:77:b6: 51:c4:14:f5:46:a4:bd:57:8a:40:d7:6f:96:50:4a:50:f9:e5: 27:f8:12:f2:a8:e9:68:80:f1:a9:5f:60:5c:8b:b0:f6:90:a1: 91:e8:85:57:a0:46:a7:6c:1f:e5:1c:c6:8e:00:92:e4:23:3b: c6:90:85:27:9e:fe:f0:86:79:35:27:46:49:60:30:a4:2e:93: b0:48:a5:47:81:bc:63:e2:5e:b1:39:3c:7a:e9:2d:0a:cc:85: be:e0:13:b1:a7:12:32:a8:86:f1:0f:40:ab:8d:f2:12:98:bc: a7:ad:16:7b:bc:eb:69:e6:a3:0a:47:2d:b0:16:2b:36:88:eb: 0c:01:54:70:64:b4:2d:2a:59:b6:73:99:4b:66:80:90:87:b3: 0d:fa:39:38:7c:73:fd:1d:cd:dc:5f:fb:41:b3:d2:89:1d:4c: 2f:58:ef:68:e7:09:0a:da:20:d1:40:a9:2c:c2:41:a0:f9:da: 6f:7f:fc:f6:d1:14:07:90:aa:66:ab:c1:b7:3d:85:18:f3:1a: ce:79:ae:61 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmrYEuqHC1/SlPt2BC04AMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzOGQ5YTUwMDRjNTkyZDA5M2NjODliMGQ5MDc1MmUyNzlk NTE4NTQwHhcNMjUxMjA2MDMwMDM5WhcNMjUxMjA3MDMwMDM5WjAzMTEwLwYDVQQD Eyg2NTIzNjA5YTQzMGM4OWMzZWY0NTQzOTVlOWFkYzJhZjFmNjNlYmE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlffXq3wJ/ma9BqUFtKW+soC7LKYp VALAsnvlhTswZrY9EaHoUYOYRXqVl5UH93gzQRO6Z0O952sqLIWaZjk3EDXgNEL+ Nbvpzm2iSsqLduckJwsJVObrT1TzujJWcWTwTSsYsA29m7PDi2oSyQ/CoBtltlZ/ SfYIYhVU6VVuARiPlI0jmghZfquh4Z6c0xSjBjH6zSLQ2L6fh4e1OlVY3uC8Nd/1 /4DspdghFmrN0QPhygKUyNotc9UmKoq59muu0mqL48FmhjB7Jd+8RhC1yG2Enw+W l4S1mtUmiDZKkm/3KG7hNTxFOrw1tJfxwNjwutmDzzYqb7bwAfiU15q1QwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGUjYJpDDInD70VDlemtwq8fY+upMB8GA1UdIwQY MBaAFGONmlAExZLQk8yJsNkHUuJ51RhUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWTQyYVVBVEZrdENUekltdzJRZFM0bm5WR0ZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS8wY2Y2ZDctZDhlZi00NGE4LWFhMDct Nzc2OGQ0ZmJkY2QzLzEvWTQyYVVBVEZrdENUekltdzJRZFM0bm5WR0ZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS8wY2Y2ZDctZDhlZi00NGE4LWFhMDctNzc2OGQ0ZmJkY2Qz LzEvWTQyYVVBVEZrdENUekltdzJRZFM0bm5WR0ZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvxd5JWik i1KvEr7n0+oMsV+dYsl2lHtDu84oe6ywvN8lRZ6afmJhGmOtibVbxLNPagEWUne2 UcQU9UakvVeKQNdvllBKUPnlJ/gS8qjpaIDxqV9gXIuw9pChkeiFV6BGp2wf5RzG jgCS5CM7xpCFJ57+8IZ5NSdGSWAwpC6TsEilR4G8Y+JesTk8euktCsyFvuATsacS MqiG8Q9Aq43yEpi8p60We7zraeajCkctsBYrNojrDAFUcGS0LSpZtnOZS2aAkIez Dfo5OHxz/R3N3F/7QbPSiR1ML1jvaOcJCtog0UCpLMJBoPnab3/89tEUB5CqZqvB tz2FGPMaznmuYQ== -----END CERTIFICATE-----Generated at Sat Dec 6 10:01:20 2025 by rpki-client