This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/3ed8dd-d36e-440c-8142-d80c6b85cda4/1/Y9nR2VwetxbugZUEWnfLohgdeew.mft File: Y9nR2VwetxbugZUEWnfLohgdeew.mft (raw, json) Hash identifier: uHfeFs5Qm6rItQwHcDxE+rAmVF1LGpMg3dqji1YLes8= Subject key identifier: 5D:43:59:40:B5:30:A6:9A:22:9B:32:2C:A1:36:C8:1D:62:AC:5B:F8 Authority key identifier: 63:D9:D1:D9:5C:1E:B7:16:EE:81:95:04:5A:77:CB:A2:18:1D:79:EC Certificate issuer: /CN=63d9d1d95c1eb716ee8195045a77cba2181d79ec Certificate serial: 019AF2095BB0F1C5485FA765312F7F5459F4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y9nR2VwetxbugZUEWnfLohgdeew.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/3ed8dd-d36e-440c-8142-d80c6b85cda4/1/Y9nR2VwetxbugZUEWnfLohgdeew.mft Manifest number: 1773 Signing time: Sat 06 Dec 2025 05:01:30 +0000 Manifest this update: Sat 06 Dec 2025 05:01:30 +0000 Manifest next update: Sun 07 Dec 2025 05:01:30 +0000 Files and hashes: 1: Xpr9sRgbPmZViC8BU1QHYCRAm3g.roa (hash: /PhmdbdMunM2MY+0QaCxgwKDHy7Elu8z4ortzYVhL+Y=) 2: Y9nR2VwetxbugZUEWnfLohgdeew.crl (hash: 9GR8vb+Gr2Jc1PCC8RcDC1GMwF/DdVIoC/sBK5INwg8=) 3: emyVhdOtUpRyesCtl5eoHp0JGEE.roa (hash: 86qnK0w4Cm+zX9631HiXs9UjrDd9iFThMb03qwigYKc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/3ed8dd-d36e-440c-8142-d80c6b85cda4/1/Y9nR2VwetxbugZUEWnfLohgdeew.crl rsync://rpki.ripe.net/repository/DEFAULT/35/3ed8dd-d36e-440c-8142-d80c6b85cda4/1/Y9nR2VwetxbugZUEWnfLohgdeew.mft rsync://rpki.ripe.net/repository/DEFAULT/Y9nR2VwetxbugZUEWnfLohgdeew.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:5b:b0:f1:c5:48:5f:a7:65:31:2f:7f:54:59:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63d9d1d95c1eb716ee8195045a77cba2181d79ec Validity Not Before: Dec 6 05:01:30 2025 GMT Not After : Dec 7 05:01:30 2025 GMT Subject: CN=5d435940b530a69a229b322ca136c81d62ac5bf8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:c4:aa:e1:4a:b7:7a:a2:4e:4c:9d:82:c0:26: 0d:5d:b5:7c:ee:b6:e4:39:22:95:cf:d4:1f:5a:c9: b1:62:9d:08:08:d6:f9:50:51:54:15:38:77:c5:ce: 72:cd:a8:81:07:e2:aa:db:5b:59:e4:9a:78:fd:29: aa:46:50:13:0e:4b:d9:e0:15:81:b7:14:97:39:c8: 95:2a:bf:c0:fe:c6:0a:bb:b7:36:6a:86:86:bc:63: 41:81:3d:fc:15:d4:d2:35:b9:53:48:97:d1:0a:d3: ec:e0:9a:55:d3:65:96:ca:ad:7d:74:ba:42:d2:7e: d6:af:e4:13:1c:e3:ce:df:d8:ae:61:47:35:8b:e4: f7:14:13:d4:31:31:cd:f3:e8:ef:4c:7c:31:3a:34: 03:c8:d6:c5:ba:a3:25:64:89:dc:b5:2f:8d:24:f9: 7e:b6:c3:c6:0a:f3:1c:97:85:b9:98:54:9d:cd:ac: a2:d1:d9:55:ba:81:ad:27:88:96:00:75:de:46:3e: 3f:7a:a5:a5:ac:ee:6f:77:c4:1a:58:ad:b9:8b:30: 47:a9:09:75:ff:98:9a:7d:0e:cd:8f:62:f4:ee:ba: a0:fd:54:ed:e4:ae:06:56:41:1f:de:bd:e2:f1:f6: e4:17:26:42:19:be:d3:05:19:bf:6c:68:3e:b1:08: f9:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:43:59:40:B5:30:A6:9A:22:9B:32:2C:A1:36:C8:1D:62:AC:5B:F8 X509v3 Authority Key Identifier: keyid:63:D9:D1:D9:5C:1E:B7:16:EE:81:95:04:5A:77:CB:A2:18:1D:79:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y9nR2VwetxbugZUEWnfLohgdeew.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3ed8dd-d36e-440c-8142-d80c6b85cda4/1/Y9nR2VwetxbugZUEWnfLohgdeew.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3ed8dd-d36e-440c-8142-d80c6b85cda4/1/Y9nR2VwetxbugZUEWnfLohgdeew.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:3e:83:c8:d2:bb:8a:8f:3a:34:d7:a8:22:a8:8d:34:3e:7d: ad:c8:9e:97:4d:4c:14:3f:e7:55:f7:9c:2c:72:54:b8:c1:48: 94:75:8a:0a:9c:36:41:9a:1b:a2:3e:55:e4:6b:a8:23:96:53: 2c:d1:a9:d4:93:2e:27:ec:be:25:89:69:31:9d:22:b6:bd:87: fd:5b:07:33:47:96:7e:26:29:22:47:c5:81:f4:f4:3f:48:ab: 16:ce:4a:7f:93:73:97:df:45:b7:77:51:00:84:ef:6b:13:92: a8:2c:fc:cf:44:56:62:9d:7c:bf:76:03:d1:33:26:15:36:03: ec:1f:7c:6c:5f:43:23:ff:f1:71:97:a2:52:fc:c4:4b:ba:70: b9:52:42:d0:47:7b:3c:bf:d7:52:99:a8:00:14:ec:2d:ce:31: 9f:bc:20:4d:75:06:50:0e:0c:ab:af:b9:d5:37:b5:41:be:b9: ab:57:ba:cf:27:07:1c:47:08:55:6d:ce:73:60:fd:ac:2e:62: c6:5f:03:e4:ac:8c:bd:b5:a0:02:11:87:ce:b7:56:ad:67:a9: 83:4f:72:ba:49:e5:ef:d8:77:57:cd:a7:dc:e6:f3:45:6a:ba: 77:f4:1b:39:04:28:0d:b7:c8:67:e5:d3:e5:c9:c4:22:61:60: 9b:90:fe:4e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCVuw8cVIX6dlMS9/VFn0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZDlkMWQ5NWMxZWI3MTZlZTgxOTUwNDVhNzdjYmEyMTgx ZDc5ZWMwHhcNMjUxMjA2MDUwMTMwWhcNMjUxMjA3MDUwMTMwWjAzMTEwLwYDVQQD Eyg1ZDQzNTk0MGI1MzBhNjlhMjI5YjMyMmNhMTM2YzgxZDYyYWM1YmY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt8Sq4Uq3eqJOTJ2CwCYNXbV87rbk OSKVz9QfWsmxYp0ICNb5UFFUFTh3xc5yzaiBB+Kq21tZ5Jp4/SmqRlATDkvZ4BWB txSXOciVKr/A/sYKu7c2aoaGvGNBgT38FdTSNblTSJfRCtPs4JpV02WWyq19dLpC 0n7Wr+QTHOPO39iuYUc1i+T3FBPUMTHN8+jvTHwxOjQDyNbFuqMlZInctS+NJPl+ tsPGCvMcl4W5mFSdzayi0dlVuoGtJ4iWAHXeRj4/eqWlrO5vd8QaWK25izBHqQl1 /5iafQ7Nj2L07rqg/VTt5K4GVkEf3r3i8fbkFyZCGb7TBRm/bGg+sQj52wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF1DWUC1MKaaIpsyLKE2yB1irFv4MB8GA1UdIwQY MBaAFGPZ0dlcHrcW7oGVBFp3y6IYHXnsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWTluUjJWd2V0eGJ1Z1pVRVduZkxvaGdkZWV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS8zZWQ4ZGQtZDM2ZS00NDBjLTgxNDIt ZDgwYzZiODVjZGE0LzEvWTluUjJWd2V0eGJ1Z1pVRVduZkxvaGdkZWV3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS8zZWQ4ZGQtZDM2ZS00NDBjLTgxNDItZDgwYzZiODVjZGE0 LzEvWTluUjJWd2V0eGJ1Z1pVRVduZkxvaGdkZWV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJD6DyNK7 io86NNeoIqiNND59rciel01MFD/nVfecLHJUuMFIlHWKCpw2QZoboj5V5GuoI5ZT LNGp1JMuJ+y+JYlpMZ0itr2H/VsHM0eWfiYpIkfFgfT0P0irFs5Kf5Nzl99Ft3dR AITvaxOSqCz8z0RWYp18v3YD0TMmFTYD7B98bF9DI//xcZeiUvzES7pwuVJC0Ed7 PL/XUpmoABTsLc4xn7wgTXUGUA4Mq6+51Te1Qb65q1e6zycHHEcIVW3Oc2D9rC5i xl8D5KyMvbWgAhGHzrdWrWepg09yuknl79h3V82n3ObzRWq6d/QbOQQoDbfIZ+XT 5cnEImFgm5D+Tg== -----END CERTIFICATE-----Generated at Sat Dec 6 12:04:20 2025 by rpki-client