This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/4f5903-ff9f-4ec6-86c0-07b0ea75c24b/1/Y2QsHKPTjH4V5ofg2UhceCaTjBA.mft File: Y2QsHKPTjH4V5ofg2UhceCaTjBA.mft (raw, json) Hash identifier: 5GGeb8x4HDNbQsldJi7Cs8YCfPy1mCWDhRRdrdtAOto= Subject key identifier: 1A:2E:C1:63:79:EC:8B:69:3E:0F:C6:80:E7:3A:CF:96:49:3B:32:B8 Authority key identifier: 63:64:2C:1C:A3:D3:8C:7E:15:E6:87:E0:D9:48:5C:78:26:93:8C:10 Certificate issuer: /CN=63642c1ca3d38c7e15e687e0d9485c7826938c10 Certificate serial: 019AF12D35EBE1926BEEB5772C32236E3699 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y2QsHKPTjH4V5ofg2UhceCaTjBA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/4f5903-ff9f-4ec6-86c0-07b0ea75c24b/1/Y2QsHKPTjH4V5ofg2UhceCaTjBA.mft Manifest number: 048D Signing time: Sat 06 Dec 2025 01:01:02 +0000 Manifest this update: Sat 06 Dec 2025 01:01:02 +0000 Manifest next update: Sun 07 Dec 2025 01:01:02 +0000 Files and hashes: 1: Qzda_dpxvv_9oCqZ0rKtNjYGFYA.roa (hash: yhmVIZybj8mBYPvdFgcuCe4v8sYhgAuDZKiw+Hdv0f4=) 2: Y2QsHKPTjH4V5ofg2UhceCaTjBA.crl (hash: I0YpwUusD+b+ZVFtrCXsuc9XNq9afsEFSsaUvs2Rb3M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/4f5903-ff9f-4ec6-86c0-07b0ea75c24b/1/Y2QsHKPTjH4V5ofg2UhceCaTjBA.crl rsync://rpki.ripe.net/repository/DEFAULT/35/4f5903-ff9f-4ec6-86c0-07b0ea75c24b/1/Y2QsHKPTjH4V5ofg2UhceCaTjBA.mft rsync://rpki.ripe.net/repository/DEFAULT/Y2QsHKPTjH4V5ofg2UhceCaTjBA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:35:eb:e1:92:6b:ee:b5:77:2c:32:23:6e:36:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63642c1ca3d38c7e15e687e0d9485c7826938c10 Validity Not Before: Dec 6 01:01:02 2025 GMT Not After : Dec 7 01:01:02 2025 GMT Subject: CN=1a2ec16379ec8b693e0fc680e73acf96493b32b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:7b:e0:a7:ae:35:e4:05:08:51:92:0a:58:25: c5:74:7a:db:39:66:51:da:46:78:b8:c2:a2:3d:bd: 8c:0c:08:5f:7c:a0:cc:37:75:ef:62:11:ce:f0:db: 83:08:cd:53:e9:1a:9b:9c:6c:b3:1c:9b:fa:b2:01: 6d:21:6f:01:f2:74:83:43:b3:35:63:5a:1e:49:a1: c6:03:ac:95:5e:7b:b0:36:04:5d:f7:aa:99:f4:8f: 11:c5:f1:6f:fe:23:11:16:ae:eb:b1:86:bd:95:d4: 76:91:22:cc:d1:a7:a0:46:96:41:12:b9:34:cc:08: 0d:8b:09:3d:64:53:cb:5f:52:ef:99:38:be:0d:a9: 0e:55:45:aa:65:7e:e5:aa:f5:c5:49:27:85:e3:5e: 81:37:11:db:4e:72:6e:bd:f5:d6:45:36:31:5d:03: 64:f8:13:64:73:06:17:39:9c:dd:82:4a:12:ca:66: 76:5e:8d:9f:4b:9d:0e:13:1b:14:5c:f4:0d:57:e7: f2:78:a4:95:a3:3a:16:61:0f:76:62:6b:d5:75:44: f3:9d:8c:88:f0:c4:d5:fc:e7:a3:34:31:e3:7c:a1: 9b:19:24:1f:40:02:66:9c:72:da:d4:46:08:3d:12: 6d:c0:4b:26:f7:9f:b7:8f:13:01:b8:90:68:e7:18: 83:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:2E:C1:63:79:EC:8B:69:3E:0F:C6:80:E7:3A:CF:96:49:3B:32:B8 X509v3 Authority Key Identifier: keyid:63:64:2C:1C:A3:D3:8C:7E:15:E6:87:E0:D9:48:5C:78:26:93:8C:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y2QsHKPTjH4V5ofg2UhceCaTjBA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/4f5903-ff9f-4ec6-86c0-07b0ea75c24b/1/Y2QsHKPTjH4V5ofg2UhceCaTjBA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/4f5903-ff9f-4ec6-86c0-07b0ea75c24b/1/Y2QsHKPTjH4V5ofg2UhceCaTjBA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:12:58:06:94:25:27:11:27:28:bb:82:98:65:a8:60:34:83: df:88:8d:36:e7:1d:13:0f:7e:8a:32:d7:2e:36:3f:5c:02:b7: 4d:ff:6c:a0:8e:da:ba:b5:cb:0a:cf:2e:4d:1a:77:38:94:08: 1a:50:f4:c7:3d:c5:97:4a:52:61:03:2c:ba:32:ea:73:44:13: 46:59:2f:b8:2f:07:66:f9:9b:a0:c0:8f:b0:2b:e4:ee:cd:fc: 7e:36:8f:8e:76:41:c3:f0:c6:d7:55:8e:aa:d4:31:ff:a9:85: a8:8e:13:a9:9f:8a:b1:3f:d5:83:1f:8d:c2:7f:2a:a5:ec:c1: 12:a0:ef:d2:2d:46:11:17:2e:60:8f:26:8d:87:37:f7:98:79: 1c:26:63:e0:e4:fe:5f:da:97:39:5b:96:25:5c:45:44:f5:d2: 9a:66:68:4d:d9:b0:65:ee:10:21:d0:d6:72:c5:7c:59:f1:1a: 06:b0:89:4a:d5:d8:34:48:4c:bd:32:fd:df:c3:27:aa:e0:0c: 9b:94:a6:ad:4a:4b:9a:46:52:a7:4e:68:4e:a0:fb:b2:f0:a4: cc:bd:2c:ee:c2:36:c7:79:7a:a4:ed:1e:e5:2b:04:16:d8:da: 57:7d:60:33:02:ec:6a:e8:a4:fc:ef:30:4d:c8:68:6c:76:02: 81:93:a2:7e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLTXr4ZJr7rV3LDIjbjaZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzNjQyYzFjYTNkMzhjN2UxNWU2ODdlMGQ5NDg1Yzc4MjY5 MzhjMTAwHhcNMjUxMjA2MDEwMTAyWhcNMjUxMjA3MDEwMTAyWjAzMTEwLwYDVQQD EygxYTJlYzE2Mzc5ZWM4YjY5M2UwZmM2ODBlNzNhY2Y5NjQ5M2IzMmI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArnvgp6415AUIUZIKWCXFdHrbOWZR 2kZ4uMKiPb2MDAhffKDMN3XvYhHO8NuDCM1T6RqbnGyzHJv6sgFtIW8B8nSDQ7M1 Y1oeSaHGA6yVXnuwNgRd96qZ9I8RxfFv/iMRFq7rsYa9ldR2kSLM0aegRpZBErk0 zAgNiwk9ZFPLX1LvmTi+DakOVUWqZX7lqvXFSSeF416BNxHbTnJuvfXWRTYxXQNk +BNkcwYXOZzdgkoSymZ2Xo2fS50OExsUXPQNV+fyeKSVozoWYQ92YmvVdUTznYyI 8MTV/OejNDHjfKGbGSQfQAJmnHLa1EYIPRJtwEsm95+3jxMBuJBo5xiDcQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBouwWN57ItpPg/GgOc6z5ZJOzK4MB8GA1UdIwQY MBaAFGNkLByj04x+FeaH4NlIXHgmk4wQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWTJRc0hLUFRqSDRWNW9mZzJVaGNlQ2FUakJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS80ZjU5MDMtZmY5Zi00ZWM2LTg2YzAt MDdiMGVhNzVjMjRiLzEvWTJRc0hLUFRqSDRWNW9mZzJVaGNlQ2FUakJBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS80ZjU5MDMtZmY5Zi00ZWM2LTg2YzAtMDdiMGVhNzVjMjRi LzEvWTJRc0hLUFRqSDRWNW9mZzJVaGNlQ2FUakJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsBJYBpQl JxEnKLuCmGWoYDSD34iNNucdEw9+ijLXLjY/XAK3Tf9soI7aurXLCs8uTRp3OJQI GlD0xz3Fl0pSYQMsujLqc0QTRlkvuC8HZvmboMCPsCvk7s38fjaPjnZBw/DG11WO qtQx/6mFqI4TqZ+KsT/Vgx+Nwn8qpezBEqDv0i1GERcuYI8mjYc395h5HCZj4OT+ X9qXOVuWJVxFRPXSmmZoTdmwZe4QIdDWcsV8WfEaBrCJStXYNEhMvTL938MnquAM m5SmrUpLmkZSp05oTqD7svCkzL0s7sI2x3l6pO0e5SsEFtjaV31gMwLsauik/O8w TchobHYCgZOifg== -----END CERTIFICATE-----Generated at Sat Dec 6 09:59:54 2025 by rpki-client