This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/661285-7965-4fa4-baab-74c1405c3475/1/Y_qsKbkFNPkan7DrYxjwAZRRxu4.mft File: Y_qsKbkFNPkan7DrYxjwAZRRxu4.mft (raw, json) Hash identifier: 6oyuJDSnsyU9WRqCLpLK/Wd3aCfpM+htirTpIBZhzdc= Subject key identifier: 27:44:95:84:F3:51:8E:CF:30:0C:64:36:23:F6:94:34:BD:25:50:C5 Authority key identifier: 63:FA:AC:29:B9:05:34:F9:1A:9F:B0:EB:63:18:F0:01:94:51:C6:EE Certificate issuer: /CN=63faac29b90534f91a9fb0eb6318f0019451c6ee Certificate serial: 019AF23FB91D3492F6D17CC09365A986C6EF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y_qsKbkFNPkan7DrYxjwAZRRxu4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/661285-7965-4fa4-baab-74c1405c3475/1/Y_qsKbkFNPkan7DrYxjwAZRRxu4.mft Manifest number: 0D62 Signing time: Sat 06 Dec 2025 06:00:53 +0000 Manifest this update: Sat 06 Dec 2025 06:00:53 +0000 Manifest next update: Sun 07 Dec 2025 06:00:53 +0000 Files and hashes: 1: Y_qsKbkFNPkan7DrYxjwAZRRxu4.crl (hash: 0WuTeBH0K5HRD6uGmhSFrIx4jqQ0UrwuO8/+ZQB/WyA=) 2: _B7qhSnCxfn7CerNmWLFyrIUzIo.roa (hash: SylKEkKlUGkISQweMYeNKNB3Kfx1l1zxuoZbI4A8/rE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/661285-7965-4fa4-baab-74c1405c3475/1/Y_qsKbkFNPkan7DrYxjwAZRRxu4.crl rsync://rpki.ripe.net/repository/DEFAULT/48/661285-7965-4fa4-baab-74c1405c3475/1/Y_qsKbkFNPkan7DrYxjwAZRRxu4.mft rsync://rpki.ripe.net/repository/DEFAULT/Y_qsKbkFNPkan7DrYxjwAZRRxu4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:b9:1d:34:92:f6:d1:7c:c0:93:65:a9:86:c6:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63faac29b90534f91a9fb0eb6318f0019451c6ee Validity Not Before: Dec 6 06:00:53 2025 GMT Not After : Dec 7 06:00:53 2025 GMT Subject: CN=27449584f3518ecf300c643623f69434bd2550c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:1f:37:21:22:a1:19:b2:01:33:e5:2a:a3:b6: 2c:ec:ef:96:b0:c9:4f:dd:92:ed:36:cc:89:f0:ad: 29:01:06:68:57:05:2f:71:0e:37:94:93:20:5d:fb: 23:25:96:ff:3c:2c:2b:61:1f:ec:2f:28:29:41:e4: 4b:41:25:84:64:0e:a3:bf:ac:42:c5:14:89:97:8b: f0:48:88:ad:fc:75:63:e0:03:48:23:f3:27:2f:68: bd:d4:70:46:aa:2d:9c:4f:90:45:31:e5:a8:8d:52: 31:c6:b8:31:6d:47:af:2b:4f:e8:19:44:17:47:cf: 77:04:e0:f3:54:fa:6f:83:5b:2e:f9:28:1a:4a:7c: 20:12:dd:68:96:6e:e3:77:d0:e7:9c:84:09:d3:6c: 51:09:e4:5f:83:ff:0e:db:0c:d1:7c:e0:2e:bb:21: bb:fa:ac:78:35:eb:cd:27:eb:bf:82:97:ca:d1:e1: 15:92:c5:0d:55:43:43:95:d7:3c:26:9f:4a:85:10: a4:f8:ba:06:68:4a:f3:79:0a:16:42:35:cc:e4:7a: 97:f1:32:d1:28:e0:bb:e7:5e:78:b9:d3:83:d0:88: ef:02:18:cb:36:d8:7a:60:00:c1:29:89:ab:68:24: 76:e6:d8:eb:30:8a:54:ce:7b:2f:83:dc:64:2b:65: ce:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:44:95:84:F3:51:8E:CF:30:0C:64:36:23:F6:94:34:BD:25:50:C5 X509v3 Authority Key Identifier: keyid:63:FA:AC:29:B9:05:34:F9:1A:9F:B0:EB:63:18:F0:01:94:51:C6:EE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y_qsKbkFNPkan7DrYxjwAZRRxu4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/661285-7965-4fa4-baab-74c1405c3475/1/Y_qsKbkFNPkan7DrYxjwAZRRxu4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/661285-7965-4fa4-baab-74c1405c3475/1/Y_qsKbkFNPkan7DrYxjwAZRRxu4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:d0:43:05:7d:12:26:a5:09:e7:9e:59:34:2b:a2:ab:85:c1: 64:de:e4:b8:62:72:18:fb:02:a1:e4:ea:20:95:6a:e1:69:6a: 7c:ed:3e:dd:8a:65:7e:c2:ce:62:31:a3:5b:0d:c9:a8:71:da: 49:79:9e:e8:cc:7c:25:c4:1e:1e:42:ea:25:c1:7e:44:88:be: 73:39:ef:b7:b1:1a:bc:d7:02:3f:5c:c1:16:0e:2f:4a:4a:c9: 9c:99:ed:21:ab:55:9d:f6:0e:35:81:62:5b:ba:ad:dd:2f:40: f3:bc:29:45:fe:19:07:20:ae:d1:07:b8:a2:2a:ca:c0:df:a5: 29:08:22:4d:be:4b:4f:20:21:9d:6a:21:2f:13:4a:47:d4:ba: 23:e7:2c:d0:65:f6:3d:d1:08:ec:af:aa:b0:62:1e:5f:a3:87: 28:ff:bf:87:80:7e:37:8d:d3:48:5c:ad:50:5d:8c:44:ef:e8: 75:40:c6:3d:d5:17:ab:99:93:39:86:16:4e:b1:2a:03:46:80: 26:6c:d7:95:43:95:00:84:c2:87:8d:cc:1d:c0:e6:88:f5:2a: 28:fd:f6:e4:bc:b3:99:3d:5e:9a:8f:6c:51:ae:70:92:e5:02: b1:10:f8:90:51:cc:8d:1d:90:63:9d:a9:e8:14:d5:c7:4e:f9: f2:b2:8e:ee -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP7kdNJL20XzAk2WphsbvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZmFhYzI5YjkwNTM0ZjkxYTlmYjBlYjYzMThmMDAxOTQ1 MWM2ZWUwHhcNMjUxMjA2MDYwMDUzWhcNMjUxMjA3MDYwMDUzWjAzMTEwLwYDVQQD EygyNzQ0OTU4NGYzNTE4ZWNmMzAwYzY0MzYyM2Y2OTQzNGJkMjU1MGM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApR83ISKhGbIBM+Uqo7Ys7O+WsMlP 3ZLtNsyJ8K0pAQZoVwUvcQ43lJMgXfsjJZb/PCwrYR/sLygpQeRLQSWEZA6jv6xC xRSJl4vwSIit/HVj4ANII/MnL2i91HBGqi2cT5BFMeWojVIxxrgxbUevK0/oGUQX R893BODzVPpvg1su+SgaSnwgEt1olm7jd9DnnIQJ02xRCeRfg/8O2wzRfOAuuyG7 +qx4NevNJ+u/gpfK0eEVksUNVUNDldc8Jp9KhRCk+LoGaErzeQoWQjXM5HqX8TLR KOC75154udOD0IjvAhjLNth6YADBKYmraCR25tjrMIpUznsvg9xkK2XOLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCdElYTzUY7PMAxkNiP2lDS9JVDFMB8GA1UdIwQY MBaAFGP6rCm5BTT5Gp+w62MY8AGUUcbuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWV9xc0tia0ZOUGthbjdEcll4andBWlJSeHU0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC82NjEyODUtNzk2NS00ZmE0LWJhYWIt NzRjMTQwNWMzNDc1LzEvWV9xc0tia0ZOUGthbjdEcll4andBWlJSeHU0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC82NjEyODUtNzk2NS00ZmE0LWJhYWItNzRjMTQwNWMzNDc1 LzEvWV9xc0tia0ZOUGthbjdEcll4andBWlJSeHU0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARdBDBX0S JqUJ555ZNCuiq4XBZN7kuGJyGPsCoeTqIJVq4WlqfO0+3YplfsLOYjGjWw3JqHHa SXme6Mx8JcQeHkLqJcF+RIi+cznvt7EavNcCP1zBFg4vSkrJnJntIatVnfYONYFi W7qt3S9A87wpRf4ZByCu0Qe4oirKwN+lKQgiTb5LTyAhnWohLxNKR9S6I+cs0GX2 PdEI7K+qsGIeX6OHKP+/h4B+N43TSFytUF2MRO/odUDGPdUXq5mTOYYWTrEqA0aA JmzXlUOVAITCh43MHcDmiPUqKP325LyzmT1emo9sUa5wkuUCsRD4kFHMjR2QY52p 6BTVx0758rKO7g== -----END CERTIFICATE-----Generated at Sat Dec 6 08:30:57 2025 by rpki-client