This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/ebf304-5ddb-4569-aa1e-d45c12472935/1/Y0cDI_IxIpymkfPglRnBrILy6gE.mft File: Y0cDI_IxIpymkfPglRnBrILy6gE.mft (raw, json) Hash identifier: /+j48OsQadw9bdOmsZkkqQZwjBTNMqyHtPFzF5y6cq8= Subject key identifier: 71:8C:DE:4A:3B:23:3B:21:6D:9D:A2:9F:74:07:8B:B9:AE:DE:B3:D5 Authority key identifier: 63:47:03:23:F2:31:22:9C:A6:91:F3:E0:95:19:C1:AC:82:F2:EA:01 Certificate issuer: /CN=63470323f231229ca691f3e09519c1ac82f2ea01 Certificate serial: 019AF12EE1DD623CB8BB463AE224C66C0D23 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y0cDI_IxIpymkfPglRnBrILy6gE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/ebf304-5ddb-4569-aa1e-d45c12472935/1/Y0cDI_IxIpymkfPglRnBrILy6gE.mft Manifest number: 024B Signing time: Sat 06 Dec 2025 01:02:52 +0000 Manifest this update: Sat 06 Dec 2025 01:02:52 +0000 Manifest next update: Sun 07 Dec 2025 01:02:52 +0000 Files and hashes: 1: WwWZ_i4rGRDbq67jPO4r6ZSGoFI.roa (hash: nLu8gOVrrY7uwr4TxE8bOFSJg3uFSsR06swIilrL5NA=) 2: Y0cDI_IxIpymkfPglRnBrILy6gE.crl (hash: gTPWHu6o79atMBHfzplY98TeeJ+MzjtQ854X1HP3Wu0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/ebf304-5ddb-4569-aa1e-d45c12472935/1/Y0cDI_IxIpymkfPglRnBrILy6gE.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/ebf304-5ddb-4569-aa1e-d45c12472935/1/Y0cDI_IxIpymkfPglRnBrILy6gE.mft rsync://rpki.ripe.net/repository/DEFAULT/Y0cDI_IxIpymkfPglRnBrILy6gE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:e1:dd:62:3c:b8:bb:46:3a:e2:24:c6:6c:0d:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63470323f231229ca691f3e09519c1ac82f2ea01 Validity Not Before: Dec 6 01:02:52 2025 GMT Not After : Dec 7 01:02:52 2025 GMT Subject: CN=718cde4a3b233b216d9da29f74078bb9aedeb3d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:e3:19:6e:dd:30:5f:94:f1:94:9e:4e:19:77: 86:4b:11:27:83:4c:94:78:0f:6b:3c:57:15:7a:b1: c1:90:92:d6:5f:ec:c2:0b:df:db:64:b1:80:e9:3c: 57:76:3a:46:af:f5:4d:15:3e:3e:39:4e:23:54:ab: e1:88:bb:0d:72:7a:5f:f8:ef:30:db:63:8b:5d:11: 3d:43:c6:f8:a7:c0:1d:c3:ea:71:79:fd:0e:b2:1e: 99:dd:2b:23:05:6a:b4:d5:f2:4a:2a:8c:97:51:8b: dc:b5:a5:9b:e4:ee:0c:b5:46:c4:c4:22:ee:74:56: 82:d6:7c:7b:78:f0:42:c3:e1:36:0d:74:0e:42:cb: 40:4b:d0:8d:bf:ac:13:ff:cf:f4:5d:90:52:67:70: d5:a5:ee:57:03:f5:51:72:6a:fa:16:ea:e6:17:ca: 68:eb:dd:53:62:0d:d6:5c:b4:bd:39:93:d4:bc:9c: 35:96:bc:67:86:82:98:42:80:59:3b:2f:2e:7a:ae: 16:4f:e6:6b:16:6a:43:ac:73:41:4c:8c:e9:19:ff: 54:64:ac:ec:51:bd:26:61:8d:c5:fa:15:65:5d:68: eb:92:fe:98:a3:d3:90:8d:2d:de:09:3a:9e:ef:c2: a2:58:a0:33:39:9a:5d:b7:fa:cf:df:76:e2:db:6e: 99:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:8C:DE:4A:3B:23:3B:21:6D:9D:A2:9F:74:07:8B:B9:AE:DE:B3:D5 X509v3 Authority Key Identifier: keyid:63:47:03:23:F2:31:22:9C:A6:91:F3:E0:95:19:C1:AC:82:F2:EA:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y0cDI_IxIpymkfPglRnBrILy6gE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/ebf304-5ddb-4569-aa1e-d45c12472935/1/Y0cDI_IxIpymkfPglRnBrILy6gE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/ebf304-5ddb-4569-aa1e-d45c12472935/1/Y0cDI_IxIpymkfPglRnBrILy6gE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:22:54:11:f7:77:bf:71:e6:7e:1d:09:2a:62:c2:f5:57:26: ac:f1:4e:c3:5a:52:b8:cc:df:be:04:28:2f:c4:ce:10:09:19: c8:7b:59:59:0d:67:21:f8:bd:bb:55:dc:30:ea:da:86:14:91: e0:53:39:2b:60:ca:00:26:c5:df:5d:15:6d:76:90:92:10:0d: 13:bc:3a:10:b8:a5:43:55:79:f1:97:66:6b:c3:d0:42:62:77: 0e:2d:a2:d1:4a:8b:8a:29:03:95:6a:3e:73:49:d5:83:54:8e: 32:4d:cd:dc:ae:17:f4:ee:24:6f:0d:c4:53:de:f8:dd:17:34: 28:cf:6d:a8:8a:d7:c3:80:ef:f5:db:9c:32:32:70:c1:d5:e1: ed:53:a5:f3:b3:98:0a:65:60:f2:ba:9d:83:5d:a4:23:41:d0: 72:91:4d:dc:9b:9b:26:31:02:d2:f2:2c:ba:82:fe:db:a2:eb: 88:c7:d8:7a:ff:08:17:48:5f:4b:a3:e5:b1:f1:92:12:af:4b: 41:8e:fe:9c:b9:3a:ab:5e:35:04:52:06:ba:e9:b9:ff:7c:de: d2:ba:0b:cd:fa:2e:87:4b:88:1e:7d:72:e5:2c:81:ed:9d:c4: 77:bf:1b:e6:52:1b:bc:4d:04:52:8c:fd:f9:11:9d:8a:fa:39: 21:9b:72:ac -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLuHdYjy4u0Y64iTGbA0jMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzNDcwMzIzZjIzMTIyOWNhNjkxZjNlMDk1MTljMWFjODJm MmVhMDEwHhcNMjUxMjA2MDEwMjUyWhcNMjUxMjA3MDEwMjUyWjAzMTEwLwYDVQQD Eyg3MThjZGU0YTNiMjMzYjIxNmQ5ZGEyOWY3NDA3OGJiOWFlZGViM2Q1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0OMZbt0wX5TxlJ5OGXeGSxEng0yU eA9rPFcVerHBkJLWX+zCC9/bZLGA6TxXdjpGr/VNFT4+OU4jVKvhiLsNcnpf+O8w 22OLXRE9Q8b4p8Adw+pxef0Osh6Z3SsjBWq01fJKKoyXUYvctaWb5O4MtUbExCLu dFaC1nx7ePBCw+E2DXQOQstAS9CNv6wT/8/0XZBSZ3DVpe5XA/VRcmr6FurmF8po 691TYg3WXLS9OZPUvJw1lrxnhoKYQoBZOy8ueq4WT+ZrFmpDrHNBTIzpGf9UZKzs Ub0mYY3F+hVlXWjrkv6Yo9OQjS3eCTqe78KiWKAzOZpdt/rP33bi226ZswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHGM3ko7IzshbZ2in3QHi7mu3rPVMB8GA1UdIwQY MBaAFGNHAyPyMSKcppHz4JUZwayC8uoBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWTBjRElfSXhJcHlta2ZQZ2xSbkJySUx5NmdFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy9lYmYzMDQtNWRkYi00NTY5LWFhMWUt ZDQ1YzEyNDcyOTM1LzEvWTBjRElfSXhJcHlta2ZQZ2xSbkJySUx5NmdFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy9lYmYzMDQtNWRkYi00NTY5LWFhMWUtZDQ1YzEyNDcyOTM1 LzEvWTBjRElfSXhJcHlta2ZQZ2xSbkJySUx5NmdFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlyJUEfd3 v3Hmfh0JKmLC9VcmrPFOw1pSuMzfvgQoL8TOEAkZyHtZWQ1nIfi9u1XcMOrahhSR 4FM5K2DKACbF310VbXaQkhANE7w6ELilQ1V58Zdma8PQQmJ3Di2i0UqLiikDlWo+ c0nVg1SOMk3N3K4X9O4kbw3EU9743Rc0KM9tqIrXw4Dv9ducMjJwwdXh7VOl87OY CmVg8rqdg12kI0HQcpFN3JubJjEC0vIsuoL+26LriMfYev8IF0hfS6PlsfGSEq9L QY7+nLk6q141BFIGuum5/3ze0roLzfouh0uIHn1y5SyB7Z3Ed78b5lIbvE0EUoz9 +RGdivo5IZtyrA== -----END CERTIFICATE-----Generated at Sat Dec 6 11:25:34 2025 by rpki-client