This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/dd1ddf-73cf-4bb2-8a6e-6e4aec86fe1e/1/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.mft File: Y3EE2Sfn4e-P67_93ygUVJUBEJQ.mft (raw, json) Hash identifier: zdX7PnqNndRrpfR1x0jxkk4mhnnKE+t6MijstBM9GnY= Subject key identifier: 9E:62:B9:BF:BD:30:14:8D:DE:30:DA:17:26:0B:26:C8:96:22:50:8E Authority key identifier: 63:71:04:D9:27:E7:E1:EF:8F:EB:BF:FD:DF:28:14:54:95:01:10:94 Certificate issuer: /CN=637104d927e7e1ef8febbffddf28145495011094 Certificate serial: 019AF5E5EFBA7FBFE64A72AD1D0CB15FC1E3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/dd1ddf-73cf-4bb2-8a6e-6e4aec86fe1e/1/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.mft Manifest number: 168F Signing time: Sat 06 Dec 2025 23:01:18 +0000 Manifest this update: Sat 06 Dec 2025 23:01:18 +0000 Manifest next update: Sun 07 Dec 2025 23:01:18 +0000 Files and hashes: 1: MluEItNzhsZo0KlEkHW2gGjFsZA.roa (hash: hoWRhUtEL622AwT/94vc4oZQjrwHDprmF8UFYzmZ0qI=) 2: Y3EE2Sfn4e-P67_93ygUVJUBEJQ.crl (hash: p81yiwcY/TxGvGp7lSmvdhLOuJTVdtJnpewE1i3sr7E=) 3: qdzMsGh5S6wiS7QQa-GGYlBb1qM.roa (hash: 6/bZRBO2jbasIfkz3gmkcsaKY6ttqzhNRaTLSgH7xuI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/dd1ddf-73cf-4bb2-8a6e-6e4aec86fe1e/1/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.crl rsync://rpki.ripe.net/repository/DEFAULT/59/dd1ddf-73cf-4bb2-8a6e-6e4aec86fe1e/1/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:e5:ef:ba:7f:bf:e6:4a:72:ad:1d:0c:b1:5f:c1:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=637104d927e7e1ef8febbffddf28145495011094 Validity Not Before: Dec 6 23:01:18 2025 GMT Not After : Dec 7 23:01:18 2025 GMT Subject: CN=9e62b9bfbd30148dde30da17260b26c89622508e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:48:35:9c:f5:b8:a5:5c:78:2c:dd:6f:85:68: f8:16:ea:af:da:8e:68:84:12:29:71:d7:bb:95:cd: ab:03:c9:75:cc:d2:c0:04:ef:13:d1:b7:ca:3c:23: 68:ca:cb:25:04:b1:20:b5:1a:28:fb:16:a7:c2:f9: 6c:2b:84:95:fb:f7:32:0a:a4:ab:15:49:18:50:8e: 61:02:34:12:d7:d3:b5:13:30:14:ba:67:da:1e:8b: fe:07:f4:35:c7:7d:65:29:53:67:59:cd:46:a8:f4: 0b:f4:1c:fe:1c:50:70:02:9b:be:08:85:58:5a:3c: 62:12:48:0a:b6:d4:ce:6f:16:84:30:87:1f:89:6d: 3d:cb:f4:51:f2:a1:79:56:38:52:51:49:32:05:0f: 39:96:61:bb:f6:10:1c:6c:e9:8b:c0:ae:47:45:b1: eb:3b:c0:ba:a3:2e:d0:f4:81:d3:31:9e:92:ad:45: 6a:68:ed:25:55:03:b8:77:46:ed:d3:99:f3:32:9f: 74:15:29:6f:81:2b:d8:07:7b:8e:fd:ff:b6:13:4a: 5b:a8:e3:60:b2:84:08:f4:ae:08:32:79:70:3d:2b: c9:ea:66:2a:a7:1d:23:49:7b:fa:39:3b:db:12:ec: 3d:d5:b7:3f:20:71:23:63:13:d6:59:a2:67:0b:8b: 88:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:62:B9:BF:BD:30:14:8D:DE:30:DA:17:26:0B:26:C8:96:22:50:8E X509v3 Authority Key Identifier: keyid:63:71:04:D9:27:E7:E1:EF:8F:EB:BF:FD:DF:28:14:54:95:01:10:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/dd1ddf-73cf-4bb2-8a6e-6e4aec86fe1e/1/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/dd1ddf-73cf-4bb2-8a6e-6e4aec86fe1e/1/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:06:4f:c0:fa:4a:38:01:b4:06:fd:b3:97:58:13:b0:c1:6e: d4:88:82:6b:d1:92:64:4d:3b:5a:6b:fe:4d:d0:ff:b2:2d:c1: 08:08:48:2b:9a:0f:0e:f9:dc:f8:b4:c2:ac:f4:e5:1f:af:ac: a2:52:38:48:5f:ae:eb:1e:32:63:6b:60:99:8c:7d:83:4a:7d: 93:62:4d:68:c7:6e:6c:59:f3:6d:2d:92:2a:ed:be:da:a4:9c: 95:a1:91:4e:9e:b0:57:f7:8c:3b:76:a4:e1:23:b3:c2:ff:7e: bf:d9:2c:a1:05:4d:8c:0c:48:75:4b:6a:41:38:15:90:7f:60: 9b:5b:08:85:12:cf:f8:41:c9:0e:a9:fb:a7:0c:d1:be:56:f0: 2a:5d:05:02:01:1c:68:43:10:b0:9a:e0:71:f7:da:b0:71:4f: 33:fe:35:a8:72:b6:1a:fc:9b:5d:8b:af:e8:2c:30:45:11:c2: 00:d2:43:53:56:36:56:eb:c7:8a:c1:4c:20:7e:90:4a:9e:f4: 7f:b1:48:41:59:e4:6f:d9:66:d7:68:ca:ab:e8:ec:1e:a9:5f: c8:71:e8:0a:21:59:95:ea:1c:13:11:e0:33:42:b3:13:cc:9e: 92:15:64:4e:e8:bd:10:1b:c8:60:1d:15:9d:96:f3:b0:49:73: c8:d3:2c:84 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr15e+6f7/mSnKtHQyxX8HjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzNzEwNGQ5MjdlN2UxZWY4ZmViYmZmZGRmMjgxNDU0OTUw MTEwOTQwHhcNMjUxMjA2MjMwMTE4WhcNMjUxMjA3MjMwMTE4WjAzMTEwLwYDVQQD Eyg5ZTYyYjliZmJkMzAxNDhkZGUzMGRhMTcyNjBiMjZjODk2MjI1MDhlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtkg1nPW4pVx4LN1vhWj4Fuqv2o5o hBIpcde7lc2rA8l1zNLABO8T0bfKPCNoysslBLEgtRoo+xanwvlsK4SV+/cyCqSr FUkYUI5hAjQS19O1EzAUumfaHov+B/Q1x31lKVNnWc1GqPQL9Bz+HFBwApu+CIVY WjxiEkgKttTObxaEMIcfiW09y/RR8qF5VjhSUUkyBQ85lmG79hAcbOmLwK5HRbHr O8C6oy7Q9IHTMZ6SrUVqaO0lVQO4d0bt05nzMp90FSlvgSvYB3uO/f+2E0pbqONg soQI9K4IMnlwPSvJ6mYqpx0jSXv6OTvbEuw91bc/IHEjYxPWWaJnC4uI6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ5iub+9MBSN3jDaFyYLJsiWIlCOMB8GA1UdIwQY MBaAFGNxBNkn5+Hvj+u//d8oFFSVARCUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWTNFRTJTZm40ZS1QNjdfOTN5Z1VWSlVCRUpRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS9kZDFkZGYtNzNjZi00YmIyLThhNmUt NmU0YWVjODZmZTFlLzEvWTNFRTJTZm40ZS1QNjdfOTN5Z1VWSlVCRUpRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS9kZDFkZGYtNzNjZi00YmIyLThhNmUtNmU0YWVjODZmZTFl LzEvWTNFRTJTZm40ZS1QNjdfOTN5Z1VWSlVCRUpRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFgZPwPpK OAG0Bv2zl1gTsMFu1IiCa9GSZE07Wmv+TdD/si3BCAhIK5oPDvnc+LTCrPTlH6+s olI4SF+u6x4yY2tgmYx9g0p9k2JNaMdubFnzbS2SKu2+2qSclaGRTp6wV/eMO3ak 4SOzwv9+v9ksoQVNjAxIdUtqQTgVkH9gm1sIhRLP+EHJDqn7pwzRvlbwKl0FAgEc aEMQsJrgcffasHFPM/41qHK2GvybXYuv6CwwRRHCANJDU1Y2VuvHisFMIH6QSp70 f7FIQVnkb9lm12jKq+jsHqlfyHHoCiFZleocExHgM0KzE8yekhVkTui9EBvIYB0V nZbzsElzyNMshA== -----END CERTIFICATE-----Generated at Sun Dec 7 04:52:17 2025 by rpki-client