This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/99cbcf-7d4f-4b12-a577-cc8054a51d66/1/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.mft File: Y74I2hqzHj-Y9VT6ATc_lMyQEe0.mft (raw, json) Hash identifier: l7myAUSb+qrp6ZPaKrkKs1BYc4w7vqUH3G/LLxolsr0= Subject key identifier: C1:15:EF:19:14:F6:E0:4E:C5:A4:33:DB:6C:BA:3B:0C:10:01:A6:DF Authority key identifier: 63:BE:08:DA:1A:B3:1E:3F:98:F5:54:FA:01:37:3F:94:CC:90:11:ED Certificate issuer: /CN=63be08da1ab31e3f98f554fa01373f94cc9011ed Certificate serial: 019AF49C2FADEBB7E445F8FAC91B46BBF664 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/99cbcf-7d4f-4b12-a577-cc8054a51d66/1/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.mft Manifest number: 11C8 Signing time: Sat 06 Dec 2025 17:01:07 +0000 Manifest this update: Sat 06 Dec 2025 17:01:07 +0000 Manifest next update: Sun 07 Dec 2025 17:01:07 +0000 Files and hashes: 1: Je7r8p2i15SExZL77Clbe_3pLIU.roa (hash: q5RkBfa8EqGTkb+E8fZ8KT2+q7JMLCFvRnhSE6vnDeU=) 2: Y74I2hqzHj-Y9VT6ATc_lMyQEe0.crl (hash: 6ogjSil9/J0P7i7X/SXqB/KmFya5oPmUq4+3vnHQ7h8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/99cbcf-7d4f-4b12-a577-cc8054a51d66/1/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.crl rsync://rpki.ripe.net/repository/DEFAULT/64/99cbcf-7d4f-4b12-a577-cc8054a51d66/1/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.mft rsync://rpki.ripe.net/repository/DEFAULT/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:9c:2f:ad:eb:b7:e4:45:f8:fa:c9:1b:46:bb:f6:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63be08da1ab31e3f98f554fa01373f94cc9011ed Validity Not Before: Dec 6 17:01:07 2025 GMT Not After : Dec 7 17:01:07 2025 GMT Subject: CN=c115ef1914f6e04ec5a433db6cba3b0c1001a6df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:f5:6c:fc:99:53:66:c7:01:28:d7:ef:43:20: 4a:9e:37:12:d8:63:91:ae:61:11:97:09:b3:4c:66: ae:08:e3:9f:4b:8f:52:b1:8b:9a:be:77:62:bc:56: f6:3b:02:90:e3:65:4d:46:6b:be:6a:64:ef:a8:18: da:e2:ec:20:c2:c2:bc:e5:5c:a2:46:4a:6a:fb:7a: 32:10:a0:85:17:7e:bc:37:e0:a6:9d:6f:aa:77:97: 74:ed:5a:d2:01:06:9e:0d:75:15:80:9d:62:6c:4c: ae:8a:1f:d2:f5:33:3b:5d:57:22:04:eb:1a:74:5c: 34:74:37:e6:12:6e:75:16:0a:97:08:b4:50:cd:f8: d6:cf:13:2e:61:9f:3e:22:42:63:2b:39:d1:e6:be: 2a:f9:f7:3a:aa:64:8e:58:32:c0:81:a3:8e:b9:4e: 55:e7:12:60:c4:6b:d2:63:b2:2c:c7:db:38:a3:8b: fd:61:90:dc:9e:5f:72:e1:5a:f0:22:07:e6:2b:aa: 59:30:3c:0b:0f:cf:2f:69:46:6d:e1:0c:89:1e:4d: 6e:45:8f:77:2a:14:a5:e9:74:ec:de:d1:04:67:8c: c6:fc:4d:3f:a0:1e:06:92:88:cc:c4:d3:94:d2:7a: 3d:91:6b:88:b0:c4:15:10:79:d6:51:ee:72:5d:13: c8:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:15:EF:19:14:F6:E0:4E:C5:A4:33:DB:6C:BA:3B:0C:10:01:A6:DF X509v3 Authority Key Identifier: keyid:63:BE:08:DA:1A:B3:1E:3F:98:F5:54:FA:01:37:3F:94:CC:90:11:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/99cbcf-7d4f-4b12-a577-cc8054a51d66/1/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/99cbcf-7d4f-4b12-a577-cc8054a51d66/1/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:94:04:eb:a7:60:80:22:f3:12:bc:95:e1:a2:2f:d0:e3:b0: 7b:80:f1:13:31:65:64:4c:51:db:6e:85:68:c9:32:bd:18:99: cf:20:87:7c:5c:bf:7c:56:de:b6:3d:e8:50:58:3f:90:23:5c: eb:8a:d9:76:1f:c2:af:67:31:02:d7:4a:c9:1c:fa:0b:27:5c: e4:7c:99:ea:87:8d:e9:43:11:b9:5c:02:4a:b1:33:9a:ae:9a: f4:ac:72:2b:00:6a:0e:10:dc:01:92:2a:4b:7e:54:27:4b:ff: 1e:93:5d:ee:c7:36:f4:de:8f:6c:91:fa:43:27:78:a8:cd:f3: 5b:d1:97:6d:9d:41:59:9c:a3:0d:dd:77:46:3b:7d:8a:c4:a4: bf:8b:a3:9d:f5:d2:4b:b1:18:42:d7:49:b0:14:4b:b2:74:f9: 10:e0:c4:fb:f6:77:13:7a:3a:9a:db:71:64:72:8d:0a:33:51: 21:1e:73:f8:d6:94:53:d3:67:0d:49:3c:5f:37:1b:bc:a9:5d: ac:1d:d2:2d:ac:cc:3c:43:17:ea:53:71:96:6b:70:db:1f:0b: 83:40:44:89:7a:1a:56:b9:ce:b2:36:b2:8c:0e:b4:54:05:c2: 70:7a:98:27:61:14:34:05:fd:0b:96:3b:de:a5:42:8f:86:b5: 92:12:1d:f2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0nC+t67fkRfj6yRtGu/ZkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzYmUwOGRhMWFiMzFlM2Y5OGY1NTRmYTAxMzczZjk0Y2M5 MDExZWQwHhcNMjUxMjA2MTcwMTA3WhcNMjUxMjA3MTcwMTA3WjAzMTEwLwYDVQQD EyhjMTE1ZWYxOTE0ZjZlMDRlYzVhNDMzZGI2Y2JhM2IwYzEwMDFhNmRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuPVs/JlTZscBKNfvQyBKnjcS2GOR rmERlwmzTGauCOOfS49SsYuavndivFb2OwKQ42VNRmu+amTvqBja4uwgwsK85Vyi Rkpq+3oyEKCFF368N+CmnW+qd5d07VrSAQaeDXUVgJ1ibEyuih/S9TM7XVciBOsa dFw0dDfmEm51FgqXCLRQzfjWzxMuYZ8+IkJjKznR5r4q+fc6qmSOWDLAgaOOuU5V 5xJgxGvSY7Isx9s4o4v9YZDcnl9y4VrwIgfmK6pZMDwLD88vaUZt4QyJHk1uRY93 KhSl6XTs3tEEZ4zG/E0/oB4GkojMxNOU0no9kWuIsMQVEHnWUe5yXRPI9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMEV7xkU9uBOxaQz22y6OwwQAabfMB8GA1UdIwQY MBaAFGO+CNoasx4/mPVU+gE3P5TMkBHtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWTc0STJocXpIai1ZOVZUNkFUY19sTXlRRWUwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC85OWNiY2YtN2Q0Zi00YjEyLWE1Nzct Y2M4MDU0YTUxZDY2LzEvWTc0STJocXpIai1ZOVZUNkFUY19sTXlRRWUwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC85OWNiY2YtN2Q0Zi00YjEyLWE1NzctY2M4MDU0YTUxZDY2 LzEvWTc0STJocXpIai1ZOVZUNkFUY19sTXlRRWUwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbpQE66dg gCLzEryV4aIv0OOwe4DxEzFlZExR226FaMkyvRiZzyCHfFy/fFbetj3oUFg/kCNc 64rZdh/Cr2cxAtdKyRz6Cydc5HyZ6oeN6UMRuVwCSrEzmq6a9KxyKwBqDhDcAZIq S35UJ0v/HpNd7sc29N6PbJH6Qyd4qM3zW9GXbZ1BWZyjDd13Rjt9isSkv4ujnfXS S7EYQtdJsBRLsnT5EODE+/Z3E3o6mttxZHKNCjNRIR5z+NaUU9NnDUk8XzcbvKld rB3SLazMPEMX6lNxlmtw2x8Lg0BEiXoaVrnOsjayjA60VAXCcHqYJ2EUNAX9C5Y7 3qVCj4a1khId8g== -----END CERTIFICATE-----Generated at Sat Dec 6 20:02:44 2025 by rpki-client