This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/150b88-88ee-4234-a5e8-aa7730b2b4f3/1/Y8ZXGQ_tc_a752X0toIB_VVV48g.mft File: Y8ZXGQ_tc_a752X0toIB_VVV48g.mft (raw, json) Hash identifier: KEtSax8lXa6QPzX/mZ/xoWclDvV3/20+7iw/9nsyxCY= Subject key identifier: 7A:7D:BD:1D:1B:39:19:84:34:7E:47:EB:B1:CD:E8:B0:6F:3D:47:EA Authority key identifier: 63:C6:57:19:0F:ED:73:F6:BB:E7:65:F4:B6:82:01:FD:55:55:E3:C8 Certificate issuer: /CN=63c657190fed73f6bbe765f4b68201fd5555e3c8 Certificate serial: 019AF209044415E4433AD852BE9443942485 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y8ZXGQ_tc_a752X0toIB_VVV48g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/150b88-88ee-4234-a5e8-aa7730b2b4f3/1/Y8ZXGQ_tc_a752X0toIB_VVV48g.mft Manifest number: 0CF7 Signing time: Sat 06 Dec 2025 05:01:08 +0000 Manifest this update: Sat 06 Dec 2025 05:01:08 +0000 Manifest next update: Sun 07 Dec 2025 05:01:08 +0000 Files and hashes: 1: KqFYxEWrdBP5_WdyXRa-ITRyV24.roa (hash: vqxQtdasBJcl6VgvYzPzoC8JKGZWIRjtdhf0lDZH8tE=) 2: Y8ZXGQ_tc_a752X0toIB_VVV48g.crl (hash: d5gm0A4cHoEvOKZeKOGdvC0JSnRak+TgYOinPpRUo3A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/150b88-88ee-4234-a5e8-aa7730b2b4f3/1/Y8ZXGQ_tc_a752X0toIB_VVV48g.crl rsync://rpki.ripe.net/repository/DEFAULT/6e/150b88-88ee-4234-a5e8-aa7730b2b4f3/1/Y8ZXGQ_tc_a752X0toIB_VVV48g.mft rsync://rpki.ripe.net/repository/DEFAULT/Y8ZXGQ_tc_a752X0toIB_VVV48g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:04:44:15:e4:43:3a:d8:52:be:94:43:94:24:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63c657190fed73f6bbe765f4b68201fd5555e3c8 Validity Not Before: Dec 6 05:01:08 2025 GMT Not After : Dec 7 05:01:08 2025 GMT Subject: CN=7a7dbd1d1b391984347e47ebb1cde8b06f3d47ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:b9:fd:40:48:95:49:7c:97:99:72:6d:df:92: 0c:af:92:e8:ea:f1:e3:0f:38:ea:07:c6:d7:60:2b: 06:70:fa:60:c1:60:cf:56:be:55:1e:76:3a:b4:04: 4d:91:c4:8c:1f:28:38:cf:bd:e8:c6:df:51:6c:88: ea:10:89:24:07:04:12:89:b2:f2:57:5d:10:0c:c9: 6f:d2:94:b4:2a:b0:22:a0:94:9a:1b:e4:0d:fa:fc: f9:60:2a:75:64:b1:87:a7:45:cc:a1:83:bb:3f:99: ae:2d:43:22:44:6e:b0:e8:db:9b:38:49:a1:fb:c6: 43:08:b4:96:3d:a3:ae:13:61:16:ba:4a:92:1c:42: 8c:78:93:3b:21:3e:fb:d5:25:c4:ef:99:04:8f:20: ec:6c:a8:b8:4d:ab:a4:60:a5:50:6e:e8:6d:34:95: ca:46:18:0e:3d:b1:e0:28:81:f1:13:f2:25:e8:2e: 36:ac:1f:08:3c:04:7f:0f:11:70:f6:79:5a:23:c0: b7:1c:ed:9f:c8:1b:22:bf:d4:55:56:f8:d8:80:25: 68:d3:73:7a:03:05:dc:ff:41:71:26:03:30:a4:74: c2:a7:66:64:29:1b:de:ba:81:02:0c:50:c9:ba:45: 02:80:a7:6a:4f:0a:8d:28:2e:f9:67:0f:71:3f:6f: 9a:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:7D:BD:1D:1B:39:19:84:34:7E:47:EB:B1:CD:E8:B0:6F:3D:47:EA X509v3 Authority Key Identifier: keyid:63:C6:57:19:0F:ED:73:F6:BB:E7:65:F4:B6:82:01:FD:55:55:E3:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y8ZXGQ_tc_a752X0toIB_VVV48g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/150b88-88ee-4234-a5e8-aa7730b2b4f3/1/Y8ZXGQ_tc_a752X0toIB_VVV48g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/150b88-88ee-4234-a5e8-aa7730b2b4f3/1/Y8ZXGQ_tc_a752X0toIB_VVV48g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:90:9f:fa:bc:e1:bc:f9:cf:64:5e:d7:47:65:a1:e0:cf:25: 55:2b:a0:15:e9:af:7d:b3:1d:49:b1:38:d5:03:00:bc:a5:b2: 3b:07:2c:66:63:6e:f0:c6:93:7a:f2:94:7c:89:49:5c:1f:fe: b8:a8:9f:ed:94:bd:5d:29:e0:76:65:04:20:35:6f:a3:ba:c9: 3a:91:9c:ff:ce:7a:15:96:fd:4a:50:5b:32:a0:25:4e:3c:81: 48:2e:68:c6:2b:a8:0a:83:6b:89:ad:04:db:6e:65:b5:54:e5: e9:ba:c5:b5:11:3e:ae:e2:a9:ce:f7:9d:4d:c4:81:a3:c0:18: 3b:60:a3:d3:1c:f1:bf:1e:69:fe:41:e1:fb:96:13:67:b5:da: 4e:b1:ed:79:1d:bb:7d:2c:82:7c:bd:13:b6:01:d1:dd:c7:9b: 3b:3c:ad:99:8d:21:f0:c7:64:8c:8c:2f:97:3e:e1:41:fc:b5: 81:81:6f:78:34:9a:06:8c:e4:0a:08:41:2e:02:df:6c:01:6d: 8f:56:64:ae:e4:d1:2d:a9:a9:39:42:84:f9:0e:c2:4c:06:1d: 8c:d2:f7:96:82:6a:89:86:19:56:f9:6a:25:e6:44:06:3b:c8: 9d:30:b4:40:5e:d6:9d:84:f0:7d:f3:74:b3:58:a7:44:e9:0d: 83:80:fd:6a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCQREFeRDOthSvpRDlCSFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzYzY1NzE5MGZlZDczZjZiYmU3NjVmNGI2ODIwMWZkNTU1 NWUzYzgwHhcNMjUxMjA2MDUwMTA4WhcNMjUxMjA3MDUwMTA4WjAzMTEwLwYDVQQD Eyg3YTdkYmQxZDFiMzkxOTg0MzQ3ZTQ3ZWJiMWNkZThiMDZmM2Q0N2VhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApbn9QEiVSXyXmXJt35IMr5Lo6vHj DzjqB8bXYCsGcPpgwWDPVr5VHnY6tARNkcSMHyg4z73oxt9RbIjqEIkkBwQSibLy V10QDMlv0pS0KrAioJSaG+QN+vz5YCp1ZLGHp0XMoYO7P5muLUMiRG6w6NubOEmh +8ZDCLSWPaOuE2EWukqSHEKMeJM7IT771SXE75kEjyDsbKi4TaukYKVQbuhtNJXK RhgOPbHgKIHxE/Il6C42rB8IPAR/DxFw9nlaI8C3HO2fyBsiv9RVVvjYgCVo03N6 AwXc/0FxJgMwpHTCp2ZkKRveuoECDFDJukUCgKdqTwqNKC75Zw9xP2+a/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHp9vR0bORmENH5H67HN6LBvPUfqMB8GA1UdIwQY MBaAFGPGVxkP7XP2u+dl9LaCAf1VVePIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWThaWEdRX3RjX2E3NTJYMHRvSUJfVlZWNDhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS8xNTBiODgtODhlZS00MjM0LWE1ZTgt YWE3NzMwYjJiNGYzLzEvWThaWEdRX3RjX2E3NTJYMHRvSUJfVlZWNDhnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZS8xNTBiODgtODhlZS00MjM0LWE1ZTgtYWE3NzMwYjJiNGYz LzEvWThaWEdRX3RjX2E3NTJYMHRvSUJfVlZWNDhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA5Cf+rzh vPnPZF7XR2Wh4M8lVSugFemvfbMdSbE41QMAvKWyOwcsZmNu8MaTevKUfIlJXB/+ uKif7ZS9XSngdmUEIDVvo7rJOpGc/856FZb9SlBbMqAlTjyBSC5oxiuoCoNria0E 225ltVTl6brFtRE+ruKpzvedTcSBo8AYO2Cj0xzxvx5p/kHh+5YTZ7XaTrHteR27 fSyCfL0TtgHR3cebOzytmY0h8MdkjIwvlz7hQfy1gYFveDSaBozkCghBLgLfbAFt j1ZkruTRLampOUKE+Q7CTAYdjNL3loJqiYYZVvlqJeZEBjvInTC0QF7WnYTwffN0 s1inROkNg4D9ag== -----END CERTIFICATE-----Generated at Sat Dec 6 12:49:26 2025 by rpki-client