This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/c4a70e-f7a8-4aa0-98c6-23e09652b3d8/1/Y8Ba-g3Jpfj2GMPtLuxnLsOPb-8.mft File: Y8Ba-g3Jpfj2GMPtLuxnLsOPb-8.mft (raw, json) Hash identifier: bxMgnFWvihbahcpeX98khxFY7upRoaSQBn8opuSoGoI= Subject key identifier: 67:95:BD:2B:99:74:63:CC:A2:FD:AC:D3:B0:FF:68:1C:87:F6:8F:59 Authority key identifier: 63:C0:5A:FA:0D:C9:A5:F8:F6:18:C3:ED:2E:EC:67:2E:C3:8F:6F:EF Certificate issuer: /CN=63c05afa0dc9a5f8f618c3ed2eec672ec38f6fef Certificate serial: 019B2F9E55FEDF8D90F1324EC49890CEDDD7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y8Ba-g3Jpfj2GMPtLuxnLsOPb-8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/c4a70e-f7a8-4aa0-98c6-23e09652b3d8/1/Y8Ba-g3Jpfj2GMPtLuxnLsOPb-8.mft Manifest number: 0D95 Signing time: Thu 18 Dec 2025 04:01:04 +0000 Manifest this update: Thu 18 Dec 2025 04:01:04 +0000 Manifest next update: Fri 19 Dec 2025 04:01:04 +0000 Files and hashes: 1: 1-LgPF9BCjhZNWWw9hElab0Lv-UQ.roa (hash: ruSOhXJd1v3gKBskv3cjew+PBFyYM840a6Wjo+pKuTw=) 2: Y8Ba-g3Jpfj2GMPtLuxnLsOPb-8.crl (hash: 62mRWS7Aw11P9/kjD3EaR86Z3M+ALR/poaGMFiMIb0o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/c4a70e-f7a8-4aa0-98c6-23e09652b3d8/1/Y8Ba-g3Jpfj2GMPtLuxnLsOPb-8.crl rsync://rpki.ripe.net/repository/DEFAULT/70/c4a70e-f7a8-4aa0-98c6-23e09652b3d8/1/Y8Ba-g3Jpfj2GMPtLuxnLsOPb-8.mft rsync://rpki.ripe.net/repository/DEFAULT/Y8Ba-g3Jpfj2GMPtLuxnLsOPb-8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:9e:55:fe:df:8d:90:f1:32:4e:c4:98:90:ce:dd:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63c05afa0dc9a5f8f618c3ed2eec672ec38f6fef Validity Not Before: Dec 18 04:01:04 2025 GMT Not After : Dec 19 04:01:04 2025 GMT Subject: CN=6795bd2b997463cca2fdacd3b0ff681c87f68f59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:0f:54:29:cd:3c:a0:3f:4b:db:86:05:10:1d: 27:fc:1f:95:91:f2:b0:19:1f:05:f6:32:7d:00:7d: 34:36:c1:88:63:a2:6c:61:38:df:65:b7:ca:d2:7d: 92:fc:ed:3f:0b:97:a4:ce:34:18:56:91:ea:1f:81: 1d:9f:fa:30:26:c9:87:53:16:06:fa:81:f8:d8:d3: a4:de:40:ad:b5:03:b7:30:0b:88:3e:9f:6f:f9:5b: 53:7e:3b:6c:8f:ac:c6:b7:0f:36:06:50:75:54:18: fc:ce:11:75:49:e6:20:0d:d0:a2:ca:93:50:fb:2d: 62:96:a7:38:e6:a5:be:5e:99:f2:c3:cb:47:45:fd: 67:af:64:cc:19:87:9b:a7:69:8b:b5:39:77:d3:0e: 2a:a1:b7:26:3a:5e:26:ec:0b:e6:93:89:fb:df:55: 98:be:f8:2a:a8:2e:08:32:49:ee:52:90:90:fb:41: 8c:30:b4:90:03:13:50:c3:f8:f2:4c:8c:0d:b5:9a: ef:b3:10:9b:f8:b7:67:78:0c:a0:35:ec:0e:30:3b: 5f:e6:52:7a:42:65:3d:66:8c:4d:de:96:ff:83:10: 2c:17:ba:26:d0:f7:66:ba:b0:73:09:74:d7:20:62: 8a:42:14:e4:ac:6e:08:39:f1:20:89:b7:83:bd:94: 1c:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:95:BD:2B:99:74:63:CC:A2:FD:AC:D3:B0:FF:68:1C:87:F6:8F:59 X509v3 Authority Key Identifier: keyid:63:C0:5A:FA:0D:C9:A5:F8:F6:18:C3:ED:2E:EC:67:2E:C3:8F:6F:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y8Ba-g3Jpfj2GMPtLuxnLsOPb-8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/c4a70e-f7a8-4aa0-98c6-23e09652b3d8/1/Y8Ba-g3Jpfj2GMPtLuxnLsOPb-8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/c4a70e-f7a8-4aa0-98c6-23e09652b3d8/1/Y8Ba-g3Jpfj2GMPtLuxnLsOPb-8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:c0:82:06:6b:d6:b0:7c:fc:7a:68:b4:fb:e4:00:ce:bd:f4: d1:59:39:f9:b3:d3:b8:fc:3d:ed:37:23:e0:5d:9d:92:d4:79: f4:ee:83:d4:ad:45:a5:3d:36:28:92:c3:2e:08:cc:4b:d2:ca: 72:a9:3a:fd:6f:bf:b3:95:21:b0:1e:27:05:44:96:e6:e6:34: 67:62:cf:71:e8:0d:73:a6:94:65:03:73:c8:49:5e:e9:1e:aa: 89:10:4b:fa:61:2f:9a:43:f0:9b:3f:b0:16:2b:cd:07:5b:c7: be:f1:a0:85:5a:4f:68:b0:7f:3a:cc:49:8b:97:90:fa:b5:f0: cc:93:94:95:ff:1f:84:f1:dd:8a:eb:14:d3:40:f9:7f:c6:fe: 36:c5:58:2c:20:e1:40:f1:bd:b3:02:93:42:da:78:75:93:63: ed:24:32:cd:ff:87:59:1f:88:12:2f:b7:61:9a:bb:11:eb:84: ca:82:d9:08:00:0f:67:1b:24:79:54:0c:78:c2:06:19:77:28: a0:4e:df:f6:38:8e:ef:0a:c8:51:33:e2:ed:d7:48:64:ff:6d: 4f:6a:9d:3e:4a:80:90:e9:92:f6:b9:b8:1e:12:83:74:f3:e7: 46:28:78:50:be:13:2d:06:81:4a:dd:b8:50:e4:a8:15:1d:43: b2:c8:3c:8d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsvnlX+342Q8TJOxJiQzt3XMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzYzA1YWZhMGRjOWE1ZjhmNjE4YzNlZDJlZWM2NzJlYzM4 ZjZmZWYwHhcNMjUxMjE4MDQwMTA0WhcNMjUxMjE5MDQwMTA0WjAzMTEwLwYDVQQD Eyg2Nzk1YmQyYjk5NzQ2M2NjYTJmZGFjZDNiMGZmNjgxYzg3ZjY4ZjU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwA9UKc08oD9L24YFEB0n/B+VkfKw GR8F9jJ9AH00NsGIY6JsYTjfZbfK0n2S/O0/C5ekzjQYVpHqH4Edn/owJsmHUxYG +oH42NOk3kCttQO3MAuIPp9v+VtTfjtsj6zGtw82BlB1VBj8zhF1SeYgDdCiypNQ +y1ilqc45qW+Xpnyw8tHRf1nr2TMGYebp2mLtTl30w4qobcmOl4m7Avmk4n731WY vvgqqC4IMknuUpCQ+0GMMLSQAxNQw/jyTIwNtZrvsxCb+LdneAygNewOMDtf5lJ6 QmU9ZoxN3pb/gxAsF7om0PdmurBzCXTXIGKKQhTkrG4IOfEgibeDvZQcWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGeVvSuZdGPMov2s07D/aByH9o9ZMB8GA1UdIwQY MBaAFGPAWvoNyaX49hjD7S7sZy7Dj2/vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWThCYS1nM0pwZmoyR01QdEx1eG5Mc09QYi04LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC9jNGE3MGUtZjdhOC00YWEwLTk4YzYt MjNlMDk2NTJiM2Q4LzEvWThCYS1nM0pwZmoyR01QdEx1eG5Mc09QYi04Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC9jNGE3MGUtZjdhOC00YWEwLTk4YzYtMjNlMDk2NTJiM2Q4 LzEvWThCYS1nM0pwZmoyR01QdEx1eG5Mc09QYi04LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVsCCBmvW sHz8emi0++QAzr300Vk5+bPTuPw97Tcj4F2dktR59O6D1K1FpT02KJLDLgjMS9LK cqk6/W+/s5UhsB4nBUSW5uY0Z2LPcegNc6aUZQNzyEle6R6qiRBL+mEvmkPwmz+w FivNB1vHvvGghVpPaLB/OsxJi5eQ+rXwzJOUlf8fhPHdiusU00D5f8b+NsVYLCDh QPG9swKTQtp4dZNj7SQyzf+HWR+IEi+3YZq7EeuEyoLZCAAPZxskeVQMeMIGGXco oE7f9jiO7wrIUTPi7ddIZP9tT2qdPkqAkOmS9rm4HhKDdPPnRih4UL4TLQaBSt24 UOSoFR1Dssg8jQ== -----END CERTIFICATE-----Generated at Thu Dec 18 12:24:02 2025 by rpki-client