This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/9e96a3-ce89-442e-bc48-addefa6911b9/1/Y0xTq9Ddpoymf8gGa8FlorMtyCs.mft File: Y0xTq9Ddpoymf8gGa8FlorMtyCs.mft (raw, json) Hash identifier: UA+4Lqt4Pz00z0SUMWqaUUXISzst0/X8uM2VSq6BfnE= Subject key identifier: E2:53:61:6D:F9:D5:D1:AF:99:5A:6C:0C:B1:FF:1D:86:D2:46:7C:37 Authority key identifier: 63:4C:53:AB:D0:DD:A6:8C:A6:7F:C8:06:6B:C1:65:A2:B3:2D:C8:2B Certificate issuer: /CN=634c53abd0dda68ca67fc8066bc165a2b32dc82b Certificate serial: 019AF50A373B3E4982F9061F2B32F0DA662B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y0xTq9Ddpoymf8gGa8FlorMtyCs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/9e96a3-ce89-442e-bc48-addefa6911b9/1/Y0xTq9Ddpoymf8gGa8FlorMtyCs.mft Manifest number: 1693 Signing time: Sat 06 Dec 2025 19:01:18 +0000 Manifest this update: Sat 06 Dec 2025 19:01:18 +0000 Manifest next update: Sun 07 Dec 2025 19:01:18 +0000 Files and hashes: 1: Y0xTq9Ddpoymf8gGa8FlorMtyCs.crl (hash: GS8SFJdHEkXirj6i/TMq4YvRtCYc9WzkOWroR636z9Y=) 2: trc9WRrx0GcsdoyWUNx1ByDuLOs.roa (hash: O5foXyUGS0pgYakUN+dT6VqKLJZgwkNIaZ4jTeLOo7U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/9e96a3-ce89-442e-bc48-addefa6911b9/1/Y0xTq9Ddpoymf8gGa8FlorMtyCs.crl rsync://rpki.ripe.net/repository/DEFAULT/7e/9e96a3-ce89-442e-bc48-addefa6911b9/1/Y0xTq9Ddpoymf8gGa8FlorMtyCs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y0xTq9Ddpoymf8gGa8FlorMtyCs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0a:37:3b:3e:49:82:f9:06:1f:2b:32:f0:da:66:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=634c53abd0dda68ca67fc8066bc165a2b32dc82b Validity Not Before: Dec 6 19:01:18 2025 GMT Not After : Dec 7 19:01:18 2025 GMT Subject: CN=e253616df9d5d1af995a6c0cb1ff1d86d2467c37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:41:90:90:7f:ba:0b:84:cf:5c:28:4d:68:55: 58:10:5e:ba:9d:8b:22:05:56:2e:e4:f4:de:ef:b0: 7f:9e:3a:3f:8d:fa:af:1d:3c:d9:f5:7d:a9:a7:36: 31:c2:4f:a2:7e:69:c1:6d:6c:c2:50:37:1f:ad:a7: 01:87:fa:92:5d:c9:c0:70:83:45:50:ea:9b:22:4f: a8:e7:38:77:70:39:e1:3b:af:b5:71:21:d1:fd:b4: 73:1e:a8:1a:d7:fa:7d:1c:eb:91:3d:3e:f0:e0:8a: a1:d6:8d:0a:46:46:4e:0d:84:3a:74:91:b0:70:ce: be:3b:8d:f0:d3:bf:b2:04:f0:a1:67:a7:f5:60:b0: 7b:cb:e8:78:d8:32:9d:b9:a7:aa:da:a3:85:bb:a5: 24:41:62:14:ad:37:33:06:87:3d:1d:23:b8:0f:66: 2d:00:46:21:48:6d:95:1a:31:c0:f3:cc:a7:35:90: 79:11:e5:73:eb:6e:db:7c:5a:7c:0a:88:49:b7:99: 8c:d7:6e:db:49:1c:ca:10:5c:d0:40:c2:33:2b:c9: 14:ec:37:0b:b0:0e:92:ff:d9:90:63:af:35:17:a8: a8:d3:89:c4:19:4f:9c:45:e7:ab:ca:e6:33:85:ef: 16:14:13:fe:d6:1b:22:c7:fe:de:61:c3:d9:df:af: 86:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:53:61:6D:F9:D5:D1:AF:99:5A:6C:0C:B1:FF:1D:86:D2:46:7C:37 X509v3 Authority Key Identifier: keyid:63:4C:53:AB:D0:DD:A6:8C:A6:7F:C8:06:6B:C1:65:A2:B3:2D:C8:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y0xTq9Ddpoymf8gGa8FlorMtyCs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/9e96a3-ce89-442e-bc48-addefa6911b9/1/Y0xTq9Ddpoymf8gGa8FlorMtyCs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/9e96a3-ce89-442e-bc48-addefa6911b9/1/Y0xTq9Ddpoymf8gGa8FlorMtyCs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:b7:78:10:bb:0c:a8:a0:b7:2e:b7:51:cd:69:31:a5:66:52: 60:c0:8f:b9:9f:a4:ba:8e:fe:96:2a:6a:13:c4:65:09:54:b3: 02:5f:e1:23:d5:32:bb:7b:31:7c:96:75:74:6a:d6:49:46:31: f8:69:60:3a:6a:df:d8:1c:14:b8:3c:e3:58:2c:89:15:91:c8: 31:ef:93:98:fc:c4:b4:ab:c9:da:9a:23:f0:34:e2:6d:aa:76: 9d:6e:ad:d4:8b:6f:fd:9e:fc:c2:08:65:fb:79:be:4b:dd:87: 98:8d:11:b2:26:ea:63:42:17:b2:54:74:78:40:fa:ef:d9:da: 66:e7:c3:d5:44:61:34:46:d7:9f:05:ce:e8:1d:42:74:6f:12: f4:79:71:a5:65:1f:31:5f:4b:db:0a:1a:38:30:51:43:43:91: 2e:fd:f8:90:39:44:65:d7:76:3c:b8:7e:00:d7:cf:81:f1:95: 6a:38:8c:cb:c0:dd:5e:c9:0f:29:08:bc:ee:87:e9:0f:96:68: 9b:8b:17:07:50:5b:2f:ed:09:6c:bc:4a:69:c0:45:36:c8:b1: 93:ba:8d:6e:80:6a:19:e6:5c:68:8c:cd:b3:8d:a1:03:34:79: 65:9b:ae:a9:d0:ed:0a:82:6e:3d:63:bd:ff:04:f8:88:75:83: 9f:24:56:bf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1Cjc7PkmC+QYfKzLw2mYrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzNGM1M2FiZDBkZGE2OGNhNjdmYzgwNjZiYzE2NWEyYjMy ZGM4MmIwHhcNMjUxMjA2MTkwMTE4WhcNMjUxMjA3MTkwMTE4WjAzMTEwLwYDVQQD EyhlMjUzNjE2ZGY5ZDVkMWFmOTk1YTZjMGNiMWZmMWQ4NmQyNDY3YzM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsEGQkH+6C4TPXChNaFVYEF66nYsi BVYu5PTe77B/njo/jfqvHTzZ9X2ppzYxwk+ifmnBbWzCUDcfracBh/qSXcnAcINF UOqbIk+o5zh3cDnhO6+1cSHR/bRzHqga1/p9HOuRPT7w4Iqh1o0KRkZODYQ6dJGw cM6+O43w07+yBPChZ6f1YLB7y+h42DKduaeq2qOFu6UkQWIUrTczBoc9HSO4D2Yt AEYhSG2VGjHA88ynNZB5EeVz627bfFp8CohJt5mM127bSRzKEFzQQMIzK8kU7DcL sA6S/9mQY681F6io04nEGU+cReeryuYzhe8WFBP+1hsix/7eYcPZ36+GUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOJTYW351dGvmVpsDLH/HYbSRnw3MB8GA1UdIwQY MBaAFGNMU6vQ3aaMpn/IBmvBZaKzLcgrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWTB4VHE5RGRwb3ltZjhnR2E4Rmxvck10eUNzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS85ZTk2YTMtY2U4OS00NDJlLWJjNDgt YWRkZWZhNjkxMWI5LzEvWTB4VHE5RGRwb3ltZjhnR2E4Rmxvck10eUNzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZS85ZTk2YTMtY2U4OS00NDJlLWJjNDgtYWRkZWZhNjkxMWI5 LzEvWTB4VHE5RGRwb3ltZjhnR2E4Rmxvck10eUNzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAELd4ELsM qKC3LrdRzWkxpWZSYMCPuZ+kuo7+lipqE8RlCVSzAl/hI9Uyu3sxfJZ1dGrWSUYx +GlgOmrf2BwUuDzjWCyJFZHIMe+TmPzEtKvJ2poj8DTibap2nW6t1Itv/Z78wghl +3m+S92HmI0RsibqY0IXslR0eED679naZufD1URhNEbXnwXO6B1CdG8S9HlxpWUf MV9L2woaODBRQ0ORLv34kDlEZdd2PLh+ANfPgfGVajiMy8DdXskPKQi87ofpD5Zo m4sXB1BbL+0JbLxKacBFNsixk7qNboBqGeZcaIzNs42hAzR5ZZuuqdDtCoJuPWO9 /wT4iHWDnyRWvw== -----END CERTIFICATE-----Generated at Sat Dec 6 22:56:26 2025 by rpki-client