This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/5ebc5d-8683-4c37-a050-20ef42c9bc38/1/Y4H3IILjEgadg9mvTzGc8K-ANkc.mft File: Y4H3IILjEgadg9mvTzGc8K-ANkc.mft (raw, json) Hash identifier: IpoyHSvMk2a+Iq+MEwFJeQwfsCElDnB/ErSi+tGXCDg= Subject key identifier: FC:8D:AF:D8:3E:2E:B4:24:00:74:89:F2:E2:34:AC:A9:74:48:83:0F Authority key identifier: 63:81:F7:20:82:E3:12:06:9D:83:D9:AF:4F:31:9C:F0:AF:80:36:47 Certificate issuer: /CN=6381f72082e312069d83d9af4f319cf0af803647 Certificate serial: 019AF2766B60363CF45C31A7D4C2EE80466E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y4H3IILjEgadg9mvTzGc8K-ANkc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/5ebc5d-8683-4c37-a050-20ef42c9bc38/1/Y4H3IILjEgadg9mvTzGc8K-ANkc.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 07:00:38 +0000 Manifest this update: Sat 06 Dec 2025 07:00:38 +0000 Manifest next update: Sun 07 Dec 2025 07:00:38 +0000 Files and hashes: 1: Y4H3IILjEgadg9mvTzGc8K-ANkc.crl (hash: v8b4kP9tBYYl2R2iVg+NN1qljXVsXHAplSDnYOdTxjo=) 2: dOaeIHruifCT3_Y-NZ9ouvbnhuc.roa (hash: PG+NsqO34TjeMURDoubqwQXu9F/XY0vJGA8jsdkgloo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/5ebc5d-8683-4c37-a050-20ef42c9bc38/1/Y4H3IILjEgadg9mvTzGc8K-ANkc.crl rsync://rpki.ripe.net/repository/DEFAULT/95/5ebc5d-8683-4c37-a050-20ef42c9bc38/1/Y4H3IILjEgadg9mvTzGc8K-ANkc.mft rsync://rpki.ripe.net/repository/DEFAULT/Y4H3IILjEgadg9mvTzGc8K-ANkc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 07:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:6b:60:36:3c:f4:5c:31:a7:d4:c2:ee:80:46:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6381f72082e312069d83d9af4f319cf0af803647 Validity Not Before: Dec 6 07:00:38 2025 GMT Not After : Dec 7 07:00:38 2025 GMT Subject: CN=fc8dafd83e2eb424007489f2e234aca97448830f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:10:df:2d:7b:a9:db:3f:d9:04:b8:70:b8:b4: 67:13:54:fb:86:0e:f6:fc:c6:64:ad:97:ae:a9:e3: d6:21:c9:cb:67:f2:2c:7b:93:cb:82:67:3c:c1:20: 7b:6f:64:bc:2c:15:23:4a:70:5a:8f:75:f9:71:72: b2:1f:21:2a:6c:e9:0c:d2:19:c1:ea:49:47:e9:a0: 38:6f:a3:17:a6:c0:c3:e0:d7:0f:42:63:02:a4:2e: 81:db:74:09:f2:ea:36:b6:8f:4b:86:fd:f5:20:82: e9:6f:05:52:9c:aa:90:3d:03:38:4e:1f:77:84:bd: 87:5d:c4:ad:0c:b0:5f:41:02:77:76:ff:46:c0:57: 79:f0:79:89:fa:36:21:8c:10:4c:e5:67:ee:28:87: ea:13:1e:ac:b5:c2:c9:95:be:c6:92:e4:91:71:60: bf:47:f1:61:f2:b0:18:7f:4c:94:7e:98:75:a0:7d: 86:49:c2:ca:ce:55:a9:8f:b5:95:55:1d:1b:6e:64: 93:cd:06:46:e3:54:12:d4:c4:56:b9:ce:03:6d:95: e5:99:15:b0:9d:28:d8:92:be:ee:9b:d1:59:e2:b7: 30:de:6a:51:9c:1d:8d:5e:aa:01:7b:24:7e:7e:71: 5f:14:d2:33:1c:27:a0:75:3e:15:72:9f:b6:8b:61: 75:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:8D:AF:D8:3E:2E:B4:24:00:74:89:F2:E2:34:AC:A9:74:48:83:0F X509v3 Authority Key Identifier: keyid:63:81:F7:20:82:E3:12:06:9D:83:D9:AF:4F:31:9C:F0:AF:80:36:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y4H3IILjEgadg9mvTzGc8K-ANkc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/5ebc5d-8683-4c37-a050-20ef42c9bc38/1/Y4H3IILjEgadg9mvTzGc8K-ANkc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/95/5ebc5d-8683-4c37-a050-20ef42c9bc38/1/Y4H3IILjEgadg9mvTzGc8K-ANkc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:d7:04:24:e9:64:9e:33:2e:23:d1:cf:a6:5b:e1:ab:46:dd: e7:e5:53:d8:9e:a0:0d:2a:e1:0a:59:21:45:4c:17:53:74:fd: 17:87:76:32:f8:61:e1:5b:5d:8c:89:90:b1:d2:5a:e8:33:fb: ea:36:d0:ab:bd:09:f6:60:f3:93:51:46:b7:c6:21:17:ea:b3: 4c:1b:1b:3a:47:b3:3c:4c:c4:d3:6a:cc:96:a0:02:5c:4b:4c: b2:e3:d6:d3:61:ea:69:e5:95:6e:2e:5a:22:b2:fe:f5:66:56: ff:f1:2c:2d:40:76:66:a8:01:04:a2:b1:f2:46:48:b3:73:12: 08:b4:fb:5a:9d:54:9b:eb:80:a2:bc:74:93:4e:6c:b1:cf:73: ec:ff:dc:fd:fe:8e:f0:68:38:ea:fb:bf:62:2f:15:35:5b:5c: f7:b7:60:4d:0a:21:94:f1:32:67:72:b5:12:66:4e:ea:d1:14: cd:89:14:fa:3e:8d:23:17:33:f2:5a:eb:f6:2d:85:95:12:68: f4:28:da:57:18:6d:94:33:f0:72:59:42:21:b8:6c:58:08:85: 96:cc:4b:73:72:8e:e3:ac:e5:66:df:df:4d:d1:4c:fb:65:18: 22:47:ef:1c:dd:74:a8:9d:29:3c:60:b8:a4:76:f7:07:0d:5c: e3:3f:18:73 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydmtgNjz0XDGn1MLugEZuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzODFmNzIwODJlMzEyMDY5ZDgzZDlhZjRmMzE5Y2YwYWY4 MDM2NDcwHhcNMjUxMjA2MDcwMDM4WhcNMjUxMjA3MDcwMDM4WjAzMTEwLwYDVQQD EyhmYzhkYWZkODNlMmViNDI0MDA3NDg5ZjJlMjM0YWNhOTc0NDg4MzBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArBDfLXup2z/ZBLhwuLRnE1T7hg72 /MZkrZeuqePWIcnLZ/Ise5PLgmc8wSB7b2S8LBUjSnBaj3X5cXKyHyEqbOkM0hnB 6klH6aA4b6MXpsDD4NcPQmMCpC6B23QJ8uo2to9Lhv31IILpbwVSnKqQPQM4Th93 hL2HXcStDLBfQQJ3dv9GwFd58HmJ+jYhjBBM5WfuKIfqEx6stcLJlb7GkuSRcWC/ R/Fh8rAYf0yUfph1oH2GScLKzlWpj7WVVR0bbmSTzQZG41QS1MRWuc4DbZXlmRWw nSjYkr7um9FZ4rcw3mpRnB2NXqoBeyR+fnFfFNIzHCegdT4Vcp+2i2F15wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPyNr9g+LrQkAHSJ8uI0rKl0SIMPMB8GA1UdIwQY MBaAFGOB9yCC4xIGnYPZr08xnPCvgDZHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWTRIM0lJTGpFZ2FkZzltdlR6R2M4Sy1BTmtjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS81ZWJjNWQtODY4My00YzM3LWEwNTAt MjBlZjQyYzliYzM4LzEvWTRIM0lJTGpFZ2FkZzltdlR6R2M4Sy1BTmtjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NS81ZWJjNWQtODY4My00YzM3LWEwNTAtMjBlZjQyYzliYzM4 LzEvWTRIM0lJTGpFZ2FkZzltdlR6R2M4Sy1BTmtjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFtcEJOlk njMuI9HPplvhq0bd5+VT2J6gDSrhClkhRUwXU3T9F4d2Mvhh4VtdjImQsdJa6DP7 6jbQq70J9mDzk1FGt8YhF+qzTBsbOkezPEzE02rMlqACXEtMsuPW02HqaeWVbi5a IrL+9WZW//EsLUB2ZqgBBKKx8kZIs3MSCLT7Wp1Um+uAorx0k05ssc9z7P/c/f6O 8Gg46vu/Yi8VNVtc97dgTQohlPEyZ3K1EmZO6tEUzYkU+j6NIxcz8lrr9i2FlRJo 9CjaVxhtlDPwcllCIbhsWAiFlsxLc3KO46zlZt/fTdFM+2UYIkfvHN10qJ0pPGC4 pHb3Bw1c4z8Ycw== -----END CERTIFICATE-----Generated at Sat Dec 6 16:31:51 2025 by rpki-client