This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/02cdc2-40a8-4781-860b-2388c906bc62/1/Y9W0iEgQe4bhQtHAbCnUtw5zlNM.mft File: Y9W0iEgQe4bhQtHAbCnUtw5zlNM.mft (raw, json) Hash identifier: dHh+FxJ1rGcvGWe4+++Oy/wP0bbXlAykiFt5AHPdQ8E= Subject key identifier: CE:2F:B5:E8:0F:B3:A2:E7:E0:19:8E:31:54:E1:E8:E6:F4:28:46:89 Authority key identifier: 63:D5:B4:88:48:10:7B:86:E1:42:D1:C0:6C:29:D4:B7:0E:73:94:D3 Certificate issuer: /CN=63d5b48848107b86e142d1c06c29d4b70e7394d3 Certificate serial: 019AF0BF8322C3E6F029BD2813586AF58B16 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y9W0iEgQe4bhQtHAbCnUtw5zlNM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/02cdc2-40a8-4781-860b-2388c906bc62/1/Y9W0iEgQe4bhQtHAbCnUtw5zlNM.mft Manifest number: 14AF Signing time: Fri 05 Dec 2025 23:01:14 +0000 Manifest this update: Fri 05 Dec 2025 23:01:14 +0000 Manifest next update: Sat 06 Dec 2025 23:01:14 +0000 Files and hashes: 1: 1-G1EzE1WSewj5LvnP7WS6jNd8Ug.roa (hash: jwy+yhw+XcZ5VX6F4NLidpXSZAqbXddtjz7nb2RmNdw=) 2: S7ra6Ov-UpB_vWrQKASj1i2bpWU.roa (hash: kepYC+QCOG1xoHVARWHcfGe1QSDNXlo9WvXDhx0i4AA=) 3: Y9W0iEgQe4bhQtHAbCnUtw5zlNM.crl (hash: b3MBGXiOk2O7gpgCN0oWScqeSZmvIgBPxui+rRNmxgA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/02cdc2-40a8-4781-860b-2388c906bc62/1/Y9W0iEgQe4bhQtHAbCnUtw5zlNM.crl rsync://rpki.ripe.net/repository/DEFAULT/9a/02cdc2-40a8-4781-860b-2388c906bc62/1/Y9W0iEgQe4bhQtHAbCnUtw5zlNM.mft rsync://rpki.ripe.net/repository/DEFAULT/Y9W0iEgQe4bhQtHAbCnUtw5zlNM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:83:22:c3:e6:f0:29:bd:28:13:58:6a:f5:8b:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63d5b48848107b86e142d1c06c29d4b70e7394d3 Validity Not Before: Dec 5 23:01:14 2025 GMT Not After : Dec 6 23:01:14 2025 GMT Subject: CN=ce2fb5e80fb3a2e7e0198e3154e1e8e6f4284689 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:7d:57:44:77:bf:c4:c6:8a:41:98:9c:09:1b: b4:71:7c:10:ff:bf:95:b8:b4:4b:bc:b3:69:78:fc: 94:cb:50:d1:e2:0b:f6:c0:26:a7:24:fd:b9:6d:c3: 6a:6f:5d:fa:a3:ff:5e:53:40:84:81:c3:36:fc:64: 38:e4:eb:65:1d:44:a5:d1:a3:16:e9:86:7a:1b:ca: ce:d3:ad:6a:0c:05:e1:44:7e:b5:95:76:63:27:5c: 72:7f:f3:a4:63:e4:09:52:03:d7:fc:bb:09:e3:e7: 6b:e7:ba:d3:8f:55:31:9e:11:63:53:73:ae:b8:09: 92:15:f6:f3:54:f9:44:1a:2b:6f:b9:62:58:20:ef: f1:dc:01:4b:94:46:19:ec:c8:36:0b:a3:b2:fd:66: f0:33:46:10:62:bb:67:0f:80:ab:21:e6:56:2c:e9: 88:d8:39:b5:d8:26:dd:60:32:17:74:bc:c3:e2:13: 2c:62:d2:72:fa:72:12:89:67:82:a0:d1:73:29:71: 2a:cd:41:33:12:67:fe:56:5d:6c:7f:e8:04:05:dc: 48:54:dd:9b:f4:21:e4:36:65:0f:da:b6:e9:39:4a: ad:4f:7b:fb:e3:e7:d3:7f:62:da:14:a7:28:36:c8: 65:cf:b4:f1:5f:3f:78:9b:95:e5:e2:32:11:6c:e5: ba:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:2F:B5:E8:0F:B3:A2:E7:E0:19:8E:31:54:E1:E8:E6:F4:28:46:89 X509v3 Authority Key Identifier: keyid:63:D5:B4:88:48:10:7B:86:E1:42:D1:C0:6C:29:D4:B7:0E:73:94:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y9W0iEgQe4bhQtHAbCnUtw5zlNM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/02cdc2-40a8-4781-860b-2388c906bc62/1/Y9W0iEgQe4bhQtHAbCnUtw5zlNM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/02cdc2-40a8-4781-860b-2388c906bc62/1/Y9W0iEgQe4bhQtHAbCnUtw5zlNM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:27:a0:dd:9a:0b:e3:1b:59:fa:d4:e9:19:89:4c:aa:98:81: 5b:f1:3b:82:db:9a:01:5c:86:d7:01:93:38:21:6f:f2:7f:0d: 63:3f:9b:d2:21:29:a1:b0:58:2e:33:72:7c:d6:66:8b:16:0c: a2:a1:5a:04:06:cf:86:17:1c:d6:e8:30:1a:c3:e3:0e:e3:fd: e5:1d:fe:c2:f6:6c:64:72:63:86:10:95:f0:4d:56:65:b3:71: 4b:cc:b4:d0:b9:66:29:99:ed:d4:f9:ee:bd:cb:cb:c1:4c:15: 4f:d9:48:d7:35:e4:31:7b:35:47:5b:c7:09:91:e2:2b:70:fe: 38:9b:7f:31:df:05:09:fd:63:c1:08:43:0f:70:1d:b0:3f:3d: ce:db:37:05:1f:c0:8e:b6:7f:6a:f0:5a:2e:3f:68:b3:47:f1: 85:2a:ee:00:5b:7b:f9:0a:a2:78:74:d0:9a:20:be:09:2f:7c: a9:36:8b:37:a6:90:c3:2f:17:a2:ed:f0:b5:e9:5f:40:1b:bc: c6:ac:f1:a0:c0:4e:92:59:da:6e:da:20:cf:5a:d1:57:e6:90: fc:b4:5b:2e:42:05:33:39:2c:7c:23:3a:4e:fb:e9:ad:71:f3: 7a:2d:1e:f4:f7:70:c1:ab:c1:dc:83:b4:75:49:df:c2:84:ae: a1:ee:38:5e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwv4Miw+bwKb0oE1hq9YsWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZDViNDg4NDgxMDdiODZlMTQyZDFjMDZjMjlkNGI3MGU3 Mzk0ZDMwHhcNMjUxMjA1MjMwMTE0WhcNMjUxMjA2MjMwMTE0WjAzMTEwLwYDVQQD EyhjZTJmYjVlODBmYjNhMmU3ZTAxOThlMzE1NGUxZThlNmY0Mjg0Njg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt31XRHe/xMaKQZicCRu0cXwQ/7+V uLRLvLNpePyUy1DR4gv2wCanJP25bcNqb136o/9eU0CEgcM2/GQ45OtlHUSl0aMW 6YZ6G8rO061qDAXhRH61lXZjJ1xyf/OkY+QJUgPX/LsJ4+dr57rTj1UxnhFjU3Ou uAmSFfbzVPlEGitvuWJYIO/x3AFLlEYZ7Mg2C6Oy/WbwM0YQYrtnD4CrIeZWLOmI 2Dm12CbdYDIXdLzD4hMsYtJy+nISiWeCoNFzKXEqzUEzEmf+Vl1sf+gEBdxIVN2b 9CHkNmUP2rbpOUqtT3v74+fTf2LaFKcoNshlz7TxXz94m5Xl4jIRbOW6jwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM4vtegPs6Ln4BmOMVTh6Ob0KEaJMB8GA1UdIwQY MBaAFGPVtIhIEHuG4ULRwGwp1LcOc5TTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWTlXMGlFZ1FlNGJoUXRIQWJDblV0dzV6bE5NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS8wMmNkYzItNDBhOC00NzgxLTg2MGIt MjM4OGM5MDZiYzYyLzEvWTlXMGlFZ1FlNGJoUXRIQWJDblV0dzV6bE5NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85YS8wMmNkYzItNDBhOC00NzgxLTg2MGItMjM4OGM5MDZiYzYy LzEvWTlXMGlFZ1FlNGJoUXRIQWJDblV0dzV6bE5NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMCeg3ZoL 4xtZ+tTpGYlMqpiBW/E7gtuaAVyG1wGTOCFv8n8NYz+b0iEpobBYLjNyfNZmixYM oqFaBAbPhhcc1ugwGsPjDuP95R3+wvZsZHJjhhCV8E1WZbNxS8y00LlmKZnt1Pnu vcvLwUwVT9lI1zXkMXs1R1vHCZHiK3D+OJt/Md8FCf1jwQhDD3AdsD89zts3BR/A jrZ/avBaLj9os0fxhSruAFt7+QqieHTQmiC+CS98qTaLN6aQwy8Xou3wtelfQBu8 xqzxoMBOklnabtogz1rRV+aQ/LRbLkIFMzksfCM6TvvprXHzei0e9PdwwavB3IO0 dUnfwoSuoe44Xg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:03:21 2025 by rpki-client