This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/61083c-4b3d-46d8-82aa-b2997bc61474/1/Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.mft File: Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.mft (raw, json) Hash identifier: dJWnlATAODHnYVt0PNdEsZkl2+9dk8z96xWujXoDmNw= Subject key identifier: F5:E5:D8:29:86:FD:15:6F:CE:A6:58:2A:B2:62:56:5F:86:17:86:E0 Authority key identifier: 63:42:7C:53:58:73:E4:C4:EA:D8:04:2D:67:BB:F3:F1:F4:7B:26:B1 Certificate issuer: /CN=63427c535873e4c4ead8042d67bbf3f1f47b26b1 Certificate serial: 019AF0BF1CD538AC4BB9A029D80C3F54A41A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/61083c-4b3d-46d8-82aa-b2997bc61474/1/Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.mft Manifest number: 1763 Signing time: Fri 05 Dec 2025 23:00:47 +0000 Manifest this update: Fri 05 Dec 2025 23:00:47 +0000 Manifest next update: Sat 06 Dec 2025 23:00:47 +0000 Files and hashes: 1: 0BwZhdU4Lc_MGtRgtacxMwCAmgo.roa (hash: YpXynUUs/IPOe7m4GtxSxjQNSHfpLk0MgTtZ8VR9x/E=) 2: Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.crl (hash: ANNOXxXCKlW9x1DMC7rUaF6AZRDMauki5hgQ5Upkz1c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/61083c-4b3d-46d8-82aa-b2997bc61474/1/Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/61083c-4b3d-46d8-82aa-b2997bc61474/1/Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.mft rsync://rpki.ripe.net/repository/DEFAULT/Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:1c:d5:38:ac:4b:b9:a0:29:d8:0c:3f:54:a4:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63427c535873e4c4ead8042d67bbf3f1f47b26b1 Validity Not Before: Dec 5 23:00:47 2025 GMT Not After : Dec 6 23:00:47 2025 GMT Subject: CN=f5e5d82986fd156fcea6582ab262565f861786e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:a6:0e:0f:a7:d7:ab:1e:e4:3b:b8:e4:7b:d2: 49:8c:68:a4:71:78:3d:02:96:e2:10:71:19:fb:09: a7:f8:2e:c5:ba:5b:c7:82:e4:f7:06:67:c1:c9:b9: 9b:05:1a:e9:06:c7:28:56:cc:20:2b:d9:f1:2f:0a: ae:b9:5b:87:0c:4d:7d:c6:0e:5a:76:e6:41:c1:6c: b2:89:2e:ff:8f:82:b9:00:24:c7:e3:68:0e:f1:88: fb:bc:a1:df:af:87:18:1f:92:35:5e:51:87:69:62: 17:6e:0c:dc:eb:9c:a2:0a:11:e9:3f:63:5d:cf:0e: 0e:b9:01:9b:06:4a:0e:71:12:f8:99:ac:b1:c6:02: b9:87:b5:3e:86:57:7d:8c:e8:db:36:64:0d:5f:90: 51:15:28:48:dd:a0:9e:36:59:5f:29:46:12:d5:85: 23:dc:93:5b:13:8e:49:bc:ff:dc:4f:b6:28:52:89: 3e:f2:e6:00:c4:05:77:d1:2c:44:15:aa:87:f8:b9: ea:3e:f4:a6:fe:90:63:d8:2b:06:00:dd:f3:63:7d: e1:a2:77:c2:66:b3:56:f5:24:50:7e:eb:e5:bc:8c: d6:88:5d:c7:68:0e:96:05:e9:a2:85:7b:9c:32:49: 23:5d:21:ba:af:fb:ec:ee:c6:49:a4:d0:8a:db:35: fc:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:E5:D8:29:86:FD:15:6F:CE:A6:58:2A:B2:62:56:5F:86:17:86:E0 X509v3 Authority Key Identifier: keyid:63:42:7C:53:58:73:E4:C4:EA:D8:04:2D:67:BB:F3:F1:F4:7B:26:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/61083c-4b3d-46d8-82aa-b2997bc61474/1/Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/61083c-4b3d-46d8-82aa-b2997bc61474/1/Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:a3:9b:12:3e:ad:5d:5a:0e:5e:7b:dd:40:fb:4b:c0:5a:d1: d3:93:24:29:43:55:56:02:67:57:cd:1d:c6:c9:53:84:74:86: a0:8e:80:69:16:f7:37:e0:a6:b3:50:93:38:4e:9e:66:57:32: 30:38:39:33:66:29:a1:67:c9:fb:89:e9:c1:ea:71:29:0e:66: ec:66:75:a7:d7:b1:89:1a:f3:89:0c:f6:95:33:36:04:a3:21: 2d:39:bc:cb:0a:e0:ff:28:69:8e:89:87:bc:9f:c5:26:5e:ec: 31:93:3e:d3:81:18:be:9a:5a:a2:fd:27:24:1f:e9:63:1d:ee: 6d:b5:dc:83:f8:e3:fb:0b:52:60:47:80:d2:61:52:12:d0:c1: fe:fc:e2:33:a2:b9:4e:bb:fc:e4:25:9d:11:2e:55:5e:2f:d1: 92:7d:63:81:54:3b:2e:8f:53:a1:50:e1:18:92:ea:c7:4c:a5: 5f:8a:47:8e:e1:b8:0e:3f:f1:d9:33:2f:b8:fb:fe:f6:bf:1c: 63:c8:94:14:74:05:2e:52:b1:1c:15:80:af:8e:e6:af:ab:ed: c8:fb:49:ad:58:80:68:00:75:bc:9d:7f:4c:b3:63:34:83:12: 05:35:87:b4:16:8d:d6:c3:a3:ce:75:2f:66:a6:df:a4:35:00: e7:98:a6:df -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwvxzVOKxLuaAp2Aw/VKQaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzNDI3YzUzNTg3M2U0YzRlYWQ4MDQyZDY3YmJmM2YxZjQ3 YjI2YjEwHhcNMjUxMjA1MjMwMDQ3WhcNMjUxMjA2MjMwMDQ3WjAzMTEwLwYDVQQD EyhmNWU1ZDgyOTg2ZmQxNTZmY2VhNjU4MmFiMjYyNTY1Zjg2MTc4NmUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA46YOD6fXqx7kO7jke9JJjGikcXg9 ApbiEHEZ+wmn+C7FulvHguT3BmfBybmbBRrpBscoVswgK9nxLwquuVuHDE19xg5a duZBwWyyiS7/j4K5ACTH42gO8Yj7vKHfr4cYH5I1XlGHaWIXbgzc65yiChHpP2Nd zw4OuQGbBkoOcRL4mayxxgK5h7U+hld9jOjbNmQNX5BRFShI3aCeNllfKUYS1YUj 3JNbE45JvP/cT7YoUok+8uYAxAV30SxEFaqH+LnqPvSm/pBj2CsGAN3zY33honfC ZrNW9SRQfuvlvIzWiF3HaA6WBemihXucMkkjXSG6r/vs7sZJpNCK2zX8owIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPXl2CmG/RVvzqZYKrJiVl+GF4bgMB8GA1UdIwQY MBaAFGNCfFNYc+TE6tgELWe78/H0eyaxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWTBKOFUxaHo1TVRxMkFRdFo3dno4ZlI3SnJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC82MTA4M2MtNGIzZC00NmQ4LTgyYWEt YjI5OTdiYzYxNDc0LzEvWTBKOFUxaHo1TVRxMkFRdFo3dno4ZlI3SnJFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC82MTA4M2MtNGIzZC00NmQ4LTgyYWEtYjI5OTdiYzYxNDc0 LzEvWTBKOFUxaHo1TVRxMkFRdFo3dno4ZlI3SnJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATKObEj6t XVoOXnvdQPtLwFrR05MkKUNVVgJnV80dxslThHSGoI6AaRb3N+Cms1CTOE6eZlcy MDg5M2YpoWfJ+4npwepxKQ5m7GZ1p9exiRrziQz2lTM2BKMhLTm8ywrg/yhpjomH vJ/FJl7sMZM+04EYvppaov0nJB/pYx3ubbXcg/jj+wtSYEeA0mFSEtDB/vziM6K5 Trv85CWdES5VXi/Rkn1jgVQ7Lo9ToVDhGJLqx0ylX4pHjuG4Dj/x2TMvuPv+9r8c Y8iUFHQFLlKxHBWAr47mr6vtyPtJrViAaAB1vJ1/TLNjNIMSBTWHtBaN1sOjznUv ZqbfpDUA55im3w== -----END CERTIFICATE-----Generated at Sat Dec 6 08:34:21 2025 by rpki-client