This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/35656a-066e-49df-b709-7bfcd7e94b9e/1/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.mft File: Y8NEVcDU5Pw7ovHEbwi0dcj22YA.mft (raw, json) Hash identifier: FK6QIvNkqYfNi6fE32xEnpLwK2eVf1l6oFUIy0LPTls= Subject key identifier: 27:AA:36:C5:00:A7:66:17:E7:D0:21:28:DE:71:07:08:86:39:35:B1 Authority key identifier: 63:C3:44:55:C0:D4:E4:FC:3B:A2:F1:C4:6F:08:B4:75:C8:F6:D9:80 Certificate issuer: /CN=63c34455c0d4e4fc3ba2f1c46f08b475c8f6d980 Certificate serial: 019B330D3AB6AD2290E154E82BDD9D19D3E6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/35656a-066e-49df-b709-7bfcd7e94b9e/1/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.mft Manifest number: 0E07 Signing time: Thu 18 Dec 2025 20:01:03 +0000 Manifest this update: Thu 18 Dec 2025 20:01:03 +0000 Manifest next update: Fri 19 Dec 2025 20:01:03 +0000 Files and hashes: 1: 1c8AtbAMfHlASe1nRmNmVLi-IPE.roa (hash: Yc6B/ACFRjBHZdeDucnbU591dd3oO9WG4VeSfIdJAWg=) 2: B-YGSnw6mlzmsy9e1WdnYiYl8uA.roa (hash: dqAKP/dgHYPVRyqQIAqMlRLtWiN+IpM+mjudxWdaulM=) 3: Y8NEVcDU5Pw7ovHEbwi0dcj22YA.crl (hash: Yt+tQXvBXw7lGxZYzHD39TeVL2hnqqiSZt0y9APAOKk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/35656a-066e-49df-b709-7bfcd7e94b9e/1/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/35656a-066e-49df-b709-7bfcd7e94b9e/1/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.mft rsync://rpki.ripe.net/repository/DEFAULT/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 20:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:0d:3a:b6:ad:22:90:e1:54:e8:2b:dd:9d:19:d3:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63c34455c0d4e4fc3ba2f1c46f08b475c8f6d980 Validity Not Before: Dec 18 20:01:03 2025 GMT Not After : Dec 19 20:01:03 2025 GMT Subject: CN=27aa36c500a76617e7d02128de710708863935b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:48:cc:67:d4:cd:69:d6:a8:39:ed:81:c7:22: 88:aa:9e:c8:56:a3:75:2d:48:5e:49:e7:da:5b:c0: 1f:87:0d:a3:ac:9d:82:da:42:d5:7e:ab:68:43:69: 69:cb:3b:4a:7c:81:ac:f8:9b:48:48:43:66:85:11: 55:2e:3c:2c:ef:43:e6:e5:07:25:2e:ae:c2:56:dd: 8e:df:2b:50:36:21:40:a8:05:c1:5c:c7:0e:49:98: 5d:12:4d:e2:9e:d6:2b:09:38:61:6b:30:6a:1d:e7: 4e:65:ec:3d:28:8b:6f:4c:04:e8:18:ab:bc:41:74: a6:d7:2e:62:c6:7f:21:6d:a7:75:b0:3e:11:b6:94: 7d:c1:c3:16:ff:69:82:7c:07:40:56:05:09:25:3a: 80:a3:37:f3:5b:a7:34:4f:0a:6a:15:c1:7c:37:04: 76:12:25:16:2c:ac:2d:87:eb:d1:86:84:26:b4:26: af:23:53:b7:f6:c1:84:1d:63:9b:5e:f0:a4:ab:47: aa:00:52:d0:1c:a7:52:6e:54:7f:44:f8:df:40:b3: 8e:06:a7:6f:7b:d6:68:56:c3:ee:01:ad:a4:27:b9: 8d:15:73:45:8a:7b:e5:04:d5:66:42:de:40:b8:2d: d7:dc:49:cd:93:ee:31:3a:c6:7c:8e:50:b6:c8:f3: 3d:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:AA:36:C5:00:A7:66:17:E7:D0:21:28:DE:71:07:08:86:39:35:B1 X509v3 Authority Key Identifier: keyid:63:C3:44:55:C0:D4:E4:FC:3B:A2:F1:C4:6F:08:B4:75:C8:F6:D9:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/35656a-066e-49df-b709-7bfcd7e94b9e/1/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/35656a-066e-49df-b709-7bfcd7e94b9e/1/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:53:db:ce:fe:77:cc:9f:21:8b:dc:2b:ca:e8:1f:fd:ad:7c: 0d:25:58:f5:8a:7b:3a:ad:ce:d7:26:75:4c:a9:55:99:aa:0f: a3:60:cb:16:2c:b2:2e:a6:54:64:40:03:ef:ed:4d:e2:50:e9: 16:31:06:7c:63:47:fd:e6:26:04:d6:b5:83:d7:6d:f8:76:b3: ac:70:54:f0:0f:e5:3b:97:4d:53:76:f0:d1:a5:b4:b1:d2:32: 89:f0:08:1b:68:f0:99:64:01:8c:2d:60:19:a5:b0:6b:04:db: 90:25:bd:8b:6b:e5:8a:8e:5e:0d:aa:26:a4:27:de:f5:5c:e6: 0f:4a:54:75:c0:97:10:14:e4:61:65:54:41:38:a7:61:24:38: d8:99:e4:28:98:21:d2:14:79:78:0f:11:3b:2b:f5:f8:f5:d6: a2:44:8d:99:28:a9:7f:d7:7b:be:62:1e:5f:42:29:26:10:ed: f0:5e:b5:0b:69:3b:11:3d:cb:95:22:7b:8f:a2:1d:54:20:07: a3:e4:d4:14:fd:e3:8a:02:31:6a:a4:1b:58:4c:60:de:ea:cb: ce:a1:6a:59:88:b6:3f:89:76:14:02:5a:5a:6b:79:2c:e1:04: 45:e7:1d:44:fe:e0:60:cd:1f:72:49:c2:14:c6:65:46:67:bd: ab:80:2f:f4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszDTq2rSKQ4VToK92dGdPmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzYzM0NDU1YzBkNGU0ZmMzYmEyZjFjNDZmMDhiNDc1Yzhm NmQ5ODAwHhcNMjUxMjE4MjAwMTAzWhcNMjUxMjE5MjAwMTAzWjAzMTEwLwYDVQQD EygyN2FhMzZjNTAwYTc2NjE3ZTdkMDIxMjhkZTcxMDcwODg2MzkzNWIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0UjMZ9TNadaoOe2BxyKIqp7IVqN1 LUheSefaW8Afhw2jrJ2C2kLVfqtoQ2lpyztKfIGs+JtISENmhRFVLjws70Pm5Qcl Lq7CVt2O3ytQNiFAqAXBXMcOSZhdEk3intYrCThhazBqHedOZew9KItvTAToGKu8 QXSm1y5ixn8hbad1sD4RtpR9wcMW/2mCfAdAVgUJJTqAozfzW6c0TwpqFcF8NwR2 EiUWLKwth+vRhoQmtCavI1O39sGEHWObXvCkq0eqAFLQHKdSblR/RPjfQLOOBqdv e9ZoVsPuAa2kJ7mNFXNFinvlBNVmQt5AuC3X3EnNk+4xOsZ8jlC2yPM9BwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCeqNsUAp2YX59AhKN5xBwiGOTWxMB8GA1UdIwQY MBaAFGPDRFXA1OT8O6LxxG8ItHXI9tmAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWThORVZjRFU1UHc3b3ZIRWJ3aTBkY2oyMllBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi8zNTY1NmEtMDY2ZS00OWRmLWI3MDkt N2JmY2Q3ZTk0YjllLzEvWThORVZjRFU1UHc3b3ZIRWJ3aTBkY2oyMllBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi8zNTY1NmEtMDY2ZS00OWRmLWI3MDktN2JmY2Q3ZTk0Yjll LzEvWThORVZjRFU1UHc3b3ZIRWJ3aTBkY2oyMllBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc1Pbzv53 zJ8hi9wryugf/a18DSVY9Yp7Oq3O1yZ1TKlVmaoPo2DLFiyyLqZUZEAD7+1N4lDp FjEGfGNH/eYmBNa1g9dt+HazrHBU8A/lO5dNU3bw0aW0sdIyifAIG2jwmWQBjC1g GaWwawTbkCW9i2vlio5eDaompCfe9VzmD0pUdcCXEBTkYWVUQTinYSQ42JnkKJgh 0hR5eA8ROyv1+PXWokSNmSipf9d7vmIeX0IpJhDt8F61C2k7ET3LlSJ7j6IdVCAH o+TUFP3jigIxaqQbWExg3urLzqFqWYi2P4l2FAJaWmt5LOEERecdRP7gYM0fcknC FMZlRme9q4Av9A== -----END CERTIFICATE-----Generated at Fri Dec 19 02:29:24 2025 by rpki-client