This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/35656a-066e-49df-b709-7bfcd7e94b9e/1/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.mft File: Y8NEVcDU5Pw7ovHEbwi0dcj22YA.mft (raw, json) Hash identifier: 8KERwUIRKTLfWF4PuZI2lyJgqWIjK5LxrUVQVNcoAmc= Subject key identifier: 50:B9:33:E2:16:59:04:E1:11:16:6D:CA:88:9F:25:1E:27:37:31:79 Authority key identifier: 63:C3:44:55:C0:D4:E4:FC:3B:A2:F1:C4:6F:08:B4:75:C8:F6:D9:80 Certificate issuer: /CN=63c34455c0d4e4fc3ba2f1c46f08b475c8f6d980 Certificate serial: 019AF163D3A5F195606B40F7794C7D9E6AA9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/35656a-066e-49df-b709-7bfcd7e94b9e/1/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.mft Manifest number: 0DE5 Signing time: Sat 06 Dec 2025 02:00:42 +0000 Manifest this update: Sat 06 Dec 2025 02:00:42 +0000 Manifest next update: Sun 07 Dec 2025 02:00:42 +0000 Files and hashes: 1: 1c8AtbAMfHlASe1nRmNmVLi-IPE.roa (hash: Yc6B/ACFRjBHZdeDucnbU591dd3oO9WG4VeSfIdJAWg=) 2: B-YGSnw6mlzmsy9e1WdnYiYl8uA.roa (hash: dqAKP/dgHYPVRyqQIAqMlRLtWiN+IpM+mjudxWdaulM=) 3: Y8NEVcDU5Pw7ovHEbwi0dcj22YA.crl (hash: 38mr13Dmws6zVscJxYFdSJFoJsz0Lo4sN4aRXE+2nBk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/35656a-066e-49df-b709-7bfcd7e94b9e/1/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/35656a-066e-49df-b709-7bfcd7e94b9e/1/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.mft rsync://rpki.ripe.net/repository/DEFAULT/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:63:d3:a5:f1:95:60:6b:40:f7:79:4c:7d:9e:6a:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63c34455c0d4e4fc3ba2f1c46f08b475c8f6d980 Validity Not Before: Dec 6 02:00:42 2025 GMT Not After : Dec 7 02:00:42 2025 GMT Subject: CN=50b933e2165904e111166dca889f251e27373179 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:b3:7a:b0:2e:95:de:d6:b9:86:19:e1:aa:82: 1f:32:23:ee:a5:c0:00:1d:b4:08:ed:64:a3:a7:82: 1a:cf:26:8c:3a:26:08:ab:50:78:b2:37:ea:dd:b4: ab:b6:67:af:b8:e3:39:a0:8e:17:0e:d5:ea:8a:04: c9:a2:d1:ea:49:1c:5c:8a:9b:ba:3d:95:bb:d4:b8: ad:79:06:20:e1:81:a9:fe:80:92:a7:7b:0f:7f:96: fd:c7:f6:2a:5a:f8:d3:58:5e:ea:7a:8e:7d:37:69: a6:28:b6:89:ba:5d:af:8d:ca:83:0e:a3:be:a7:f4: 5b:62:25:2f:5d:13:4a:9d:b5:94:80:a9:12:92:81: bd:cb:e3:5b:4f:c6:6a:3b:ce:da:0c:18:f6:be:a9: 7d:d6:88:ce:d5:c0:25:66:ab:e0:7d:9c:0f:1a:a6: 03:b0:51:07:44:5d:50:dd:a8:57:3b:26:42:9b:93: ba:96:c2:ae:15:c8:01:d9:f5:c8:a4:b0:aa:19:90: 42:cd:05:27:f2:71:ba:3a:01:b7:0f:d2:e5:30:d4: b4:f1:7d:8f:19:31:4b:fc:b8:a8:ec:30:bb:0f:c8: 9e:ac:65:68:3c:3e:0f:1f:18:9f:38:be:9a:d4:55: c3:e3:1b:c6:16:85:ef:9d:86:ae:49:3c:1c:65:07: e5:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:B9:33:E2:16:59:04:E1:11:16:6D:CA:88:9F:25:1E:27:37:31:79 X509v3 Authority Key Identifier: keyid:63:C3:44:55:C0:D4:E4:FC:3B:A2:F1:C4:6F:08:B4:75:C8:F6:D9:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/35656a-066e-49df-b709-7bfcd7e94b9e/1/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/35656a-066e-49df-b709-7bfcd7e94b9e/1/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:8c:e4:cd:51:1e:f0:e4:63:60:de:0d:53:8b:1b:a1:c4:4c: d5:4a:fd:ee:a8:00:a6:31:69:f1:e4:d2:41:02:80:57:ca:54: 23:1a:94:69:d9:c2:4b:b9:87:6d:a9:f6:c2:0c:8c:57:bc:4b: b9:b0:bf:fb:64:19:fa:b7:ee:82:dd:a4:f0:ee:c5:d6:06:dd: 03:f0:f5:91:20:0b:90:9f:eb:ae:e9:1d:5e:04:ff:b0:1c:78: 5d:1b:1d:cf:d6:04:d1:f0:3f:96:c3:fb:1a:b2:a0:67:f3:71: 39:57:11:f5:f7:92:72:b9:53:ef:11:08:62:d2:a9:a1:ee:01: e7:6f:60:7d:1a:e0:8a:1d:c6:db:2d:c1:be:00:f2:62:bc:a5: 72:b9:a8:b2:4f:13:ef:ff:33:20:5a:25:33:ff:db:04:5e:d1: 73:06:73:e8:76:90:1e:61:d6:ad:92:30:a6:d6:9d:a5:9f:c3: ba:b9:02:35:27:f4:2e:ac:c5:7e:38:e6:68:b4:8e:ea:a6:bb: 50:75:9c:13:cc:7c:ce:00:15:e4:24:75:4f:93:dc:2e:ef:eb: 12:de:52:38:24:40:1a:d1:75:6f:6c:2e:3e:3f:3e:b7:ae:46: c2:e0:9b:f9:c6:f1:32:96:d0:42:88:d7:a7:f9:91:10:aa:08: 0f:9a:95:02 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxY9Ol8ZVga0D3eUx9nmqpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzYzM0NDU1YzBkNGU0ZmMzYmEyZjFjNDZmMDhiNDc1Yzhm NmQ5ODAwHhcNMjUxMjA2MDIwMDQyWhcNMjUxMjA3MDIwMDQyWjAzMTEwLwYDVQQD Eyg1MGI5MzNlMjE2NTkwNGUxMTExNjZkY2E4ODlmMjUxZTI3MzczMTc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0rN6sC6V3ta5hhnhqoIfMiPupcAA HbQI7WSjp4IazyaMOiYIq1B4sjfq3bSrtmevuOM5oI4XDtXqigTJotHqSRxcipu6 PZW71LiteQYg4YGp/oCSp3sPf5b9x/YqWvjTWF7qeo59N2mmKLaJul2vjcqDDqO+ p/RbYiUvXRNKnbWUgKkSkoG9y+NbT8ZqO87aDBj2vql91ojO1cAlZqvgfZwPGqYD sFEHRF1Q3ahXOyZCm5O6lsKuFcgB2fXIpLCqGZBCzQUn8nG6OgG3D9LlMNS08X2P GTFL/Lio7DC7D8ierGVoPD4PHxifOL6a1FXD4xvGFoXvnYauSTwcZQflnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFC5M+IWWQThERZtyoifJR4nNzF5MB8GA1UdIwQY MBaAFGPDRFXA1OT8O6LxxG8ItHXI9tmAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWThORVZjRFU1UHc3b3ZIRWJ3aTBkY2oyMllBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi8zNTY1NmEtMDY2ZS00OWRmLWI3MDkt N2JmY2Q3ZTk0YjllLzEvWThORVZjRFU1UHc3b3ZIRWJ3aTBkY2oyMllBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi8zNTY1NmEtMDY2ZS00OWRmLWI3MDktN2JmY2Q3ZTk0Yjll LzEvWThORVZjRFU1UHc3b3ZIRWJ3aTBkY2oyMllBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhozkzVEe 8ORjYN4NU4sbocRM1Ur97qgApjFp8eTSQQKAV8pUIxqUadnCS7mHban2wgyMV7xL ubC/+2QZ+rfugt2k8O7F1gbdA/D1kSALkJ/rrukdXgT/sBx4XRsdz9YE0fA/lsP7 GrKgZ/NxOVcR9feScrlT7xEIYtKpoe4B529gfRrgih3G2y3BvgDyYrylcrmosk8T 7/8zIFolM//bBF7RcwZz6HaQHmHWrZIwptadpZ/DurkCNSf0LqzFfjjmaLSO6qa7 UHWcE8x8zgAV5CR1T5PcLu/rEt5SOCRAGtF1b2wuPj8+t65GwuCb+cbxMpbQQojX p/mREKoID5qVAg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:21:15 2025 by rpki-client