This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/cc3c28-7b13-4343-af37-25550ba29127/1/Y4yD-aOj0hYKAXjKGcy0Og0vGJA.mft File: Y4yD-aOj0hYKAXjKGcy0Og0vGJA.mft (raw, json) Hash identifier: fWIJ8q/CiLl9Mg8NQWleJ/bWmp9sbUau+9Icj/WfFkw= Subject key identifier: C7:47:81:36:0D:69:F1:F1:27:07:1E:CF:CF:E5:BE:13:A2:4E:9A:53 Authority key identifier: 63:8C:83:F9:A3:A3:D2:16:0A:01:78:CA:19:CC:B4:3A:0D:2F:18:90 Certificate issuer: /CN=638c83f9a3a3d2160a0178ca19ccb43a0d2f1890 Certificate serial: 019AF051076B15B53E64FEBE71B3399506D1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y4yD-aOj0hYKAXjKGcy0Og0vGJA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/cc3c28-7b13-4343-af37-25550ba29127/1/Y4yD-aOj0hYKAXjKGcy0Og0vGJA.mft Manifest number: 0D43 Signing time: Fri 05 Dec 2025 21:00:33 +0000 Manifest this update: Fri 05 Dec 2025 21:00:33 +0000 Manifest next update: Sat 06 Dec 2025 21:00:33 +0000 Files and hashes: 1: 2ATvNbnGawNlZZ5eknfDSbXFIzQ.roa (hash: tXSd9lU5fCgD64Z/fTQv/A1ZJJrB3ZcLdqsIZET5sKI=) 2: Y4yD-aOj0hYKAXjKGcy0Og0vGJA.crl (hash: LQqcmuETRp2kl7CmRGFKtp1ph1nH3NO8JvzIRu5iCYQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/cc3c28-7b13-4343-af37-25550ba29127/1/Y4yD-aOj0hYKAXjKGcy0Og0vGJA.crl rsync://rpki.ripe.net/repository/DEFAULT/a8/cc3c28-7b13-4343-af37-25550ba29127/1/Y4yD-aOj0hYKAXjKGcy0Og0vGJA.mft rsync://rpki.ripe.net/repository/DEFAULT/Y4yD-aOj0hYKAXjKGcy0Og0vGJA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 21:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:51:07:6b:15:b5:3e:64:fe:be:71:b3:39:95:06:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=638c83f9a3a3d2160a0178ca19ccb43a0d2f1890 Validity Not Before: Dec 5 21:00:33 2025 GMT Not After : Dec 6 21:00:33 2025 GMT Subject: CN=c74781360d69f1f127071ecfcfe5be13a24e9a53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:59:41:21:1c:18:61:06:dc:fd:1a:15:ce:e4: 4c:98:a7:c6:be:a5:ae:66:a5:65:58:ca:05:ca:d2: 85:93:31:c9:cd:88:e1:32:89:cd:37:68:3f:b1:7e: e5:23:de:2f:be:af:ee:25:94:49:65:a6:40:01:41: a5:89:5e:cb:cd:f7:23:a8:18:0f:cb:1e:51:d8:fc: e4:f4:cf:87:e0:a3:73:04:7d:8e:63:a3:61:1b:41: eb:07:29:cb:a3:c2:25:4c:f1:20:7a:fb:bb:4a:63: ef:e3:e3:12:d3:a7:64:1e:e7:e9:bb:46:91:db:60: 03:58:51:71:53:17:26:b9:a2:84:b1:e5:8a:49:f0: 87:5e:73:73:8b:c9:7e:06:d6:71:09:fd:e1:2d:a9: 75:66:51:43:72:79:88:75:7f:a3:9c:02:2a:1b:b4: c6:2f:9a:ab:13:11:29:fd:f3:33:a6:97:58:c1:a0: 87:f7:b5:3a:dc:b4:c4:70:23:79:e3:47:90:7c:ee: a5:09:65:c5:4b:20:c0:91:4e:9f:bf:2c:ab:2b:38: af:42:90:09:32:d8:18:b6:eb:f6:b0:10:4d:cc:ba: f6:98:20:46:a6:20:1e:5b:8f:f3:5a:35:bc:ef:79: 2c:26:e6:fe:a6:78:fb:7d:a0:77:1a:51:d2:5e:95: b5:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:47:81:36:0D:69:F1:F1:27:07:1E:CF:CF:E5:BE:13:A2:4E:9A:53 X509v3 Authority Key Identifier: keyid:63:8C:83:F9:A3:A3:D2:16:0A:01:78:CA:19:CC:B4:3A:0D:2F:18:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y4yD-aOj0hYKAXjKGcy0Og0vGJA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/cc3c28-7b13-4343-af37-25550ba29127/1/Y4yD-aOj0hYKAXjKGcy0Og0vGJA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/cc3c28-7b13-4343-af37-25550ba29127/1/Y4yD-aOj0hYKAXjKGcy0Og0vGJA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:17:22:72:50:57:70:79:a8:4a:b8:74:07:ac:d5:d2:a5:5f: cc:91:2b:9d:38:21:f1:b7:e5:e9:9b:3d:fe:0f:a4:f6:60:c7: c5:d6:0e:04:72:33:78:b2:b7:65:60:26:50:d9:4b:8b:3d:89: cd:17:98:d4:fa:7e:f2:e8:ab:92:68:95:9f:5f:8c:5d:21:43: 04:dd:0e:69:ab:ec:f0:88:e7:84:4a:76:6a:ac:ef:aa:19:90: a8:02:0f:e7:ae:6d:15:3c:6d:be:67:d6:11:20:4f:5e:62:48: ee:8b:19:b4:0d:8e:8d:6b:d6:2c:c4:eb:a6:3f:f6:92:ff:08: 07:a5:e3:0e:0b:09:d9:d2:91:d2:c2:92:46:39:67:e7:77:25: c1:91:6b:8a:dd:f1:38:ea:b0:86:6f:06:a4:e3:16:21:d1:b4: 83:57:2c:95:4a:36:d9:e2:4a:97:7a:7f:1d:a0:33:4f:25:2e: de:0e:1e:62:63:71:ac:23:e3:ac:36:20:fa:0f:06:63:46:44: 9a:0f:01:99:08:c3:65:2b:bf:f0:54:80:ec:e6:75:3d:c1:b9: e8:9d:a6:66:aa:42:ae:1e:68:7d:87:95:9d:e5:55:5b:93:ea: 1c:a7:41:ff:1f:39:37:5d:a8:b0:01:36:54:99:a5:1a:1c:ac: a7:00:7d:1c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwUQdrFbU+ZP6+cbM5lQbRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzOGM4M2Y5YTNhM2QyMTYwYTAxNzhjYTE5Y2NiNDNhMGQy ZjE4OTAwHhcNMjUxMjA1MjEwMDMzWhcNMjUxMjA2MjEwMDMzWjAzMTEwLwYDVQQD EyhjNzQ3ODEzNjBkNjlmMWYxMjcwNzFlY2ZjZmU1YmUxM2EyNGU5YTUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt1lBIRwYYQbc/RoVzuRMmKfGvqWu ZqVlWMoFytKFkzHJzYjhMonNN2g/sX7lI94vvq/uJZRJZaZAAUGliV7LzfcjqBgP yx5R2Pzk9M+H4KNzBH2OY6NhG0HrBynLo8IlTPEgevu7SmPv4+MS06dkHufpu0aR 22ADWFFxUxcmuaKEseWKSfCHXnNzi8l+BtZxCf3hLal1ZlFDcnmIdX+jnAIqG7TG L5qrExEp/fMzppdYwaCH97U63LTEcCN540eQfO6lCWXFSyDAkU6fvyyrKzivQpAJ MtgYtuv2sBBNzLr2mCBGpiAeW4/zWjW873ksJub+pnj7faB3GlHSXpW1tQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMdHgTYNafHxJwcez8/lvhOiTppTMB8GA1UdIwQY MBaAFGOMg/mjo9IWCgF4yhnMtDoNLxiQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWTR5RC1hT2owaFlLQVhqS0djeTBPZzB2R0pBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC9jYzNjMjgtN2IxMy00MzQzLWFmMzct MjU1NTBiYTI5MTI3LzEvWTR5RC1hT2owaFlLQVhqS0djeTBPZzB2R0pBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC9jYzNjMjgtN2IxMy00MzQzLWFmMzctMjU1NTBiYTI5MTI3 LzEvWTR5RC1hT2owaFlLQVhqS0djeTBPZzB2R0pBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZhciclBX cHmoSrh0B6zV0qVfzJErnTgh8bfl6Zs9/g+k9mDHxdYOBHIzeLK3ZWAmUNlLiz2J zReY1Pp+8uirkmiVn1+MXSFDBN0Oaavs8IjnhEp2aqzvqhmQqAIP565tFTxtvmfW ESBPXmJI7osZtA2OjWvWLMTrpj/2kv8IB6XjDgsJ2dKR0sKSRjln53clwZFrit3x OOqwhm8GpOMWIdG0g1cslUo22eJKl3p/HaAzTyUu3g4eYmNxrCPjrDYg+g8GY0ZE mg8BmQjDZSu/8FSA7OZ1PcG56J2mZqpCrh5ofYeVneVVW5PqHKdB/x85N12osAE2 VJmlGhyspwB9HA== -----END CERTIFICATE-----Generated at Sat Dec 6 06:58:37 2025 by rpki-client