This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/8cf962-074f-41ac-ae2a-816203d21d12/1/Y1OCnAYaivJt6Ub8noGIXHTBdMc.mft File: Y1OCnAYaivJt6Ub8noGIXHTBdMc.mft (raw, json) Hash identifier: hGbCAyzrwIt98uaXHGz2aKYMHRtqtjfWPCSxMAxSZ8w= Subject key identifier: E6:90:EE:6D:8D:D3:01:40:CF:73:A3:58:37:71:48:0C:E8:50:FF:62 Authority key identifier: 63:53:82:9C:06:1A:8A:F2:6D:E9:46:FC:9E:81:88:5C:74:C1:74:C7 Certificate issuer: /CN=6353829c061a8af26de946fc9e81885c74c174c7 Certificate serial: 019AF540FFDF21D4D14CBEF22CC447C77685 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y1OCnAYaivJt6Ub8noGIXHTBdMc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/8cf962-074f-41ac-ae2a-816203d21d12/1/Y1OCnAYaivJt6Ub8noGIXHTBdMc.mft Manifest number: 0965 Signing time: Sat 06 Dec 2025 20:01:08 +0000 Manifest this update: Sat 06 Dec 2025 20:01:08 +0000 Manifest next update: Sun 07 Dec 2025 20:01:08 +0000 Files and hashes: 1: La2c1GzhO3LCYjtEuOjFcoNgj6s.roa (hash: hdTkzvggjd5erT4guotzR+j9YHEwpmHcJ+YP7gw1WZs=) 2: Y1OCnAYaivJt6Ub8noGIXHTBdMc.crl (hash: pJgzBY3yw/lVW98kChKU8mmkRo5shLMWSJf6yMuPZGg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/8cf962-074f-41ac-ae2a-816203d21d12/1/Y1OCnAYaivJt6Ub8noGIXHTBdMc.crl rsync://rpki.ripe.net/repository/DEFAULT/aa/8cf962-074f-41ac-ae2a-816203d21d12/1/Y1OCnAYaivJt6Ub8noGIXHTBdMc.mft rsync://rpki.ripe.net/repository/DEFAULT/Y1OCnAYaivJt6Ub8noGIXHTBdMc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 20:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:40:ff:df:21:d4:d1:4c:be:f2:2c:c4:47:c7:76:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6353829c061a8af26de946fc9e81885c74c174c7 Validity Not Before: Dec 6 20:01:08 2025 GMT Not After : Dec 7 20:01:08 2025 GMT Subject: CN=e690ee6d8dd30140cf73a3583771480ce850ff62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:11:0d:a7:c0:d1:7c:19:71:3c:86:08:a8:83: 16:57:f6:23:ff:ca:8b:a5:78:be:76:fd:33:79:7a: a0:f3:83:8b:bb:5c:55:59:cf:dc:a6:b9:24:7e:5c: a1:68:6e:ab:ff:13:5f:e8:42:72:38:1d:34:ce:39: 42:57:79:99:37:92:86:79:c1:79:f1:ad:3e:b4:b3: c3:8a:79:a5:1d:86:89:16:b1:7a:bb:1d:65:8d:aa: 73:7f:77:0e:f9:cb:7c:26:c6:ee:96:d6:cb:42:80: e3:d3:e3:34:83:d7:ad:3a:d2:d9:9a:5e:0b:f7:6c: 39:d9:ab:c0:10:cf:80:22:0f:6b:93:0a:29:88:32: 03:0b:15:f5:de:a1:de:fd:8e:6d:dc:c1:be:5c:3f: c0:c3:1a:4b:4a:2e:32:10:8e:d1:4a:8e:a1:55:2f: 35:78:fd:8f:bc:44:09:64:3d:70:d9:ac:d5:1e:a8: a5:6e:5a:81:2c:a5:7f:d5:8d:83:6f:ab:52:36:00: f6:ac:96:51:c4:5f:b8:50:22:01:d2:09:d8:1e:29: ee:3b:c9:6e:d6:ca:42:f5:58:91:6f:a6:c8:c7:d9: 20:60:01:99:1f:77:48:95:a5:cc:4f:66:d5:71:44: d7:0a:1b:70:50:4d:a9:8b:ed:3c:7d:de:ac:5e:5e: 9d:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:90:EE:6D:8D:D3:01:40:CF:73:A3:58:37:71:48:0C:E8:50:FF:62 X509v3 Authority Key Identifier: keyid:63:53:82:9C:06:1A:8A:F2:6D:E9:46:FC:9E:81:88:5C:74:C1:74:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y1OCnAYaivJt6Ub8noGIXHTBdMc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/8cf962-074f-41ac-ae2a-816203d21d12/1/Y1OCnAYaivJt6Ub8noGIXHTBdMc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/8cf962-074f-41ac-ae2a-816203d21d12/1/Y1OCnAYaivJt6Ub8noGIXHTBdMc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:75:44:59:ac:b1:3a:54:fe:dd:27:3f:81:14:b0:81:04:9c: d4:06:41:15:97:eb:b4:b5:9e:b1:2f:a3:2a:c0:1a:c0:13:cb: 5d:c2:6d:94:4e:40:a5:86:6f:a4:b9:67:d4:eb:ef:d0:b2:7a: 94:27:b7:00:13:5c:20:91:88:5b:f8:32:ef:a6:8e:69:a7:13: 97:23:57:b2:06:05:3e:e2:a2:ba:9e:50:1b:bc:e3:6c:64:ec: 58:08:fc:78:04:34:93:a7:3c:71:e2:03:55:bc:8d:08:3f:95: 28:c4:cc:0c:ce:b5:e7:29:00:f8:d0:29:c6:97:bb:0c:44:ba: 8b:05:e2:4a:a2:2a:96:5d:29:d2:0f:14:9a:f0:9a:ed:82:dd: da:4e:64:a0:5d:a4:87:ca:09:7c:93:85:b2:27:8f:38:4b:5c: 96:45:f5:63:e7:ee:be:f4:05:f9:8a:55:35:b0:d1:39:5c:f0: 6f:80:72:e2:d3:0c:08:df:57:3e:a6:60:fb:ae:9f:19:9d:a3: ff:d3:12:ff:c0:ba:84:97:e6:a1:94:0b:79:cb:af:d8:94:e1: 66:52:23:0e:5e:72:2e:55:4c:35:37:2b:b2:f8:44:bd:59:00: 16:ad:d2:fd:f7:44:99:bd:c6:fa:04:fe:ce:b2:ab:ba:6e:f7: 5d:d3:6a:85 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1QP/fIdTRTL7yLMRHx3aFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzNTM4MjljMDYxYThhZjI2ZGU5NDZmYzllODE4ODVjNzRj MTc0YzcwHhcNMjUxMjA2MjAwMTA4WhcNMjUxMjA3MjAwMTA4WjAzMTEwLwYDVQQD EyhlNjkwZWU2ZDhkZDMwMTQwY2Y3M2EzNTgzNzcxNDgwY2U4NTBmZjYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuRENp8DRfBlxPIYIqIMWV/Yj/8qL pXi+dv0zeXqg84OLu1xVWc/cprkkflyhaG6r/xNf6EJyOB00zjlCV3mZN5KGecF5 8a0+tLPDinmlHYaJFrF6ux1ljapzf3cO+ct8JsbultbLQoDj0+M0g9etOtLZml4L 92w52avAEM+AIg9rkwopiDIDCxX13qHe/Y5t3MG+XD/AwxpLSi4yEI7RSo6hVS81 eP2PvEQJZD1w2azVHqilblqBLKV/1Y2Db6tSNgD2rJZRxF+4UCIB0gnYHinuO8lu 1spC9ViRb6bIx9kgYAGZH3dIlaXMT2bVcUTXChtwUE2pi+08fd6sXl6duwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOaQ7m2N0wFAz3OjWDdxSAzoUP9iMB8GA1UdIwQY MBaAFGNTgpwGGorybelG/J6BiFx0wXTHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWTFPQ25BWWFpdkp0NlViOG5vR0lYSFRCZE1jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS84Y2Y5NjItMDc0Zi00MWFjLWFlMmEt ODE2MjAzZDIxZDEyLzEvWTFPQ25BWWFpdkp0NlViOG5vR0lYSFRCZE1jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYS84Y2Y5NjItMDc0Zi00MWFjLWFlMmEtODE2MjAzZDIxZDEy LzEvWTFPQ25BWWFpdkp0NlViOG5vR0lYSFRCZE1jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFXVEWayx OlT+3Sc/gRSwgQSc1AZBFZfrtLWesS+jKsAawBPLXcJtlE5ApYZvpLln1Ovv0LJ6 lCe3ABNcIJGIW/gy76aOaacTlyNXsgYFPuKiup5QG7zjbGTsWAj8eAQ0k6c8ceID VbyNCD+VKMTMDM615ykA+NApxpe7DES6iwXiSqIqll0p0g8UmvCa7YLd2k5koF2k h8oJfJOFsiePOEtclkX1Y+fuvvQF+YpVNbDROVzwb4By4tMMCN9XPqZg+66fGZ2j /9MS/8C6hJfmoZQLecuv2JThZlIjDl5yLlVMNTcrsvhEvVkAFq3S/fdEmb3G+gT+ zrKrum73XdNqhQ== -----END CERTIFICATE-----Generated at Sun Dec 7 01:50:02 2025 by rpki-client