This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/83607f-14b4-4217-b6cd-b7bae910c7ac/1/Y0FqyaIZN3iMrcd7ep-JttTFWko.mft File: Y0FqyaIZN3iMrcd7ep-JttTFWko.mft (raw, json) Hash identifier: HVy7JIHip8ZnswjTD9Qz3dzYjBL3uIZfnLPTFqC6HYo= Subject key identifier: B0:8B:1C:A8:04:53:1F:D3:48:00:03:D0:EF:4C:5F:68:19:83:63:28 Authority key identifier: 63:41:6A:C9:A2:19:37:78:8C:AD:C7:7B:7A:9F:89:B6:D4:C5:5A:4A Certificate issuer: /CN=63416ac9a21937788cadc77b7a9f89b6d4c55a4a Certificate serial: 019B32316167F615133371245504289ED49A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y0FqyaIZN3iMrcd7ep-JttTFWko.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/83607f-14b4-4217-b6cd-b7bae910c7ac/1/Y0FqyaIZN3iMrcd7ep-JttTFWko.mft Manifest number: 1782 Signing time: Thu 18 Dec 2025 16:00:55 +0000 Manifest this update: Thu 18 Dec 2025 16:00:55 +0000 Manifest next update: Fri 19 Dec 2025 16:00:55 +0000 Files and hashes: 1: 0UbqABxvR9Kqt-i2oDJKBmEOIcY.roa (hash: sOBF/jnuYbPKw9b4UfAAmGDCy2JYvqAzi0krYUHoJ4Y=) 2: Y0FqyaIZN3iMrcd7ep-JttTFWko.crl (hash: 6UJvzs3x1OryiFey3hWaACDBv3aHz1kO25hWNR+GTgI=) 3: _wI9dgfN1p8T3ArXyq7NUMinHsQ.roa (hash: zHVbZrPjByz7ecEstvck1XG+KadlzRwYPNhhpEtqQfI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/83607f-14b4-4217-b6cd-b7bae910c7ac/1/Y0FqyaIZN3iMrcd7ep-JttTFWko.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/83607f-14b4-4217-b6cd-b7bae910c7ac/1/Y0FqyaIZN3iMrcd7ep-JttTFWko.mft rsync://rpki.ripe.net/repository/DEFAULT/Y0FqyaIZN3iMrcd7ep-JttTFWko.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:31:61:67:f6:15:13:33:71:24:55:04:28:9e:d4:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63416ac9a21937788cadc77b7a9f89b6d4c55a4a Validity Not Before: Dec 18 16:00:55 2025 GMT Not After : Dec 19 16:00:55 2025 GMT Subject: CN=b08b1ca804531fd3480003d0ef4c5f6819836328 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:32:ba:cd:1e:e7:97:05:63:91:04:8b:fb:4e: e0:e5:02:e6:12:f9:19:ef:a2:9d:cb:62:3f:f3:03: 73:ca:07:03:c5:40:1b:c1:56:7e:bb:f8:e8:6c:ba: 74:a5:fa:df:fd:86:35:51:5e:29:d2:17:c4:ba:ec: a5:d7:81:f1:66:15:3d:ec:31:17:de:cd:17:cf:93: 7e:9f:58:fd:2c:33:39:d2:44:dd:06:fe:24:c9:60: a9:a3:66:6e:72:7a:2f:9f:9d:2a:e3:37:4f:98:8d: e1:56:b0:52:8b:9e:1b:7b:57:12:c0:d7:b3:96:9a: 83:7c:3d:b1:2f:a0:a8:0d:6c:0c:02:2e:cb:6d:60: da:53:25:40:5d:ba:38:03:67:dd:f0:79:c9:46:76: 19:44:7b:f6:78:7a:1b:24:84:82:7e:a9:a6:a0:40: 41:fa:e1:61:a8:3e:3e:fa:59:11:e2:01:04:c0:3c: 9f:ea:26:00:bd:99:43:2f:5b:66:de:48:4d:80:4d: aa:9c:43:7d:d3:e4:5c:69:74:94:8d:88:41:f3:b3: 7c:d5:51:00:ca:4e:3f:9c:61:20:39:7d:44:2f:d7: 2e:f4:df:24:fc:27:78:81:36:fd:1b:f3:4d:a5:f2: f9:3b:74:c9:03:b5:dc:d0:2a:e6:30:f9:d6:7d:d4: 87:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:8B:1C:A8:04:53:1F:D3:48:00:03:D0:EF:4C:5F:68:19:83:63:28 X509v3 Authority Key Identifier: keyid:63:41:6A:C9:A2:19:37:78:8C:AD:C7:7B:7A:9F:89:B6:D4:C5:5A:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y0FqyaIZN3iMrcd7ep-JttTFWko.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/83607f-14b4-4217-b6cd-b7bae910c7ac/1/Y0FqyaIZN3iMrcd7ep-JttTFWko.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/83607f-14b4-4217-b6cd-b7bae910c7ac/1/Y0FqyaIZN3iMrcd7ep-JttTFWko.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:57:4b:ce:4a:c8:07:cf:19:c6:81:e3:8e:47:bb:98:ec:a3: b4:86:ed:b5:14:b0:a0:3f:af:1f:9f:2e:be:a5:6f:58:e3:94: 38:d1:28:2e:c5:bb:65:32:61:58:2f:bf:5e:44:fb:c2:21:c5: 4a:26:2f:7a:a8:c5:98:34:38:db:48:e6:e8:05:0c:04:a0:84: 61:86:21:22:41:27:0a:be:a8:8e:0a:c1:b8:5e:c1:c1:f0:6d: ef:8e:92:da:cc:95:77:0e:0d:8d:a2:87:4f:a2:58:b2:9f:35: 2a:63:42:2a:6f:a2:0e:05:aa:46:cb:a1:1f:f4:2e:ca:78:84: 14:57:d6:94:fb:53:13:48:80:af:70:ca:c0:dd:a4:09:c5:83: f1:6d:43:97:6a:4a:63:fa:fe:f4:8a:c9:80:0f:e6:c3:50:fe: f8:ff:fa:2a:48:5d:cd:53:26:b1:10:b1:ba:8b:41:8b:19:e3: 92:4a:ad:95:49:2d:96:0d:c9:b8:40:b1:af:4e:ba:eb:06:1d: 73:dc:c0:ca:d0:ab:9f:11:57:d7:9b:15:ac:3e:d1:6d:c8:9c: 11:3c:18:3a:04:1d:8a:e1:29:cb:5f:e9:2b:2c:fe:6b:32:28: c2:3c:3f:d3:55:cb:f2:7b:5b:4f:2e:cc:d9:e8:23:35:64:4a: 3f:43:15:84 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsyMWFn9hUTM3EkVQQontSaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzNDE2YWM5YTIxOTM3Nzg4Y2FkYzc3YjdhOWY4OWI2ZDRj NTVhNGEwHhcNMjUxMjE4MTYwMDU1WhcNMjUxMjE5MTYwMDU1WjAzMTEwLwYDVQQD EyhiMDhiMWNhODA0NTMxZmQzNDgwMDAzZDBlZjRjNWY2ODE5ODM2MzI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoDK6zR7nlwVjkQSL+07g5QLmEvkZ 76Kdy2I/8wNzygcDxUAbwVZ+u/jobLp0pfrf/YY1UV4p0hfEuuyl14HxZhU97DEX 3s0Xz5N+n1j9LDM50kTdBv4kyWCpo2Zucnovn50q4zdPmI3hVrBSi54be1cSwNez lpqDfD2xL6CoDWwMAi7LbWDaUyVAXbo4A2fd8HnJRnYZRHv2eHobJISCfqmmoEBB +uFhqD4++lkR4gEEwDyf6iYAvZlDL1tm3khNgE2qnEN90+RcaXSUjYhB87N81VEA yk4/nGEgOX1EL9cu9N8k/Cd4gTb9G/NNpfL5O3TJA7Xc0CrmMPnWfdSHgQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLCLHKgEUx/TSAAD0O9MX2gZg2MoMB8GA1UdIwQY MBaAFGNBasmiGTd4jK3He3qfibbUxVpKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWTBGcXlhSVpOM2lNcmNkN2VwLUp0dFRGV2tvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy84MzYwN2YtMTRiNC00MjE3LWI2Y2Qt YjdiYWU5MTBjN2FjLzEvWTBGcXlhSVpOM2lNcmNkN2VwLUp0dFRGV2tvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy84MzYwN2YtMTRiNC00MjE3LWI2Y2QtYjdiYWU5MTBjN2Fj LzEvWTBGcXlhSVpOM2lNcmNkN2VwLUp0dFRGV2tvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg1dLzkrI B88ZxoHjjke7mOyjtIbttRSwoD+vH58uvqVvWOOUONEoLsW7ZTJhWC+/XkT7wiHF SiYveqjFmDQ420jm6AUMBKCEYYYhIkEnCr6ojgrBuF7BwfBt746S2syVdw4NjaKH T6JYsp81KmNCKm+iDgWqRsuhH/QuyniEFFfWlPtTE0iAr3DKwN2kCcWD8W1Dl2pK Y/r+9IrJgA/mw1D++P/6KkhdzVMmsRCxuotBixnjkkqtlUktlg3JuECxr0666wYd c9zAytCrnxFX15sVrD7RbcicETwYOgQdiuEpy1/pKyz+azIowjw/01XL8ntbTy7M 2egjNWRKP0MVhA== -----END CERTIFICATE-----Generated at Thu Dec 18 17:51:04 2025 by rpki-client