This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/83607f-14b4-4217-b6cd-b7bae910c7ac/1/Y0FqyaIZN3iMrcd7ep-JttTFWko.mft File: Y0FqyaIZN3iMrcd7ep-JttTFWko.mft (raw, json) Hash identifier: sON5uZrWImOXEk0JDNwNQ0m3fjVYyCyL07eTA83smY0= Subject key identifier: F8:1D:DA:27:42:F6:D0:4B:43:B1:03:8A:6D:8E:AB:68:A1:AA:FD:20 Authority key identifier: 63:41:6A:C9:A2:19:37:78:8C:AD:C7:7B:7A:9F:89:B6:D4:C5:5A:4A Certificate issuer: /CN=63416ac9a21937788cadc77b7a9f89b6d4c55a4a Certificate serial: 019AF2770A930BA67D189E1561760649A932 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y0FqyaIZN3iMrcd7ep-JttTFWko.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/83607f-14b4-4217-b6cd-b7bae910c7ac/1/Y0FqyaIZN3iMrcd7ep-JttTFWko.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 07:01:18 +0000 Manifest this update: Sat 06 Dec 2025 07:01:18 +0000 Manifest next update: Sun 07 Dec 2025 07:01:18 +0000 Files and hashes: 1: 0UbqABxvR9Kqt-i2oDJKBmEOIcY.roa (hash: sOBF/jnuYbPKw9b4UfAAmGDCy2JYvqAzi0krYUHoJ4Y=) 2: Y0FqyaIZN3iMrcd7ep-JttTFWko.crl (hash: gALStPH46UAN3QMRQilGKYI1L7IWsk78Dq2Ip2tS2yI=) 3: _wI9dgfN1p8T3ArXyq7NUMinHsQ.roa (hash: zHVbZrPjByz7ecEstvck1XG+KadlzRwYPNhhpEtqQfI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/83607f-14b4-4217-b6cd-b7bae910c7ac/1/Y0FqyaIZN3iMrcd7ep-JttTFWko.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/83607f-14b4-4217-b6cd-b7bae910c7ac/1/Y0FqyaIZN3iMrcd7ep-JttTFWko.mft rsync://rpki.ripe.net/repository/DEFAULT/Y0FqyaIZN3iMrcd7ep-JttTFWko.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:77:0a:93:0b:a6:7d:18:9e:15:61:76:06:49:a9:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63416ac9a21937788cadc77b7a9f89b6d4c55a4a Validity Not Before: Dec 6 07:01:18 2025 GMT Not After : Dec 7 07:01:18 2025 GMT Subject: CN=f81dda2742f6d04b43b1038a6d8eab68a1aafd20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:cc:36:21:19:cb:94:4f:84:6f:43:86:77:c4: 94:97:71:12:69:17:cb:b1:e9:07:89:0f:18:55:8d: 3b:23:f1:bb:ef:45:45:54:f6:12:2d:6c:97:03:11: 8d:63:9d:56:bb:1f:2a:c9:f5:2c:5a:cf:c8:6f:96: 5a:b9:23:1f:94:1d:30:3e:11:f6:f8:cb:45:50:f8: d0:6e:97:79:f0:cc:60:fc:41:f3:1a:f5:ca:63:a0: 5d:03:e4:52:4e:64:c9:16:da:89:83:a9:b0:cf:75: 0e:cb:d9:a2:df:11:5a:b5:f6:e7:af:0d:3c:ac:ff: e5:b9:bd:96:2f:29:e7:52:c3:0a:d3:f1:e6:ba:1e: 55:45:e0:c3:06:ed:21:8a:19:a5:94:80:90:ba:59: bd:bc:a2:d8:28:c7:d7:e0:8b:08:5f:55:b7:e5:95: bf:d9:17:f8:c0:fb:2e:d0:fe:b9:a5:ba:88:93:ca: c7:37:8c:7b:da:2d:41:ed:6c:80:15:ac:b4:16:97: 60:dd:4d:1a:48:71:f1:fc:4a:24:fa:1d:76:b4:f3: e1:35:90:c7:f1:5a:3c:97:57:77:59:dd:e4:13:ee: a7:b8:1d:7f:7b:bd:7e:89:7a:9d:d4:ec:e5:61:c1: ed:37:2d:34:fc:0a:b4:ec:79:7b:e4:a5:c3:a7:0e: 14:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:1D:DA:27:42:F6:D0:4B:43:B1:03:8A:6D:8E:AB:68:A1:AA:FD:20 X509v3 Authority Key Identifier: keyid:63:41:6A:C9:A2:19:37:78:8C:AD:C7:7B:7A:9F:89:B6:D4:C5:5A:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y0FqyaIZN3iMrcd7ep-JttTFWko.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/83607f-14b4-4217-b6cd-b7bae910c7ac/1/Y0FqyaIZN3iMrcd7ep-JttTFWko.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/83607f-14b4-4217-b6cd-b7bae910c7ac/1/Y0FqyaIZN3iMrcd7ep-JttTFWko.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:da:1d:82:41:d0:1a:aa:90:c1:b8:a4:7d:8c:b9:80:aa:42: 66:b0:4f:52:cc:a3:21:4b:ec:99:72:94:f1:c8:da:9e:2d:8d: c6:a9:be:70:2e:70:d1:54:ac:8b:03:55:1b:5d:6b:9c:b5:c6: d1:54:d5:bf:09:7e:5f:94:6a:d6:90:75:15:a9:c3:b6:38:06: 4b:54:20:56:ad:84:c4:1d:fc:fa:01:4e:a6:be:b9:0a:17:86: f1:67:51:d2:bb:93:a2:fc:8d:ba:61:40:4b:8e:c4:59:92:fe: cc:72:f4:de:fd:d7:7d:d7:7b:1d:8a:c3:43:23:0d:09:60:db: 05:4e:20:b5:6f:c7:14:73:99:b7:86:95:7f:0a:85:b8:c2:1e: 5f:9e:b6:d6:0c:cd:03:12:34:db:ad:79:73:ae:b5:06:28:a5: f6:16:03:b1:95:e7:58:cf:13:c7:e7:c4:ad:4e:e6:20:c6:50: 0f:69:d1:40:94:d1:09:99:85:47:49:5a:1f:61:91:45:d0:56: 30:78:32:2d:f5:34:75:c3:20:94:f9:dc:f3:57:1d:82:76:90: e4:b7:23:da:a9:4c:39:2b:14:8f:ad:d5:a4:f5:05:e0:47:36: e1:1a:c7:18:44:83:c8:fc:b3:30:81:36:19:fd:ba:7b:a9:50: 83:53:4a:99 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydwqTC6Z9GJ4VYXYGSakyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzNDE2YWM5YTIxOTM3Nzg4Y2FkYzc3YjdhOWY4OWI2ZDRj NTVhNGEwHhcNMjUxMjA2MDcwMTE4WhcNMjUxMjA3MDcwMTE4WjAzMTEwLwYDVQQD EyhmODFkZGEyNzQyZjZkMDRiNDNiMTAzOGE2ZDhlYWI2OGExYWFmZDIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Mw2IRnLlE+Eb0OGd8SUl3ESaRfL sekHiQ8YVY07I/G770VFVPYSLWyXAxGNY51Wux8qyfUsWs/Ib5ZauSMflB0wPhH2 +MtFUPjQbpd58Mxg/EHzGvXKY6BdA+RSTmTJFtqJg6mwz3UOy9mi3xFatfbnrw08 rP/lub2WLynnUsMK0/Hmuh5VReDDBu0hihmllICQulm9vKLYKMfX4IsIX1W35ZW/ 2Rf4wPsu0P65pbqIk8rHN4x72i1B7WyAFay0Fpdg3U0aSHHx/Eok+h12tPPhNZDH 8Vo8l1d3Wd3kE+6nuB1/e71+iXqd1OzlYcHtNy00/Aq07Hl75KXDpw4U7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPgd2idC9tBLQ7EDim2Oq2ihqv0gMB8GA1UdIwQY MBaAFGNBasmiGTd4jK3He3qfibbUxVpKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWTBGcXlhSVpOM2lNcmNkN2VwLUp0dFRGV2tvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy84MzYwN2YtMTRiNC00MjE3LWI2Y2Qt YjdiYWU5MTBjN2FjLzEvWTBGcXlhSVpOM2lNcmNkN2VwLUp0dFRGV2tvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy84MzYwN2YtMTRiNC00MjE3LWI2Y2QtYjdiYWU5MTBjN2Fj LzEvWTBGcXlhSVpOM2lNcmNkN2VwLUp0dFRGV2tvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAANodgkHQ GqqQwbikfYy5gKpCZrBPUsyjIUvsmXKU8cjani2Nxqm+cC5w0VSsiwNVG11rnLXG 0VTVvwl+X5Rq1pB1FanDtjgGS1QgVq2ExB38+gFOpr65CheG8WdR0ruTovyNumFA S47EWZL+zHL03v3Xfdd7HYrDQyMNCWDbBU4gtW/HFHOZt4aVfwqFuMIeX5621gzN AxI02615c661Biil9hYDsZXnWM8Tx+fErU7mIMZQD2nRQJTRCZmFR0laH2GRRdBW MHgyLfU0dcMglPnc81cdgnaQ5Lcj2qlMOSsUj63VpPUF4Ec24RrHGESDyPyzMIE2 Gf26e6lQg1NKmQ== -----END CERTIFICATE-----Generated at Sat Dec 6 12:08:00 2025 by rpki-client