This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/2d0da4-a532-4b03-9055-4a5cbdb50e29/1/Y_3AmtVKOXxgTpShyWbiwpYFnME.mft File: Y_3AmtVKOXxgTpShyWbiwpYFnME.mft (raw, json) Hash identifier: eAKAYGVOfP3IFEdfTb658jR7Pz6F+8q8FwCwaV22VS0= Subject key identifier: 0C:E3:71:DF:D4:F0:B6:65:FB:B8:E5:BA:82:F8:1A:CC:FF:73:A9:DF Authority key identifier: 63:FD:C0:9A:D5:4A:39:7C:60:4E:94:A1:C9:66:E2:C2:96:05:9C:C1 Certificate issuer: /CN=63fdc09ad54a397c604e94a1c966e2c296059cc1 Certificate serial: 019AF2AD8D35BDE4381D5301BA54B1283F90 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y_3AmtVKOXxgTpShyWbiwpYFnME.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/2d0da4-a532-4b03-9055-4a5cbdb50e29/1/Y_3AmtVKOXxgTpShyWbiwpYFnME.mft Manifest number: 08BF Signing time: Sat 06 Dec 2025 08:00:51 +0000 Manifest this update: Sat 06 Dec 2025 08:00:51 +0000 Manifest next update: Sun 07 Dec 2025 08:00:51 +0000 Files and hashes: 1: Ub0gH6-o6KhNINtjYTwnJ-uCkZU.roa (hash: 7B5163r4ydWZZiBZS3F/kHEKa3lRTXllycuzchBVe18=) 2: Y_3AmtVKOXxgTpShyWbiwpYFnME.crl (hash: tCi37j9opt03O9QA3a9Pa573nVNwdGjC3khXMmF5S4s=) 3: bz0DaobqFx8uSG65YlIdlCnYXnM.roa (hash: iE8VTXx2IgO+YAuuzHNL90UnvmOpv60XoZ6IMkkBBJk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/2d0da4-a532-4b03-9055-4a5cbdb50e29/1/Y_3AmtVKOXxgTpShyWbiwpYFnME.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/2d0da4-a532-4b03-9055-4a5cbdb50e29/1/Y_3AmtVKOXxgTpShyWbiwpYFnME.mft rsync://rpki.ripe.net/repository/DEFAULT/Y_3AmtVKOXxgTpShyWbiwpYFnME.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:8d:35:bd:e4:38:1d:53:01:ba:54:b1:28:3f:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63fdc09ad54a397c604e94a1c966e2c296059cc1 Validity Not Before: Dec 6 08:00:51 2025 GMT Not After : Dec 7 08:00:51 2025 GMT Subject: CN=0ce371dfd4f0b665fbb8e5ba82f81accff73a9df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:68:5d:ac:29:7d:8b:9d:33:64:5f:19:03:26: f5:d2:be:09:14:7d:35:ac:c4:44:f7:d7:58:52:7c: 1d:32:a3:1f:a8:b6:cc:46:c8:7e:c2:0a:20:44:5b: d8:f1:18:56:6a:3f:ee:86:4c:ec:89:6f:28:fc:78: 48:09:a1:b8:99:61:52:3f:bf:f2:50:18:02:6e:8f: 5c:a3:7b:88:78:ec:d9:10:97:15:e9:24:54:f2:2e: df:09:aa:f9:55:9f:67:95:f9:e9:a8:a9:e2:27:d0: 37:66:26:75:1b:41:b6:93:86:26:69:9c:ef:e7:d3: d1:cf:e1:13:bb:0b:14:48:08:5e:46:4e:1f:df:19: 22:fb:54:56:3c:2d:2a:92:58:58:fc:88:f2:02:ff: 34:dc:35:93:67:4d:55:06:6a:17:90:2f:ad:57:60: 1e:bc:24:dd:5e:7f:26:0d:ec:0b:a1:c5:38:68:a4: db:19:ce:03:d1:30:e7:9a:e3:34:1d:dc:30:0e:75: b0:c5:8b:86:7f:4a:18:60:60:38:c4:cd:e8:50:e5: 4f:38:f3:ac:ec:57:92:1f:a2:79:b0:0e:20:bb:4b: 02:9c:57:08:b3:96:65:5e:28:8a:2d:12:84:57:2e: 59:89:c8:83:f9:a3:bf:72:d0:a6:31:55:9f:d0:82: 8e:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:E3:71:DF:D4:F0:B6:65:FB:B8:E5:BA:82:F8:1A:CC:FF:73:A9:DF X509v3 Authority Key Identifier: keyid:63:FD:C0:9A:D5:4A:39:7C:60:4E:94:A1:C9:66:E2:C2:96:05:9C:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y_3AmtVKOXxgTpShyWbiwpYFnME.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2d0da4-a532-4b03-9055-4a5cbdb50e29/1/Y_3AmtVKOXxgTpShyWbiwpYFnME.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2d0da4-a532-4b03-9055-4a5cbdb50e29/1/Y_3AmtVKOXxgTpShyWbiwpYFnME.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:95:b9:66:88:ce:b9:57:c4:3e:62:cb:89:10:fa:15:dd:83: 83:f6:72:ff:2e:af:53:c0:5d:c5:dc:cc:98:cf:b2:b2:d9:a4: 74:23:88:b0:5a:b2:06:4d:93:e3:ae:9c:bd:e3:c3:7c:35:1b: 67:01:49:a1:a0:9c:05:35:07:e7:5e:17:a9:a3:3a:a5:02:06: 78:fb:8c:0b:a2:4b:0f:73:b0:6e:a6:6e:70:9c:e0:0f:de:d7: cc:37:6d:e2:a0:36:f8:f1:c3:02:f4:bf:8e:95:0f:f7:24:4b: ca:a0:34:e9:c4:89:b4:21:70:eb:0e:38:6b:75:fa:27:b7:e4: c9:9a:bb:fa:f9:2d:a5:bb:90:8c:d2:d3:88:97:54:7b:fe:4c: 64:76:22:0a:ea:3d:9a:35:b9:ba:47:3e:db:93:7f:d5:9e:9e: dc:6e:c8:61:fc:8c:69:e8:0b:73:6f:58:6e:15:37:3e:54:18: c6:76:ab:ec:a1:05:53:5f:e9:92:69:19:b5:7e:9f:ce:f1:4a: 28:6d:f0:6d:a1:f6:e1:89:c5:74:12:1c:26:98:12:8f:79:d7: 8e:8c:51:54:8e:32:aa:ed:9c:e6:1f:37:22:98:ee:2f:26:95: b9:91:a7:79:bc:c9:3d:d4:d6:e8:2e:f5:92:4f:fa:4d:02:b0: 98:41:92:07 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrY01veQ4HVMBulSxKD+QMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZmRjMDlhZDU0YTM5N2M2MDRlOTRhMWM5NjZlMmMyOTYw NTljYzEwHhcNMjUxMjA2MDgwMDUxWhcNMjUxMjA3MDgwMDUxWjAzMTEwLwYDVQQD EygwY2UzNzFkZmQ0ZjBiNjY1ZmJiOGU1YmE4MmY4MWFjY2ZmNzNhOWRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsGhdrCl9i50zZF8ZAyb10r4JFH01 rMRE99dYUnwdMqMfqLbMRsh+wgogRFvY8RhWaj/uhkzsiW8o/HhICaG4mWFSP7/y UBgCbo9co3uIeOzZEJcV6SRU8i7fCar5VZ9nlfnpqKniJ9A3ZiZ1G0G2k4YmaZzv 59PRz+ETuwsUSAheRk4f3xki+1RWPC0qklhY/IjyAv803DWTZ01VBmoXkC+tV2Ae vCTdXn8mDewLocU4aKTbGc4D0TDnmuM0HdwwDnWwxYuGf0oYYGA4xM3oUOVPOPOs 7FeSH6J5sA4gu0sCnFcIs5ZlXiiKLRKEVy5ZiciD+aO/ctCmMVWf0IKOUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAzjcd/U8LZl+7jluoL4Gsz/c6nfMB8GA1UdIwQY MBaAFGP9wJrVSjl8YE6Uoclm4sKWBZzBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWV8zQW10VktPWHhnVHBTaHlXYml3cFlGbk1FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi8yZDBkYTQtYTUzMi00YjAzLTkwNTUt NGE1Y2JkYjUwZTI5LzEvWV8zQW10VktPWHhnVHBTaHlXYml3cFlGbk1FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi8yZDBkYTQtYTUzMi00YjAzLTkwNTUtNGE1Y2JkYjUwZTI5 LzEvWV8zQW10VktPWHhnVHBTaHlXYml3cFlGbk1FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVJW5ZojO uVfEPmLLiRD6Fd2Dg/Zy/y6vU8BdxdzMmM+ystmkdCOIsFqyBk2T466cvePDfDUb ZwFJoaCcBTUH514XqaM6pQIGePuMC6JLD3OwbqZucJzgD97XzDdt4qA2+PHDAvS/ jpUP9yRLyqA06cSJtCFw6w44a3X6J7fkyZq7+vktpbuQjNLTiJdUe/5MZHYiCuo9 mjW5ukc+25N/1Z6e3G7IYfyMaegLc29YbhU3PlQYxnar7KEFU1/pkmkZtX6fzvFK KG3wbaH24YnFdBIcJpgSj3nXjoxRVI4yqu2c5h83IpjuLyaVuZGnebzJPdTW6C71 kk/6TQKwmEGSBw== -----END CERTIFICATE-----Generated at Sat Dec 6 14:59:31 2025 by rpki-client