This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/860a5e-e0d0-44f5-9c54-3cc4ff9aa1bc/1/Y4xQnLd7AUm29m9QGfhYs6z5Quk.mft File: Y4xQnLd7AUm29m9QGfhYs6z5Quk.mft (raw, json) Hash identifier: C1DhuMZnpGxol84O0PD6o77zZM7l3mnEb7jUpV9KRjE= Subject key identifier: F1:69:FF:21:49:7B:CC:5D:F5:6B:67:02:33:1D:93:EE:FA:93:EA:6C Authority key identifier: 63:8C:50:9C:B7:7B:01:49:B6:F6:6F:50:19:F8:58:B3:AC:F9:42:E9 Certificate issuer: /CN=638c509cb77b0149b6f66f5019f858b3acf942e9 Certificate serial: 019AF12D50294B0647ED0D6E0D6A9F0557C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y4xQnLd7AUm29m9QGfhYs6z5Quk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/860a5e-e0d0-44f5-9c54-3cc4ff9aa1bc/1/Y4xQnLd7AUm29m9QGfhYs6z5Quk.mft Manifest number: 1769 Signing time: Sat 06 Dec 2025 01:01:09 +0000 Manifest this update: Sat 06 Dec 2025 01:01:09 +0000 Manifest next update: Sun 07 Dec 2025 01:01:09 +0000 Files and hashes: 1: XVpCVjKP_Ci3PBb-SDD9rEF23jc.roa (hash: fb/E1ZjjaeELkfBCLdUXpvrP74l6BqHMfdZ9UTlkuWc=) 2: Y4xQnLd7AUm29m9QGfhYs6z5Quk.crl (hash: /BLZwcDTqeL+ds5P9bOjQczJSc+tXs57flpyjDkn0ZY=) 3: Ygr-d1fsjv6D-0-qsUYAE5I_CT4.roa (hash: jcx2vm/E34fLSi/zBhEY8LVOd5D4GVaLPMNLqe0cuM4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/860a5e-e0d0-44f5-9c54-3cc4ff9aa1bc/1/Y4xQnLd7AUm29m9QGfhYs6z5Quk.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/860a5e-e0d0-44f5-9c54-3cc4ff9aa1bc/1/Y4xQnLd7AUm29m9QGfhYs6z5Quk.mft rsync://rpki.ripe.net/repository/DEFAULT/Y4xQnLd7AUm29m9QGfhYs6z5Quk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:50:29:4b:06:47:ed:0d:6e:0d:6a:9f:05:57:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=638c509cb77b0149b6f66f5019f858b3acf942e9 Validity Not Before: Dec 6 01:01:09 2025 GMT Not After : Dec 7 01:01:09 2025 GMT Subject: CN=f169ff21497bcc5df56b6702331d93eefa93ea6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:99:92:10:ca:56:e2:78:17:d5:fe:4e:c9:a1: bc:0f:03:18:3c:86:b1:6a:79:bc:b4:7f:1d:c7:ef: 2f:4a:3e:a9:ea:5f:ea:36:93:34:41:68:7e:3b:f6: b9:b8:72:51:c9:7b:54:85:99:1a:20:1c:1c:d8:1a: 41:93:f1:af:dc:ab:b2:2b:02:cf:98:43:00:92:85: 51:3c:0a:3a:fe:0b:2e:b1:96:98:03:d2:5d:fa:af: d5:43:af:2f:d7:1c:fb:7a:1c:24:1b:96:18:81:a4: f6:b1:8c:cc:a0:ca:2e:f2:65:f7:10:fd:e3:eb:4b: 55:71:78:9d:f6:e3:45:27:7f:fe:8b:20:40:43:f4: 6c:55:3f:49:d9:f4:73:e9:8e:f5:4d:18:b5:c4:f9: 2f:64:13:d7:7f:50:dc:d1:87:c5:60:ef:5f:f3:b9: 77:a6:f0:47:e8:b7:26:cc:da:80:ba:b3:77:35:6a: 33:31:2e:bb:b2:f7:1c:3e:6c:50:cb:17:a6:a2:a2: fa:95:40:24:f4:eb:34:2e:f2:90:af:ab:95:74:85: f2:64:b0:c0:17:ab:dc:1b:ef:ce:d0:d2:25:09:d5: e6:61:b1:0e:7b:d0:3c:cf:30:e4:b1:ec:ba:d6:ee: de:76:ab:c2:86:19:d1:71:4e:66:85:12:ce:1f:1a: 47:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:69:FF:21:49:7B:CC:5D:F5:6B:67:02:33:1D:93:EE:FA:93:EA:6C X509v3 Authority Key Identifier: keyid:63:8C:50:9C:B7:7B:01:49:B6:F6:6F:50:19:F8:58:B3:AC:F9:42:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y4xQnLd7AUm29m9QGfhYs6z5Quk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/860a5e-e0d0-44f5-9c54-3cc4ff9aa1bc/1/Y4xQnLd7AUm29m9QGfhYs6z5Quk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/860a5e-e0d0-44f5-9c54-3cc4ff9aa1bc/1/Y4xQnLd7AUm29m9QGfhYs6z5Quk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:c9:99:39:54:75:be:a5:a0:39:b0:ba:b1:58:ee:d7:e9:05: 87:1e:40:9f:00:c8:65:22:c6:b8:15:20:5d:ef:33:00:dd:55: 0f:fb:99:2c:b6:f9:2b:c9:e2:d6:61:0e:f1:b1:b1:63:49:17: 91:e2:06:d7:bc:3b:42:db:bb:04:2b:52:76:5a:2a:6d:91:cb: 8d:bb:54:0c:3b:d2:79:a4:39:dd:f6:cb:d2:8b:49:13:a4:6c: 24:02:17:45:e2:b9:8b:71:f4:97:84:4a:d3:12:c1:d3:5f:6f: d2:18:0c:1f:91:8f:6f:ef:4b:a8:6f:bb:2d:5b:41:79:89:23: 98:5d:ef:80:b5:72:bc:e6:cb:5a:25:01:2f:2c:56:3e:bf:14: c0:dd:77:ed:b6:79:50:2d:81:b4:ba:d4:d1:50:a8:90:49:a7: e2:b8:5a:96:b9:91:a6:9f:14:cd:c2:fc:9d:e3:6f:3d:09:81: e9:36:30:8b:8e:f1:52:ca:7c:c3:99:0f:7e:ec:31:2d:ab:67: ab:0c:06:d2:70:64:93:ac:67:75:a5:a6:cd:cc:94:1d:cc:a4: 78:36:49:55:22:cb:1a:bc:c4:e0:fe:92:ed:33:5e:c4:5d:4d: a5:71:0f:ac:c9:2a:c1:0b:30:8f:25:9d:30:2d:69:8c:55:6b: 90:45:6c:9b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLVApSwZH7Q1uDWqfBVfAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzOGM1MDljYjc3YjAxNDliNmY2NmY1MDE5Zjg1OGIzYWNm OTQyZTkwHhcNMjUxMjA2MDEwMTA5WhcNMjUxMjA3MDEwMTA5WjAzMTEwLwYDVQQD EyhmMTY5ZmYyMTQ5N2JjYzVkZjU2YjY3MDIzMzFkOTNlZWZhOTNlYTZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs5mSEMpW4ngX1f5OyaG8DwMYPIax anm8tH8dx+8vSj6p6l/qNpM0QWh+O/a5uHJRyXtUhZkaIBwc2BpBk/Gv3KuyKwLP mEMAkoVRPAo6/gsusZaYA9Jd+q/VQ68v1xz7ehwkG5YYgaT2sYzMoMou8mX3EP3j 60tVcXid9uNFJ3/+iyBAQ/RsVT9J2fRz6Y71TRi1xPkvZBPXf1Dc0YfFYO9f87l3 pvBH6LcmzNqAurN3NWozMS67svccPmxQyxemoqL6lUAk9Os0LvKQr6uVdIXyZLDA F6vcG+/O0NIlCdXmYbEOe9A8zzDksey61u7edqvChhnRcU5mhRLOHxpHAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPFp/yFJe8xd9WtnAjMdk+76k+psMB8GA1UdIwQY MBaAFGOMUJy3ewFJtvZvUBn4WLOs+ULpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWTR4UW5MZDdBVW0yOW05UUdmaFlzNno1UXVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC84NjBhNWUtZTBkMC00NGY1LTljNTQt M2NjNGZmOWFhMWJjLzEvWTR4UW5MZDdBVW0yOW05UUdmaFlzNno1UXVrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC84NjBhNWUtZTBkMC00NGY1LTljNTQtM2NjNGZmOWFhMWJj LzEvWTR4UW5MZDdBVW0yOW05UUdmaFlzNno1UXVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfsmZOVR1 vqWgObC6sVju1+kFhx5AnwDIZSLGuBUgXe8zAN1VD/uZLLb5K8ni1mEO8bGxY0kX keIG17w7Qtu7BCtSdloqbZHLjbtUDDvSeaQ53fbL0otJE6RsJAIXReK5i3H0l4RK 0xLB019v0hgMH5GPb+9LqG+7LVtBeYkjmF3vgLVyvObLWiUBLyxWPr8UwN137bZ5 UC2BtLrU0VCokEmn4rhalrmRpp8UzcL8neNvPQmB6TYwi47xUsp8w5kPfuwxLatn qwwG0nBkk6xndaWmzcyUHcykeDZJVSLLGrzE4P6S7TNexF1NpXEPrMkqwQswjyWd MC1pjFVrkEVsmw== -----END CERTIFICATE-----Generated at Sat Dec 6 10:13:20 2025 by rpki-client