This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/fe7fc2-41cc-467d-980b-f5af616b5483/1/Y11bZE4i-0iOTWwAErCqvyOOYeU.mft File: Y11bZE4i-0iOTWwAErCqvyOOYeU.mft (raw, json) Hash identifier: 7Ymg/ktzgln2lbEKsN44u9DyWAUgCE1QV2FEWweXPeo= Subject key identifier: 34:18:93:48:D8:3B:3D:C3:B4:23:E6:F6:AB:97:DE:BB:83:77:34:0A Authority key identifier: 63:5D:5B:64:4E:22:FB:48:8E:4D:6C:00:12:B0:AA:BF:23:8E:61:E5 Certificate issuer: /CN=635d5b644e22fb488e4d6c0012b0aabf238e61e5 Certificate serial: 019AF31C7F5A85B641325349D8A0ED63C105 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y11bZE4i-0iOTWwAErCqvyOOYeU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/fe7fc2-41cc-467d-980b-f5af616b5483/1/Y11bZE4i-0iOTWwAErCqvyOOYeU.mft Manifest number: 07D9 Signing time: Sat 06 Dec 2025 10:02:02 +0000 Manifest this update: Sat 06 Dec 2025 10:02:02 +0000 Manifest next update: Sun 07 Dec 2025 10:02:02 +0000 Files and hashes: 1: 1-7dAZzRBbFa11Vn8DGlQ2QYhnKQ.roa (hash: paOrHtzZ6Pf1no7vHSa5YDI9HD1Gf08R7MZd074FoNM=) 2: Y11bZE4i-0iOTWwAErCqvyOOYeU.crl (hash: cntURrMoKbZn2ntbhEx8rmymblQM44sv+wQ1I3jLtFs=) 3: aAUDoOMiIkIoTxqpgiR2vBHCYiA.roa (hash: bEbrJBN9qOyrrJrbKszXph6Dv/8oZGFIwIyFCbBw1tg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/fe7fc2-41cc-467d-980b-f5af616b5483/1/Y11bZE4i-0iOTWwAErCqvyOOYeU.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/fe7fc2-41cc-467d-980b-f5af616b5483/1/Y11bZE4i-0iOTWwAErCqvyOOYeU.mft rsync://rpki.ripe.net/repository/DEFAULT/Y11bZE4i-0iOTWwAErCqvyOOYeU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:7f:5a:85:b6:41:32:53:49:d8:a0:ed:63:c1:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=635d5b644e22fb488e4d6c0012b0aabf238e61e5 Validity Not Before: Dec 6 10:02:02 2025 GMT Not After : Dec 7 10:02:02 2025 GMT Subject: CN=34189348d83b3dc3b423e6f6ab97debb8377340a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:51:ac:60:0d:d0:09:e0:9a:6b:d3:96:7a:a8: 2c:5f:b8:55:d7:cf:cc:00:56:77:12:3c:0b:8d:75: e6:a5:64:57:fa:5f:fb:9a:0d:61:e9:77:54:5a:25: e9:69:3b:48:36:da:12:7c:df:95:58:7f:b2:ab:29: 62:40:4d:85:a4:1b:52:27:92:bd:1e:76:5d:d4:55: 6c:34:69:2b:80:12:94:9a:6f:2e:20:30:27:99:f6: 6c:05:ea:a7:14:17:2f:64:06:1d:f9:d4:50:fc:37: 63:06:f7:f1:79:1e:6e:d8:d2:e5:a6:ab:98:8c:23: 11:bc:65:c9:b5:8a:0c:e0:3a:51:bb:82:4d:6a:b5: 7b:ce:ab:17:e7:88:bd:f5:52:da:ca:bd:e0:a8:66: 59:9d:ae:86:53:aa:e5:5f:05:96:75:d0:0e:6a:b8: e2:4f:d1:b0:02:11:54:9a:0b:15:2d:b9:73:39:5a: 98:88:10:bb:e3:e2:40:96:9a:84:9b:60:d8:6f:00: f0:c6:e0:63:e4:d0:1d:7e:89:ee:96:ad:93:b7:6c: 5b:96:5b:10:62:ad:48:7d:30:a1:b8:b2:5b:14:93: 2f:0e:3c:b6:c6:6f:58:dd:60:d0:4a:a2:02:af:23: 14:4f:29:ac:4a:76:e4:e1:56:53:1f:4d:50:23:a7: 4f:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:18:93:48:D8:3B:3D:C3:B4:23:E6:F6:AB:97:DE:BB:83:77:34:0A X509v3 Authority Key Identifier: keyid:63:5D:5B:64:4E:22:FB:48:8E:4D:6C:00:12:B0:AA:BF:23:8E:61:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y11bZE4i-0iOTWwAErCqvyOOYeU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/fe7fc2-41cc-467d-980b-f5af616b5483/1/Y11bZE4i-0iOTWwAErCqvyOOYeU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/fe7fc2-41cc-467d-980b-f5af616b5483/1/Y11bZE4i-0iOTWwAErCqvyOOYeU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:15:d9:9f:b4:af:ea:83:c9:d4:19:9a:18:61:d3:75:86:8e: ae:78:23:9f:70:8e:f7:ca:38:77:c9:0b:a5:c3:12:18:5c:24: 29:30:60:d3:c1:d6:03:4c:de:e8:f4:40:85:8e:fb:93:fb:1e: e2:9b:2d:79:2f:ec:65:d7:8f:bc:a0:15:92:3d:92:87:67:37: 1d:dd:32:43:8f:47:a1:50:67:82:05:fb:5a:1b:33:2f:76:6f: 26:19:69:78:25:6b:32:ce:58:51:6b:8e:6a:5b:34:0f:b9:0a: 25:09:39:4e:1f:c9:39:30:83:33:f9:e9:70:30:b8:79:22:48: ef:99:11:d4:85:25:8e:3d:93:7a:ab:6c:30:3e:28:d6:74:a5: 43:d3:ef:63:e9:75:1c:d1:3c:4a:f8:80:88:55:03:e1:d0:66: 88:37:bc:44:73:fe:9f:1a:26:c6:a2:91:e2:91:42:22:b2:bc: f9:de:03:b2:ff:34:ab:5b:34:98:02:47:96:c1:f2:03:a0:8d: 42:03:10:45:9f:fe:0f:b9:c5:3f:90:a0:64:b8:b3:6d:91:2f: 44:e8:46:b3:48:50:85:be:dc:65:3c:48:cc:84:01:44:45:70: fb:ed:a5:d3:db:31:5d:48:58:4f:fe:6d:92:37:f1:d2:33:f1: ad:13:70:04 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHH9ahbZBMlNJ2KDtY8EFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzNWQ1YjY0NGUyMmZiNDg4ZTRkNmMwMDEyYjBhYWJmMjM4 ZTYxZTUwHhcNMjUxMjA2MTAwMjAyWhcNMjUxMjA3MTAwMjAyWjAzMTEwLwYDVQQD EygzNDE4OTM0OGQ4M2IzZGMzYjQyM2U2ZjZhYjk3ZGViYjgzNzczNDBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4FGsYA3QCeCaa9OWeqgsX7hV18/M AFZ3EjwLjXXmpWRX+l/7mg1h6XdUWiXpaTtINtoSfN+VWH+yqyliQE2FpBtSJ5K9 HnZd1FVsNGkrgBKUmm8uIDAnmfZsBeqnFBcvZAYd+dRQ/DdjBvfxeR5u2NLlpquY jCMRvGXJtYoM4DpRu4JNarV7zqsX54i99VLayr3gqGZZna6GU6rlXwWWddAOarji T9GwAhFUmgsVLblzOVqYiBC74+JAlpqEm2DYbwDwxuBj5NAdfonulq2Tt2xbllsQ Yq1IfTChuLJbFJMvDjy2xm9Y3WDQSqICryMUTymsSnbk4VZTH01QI6dPTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDQYk0jYOz3DtCPm9quX3ruDdzQKMB8GA1UdIwQY MBaAFGNdW2ROIvtIjk1sABKwqr8jjmHlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWTExYlpFNGktMGlPVFd3QUVyQ3F2eU9PWWVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC9mZTdmYzItNDFjYy00NjdkLTk4MGIt ZjVhZjYxNmI1NDgzLzEvWTExYlpFNGktMGlPVFd3QUVyQ3F2eU9PWWVVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC9mZTdmYzItNDFjYy00NjdkLTk4MGItZjVhZjYxNmI1NDgz LzEvWTExYlpFNGktMGlPVFd3QUVyQ3F2eU9PWWVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZxXZn7Sv 6oPJ1BmaGGHTdYaOrngjn3CO98o4d8kLpcMSGFwkKTBg08HWA0ze6PRAhY77k/se 4psteS/sZdePvKAVkj2Sh2c3Hd0yQ49HoVBnggX7WhszL3ZvJhlpeCVrMs5YUWuO als0D7kKJQk5Th/JOTCDM/npcDC4eSJI75kR1IUljj2TeqtsMD4o1nSlQ9PvY+l1 HNE8SviAiFUD4dBmiDe8RHP+nxomxqKR4pFCIrK8+d4Dsv80q1s0mAJHlsHyA6CN QgMQRZ/+D7nFP5CgZLizbZEvROhGs0hQhb7cZTxIzIQBREVw++2l09sxXUhYT/5t kjfx0jPxrRNwBA== -----END CERTIFICATE-----Generated at Sat Dec 6 13:34:52 2025 by rpki-client