This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/a564e9-3a4e-4d4a-807d-7055c2e0476f/1/Y2NsO-9V0SpkU2twEwp09T9E1tA.mft File: Y2NsO-9V0SpkU2twEwp09T9E1tA.mft (raw, json) Hash identifier: ubLsJ1bBsg+P2xp/lgD7Pd9l/mQP3mr2bqL6NkQLcTo= Subject key identifier: 18:14:BC:D3:E0:67:41:63:72:3B:3B:F6:A3:3F:D4:EB:FE:23:C0:AD Authority key identifier: 63:63:6C:3B:EF:55:D1:2A:64:53:6B:70:13:0A:74:F5:3F:44:D6:D0 Certificate issuer: /CN=63636c3bef55d12a64536b70130a74f53f44d6d0 Certificate serial: 019AF2E435B7E1AC03C8E2485E0E91A198E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y2NsO-9V0SpkU2twEwp09T9E1tA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/a564e9-3a4e-4d4a-807d-7055c2e0476f/1/Y2NsO-9V0SpkU2twEwp09T9E1tA.mft Manifest number: 094C Signing time: Sat 06 Dec 2025 09:00:33 +0000 Manifest this update: Sat 06 Dec 2025 09:00:33 +0000 Manifest next update: Sun 07 Dec 2025 09:00:33 +0000 Files and hashes: 1: DtOZa_QnwbfCZcw6Ri25L5g5nKw.roa (hash: gPjF2bHK3b5JRNcNAuMcqGVmU2CAaScFraaS80Iy5UA=) 2: Y2NsO-9V0SpkU2twEwp09T9E1tA.crl (hash: UDCEf46WdvR2b0JI0p0N4kblOQMFM1VLP7i4R+1U1Z8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/a564e9-3a4e-4d4a-807d-7055c2e0476f/1/Y2NsO-9V0SpkU2twEwp09T9E1tA.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/a564e9-3a4e-4d4a-807d-7055c2e0476f/1/Y2NsO-9V0SpkU2twEwp09T9E1tA.mft rsync://rpki.ripe.net/repository/DEFAULT/Y2NsO-9V0SpkU2twEwp09T9E1tA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:e4:35:b7:e1:ac:03:c8:e2:48:5e:0e:91:a1:98:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63636c3bef55d12a64536b70130a74f53f44d6d0 Validity Not Before: Dec 6 09:00:33 2025 GMT Not After : Dec 7 09:00:33 2025 GMT Subject: CN=1814bcd3e0674163723b3bf6a33fd4ebfe23c0ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:90:40:ed:92:82:54:d9:fa:51:71:92:e2:c5: 2c:0b:60:05:2f:19:ef:26:dc:95:df:af:7d:16:d9: aa:a5:c4:40:83:49:83:df:34:9d:a4:55:38:a4:e5: 80:98:3b:d8:25:18:9a:37:41:a6:4f:8e:e1:ff:31: cc:e5:53:80:38:ee:79:f7:50:d1:ac:59:f9:7c:13: 1a:47:69:25:94:d0:dc:6b:43:2b:bc:01:bd:97:cf: b7:5b:2a:bf:41:e4:39:2e:90:43:1f:c1:8e:fe:5b: 72:90:f5:59:65:d0:c2:fd:dd:e8:0f:b6:f3:a1:52: 57:91:24:a8:c8:77:01:1e:55:04:1b:1b:7d:c9:2d: eb:b7:87:b0:d9:3a:bc:59:46:97:df:00:46:cc:46: 0e:fc:25:88:43:7e:59:70:de:00:05:c4:41:8e:0f: a0:2d:6e:1c:81:16:2e:9b:2e:f7:91:7f:d4:1f:f7: de:12:2d:e8:18:1d:e1:70:b7:4d:99:8a:d6:af:62: b7:fc:d8:0d:43:2e:bc:88:61:28:27:6e:c1:bf:bd: b5:75:97:bd:2f:cc:fe:82:4d:1e:89:13:58:e5:78: 9b:bc:89:64:05:e5:99:e3:1b:6e:46:cd:00:30:49: 78:09:51:ee:c7:d9:be:f0:a9:dc:43:02:bf:39:a4: 51:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:14:BC:D3:E0:67:41:63:72:3B:3B:F6:A3:3F:D4:EB:FE:23:C0:AD X509v3 Authority Key Identifier: keyid:63:63:6C:3B:EF:55:D1:2A:64:53:6B:70:13:0A:74:F5:3F:44:D6:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y2NsO-9V0SpkU2twEwp09T9E1tA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a564e9-3a4e-4d4a-807d-7055c2e0476f/1/Y2NsO-9V0SpkU2twEwp09T9E1tA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a564e9-3a4e-4d4a-807d-7055c2e0476f/1/Y2NsO-9V0SpkU2twEwp09T9E1tA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:64:1f:43:a9:c3:fd:f5:ed:27:51:6e:c3:a9:cf:be:e7:a6: ee:4e:63:96:d8:1d:bc:4f:52:82:4f:b9:2d:41:49:08:a5:a0: 54:c7:18:3e:7b:60:b3:b9:61:df:c4:64:09:2c:0a:57:e6:bc: ab:c3:5d:de:81:77:96:99:f0:09:21:62:58:6c:02:1e:76:60: 04:9b:eb:70:47:5b:71:88:f0:f6:40:be:5a:15:a3:06:6a:9d: 14:d5:34:19:d2:4d:5a:51:64:b7:de:6e:68:e7:dd:e4:cf:7d: 5f:00:b4:5c:2c:5d:cc:a8:82:86:d7:14:20:c2:46:c4:42:89: 72:2c:7b:e2:97:f5:3c:cd:a6:6c:4a:a6:e9:6d:4f:57:23:a3: b9:02:c2:c5:ce:c1:94:1a:1b:54:34:f3:1c:53:86:b6:de:cf: 22:67:37:ce:97:1c:a5:e8:79:c5:b9:fe:d6:92:ee:9c:ee:6d: d3:87:1c:4b:f9:49:a5:31:26:7f:59:34:9a:f0:30:5b:8b:6e: d8:9f:45:17:57:5a:4f:3f:36:fe:6a:d8:fe:43:39:dd:11:6b: af:b1:65:65:33:80:75:21:1f:8a:be:79:00:cb:eb:67:b2:e6: 32:7c:32:02:b8:2a:ad:c5:b0:a8:dd:25:d5:61:b4:53:b5:4a: 12:df:8c:2c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZry5DW34awDyOJIXg6RoZjiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzNjM2YzNiZWY1NWQxMmE2NDUzNmI3MDEzMGE3NGY1M2Y0 NGQ2ZDAwHhcNMjUxMjA2MDkwMDMzWhcNMjUxMjA3MDkwMDMzWjAzMTEwLwYDVQQD EygxODE0YmNkM2UwNjc0MTYzNzIzYjNiZjZhMzNmZDRlYmZlMjNjMGFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA35BA7ZKCVNn6UXGS4sUsC2AFLxnv JtyV3699FtmqpcRAg0mD3zSdpFU4pOWAmDvYJRiaN0GmT47h/zHM5VOAOO5591DR rFn5fBMaR2kllNDca0MrvAG9l8+3Wyq/QeQ5LpBDH8GO/ltykPVZZdDC/d3oD7bz oVJXkSSoyHcBHlUEGxt9yS3rt4ew2Tq8WUaX3wBGzEYO/CWIQ35ZcN4ABcRBjg+g LW4cgRYumy73kX/UH/feEi3oGB3hcLdNmYrWr2K3/NgNQy68iGEoJ27Bv721dZe9 L8z+gk0eiRNY5XibvIlkBeWZ4xtuRs0AMEl4CVHux9m+8KncQwK/OaRRnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBgUvNPgZ0Fjcjs79qM/1Ov+I8CtMB8GA1UdIwQY MBaAFGNjbDvvVdEqZFNrcBMKdPU/RNbQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWTJOc08tOVYwU3BrVTJ0d0V3cDA5VDlFMXRBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS9hNTY0ZTktM2E0ZS00ZDRhLTgwN2Qt NzA1NWMyZTA0NzZmLzEvWTJOc08tOVYwU3BrVTJ0d0V3cDA5VDlFMXRBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS9hNTY0ZTktM2E0ZS00ZDRhLTgwN2QtNzA1NWMyZTA0NzZm LzEvWTJOc08tOVYwU3BrVTJ0d0V3cDA5VDlFMXRBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ2QfQ6nD /fXtJ1Fuw6nPvuem7k5jltgdvE9Sgk+5LUFJCKWgVMcYPntgs7lh38RkCSwKV+a8 q8Nd3oF3lpnwCSFiWGwCHnZgBJvrcEdbcYjw9kC+WhWjBmqdFNU0GdJNWlFkt95u aOfd5M99XwC0XCxdzKiChtcUIMJGxEKJcix74pf1PM2mbEqm6W1PVyOjuQLCxc7B lBobVDTzHFOGtt7PImc3zpccpeh5xbn+1pLunO5t04ccS/lJpTEmf1k0mvAwW4tu 2J9FF1daTz82/mrY/kM53RFrr7FlZTOAdSEfir55AMvrZ7LmMnwyArgqrcWwqN0l 1WG0U7VKEt+MLA== -----END CERTIFICATE-----Generated at Sat Dec 6 12:26:59 2025 by rpki-client