This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/b81c0b-af1c-4ee8-b4c0-dca0fd509fb6/1/Y3bCUtsJvoF7hypxepWe3KxEJms.mft File: Y3bCUtsJvoF7hypxepWe3KxEJms.mft (raw, json) Hash identifier: g6X36muq8+wbMqR7tdJwesuiTiS5nkROiGpvH+r6Y2Y= Subject key identifier: D0:5E:99:04:61:06:23:F5:EA:0E:49:34:86:C2:73:C6:2E:C4:D2:7D Authority key identifier: 63:76:C2:52:DB:09:BE:81:7B:87:2A:71:7A:95:9E:DC:AC:44:26:6B Certificate issuer: /CN=6376c252db09be817b872a717a959edcac44266b Certificate serial: 019AF208CAA25071FFE0CE1EC6D8E64A5717 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y3bCUtsJvoF7hypxepWe3KxEJms.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/b81c0b-af1c-4ee8-b4c0-dca0fd509fb6/1/Y3bCUtsJvoF7hypxepWe3KxEJms.mft Manifest number: 1760 Signing time: Sat 06 Dec 2025 05:00:53 +0000 Manifest this update: Sat 06 Dec 2025 05:00:53 +0000 Manifest next update: Sun 07 Dec 2025 05:00:53 +0000 Files and hashes: 1: Y3bCUtsJvoF7hypxepWe3KxEJms.crl (hash: c9R0zkal8I17bb6Um1m8EDAkCy5VvfwRQ0jUTEiRIao=) 2: apB7016k1B8Xf8viYBYRSP8KhJw.roa (hash: xN1tgc1phNLRWfyHfJRqbKwJVFPPcIp9VBD24KOqkzQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/b81c0b-af1c-4ee8-b4c0-dca0fd509fb6/1/Y3bCUtsJvoF7hypxepWe3KxEJms.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/b81c0b-af1c-4ee8-b4c0-dca0fd509fb6/1/Y3bCUtsJvoF7hypxepWe3KxEJms.mft rsync://rpki.ripe.net/repository/DEFAULT/Y3bCUtsJvoF7hypxepWe3KxEJms.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:ca:a2:50:71:ff:e0:ce:1e:c6:d8:e6:4a:57:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6376c252db09be817b872a717a959edcac44266b Validity Not Before: Dec 6 05:00:53 2025 GMT Not After : Dec 7 05:00:53 2025 GMT Subject: CN=d05e9904610623f5ea0e493486c273c62ec4d27d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:c9:da:f6:cc:d4:f8:1c:bf:83:ff:19:e5:f1: 5a:67:49:d4:23:8b:d7:0b:38:21:04:c4:6b:94:ba: 2d:45:04:39:54:e8:9c:d4:fc:6d:48:88:e6:0a:1c: ad:06:9b:0b:51:f6:f2:86:53:61:3c:a2:db:ae:fd: 88:76:38:53:5d:52:4f:72:78:13:95:70:99:f9:56: 79:d2:44:90:a4:0c:83:c4:f6:be:06:7c:d4:cc:03: 4c:de:b3:0e:79:ad:10:54:d4:16:ae:43:0b:54:b6: b0:e4:34:4c:b8:8d:cc:4d:3b:e5:7f:67:1e:7d:b3: 85:47:de:5d:42:ed:28:dc:9a:2d:d5:54:08:84:a8: cb:f5:4a:37:84:45:d6:cd:1f:21:c3:e5:cb:15:98: f9:2d:fc:f2:dc:4d:8c:17:46:0a:78:f7:2b:28:93: f7:46:0f:3b:32:e8:56:77:b6:8c:e2:42:16:b3:69: 29:00:a5:6c:c2:67:7f:79:4a:8d:31:89:ef:8c:41: 42:c8:20:cf:f4:72:d8:91:52:c1:bd:1f:90:0e:84: df:50:c5:cf:88:32:22:d6:eb:27:94:0c:1b:69:9e: bb:20:fc:3a:66:82:96:69:40:ad:07:a4:09:2b:55: 58:fd:06:ab:c4:63:72:8b:2f:91:3e:20:c0:63:99: e6:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:5E:99:04:61:06:23:F5:EA:0E:49:34:86:C2:73:C6:2E:C4:D2:7D X509v3 Authority Key Identifier: keyid:63:76:C2:52:DB:09:BE:81:7B:87:2A:71:7A:95:9E:DC:AC:44:26:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y3bCUtsJvoF7hypxepWe3KxEJms.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/b81c0b-af1c-4ee8-b4c0-dca0fd509fb6/1/Y3bCUtsJvoF7hypxepWe3KxEJms.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/b81c0b-af1c-4ee8-b4c0-dca0fd509fb6/1/Y3bCUtsJvoF7hypxepWe3KxEJms.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:f4:e0:50:a1:14:27:a7:73:93:83:bf:08:b7:24:5c:e3:46: bf:24:20:17:52:dc:96:95:50:e4:85:56:0f:5d:e2:ef:48:24: 56:d1:b4:c7:81:e6:19:3b:bb:e9:a7:f3:06:1d:61:24:0f:d7: a3:b1:d7:a8:19:8b:76:35:5d:cc:a4:19:10:fe:da:de:8a:17: 86:bb:ea:26:8d:b8:93:fa:c5:62:65:61:f1:e7:48:cb:17:4b: c8:35:d5:63:8b:7e:06:42:b1:1c:14:4d:96:a7:57:eb:c6:96: 65:72:78:49:dd:10:1b:94:40:31:d8:27:12:3d:90:de:7f:b5: a8:a6:a2:e1:9a:8d:ce:59:94:9c:0d:36:1f:c5:b3:0e:e0:53: 4b:c8:4c:a5:92:40:a5:00:7d:fb:03:02:fd:aa:c2:78:07:13: 5f:31:e0:49:96:e1:0f:28:d0:6d:3b:8f:70:f5:1c:8b:5c:4c: 93:8a:ce:e1:c9:6a:15:77:48:ee:14:fb:7b:60:b2:8e:83:9d: f4:0c:a4:ca:f2:58:6a:fa:dc:f6:b5:1a:ea:ea:f0:70:19:5a: 3f:25:2d:bb:1f:f2:9a:d6:21:71:17:cf:a8:84:c2:34:fe:9b: da:38:f7:4f:08:5b:ee:de:7e:cc:10:d4:fe:4d:2b:e8:44:b2: 94:a4:fe:0a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCMqiUHH/4M4extjmSlcXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzNzZjMjUyZGIwOWJlODE3Yjg3MmE3MTdhOTU5ZWRjYWM0 NDI2NmIwHhcNMjUxMjA2MDUwMDUzWhcNMjUxMjA3MDUwMDUzWjAzMTEwLwYDVQQD EyhkMDVlOTkwNDYxMDYyM2Y1ZWEwZTQ5MzQ4NmMyNzNjNjJlYzRkMjdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoMna9szU+By/g/8Z5fFaZ0nUI4vX CzghBMRrlLotRQQ5VOic1PxtSIjmChytBpsLUfbyhlNhPKLbrv2IdjhTXVJPcngT lXCZ+VZ50kSQpAyDxPa+BnzUzANM3rMOea0QVNQWrkMLVLaw5DRMuI3MTTvlf2ce fbOFR95dQu0o3Jot1VQIhKjL9Uo3hEXWzR8hw+XLFZj5Lfzy3E2MF0YKePcrKJP3 Rg87MuhWd7aM4kIWs2kpAKVswmd/eUqNMYnvjEFCyCDP9HLYkVLBvR+QDoTfUMXP iDIi1usnlAwbaZ67IPw6ZoKWaUCtB6QJK1VY/QarxGNyiy+RPiDAY5nmbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNBemQRhBiP16g5JNIbCc8YuxNJ9MB8GA1UdIwQY MBaAFGN2wlLbCb6Be4cqcXqVntysRCZrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWTNiQ1V0c0p2b0Y3aHlweGVwV2UzS3hFSm1zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS9iODFjMGItYWYxYy00ZWU4LWI0YzAt ZGNhMGZkNTA5ZmI2LzEvWTNiQ1V0c0p2b0Y3aHlweGVwV2UzS3hFSm1zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS9iODFjMGItYWYxYy00ZWU4LWI0YzAtZGNhMGZkNTA5ZmI2 LzEvWTNiQ1V0c0p2b0Y3aHlweGVwV2UzS3hFSm1zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAovTgUKEU J6dzk4O/CLckXONGvyQgF1LclpVQ5IVWD13i70gkVtG0x4HmGTu76afzBh1hJA/X o7HXqBmLdjVdzKQZEP7a3ooXhrvqJo24k/rFYmVh8edIyxdLyDXVY4t+BkKxHBRN lqdX68aWZXJ4Sd0QG5RAMdgnEj2Q3n+1qKai4ZqNzlmUnA02H8WzDuBTS8hMpZJA pQB9+wMC/arCeAcTXzHgSZbhDyjQbTuPcPUci1xMk4rO4clqFXdI7hT7e2CyjoOd 9AykyvJYavrc9rUa6urwcBlaPyUtux/ymtYhcRfPqITCNP6b2jj3Twhb7t5+zBDU /k0r6ESylKT+Cg== -----END CERTIFICATE-----Generated at Sat Dec 6 10:00:32 2025 by rpki-client