This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/099705-4a3b-4a68-b6bd-538af1017509/1/Y-LKp-GK8t-9s6YmnaLgbe3LbPA.mft File: Y-LKp-GK8t-9s6YmnaLgbe3LbPA.mft (raw, json) Hash identifier: lMH/YodFHOECQxKlttcBH7X+/xiz4QrZysWoe2rKHqk= Subject key identifier: DE:15:8C:1F:01:67:CB:1E:11:A4:30:4C:A7:C6:32:11:40:E6:0E:4B Authority key identifier: 63:E2:CA:A7:E1:8A:F2:DF:BD:B3:A6:26:9D:A2:E0:6D:ED:CB:6C:F0 Certificate issuer: /CN=63e2caa7e18af2dfbdb3a6269da2e06dedcb6cf0 Certificate serial: 019AF352AFCBE6D8E28FCF8ADF0E3223F6AE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-LKp-GK8t-9s6YmnaLgbe3LbPA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/099705-4a3b-4a68-b6bd-538af1017509/1/Y-LKp-GK8t-9s6YmnaLgbe3LbPA.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 11:01:13 +0000 Manifest this update: Sat 06 Dec 2025 11:01:13 +0000 Manifest next update: Sun 07 Dec 2025 11:01:13 +0000 Files and hashes: 1: SOjICIUf3Q5KcvZmv_NHH5baNJY.roa (hash: CIXb+faY/LyAGhWDjXy0Uzmt28hgw4zuuv1ZndxzjNQ=) 2: Y-LKp-GK8t-9s6YmnaLgbe3LbPA.crl (hash: qXVnEqzWKP+dvMyo7o8ngqkCOEUYOz8vG/3LdfqqVMU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/099705-4a3b-4a68-b6bd-538af1017509/1/Y-LKp-GK8t-9s6YmnaLgbe3LbPA.crl rsync://rpki.ripe.net/repository/DEFAULT/ec/099705-4a3b-4a68-b6bd-538af1017509/1/Y-LKp-GK8t-9s6YmnaLgbe3LbPA.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-LKp-GK8t-9s6YmnaLgbe3LbPA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 11:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:af:cb:e6:d8:e2:8f:cf:8a:df:0e:32:23:f6:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e2caa7e18af2dfbdb3a6269da2e06dedcb6cf0 Validity Not Before: Dec 6 11:01:13 2025 GMT Not After : Dec 7 11:01:13 2025 GMT Subject: CN=de158c1f0167cb1e11a4304ca7c6321140e60e4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:18:0c:6c:79:65:ee:71:e9:70:6c:45:bf:6e: 8b:2f:af:e8:4c:49:b8:82:b3:cf:eb:c7:ed:f9:8c: 37:50:6e:ef:0c:eb:3f:d9:9c:28:d5:5e:8a:3c:9a: 19:da:1f:9f:45:a1:ec:80:cf:38:23:b9:07:a0:60: 56:51:5a:d2:4a:79:28:99:31:f2:61:99:31:05:3a: 5e:9f:60:3c:1b:e4:2f:d2:05:c2:7a:a8:32:2e:a2: d0:d1:1d:63:05:3d:8d:a8:8e:6e:e5:06:5e:dc:1f: f4:ec:14:e6:d1:56:a5:34:58:32:dc:7d:7e:58:4f: 5d:67:c2:dc:8e:ef:74:c4:29:cc:72:2f:b9:c6:9f: e4:94:95:82:59:fc:71:46:91:fd:27:23:40:d5:05: 94:d9:96:95:6b:14:23:ec:a2:4a:ae:90:f9:8b:fa: c2:57:9b:11:48:f5:a5:fa:bf:49:4e:dd:6f:d1:c6: ec:70:f2:0a:73:17:03:2b:71:f5:8e:10:a4:89:d1: 03:29:9c:53:db:92:53:db:4f:f1:a2:49:e0:10:d1: f3:33:d2:1b:eb:49:56:1f:db:4f:93:7f:09:a4:d2: ef:00:4b:1e:a1:70:a8:fe:ed:3e:f7:20:bf:bd:66: 3c:91:9d:3d:9b:f3:04:cf:34:91:df:08:26:a9:e0: 6b:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:15:8C:1F:01:67:CB:1E:11:A4:30:4C:A7:C6:32:11:40:E6:0E:4B X509v3 Authority Key Identifier: keyid:63:E2:CA:A7:E1:8A:F2:DF:BD:B3:A6:26:9D:A2:E0:6D:ED:CB:6C:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-LKp-GK8t-9s6YmnaLgbe3LbPA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/099705-4a3b-4a68-b6bd-538af1017509/1/Y-LKp-GK8t-9s6YmnaLgbe3LbPA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/099705-4a3b-4a68-b6bd-538af1017509/1/Y-LKp-GK8t-9s6YmnaLgbe3LbPA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:e1:07:ca:98:ba:1e:2a:39:c7:5b:77:4a:11:70:0c:a7:94: 4b:3a:c9:5b:67:94:eb:b9:bd:db:a3:08:4c:69:e0:07:d0:0a: 8e:17:4a:82:44:11:a0:ab:29:77:94:82:a8:76:72:28:62:f8: 53:89:82:1a:a7:e5:0a:5f:f4:fc:e8:cd:24:b9:fe:e2:69:a5: 72:84:c4:00:00:71:e3:59:b0:79:de:61:f8:51:26:31:46:a1: 16:e4:1d:83:02:fe:37:00:fc:62:58:53:5a:f6:3f:5b:69:ca: 51:dc:ba:03:3d:48:34:69:cc:d0:48:c2:38:3c:53:59:cc:2d: 82:1f:88:e5:0b:5a:2e:a1:7e:0d:28:cd:ac:5b:b5:42:c5:bf: 02:f3:75:cc:bf:c3:7e:0d:1a:b6:ac:2a:77:20:d3:77:20:ec: 62:57:09:f9:00:c1:28:ec:6b:36:22:80:97:6a:81:2f:df:bf: 9b:95:74:9f:5b:15:67:4c:2d:64:de:65:0f:fd:63:f3:87:53: 06:7c:8e:c2:8d:10:51:9d:f6:79:f8:95:6d:41:2d:6b:0c:e7: 3c:63:07:91:b3:5e:18:dd:0a:38:e7:92:e7:5b:73:7e:f9:68: 39:37:aa:40:1d:e4:17:73:c5:06:08:6e:28:f3:20:df:75:3a: 24:76:1c:a5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzUq/L5tjij8+K3w4yI/auMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTJjYWE3ZTE4YWYyZGZiZGIzYTYyNjlkYTJlMDZkZWRj YjZjZjAwHhcNMjUxMjA2MTEwMTEzWhcNMjUxMjA3MTEwMTEzWjAzMTEwLwYDVQQD EyhkZTE1OGMxZjAxNjdjYjFlMTFhNDMwNGNhN2M2MzIxMTQwZTYwZTRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwBgMbHll7nHpcGxFv26LL6/oTEm4 grPP68ft+Yw3UG7vDOs/2Zwo1V6KPJoZ2h+fRaHsgM84I7kHoGBWUVrSSnkomTHy YZkxBTpen2A8G+Qv0gXCeqgyLqLQ0R1jBT2NqI5u5QZe3B/07BTm0ValNFgy3H1+ WE9dZ8Lcju90xCnMci+5xp/klJWCWfxxRpH9JyNA1QWU2ZaVaxQj7KJKrpD5i/rC V5sRSPWl+r9JTt1v0cbscPIKcxcDK3H1jhCkidEDKZxT25JT20/xokngENHzM9Ib 60lWH9tPk38JpNLvAEseoXCo/u0+9yC/vWY8kZ09m/MEzzSR3wgmqeBr2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN4VjB8BZ8seEaQwTKfGMhFA5g5LMB8GA1UdIwQY MBaAFGPiyqfhivLfvbOmJp2i4G3ty2zwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1MS3AtR0s4dC05czZZbW5hTGdiZTNMYlBBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy8wOTk3MDUtNGEzYi00YTY4LWI2YmQt NTM4YWYxMDE3NTA5LzEvWS1MS3AtR0s4dC05czZZbW5hTGdiZTNMYlBBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYy8wOTk3MDUtNGEzYi00YTY4LWI2YmQtNTM4YWYxMDE3NTA5 LzEvWS1MS3AtR0s4dC05czZZbW5hTGdiZTNMYlBBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMOEHypi6 Hio5x1t3ShFwDKeUSzrJW2eU67m926MITGngB9AKjhdKgkQRoKspd5SCqHZyKGL4 U4mCGqflCl/0/OjNJLn+4mmlcoTEAABx41mwed5h+FEmMUahFuQdgwL+NwD8YlhT WvY/W2nKUdy6Az1INGnM0EjCODxTWcwtgh+I5QtaLqF+DSjNrFu1QsW/AvN1zL/D fg0atqwqdyDTdyDsYlcJ+QDBKOxrNiKAl2qBL9+/m5V0n1sVZ0wtZN5lD/1j84dT BnyOwo0QUZ32efiVbUEtawznPGMHkbNeGN0KOOeS51tzfvloOTeqQB3kF3PFBghu KPMg33U6JHYcpQ== -----END CERTIFICATE-----Generated at Sat Dec 6 19:38:46 2025 by rpki-client