This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/63432a-e5d9-46e2-9c01-ac809bbae737/1/Ym0k1r81OWP-WvolsKWWZxUqhtA.mft File: Ym0k1r81OWP-WvolsKWWZxUqhtA.mft (raw, json) Hash identifier: jCjW6EOX1sUVuDjLPxrWAZRozfbFJudKB/cC1/eki1Y= Subject key identifier: 25:05:EB:AF:1F:15:36:7B:64:3B:72:86:E5:58:42:52:36:97:3F:E1 Authority key identifier: 62:6D:24:D6:BF:35:39:63:FE:5A:FA:25:B0:A5:96:67:15:2A:86:D0 Certificate issuer: /CN=626d24d6bf353963fe5afa25b0a59667152a86d0 Certificate serial: 019AF49C536A1E87E6C9C319FFEEA2037F91 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ym0k1r81OWP-WvolsKWWZxUqhtA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/63432a-e5d9-46e2-9c01-ac809bbae737/1/Ym0k1r81OWP-WvolsKWWZxUqhtA.mft Manifest number: 0EF2 Signing time: Sat 06 Dec 2025 17:01:16 +0000 Manifest this update: Sat 06 Dec 2025 17:01:16 +0000 Manifest next update: Sun 07 Dec 2025 17:01:16 +0000 Files and hashes: 1: XsLpmpu2xvBP4JjcplMw-4A56mY.roa (hash: zDQ4NxbIV24C02r59jK+8GO4r9TIoUq4yC6lv1rRxf0=) 2: Ym0k1r81OWP-WvolsKWWZxUqhtA.crl (hash: WOmNAEKVOeiznZQ3LKTXJ+GKeZ7uRF49nfHY+rOft/4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/63432a-e5d9-46e2-9c01-ac809bbae737/1/Ym0k1r81OWP-WvolsKWWZxUqhtA.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/63432a-e5d9-46e2-9c01-ac809bbae737/1/Ym0k1r81OWP-WvolsKWWZxUqhtA.mft rsync://rpki.ripe.net/repository/DEFAULT/Ym0k1r81OWP-WvolsKWWZxUqhtA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 17:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:9c:53:6a:1e:87:e6:c9:c3:19:ff:ee:a2:03:7f:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=626d24d6bf353963fe5afa25b0a59667152a86d0 Validity Not Before: Dec 6 17:01:16 2025 GMT Not After : Dec 7 17:01:16 2025 GMT Subject: CN=2505ebaf1f15367b643b7286e558425236973fe1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:eb:d4:c6:5a:0f:82:64:8d:0a:ac:09:53:bd: 77:1c:8c:eb:9a:6d:23:17:df:d3:e1:90:79:2c:48: 21:49:14:e4:28:0b:79:33:c6:07:c6:e3:86:7a:02: e8:01:b4:64:e8:a2:9b:d3:46:7d:f7:46:fc:4f:f9: 4e:35:a1:a5:8d:82:57:db:a0:f7:d1:fd:87:96:e1: 59:a3:ab:04:4c:dd:41:c5:99:45:bf:28:3e:e7:03: d2:d4:e7:f8:15:b1:83:3b:67:51:28:90:25:38:e8: 72:27:d9:49:7c:b5:0d:98:fb:37:80:d5:97:e3:a1: d9:68:50:b2:ce:96:d4:6c:28:12:22:6d:36:83:6c: 2e:5b:88:0d:19:cd:96:e5:22:ba:3f:2e:8f:87:58: 12:ae:f9:60:8b:08:10:a3:d1:dc:1a:f2:ad:09:1a: 19:15:fb:c8:28:0f:86:6d:c1:97:18:ee:71:86:a5: 14:dd:4a:60:0c:e7:74:87:cd:c8:6e:1b:af:19:06: 4c:9f:6e:ff:86:77:4f:bd:80:a0:22:44:00:74:2d: 58:c9:bc:94:27:33:aa:d1:40:4d:b4:6a:df:9e:bd: 4f:99:eb:f7:eb:aa:75:21:35:90:22:de:0d:00:00: df:da:97:ec:04:ef:2f:2b:30:31:9f:b0:9c:1a:48: 9d:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:05:EB:AF:1F:15:36:7B:64:3B:72:86:E5:58:42:52:36:97:3F:E1 X509v3 Authority Key Identifier: keyid:62:6D:24:D6:BF:35:39:63:FE:5A:FA:25:B0:A5:96:67:15:2A:86:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ym0k1r81OWP-WvolsKWWZxUqhtA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/63432a-e5d9-46e2-9c01-ac809bbae737/1/Ym0k1r81OWP-WvolsKWWZxUqhtA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/63432a-e5d9-46e2-9c01-ac809bbae737/1/Ym0k1r81OWP-WvolsKWWZxUqhtA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:7b:06:7f:b8:8a:ff:a5:d4:31:f1:90:d1:91:f2:0f:0d:68: 9c:0f:b9:e2:d8:b5:fc:01:b8:ac:0b:36:63:14:55:3d:3b:86: cb:03:c6:ce:ea:d4:43:8f:ad:ae:d6:07:dd:85:4b:b5:fa:f8: 27:28:e9:10:ef:fc:13:57:12:18:e4:92:e7:13:8c:65:d3:1a: 1f:3e:6a:9d:f6:bd:07:c1:7c:36:4e:aa:63:a8:83:50:3c:52: 8d:45:32:a4:a9:9f:fc:51:0c:19:b0:71:62:86:ae:14:0b:63: 21:84:d0:d9:fa:b0:2e:a8:7f:aa:45:f2:b8:9d:3f:03:50:fe: 9e:d3:93:23:66:51:cb:30:91:df:10:86:d2:f4:c2:af:29:49: d0:09:35:1c:a0:cf:07:70:ad:4f:4e:aa:87:03:17:fd:df:b0: 25:7d:ca:05:dd:48:56:57:46:e5:19:61:78:32:20:90:d3:74: ef:31:9d:f4:a9:0f:6a:e3:05:e2:93:b7:f1:a9:04:3c:6a:38: 2b:fd:dd:aa:71:7f:f1:7b:89:e8:49:a5:20:7a:d7:09:80:be: 17:c5:05:1f:f3:8d:7b:9b:7c:b0:b1:83:df:42:41:00:21:29: ef:6d:9d:80:b4:94:c6:f8:d2:66:8b:93:1e:5d:1f:a5:11:92: eb:d5:a7:81 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0nFNqHofmycMZ/+6iA3+RMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyNmQyNGQ2YmYzNTM5NjNmZTVhZmEyNWIwYTU5NjY3MTUy YTg2ZDAwHhcNMjUxMjA2MTcwMTE2WhcNMjUxMjA3MTcwMTE2WjAzMTEwLwYDVQQD EygyNTA1ZWJhZjFmMTUzNjdiNjQzYjcyODZlNTU4NDI1MjM2OTczZmUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwevUxloPgmSNCqwJU713HIzrmm0j F9/T4ZB5LEghSRTkKAt5M8YHxuOGegLoAbRk6KKb00Z990b8T/lONaGljYJX26D3 0f2HluFZo6sETN1BxZlFvyg+5wPS1Of4FbGDO2dRKJAlOOhyJ9lJfLUNmPs3gNWX 46HZaFCyzpbUbCgSIm02g2wuW4gNGc2W5SK6Py6Ph1gSrvlgiwgQo9HcGvKtCRoZ FfvIKA+GbcGXGO5xhqUU3UpgDOd0h83IbhuvGQZMn27/hndPvYCgIkQAdC1YybyU JzOq0UBNtGrfnr1Pmev366p1ITWQIt4NAADf2pfsBO8vKzAxn7CcGkidEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCUF668fFTZ7ZDtyhuVYQlI2lz/hMB8GA1UdIwQY MBaAFGJtJNa/NTlj/lr6JbCllmcVKobQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWW0wazFyODFPV1AtV3ZvbHNLV1daeFVxaHRBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC82MzQzMmEtZTVkOS00NmUyLTljMDEt YWM4MDliYmFlNzM3LzEvWW0wazFyODFPV1AtV3ZvbHNLV1daeFVxaHRBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC82MzQzMmEtZTVkOS00NmUyLTljMDEtYWM4MDliYmFlNzM3 LzEvWW0wazFyODFPV1AtV3ZvbHNLV1daeFVxaHRBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcXsGf7iK /6XUMfGQ0ZHyDw1onA+54ti1/AG4rAs2YxRVPTuGywPGzurUQ4+trtYH3YVLtfr4 JyjpEO/8E1cSGOSS5xOMZdMaHz5qnfa9B8F8Nk6qY6iDUDxSjUUypKmf/FEMGbBx YoauFAtjIYTQ2fqwLqh/qkXyuJ0/A1D+ntOTI2ZRyzCR3xCG0vTCrylJ0Ak1HKDP B3CtT06qhwMX/d+wJX3KBd1IVldG5RlheDIgkNN07zGd9KkPauMF4pO38akEPGo4 K/3dqnF/8XuJ6EmlIHrXCYC+F8UFH/ONe5t8sLGD30JBACEp722dgLSUxvjSZouT Hl0fpRGS69WngQ== -----END CERTIFICATE-----Generated at Sun Dec 7 01:52:47 2025 by rpki-client