This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/7b2fcc-ebc9-4b02-b716-f80d5f31664e/1/Y14XDZsHxQ0bKa6GliBssUWk8fc.mft File: Y14XDZsHxQ0bKa6GliBssUWk8fc.mft (raw, json) Hash identifier: S+SofEkih0JDdyzLYN+Bvyk9OkxvS0yvRTL+Q2yaKwQ= Subject key identifier: 4E:81:EA:86:F4:80:E7:1B:52:4F:BC:7C:6F:9E:2B:53:5A:7C:CF:73 Authority key identifier: 63:5E:17:0D:9B:07:C5:0D:1B:29:AE:86:96:20:6C:B1:45:A4:F1:F7 Certificate issuer: /CN=635e170d9b07c50d1b29ae8696206cb145a4f1f7 Certificate serial: 019AF49C0E151D01D6CB708A02B26273527E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y14XDZsHxQ0bKa6GliBssUWk8fc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/7b2fcc-ebc9-4b02-b716-f80d5f31664e/1/Y14XDZsHxQ0bKa6GliBssUWk8fc.mft Manifest number: B8 Signing time: Sat 06 Dec 2025 17:00:59 +0000 Manifest this update: Sat 06 Dec 2025 17:00:59 +0000 Manifest next update: Sun 07 Dec 2025 17:00:59 +0000 Files and hashes: 1: Y14XDZsHxQ0bKa6GliBssUWk8fc.crl (hash: YHlQX9oNhUZe6Jd8CK+15OCw2bDWHH+go6kw0lq7qmM=) 2: qdMXO5dxGNkyeRydnMIi_ZzZAVs.roa (hash: emXh4czyfau1VXJaPAfpRR7uc8vhZu0P1DoeRXNpxPQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/7b2fcc-ebc9-4b02-b716-f80d5f31664e/1/Y14XDZsHxQ0bKa6GliBssUWk8fc.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/7b2fcc-ebc9-4b02-b716-f80d5f31664e/1/Y14XDZsHxQ0bKa6GliBssUWk8fc.mft rsync://rpki.ripe.net/repository/DEFAULT/Y14XDZsHxQ0bKa6GliBssUWk8fc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:9c:0e:15:1d:01:d6:cb:70:8a:02:b2:62:73:52:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=635e170d9b07c50d1b29ae8696206cb145a4f1f7 Validity Not Before: Dec 6 17:00:59 2025 GMT Not After : Dec 7 17:00:59 2025 GMT Subject: CN=4e81ea86f480e71b524fbc7c6f9e2b535a7ccf73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:5b:a3:a5:91:2d:a3:40:f6:4c:69:dc:16:5a: 01:16:df:32:ed:59:71:b2:da:3f:3e:45:38:53:31: f2:62:1d:29:25:4e:59:ad:37:67:e7:79:80:ea:62: 05:a7:84:a3:fc:03:9f:85:60:d6:d7:86:5f:7f:88: 7c:bc:13:ef:87:fc:89:d9:67:2e:d8:86:64:ff:ee: b2:5a:c7:8e:3a:32:0a:d8:29:1b:3f:4e:75:c6:c7: 38:d2:16:7e:73:44:d7:f1:ce:3b:fa:98:8d:1f:bb: 72:7a:02:74:02:3b:7a:fa:54:1b:fe:63:c4:aa:ab: 0b:b6:0c:25:c2:92:8c:ba:0b:66:12:5b:d8:7b:fd: 89:f4:15:be:28:23:03:be:30:41:bc:44:cd:94:9f: c4:29:54:a0:1e:98:29:6e:98:84:b6:5c:46:66:d8: 6c:20:45:a9:f7:89:bc:99:d0:45:85:9e:8e:8b:7d: cc:cd:52:5c:7a:98:1b:c4:1f:c1:af:83:b3:70:35: 1f:77:b7:af:6a:da:fd:30:c9:f8:7f:11:71:6b:32: 86:c4:43:30:2d:ac:d4:81:46:ce:d2:24:6b:4c:ec: 7c:fd:63:f9:d5:e5:c3:12:22:b7:19:7f:1e:a7:38: a2:bd:15:c1:71:4d:af:f1:d9:6f:a6:ec:5c:04:9d: 50:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:81:EA:86:F4:80:E7:1B:52:4F:BC:7C:6F:9E:2B:53:5A:7C:CF:73 X509v3 Authority Key Identifier: keyid:63:5E:17:0D:9B:07:C5:0D:1B:29:AE:86:96:20:6C:B1:45:A4:F1:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y14XDZsHxQ0bKa6GliBssUWk8fc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/7b2fcc-ebc9-4b02-b716-f80d5f31664e/1/Y14XDZsHxQ0bKa6GliBssUWk8fc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/7b2fcc-ebc9-4b02-b716-f80d5f31664e/1/Y14XDZsHxQ0bKa6GliBssUWk8fc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b5:bc:c6:c9:3e:c1:c6:f8:a8:40:03:3e:5e:6a:05:84:af:46: f0:92:9a:95:62:47:a6:69:65:0c:80:0f:c8:1d:2d:96:7d:80: 1b:b6:4e:32:ad:cc:49:94:e8:27:3e:4d:ad:9d:62:06:83:1f: c3:ad:5f:5a:5c:df:1f:59:cf:5a:d0:e4:bc:70:c0:7c:e9:89: fc:c0:ca:5a:bf:f8:1e:dc:c6:92:65:12:38:3d:f1:01:01:25: 67:81:b2:2d:59:2e:90:20:41:b1:38:78:a4:46:83:57:b8:7e: e9:f0:4f:16:bd:0b:d1:8b:c7:8d:35:a1:69:4d:2f:8c:89:0e: d9:b2:99:3b:ae:99:06:d4:c0:9f:f6:fc:73:0e:17:d0:71:db: 2d:ab:e2:ab:73:3a:c7:60:78:ac:4b:fa:01:79:f4:92:27:cb: 19:78:61:53:4e:ec:7f:43:12:d0:86:af:9d:ff:6d:a1:59:7b: 0b:2a:e1:b8:a8:7c:77:bb:c3:da:b8:9c:1a:52:f9:24:e3:ff: cf:a2:2e:0f:12:78:8f:7f:e3:e4:b4:11:e5:c2:c4:92:1b:7b: bf:f9:8e:15:ca:8e:5d:1a:de:52:6c:06:db:be:54:1d:08:54: 8a:18:21:55:fd:84:49:33:84:33:e1:e5:33:08:c2:b6:7a:68: d1:9a:9c:77 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0nA4VHQHWy3CKArJic1J+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzNWUxNzBkOWIwN2M1MGQxYjI5YWU4Njk2MjA2Y2IxNDVh NGYxZjcwHhcNMjUxMjA2MTcwMDU5WhcNMjUxMjA3MTcwMDU5WjAzMTEwLwYDVQQD Eyg0ZTgxZWE4NmY0ODBlNzFiNTI0ZmJjN2M2ZjllMmI1MzVhN2NjZjczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoFujpZEto0D2TGncFloBFt8y7Vlx sto/PkU4UzHyYh0pJU5ZrTdn53mA6mIFp4Sj/AOfhWDW14Zff4h8vBPvh/yJ2Wcu 2IZk/+6yWseOOjIK2CkbP051xsc40hZ+c0TX8c47+piNH7tyegJ0Ajt6+lQb/mPE qqsLtgwlwpKMugtmElvYe/2J9BW+KCMDvjBBvETNlJ/EKVSgHpgpbpiEtlxGZths IEWp94m8mdBFhZ6Oi33MzVJcepgbxB/Br4OzcDUfd7evatr9MMn4fxFxazKGxEMw LazUgUbO0iRrTOx8/WP51eXDEiK3GX8epziivRXBcU2v8dlvpuxcBJ1QkwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE6B6ob0gOcbUk+8fG+eK1NafM9zMB8GA1UdIwQY MBaAFGNeFw2bB8UNGymuhpYgbLFFpPH3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWTE0WERac0h4UTBiS2E2R2xpQnNzVVdrOGZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS83YjJmY2MtZWJjOS00YjAyLWI3MTYt ZjgwZDVmMzE2NjRlLzEvWTE0WERac0h4UTBiS2E2R2xpQnNzVVdrOGZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS83YjJmY2MtZWJjOS00YjAyLWI3MTYtZjgwZDVmMzE2NjRl LzEvWTE0WERac0h4UTBiS2E2R2xpQnNzVVdrOGZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtbzGyT7B xvioQAM+XmoFhK9G8JKalWJHpmllDIAPyB0tln2AG7ZOMq3MSZToJz5NrZ1iBoMf w61fWlzfH1nPWtDkvHDAfOmJ/MDKWr/4HtzGkmUSOD3xAQElZ4GyLVkukCBBsTh4 pEaDV7h+6fBPFr0L0YvHjTWhaU0vjIkO2bKZO66ZBtTAn/b8cw4X0HHbLaviq3M6 x2B4rEv6AXn0kifLGXhhU07sf0MS0Iavnf9toVl7CyrhuKh8d7vD2ricGlL5JOP/ z6IuDxJ4j3/j5LQR5cLEkht7v/mOFcqOXRreUmwG275UHQhUihghVf2ESTOEM+Hl MwjCtnpo0Zqcdw== -----END CERTIFICATE-----Generated at Sat Dec 6 20:29:10 2025 by rpki-client