This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/bf9cdb-6e87-479f-93a1-65a5ef0af0b4/1/Y_pxXC9LkAjI9LYGVPfzx2NTrmc.mft File: Y_pxXC9LkAjI9LYGVPfzx2NTrmc.mft (raw, json) Hash identifier: FfZJIFdpI8/AuDDyDoCBEV2Ph3C+FRHcXFA4aqOuldo= Subject key identifier: C4:79:5B:EA:C5:11:BE:9E:35:1D:A5:6F:29:F3:A5:39:31:FF:A9:C9 Authority key identifier: 63:FA:71:5C:2F:4B:90:08:C8:F4:B6:06:54:F7:F3:C7:63:53:AE:67 Certificate issuer: /CN=63fa715c2f4b9008c8f4b60654f7f3c76353ae67 Certificate serial: 019B36B31E0884BC73E618902AA01CF93C95 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y_pxXC9LkAjI9LYGVPfzx2NTrmc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/bf9cdb-6e87-479f-93a1-65a5ef0af0b4/1/Y_pxXC9LkAjI9LYGVPfzx2NTrmc.mft Manifest number: 0ABA Signing time: Fri 19 Dec 2025 13:01:06 +0000 Manifest this update: Fri 19 Dec 2025 13:01:06 +0000 Manifest next update: Sat 20 Dec 2025 13:01:06 +0000 Files and hashes: 1: RiW5W8SWQ6-vverb8NRdVDj6CjU.roa (hash: 4IAwVod5pwysrRco/iSy8Lzx8KDdHZ/Q8/hyLLW5E4w=) 2: Y_pxXC9LkAjI9LYGVPfzx2NTrmc.crl (hash: LtdjWIWjO9mcd4UdhmDLprw8hP2pYJHTSw7ZTvVX7Is=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/bf9cdb-6e87-479f-93a1-65a5ef0af0b4/1/Y_pxXC9LkAjI9LYGVPfzx2NTrmc.crl rsync://rpki.ripe.net/repository/DEFAULT/0a/bf9cdb-6e87-479f-93a1-65a5ef0af0b4/1/Y_pxXC9LkAjI9LYGVPfzx2NTrmc.mft rsync://rpki.ripe.net/repository/DEFAULT/Y_pxXC9LkAjI9LYGVPfzx2NTrmc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 13:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:b3:1e:08:84:bc:73:e6:18:90:2a:a0:1c:f9:3c:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63fa715c2f4b9008c8f4b60654f7f3c76353ae67 Validity Not Before: Dec 19 13:01:06 2025 GMT Not After : Dec 20 13:01:06 2025 GMT Subject: CN=c4795beac511be9e351da56f29f3a53931ffa9c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:98:ad:b1:c6:40:f7:99:b2:94:7a:dd:c6:4e: 12:d2:f3:5e:aa:b3:b0:b4:b1:9c:f8:f1:d5:91:22: 06:e1:aa:b1:af:24:fa:74:04:c9:8f:7e:d3:b7:d8: 77:02:5e:e1:79:5d:ce:8b:2f:63:1c:af:48:1b:3a: 1f:7a:33:0e:f6:e1:6f:b8:b4:38:ab:a3:e2:18:b0: 63:ad:89:10:9e:40:07:91:ec:ff:59:9a:0d:3d:48: 8f:c8:d7:f2:5f:10:9c:c7:a3:d8:e3:41:79:b0:8e: 34:4c:3e:d3:45:aa:aa:0d:11:44:1f:a3:c6:2c:25: 46:81:0b:02:71:b0:00:e9:95:64:75:6f:db:84:90: 1e:09:2d:8c:11:be:71:ce:9c:72:d5:22:7c:ae:88: 1c:88:b5:a8:ef:32:f5:c8:92:52:00:21:f0:58:01: 6d:18:74:15:25:23:b9:a8:96:04:1e:94:79:77:13: 70:ac:b0:04:4e:2c:37:b1:2b:dc:e4:fa:3b:60:b4: 82:5f:d6:e1:7c:fa:d5:41:38:88:bf:cb:f5:16:b3: 0c:ae:84:5b:56:2f:43:13:92:d7:09:08:e8:54:ed: ae:58:0c:99:6e:65:ec:a8:f3:ec:40:92:25:3f:82: 01:6a:51:a1:87:ba:2b:cf:83:05:5f:3f:20:f7:02: 0a:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:79:5B:EA:C5:11:BE:9E:35:1D:A5:6F:29:F3:A5:39:31:FF:A9:C9 X509v3 Authority Key Identifier: keyid:63:FA:71:5C:2F:4B:90:08:C8:F4:B6:06:54:F7:F3:C7:63:53:AE:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y_pxXC9LkAjI9LYGVPfzx2NTrmc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/bf9cdb-6e87-479f-93a1-65a5ef0af0b4/1/Y_pxXC9LkAjI9LYGVPfzx2NTrmc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/bf9cdb-6e87-479f-93a1-65a5ef0af0b4/1/Y_pxXC9LkAjI9LYGVPfzx2NTrmc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:52:23:88:11:f9:ba:a5:c2:a9:c6:4f:2e:80:1e:e7:e5:7b: ef:00:34:74:af:19:8c:b9:63:67:27:89:59:3b:e9:a5:39:4d: 69:60:c0:2a:e8:b4:d5:20:f4:09:24:d0:fb:f8:d2:4f:02:a4: 23:85:69:ac:74:23:18:a5:da:65:a6:3c:64:33:66:72:58:8f: a3:75:85:70:08:99:d7:ac:86:78:40:fb:1f:aa:17:92:f5:69: f6:b2:81:74:d6:1e:7d:e4:e2:4e:36:60:cf:f0:87:58:d2:41: c2:01:fb:23:41:c4:41:77:9a:ec:d9:2e:74:7f:63:0b:67:2d: f6:70:b7:c1:c5:6e:8d:7d:93:19:ec:2c:b2:57:9f:4d:52:51: f9:18:f7:8e:12:a8:c0:17:43:be:01:3d:54:9b:3b:98:cf:e0: c0:e5:f2:ab:fe:3e:a9:91:52:79:44:ce:90:56:cf:8a:c5:3b: b7:10:61:35:d9:8b:d1:b7:ed:f8:ef:ca:48:3d:89:6e:6a:ac: 1a:9f:ed:f7:3a:23:b0:43:bd:94:04:13:2a:ec:15:d3:b3:70: 6f:6a:e6:99:f4:f7:e0:32:22:20:84:94:b3:3f:e5:3d:fe:a9: e2:65:9d:4f:be:08:af:e7:02:fc:88:86:d8:5b:cb:56:7c:51: dd:cd:1c:35 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs2sx4IhLxz5hiQKqAc+TyVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZmE3MTVjMmY0YjkwMDhjOGY0YjYwNjU0ZjdmM2M3NjM1 M2FlNjcwHhcNMjUxMjE5MTMwMTA2WhcNMjUxMjIwMTMwMTA2WjAzMTEwLwYDVQQD EyhjNDc5NWJlYWM1MTFiZTllMzUxZGE1NmYyOWYzYTUzOTMxZmZhOWM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAypitscZA95mylHrdxk4S0vNeqrOw tLGc+PHVkSIG4aqxryT6dATJj37Tt9h3Al7heV3Oiy9jHK9IGzofejMO9uFvuLQ4 q6PiGLBjrYkQnkAHkez/WZoNPUiPyNfyXxCcx6PY40F5sI40TD7TRaqqDRFEH6PG LCVGgQsCcbAA6ZVkdW/bhJAeCS2MEb5xzpxy1SJ8rogciLWo7zL1yJJSACHwWAFt GHQVJSO5qJYEHpR5dxNwrLAETiw3sSvc5Po7YLSCX9bhfPrVQTiIv8v1FrMMroRb Vi9DE5LXCQjoVO2uWAyZbmXsqPPsQJIlP4IBalGhh7orz4MFXz8g9wIK5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMR5W+rFEb6eNR2lbynzpTkx/6nJMB8GA1UdIwQY MBaAFGP6cVwvS5AIyPS2BlT388djU65nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWV9weFhDOUxrQWpJOUxZR1ZQZnp4Mk5Ucm1jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS9iZjljZGItNmU4Ny00NzlmLTkzYTEt NjVhNWVmMGFmMGI0LzEvWV9weFhDOUxrQWpJOUxZR1ZQZnp4Mk5Ucm1jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYS9iZjljZGItNmU4Ny00NzlmLTkzYTEtNjVhNWVmMGFmMGI0 LzEvWV9weFhDOUxrQWpJOUxZR1ZQZnp4Mk5Ucm1jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAglIjiBH5 uqXCqcZPLoAe5+V77wA0dK8ZjLljZyeJWTvppTlNaWDAKui01SD0CSTQ+/jSTwKk I4VprHQjGKXaZaY8ZDNmcliPo3WFcAiZ16yGeED7H6oXkvVp9rKBdNYefeTiTjZg z/CHWNJBwgH7I0HEQXea7NkudH9jC2ct9nC3wcVujX2TGewsslefTVJR+Rj3jhKo wBdDvgE9VJs7mM/gwOXyq/4+qZFSeUTOkFbPisU7txBhNdmL0bft+O/KSD2Jbmqs Gp/t9zojsEO9lAQTKuwV07Nwb2rmmfT34DIiIISUsz/lPf6p4mWdT74Ir+cC/IiG 2FvLVnxR3c0cNQ== -----END CERTIFICATE-----Generated at Fri Dec 19 19:01:29 2025 by rpki-client