This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/26d917-8c91-45ab-8442-e4e52ac0fefe/1/Y9krglYVmJTSubJfTYWYbBcnI8M.mft File: Y9krglYVmJTSubJfTYWYbBcnI8M.mft (raw, json) Hash identifier: +epDoEgIdwdHeWjc8oPR4DuhucaJqP85HKOUPcvuf7o= Subject key identifier: F6:D5:01:C0:CF:AE:41:17:D3:2A:11:19:65:F5:B7:EA:E6:11:17:2D Authority key identifier: 63:D9:2B:82:56:15:98:94:D2:B9:B2:5F:4D:85:98:6C:17:27:23:C3 Certificate issuer: /CN=63d92b8256159894d2b9b25f4d85986c172723c3 Certificate serial: 019B5E2EB3CDE737669651D1FEA01B83C9BF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y9krglYVmJTSubJfTYWYbBcnI8M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/26d917-8c91-45ab-8442-e4e52ac0fefe/1/Y9krglYVmJTSubJfTYWYbBcnI8M.mft Manifest number: 0F63 Signing time: Sat 27 Dec 2025 05:01:17 +0000 Manifest this update: Sat 27 Dec 2025 05:01:17 +0000 Manifest next update: Sun 28 Dec 2025 05:01:17 +0000 Files and hashes: 1: VWwybFqWy2MXRW4GlH3TydNfWoU.roa (hash: AWURtsDjcCoYL2cv7BnBoU4GwDRl+uRuBqffs+8EChU=) 2: VsWH0dh23uHGDE4kVE5VRVWnLr0.roa (hash: hOVkpMTlrRKsdZ/dZuqLj9eHRUgLLpUyv0shzANzums=) 3: Y9krglYVmJTSubJfTYWYbBcnI8M.crl (hash: YUE3wPpp8GqzmHmJ8CsjpXnlMUgHqChPhsVByV6NzTU=) 4: gUlf15cCFOrr7zCpeZmrXHzHdJI.roa (hash: BZcCVc7umSblQi+mV0dsvmWzWVZejT4EU9eRPoEWNCA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/26d917-8c91-45ab-8442-e4e52ac0fefe/1/Y9krglYVmJTSubJfTYWYbBcnI8M.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/26d917-8c91-45ab-8442-e4e52ac0fefe/1/Y9krglYVmJTSubJfTYWYbBcnI8M.mft rsync://rpki.ripe.net/repository/DEFAULT/Y9krglYVmJTSubJfTYWYbBcnI8M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5e:2e:b3:cd:e7:37:66:96:51:d1:fe:a0:1b:83:c9:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63d92b8256159894d2b9b25f4d85986c172723c3 Validity Not Before: Dec 27 05:01:17 2025 GMT Not After : Dec 28 05:01:17 2025 GMT Subject: CN=f6d501c0cfae4117d32a111965f5b7eae611172d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:76:b1:47:21:fc:95:18:b5:27:95:19:9d:a5: a9:f1:4b:59:a3:1e:80:13:a3:56:7b:bc:63:47:81: ba:ac:08:01:1d:90:7a:05:1e:d5:51:e6:66:c8:fc: e9:45:f9:14:bf:fc:6c:4a:d2:4d:5e:93:8e:02:0c: ae:7d:c2:03:d5:c2:a4:91:23:75:24:34:80:d0:99: 0c:58:33:71:97:30:a8:84:42:1c:35:7e:f5:df:d5: 7b:32:bd:df:db:ee:88:99:69:05:06:5a:25:b3:83: e8:b9:b9:ef:56:6e:02:d6:2c:0d:77:11:bc:d1:a7: 5e:d9:9f:a9:b9:39:15:3d:c3:d9:c3:30:fe:2c:32: 36:4f:20:1f:c5:1f:c1:4a:c1:25:53:35:77:b3:e3: f1:41:75:18:32:1d:d0:b6:4a:61:12:14:8d:0c:ea: 14:50:15:b9:1b:6e:09:cc:c1:c4:ca:5e:51:5a:63: dc:b5:c4:97:3f:df:99:11:1f:5a:92:a8:59:0e:e6: a9:60:86:04:15:d7:7b:fd:20:0a:e3:4e:08:76:ab: 4c:01:58:ad:96:4d:3f:23:e7:7e:65:0a:2b:07:65: 4a:fd:92:ee:0d:4d:bc:84:1a:3f:ec:7b:d4:c2:c8: 7f:14:bd:b9:08:74:55:c5:30:46:32:6f:08:39:fc: 40:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:D5:01:C0:CF:AE:41:17:D3:2A:11:19:65:F5:B7:EA:E6:11:17:2D X509v3 Authority Key Identifier: keyid:63:D9:2B:82:56:15:98:94:D2:B9:B2:5F:4D:85:98:6C:17:27:23:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y9krglYVmJTSubJfTYWYbBcnI8M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/26d917-8c91-45ab-8442-e4e52ac0fefe/1/Y9krglYVmJTSubJfTYWYbBcnI8M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/26d917-8c91-45ab-8442-e4e52ac0fefe/1/Y9krglYVmJTSubJfTYWYbBcnI8M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:b0:d1:1c:92:fe:40:b7:9b:6d:0b:05:ce:e0:09:d6:aa:dd: c5:e7:2c:c1:e2:f1:5b:eb:0f:5a:7a:3c:21:69:a8:e9:f4:f0: ee:42:66:9a:62:8d:f7:9a:43:34:d2:61:05:0a:bf:5f:80:78: 85:33:12:c3:1e:57:33:1b:cd:18:04:21:ef:f1:6f:f7:e7:18: c6:f6:5d:ee:d8:07:19:bd:31:0f:4a:ff:9a:23:3b:c3:ad:eb: d5:83:05:98:a0:59:98:e7:9f:aa:60:22:ca:a3:19:49:d2:47: d1:f6:e6:a5:49:7b:0d:2d:bb:6e:2d:f9:b4:f4:ea:eb:40:f3: 33:f2:d0:ba:f6:90:dd:33:33:fd:bc:3e:5c:5a:c8:e7:2f:ae: 60:8c:2b:bf:1b:50:f1:3d:a8:79:8a:51:d3:d9:eb:b0:e0:1e: 3b:d9:65:f3:9b:f9:9a:ba:48:89:cd:4a:b7:e5:12:17:aa:a6: 44:2a:e0:0d:e3:6e:62:40:0a:e1:4d:d9:ba:18:a3:f1:75:bf: da:06:72:a9:63:20:57:4d:3f:c5:81:f3:ed:a9:51:3e:65:bc: 62:6f:12:bc:4b:ed:5a:09:67:c7:16:d0:ce:5d:2a:92:48:e1: 57:d5:5d:2f:d9:3e:e7:56:af:7e:57:56:dc:da:63:0b:77:83: 35:57:bd:e2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZteLrPN5zdmllHR/qAbg8m/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZDkyYjgyNTYxNTk4OTRkMmI5YjI1ZjRkODU5ODZjMTcy NzIzYzMwHhcNMjUxMjI3MDUwMTE3WhcNMjUxMjI4MDUwMTE3WjAzMTEwLwYDVQQD EyhmNmQ1MDFjMGNmYWU0MTE3ZDMyYTExMTk2NWY1YjdlYWU2MTExNzJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArXaxRyH8lRi1J5UZnaWp8UtZox6A E6NWe7xjR4G6rAgBHZB6BR7VUeZmyPzpRfkUv/xsStJNXpOOAgyufcID1cKkkSN1 JDSA0JkMWDNxlzCohEIcNX7139V7Mr3f2+6ImWkFBlols4PoubnvVm4C1iwNdxG8 0ade2Z+puTkVPcPZwzD+LDI2TyAfxR/BSsElUzV3s+PxQXUYMh3QtkphEhSNDOoU UBW5G24JzMHEyl5RWmPctcSXP9+ZER9akqhZDuapYIYEFdd7/SAK404IdqtMAVit lk0/I+d+ZQorB2VK/ZLuDU28hBo/7HvUwsh/FL25CHRVxTBGMm8IOfxAxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPbVAcDPrkEX0yoRGWX1t+rmERctMB8GA1UdIwQY MBaAFGPZK4JWFZiU0rmyX02FmGwXJyPDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWTlrcmdsWVZtSlRTdWJKZlRZV1liQmNuSThNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi8yNmQ5MTctOGM5MS00NWFiLTg0NDIt ZTRlNTJhYzBmZWZlLzEvWTlrcmdsWVZtSlRTdWJKZlRZV1liQmNuSThNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi8yNmQ5MTctOGM5MS00NWFiLTg0NDItZTRlNTJhYzBmZWZl LzEvWTlrcmdsWVZtSlRTdWJKZlRZV1liQmNuSThNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABLDRHJL+ QLebbQsFzuAJ1qrdxecsweLxW+sPWno8IWmo6fTw7kJmmmKN95pDNNJhBQq/X4B4 hTMSwx5XMxvNGAQh7/Fv9+cYxvZd7tgHGb0xD0r/miM7w63r1YMFmKBZmOefqmAi yqMZSdJH0fbmpUl7DS27bi35tPTq60DzM/LQuvaQ3TMz/bw+XFrI5y+uYIwrvxtQ 8T2oeYpR09nrsOAeO9ll85v5mrpIic1Kt+USF6qmRCrgDeNuYkAK4U3Zuhij8XW/ 2gZyqWMgV00/xYHz7alRPmW8Ym8SvEvtWglnxxbQzl0qkkjhV9VdL9k+51avfldW 3NpjC3eDNVe94g== -----END CERTIFICATE-----Generated at Sat Dec 27 08:08:40 2025 by rpki-client