This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/bdd1e7-b79a-4c21-9ba9-f157c3294d40/1/Y7hCJUu9a_M-CdBaRY8AoEhM8W8.mft File: Y7hCJUu9a_M-CdBaRY8AoEhM8W8.mft (raw, json) Hash identifier: AMdzq3AYikTNI93CkQsBoV9uascpAuCFqAkEwJDvyFc= Subject key identifier: 28:9E:C5:C8:5B:E2:49:67:66:A3:B2:B3:28:64:01:66:29:FC:2F:45 Authority key identifier: 63:B8:42:25:4B:BD:6B:F3:3E:09:D0:5A:45:8F:00:A0:48:4C:F1:6F Certificate issuer: /CN=63b842254bbd6bf33e09d05a458f00a0484cf16f Certificate serial: 019B3C7FB90AD7352BCC38BD9FECB6149980 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y7hCJUu9a_M-CdBaRY8AoEhM8W8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/bdd1e7-b79a-4c21-9ba9-f157c3294d40/1/Y7hCJUu9a_M-CdBaRY8AoEhM8W8.mft Manifest number: 1787 Signing time: Sat 20 Dec 2025 16:02:41 +0000 Manifest this update: Sat 20 Dec 2025 16:02:41 +0000 Manifest next update: Sun 21 Dec 2025 16:02:41 +0000 Files and hashes: 1: Y7hCJUu9a_M-CdBaRY8AoEhM8W8.crl (hash: J3qDXetW/6L3qOUKqihrN/fKyDcQOZB0FNvpDDFCU94=) 2: _-3if3VEwGJAS0I_jDlqTGph8OQ.roa (hash: XgkrYG7AjIUlvGnLYa7FZ2ZiNNqvFknEkkF79303ihw=) 3: afksL8Y4wp9aBVxxgcGKfU2eROw.roa (hash: 8xwBL2ZqnkL2AeUdnHRPvgqeZ+oYYKmlsRH2l3bkjtE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/bdd1e7-b79a-4c21-9ba9-f157c3294d40/1/Y7hCJUu9a_M-CdBaRY8AoEhM8W8.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/bdd1e7-b79a-4c21-9ba9-f157c3294d40/1/Y7hCJUu9a_M-CdBaRY8AoEhM8W8.mft rsync://rpki.ripe.net/repository/DEFAULT/Y7hCJUu9a_M-CdBaRY8AoEhM8W8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7f:b9:0a:d7:35:2b:cc:38:bd:9f:ec:b6:14:99:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63b842254bbd6bf33e09d05a458f00a0484cf16f Validity Not Before: Dec 20 16:02:41 2025 GMT Not After : Dec 21 16:02:41 2025 GMT Subject: CN=289ec5c85be2496766a3b2b32864016629fc2f45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:69:49:2e:8b:1a:ef:3e:0e:c9:88:99:fb:40: 7a:0a:16:bc:fa:aa:f9:b7:a7:c1:b0:c9:bf:6d:ca: 40:45:06:d4:a1:3e:51:b8:ed:27:b0:51:c2:71:65: d3:91:a7:0a:ba:1f:aa:aa:b0:85:1c:f4:82:82:df: 3a:07:4e:14:81:e4:f5:68:4c:07:8a:9c:00:67:fc: 5e:c5:08:a6:e0:26:bc:67:4e:12:c6:dd:fc:b9:5e: 0e:79:1c:d4:38:11:9a:58:c0:88:3c:69:52:6a:a0: eb:d8:92:e1:a9:ab:5e:9a:51:12:fb:0d:85:70:0b: 1d:65:e5:88:27:05:99:ab:2a:53:b0:dd:9e:1a:49: 5b:04:fc:a5:18:8b:1a:de:2e:37:51:16:0b:e4:67: bf:00:fd:f2:30:80:8f:ac:dd:be:25:4b:03:21:65: ca:05:8b:01:78:e7:a7:d5:04:9e:f7:fa:f0:b1:c3: ef:9d:51:28:2c:59:56:53:78:fe:c9:c5:66:93:bb: 47:44:8d:33:39:49:6a:9f:21:70:e4:35:bf:4e:96: 84:74:0b:3f:66:5b:26:cf:30:59:e1:8e:27:72:1d: 64:37:d0:66:83:02:e1:39:06:f9:43:e0:1f:46:66: 12:7a:ee:a5:14:9f:4f:28:bb:9b:5c:d6:10:18:18: 05:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:9E:C5:C8:5B:E2:49:67:66:A3:B2:B3:28:64:01:66:29:FC:2F:45 X509v3 Authority Key Identifier: keyid:63:B8:42:25:4B:BD:6B:F3:3E:09:D0:5A:45:8F:00:A0:48:4C:F1:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y7hCJUu9a_M-CdBaRY8AoEhM8W8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/bdd1e7-b79a-4c21-9ba9-f157c3294d40/1/Y7hCJUu9a_M-CdBaRY8AoEhM8W8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/bdd1e7-b79a-4c21-9ba9-f157c3294d40/1/Y7hCJUu9a_M-CdBaRY8AoEhM8W8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d8:5e:86:c7:ea:46:0e:50:5e:3a:33:9f:1e:c0:bd:eb:73:d0: 7e:01:38:6b:33:b2:17:e3:a7:5f:37:67:7f:38:7c:e8:18:17: 94:45:79:3d:55:e3:bd:90:1d:26:7c:b5:60:a8:67:85:df:ba: 29:28:78:77:fa:9d:7b:1c:b0:5e:cd:71:aa:76:9e:49:ea:06: 86:c7:e2:16:46:1b:0e:75:23:f6:8f:44:a8:f3:09:d9:af:81: c2:20:22:09:82:f6:54:0e:4f:7e:68:1d:13:2a:41:0a:ee:0e: 56:9d:26:a1:d7:b0:91:02:4f:9a:fb:9c:8f:53:a9:ce:e3:5f: 5f:3e:58:de:81:f1:e4:f1:5d:dd:7e:90:65:16:18:c6:d4:87: 60:17:43:02:42:bc:ff:27:de:3f:a9:2a:fb:5d:87:fe:b3:cb: 55:4b:ae:a5:86:dd:db:3f:cd:86:4f:28:dd:60:c8:10:78:f5: 8b:33:39:7e:78:29:59:d7:4d:65:a4:3e:f0:c2:ec:28:cf:2b: 0f:bc:ad:d8:1a:c2:d0:ab:00:0f:5c:6a:f5:0f:01:0a:45:e3: 54:d7:dc:7e:f9:3e:8c:ef:85:76:0b:3e:7d:9e:b6:57:09:1a: c8:b9:16:37:2a:f2:4e:cb:9b:33:3d:88:ea:29:83:f3:f3:9c: b2:22:22:57 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8f7kK1zUrzDi9n+y2FJmAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzYjg0MjI1NGJiZDZiZjMzZTA5ZDA1YTQ1OGYwMGEwNDg0 Y2YxNmYwHhcNMjUxMjIwMTYwMjQxWhcNMjUxMjIxMTYwMjQxWjAzMTEwLwYDVQQD EygyODllYzVjODViZTI0OTY3NjZhM2IyYjMyODY0MDE2NjI5ZmMyZjQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr2lJLosa7z4OyYiZ+0B6Cha8+qr5 t6fBsMm/bcpARQbUoT5RuO0nsFHCcWXTkacKuh+qqrCFHPSCgt86B04UgeT1aEwH ipwAZ/xexQim4Ca8Z04Sxt38uV4OeRzUOBGaWMCIPGlSaqDr2JLhqatemlES+w2F cAsdZeWIJwWZqypTsN2eGklbBPylGIsa3i43URYL5Ge/AP3yMICPrN2+JUsDIWXK BYsBeOen1QSe9/rwscPvnVEoLFlWU3j+ycVmk7tHRI0zOUlqnyFw5DW/TpaEdAs/ ZlsmzzBZ4Y4nch1kN9BmgwLhOQb5Q+AfRmYSeu6lFJ9PKLubXNYQGBgFcwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCiexchb4klnZqOysyhkAWYp/C9FMB8GA1UdIwQY MBaAFGO4QiVLvWvzPgnQWkWPAKBITPFvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWTdoQ0pVdTlhX00tQ2RCYVJZOEFvRWhNOFc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9iZGQxZTctYjc5YS00YzIxLTliYTkt ZjE1N2MzMjk0ZDQwLzEvWTdoQ0pVdTlhX00tQ2RCYVJZOEFvRWhNOFc4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy9iZGQxZTctYjc5YS00YzIxLTliYTktZjE1N2MzMjk0ZDQw LzEvWTdoQ0pVdTlhX00tQ2RCYVJZOEFvRWhNOFc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA2F6Gx+pG DlBeOjOfHsC963PQfgE4azOyF+OnXzdnfzh86BgXlEV5PVXjvZAdJny1YKhnhd+6 KSh4d/qdexywXs1xqnaeSeoGhsfiFkYbDnUj9o9EqPMJ2a+BwiAiCYL2VA5Pfmgd EypBCu4OVp0modewkQJPmvucj1OpzuNfXz5Y3oHx5PFd3X6QZRYYxtSHYBdDAkK8 /yfeP6kq+12H/rPLVUuupYbd2z/Nhk8o3WDIEHj1izM5fngpWddNZaQ+8MLsKM8r D7yt2BrC0KsAD1xq9Q8BCkXjVNfcfvk+jO+Fdgs+fZ62VwkayLkWNyryTsubMz2I 6imD8/OcsiIiVw== -----END CERTIFICATE-----Generated at Sat Dec 20 17:50:25 2025 by rpki-client