This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/fc8cb4-ce84-43e4-aa2a-f391dc117fe9/1/Y7UHKgcBIh4dKR8C3rjNUWnmrDI.mft File: Y7UHKgcBIh4dKR8C3rjNUWnmrDI.mft (raw, json) Hash identifier: k82/jqq//sazypchwEUyciH0HfPRorok+Y2RV8cjQxE= Subject key identifier: D9:CE:CD:E1:B6:9A:5A:DD:79:3A:E4:29:3A:8C:AD:8B:58:79:1E:23 Authority key identifier: 63:B5:07:2A:07:01:22:1E:1D:29:1F:02:DE:B8:CD:51:69:E6:AC:32 Certificate issuer: /CN=63b5072a0701221e1d291f02deb8cd5169e6ac32 Certificate serial: 019B32D6980F9F717418E66981DE2BC5953C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y7UHKgcBIh4dKR8C3rjNUWnmrDI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/fc8cb4-ce84-43e4-aa2a-f391dc117fe9/1/Y7UHKgcBIh4dKR8C3rjNUWnmrDI.mft Manifest number: 074C Signing time: Thu 18 Dec 2025 19:01:22 +0000 Manifest this update: Thu 18 Dec 2025 19:01:22 +0000 Manifest next update: Fri 19 Dec 2025 19:01:22 +0000 Files and hashes: 1: Y7UHKgcBIh4dKR8C3rjNUWnmrDI.crl (hash: IX2izmkRsMiJoF9s/IgWbJOeYyQS3nqUOhc6nA4J7WQ=) 2: YUQVyrq4PHervTbSyhk_DAk9Eqc.roa (hash: awqm1ZtQIXxZlbailLUEsiOtmvaS6joj09FbNkED+tQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/fc8cb4-ce84-43e4-aa2a-f391dc117fe9/1/Y7UHKgcBIh4dKR8C3rjNUWnmrDI.crl rsync://rpki.ripe.net/repository/DEFAULT/13/fc8cb4-ce84-43e4-aa2a-f391dc117fe9/1/Y7UHKgcBIh4dKR8C3rjNUWnmrDI.mft rsync://rpki.ripe.net/repository/DEFAULT/Y7UHKgcBIh4dKR8C3rjNUWnmrDI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 19:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:d6:98:0f:9f:71:74:18:e6:69:81:de:2b:c5:95:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63b5072a0701221e1d291f02deb8cd5169e6ac32 Validity Not Before: Dec 18 19:01:22 2025 GMT Not After : Dec 19 19:01:22 2025 GMT Subject: CN=d9cecde1b69a5add793ae4293a8cad8b58791e23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:87:9c:7f:e0:41:bb:da:75:66:b9:4b:d1:06: d4:bb:4f:e1:e9:59:e5:e0:eb:5e:b8:ca:3e:54:35: 41:c2:9a:e5:ee:33:64:77:8d:fe:bc:19:d7:6d:d2: 2b:74:e3:50:b2:0c:38:53:05:83:fa:a1:1c:90:68: fd:2f:0d:58:1a:e5:4c:5b:e6:c0:5c:13:45:90:86: 87:24:3d:34:05:d9:43:f0:6d:79:93:14:de:ce:a9: e2:90:d1:95:71:d0:ac:48:db:11:b3:5d:da:01:84: 91:3b:28:0f:f7:5e:21:a4:3d:32:52:48:c7:74:78: 40:52:2d:cc:d0:a5:62:10:cb:ac:d2:7a:4d:13:47: 90:59:d9:34:e4:22:f5:48:fa:ea:de:2b:21:be:1d: de:c6:37:1f:a9:f2:b9:af:9d:f6:19:86:46:35:5a: 88:4f:76:f9:91:0e:59:16:50:38:d9:3a:98:fc:06: 52:ed:ee:9e:00:99:57:54:1a:f9:ee:14:a1:a0:ca: ca:55:8d:8f:5a:23:c7:ba:7e:6d:b8:d2:aa:82:d8: 33:50:84:e8:4a:e4:57:1c:d9:6e:68:10:74:21:94: 4c:7b:dd:31:6b:ae:3d:0d:35:89:86:5e:30:83:8b: 29:68:67:c5:21:04:ad:95:53:f6:b8:58:ed:d6:78: dd:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:CE:CD:E1:B6:9A:5A:DD:79:3A:E4:29:3A:8C:AD:8B:58:79:1E:23 X509v3 Authority Key Identifier: keyid:63:B5:07:2A:07:01:22:1E:1D:29:1F:02:DE:B8:CD:51:69:E6:AC:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y7UHKgcBIh4dKR8C3rjNUWnmrDI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/fc8cb4-ce84-43e4-aa2a-f391dc117fe9/1/Y7UHKgcBIh4dKR8C3rjNUWnmrDI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/fc8cb4-ce84-43e4-aa2a-f391dc117fe9/1/Y7UHKgcBIh4dKR8C3rjNUWnmrDI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:d8:0e:e8:b3:be:49:ba:5b:7e:d3:f1:c5:83:11:80:b3:dd: 8b:bb:be:f0:f5:fb:2a:44:f0:79:81:eb:34:69:86:1a:ed:e7: 1d:da:27:14:eb:33:58:c8:4b:9f:64:18:45:65:f5:a7:91:90: 78:2e:11:f2:4e:7e:3e:b2:d3:ae:fc:e2:01:4b:10:41:9b:26: bc:e9:45:05:57:86:ff:98:ea:a4:2d:c4:c1:07:77:21:74:7f: 69:31:45:8a:9c:11:8c:5d:18:0a:45:75:0d:a5:44:14:f1:fd: 41:3b:9b:63:1f:b2:dd:1a:4e:82:84:fd:7f:24:ce:8d:b6:3b: 19:3b:55:f2:78:5f:b0:18:c2:59:1a:61:38:7e:fa:b7:67:41: 33:aa:ff:c0:26:48:e5:f5:d3:59:ae:f5:e6:f6:f0:d4:86:24: 2d:20:51:1d:c4:8e:48:06:e3:d1:7f:db:4e:80:22:fc:41:83: b8:58:42:c2:85:6b:90:f9:4c:6a:8a:e2:d0:96:90:0d:46:99: b3:69:ba:76:4d:51:da:b8:65:2a:17:a5:a7:3a:e6:09:79:58: 15:1e:86:94:c4:af:a6:00:5e:6d:3e:ac:9d:eb:38:ae:75:6f: 78:d5:bf:a5:d5:6f:d4:ec:90:3c:df:b6:45:8b:e3:1f:98:f3: 1c:9f:a8:6c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsy1pgPn3F0GOZpgd4rxZU8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzYjUwNzJhMDcwMTIyMWUxZDI5MWYwMmRlYjhjZDUxNjll NmFjMzIwHhcNMjUxMjE4MTkwMTIyWhcNMjUxMjE5MTkwMTIyWjAzMTEwLwYDVQQD EyhkOWNlY2RlMWI2OWE1YWRkNzkzYWU0MjkzYThjYWQ4YjU4NzkxZTIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqYecf+BBu9p1ZrlL0QbUu0/h6Vnl 4OteuMo+VDVBwprl7jNkd43+vBnXbdIrdONQsgw4UwWD+qEckGj9Lw1YGuVMW+bA XBNFkIaHJD00BdlD8G15kxTezqnikNGVcdCsSNsRs13aAYSROygP914hpD0yUkjH dHhAUi3M0KViEMus0npNE0eQWdk05CL1SPrq3ishvh3exjcfqfK5r532GYZGNVqI T3b5kQ5ZFlA42TqY/AZS7e6eAJlXVBr57hShoMrKVY2PWiPHun5tuNKqgtgzUITo SuRXHNluaBB0IZRMe90xa649DTWJhl4wg4spaGfFIQStlVP2uFjt1njdlwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNnOzeG2mlrdeTrkKTqMrYtYeR4jMB8GA1UdIwQY MBaAFGO1ByoHASIeHSkfAt64zVFp5qwyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWTdVSEtnY0JJaDRkS1I4QzNyak5VV25tckRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9mYzhjYjQtY2U4NC00M2U0LWFhMmEt ZjM5MWRjMTE3ZmU5LzEvWTdVSEtnY0JJaDRkS1I4QzNyak5VV25tckRJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy9mYzhjYjQtY2U4NC00M2U0LWFhMmEtZjM5MWRjMTE3ZmU5 LzEvWTdVSEtnY0JJaDRkS1I4QzNyak5VV25tckRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjNgO6LO+ SbpbftPxxYMRgLPdi7u+8PX7KkTweYHrNGmGGu3nHdonFOszWMhLn2QYRWX1p5GQ eC4R8k5+PrLTrvziAUsQQZsmvOlFBVeG/5jqpC3EwQd3IXR/aTFFipwRjF0YCkV1 DaVEFPH9QTubYx+y3RpOgoT9fyTOjbY7GTtV8nhfsBjCWRphOH76t2dBM6r/wCZI 5fXTWa715vbw1IYkLSBRHcSOSAbj0X/bToAi/EGDuFhCwoVrkPlMaori0JaQDUaZ s2m6dk1R2rhlKhelpzrmCXlYFR6GlMSvpgBebT6snes4rnVveNW/pdVv1OyQPN+2 RYvjH5jzHJ+obA== -----END CERTIFICATE-----Generated at Fri Dec 19 03:09:47 2025 by rpki-client