This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/fc8cb4-ce84-43e4-aa2a-f391dc117fe9/1/Y7UHKgcBIh4dKR8C3rjNUWnmrDI.mft File: Y7UHKgcBIh4dKR8C3rjNUWnmrDI.mft (raw, json) Hash identifier: oV7Rst4Z//Hi0voNmDOYCdRas2SExZy0b8CzbMmz/b0= Subject key identifier: 6B:07:29:1B:7B:09:0C:FC:C2:16:D3:9F:B5:6E:75:C7:B6:48:7F:B5 Authority key identifier: 63:B5:07:2A:07:01:22:1E:1D:29:1F:02:DE:B8:CD:51:69:E6:AC:32 Certificate issuer: /CN=63b5072a0701221e1d291f02deb8cd5169e6ac32 Certificate serial: 019B6CC6FFE196C5474C5B1EC7CE5EB479A3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y7UHKgcBIh4dKR8C3rjNUWnmrDI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/fc8cb4-ce84-43e4-aa2a-f391dc117fe9/1/Y7UHKgcBIh4dKR8C3rjNUWnmrDI.mft Manifest number: 076A Signing time: Tue 30 Dec 2025 01:02:19 +0000 Manifest this update: Tue 30 Dec 2025 01:02:19 +0000 Manifest next update: Wed 31 Dec 2025 01:02:19 +0000 Files and hashes: 1: Y7UHKgcBIh4dKR8C3rjNUWnmrDI.crl (hash: AsKfyK2RGliz9crYLPwLjLx8FtcFNTXtSQB900Ea+W8=) 2: YUQVyrq4PHervTbSyhk_DAk9Eqc.roa (hash: awqm1ZtQIXxZlbailLUEsiOtmvaS6joj09FbNkED+tQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/fc8cb4-ce84-43e4-aa2a-f391dc117fe9/1/Y7UHKgcBIh4dKR8C3rjNUWnmrDI.crl rsync://rpki.ripe.net/repository/DEFAULT/13/fc8cb4-ce84-43e4-aa2a-f391dc117fe9/1/Y7UHKgcBIh4dKR8C3rjNUWnmrDI.mft rsync://rpki.ripe.net/repository/DEFAULT/Y7UHKgcBIh4dKR8C3rjNUWnmrDI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 00:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6c:c6:ff:e1:96:c5:47:4c:5b:1e:c7:ce:5e:b4:79:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63b5072a0701221e1d291f02deb8cd5169e6ac32 Validity Not Before: Dec 30 01:02:19 2025 GMT Not After : Dec 31 01:02:19 2025 GMT Subject: CN=6b07291b7b090cfcc216d39fb56e75c7b6487fb5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:61:92:27:55:a5:72:7b:b1:13:06:1f:e5:d8: f3:b0:ca:7d:59:6e:6a:1a:f5:0d:ed:00:ad:8a:1a: a2:6b:e1:40:fc:85:b0:8d:16:15:e7:82:fa:82:7f: f6:f6:df:2c:5f:d2:26:a0:86:9b:b3:f5:62:01:1f: 6f:23:5a:ec:aa:b0:32:c5:61:19:e6:9f:b2:61:17: b3:55:a8:c7:7d:71:c6:4e:37:5e:79:53:2e:05:d6: aa:30:27:c5:fb:b0:1c:28:f7:ad:70:6b:1b:11:a9: a4:a5:f8:93:e8:62:46:8b:85:ff:e0:44:f9:fe:08: 2e:d4:ff:31:af:1b:8f:2a:10:8a:ed:08:d9:e6:41: f3:59:80:51:2b:f3:16:b6:2d:ae:17:62:66:0b:f0: c5:46:fd:44:10:00:fc:65:6a:dd:74:9c:69:4d:8d: 62:86:7a:7f:e3:03:5e:49:de:c6:22:3e:23:30:e5: 27:a4:6e:bd:f5:fd:0c:2a:68:47:19:2c:13:7e:27: ce:8b:92:ff:e4:24:15:21:a6:4a:a8:64:4e:96:01: f5:88:8c:44:6d:e2:12:bd:f7:af:ac:e9:27:b6:ec: 03:7a:43:12:df:5b:f1:2f:e1:e5:8d:54:d7:e9:de: ac:30:31:e1:29:06:99:a8:2a:29:2d:f0:a4:ed:fa: e2:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:07:29:1B:7B:09:0C:FC:C2:16:D3:9F:B5:6E:75:C7:B6:48:7F:B5 X509v3 Authority Key Identifier: keyid:63:B5:07:2A:07:01:22:1E:1D:29:1F:02:DE:B8:CD:51:69:E6:AC:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y7UHKgcBIh4dKR8C3rjNUWnmrDI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/fc8cb4-ce84-43e4-aa2a-f391dc117fe9/1/Y7UHKgcBIh4dKR8C3rjNUWnmrDI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/fc8cb4-ce84-43e4-aa2a-f391dc117fe9/1/Y7UHKgcBIh4dKR8C3rjNUWnmrDI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:49:c9:28:a3:01:2d:c8:5a:a7:b9:9b:6d:21:ae:6b:9b:39: 30:56:f1:d1:6b:49:ec:16:90:4f:b1:18:ca:77:5f:78:a9:82: dc:e6:8e:ab:b6:5c:87:ac:74:57:73:90:be:0e:50:88:27:83: 87:f6:b2:aa:26:e6:0e:0d:f2:a3:61:c8:fa:3f:93:8b:0c:ef: 03:99:c2:97:9b:3b:eb:a6:0d:90:2a:26:45:11:4d:d7:e7:1d: 48:c4:a5:ce:0d:03:14:6e:76:a1:6d:c0:51:91:d2:73:b1:8a: a2:6a:ea:33:17:62:95:fe:be:81:54:4e:1e:2f:5d:b0:c8:73: 98:43:25:41:b9:9c:2f:29:ac:c6:7a:c3:c1:8c:1b:b7:78:19: a4:9a:4a:2d:39:e3:25:f8:e7:8c:f5:39:df:d1:67:84:76:5e: 8d:31:f0:2f:c9:67:87:3a:11:ea:23:d7:3e:99:a7:cd:df:20: 54:b5:cd:0f:98:16:11:75:6a:be:c5:3d:ee:02:13:45:6e:72: 19:d3:bd:87:be:1c:65:f6:ee:9c:39:0f:a1:5e:9b:9c:ec:59: b5:ca:a9:a1:b9:8c:89:c5:33:29:dd:4e:86:d2:b8:81:04:85: f3:b1:01:a3:1c:2d:bd:71:77:41:90:75:ec:57:8d:dc:33:24: 1d:33:c1:3f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtsxv/hlsVHTFsex85etHmjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzYjUwNzJhMDcwMTIyMWUxZDI5MWYwMmRlYjhjZDUxNjll NmFjMzIwHhcNMjUxMjMwMDEwMjE5WhcNMjUxMjMxMDEwMjE5WjAzMTEwLwYDVQQD Eyg2YjA3MjkxYjdiMDkwY2ZjYzIxNmQzOWZiNTZlNzVjN2I2NDg3ZmI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1WGSJ1WlcnuxEwYf5djzsMp9WW5q GvUN7QCtihqia+FA/IWwjRYV54L6gn/29t8sX9ImoIabs/ViAR9vI1rsqrAyxWEZ 5p+yYRezVajHfXHGTjdeeVMuBdaqMCfF+7AcKPetcGsbEamkpfiT6GJGi4X/4ET5 /ggu1P8xrxuPKhCK7QjZ5kHzWYBRK/MWti2uF2JmC/DFRv1EEAD8ZWrddJxpTY1i hnp/4wNeSd7GIj4jMOUnpG699f0MKmhHGSwTfifOi5L/5CQVIaZKqGROlgH1iIxE beISvfevrOkntuwDekMS31vxL+HljVTX6d6sMDHhKQaZqCopLfCk7friEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGsHKRt7CQz8whbTn7Vudce2SH+1MB8GA1UdIwQY MBaAFGO1ByoHASIeHSkfAt64zVFp5qwyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWTdVSEtnY0JJaDRkS1I4QzNyak5VV25tckRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9mYzhjYjQtY2U4NC00M2U0LWFhMmEt ZjM5MWRjMTE3ZmU5LzEvWTdVSEtnY0JJaDRkS1I4QzNyak5VV25tckRJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy9mYzhjYjQtY2U4NC00M2U0LWFhMmEtZjM5MWRjMTE3ZmU5 LzEvWTdVSEtnY0JJaDRkS1I4QzNyak5VV25tckRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoEnJKKMB Lchap7mbbSGua5s5MFbx0WtJ7BaQT7EYyndfeKmC3OaOq7Zch6x0V3OQvg5QiCeD h/ayqibmDg3yo2HI+j+TiwzvA5nCl5s766YNkComRRFN1+cdSMSlzg0DFG52oW3A UZHSc7GKomrqMxdilf6+gVROHi9dsMhzmEMlQbmcLymsxnrDwYwbt3gZpJpKLTnj JfjnjPU539FnhHZejTHwL8lnhzoR6iPXPpmnzd8gVLXND5gWEXVqvsU97gITRW5y GdO9h74cZfbunDkPoV6bnOxZtcqpobmMicUzKd1OhtK4gQSF87EBoxwtvXF3QZB1 7FeN3DMkHTPBPw== -----END CERTIFICATE-----Generated at Tue Dec 30 09:06:55 2025 by rpki-client