This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/5dc1d9-eba4-42c8-b3d6-d1c5f1b51e17/1/Y-5tHR7Mr5eZu9XyttrORtht9Is.mft File: Y-5tHR7Mr5eZu9XyttrORtht9Is.mft (raw, json) Hash identifier: Wi1EsDryqb6xaowrPA4DH8gW0HeZTlddAIwS7ok+nvM= Subject key identifier: 70:16:7D:DA:B0:A5:DE:63:79:52:7C:12:4F:BC:C2:E3:F9:87:40:6D Authority key identifier: 63:EE:6D:1D:1E:CC:AF:97:99:BB:D5:F2:B6:DA:CE:46:D8:6D:F4:8B Certificate issuer: /CN=63ee6d1d1eccaf9799bbd5f2b6dace46d86df48b Certificate serial: 019B2399D57BD7678FCB6E318759C2072CEF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-5tHR7Mr5eZu9XyttrORtht9Is.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/5dc1d9-eba4-42c8-b3d6-d1c5f1b51e17/1/Y-5tHR7Mr5eZu9XyttrORtht9Is.mft Manifest number: 0654 Signing time: Mon 15 Dec 2025 20:00:42 +0000 Manifest this update: Mon 15 Dec 2025 20:00:42 +0000 Manifest next update: Tue 16 Dec 2025 20:00:42 +0000 Files and hashes: 1: GtwJZcMJzJfVot1AbvXcNrWZuUA.roa (hash: ntPN44ZmmFojLPzowglrHCEuS924DT/SbCX/IExl0bg=) 2: Y-5tHR7Mr5eZu9XyttrORtht9Is.crl (hash: jLgn67I0Tr6mb+++jxwSTHiMvT4uGfI+47pj28aILuw=) 3: v9BFv3-TNowegyiv09vLFLV5UTQ.roa (hash: dKR68pnVeUnoZwpMGIMPLXESwr/B50jGdFPF9i1PucA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/5dc1d9-eba4-42c8-b3d6-d1c5f1b51e17/1/Y-5tHR7Mr5eZu9XyttrORtht9Is.crl rsync://rpki.ripe.net/repository/DEFAULT/17/5dc1d9-eba4-42c8-b3d6-d1c5f1b51e17/1/Y-5tHR7Mr5eZu9XyttrORtht9Is.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-5tHR7Mr5eZu9XyttrORtht9Is.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 20:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:23:99:d5:7b:d7:67:8f:cb:6e:31:87:59:c2:07:2c:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63ee6d1d1eccaf9799bbd5f2b6dace46d86df48b Validity Not Before: Dec 15 20:00:42 2025 GMT Not After : Dec 16 20:00:42 2025 GMT Subject: CN=70167ddab0a5de6379527c124fbcc2e3f987406d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:3d:06:0f:8c:64:17:43:6e:c9:4c:de:78:d6: ee:df:d4:18:c0:97:0e:c0:29:40:b6:2b:b1:8a:f2: 9d:5b:d8:eb:07:0f:33:91:18:f5:d0:26:f8:dc:82: 72:87:ee:5d:5a:ec:e8:ef:66:c6:77:ad:63:d1:21: 98:64:27:17:53:57:bb:53:38:03:30:8d:f6:56:47: 4a:bd:c0:49:4e:5f:71:39:e9:ae:da:d4:84:87:13: 38:4b:ca:7c:ba:66:9d:31:f5:df:a8:5a:09:7a:60: bd:0e:81:b7:d3:c0:ea:e9:3a:df:37:fc:81:a7:43: 4e:38:30:2f:23:43:45:bd:78:8f:b0:78:54:a4:15: 20:5f:ae:e3:9d:9b:6f:5b:17:b6:86:21:a3:fb:12: c9:2a:e9:82:e0:6f:33:18:6e:b3:ce:dc:6d:7a:aa: 71:26:dc:0b:2a:8d:0d:18:49:09:b5:37:1b:b6:40: 9c:5f:07:dc:c0:74:b0:38:ff:d1:ba:90:4a:5a:d2: 2f:0e:bc:2e:38:b6:23:cd:ee:cd:b7:7b:d1:04:eb: df:12:17:0a:83:6d:1b:4b:4d:3b:e6:69:89:c6:36: d2:7b:fe:ec:a5:10:67:44:ea:2f:b3:ed:7b:27:24: c4:51:d5:0b:16:8e:6d:b5:f5:96:5e:4e:9c:f0:76: 16:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:16:7D:DA:B0:A5:DE:63:79:52:7C:12:4F:BC:C2:E3:F9:87:40:6D X509v3 Authority Key Identifier: keyid:63:EE:6D:1D:1E:CC:AF:97:99:BB:D5:F2:B6:DA:CE:46:D8:6D:F4:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-5tHR7Mr5eZu9XyttrORtht9Is.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/5dc1d9-eba4-42c8-b3d6-d1c5f1b51e17/1/Y-5tHR7Mr5eZu9XyttrORtht9Is.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/5dc1d9-eba4-42c8-b3d6-d1c5f1b51e17/1/Y-5tHR7Mr5eZu9XyttrORtht9Is.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:76:66:16:c3:ea:00:2f:3c:7f:49:54:e3:b7:5e:91:0f:ea: e7:86:49:21:8c:3f:46:61:2e:5a:55:2d:0e:d4:bd:02:c4:74: 0b:1a:9a:b0:cd:2e:80:65:cf:bc:18:23:dc:8e:46:77:a5:87: 1a:2f:ba:fa:8c:40:6c:74:56:83:a9:ef:32:ab:05:3c:77:41: ef:31:61:c2:c7:a5:1f:af:33:f1:97:33:c4:64:b7:6d:5a:c3: ef:33:2f:8d:b6:e2:5f:01:3c:ed:43:f8:6c:af:b3:35:d3:c4: bc:80:76:01:25:74:68:07:5d:9c:b4:78:0a:a4:27:ca:81:3d: 22:33:48:c1:e5:bc:89:02:e7:73:1d:90:83:e0:9f:6d:05:ba: 9d:25:a5:b2:11:75:af:e0:ff:b0:7f:b2:44:6f:99:be:2e:6d: a1:08:dd:9a:ec:f8:5f:b2:62:1e:94:57:b6:e3:c3:ca:dc:26: 8a:36:ab:d3:5a:9c:44:d4:ae:3e:42:e6:68:fa:ca:c6:2d:d0: 64:ca:11:37:27:ec:46:74:34:65:dd:10:aa:9b:dd:29:ba:d1: 5e:8a:03:fe:e4:c6:33:22:e3:63:73:3c:29:df:0e:5c:ad:00: 2f:e4:1f:3b:96:d0:f2:7c:a1:39:0a:7e:80:cd:c3:d7:a0:0f: 12:1a:96:99 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsjmdV712ePy24xh1nCByzvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZWU2ZDFkMWVjY2FmOTc5OWJiZDVmMmI2ZGFjZTQ2ZDg2 ZGY0OGIwHhcNMjUxMjE1MjAwMDQyWhcNMjUxMjE2MjAwMDQyWjAzMTEwLwYDVQQD Eyg3MDE2N2RkYWIwYTVkZTYzNzk1MjdjMTI0ZmJjYzJlM2Y5ODc0MDZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyD0GD4xkF0NuyUzeeNbu39QYwJcO wClAtiuxivKdW9jrBw8zkRj10Cb43IJyh+5dWuzo72bGd61j0SGYZCcXU1e7UzgD MI32VkdKvcBJTl9xOemu2tSEhxM4S8p8umadMfXfqFoJemC9DoG308Dq6TrfN/yB p0NOODAvI0NFvXiPsHhUpBUgX67jnZtvWxe2hiGj+xLJKumC4G8zGG6zztxteqpx JtwLKo0NGEkJtTcbtkCcXwfcwHSwOP/RupBKWtIvDrwuOLYjze7Nt3vRBOvfEhcK g20bS0075mmJxjbSe/7spRBnROovs+17JyTEUdULFo5ttfWWXk6c8HYWgQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHAWfdqwpd5jeVJ8Ek+8wuP5h0BtMB8GA1UdIwQY MBaAFGPubR0ezK+XmbvV8rbazkbYbfSLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS01dEhSN01yNWVadTlYeXR0ck9SdGh0OUlzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy81ZGMxZDktZWJhNC00MmM4LWIzZDYt ZDFjNWYxYjUxZTE3LzEvWS01dEhSN01yNWVadTlYeXR0ck9SdGh0OUlzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy81ZGMxZDktZWJhNC00MmM4LWIzZDYtZDFjNWYxYjUxZTE3 LzEvWS01dEhSN01yNWVadTlYeXR0ck9SdGh0OUlzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADHZmFsPq AC88f0lU47dekQ/q54ZJIYw/RmEuWlUtDtS9AsR0CxqasM0ugGXPvBgj3I5Gd6WH Gi+6+oxAbHRWg6nvMqsFPHdB7zFhwselH68z8ZczxGS3bVrD7zMvjbbiXwE87UP4 bK+zNdPEvIB2ASV0aAddnLR4CqQnyoE9IjNIweW8iQLncx2Qg+CfbQW6nSWlshF1 r+D/sH+yRG+Zvi5toQjdmuz4X7JiHpRXtuPDytwmijar01qcRNSuPkLmaPrKxi3Q ZMoRNyfsRnQ0Zd0QqpvdKbrRXooD/uTGMyLjY3M8Kd8OXK0AL+QfO5bQ8nyhOQp+ gM3D16APEhqWmQ== -----END CERTIFICATE-----Generated at Tue Dec 16 04:41:24 2025 by rpki-client