This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/ff6b18-7ddf-46f5-a0d5-06d4475b7fe5/1/Y4UAVfJ-xAdWKX_811nrhh7vc8E.mft File: Y4UAVfJ-xAdWKX_811nrhh7vc8E.mft (raw, json) Hash identifier: gn/Kd+wemtb3cu5259JPSnii5Py7ate9qeOsIGgYTdc= Subject key identifier: B0:1F:54:1C:A2:1E:28:E7:30:08:8D:90:A1:64:CC:4B:B7:28:75:ED Authority key identifier: 63:85:00:55:F2:7E:C4:07:56:29:7F:FC:D7:59:EB:86:1E:EF:73:C1 Certificate issuer: /CN=63850055f27ec40756297ffcd759eb861eef73c1 Certificate serial: 019B2B1C993E66E01242A8758AD307F718FA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y4UAVfJ-xAdWKX_811nrhh7vc8E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/ff6b18-7ddf-46f5-a0d5-06d4475b7fe5/1/Y4UAVfJ-xAdWKX_811nrhh7vc8E.mft Manifest number: 0233 Signing time: Wed 17 Dec 2025 07:00:53 +0000 Manifest this update: Wed 17 Dec 2025 07:00:53 +0000 Manifest next update: Thu 18 Dec 2025 07:00:53 +0000 Files and hashes: 1: Y4UAVfJ-xAdWKX_811nrhh7vc8E.crl (hash: 1o4vL080zn4jwOP+4PdypN/qDW0mbBWSOEBl4kYsFEw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/ff6b18-7ddf-46f5-a0d5-06d4475b7fe5/1/Y4UAVfJ-xAdWKX_811nrhh7vc8E.crl rsync://rpki.ripe.net/repository/DEFAULT/17/ff6b18-7ddf-46f5-a0d5-06d4475b7fe5/1/Y4UAVfJ-xAdWKX_811nrhh7vc8E.mft rsync://rpki.ripe.net/repository/DEFAULT/Y4UAVfJ-xAdWKX_811nrhh7vc8E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 07:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:1c:99:3e:66:e0:12:42:a8:75:8a:d3:07:f7:18:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63850055f27ec40756297ffcd759eb861eef73c1 Validity Not Before: Dec 17 07:00:53 2025 GMT Not After : Dec 18 07:00:53 2025 GMT Subject: CN=b01f541ca21e28e730088d90a164cc4bb72875ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:70:1d:d3:6c:53:d9:78:af:ed:dc:78:dd:1f: f2:f9:3f:64:bf:58:77:e7:c8:46:92:3d:61:8c:ed: 41:01:8b:f2:9e:d6:34:1e:06:91:b7:0c:f1:a1:ef: 1a:0a:ab:e4:b3:97:bf:82:12:f2:95:5b:57:3c:b7: c7:93:d0:02:c8:d9:90:44:d5:39:76:53:f8:a9:80: 7e:aa:11:4d:3a:3f:56:38:68:bb:47:2a:59:82:89: c7:d3:f7:da:f3:a1:48:1b:10:62:11:b4:16:c8:63: 2f:24:7d:28:8d:09:33:46:4a:91:fe:0e:c6:63:1a: 6c:f2:2f:e4:16:83:58:f0:93:fa:47:17:7a:56:80: d1:a4:82:18:e1:60:ff:1d:96:af:8b:57:7c:cf:04: 8e:56:d0:7f:d4:29:a6:b2:27:46:aa:46:56:40:22: 49:64:d9:d0:12:34:e8:1c:b0:56:1f:1c:3e:57:0f: 8d:4f:d7:73:b9:fd:88:bd:4e:6f:41:3c:e0:e7:94: 09:e5:df:c3:24:18:78:64:68:fb:a1:18:74:52:34: 26:77:ea:32:09:79:cf:23:80:0b:72:d9:23:80:79: 73:78:06:d4:2a:dd:a8:1a:da:35:8e:36:61:1c:c7: a5:f3:f5:89:9e:d6:d5:e6:ea:f2:fd:11:cf:6b:5e: c2:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:1F:54:1C:A2:1E:28:E7:30:08:8D:90:A1:64:CC:4B:B7:28:75:ED X509v3 Authority Key Identifier: keyid:63:85:00:55:F2:7E:C4:07:56:29:7F:FC:D7:59:EB:86:1E:EF:73:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y4UAVfJ-xAdWKX_811nrhh7vc8E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/ff6b18-7ddf-46f5-a0d5-06d4475b7fe5/1/Y4UAVfJ-xAdWKX_811nrhh7vc8E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/ff6b18-7ddf-46f5-a0d5-06d4475b7fe5/1/Y4UAVfJ-xAdWKX_811nrhh7vc8E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:cb:a5:34:b1:38:17:83:63:e3:97:73:bc:c4:b5:3c:58:fd: 2e:07:47:b7:39:31:87:1b:27:d8:60:dc:43:15:85:5a:3c:92: 49:2f:c7:94:3d:e8:95:c3:1d:ff:29:86:bf:f3:39:08:2d:e7: 84:66:9a:fa:0f:ca:8c:5f:f3:a3:29:c5:c8:8a:54:f3:68:66: 02:12:2e:c7:32:85:d4:6e:15:4c:15:6d:6b:88:03:33:1c:2e: 93:52:b6:3d:38:7c:1c:b3:f8:c6:b2:d6:11:e9:3e:c5:8e:3b: 89:b3:bf:1e:88:6d:fb:a4:70:74:44:87:49:67:23:2a:fb:89: ca:ed:bd:04:fc:81:15:75:f5:a1:0b:d4:ab:a6:44:7d:d1:5b: a4:e8:3e:54:59:a2:6b:63:f5:2e:ae:a9:96:2b:f0:41:6b:b0: 5f:36:c0:40:44:90:84:b8:ec:fa:c3:db:49:c7:64:fa:5b:bb: 51:8b:45:33:b0:b6:10:ed:a4:64:2f:0f:bd:9b:a4:4a:f3:c7: 91:54:82:33:3b:55:4f:87:cf:59:b8:89:c2:15:68:aa:02:97: 41:50:2c:03:f4:33:0f:ea:59:e1:37:0b:cf:b4:24:a4:d4:0b: bb:b4:0b:83:bf:12:ef:2d:b3:42:f8:f8:ac:56:de:14:e9:2c: 7d:83:7b:04 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsrHJk+ZuASQqh1itMH9xj6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzODUwMDU1ZjI3ZWM0MDc1NjI5N2ZmY2Q3NTllYjg2MWVl ZjczYzEwHhcNMjUxMjE3MDcwMDUzWhcNMjUxMjE4MDcwMDUzWjAzMTEwLwYDVQQD EyhiMDFmNTQxY2EyMWUyOGU3MzAwODhkOTBhMTY0Y2M0YmI3Mjg3NWVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzHAd02xT2Xiv7dx43R/y+T9kv1h3 58hGkj1hjO1BAYvyntY0HgaRtwzxoe8aCqvks5e/ghLylVtXPLfHk9ACyNmQRNU5 dlP4qYB+qhFNOj9WOGi7RypZgonH0/fa86FIGxBiEbQWyGMvJH0ojQkzRkqR/g7G Yxps8i/kFoNY8JP6Rxd6VoDRpIIY4WD/HZavi1d8zwSOVtB/1CmmsidGqkZWQCJJ ZNnQEjToHLBWHxw+Vw+NT9dzuf2IvU5vQTzg55QJ5d/DJBh4ZGj7oRh0UjQmd+oy CXnPI4ALctkjgHlzeAbUKt2oGto1jjZhHMel8/WJntbV5ury/RHPa17C8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLAfVByiHijnMAiNkKFkzEu3KHXtMB8GA1UdIwQY MBaAFGOFAFXyfsQHVil//NdZ64Ye73PBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWTRVQVZmSi14QWRXS1hfODExbnJoaDd2YzhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9mZjZiMTgtN2RkZi00NmY1LWEwZDUt MDZkNDQ3NWI3ZmU1LzEvWTRVQVZmSi14QWRXS1hfODExbnJoaDd2YzhFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy9mZjZiMTgtN2RkZi00NmY1LWEwZDUtMDZkNDQ3NWI3ZmU1 LzEvWTRVQVZmSi14QWRXS1hfODExbnJoaDd2YzhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACsulNLE4 F4Nj45dzvMS1PFj9LgdHtzkxhxsn2GDcQxWFWjySSS/HlD3olcMd/ymGv/M5CC3n hGaa+g/KjF/zoynFyIpU82hmAhIuxzKF1G4VTBVta4gDMxwuk1K2PTh8HLP4xrLW Eek+xY47ibO/Hoht+6RwdESHSWcjKvuJyu29BPyBFXX1oQvUq6ZEfdFbpOg+VFmi a2P1Lq6plivwQWuwXzbAQESQhLjs+sPbScdk+lu7UYtFM7C2EO2kZC8PvZukSvPH kVSCMztVT4fPWbiJwhVoqgKXQVAsA/QzD+pZ4TcLz7QkpNQLu7QLg78S7y2zQvj4 rFbeFOksfYN7BA== -----END CERTIFICATE-----Generated at Wed Dec 17 16:48:48 2025 by rpki-client