This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/edea6e-66cc-4fb1-a454-fe837f98e026/1/Y0RCEOoIrFKYeNUZF-OzAFTWINE.mft File: Y0RCEOoIrFKYeNUZF-OzAFTWINE.mft (raw, json) Hash identifier: S1ScWxOSyPgtlTDLFDaLPpwtSDvcIVNsFCsmxqkQX44= Subject key identifier: 8B:19:15:B4:1D:12:CF:47:23:29:21:E2:BA:CA:B9:5F:A3:E8:A9:28 Authority key identifier: 63:44:42:10:EA:08:AC:52:98:78:D5:19:17:E3:B3:00:54:D6:20:D1 Certificate issuer: /CN=63444210ea08ac529878d51917e3b30054d620d1 Certificate serial: 019B35D749714E12AD4BED4AB0365A07FA44 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y0RCEOoIrFKYeNUZF-OzAFTWINE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/edea6e-66cc-4fb1-a454-fe837f98e026/1/Y0RCEOoIrFKYeNUZF-OzAFTWINE.mft Manifest number: 0A17 Signing time: Fri 19 Dec 2025 09:00:59 +0000 Manifest this update: Fri 19 Dec 2025 09:00:59 +0000 Manifest next update: Sat 20 Dec 2025 09:00:59 +0000 Files and hashes: 1: Y0RCEOoIrFKYeNUZF-OzAFTWINE.crl (hash: ak3mzlFOriKY3QHGQnE9YkwKSjos/eJdiwpapMpctBg=) 2: lvyZzZ0oMePyMWlwy0XrO4z88uM.roa (hash: r4CIZVZVu9rJJBGcwlDp7IO/A6q0RdzdbEDYw+nKWDQ=) 3: mS1r3nEBgAI3lLhm6noZgqn_cmA.roa (hash: JYzwmK7XTX/XFKUpzmhiGKHT8MDSKJlug0ZfpJhUdKA=) 4: s0n0nYu0NFOR7dPUCU7pEE3i9us.roa (hash: ljcKz24WN/R72QGD8KYnZ5Vd3hVV7DCVfn4eDdOXbTY=) 5: zxiStXGp24ax3PMaP2c669J9olI.roa (hash: Eoknss9yO3HZnM5fYU8DdmO/fqGjXaMOZMcIug7gXEU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/edea6e-66cc-4fb1-a454-fe837f98e026/1/Y0RCEOoIrFKYeNUZF-OzAFTWINE.crl rsync://rpki.ripe.net/repository/DEFAULT/25/edea6e-66cc-4fb1-a454-fe837f98e026/1/Y0RCEOoIrFKYeNUZF-OzAFTWINE.mft rsync://rpki.ripe.net/repository/DEFAULT/Y0RCEOoIrFKYeNUZF-OzAFTWINE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:d7:49:71:4e:12:ad:4b:ed:4a:b0:36:5a:07:fa:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63444210ea08ac529878d51917e3b30054d620d1 Validity Not Before: Dec 19 09:00:59 2025 GMT Not After : Dec 20 09:00:59 2025 GMT Subject: CN=8b1915b41d12cf47232921e2bacab95fa3e8a928 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:c2:14:04:7c:9e:36:69:ec:b8:41:00:85:c6: 08:6e:3e:e8:c2:74:17:1f:bc:38:f3:e1:ce:eb:a1: 0c:a6:ed:6a:69:bb:3b:3c:05:91:4c:c9:43:1f:7c: e3:bc:23:57:2a:f4:85:b3:7c:3f:29:9a:8e:cd:e2: 36:8e:11:24:c0:81:69:8a:2f:b5:dd:53:49:90:5e: 5d:db:3f:6d:e2:c8:b7:6a:ed:c5:63:97:69:78:4a: a1:03:cb:19:43:3f:46:b0:04:66:30:17:bc:9e:58: 8a:27:13:09:7f:87:47:af:db:9a:f0:50:2d:9a:5f: 1a:79:31:86:52:7c:68:c2:d5:e6:1d:77:c6:ea:4a: 87:3c:a7:8c:66:5b:0d:4c:99:d9:15:d3:db:98:d8: 1d:e9:3c:87:0f:8b:76:26:99:8e:e5:20:54:62:02: de:c6:c8:9b:a0:d4:44:3c:0f:e9:b6:b4:26:92:ec: cc:41:f2:87:ea:b0:86:77:cf:00:df:a7:31:7b:11: 2c:bd:2e:3e:df:17:8e:40:8e:70:b4:80:9b:ae:f8: 58:00:c5:b3:55:0f:4f:6a:f4:f2:5c:43:72:cb:d0: 78:22:8d:c4:d7:e5:58:58:9f:d2:95:b7:4f:59:1f: cb:22:68:2f:d9:67:20:b1:79:e4:09:24:c6:1c:eb: 92:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:19:15:B4:1D:12:CF:47:23:29:21:E2:BA:CA:B9:5F:A3:E8:A9:28 X509v3 Authority Key Identifier: keyid:63:44:42:10:EA:08:AC:52:98:78:D5:19:17:E3:B3:00:54:D6:20:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y0RCEOoIrFKYeNUZF-OzAFTWINE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/edea6e-66cc-4fb1-a454-fe837f98e026/1/Y0RCEOoIrFKYeNUZF-OzAFTWINE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/edea6e-66cc-4fb1-a454-fe837f98e026/1/Y0RCEOoIrFKYeNUZF-OzAFTWINE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:a5:52:52:f9:6f:d6:de:0d:a3:c5:3f:e8:74:84:a3:8b:a1: e3:48:fd:04:e3:d5:cc:f7:ed:64:d5:d6:20:95:a5:72:92:3c: ee:d4:16:c9:3b:53:b9:39:ee:c8:b6:e3:f7:a5:2e:32:dd:09: 54:45:c3:37:26:dc:94:e2:d8:93:72:a3:27:cc:04:73:f9:6f: ea:0d:0f:da:ca:57:22:a3:87:54:ce:83:71:fc:ee:db:5f:55: b3:f3:a0:2f:b5:26:55:d2:26:6b:fe:fe:d7:14:42:7b:70:78: 4f:cb:d5:0f:c3:fe:2f:0d:03:1f:c0:86:2f:a8:3c:4c:9a:91: 27:b7:76:05:e5:b4:e2:f8:9f:53:02:c6:52:5e:bd:50:e0:06: e9:14:91:50:91:da:c3:bf:95:5e:7c:6a:a8:48:b9:a2:51:44: ba:ab:18:d8:1c:2f:0e:81:0e:b9:aa:85:ea:42:8c:a8:5c:67: 03:0f:d8:3e:1b:1b:07:ad:3b:b4:9b:9b:0a:6d:0f:b1:12:85: 47:c7:f0:84:4b:cf:71:3b:75:8b:b9:a1:dd:69:ea:aa:eb:f0: fb:41:f4:d8:d3:95:a0:44:eb:96:ac:b2:80:80:12:eb:ea:6e: e9:1d:7d:e3:01:b2:9f:8a:7d:a5:e6:ee:e3:d2:3e:a4:6d:6b: 60:f7:39:17 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs110lxThKtS+1KsDZaB/pEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzNDQ0MjEwZWEwOGFjNTI5ODc4ZDUxOTE3ZTNiMzAwNTRk NjIwZDEwHhcNMjUxMjE5MDkwMDU5WhcNMjUxMjIwMDkwMDU5WjAzMTEwLwYDVQQD Eyg4YjE5MTViNDFkMTJjZjQ3MjMyOTIxZTJiYWNhYjk1ZmEzZThhOTI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApsIUBHyeNmnsuEEAhcYIbj7ownQX H7w48+HO66EMpu1qabs7PAWRTMlDH3zjvCNXKvSFs3w/KZqOzeI2jhEkwIFpii+1 3VNJkF5d2z9t4si3au3FY5dpeEqhA8sZQz9GsARmMBe8nliKJxMJf4dHr9ua8FAt ml8aeTGGUnxowtXmHXfG6kqHPKeMZlsNTJnZFdPbmNgd6TyHD4t2JpmO5SBUYgLe xsiboNREPA/ptrQmkuzMQfKH6rCGd88A36cxexEsvS4+3xeOQI5wtICbrvhYAMWz VQ9PavTyXENyy9B4Io3E1+VYWJ/SlbdPWR/LImgv2WcgsXnkCSTGHOuSawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIsZFbQdEs9HIykh4rrKuV+j6KkoMB8GA1UdIwQY MBaAFGNEQhDqCKxSmHjVGRfjswBU1iDRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWTBSQ0VPb0lyRktZZU5VWkYtT3pBRlRXSU5FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS9lZGVhNmUtNjZjYy00ZmIxLWE0NTQt ZmU4MzdmOThlMDI2LzEvWTBSQ0VPb0lyRktZZU5VWkYtT3pBRlRXSU5FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS9lZGVhNmUtNjZjYy00ZmIxLWE0NTQtZmU4MzdmOThlMDI2 LzEvWTBSQ0VPb0lyRktZZU5VWkYtT3pBRlRXSU5FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFaVSUvlv 1t4No8U/6HSEo4uh40j9BOPVzPftZNXWIJWlcpI87tQWyTtTuTnuyLbj96UuMt0J VEXDNybclOLYk3KjJ8wEc/lv6g0P2spXIqOHVM6Dcfzu219Vs/OgL7UmVdIma/7+ 1xRCe3B4T8vVD8P+Lw0DH8CGL6g8TJqRJ7d2BeW04vifUwLGUl69UOAG6RSRUJHa w7+VXnxqqEi5olFEuqsY2BwvDoEOuaqF6kKMqFxnAw/YPhsbB607tJubCm0PsRKF R8fwhEvPcTt1i7mh3Wnqquvw+0H02NOVoETrlqyygIAS6+pu6R194wGyn4p9pebu 49I+pG1rYPc5Fw== -----END CERTIFICATE-----Generated at Fri Dec 19 14:49:31 2025 by rpki-client