This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/5ab512-9606-42dc-9eb5-0c8368db9563/1/Y-9r28Qq0G3v2tcmeUFDRtjQSN8.mft File: Y-9r28Qq0G3v2tcmeUFDRtjQSN8.mft (raw, json) Hash identifier: XR+/ZCvNfqQQgvV9WDsy7tTir7n0NPvbNHNymJpCShI= Subject key identifier: A3:07:C4:09:8E:EF:B1:FB:2B:CE:7B:42:1F:DF:6F:7E:12:9B:0F:68 Authority key identifier: 63:EF:6B:DB:C4:2A:D0:6D:EF:DA:D7:26:79:41:43:46:D8:D0:48:DF Certificate issuer: /CN=63ef6bdbc42ad06defdad72679414346d8d048df Certificate serial: 019B32D73603681040D2417A7653709A31A7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-9r28Qq0G3v2tcmeUFDRtjQSN8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/5ab512-9606-42dc-9eb5-0c8368db9563/1/Y-9r28Qq0G3v2tcmeUFDRtjQSN8.mft Manifest number: 177E Signing time: Thu 18 Dec 2025 19:02:03 +0000 Manifest this update: Thu 18 Dec 2025 19:02:03 +0000 Manifest next update: Fri 19 Dec 2025 19:02:03 +0000 Files and hashes: 1: Y-9r28Qq0G3v2tcmeUFDRtjQSN8.crl (hash: W4KcK1ro4EapNBFSUPLx2h9qHmiB9sSUXoSBwnmy2l8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/5ab512-9606-42dc-9eb5-0c8368db9563/1/Y-9r28Qq0G3v2tcmeUFDRtjQSN8.crl rsync://rpki.ripe.net/repository/DEFAULT/2b/5ab512-9606-42dc-9eb5-0c8368db9563/1/Y-9r28Qq0G3v2tcmeUFDRtjQSN8.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-9r28Qq0G3v2tcmeUFDRtjQSN8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 19:02:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:d7:36:03:68:10:40:d2:41:7a:76:53:70:9a:31:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63ef6bdbc42ad06defdad72679414346d8d048df Validity Not Before: Dec 18 19:02:03 2025 GMT Not After : Dec 19 19:02:03 2025 GMT Subject: CN=a307c4098eefb1fb2bce7b421fdf6f7e129b0f68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:7a:26:2c:96:f0:c8:0c:8a:03:5d:d7:98:6a: a9:ef:8b:74:79:8b:8c:df:5b:c2:62:1f:28:c5:9c: 07:90:98:c0:9e:75:e7:d4:1a:56:8b:9f:a2:92:2f: 60:f5:44:70:2c:27:72:b9:ea:0f:d7:86:9f:71:28: c7:97:6f:28:aa:a5:d4:f1:4d:1d:f5:69:73:f9:57: ac:b1:33:df:2d:68:b7:9c:ff:41:8c:27:88:1d:9b: 6d:ad:e1:86:ce:ae:2e:20:4d:bc:1f:19:c1:34:4f: f7:4c:41:ab:6a:b8:a0:e8:44:ae:a6:b3:95:bf:02: 83:b8:9b:4b:22:ef:7c:ff:4c:b4:1d:aa:52:50:52: 1b:a2:eb:7d:4b:23:22:01:a5:f4:04:a4:f7:e1:1c: bd:fb:27:18:75:7b:81:e8:6f:37:c6:5c:64:a2:27: 6b:c9:f7:7f:8d:23:16:4e:00:78:9a:09:79:dc:98: 0f:75:eb:ce:9b:a3:77:78:35:b9:23:7b:a7:42:dc: af:e4:95:7c:55:36:36:b3:54:d5:1c:d9:98:09:38: 37:0d:4d:1a:33:e9:98:bd:2c:0a:54:df:4d:ca:d8: 27:f6:b4:47:32:99:af:52:ee:f8:59:a3:8b:55:cb: 22:39:ce:b0:67:14:58:85:0a:9d:3e:2d:03:4e:9d: ca:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:07:C4:09:8E:EF:B1:FB:2B:CE:7B:42:1F:DF:6F:7E:12:9B:0F:68 X509v3 Authority Key Identifier: keyid:63:EF:6B:DB:C4:2A:D0:6D:EF:DA:D7:26:79:41:43:46:D8:D0:48:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-9r28Qq0G3v2tcmeUFDRtjQSN8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/5ab512-9606-42dc-9eb5-0c8368db9563/1/Y-9r28Qq0G3v2tcmeUFDRtjQSN8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/5ab512-9606-42dc-9eb5-0c8368db9563/1/Y-9r28Qq0G3v2tcmeUFDRtjQSN8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:af:19:7e:48:d3:09:d8:17:bc:41:99:fb:eb:00:25:95:34: a1:68:6f:24:a2:b4:14:87:01:0a:cf:13:17:84:c0:7e:c1:79: 77:eb:5e:f7:88:f3:2c:51:c6:c1:9f:7e:3c:03:a9:2b:b6:0f: c8:68:dd:04:bf:87:25:d7:9d:75:ce:f8:66:42:d3:73:1e:8e: 5f:74:63:7b:8f:73:6e:8a:5d:94:f6:2a:a6:08:9c:be:5f:a3: 90:99:b6:4e:31:d9:33:1f:f4:d8:fb:70:36:c0:7f:9d:b9:7e: 1b:20:c3:09:a2:ef:f9:23:e5:0b:59:07:26:6d:66:fc:ae:cb: df:fb:2b:7d:cc:72:6c:ce:42:37:b2:8e:9a:8a:99:12:92:ea: 36:09:1a:ce:18:a2:91:8c:7b:ff:ef:e5:ee:67:46:ae:1d:96: 00:bf:61:ba:87:c5:62:1a:3a:1c:42:78:7d:16:57:76:d2:7d: 8f:d1:3d:0f:5a:a0:df:2a:0b:2e:0f:9f:1a:03:24:b3:52:e5: 64:82:63:90:e6:d7:f9:86:8b:d3:ae:39:99:a7:37:b4:20:65: 21:38:9a:60:69:82:6c:01:a5:6d:fa:f3:26:86:2e:ce:44:21: 9a:14:25:02:eb:73:bb:66:c5:a7:35:52:c7:3c:af:66:ec:8c: 92:19:00:44 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsy1zYDaBBA0kF6dlNwmjGnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZWY2YmRiYzQyYWQwNmRlZmRhZDcyNjc5NDE0MzQ2ZDhk MDQ4ZGYwHhcNMjUxMjE4MTkwMjAzWhcNMjUxMjE5MTkwMjAzWjAzMTEwLwYDVQQD EyhhMzA3YzQwOThlZWZiMWZiMmJjZTdiNDIxZmRmNmY3ZTEyOWIwZjY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwHomLJbwyAyKA13XmGqp74t0eYuM 31vCYh8oxZwHkJjAnnXn1BpWi5+iki9g9URwLCdyueoP14afcSjHl28oqqXU8U0d 9Wlz+VessTPfLWi3nP9BjCeIHZttreGGzq4uIE28HxnBNE/3TEGrarig6ESuprOV vwKDuJtLIu98/0y0HapSUFIbout9SyMiAaX0BKT34Ry9+ycYdXuB6G83xlxkoidr yfd/jSMWTgB4mgl53JgPdevOm6N3eDW5I3unQtyv5JV8VTY2s1TVHNmYCTg3DU0a M+mYvSwKVN9Nytgn9rRHMpmvUu74WaOLVcsiOc6wZxRYhQqdPi0DTp3KMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKMHxAmO77H7K857Qh/fb34Smw9oMB8GA1UdIwQY MBaAFGPva9vEKtBt79rXJnlBQ0bY0EjfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS05cjI4UXEwRzN2MnRjbWVVRkRSdGpRU044LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi81YWI1MTItOTYwNi00MmRjLTllYjUt MGM4MzY4ZGI5NTYzLzEvWS05cjI4UXEwRzN2MnRjbWVVRkRSdGpRU044Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYi81YWI1MTItOTYwNi00MmRjLTllYjUtMGM4MzY4ZGI5NTYz LzEvWS05cjI4UXEwRzN2MnRjbWVVRkRSdGpRU044LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcq8ZfkjT CdgXvEGZ++sAJZU0oWhvJKK0FIcBCs8TF4TAfsF5d+te94jzLFHGwZ9+PAOpK7YP yGjdBL+HJdeddc74ZkLTcx6OX3Rje49zbopdlPYqpgicvl+jkJm2TjHZMx/02Ptw NsB/nbl+GyDDCaLv+SPlC1kHJm1m/K7L3/srfcxybM5CN7KOmoqZEpLqNgkazhii kYx7/+/l7mdGrh2WAL9huofFYho6HEJ4fRZXdtJ9j9E9D1qg3yoLLg+fGgMks1Ll ZIJjkObX+YaL0645mac3tCBlITiaYGmCbAGlbfrzJoYuzkQhmhQlAutzu2bFpzVS xzyvZuyMkhkARA== -----END CERTIFICATE-----Generated at Fri Dec 19 01:26:00 2025 by rpki-client