This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/3ed8dd-d36e-440c-8142-d80c6b85cda4/1/Y9nR2VwetxbugZUEWnfLohgdeew.mft File: Y9nR2VwetxbugZUEWnfLohgdeew.mft (raw, json) Hash identifier: W71GJo8Hf2X+qTEdf/hVkZ0YU+UHoLcW1Bpvp/tnw/E= Subject key identifier: B5:90:04:F2:7C:7E:0C:4E:92:60:94:65:25:F1:77:4D:77:C6:CF:E0 Authority key identifier: 63:D9:D1:D9:5C:1E:B7:16:EE:81:95:04:5A:77:CB:A2:18:1D:79:EC Certificate issuer: /CN=63d9d1d95c1eb716ee8195045a77cba2181d79ec Certificate serial: 019B397D09EB404406D9BFCCE5DAB9E51B3E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y9nR2VwetxbugZUEWnfLohgdeew.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/3ed8dd-d36e-440c-8142-d80c6b85cda4/1/Y9nR2VwetxbugZUEWnfLohgdeew.mft Manifest number: 1798 Signing time: Sat 20 Dec 2025 02:00:54 +0000 Manifest this update: Sat 20 Dec 2025 02:00:54 +0000 Manifest next update: Sun 21 Dec 2025 02:00:54 +0000 Files and hashes: 1: Xpr9sRgbPmZViC8BU1QHYCRAm3g.roa (hash: /PhmdbdMunM2MY+0QaCxgwKDHy7Elu8z4ortzYVhL+Y=) 2: Y9nR2VwetxbugZUEWnfLohgdeew.crl (hash: 9ElRib8OMIODcTMVrrejKjpiVp3FntDhQty8vD9paU4=) 3: emyVhdOtUpRyesCtl5eoHp0JGEE.roa (hash: 86qnK0w4Cm+zX9631HiXs9UjrDd9iFThMb03qwigYKc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/3ed8dd-d36e-440c-8142-d80c6b85cda4/1/Y9nR2VwetxbugZUEWnfLohgdeew.crl rsync://rpki.ripe.net/repository/DEFAULT/35/3ed8dd-d36e-440c-8142-d80c6b85cda4/1/Y9nR2VwetxbugZUEWnfLohgdeew.mft rsync://rpki.ripe.net/repository/DEFAULT/Y9nR2VwetxbugZUEWnfLohgdeew.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:7d:09:eb:40:44:06:d9:bf:cc:e5:da:b9:e5:1b:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63d9d1d95c1eb716ee8195045a77cba2181d79ec Validity Not Before: Dec 20 02:00:54 2025 GMT Not After : Dec 21 02:00:54 2025 GMT Subject: CN=b59004f27c7e0c4e9260946525f1774d77c6cfe0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:93:3d:e9:42:92:79:c2:70:e0:a0:19:66:1f: 73:61:f2:f2:19:8f:73:01:66:5d:36:77:ec:b8:68: 50:b4:36:8b:de:8f:e0:94:d3:17:1b:d2:9b:35:72: 50:26:67:b9:01:ea:aa:44:25:dd:e3:a9:b2:63:3f: d5:a4:4c:47:9e:0e:ec:f5:6e:d5:d9:22:0a:04:c5: f5:0d:71:cb:7c:33:b3:50:b1:39:b2:f3:15:30:da: 95:25:1a:06:51:c3:4d:37:a9:d2:ab:db:a0:6d:eb: 53:04:29:bf:2c:d2:9c:71:02:c2:25:d2:f7:1a:9c: 95:db:69:ab:ca:43:4d:7a:80:27:7a:da:53:5b:cf: d9:d3:ca:a4:1e:5e:e2:41:b9:c7:01:6c:fb:14:6c: 8e:9d:00:0b:9f:52:bd:f1:c5:a0:51:f8:41:33:a8: ed:b7:ab:1d:b3:8b:a8:d6:8c:67:a0:da:4d:2d:03: 37:1b:7f:bf:93:90:d4:2d:b2:01:fb:9b:37:c3:7b: ca:1d:da:13:22:a1:4e:fc:45:63:bf:81:fd:a8:bf: be:c9:d2:ca:0f:d4:98:1f:f0:e4:1a:62:23:2d:ba: 94:e9:8a:00:63:ba:b4:e4:d0:17:de:2a:69:96:45: fb:e8:fd:da:bf:f8:d9:69:10:87:cb:34:a5:93:a2: a7:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:90:04:F2:7C:7E:0C:4E:92:60:94:65:25:F1:77:4D:77:C6:CF:E0 X509v3 Authority Key Identifier: keyid:63:D9:D1:D9:5C:1E:B7:16:EE:81:95:04:5A:77:CB:A2:18:1D:79:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y9nR2VwetxbugZUEWnfLohgdeew.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3ed8dd-d36e-440c-8142-d80c6b85cda4/1/Y9nR2VwetxbugZUEWnfLohgdeew.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3ed8dd-d36e-440c-8142-d80c6b85cda4/1/Y9nR2VwetxbugZUEWnfLohgdeew.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:6a:b4:63:ab:66:21:79:4a:6f:9a:f4:26:ce:aa:c9:fa:fe: 7a:c3:71:6c:c9:c3:28:df:56:d2:46:25:bf:ec:f4:7d:31:6d: a1:a4:7f:70:ca:90:1d:a2:3c:4c:1e:8f:1a:7b:6e:f2:53:a4: fc:5d:5a:03:9f:de:25:80:d0:86:46:68:24:78:aa:e4:03:a3: 28:0a:44:5e:2f:6d:7c:a9:1a:1e:9e:d3:cd:bf:14:c6:f5:3f: 08:a7:a2:a2:80:9e:df:17:fb:b7:2a:10:6c:ce:40:b0:d9:aa: 9a:4d:a4:a8:30:6f:3f:55:96:a1:8b:1e:d2:b1:b8:21:23:d4: de:0d:a2:d9:2c:c0:35:61:05:8c:32:60:6b:4d:f3:49:8f:e1: a2:4d:ad:b3:1e:c7:17:e7:a0:67:34:96:46:4f:e9:7c:97:a9: 56:b6:45:24:f2:2f:3d:d1:2e:9d:1c:cb:af:1c:e2:41:db:7b: 0e:7a:dc:20:6c:67:4f:d0:e8:4d:67:0b:1c:4a:27:71:24:c8: c6:f3:89:b3:69:3d:9d:01:49:af:c1:9d:ff:e8:e7:d9:58:d6: d6:79:2b:02:87:3c:fa:ff:9f:17:b5:91:a4:01:b6:53:22:25: e4:b1:df:d8:e5:f3:a2:2d:be:43:77:33:54:40:f7:76:7b:9a: 1a:29:dd:4c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5fQnrQEQG2b/M5dq55Rs+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZDlkMWQ5NWMxZWI3MTZlZTgxOTUwNDVhNzdjYmEyMTgx ZDc5ZWMwHhcNMjUxMjIwMDIwMDU0WhcNMjUxMjIxMDIwMDU0WjAzMTEwLwYDVQQD EyhiNTkwMDRmMjdjN2UwYzRlOTI2MDk0NjUyNWYxNzc0ZDc3YzZjZmUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnZM96UKSecJw4KAZZh9zYfLyGY9z AWZdNnfsuGhQtDaL3o/glNMXG9KbNXJQJme5AeqqRCXd46myYz/VpExHng7s9W7V 2SIKBMX1DXHLfDOzULE5svMVMNqVJRoGUcNNN6nSq9ugbetTBCm/LNKccQLCJdL3 GpyV22mrykNNeoAnetpTW8/Z08qkHl7iQbnHAWz7FGyOnQALn1K98cWgUfhBM6jt t6sds4uo1oxnoNpNLQM3G3+/k5DULbIB+5s3w3vKHdoTIqFO/EVjv4H9qL++ydLK D9SYH/DkGmIjLbqU6YoAY7q05NAX3ipplkX76P3av/jZaRCHyzSlk6KniwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLWQBPJ8fgxOkmCUZSXxd013xs/gMB8GA1UdIwQY MBaAFGPZ0dlcHrcW7oGVBFp3y6IYHXnsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWTluUjJWd2V0eGJ1Z1pVRVduZkxvaGdkZWV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS8zZWQ4ZGQtZDM2ZS00NDBjLTgxNDIt ZDgwYzZiODVjZGE0LzEvWTluUjJWd2V0eGJ1Z1pVRVduZkxvaGdkZWV3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS8zZWQ4ZGQtZDM2ZS00NDBjLTgxNDItZDgwYzZiODVjZGE0 LzEvWTluUjJWd2V0eGJ1Z1pVRVduZkxvaGdkZWV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqGq0Y6tm IXlKb5r0Js6qyfr+esNxbMnDKN9W0kYlv+z0fTFtoaR/cMqQHaI8TB6PGntu8lOk /F1aA5/eJYDQhkZoJHiq5AOjKApEXi9tfKkaHp7Tzb8UxvU/CKeiooCe3xf7tyoQ bM5AsNmqmk2kqDBvP1WWoYse0rG4ISPU3g2i2SzANWEFjDJga03zSY/hok2tsx7H F+egZzSWRk/pfJepVrZFJPIvPdEunRzLrxziQdt7DnrcIGxnT9DoTWcLHEoncSTI xvOJs2k9nQFJr8Gd/+jn2VjW1nkrAoc8+v+fF7WRpAG2UyIl5LHf2OXzoi2+Q3cz VED3dnuaGindTA== -----END CERTIFICATE-----Generated at Sat Dec 20 08:40:11 2025 by rpki-client