This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/e04fc4-2c6e-4af7-939e-048391f8db9c/1/Y5Jvz_gbuRpqca5eiTWrTarlN0Q.mft File: Y5Jvz_gbuRpqca5eiTWrTarlN0Q.mft (raw, json) Hash identifier: O2Oi5v5EBnTi+xvKVkxW0yo4hqDW+r/yeXO5mpvvBDg= Subject key identifier: 4E:00:AE:14:1A:68:BB:11:B1:9A:1E:16:1F:A4:CC:F8:94:0B:00:5C Authority key identifier: 63:92:6F:CF:F8:1B:B9:1A:6A:71:AE:5E:89:35:AB:4D:AA:E5:37:44 Certificate issuer: /CN=63926fcff81bb91a6a71ae5e8935ab4daae53744 Certificate serial: 019B4694960DDCBF21C4AED63EB6CC3BDBEB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y5Jvz_gbuRpqca5eiTWrTarlN0Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/e04fc4-2c6e-4af7-939e-048391f8db9c/1/Y5Jvz_gbuRpqca5eiTWrTarlN0Q.mft Manifest number: 08EB Signing time: Mon 22 Dec 2025 15:01:41 +0000 Manifest this update: Mon 22 Dec 2025 15:01:41 +0000 Manifest next update: Tue 23 Dec 2025 15:01:41 +0000 Files and hashes: 1: Xh4ptPl3loyr5HsYAeq5bigmrnc.roa (hash: y+GdTxJAoh6FrrDJ6BHqIZq0hI9csiMuoRcI0N0qK/0=) 2: Y5Jvz_gbuRpqca5eiTWrTarlN0Q.crl (hash: Ai8io2C3MhXLrbWoJL5np7xbb3kIIz4XZ8fNPC0jaLE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/e04fc4-2c6e-4af7-939e-048391f8db9c/1/Y5Jvz_gbuRpqca5eiTWrTarlN0Q.crl rsync://rpki.ripe.net/repository/DEFAULT/44/e04fc4-2c6e-4af7-939e-048391f8db9c/1/Y5Jvz_gbuRpqca5eiTWrTarlN0Q.mft rsync://rpki.ripe.net/repository/DEFAULT/Y5Jvz_gbuRpqca5eiTWrTarlN0Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 15:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:46:94:96:0d:dc:bf:21:c4:ae:d6:3e:b6:cc:3b:db:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63926fcff81bb91a6a71ae5e8935ab4daae53744 Validity Not Before: Dec 22 15:01:41 2025 GMT Not After : Dec 23 15:01:41 2025 GMT Subject: CN=4e00ae141a68bb11b19a1e161fa4ccf8940b005c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:74:ac:46:c3:f9:6c:02:76:fb:f1:1f:71:9b: 44:0f:13:f4:37:f4:5b:a2:e4:71:2f:c4:fe:f3:4b: e4:7c:d6:ed:13:65:27:d0:33:1c:ec:be:33:78:c0: 26:2e:15:c8:83:fe:95:3d:6d:bc:51:68:b6:51:5e: d6:48:ce:97:cf:77:82:4e:b9:9e:47:37:ec:4a:0e: 12:c1:51:5e:80:cd:a4:ea:e8:04:c0:ae:c1:33:a8: 4e:6d:f6:ba:87:1a:af:d8:eb:c2:94:09:2d:77:6e: 9f:64:f4:04:8f:cf:1d:9f:dd:a2:00:50:36:fe:82: dd:c1:31:b0:1d:14:fe:63:3e:df:60:b7:a2:12:5a: 7c:62:ad:d8:2a:68:79:2a:bb:2b:34:4a:7b:7f:42: 27:0f:11:22:10:00:ce:4c:2f:14:f1:f1:eb:e9:68: bb:cf:c1:90:26:17:ca:2a:88:e0:d9:db:dd:8a:f5: 3c:92:b1:d9:2a:b5:34:0d:59:30:39:be:15:64:35: 67:09:54:c7:d5:63:4d:17:96:99:a1:8c:cb:9c:50: 5f:51:e9:33:49:cc:a1:2c:cc:59:49:7a:c2:97:e8: fa:5c:90:31:83:e7:60:b7:8d:39:c3:a9:e1:2a:47: 1b:8a:20:4d:37:e8:02:ed:91:45:dd:f0:31:89:bf: f5:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:00:AE:14:1A:68:BB:11:B1:9A:1E:16:1F:A4:CC:F8:94:0B:00:5C X509v3 Authority Key Identifier: keyid:63:92:6F:CF:F8:1B:B9:1A:6A:71:AE:5E:89:35:AB:4D:AA:E5:37:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y5Jvz_gbuRpqca5eiTWrTarlN0Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/e04fc4-2c6e-4af7-939e-048391f8db9c/1/Y5Jvz_gbuRpqca5eiTWrTarlN0Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/e04fc4-2c6e-4af7-939e-048391f8db9c/1/Y5Jvz_gbuRpqca5eiTWrTarlN0Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:a8:a2:74:c6:24:92:d8:4b:ac:7b:93:a1:2e:da:53:ec:a7: cd:8b:dd:93:15:d6:1b:3c:c2:f6:d7:1d:66:27:cd:6e:4f:47: d4:6c:24:05:d1:05:b8:dc:bb:af:70:5c:18:b6:53:f9:ce:df: 33:40:90:54:e6:90:63:3d:ec:62:b9:87:3e:6c:48:92:98:4d: 2e:60:92:71:d7:14:1c:e9:1f:2b:82:6a:d7:1f:60:42:4c:eb: 7b:0a:3e:82:a2:7f:9d:3b:a1:fa:de:b9:d7:09:9e:41:9e:ea: 37:89:1e:7a:67:cd:a8:e0:d1:ce:d7:73:69:b9:c0:76:7b:38: d5:0d:39:94:67:90:28:6f:3e:d4:32:63:fe:04:87:01:c8:a1: 3f:c8:9d:92:0d:7f:d3:39:9a:d0:79:ed:0b:ee:6e:ff:0c:2a: 62:02:b0:45:bf:64:2a:30:c3:c6:ee:09:3e:7f:91:44:cf:82: aa:ba:cd:20:1d:6e:b6:be:67:a0:09:1b:54:4d:9b:07:95:9f: fe:fd:c8:66:82:e4:7d:47:f2:69:17:a9:05:f5:93:b8:71:f2: ab:fe:7e:39:50:7a:d0:a5:49:ff:e5:69:6a:b9:7c:ea:b7:3c: da:1b:8d:70:14:e8:10:9d:dd:cd:23:09:2b:22:86:57:86:5e: 9b:40:f5:87 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtGlJYN3L8hxK7WPrbMO9vrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzOTI2ZmNmZjgxYmI5MWE2YTcxYWU1ZTg5MzVhYjRkYWFl NTM3NDQwHhcNMjUxMjIyMTUwMTQxWhcNMjUxMjIzMTUwMTQxWjAzMTEwLwYDVQQD Eyg0ZTAwYWUxNDFhNjhiYjExYjE5YTFlMTYxZmE0Y2NmODk0MGIwMDVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2XSsRsP5bAJ2+/EfcZtEDxP0N/Rb ouRxL8T+80vkfNbtE2Un0DMc7L4zeMAmLhXIg/6VPW28UWi2UV7WSM6Xz3eCTrme RzfsSg4SwVFegM2k6ugEwK7BM6hObfa6hxqv2OvClAktd26fZPQEj88dn92iAFA2 /oLdwTGwHRT+Yz7fYLeiElp8Yq3YKmh5KrsrNEp7f0InDxEiEADOTC8U8fHr6Wi7 z8GQJhfKKojg2dvdivU8krHZKrU0DVkwOb4VZDVnCVTH1WNNF5aZoYzLnFBfUekz ScyhLMxZSXrCl+j6XJAxg+dgt405w6nhKkcbiiBNN+gC7ZFF3fAxib/12QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE4ArhQaaLsRsZoeFh+kzPiUCwBcMB8GA1UdIwQY MBaAFGOSb8/4G7kaanGuXok1q02q5TdEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWTVKdnpfZ2J1UnBxY2E1ZWlUV3JUYXJsTjBRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC9lMDRmYzQtMmM2ZS00YWY3LTkzOWUt MDQ4MzkxZjhkYjljLzEvWTVKdnpfZ2J1UnBxY2E1ZWlUV3JUYXJsTjBRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NC9lMDRmYzQtMmM2ZS00YWY3LTkzOWUtMDQ4MzkxZjhkYjlj LzEvWTVKdnpfZ2J1UnBxY2E1ZWlUV3JUYXJsTjBRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXqiidMYk kthLrHuToS7aU+ynzYvdkxXWGzzC9tcdZifNbk9H1GwkBdEFuNy7r3BcGLZT+c7f M0CQVOaQYz3sYrmHPmxIkphNLmCScdcUHOkfK4Jq1x9gQkzrewo+gqJ/nTuh+t65 1wmeQZ7qN4keemfNqODRztdzabnAdns41Q05lGeQKG8+1DJj/gSHAcihP8idkg1/ 0zma0HntC+5u/wwqYgKwRb9kKjDDxu4JPn+RRM+CqrrNIB1utr5noAkbVE2bB5Wf /v3IZoLkfUfyaRepBfWTuHHyq/5+OVB60KVJ/+Vparl86rc82huNcBToEJ3dzSMJ KyKGV4Zem0D1hw== -----END CERTIFICATE-----Generated at Tue Dec 23 00:43:49 2025 by rpki-client