This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/ebf304-5ddb-4569-aa1e-d45c12472935/1/Y0cDI_IxIpymkfPglRnBrILy6gE.mft File: Y0cDI_IxIpymkfPglRnBrILy6gE.mft (raw, json) Hash identifier: AxMvq167vuDwDjuPyhsFQXSILpnEgfXNagidtek3cts= Subject key identifier: E5:9A:F0:76:CF:58:81:25:EF:B4:26:BE:64:E5:D3:71:87:0A:2B:71 Authority key identifier: 63:47:03:23:F2:31:22:9C:A6:91:F3:E0:95:19:C1:AC:82:F2:EA:01 Certificate issuer: /CN=63470323f231229ca691f3e09519c1ac82f2ea01 Certificate serial: 019B3C7FB638D97089C75DFA7796D63A3395 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y0cDI_IxIpymkfPglRnBrILy6gE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/ebf304-5ddb-4569-aa1e-d45c12472935/1/Y0cDI_IxIpymkfPglRnBrILy6gE.mft Manifest number: 0272 Signing time: Sat 20 Dec 2025 16:02:41 +0000 Manifest this update: Sat 20 Dec 2025 16:02:41 +0000 Manifest next update: Sun 21 Dec 2025 16:02:41 +0000 Files and hashes: 1: WwWZ_i4rGRDbq67jPO4r6ZSGoFI.roa (hash: nLu8gOVrrY7uwr4TxE8bOFSJg3uFSsR06swIilrL5NA=) 2: Y0cDI_IxIpymkfPglRnBrILy6gE.crl (hash: a2XqEWhS2SM8OFbYLOP9OJGBv0wABu26zshnFji6maM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/ebf304-5ddb-4569-aa1e-d45c12472935/1/Y0cDI_IxIpymkfPglRnBrILy6gE.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/ebf304-5ddb-4569-aa1e-d45c12472935/1/Y0cDI_IxIpymkfPglRnBrILy6gE.mft rsync://rpki.ripe.net/repository/DEFAULT/Y0cDI_IxIpymkfPglRnBrILy6gE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7f:b6:38:d9:70:89:c7:5d:fa:77:96:d6:3a:33:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63470323f231229ca691f3e09519c1ac82f2ea01 Validity Not Before: Dec 20 16:02:41 2025 GMT Not After : Dec 21 16:02:41 2025 GMT Subject: CN=e59af076cf588125efb426be64e5d371870a2b71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:f3:bf:17:31:56:53:b8:28:6c:32:ae:d7:1b: c0:d7:f9:f6:ed:4c:b8:fc:c3:44:95:79:b6:b0:de: 9d:57:d0:5e:5c:34:eb:d0:a4:f9:b8:87:22:83:b6: b7:13:4b:69:0e:a9:da:04:ca:ac:61:63:8f:33:7a: 98:35:59:4f:c4:39:5e:a7:8e:0d:b9:57:a6:bb:bf: 9c:d6:be:ed:76:21:90:5e:bf:0d:a6:91:d5:05:ca: fb:93:da:12:6c:08:d3:36:a5:1a:8d:fc:73:9a:31: 2e:5f:ba:61:a4:fd:40:4b:65:87:fa:c4:58:8a:a8: d7:2f:11:72:b7:a5:2c:c8:88:b5:c9:05:c4:77:74: b6:3d:da:50:49:af:63:8a:94:1f:a0:16:05:e8:7f: 6b:06:60:98:3f:54:b5:1b:44:17:a5:e0:59:b9:16: 83:d8:2a:6f:b1:e9:75:58:60:e0:f4:b7:64:71:cb: f8:d7:3f:6d:20:f3:36:e8:08:21:8a:77:5e:92:b9: 46:aa:87:f3:7a:8f:c1:b4:2e:75:33:4a:23:a2:8f: 78:7e:cc:3e:5b:fb:6d:dc:19:9c:69:87:90:92:0d: 18:8e:89:55:e0:cf:b9:45:68:cf:27:f2:08:fd:d9: 73:9a:f5:61:91:0e:65:55:00:66:42:b2:e8:6b:b0: b4:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:9A:F0:76:CF:58:81:25:EF:B4:26:BE:64:E5:D3:71:87:0A:2B:71 X509v3 Authority Key Identifier: keyid:63:47:03:23:F2:31:22:9C:A6:91:F3:E0:95:19:C1:AC:82:F2:EA:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y0cDI_IxIpymkfPglRnBrILy6gE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/ebf304-5ddb-4569-aa1e-d45c12472935/1/Y0cDI_IxIpymkfPglRnBrILy6gE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/ebf304-5ddb-4569-aa1e-d45c12472935/1/Y0cDI_IxIpymkfPglRnBrILy6gE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:07:c3:6e:0d:bc:2c:bf:c5:94:03:1d:34:ef:70:6b:bd:0e: 29:1c:17:a2:43:7d:d4:98:92:53:81:01:33:3f:09:05:fa:78: 72:0b:8e:9b:c3:83:47:39:4e:53:b1:af:4e:d3:ce:4d:6e:c9: 6f:ca:af:52:aa:95:69:cd:e8:c4:80:a7:a2:84:ab:1b:a2:8b: a2:0c:e2:ac:2d:41:4a:76:e2:dc:05:07:23:fd:21:15:f8:2a: b0:1a:27:69:01:2f:9d:33:44:0b:f2:47:83:33:63:2b:aa:5d: db:16:5a:45:f9:e5:e0:ab:29:4f:52:35:21:ea:a6:6f:cd:c3: 12:fa:9a:39:60:8f:8f:0b:7b:f9:2e:0f:79:32:57:2c:c5:bf: 29:29:9b:be:47:df:9b:91:fa:8b:09:ad:86:e1:58:c2:27:65: 38:00:c0:9c:17:28:b9:65:f6:ec:7d:cd:dc:30:99:f0:a5:68: 23:ac:90:f4:6a:4f:e2:d5:ac:e9:fd:96:28:9a:54:ea:db:7b: de:c8:0c:5b:ea:7c:2a:8a:80:a6:0d:27:c7:2b:18:99:48:bb: e2:84:a5:0d:ca:4f:17:26:72:58:0c:fa:f5:00:61:cd:f2:99: d0:49:bc:03:8b:91:8c:97:51:3b:70:01:f2:ab:ea:b9:df:ba: af:b8:24:50 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8f7Y42XCJx136d5bWOjOVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzNDcwMzIzZjIzMTIyOWNhNjkxZjNlMDk1MTljMWFjODJm MmVhMDEwHhcNMjUxMjIwMTYwMjQxWhcNMjUxMjIxMTYwMjQxWjAzMTEwLwYDVQQD EyhlNTlhZjA3NmNmNTg4MTI1ZWZiNDI2YmU2NGU1ZDM3MTg3MGEyYjcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsvO/FzFWU7gobDKu1xvA1/n27Uy4 /MNElXm2sN6dV9BeXDTr0KT5uIcig7a3E0tpDqnaBMqsYWOPM3qYNVlPxDlep44N uVemu7+c1r7tdiGQXr8NppHVBcr7k9oSbAjTNqUajfxzmjEuX7phpP1AS2WH+sRY iqjXLxFyt6UsyIi1yQXEd3S2PdpQSa9jipQfoBYF6H9rBmCYP1S1G0QXpeBZuRaD 2Cpvsel1WGDg9Ldkccv41z9tIPM26AghindekrlGqofzeo/BtC51M0ojoo94fsw+ W/tt3BmcaYeQkg0YjolV4M+5RWjPJ/II/dlzmvVhkQ5lVQBmQrLoa7C0rwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOWa8HbPWIEl77QmvmTl03GHCitxMB8GA1UdIwQY MBaAFGNHAyPyMSKcppHz4JUZwayC8uoBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWTBjRElfSXhJcHlta2ZQZ2xSbkJySUx5NmdFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy9lYmYzMDQtNWRkYi00NTY5LWFhMWUt ZDQ1YzEyNDcyOTM1LzEvWTBjRElfSXhJcHlta2ZQZ2xSbkJySUx5NmdFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy9lYmYzMDQtNWRkYi00NTY5LWFhMWUtZDQ1YzEyNDcyOTM1 LzEvWTBjRElfSXhJcHlta2ZQZ2xSbkJySUx5NmdFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXAfDbg28 LL/FlAMdNO9wa70OKRwXokN91JiSU4EBMz8JBfp4cguOm8ODRzlOU7GvTtPOTW7J b8qvUqqVac3oxICnooSrG6KLogzirC1BSnbi3AUHI/0hFfgqsBonaQEvnTNEC/JH gzNjK6pd2xZaRfnl4KspT1I1Ieqmb83DEvqaOWCPjwt7+S4PeTJXLMW/KSmbvkff m5H6iwmthuFYwidlOADAnBcouWX27H3N3DCZ8KVoI6yQ9GpP4tWs6f2WKJpU6tt7 3sgMW+p8KoqApg0nxysYmUi74oSlDcpPFyZyWAz69QBhzfKZ0Em8A4uRjJdRO3AB 8qvqud+6r7gkUA== -----END CERTIFICATE-----Generated at Sat Dec 20 21:33:12 2025 by rpki-client