This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/107d3e-fcdc-4767-9cca-e4f2cdc7a411/1/Y_peK-wKPseV-PGc1H_sxoBniwg.mft File: Y_peK-wKPseV-PGc1H_sxoBniwg.mft (raw, json) Hash identifier: MPe2wynDeNiTrYs02SEeRcnLxmB8m5ex32p4jBCtMmY= Subject key identifier: 2B:B1:4B:C2:DB:D7:1B:09:6D:AE:86:7A:B1:5B:AE:4B:59:0E:95:5E Authority key identifier: 63:FA:5E:2B:EC:0A:3E:C7:95:F8:F1:9C:D4:7F:EC:C6:80:67:8B:08 Certificate issuer: /CN=63fa5e2bec0a3ec795f8f19cd47fecc680678b08 Certificate serial: 019B3F47DE363034F5DE71941910CC1EACF8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y_peK-wKPseV-PGc1H_sxoBniwg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/107d3e-fcdc-4767-9cca-e4f2cdc7a411/1/Y_peK-wKPseV-PGc1H_sxoBniwg.mft Manifest number: 0C5C Signing time: Sun 21 Dec 2025 05:00:33 +0000 Manifest this update: Sun 21 Dec 2025 05:00:33 +0000 Manifest next update: Mon 22 Dec 2025 05:00:33 +0000 Files and hashes: 1: 67MB3uIiPBNhFM08ZckoWW6iFi8.roa (hash: JV/MdthgHrxhWbvFQASmk0ngMZHEyExozVaoGSmnqvc=) 2: 9kpPUCTW6Qn7TUHtyr9YOj6Odr4.roa (hash: HpbK15QHkCq2yrHDhDOHMvxiVYVvHPgmBjt3qtyByjQ=) 3: Y_peK-wKPseV-PGc1H_sxoBniwg.crl (hash: yo85phsaHfe6Vy9vi45pK3X/9k9/WT7bWSa0JfU7w5o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/107d3e-fcdc-4767-9cca-e4f2cdc7a411/1/Y_peK-wKPseV-PGc1H_sxoBniwg.crl rsync://rpki.ripe.net/repository/DEFAULT/51/107d3e-fcdc-4767-9cca-e4f2cdc7a411/1/Y_peK-wKPseV-PGc1H_sxoBniwg.mft rsync://rpki.ripe.net/repository/DEFAULT/Y_peK-wKPseV-PGc1H_sxoBniwg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:47:de:36:30:34:f5:de:71:94:19:10:cc:1e:ac:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63fa5e2bec0a3ec795f8f19cd47fecc680678b08 Validity Not Before: Dec 21 05:00:33 2025 GMT Not After : Dec 22 05:00:33 2025 GMT Subject: CN=2bb14bc2dbd71b096dae867ab15bae4b590e955e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:76:18:3a:9a:8d:37:6b:2e:55:e0:88:9d:70: 68:49:3d:b1:65:96:f1:c1:ff:e5:37:d4:03:fb:34: 06:dc:5c:1e:96:8b:ce:e5:c2:59:dd:bf:0c:e6:3f: 88:59:3d:8e:4f:67:de:43:ad:10:6b:69:29:cb:3a: ef:01:5e:50:1b:6f:4f:b2:df:2a:d8:43:ad:63:1d: 97:78:0b:9e:e6:05:59:41:db:33:46:12:e7:69:ff: 22:eb:46:83:a8:55:4b:dd:98:7a:93:3a:d1:cb:00: c6:28:19:1b:9f:7c:03:b9:0c:e5:c0:d9:e8:28:e7: 66:bb:91:14:67:da:a6:93:ae:c1:d6:01:50:ae:6a: b7:4b:d9:7e:4b:f1:cd:1b:cb:77:dd:dc:45:19:2c: 81:85:65:bb:00:38:ce:da:79:aa:e1:d9:a0:4e:59: 48:ed:b4:90:65:2c:9b:06:6f:7d:9f:5a:be:3b:59: f3:25:7c:d5:ce:8f:f1:51:86:d2:f9:44:1f:61:52: be:9a:7e:7a:25:1d:1c:fe:c3:04:56:c1:ff:43:6b: c2:4d:d8:b0:50:96:fa:b8:a7:9f:f5:fa:44:30:8a: fa:c3:fc:b9:da:20:7a:6e:e1:cf:6c:bf:7c:7b:e6: 71:61:cd:4c:c2:e5:c8:4d:72:ee:5b:7a:05:67:a1: 8b:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:B1:4B:C2:DB:D7:1B:09:6D:AE:86:7A:B1:5B:AE:4B:59:0E:95:5E X509v3 Authority Key Identifier: keyid:63:FA:5E:2B:EC:0A:3E:C7:95:F8:F1:9C:D4:7F:EC:C6:80:67:8B:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y_peK-wKPseV-PGc1H_sxoBniwg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/107d3e-fcdc-4767-9cca-e4f2cdc7a411/1/Y_peK-wKPseV-PGc1H_sxoBniwg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/107d3e-fcdc-4767-9cca-e4f2cdc7a411/1/Y_peK-wKPseV-PGc1H_sxoBniwg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:67:90:38:fc:15:d4:af:33:86:81:6e:50:6e:7f:35:14:23: cd:c1:21:4e:74:ca:c6:c8:4e:1d:d9:bf:9c:81:cb:33:2f:66: 5a:07:fd:72:fe:26:1f:b4:a5:86:59:ca:22:b2:ba:59:27:e2: 0a:e7:e2:fa:91:f1:e9:cc:f8:08:66:c3:4d:9f:8d:94:4b:78: 02:9f:44:e8:8b:eb:4a:fe:ac:65:39:ac:eb:49:cd:67:9b:f6: 13:f9:43:ab:99:f2:2b:94:66:f1:ea:ad:73:b1:21:d5:94:11: 83:93:be:87:18:38:fe:d9:72:17:74:e1:40:36:92:c4:6e:4f: 1e:d8:92:c8:42:fb:40:f7:bc:fb:bd:ce:af:33:a1:5f:93:aa: c4:8b:a7:f4:9b:51:a6:ef:66:9a:33:49:e6:a2:49:ab:77:78: 96:28:a2:0a:e5:9c:d2:fd:50:e3:c0:73:c3:e5:c6:77:bb:cd: c0:3f:ba:04:9a:f3:07:9f:76:d1:d5:fb:e9:3b:9b:9b:2d:73: 44:58:d8:f1:88:29:61:bb:62:00:30:44:63:69:38:2e:6e:87: 00:ef:3a:49:68:b0:1a:8a:ae:ea:9d:ed:5e:91:9c:af:a8:5a: 16:8f:88:29:f4:09:86:67:6a:3f:d2:be:3a:54:06:33:15:84: 54:bb:67:31 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/R942MDT13nGUGRDMHqz4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZmE1ZTJiZWMwYTNlYzc5NWY4ZjE5Y2Q0N2ZlY2M2ODA2 NzhiMDgwHhcNMjUxMjIxMDUwMDMzWhcNMjUxMjIyMDUwMDMzWjAzMTEwLwYDVQQD EygyYmIxNGJjMmRiZDcxYjA5NmRhZTg2N2FiMTViYWU0YjU5MGU5NTVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApXYYOpqNN2suVeCInXBoST2xZZbx wf/lN9QD+zQG3FwelovO5cJZ3b8M5j+IWT2OT2feQ60Qa2kpyzrvAV5QG29Pst8q 2EOtYx2XeAue5gVZQdszRhLnaf8i60aDqFVL3Zh6kzrRywDGKBkbn3wDuQzlwNno KOdmu5EUZ9qmk67B1gFQrmq3S9l+S/HNG8t33dxFGSyBhWW7ADjO2nmq4dmgTllI 7bSQZSybBm99n1q+O1nzJXzVzo/xUYbS+UQfYVK+mn56JR0c/sMEVsH/Q2vCTdiw UJb6uKef9fpEMIr6w/y52iB6buHPbL98e+ZxYc1MwuXITXLuW3oFZ6GLfQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCuxS8Lb1xsJba6GerFbrktZDpVeMB8GA1UdIwQY MBaAFGP6XivsCj7HlfjxnNR/7MaAZ4sIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWV9wZUstd0tQc2VWLVBHYzFIX3N4b0JuaXdnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS8xMDdkM2UtZmNkYy00NzY3LTljY2Et ZTRmMmNkYzdhNDExLzEvWV9wZUstd0tQc2VWLVBHYzFIX3N4b0JuaXdnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS8xMDdkM2UtZmNkYy00NzY3LTljY2EtZTRmMmNkYzdhNDEx LzEvWV9wZUstd0tQc2VWLVBHYzFIX3N4b0JuaXdnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkGeQOPwV 1K8zhoFuUG5/NRQjzcEhTnTKxshOHdm/nIHLMy9mWgf9cv4mH7SlhlnKIrK6WSfi Cufi+pHx6cz4CGbDTZ+NlEt4Ap9E6IvrSv6sZTms60nNZ5v2E/lDq5nyK5Rm8eqt c7Eh1ZQRg5O+hxg4/tlyF3ThQDaSxG5PHtiSyEL7QPe8+73OrzOhX5OqxIun9JtR pu9mmjNJ5qJJq3d4liiiCuWc0v1Q48Bzw+XGd7vNwD+6BJrzB5920dX76Tubmy1z RFjY8YgpYbtiADBEY2k4Lm6HAO86SWiwGoqu6p3tXpGcr6haFo+IKfQJhmdqP9K+ OlQGMxWEVLtnMQ== -----END CERTIFICATE-----Generated at Sun Dec 21 06:28:37 2025 by rpki-client