This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/ca0228-57ee-4f65-962f-35d0595e12f0/1/Y4g6eXidn2WBUpLxjUmAupxe0iE.mft File: Y4g6eXidn2WBUpLxjUmAupxe0iE.mft (raw, json) Hash identifier: lZmUXPcxJTfAPUSBfII22pOAByehqruZHDKz9SEbtQw= Subject key identifier: EB:BF:16:AF:D5:23:2F:2C:0C:AC:3F:87:35:CD:FB:E6:09:97:FC:F7 Authority key identifier: 63:88:3A:79:78:9D:9F:65:81:52:92:F1:8D:49:80:BA:9C:5E:D2:21 Certificate issuer: /CN=63883a79789d9f65815292f18d4980ba9c5ed221 Certificate serial: 019B3CB561F4839A6661AD40E0B8DB5534FB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y4g6eXidn2WBUpLxjUmAupxe0iE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/ca0228-57ee-4f65-962f-35d0595e12f0/1/Y4g6eXidn2WBUpLxjUmAupxe0iE.mft Manifest number: 1788 Signing time: Sat 20 Dec 2025 17:01:18 +0000 Manifest this update: Sat 20 Dec 2025 17:01:18 +0000 Manifest next update: Sun 21 Dec 2025 17:01:18 +0000 Files and hashes: 1: AYWfSZfm3-m6tTmXQ7ScTVje9jw.roa (hash: jozIBgSrKgoY+kja8mOk3zf+5OHOQyudAHt7Y1IjLfc=) 2: Y4g6eXidn2WBUpLxjUmAupxe0iE.crl (hash: cQfkhneJOLBSRn5CQRCK4KuHddn75gih+g6uGywZO/s=) 3: biZ-PgxYb414M_0ExkvqodzdxpA.roa (hash: gdhB0S0OkmMjabrUiIcvLE6RonkDcPiASoyoHfZiC4s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/ca0228-57ee-4f65-962f-35d0595e12f0/1/Y4g6eXidn2WBUpLxjUmAupxe0iE.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/ca0228-57ee-4f65-962f-35d0595e12f0/1/Y4g6eXidn2WBUpLxjUmAupxe0iE.mft rsync://rpki.ripe.net/repository/DEFAULT/Y4g6eXidn2WBUpLxjUmAupxe0iE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:b5:61:f4:83:9a:66:61:ad:40:e0:b8:db:55:34:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63883a79789d9f65815292f18d4980ba9c5ed221 Validity Not Before: Dec 20 17:01:18 2025 GMT Not After : Dec 21 17:01:18 2025 GMT Subject: CN=ebbf16afd5232f2c0cac3f8735cdfbe60997fcf7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:a2:08:e8:a4:3b:66:89:af:68:5b:11:93:77: 0c:8b:ce:0c:9e:01:a5:da:b9:cb:ca:d4:bc:29:6d: 09:f6:2b:9e:3e:77:1a:21:df:76:6b:a9:2b:aa:e5: 65:ab:1d:d9:69:17:66:cd:d6:f9:21:c6:c7:22:c9: 71:5d:31:04:59:c5:b8:8a:9f:85:34:57:c6:54:eb: 7b:f1:9c:36:3a:e2:a5:f7:60:a5:53:98:e3:55:24: e0:07:ff:94:78:94:64:7d:9d:cd:86:37:38:f9:93: aa:6e:9f:5f:ce:8f:e4:6a:0a:fa:8a:18:94:b0:ef: e5:76:72:55:3b:e0:fb:4c:9f:da:b5:96:08:cb:bf: a6:2e:69:14:6c:1e:db:b6:ff:a6:e0:ba:19:5e:44: ce:3f:25:de:3a:2d:14:ca:c7:49:30:32:4c:34:b2: 70:fb:a2:17:9e:16:dc:f0:62:76:09:fd:f0:5d:cd: d0:ca:9b:d7:ef:b0:26:b6:a2:d5:54:d8:09:53:eb: 71:d3:d9:50:a8:e0:cc:2a:ae:a1:85:5c:75:a3:12: 76:f7:19:3f:74:10:b5:52:df:bc:77:44:17:3b:e6: da:0f:f0:95:59:87:47:8c:e4:45:63:9c:8c:4e:80: 54:64:2b:6c:33:e7:64:59:06:9d:ab:ff:b8:43:b6: c6:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:BF:16:AF:D5:23:2F:2C:0C:AC:3F:87:35:CD:FB:E6:09:97:FC:F7 X509v3 Authority Key Identifier: keyid:63:88:3A:79:78:9D:9F:65:81:52:92:F1:8D:49:80:BA:9C:5E:D2:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y4g6eXidn2WBUpLxjUmAupxe0iE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ca0228-57ee-4f65-962f-35d0595e12f0/1/Y4g6eXidn2WBUpLxjUmAupxe0iE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ca0228-57ee-4f65-962f-35d0595e12f0/1/Y4g6eXidn2WBUpLxjUmAupxe0iE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:aa:b4:2b:f6:b0:2b:5c:51:b3:d7:19:9e:da:c5:56:ed:6d: 9e:d3:28:02:a0:5c:c7:e8:44:fe:7b:32:46:96:61:9e:8d:60: 41:f3:4a:65:27:3c:6a:ea:aa:a1:4c:44:d5:4f:2f:51:0c:9a: 9c:51:9c:82:ed:bd:f7:53:8d:ea:f7:11:70:16:35:e1:b7:22: b0:29:3d:ff:41:5b:a2:63:b3:79:2b:f7:3b:f4:07:a1:1e:0c: df:8d:68:ec:56:67:b5:8f:1f:ab:ce:06:aa:fe:ba:0d:93:9d: 4a:4e:51:ee:3c:24:06:ce:5a:e6:2d:29:df:fe:2f:c7:13:de: eb:22:dd:4e:4f:62:d7:18:ab:1b:91:f9:f9:26:6b:56:45:f9: e2:b5:84:e9:54:6a:4a:9e:69:8a:3c:48:1c:23:ba:b6:79:64: 7b:04:d9:22:c4:d0:fa:41:30:ca:44:f8:57:a3:27:a8:06:c0: 23:88:5b:7b:86:87:6a:9f:bd:c6:97:c8:ce:51:9c:d6:32:bf: ab:d2:19:55:c9:99:57:8f:f4:e1:dd:2f:82:ac:3f:95:00:a3: f3:cb:58:b9:bb:0a:6e:fa:98:e0:b1:bb:69:81:31:1c:9f:4d: 92:47:11:de:18:69:a7:63:cb:f4:2a:a3:db:97:73:3e:0a:58: 24:9b:72:4d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8tWH0g5pmYa1A4LjbVTT7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzODgzYTc5Nzg5ZDlmNjU4MTUyOTJmMThkNDk4MGJhOWM1 ZWQyMjEwHhcNMjUxMjIwMTcwMTE4WhcNMjUxMjIxMTcwMTE4WjAzMTEwLwYDVQQD EyhlYmJmMTZhZmQ1MjMyZjJjMGNhYzNmODczNWNkZmJlNjA5OTdmY2Y3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyaII6KQ7ZomvaFsRk3cMi84MngGl 2rnLytS8KW0J9iuePncaId92a6krquVlqx3ZaRdmzdb5IcbHIslxXTEEWcW4ip+F NFfGVOt78Zw2OuKl92ClU5jjVSTgB/+UeJRkfZ3Nhjc4+ZOqbp9fzo/kagr6ihiU sO/ldnJVO+D7TJ/atZYIy7+mLmkUbB7btv+m4LoZXkTOPyXeOi0UysdJMDJMNLJw +6IXnhbc8GJ2Cf3wXc3QypvX77AmtqLVVNgJU+tx09lQqODMKq6hhVx1oxJ29xk/ dBC1Ut+8d0QXO+baD/CVWYdHjORFY5yMToBUZCtsM+dkWQadq/+4Q7bGGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOu/Fq/VIy8sDKw/hzXN++YJl/z3MB8GA1UdIwQY MBaAFGOIOnl4nZ9lgVKS8Y1JgLqcXtIhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWTRnNmVYaWRuMldCVXBMeGpVbUF1cHhlMGlFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9jYTAyMjgtNTdlZS00ZjY1LTk2MmYt MzVkMDU5NWUxMmYwLzEvWTRnNmVYaWRuMldCVXBMeGpVbUF1cHhlMGlFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi9jYTAyMjgtNTdlZS00ZjY1LTk2MmYtMzVkMDU5NWUxMmYw LzEvWTRnNmVYaWRuMldCVXBMeGpVbUF1cHhlMGlFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ6q0K/aw K1xRs9cZntrFVu1tntMoAqBcx+hE/nsyRpZhno1gQfNKZSc8auqqoUxE1U8vUQya nFGcgu2991ON6vcRcBY14bcisCk9/0FbomOzeSv3O/QHoR4M341o7FZntY8fq84G qv66DZOdSk5R7jwkBs5a5i0p3/4vxxPe6yLdTk9i1xirG5H5+SZrVkX54rWE6VRq Sp5pijxIHCO6tnlkewTZIsTQ+kEwykT4V6MnqAbAI4hbe4aHap+9xpfIzlGc1jK/ q9IZVcmZV4/04d0vgqw/lQCj88tYubsKbvqY4LG7aYExHJ9NkkcR3hhpp2PL9Cqj 25dzPgpYJJtyTQ== -----END CERTIFICATE-----Generated at Sat Dec 20 21:40:14 2025 by rpki-client