This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/99cbcf-7d4f-4b12-a577-cc8054a51d66/1/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.mft File: Y74I2hqzHj-Y9VT6ATc_lMyQEe0.mft (raw, json) Hash identifier: UQ1CdIEbz7sJbY1vx1d/exDL5znSuHsmn5MbnadP+as= Subject key identifier: 53:7A:80:C6:3C:D0:ED:68:90:32:50:D3:59:A2:9A:A7:DA:1B:1B:A2 Authority key identifier: 63:BE:08:DA:1A:B3:1E:3F:98:F5:54:FA:01:37:3F:94:CC:90:11:ED Certificate issuer: /CN=63be08da1ab31e3f98f554fa01373f94cc9011ed Certificate serial: 019B3C101325A966E1E2F3376BEDD96143E4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/99cbcf-7d4f-4b12-a577-cc8054a51d66/1/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.mft Manifest number: 11ED Signing time: Sat 20 Dec 2025 14:00:44 +0000 Manifest this update: Sat 20 Dec 2025 14:00:44 +0000 Manifest next update: Sun 21 Dec 2025 14:00:44 +0000 Files and hashes: 1: Je7r8p2i15SExZL77Clbe_3pLIU.roa (hash: q5RkBfa8EqGTkb+E8fZ8KT2+q7JMLCFvRnhSE6vnDeU=) 2: Y74I2hqzHj-Y9VT6ATc_lMyQEe0.crl (hash: DZkior4AG650U1Vc3SKMqWsFrrGTZA/YgdOKNHDdHYM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/99cbcf-7d4f-4b12-a577-cc8054a51d66/1/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.crl rsync://rpki.ripe.net/repository/DEFAULT/64/99cbcf-7d4f-4b12-a577-cc8054a51d66/1/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.mft rsync://rpki.ripe.net/repository/DEFAULT/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 14:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:10:13:25:a9:66:e1:e2:f3:37:6b:ed:d9:61:43:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63be08da1ab31e3f98f554fa01373f94cc9011ed Validity Not Before: Dec 20 14:00:44 2025 GMT Not After : Dec 21 14:00:44 2025 GMT Subject: CN=537a80c63cd0ed68903250d359a29aa7da1b1ba2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:86:84:96:38:77:75:3a:d2:9b:11:08:7b:bb: 7c:5a:17:4d:5a:a4:0b:ee:40:cf:62:b4:21:60:d1: 3a:09:56:ce:60:03:1b:e7:34:f8:3b:74:16:13:c2: f8:5e:03:7f:4e:81:ff:0e:aa:27:db:52:20:3d:40: 19:9b:1b:6f:68:cf:e3:2c:b5:b4:6f:15:bc:d3:2e: dd:df:9d:9a:f5:65:a0:eb:d5:f5:b6:38:7b:ad:d6: 9a:50:a7:d5:02:67:cb:85:57:21:85:2e:24:3e:c9: c9:25:8d:b3:eb:a0:24:f0:b7:e9:a4:f4:a3:73:50: 5d:24:83:74:ec:b6:a9:07:10:e7:9f:2a:17:a2:53: e6:70:51:17:f0:f6:fe:86:e7:b3:0a:8e:87:c9:06: 56:57:1b:ea:b8:33:52:cc:fc:a5:c6:22:06:d7:da: e4:72:7c:1d:2f:4f:db:f7:cd:ee:64:cb:f0:b2:08: c7:95:4e:85:c2:62:4a:02:1b:c6:0e:7e:e1:10:ea: 6e:4e:3d:61:6a:cc:fb:27:81:3f:5d:4b:c6:fe:e9: c4:dc:e8:23:9c:ba:6a:fc:b3:e3:91:fd:10:9f:7d: fb:3a:75:76:f8:75:38:0f:54:ec:c0:91:33:0c:4c: ef:37:33:12:b9:8c:92:80:71:69:7c:66:53:75:fc: f4:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:7A:80:C6:3C:D0:ED:68:90:32:50:D3:59:A2:9A:A7:DA:1B:1B:A2 X509v3 Authority Key Identifier: keyid:63:BE:08:DA:1A:B3:1E:3F:98:F5:54:FA:01:37:3F:94:CC:90:11:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/99cbcf-7d4f-4b12-a577-cc8054a51d66/1/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/99cbcf-7d4f-4b12-a577-cc8054a51d66/1/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:25:23:62:02:79:e8:af:be:49:86:e6:22:d3:c6:30:3b:fd: 7b:15:66:fc:cb:36:96:39:1a:91:4c:2a:2c:82:e5:e2:23:aa: bb:9a:45:6c:35:35:fa:1c:13:ce:03:08:5a:8d:85:52:5f:70: 3b:ed:8e:44:93:57:03:4e:2b:00:3e:2c:43:6f:71:b3:f8:29: 2a:73:58:47:73:f4:bc:24:15:2e:dd:65:d7:22:1a:95:ea:9d: a0:59:a7:9f:3c:c9:72:fc:19:5f:36:db:f1:69:a1:c7:81:e6: 85:23:be:af:d4:3c:8a:bf:97:04:7f:dd:57:b3:b0:cf:35:ca: d9:33:a3:e4:65:12:54:5c:12:bf:c6:37:05:b4:49:1c:91:28: 0d:28:21:6c:04:bd:80:27:c7:35:59:29:d2:08:50:00:87:45: 36:c0:ac:16:fe:86:fb:92:d5:19:3c:68:1e:c1:f5:f9:e6:10: 3e:af:d7:8f:c1:0d:3f:8c:d4:88:a0:de:a6:0b:fe:45:29:b2: 43:62:1c:96:9c:d8:66:fa:14:4c:58:16:d7:60:0b:b4:c6:72: b4:42:25:42:86:ce:78:87:18:6a:69:12:6b:d7:5d:61:8c:ae: b1:ee:89:3d:90:cd:12:35:e3:b8:7c:4d:65:ec:bc:26:b6:d2: e0:78:b4:c0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8EBMlqWbh4vM3a+3ZYUPkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzYmUwOGRhMWFiMzFlM2Y5OGY1NTRmYTAxMzczZjk0Y2M5 MDExZWQwHhcNMjUxMjIwMTQwMDQ0WhcNMjUxMjIxMTQwMDQ0WjAzMTEwLwYDVQQD Eyg1MzdhODBjNjNjZDBlZDY4OTAzMjUwZDM1OWEyOWFhN2RhMWIxYmEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwYaEljh3dTrSmxEIe7t8WhdNWqQL 7kDPYrQhYNE6CVbOYAMb5zT4O3QWE8L4XgN/ToH/Dqon21IgPUAZmxtvaM/jLLW0 bxW80y7d352a9WWg69X1tjh7rdaaUKfVAmfLhVchhS4kPsnJJY2z66Ak8LfppPSj c1BdJIN07LapBxDnnyoXolPmcFEX8Pb+huezCo6HyQZWVxvquDNSzPylxiIG19rk cnwdL0/b983uZMvwsgjHlU6FwmJKAhvGDn7hEOpuTj1hasz7J4E/XUvG/unE3Ogj nLpq/LPjkf0Qn337OnV2+HU4D1TswJEzDEzvNzMSuYySgHFpfGZTdfz0DwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFN6gMY80O1okDJQ01mimqfaGxuiMB8GA1UdIwQY MBaAFGO+CNoasx4/mPVU+gE3P5TMkBHtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWTc0STJocXpIai1ZOVZUNkFUY19sTXlRRWUwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC85OWNiY2YtN2Q0Zi00YjEyLWE1Nzct Y2M4MDU0YTUxZDY2LzEvWTc0STJocXpIai1ZOVZUNkFUY19sTXlRRWUwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC85OWNiY2YtN2Q0Zi00YjEyLWE1NzctY2M4MDU0YTUxZDY2 LzEvWTc0STJocXpIai1ZOVZUNkFUY19sTXlRRWUwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAACUjYgJ5 6K++SYbmItPGMDv9exVm/Ms2ljkakUwqLILl4iOqu5pFbDU1+hwTzgMIWo2FUl9w O+2ORJNXA04rAD4sQ29xs/gpKnNYR3P0vCQVLt1l1yIaleqdoFmnnzzJcvwZXzbb 8Wmhx4HmhSO+r9Q8ir+XBH/dV7OwzzXK2TOj5GUSVFwSv8Y3BbRJHJEoDSghbAS9 gCfHNVkp0ghQAIdFNsCsFv6G+5LVGTxoHsH1+eYQPq/Xj8ENP4zUiKDepgv+RSmy Q2IclpzYZvoUTFgW12ALtMZytEIlQobOeIcYamkSa9ddYYyuse6JPZDNEjXjuHxN Zey8JrbS4Hi0wA== -----END CERTIFICATE-----Generated at Sat Dec 20 23:57:33 2025 by rpki-client