This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/35656a-066e-49df-b709-7bfcd7e94b9e/1/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.mft File: Y8NEVcDU5Pw7ovHEbwi0dcj22YA.mft (raw, json) Hash identifier: 5n6KXl3nhBJLF1qc3Er5VOn5RlBXLIXnRbeUZI+MPWI= Subject key identifier: 62:1A:F5:6E:C3:76:C4:A9:B4:78:17:B8:C2:1E:74:38:6A:38:D7:CF Authority key identifier: 63:C3:44:55:C0:D4:E4:FC:3B:A2:F1:C4:6F:08:B4:75:C8:F6:D9:80 Certificate issuer: /CN=63c34455c0d4e4fc3ba2f1c46f08b475c8f6d980 Certificate serial: 019B3EA38481668A52551A2D7170472BED87 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/35656a-066e-49df-b709-7bfcd7e94b9e/1/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.mft Manifest number: 0E0D Signing time: Sun 21 Dec 2025 02:01:02 +0000 Manifest this update: Sun 21 Dec 2025 02:01:02 +0000 Manifest next update: Mon 22 Dec 2025 02:01:02 +0000 Files and hashes: 1: 1c8AtbAMfHlASe1nRmNmVLi-IPE.roa (hash: Yc6B/ACFRjBHZdeDucnbU591dd3oO9WG4VeSfIdJAWg=) 2: B-YGSnw6mlzmsy9e1WdnYiYl8uA.roa (hash: dqAKP/dgHYPVRyqQIAqMlRLtWiN+IpM+mjudxWdaulM=) 3: Y8NEVcDU5Pw7ovHEbwi0dcj22YA.crl (hash: tWsJpI5tG9SJdGnU+8T5zypbugvYDvwXOsdD1Ea6isk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/35656a-066e-49df-b709-7bfcd7e94b9e/1/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/35656a-066e-49df-b709-7bfcd7e94b9e/1/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.mft rsync://rpki.ripe.net/repository/DEFAULT/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:a3:84:81:66:8a:52:55:1a:2d:71:70:47:2b:ed:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63c34455c0d4e4fc3ba2f1c46f08b475c8f6d980 Validity Not Before: Dec 21 02:01:02 2025 GMT Not After : Dec 22 02:01:02 2025 GMT Subject: CN=621af56ec376c4a9b47817b8c21e74386a38d7cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:6a:16:66:19:a4:82:62:8d:e0:4e:b6:fe:73: 9c:3a:c1:6a:6b:a9:54:7a:93:0b:04:35:91:b6:ce: f8:60:68:78:f9:b7:9a:69:5d:69:51:8e:d4:ef:7a: 2e:20:e1:52:96:68:67:00:ec:6d:78:6b:ab:eb:cb: d1:cb:6a:bc:46:ba:77:77:ab:eb:e4:14:81:0f:94: aa:84:38:94:1e:a2:83:2f:c8:cd:c4:6f:89:b5:1c: 8d:bc:30:c9:28:3c:04:84:19:d1:ca:87:3a:f7:92: 75:0d:44:4f:f3:43:41:14:0d:b5:70:1e:36:00:dc: ed:ad:b3:02:38:f1:9e:78:30:33:fd:ec:91:34:37: 31:41:c4:7b:15:1a:1f:fd:af:b7:97:76:63:d5:96: 94:75:0c:b4:31:f0:7f:df:cf:0a:60:63:33:3c:df: 7f:c4:e0:1a:1b:d3:17:91:fb:3b:fe:c1:1e:4f:9c: 0c:67:0e:37:c4:03:1f:92:8a:4f:75:b2:a9:3a:c5: ca:14:71:a2:ad:fc:ae:74:33:d1:dc:44:06:70:76: 63:3b:a6:a9:5a:2e:29:ae:81:51:c0:b5:1a:13:52: bf:d9:5c:45:ba:8b:d2:12:93:bb:56:bf:6d:f6:13: fe:cf:e9:be:6e:a8:7a:31:38:41:fc:3b:46:b3:52: c7:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:1A:F5:6E:C3:76:C4:A9:B4:78:17:B8:C2:1E:74:38:6A:38:D7:CF X509v3 Authority Key Identifier: keyid:63:C3:44:55:C0:D4:E4:FC:3B:A2:F1:C4:6F:08:B4:75:C8:F6:D9:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/35656a-066e-49df-b709-7bfcd7e94b9e/1/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/35656a-066e-49df-b709-7bfcd7e94b9e/1/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:d3:4d:3a:aa:14:01:10:42:2d:4c:69:6c:fa:30:ad:59:f9: 7a:48:74:f2:5d:22:44:8c:07:e1:90:02:d3:b5:20:45:02:7f: 03:9e:e5:27:a1:c7:19:6c:ac:af:71:cf:03:da:78:03:52:da: f3:2d:74:68:1d:3f:07:b3:5c:d9:2d:52:ca:ac:d1:d7:cf:e0: 6e:70:67:c1:ea:05:79:b0:f9:eb:6d:59:b5:52:e3:0d:c9:0b: 64:36:78:d8:c8:9f:33:54:8d:f6:a7:9f:f3:95:a2:12:86:6b: 2e:10:6a:e2:87:fc:e8:71:0d:c1:85:5f:b2:28:e6:67:1f:ad: d1:29:9c:3b:71:1f:ca:15:e8:c1:ac:c8:65:d8:06:dc:0e:e5: a4:e0:b2:d6:2d:87:f4:de:11:77:93:61:7b:60:6e:93:af:b4: 9a:19:18:ce:c0:0a:4a:13:f5:30:20:5e:4f:9a:18:6f:b0:5e: 5f:a6:59:a8:f4:5b:1b:e2:93:88:6c:55:9c:a5:49:eb:7e:e3: ca:5c:5b:a8:d0:7e:6e:db:aa:c4:a9:09:ee:4d:cf:6e:36:ce: be:21:73:7b:a1:47:84:38:15:7e:d2:14:6a:54:5c:12:a7:ed: 13:ad:3f:45:f6:a8:32:3d:21:f8:3e:50:6c:03:e1:00:4a:7b: 9b:30:b9:7d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+o4SBZopSVRotcXBHK+2HMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzYzM0NDU1YzBkNGU0ZmMzYmEyZjFjNDZmMDhiNDc1Yzhm NmQ5ODAwHhcNMjUxMjIxMDIwMTAyWhcNMjUxMjIyMDIwMTAyWjAzMTEwLwYDVQQD Eyg2MjFhZjU2ZWMzNzZjNGE5YjQ3ODE3YjhjMjFlNzQzODZhMzhkN2NmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlGoWZhmkgmKN4E62/nOcOsFqa6lU epMLBDWRts74YGh4+beaaV1pUY7U73ouIOFSlmhnAOxteGur68vRy2q8Rrp3d6vr 5BSBD5SqhDiUHqKDL8jNxG+JtRyNvDDJKDwEhBnRyoc695J1DURP80NBFA21cB42 ANztrbMCOPGeeDAz/eyRNDcxQcR7FRof/a+3l3Zj1ZaUdQy0MfB/388KYGMzPN9/ xOAaG9MXkfs7/sEeT5wMZw43xAMfkopPdbKpOsXKFHGirfyudDPR3EQGcHZjO6ap Wi4proFRwLUaE1K/2VxFuovSEpO7Vr9t9hP+z+m+bqh6MThB/DtGs1LHVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGIa9W7DdsSptHgXuMIedDhqONfPMB8GA1UdIwQY MBaAFGPDRFXA1OT8O6LxxG8ItHXI9tmAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWThORVZjRFU1UHc3b3ZIRWJ3aTBkY2oyMllBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi8zNTY1NmEtMDY2ZS00OWRmLWI3MDkt N2JmY2Q3ZTk0YjllLzEvWThORVZjRFU1UHc3b3ZIRWJ3aTBkY2oyMllBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi8zNTY1NmEtMDY2ZS00OWRmLWI3MDktN2JmY2Q3ZTk0Yjll LzEvWThORVZjRFU1UHc3b3ZIRWJ3aTBkY2oyMllBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVtNNOqoU ARBCLUxpbPowrVn5ekh08l0iRIwH4ZAC07UgRQJ/A57lJ6HHGWysr3HPA9p4A1La 8y10aB0/B7Nc2S1SyqzR18/gbnBnweoFebD5621ZtVLjDckLZDZ42MifM1SN9qef 85WiEoZrLhBq4of86HENwYVfsijmZx+t0SmcO3EfyhXowazIZdgG3A7lpOCy1i2H 9N4Rd5Nhe2Buk6+0mhkYzsAKShP1MCBeT5oYb7BeX6ZZqPRbG+KTiGxVnKVJ637j ylxbqNB+btuqxKkJ7k3PbjbOviFze6FHhDgVftIUalRcEqftE60/RfaoMj0h+D5Q bAPhAEp7mzC5fQ== -----END CERTIFICATE-----Generated at Sun Dec 21 06:54:45 2025 by rpki-client