This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/3ad5e6-440b-453c-a29b-6fb67d9b8609/1/Y6wkfmJx8GSRY3K1If3IZJslTFU.mft File: Y6wkfmJx8GSRY3K1If3IZJslTFU.mft (raw, json) Hash identifier: vdH7m4wNq4HVK4nEHrpCVgXNddWONfc+wye3fdV0w7I= Subject key identifier: 70:B7:B4:49:C8:BB:0F:1A:8A:21:9E:EA:AE:A6:58:5E:69:9F:D5:3D Authority key identifier: 63:AC:24:7E:62:71:F0:64:91:63:72:B5:21:FD:C8:64:9B:25:4C:55 Certificate issuer: /CN=63ac247e6271f064916372b521fdc8649b254c55 Certificate serial: 019B3EDAD8227D15A1A2206A2596998BCEEE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y6wkfmJx8GSRY3K1If3IZJslTFU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/3ad5e6-440b-453c-a29b-6fb67d9b8609/1/Y6wkfmJx8GSRY3K1If3IZJslTFU.mft Manifest number: 0174 Signing time: Sun 21 Dec 2025 03:01:27 +0000 Manifest this update: Sun 21 Dec 2025 03:01:27 +0000 Manifest next update: Mon 22 Dec 2025 03:01:27 +0000 Files and hashes: 1: Y6wkfmJx8GSRY3K1If3IZJslTFU.crl (hash: gdAuqjZU56hlm0rvLvkoGteeDey7wnL/4KhwgZm8viU=) 2: t5kuZiYWUKa8KtyVbYW6nMpnU6k.roa (hash: LmnQkrb3HQUd6WNEyvE/YpZHC1nuWweBSns5N3HZYjE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/3ad5e6-440b-453c-a29b-6fb67d9b8609/1/Y6wkfmJx8GSRY3K1If3IZJslTFU.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/3ad5e6-440b-453c-a29b-6fb67d9b8609/1/Y6wkfmJx8GSRY3K1If3IZJslTFU.mft rsync://rpki.ripe.net/repository/DEFAULT/Y6wkfmJx8GSRY3K1If3IZJslTFU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 03:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:da:d8:22:7d:15:a1:a2:20:6a:25:96:99:8b:ce:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63ac247e6271f064916372b521fdc8649b254c55 Validity Not Before: Dec 21 03:01:27 2025 GMT Not After : Dec 22 03:01:27 2025 GMT Subject: CN=70b7b449c8bb0f1a8a219eeaaea6585e699fd53d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:82:50:a9:03:fd:35:73:77:1f:d0:36:b8:99: 85:f5:19:14:e9:91:0f:d2:56:57:78:b1:35:95:7b: 0c:01:f3:a7:99:14:78:72:94:ca:e7:97:70:10:37: 8c:62:39:be:eb:0a:a4:7f:31:aa:a8:7b:64:3f:c3: e7:c3:9d:40:58:87:c7:15:c2:26:f3:0a:a2:fa:12: d9:64:32:e8:83:05:e2:93:58:be:a7:ca:fd:fd:3c: aa:57:a5:57:70:15:90:67:c6:de:10:19:ce:21:cf: d4:cb:d1:57:dd:6a:c1:4d:a8:bc:f5:3f:7d:37:58: 14:d2:1c:06:33:ed:0f:a3:ea:e9:57:73:0f:bb:bf: 2f:03:7f:f4:b9:9a:9b:7e:25:0a:54:b6:1d:f0:50: 90:f8:6b:f4:3e:e5:5c:de:cc:14:56:a5:e7:2c:9f: 66:b2:1b:32:68:b3:98:24:67:32:05:41:44:b4:23: 7f:7f:ee:90:f4:7f:ed:8f:11:6e:d9:46:d1:b8:3f: 64:31:79:58:24:b4:f9:df:d7:35:7b:3e:c7:77:82: 85:83:23:fd:f9:34:34:82:6c:64:42:87:5e:8a:ea: f1:e9:a1:d0:1f:e8:9a:a9:69:11:2f:79:1c:2d:42: 20:89:0e:d7:22:4f:41:a1:ac:0e:61:eb:69:c7:ad: fc:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:B7:B4:49:C8:BB:0F:1A:8A:21:9E:EA:AE:A6:58:5E:69:9F:D5:3D X509v3 Authority Key Identifier: keyid:63:AC:24:7E:62:71:F0:64:91:63:72:B5:21:FD:C8:64:9B:25:4C:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y6wkfmJx8GSRY3K1If3IZJslTFU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/3ad5e6-440b-453c-a29b-6fb67d9b8609/1/Y6wkfmJx8GSRY3K1If3IZJslTFU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/3ad5e6-440b-453c-a29b-6fb67d9b8609/1/Y6wkfmJx8GSRY3K1If3IZJslTFU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:69:ef:de:9e:bd:4e:81:c5:fd:11:4b:5a:ff:55:05:93:1e: 08:81:e1:50:90:a8:c9:8a:09:ef:56:3c:fb:b4:ed:c1:b7:b1: d3:0c:17:61:2c:5f:a5:03:48:b1:f1:9d:76:b4:82:ce:8e:dd: ed:e7:95:88:f5:fc:23:e2:3b:03:a6:13:94:e9:c9:e6:26:93: ce:b1:b0:ea:e3:76:50:7b:40:9f:0f:77:19:01:8c:d2:96:12: 29:b4:1a:1d:08:b0:b2:a6:a0:8e:de:8f:95:11:ed:6c:5e:b3: b6:45:50:1d:5c:6c:66:72:57:d3:39:5b:51:98:6b:cf:38:2e: a9:a5:48:54:64:79:3f:51:d9:32:99:5c:64:ce:36:6c:6c:80: 8c:67:7a:f8:11:8d:c4:47:3d:46:59:85:2f:6d:ac:4b:8e:30: 68:df:50:8d:a7:4f:23:ca:e0:3c:65:78:61:62:18:e0:4b:1e: 56:cf:a3:95:e0:ba:c2:4b:41:01:45:5e:8e:38:c4:22:a5:3d: c7:6e:9a:0c:41:6f:50:c0:a2:fd:18:7b:59:f1:24:47:48:95: ea:b1:f6:bc:1d:67:17:32:52:d4:52:f9:a2:2b:80:8b:c9:46: 64:56:a4:6b:64:d9:fe:da:66:e7:2d:f7:e6:af:f9:2c:e0:74: 36:79:e2:5f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+2tgifRWhoiBqJZaZi87uMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzYWMyNDdlNjI3MWYwNjQ5MTYzNzJiNTIxZmRjODY0OWIy NTRjNTUwHhcNMjUxMjIxMDMwMTI3WhcNMjUxMjIyMDMwMTI3WjAzMTEwLwYDVQQD Eyg3MGI3YjQ0OWM4YmIwZjFhOGEyMTllZWFhZWE2NTg1ZTY5OWZkNTNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu4JQqQP9NXN3H9A2uJmF9RkU6ZEP 0lZXeLE1lXsMAfOnmRR4cpTK55dwEDeMYjm+6wqkfzGqqHtkP8Pnw51AWIfHFcIm 8wqi+hLZZDLogwXik1i+p8r9/TyqV6VXcBWQZ8beEBnOIc/Uy9FX3WrBTai89T99 N1gU0hwGM+0Po+rpV3MPu78vA3/0uZqbfiUKVLYd8FCQ+Gv0PuVc3swUVqXnLJ9m shsyaLOYJGcyBUFEtCN/f+6Q9H/tjxFu2UbRuD9kMXlYJLT539c1ez7Hd4KFgyP9 +TQ0gmxkQodeiurx6aHQH+iaqWkRL3kcLUIgiQ7XIk9BoawOYetpx6386QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHC3tEnIuw8aiiGe6q6mWF5pn9U9MB8GA1UdIwQY MBaAFGOsJH5icfBkkWNytSH9yGSbJUxVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWTZ3a2ZtSng4R1NSWTNLMUlmM0laSnNsVEZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy8zYWQ1ZTYtNDQwYi00NTNjLWEyOWIt NmZiNjdkOWI4NjA5LzEvWTZ3a2ZtSng4R1NSWTNLMUlmM0laSnNsVEZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy8zYWQ1ZTYtNDQwYi00NTNjLWEyOWItNmZiNjdkOWI4NjA5 LzEvWTZ3a2ZtSng4R1NSWTNLMUlmM0laSnNsVEZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX2nv3p69 ToHF/RFLWv9VBZMeCIHhUJCoyYoJ71Y8+7Ttwbex0wwXYSxfpQNIsfGddrSCzo7d 7eeViPX8I+I7A6YTlOnJ5iaTzrGw6uN2UHtAnw93GQGM0pYSKbQaHQiwsqagjt6P lRHtbF6ztkVQHVxsZnJX0zlbUZhrzzguqaVIVGR5P1HZMplcZM42bGyAjGd6+BGN xEc9RlmFL22sS44waN9QjadPI8rgPGV4YWIY4EseVs+jleC6wktBAUVejjjEIqU9 x26aDEFvUMCi/Rh7WfEkR0iV6rH2vB1nFzJS1FL5oiuAi8lGZFaka2TZ/tpm5y33 5q/5LOB0NnniXw== -----END CERTIFICATE-----Generated at Sun Dec 21 11:39:47 2025 by rpki-client