This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/1fde18-2873-4fe0-869c-3820f7ee2cb8/1/Y0laTOy-r7Pq327QNJuwuW2kZO4.mft
File: Y0laTOy-r7Pq327QNJuwuW2kZO4.mft (raw, json)
Hash identifier: eIOd4N6p4Q1nv0iWvAiTGb2pOdb0bFjVaJMpPbqraWQ=
Subject key identifier: E6:27:3A:72:36:CB:6F:DF:C3:83:EF:A5:A5:D4:E9:6C:74:55:47:06
Authority key identifier: 63:49:5A:4C:EC:BE:AF:B3:EA:DF:6E:D0:34:9B:B0:B9:6D:A4:64:EE
Certificate issuer: /CN=63495a4cecbeafb3eadf6ed0349bb0b96da464ee
Certificate serial: 019B3C7E489156361D84EB5ADF0E6335107D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y0laTOy-r7Pq327QNJuwuW2kZO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/1fde18-2873-4fe0-869c-3820f7ee2cb8/1/Y0laTOy-r7Pq327QNJuwuW2kZO4.mft
Manifest number: 0E1A
Signing time: Sat 20 Dec 2025 16:01:07 +0000
Manifest this update: Sat 20 Dec 2025 16:01:07 +0000
Manifest next update: Sun 21 Dec 2025 16:01:07 +0000
Files and hashes: 1: GHhiTWJIrRnBFMlK6xuYQ1nDUn8.roa (hash: MsTf0syszxTszc8q1axFwJFUrUTMc1YgfxQY+NXxD28=)
2: Y0laTOy-r7Pq327QNJuwuW2kZO4.crl (hash: ihmoLpvb0fBFQ9kN7bzQRywbAUfP+pSCbDvlihGTrPE=)
3: r8SyFv2fzba2rsaAZpaSWzcngkw.roa (hash: nKMxn+pRmGytAQ++Vu6+D6lCb2MTuAqsH86iDcF9gs0=)
4: yLm-AHf2Wu1baGR2558SeGJ9vpc.roa (hash: /Bd5Eq0QqwLJoY4wAtUd+ZWldK7GG5PZ0zCSIxN6jTY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/1fde18-2873-4fe0-869c-3820f7ee2cb8/1/Y0laTOy-r7Pq327QNJuwuW2kZO4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/1fde18-2873-4fe0-869c-3820f7ee2cb8/1/Y0laTOy-r7Pq327QNJuwuW2kZO4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y0laTOy-r7Pq327QNJuwuW2kZO4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Dec 2025 15:46:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:3c:7e:48:91:56:36:1d:84:eb:5a:df:0e:63:35:10:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63495a4cecbeafb3eadf6ed0349bb0b96da464ee
Validity
Not Before: Dec 20 16:01:07 2025 GMT
Not After : Dec 21 16:01:07 2025 GMT
Subject: CN=e6273a7236cb6fdfc383efa5a5d4e96c74554706
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:e4:44:d4:ef:86:37:53:13:d3:f5:e0:57:4f:
f0:e7:7e:9c:c4:3b:a2:b1:58:ff:ce:58:17:f1:4d:
66:8e:7d:e3:7b:eb:1a:7e:47:2c:48:eb:46:c3:c3:
37:ac:cb:41:5a:08:17:6d:38:80:b4:17:a7:9d:71:
96:5a:16:c9:79:d4:de:36:fe:e3:b8:ef:62:09:fb:
f5:6f:66:1a:75:7d:e9:93:84:69:e0:bc:e4:3a:8a:
a4:72:70:0f:04:30:21:6c:81:d9:c5:bc:52:fa:19:
d4:5e:2b:5b:8f:37:b6:5d:7c:a4:a1:c1:42:13:33:
ea:17:45:04:46:81:68:f4:1b:a6:73:3e:f5:d9:2f:
3d:c3:39:2f:05:66:de:71:86:1a:95:02:e2:da:61:
d2:5b:2f:0e:fa:ae:ad:d5:84:0f:cd:33:c9:86:9d:
46:98:8d:7b:fe:22:9e:72:8e:59:32:da:1d:8b:69:
80:e5:b5:bb:53:50:43:25:6b:74:37:b5:3a:02:ab:
0c:5e:71:86:37:16:6a:83:37:29:c5:db:9a:99:97:
1b:b0:de:8e:6f:13:6e:58:4c:50:e1:3d:35:d9:3e:
ee:7c:5a:87:5e:17:a6:c9:f9:f4:1e:73:b3:37:60:
e6:b2:4b:d0:4e:23:91:fd:00:13:b1:21:29:3f:ea:
1c:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:27:3A:72:36:CB:6F:DF:C3:83:EF:A5:A5:D4:E9:6C:74:55:47:06
X509v3 Authority Key Identifier:
keyid:63:49:5A:4C:EC:BE:AF:B3:EA:DF:6E:D0:34:9B:B0:B9:6D:A4:64:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y0laTOy-r7Pq327QNJuwuW2kZO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/1fde18-2873-4fe0-869c-3820f7ee2cb8/1/Y0laTOy-r7Pq327QNJuwuW2kZO4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/1fde18-2873-4fe0-869c-3820f7ee2cb8/1/Y0laTOy-r7Pq327QNJuwuW2kZO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:b9:90:f0:10:48:ab:e4:2b:a8:11:50:d2:7e:40:b8:d8:77:
fa:68:1b:69:e8:3e:c8:69:fc:e9:2d:37:49:dc:0c:96:1f:74:
57:06:80:6b:9e:76:47:b9:1b:3a:59:d5:42:f9:02:b4:73:68:
3c:fe:78:9a:ff:bb:37:de:61:14:9d:02:70:0f:c0:19:0d:43:
5c:6d:35:0d:55:c1:70:4c:9d:7c:bf:7b:55:74:8a:ce:a2:ac:
55:08:c1:14:2e:55:e1:5d:7c:84:90:5c:9e:f9:64:92:7a:47:
60:8f:d8:64:ee:70:46:a3:ee:9a:3a:05:35:55:4e:9f:07:ac:
af:e4:eb:2c:e1:3e:c6:56:90:25:0e:cc:13:06:05:99:65:23:
40:fb:c0:b4:29:58:4b:4e:d8:f4:f2:55:bd:4d:6f:8c:ef:ab:
40:c6:de:2d:01:36:7c:ca:63:7f:e9:0e:85:bb:4e:41:30:41:
27:11:05:96:c2:cf:43:89:6b:b5:15:90:d5:54:bb:f0:ba:93:
7f:7e:77:8e:a5:94:eb:4d:b9:c0:2f:36:5f:49:7a:df:f9:23:
06:17:47:78:42:bf:c5:03:53:84:45:94:74:88:5c:f8:59:9c:
ed:04:59:7d:74:bb:fe:25:f8:4f:b5:c4:ba:9e:85:c7:1f:91:
9f:4b:b2:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 22:35:35 2025 by rpki-client