This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/83607f-14b4-4217-b6cd-b7bae910c7ac/1/Y0FqyaIZN3iMrcd7ep-JttTFWko.mft File: Y0FqyaIZN3iMrcd7ep-JttTFWko.mft (raw, json) Hash identifier: LR038UbVgPUWtazwd1owaaYENMkKdtgYGF2D++y+bBg= Subject key identifier: EB:8F:33:BE:95:42:6C:B6:27:FD:3F:40:3A:68:BF:78:65:6F:82:6E Authority key identifier: 63:41:6A:C9:A2:19:37:78:8C:AD:C7:7B:7A:9F:89:B6:D4:C5:5A:4A Certificate issuer: /CN=63416ac9a21937788cadc77b7a9f89b6d4c55a4a Certificate serial: 019B3BD997D3765ED81A0466D69E7A2E4EC9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y0FqyaIZN3iMrcd7ep-JttTFWko.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/83607f-14b4-4217-b6cd-b7bae910c7ac/1/Y0FqyaIZN3iMrcd7ep-JttTFWko.mft Manifest number: 1787 Signing time: Sat 20 Dec 2025 13:01:14 +0000 Manifest this update: Sat 20 Dec 2025 13:01:14 +0000 Manifest next update: Sun 21 Dec 2025 13:01:14 +0000 Files and hashes: 1: 0UbqABxvR9Kqt-i2oDJKBmEOIcY.roa (hash: sOBF/jnuYbPKw9b4UfAAmGDCy2JYvqAzi0krYUHoJ4Y=) 2: Y0FqyaIZN3iMrcd7ep-JttTFWko.crl (hash: +YppilNR4bGSx5vvdqI9TYGNxZnNwaL+coJTL5vqvkY=) 3: _wI9dgfN1p8T3ArXyq7NUMinHsQ.roa (hash: zHVbZrPjByz7ecEstvck1XG+KadlzRwYPNhhpEtqQfI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/83607f-14b4-4217-b6cd-b7bae910c7ac/1/Y0FqyaIZN3iMrcd7ep-JttTFWko.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/83607f-14b4-4217-b6cd-b7bae910c7ac/1/Y0FqyaIZN3iMrcd7ep-JttTFWko.mft rsync://rpki.ripe.net/repository/DEFAULT/Y0FqyaIZN3iMrcd7ep-JttTFWko.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 13:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:d9:97:d3:76:5e:d8:1a:04:66:d6:9e:7a:2e:4e:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63416ac9a21937788cadc77b7a9f89b6d4c55a4a Validity Not Before: Dec 20 13:01:14 2025 GMT Not After : Dec 21 13:01:14 2025 GMT Subject: CN=eb8f33be95426cb627fd3f403a68bf78656f826e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:45:f6:bd:ae:52:78:5b:79:9f:e4:27:ec:08: d6:67:a5:b4:0d:b0:a4:c1:88:e3:df:74:ac:f9:0e: 57:6e:34:f2:af:f4:cc:a7:df:23:5f:ff:30:6b:f8: 38:47:00:76:bf:13:cf:34:cf:f7:4e:6a:c3:fc:1f: bc:81:d4:5b:03:77:b7:23:2e:00:e5:05:08:67:1d: d5:c5:27:b9:8b:39:fe:7d:2b:ac:36:48:79:76:2d: 6b:f4:f2:85:d1:b1:9d:68:80:75:ce:0d:c6:9b:87: 83:84:7c:8d:4c:eb:b3:35:19:d3:4f:1e:1a:dc:5e: 06:2a:5b:9e:4d:65:0b:34:96:aa:63:75:60:1a:1a: c9:d5:14:3f:0c:f8:4c:9f:8f:37:6c:1a:b8:5e:31: b9:7c:ff:ff:89:cc:b4:ec:12:5f:f3:3e:2c:a4:3d: ed:c4:b9:85:7a:44:a2:96:d7:05:bc:05:be:1b:a5: e7:57:31:a7:e8:ed:8d:4e:1f:f5:17:21:2f:89:c5: f2:f0:b7:61:cc:a1:b7:6b:f0:26:26:77:b7:97:d3: a0:71:7f:ed:7e:a7:1e:f4:15:5a:f6:0c:3a:ca:f4: 6f:16:39:a4:d9:f8:ef:c6:55:12:81:11:57:3c:03: cd:af:5d:02:81:65:7d:13:d7:6e:bd:7a:cf:a5:c8: 3d:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:8F:33:BE:95:42:6C:B6:27:FD:3F:40:3A:68:BF:78:65:6F:82:6E X509v3 Authority Key Identifier: keyid:63:41:6A:C9:A2:19:37:78:8C:AD:C7:7B:7A:9F:89:B6:D4:C5:5A:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y0FqyaIZN3iMrcd7ep-JttTFWko.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/83607f-14b4-4217-b6cd-b7bae910c7ac/1/Y0FqyaIZN3iMrcd7ep-JttTFWko.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/83607f-14b4-4217-b6cd-b7bae910c7ac/1/Y0FqyaIZN3iMrcd7ep-JttTFWko.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:2c:3b:2d:7c:d3:a7:a9:67:d5:87:29:3b:06:a5:a5:88:ae: e5:3d:53:9c:b5:7e:4b:7c:5a:ec:9d:10:b1:05:63:06:d6:10: 8e:b3:d6:18:47:e8:f5:38:8e:ab:ee:7c:15:51:f8:ea:60:3c: d9:f3:a0:50:68:bb:5c:11:ed:d8:16:20:b8:87:60:96:87:34: 9e:7f:ce:43:e2:c7:9d:a4:9b:81:ff:55:e2:0e:54:1c:d7:2c: ff:0c:af:55:e8:16:f1:d7:be:70:9e:d1:53:2b:74:cd:70:7c: 38:06:b8:7c:66:29:fc:5d:77:9a:f1:02:ab:0b:d9:e5:05:64: 6e:05:02:02:0c:7f:9c:de:93:d3:4a:98:07:0e:41:0f:82:2e: fb:94:0e:f7:f6:63:b9:44:f3:8a:0d:c5:dd:48:8d:ee:94:64: a0:9a:af:f8:be:b2:3f:83:6a:4e:d5:2a:2b:d5:28:da:a6:50: cd:cb:e8:d0:ac:76:36:11:50:8d:0d:20:03:8c:ca:e6:a3:37: f9:9c:a1:7a:45:55:58:ee:50:b8:ad:df:01:62:0b:20:ba:5f: 65:de:50:40:23:17:fa:4c:8f:cc:74:39:fe:34:19:2d:ed:2c: 82:ec:e1:15:11:3a:71:92:70:56:a3:fb:2e:09:4f:1c:67:4d: 2f:f5:7f:e6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs72ZfTdl7YGgRm1p56Lk7JMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzNDE2YWM5YTIxOTM3Nzg4Y2FkYzc3YjdhOWY4OWI2ZDRj NTVhNGEwHhcNMjUxMjIwMTMwMTE0WhcNMjUxMjIxMTMwMTE0WjAzMTEwLwYDVQQD EyhlYjhmMzNiZTk1NDI2Y2I2MjdmZDNmNDAzYTY4YmY3ODY1NmY4MjZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnkX2va5SeFt5n+Qn7AjWZ6W0DbCk wYjj33Ss+Q5XbjTyr/TMp98jX/8wa/g4RwB2vxPPNM/3TmrD/B+8gdRbA3e3Iy4A 5QUIZx3VxSe5izn+fSusNkh5di1r9PKF0bGdaIB1zg3Gm4eDhHyNTOuzNRnTTx4a 3F4GKlueTWULNJaqY3VgGhrJ1RQ/DPhMn483bBq4XjG5fP//icy07BJf8z4spD3t xLmFekSiltcFvAW+G6XnVzGn6O2NTh/1FyEvicXy8LdhzKG3a/AmJne3l9OgcX/t fqce9BVa9gw6yvRvFjmk2fjvxlUSgRFXPAPNr10CgWV9E9duvXrPpcg9kQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOuPM76VQmy2J/0/QDpov3hlb4JuMB8GA1UdIwQY MBaAFGNBasmiGTd4jK3He3qfibbUxVpKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWTBGcXlhSVpOM2lNcmNkN2VwLUp0dFRGV2tvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy84MzYwN2YtMTRiNC00MjE3LWI2Y2Qt YjdiYWU5MTBjN2FjLzEvWTBGcXlhSVpOM2lNcmNkN2VwLUp0dFRGV2tvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy84MzYwN2YtMTRiNC00MjE3LWI2Y2QtYjdiYWU5MTBjN2Fj LzEvWTBGcXlhSVpOM2lNcmNkN2VwLUp0dFRGV2tvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATCw7LXzT p6ln1YcpOwalpYiu5T1TnLV+S3xa7J0QsQVjBtYQjrPWGEfo9TiOq+58FVH46mA8 2fOgUGi7XBHt2BYguIdgloc0nn/OQ+LHnaSbgf9V4g5UHNcs/wyvVegW8de+cJ7R Uyt0zXB8OAa4fGYp/F13mvECqwvZ5QVkbgUCAgx/nN6T00qYBw5BD4Iu+5QO9/Zj uUTzig3F3UiN7pRkoJqv+L6yP4NqTtUqK9Uo2qZQzcvo0Kx2NhFQjQ0gA4zK5qM3 +ZyhekVVWO5QuK3fAWILILpfZd5QQCMX+kyPzHQ5/jQZLe0sguzhFRE6cZJwVqP7 LglPHGdNL/V/5g== -----END CERTIFICATE-----Generated at Sat Dec 20 21:46:03 2025 by rpki-client