This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/83607f-14b4-4217-b6cd-b7bae910c7ac/1/Y0FqyaIZN3iMrcd7ep-JttTFWko.mft File: Y0FqyaIZN3iMrcd7ep-JttTFWko.mft (raw, json) Hash identifier: LGIrZmD2PTB/5hqgoy2jQyZ+XHtqsNjDxSyiNRNyyV0= Subject key identifier: 8F:28:68:04:E6:2C:B4:DC:D3:9B:5E:40:0C:DD:E8:37:71:24:05:AF Authority key identifier: 63:41:6A:C9:A2:19:37:78:8C:AD:C7:7B:7A:9F:89:B6:D4:C5:5A:4A Certificate issuer: /CN=63416ac9a21937788cadc77b7a9f89b6d4c55a4a Certificate serial: 019B476F97568C4A41AA3286F47460F3FCDA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y0FqyaIZN3iMrcd7ep-JttTFWko.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/83607f-14b4-4217-b6cd-b7bae910c7ac/1/Y0FqyaIZN3iMrcd7ep-JttTFWko.mft Manifest number: 178D Signing time: Mon 22 Dec 2025 19:00:54 +0000 Manifest this update: Mon 22 Dec 2025 19:00:54 +0000 Manifest next update: Tue 23 Dec 2025 19:00:54 +0000 Files and hashes: 1: 0UbqABxvR9Kqt-i2oDJKBmEOIcY.roa (hash: sOBF/jnuYbPKw9b4UfAAmGDCy2JYvqAzi0krYUHoJ4Y=) 2: Y0FqyaIZN3iMrcd7ep-JttTFWko.crl (hash: 1kFN/Ndz4z29DdtBbSwnLCWNHfxhoy7rtIEPxT/8JAw=) 3: _wI9dgfN1p8T3ArXyq7NUMinHsQ.roa (hash: zHVbZrPjByz7ecEstvck1XG+KadlzRwYPNhhpEtqQfI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/83607f-14b4-4217-b6cd-b7bae910c7ac/1/Y0FqyaIZN3iMrcd7ep-JttTFWko.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/83607f-14b4-4217-b6cd-b7bae910c7ac/1/Y0FqyaIZN3iMrcd7ep-JttTFWko.mft rsync://rpki.ripe.net/repository/DEFAULT/Y0FqyaIZN3iMrcd7ep-JttTFWko.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 19:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:47:6f:97:56:8c:4a:41:aa:32:86:f4:74:60:f3:fc:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63416ac9a21937788cadc77b7a9f89b6d4c55a4a Validity Not Before: Dec 22 19:00:54 2025 GMT Not After : Dec 23 19:00:54 2025 GMT Subject: CN=8f286804e62cb4dcd39b5e400cdde837712405af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:36:95:17:60:c7:6e:76:03:5b:f6:cc:03:41: 50:34:f4:60:46:3c:9b:1d:83:f0:27:d3:c6:db:14: a1:20:a2:ac:d7:d5:01:bf:08:0c:f4:83:9f:ec:a1: 46:0f:e2:cb:42:20:2e:b8:ea:52:82:74:7a:83:63: ff:59:07:57:fc:ae:fd:1d:45:e7:20:78:48:0e:56: 30:20:b6:a8:41:0f:4b:9d:df:d7:59:78:90:48:3e: d7:68:82:e3:3d:03:fc:76:07:3b:11:f9:15:ed:af: 03:82:0d:e8:d3:e3:ba:13:07:1d:89:1a:d4:d5:43: cc:da:81:7b:4b:92:74:93:8f:fc:e6:77:93:e7:92: 0a:ad:57:a9:46:13:d4:73:b7:c2:4c:ff:3a:34:3a: fe:18:99:c7:f4:76:e6:41:87:79:bc:7d:a1:c7:b3: 81:c3:dc:52:0c:43:87:08:47:df:5a:07:49:dc:50: 15:5b:38:ff:e4:a8:a1:c3:0a:0b:50:60:60:07:ea: 86:1b:ad:b5:fb:39:d6:9d:d4:c8:24:a3:8b:5d:19: 0d:d9:89:08:ae:9f:75:0d:31:7f:bc:82:da:90:dd: 09:f7:60:ac:23:16:be:dd:4a:68:56:ee:a6:80:7d: e0:6e:3b:bb:83:88:42:08:7e:bf:f7:d1:a7:ea:ae: 31:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:28:68:04:E6:2C:B4:DC:D3:9B:5E:40:0C:DD:E8:37:71:24:05:AF X509v3 Authority Key Identifier: keyid:63:41:6A:C9:A2:19:37:78:8C:AD:C7:7B:7A:9F:89:B6:D4:C5:5A:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y0FqyaIZN3iMrcd7ep-JttTFWko.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/83607f-14b4-4217-b6cd-b7bae910c7ac/1/Y0FqyaIZN3iMrcd7ep-JttTFWko.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/83607f-14b4-4217-b6cd-b7bae910c7ac/1/Y0FqyaIZN3iMrcd7ep-JttTFWko.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:60:df:8c:be:16:fe:1a:54:75:0b:25:bf:90:a9:28:2d:07: 04:00:81:74:fa:67:74:c9:76:6e:60:d5:0f:fe:18:10:91:66: 03:b4:f7:76:d0:23:10:d3:2c:54:c8:5f:f7:6c:df:91:5e:3a: 9e:b6:68:c0:e0:72:1e:09:08:41:b8:64:89:4b:0e:e5:08:3f: 5e:1f:da:42:66:c8:a2:71:aa:6e:48:4c:34:22:31:41:63:d9: e0:1e:52:e3:76:d1:b8:36:bd:ad:08:86:5c:3e:ca:d1:75:57: 9e:32:25:d2:2a:64:74:37:c2:55:11:fc:03:28:eb:c2:36:fc: 7e:a7:e2:77:60:37:36:7b:ec:4f:86:34:8d:5a:5b:f4:cb:da: db:29:b7:7c:9b:c3:44:71:ac:5f:f4:c9:c5:68:00:59:44:ed: c7:d0:6b:7d:f0:d3:2f:c4:3d:ec:4c:64:c0:ef:bc:a7:06:98: 73:9f:28:7a:45:f5:b4:2e:34:f6:e7:a5:0a:88:02:c8:cc:57: f0:09:36:e9:d0:89:c0:4d:02:92:3c:09:f2:78:e8:8b:e6:9c: fb:4a:28:6b:98:c6:0d:f5:f4:29:2e:44:ae:0c:cb:8a:16:c8: 77:34:46:a5:24:5c:b3:b2:20:63:5e:e4:85:df:fa:7b:64:3d: 28:f6:30:4a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtHb5dWjEpBqjKG9HRg8/zaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzNDE2YWM5YTIxOTM3Nzg4Y2FkYzc3YjdhOWY4OWI2ZDRj NTVhNGEwHhcNMjUxMjIyMTkwMDU0WhcNMjUxMjIzMTkwMDU0WjAzMTEwLwYDVQQD Eyg4ZjI4NjgwNGU2MmNiNGRjZDM5YjVlNDAwY2RkZTgzNzcxMjQwNWFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAozaVF2DHbnYDW/bMA0FQNPRgRjyb HYPwJ9PG2xShIKKs19UBvwgM9IOf7KFGD+LLQiAuuOpSgnR6g2P/WQdX/K79HUXn IHhIDlYwILaoQQ9Lnd/XWXiQSD7XaILjPQP8dgc7EfkV7a8Dgg3o0+O6EwcdiRrU 1UPM2oF7S5J0k4/85neT55IKrVepRhPUc7fCTP86NDr+GJnH9HbmQYd5vH2hx7OB w9xSDEOHCEffWgdJ3FAVWzj/5KihwwoLUGBgB+qGG621+znWndTIJKOLXRkN2YkI rp91DTF/vILakN0J92CsIxa+3UpoVu6mgH3gbju7g4hCCH6/99Gn6q4xQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI8oaATmLLTc05teQAzd6DdxJAWvMB8GA1UdIwQY MBaAFGNBasmiGTd4jK3He3qfibbUxVpKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWTBGcXlhSVpOM2lNcmNkN2VwLUp0dFRGV2tvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy84MzYwN2YtMTRiNC00MjE3LWI2Y2Qt YjdiYWU5MTBjN2FjLzEvWTBGcXlhSVpOM2lNcmNkN2VwLUp0dFRGV2tvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy84MzYwN2YtMTRiNC00MjE3LWI2Y2QtYjdiYWU5MTBjN2Fj LzEvWTBGcXlhSVpOM2lNcmNkN2VwLUp0dFRGV2tvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACmDfjL4W /hpUdQslv5CpKC0HBACBdPpndMl2bmDVD/4YEJFmA7T3dtAjENMsVMhf92zfkV46 nrZowOByHgkIQbhkiUsO5Qg/Xh/aQmbIonGqbkhMNCIxQWPZ4B5S43bRuDa9rQiG XD7K0XVXnjIl0ipkdDfCVRH8Ayjrwjb8fqfid2A3NnvsT4Y0jVpb9Mva2ym3fJvD RHGsX/TJxWgAWUTtx9BrffDTL8Q97ExkwO+8pwaYc58oekX1tC409uelCogCyMxX 8Ak26dCJwE0CkjwJ8njoi+ac+0ooa5jGDfX0KS5ErgzLihbIdzRGpSRcs7IgY17k hd/6e2Q9KPYwSg== -----END CERTIFICATE-----Generated at Tue Dec 23 03:46:09 2025 by rpki-client