This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/860a5e-e0d0-44f5-9c54-3cc4ff9aa1bc/1/Y4xQnLd7AUm29m9QGfhYs6z5Quk.mft File: Y4xQnLd7AUm29m9QGfhYs6z5Quk.mft (raw, json) Hash identifier: 6DdpDuQ2FkDTV1+tdWz3j5/ZBFqqNYmDX7SAPSTueI4= Subject key identifier: C9:3E:3B:92:86:75:30:92:CF:D9:80:3C:E0:A4:E5:EA:BA:BF:0F:C8 Authority key identifier: 63:8C:50:9C:B7:7B:01:49:B6:F6:6F:50:19:F8:58:B3:AC:F9:42:E9 Certificate issuer: /CN=638c509cb77b0149b6f66f5019f858b3acf942e9 Certificate serial: 019B3A8FE90E571295566B4E6454DBB4CC1A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y4xQnLd7AUm29m9QGfhYs6z5Quk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/860a5e-e0d0-44f5-9c54-3cc4ff9aa1bc/1/Y4xQnLd7AUm29m9QGfhYs6z5Quk.mft Manifest number: 178F Signing time: Sat 20 Dec 2025 07:01:08 +0000 Manifest this update: Sat 20 Dec 2025 07:01:08 +0000 Manifest next update: Sun 21 Dec 2025 07:01:08 +0000 Files and hashes: 1: XVpCVjKP_Ci3PBb-SDD9rEF23jc.roa (hash: fb/E1ZjjaeELkfBCLdUXpvrP74l6BqHMfdZ9UTlkuWc=) 2: Y4xQnLd7AUm29m9QGfhYs6z5Quk.crl (hash: hKoReyeF6cBmXkCu6T+pcBQpSdiI73jKwJnPQUuioOU=) 3: Ygr-d1fsjv6D-0-qsUYAE5I_CT4.roa (hash: jcx2vm/E34fLSi/zBhEY8LVOd5D4GVaLPMNLqe0cuM4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/860a5e-e0d0-44f5-9c54-3cc4ff9aa1bc/1/Y4xQnLd7AUm29m9QGfhYs6z5Quk.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/860a5e-e0d0-44f5-9c54-3cc4ff9aa1bc/1/Y4xQnLd7AUm29m9QGfhYs6z5Quk.mft rsync://rpki.ripe.net/repository/DEFAULT/Y4xQnLd7AUm29m9QGfhYs6z5Quk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:8f:e9:0e:57:12:95:56:6b:4e:64:54:db:b4:cc:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=638c509cb77b0149b6f66f5019f858b3acf942e9 Validity Not Before: Dec 20 07:01:08 2025 GMT Not After : Dec 21 07:01:08 2025 GMT Subject: CN=c93e3b9286753092cfd9803ce0a4e5eababf0fc8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:08:52:63:d1:95:a5:ae:f1:a2:e6:86:71:da: dc:d1:d4:df:cf:84:48:36:39:97:9d:ec:fe:52:da: 3c:d0:af:fa:01:4a:58:9c:e6:23:3d:4d:a9:43:77: 14:ab:f5:b5:63:6e:a7:68:5f:b7:a1:ba:a4:a4:43: 30:d6:70:11:ad:00:04:69:17:f1:42:96:d0:06:f2: 4f:95:78:64:f3:9a:55:e8:32:09:64:ca:5e:29:a1: 6d:8c:7b:e2:c0:38:56:df:31:1c:08:b3:14:4f:55: 9b:d7:45:75:9a:fc:ce:80:77:df:ef:9e:80:df:3d: 8b:fe:fd:c4:70:31:88:3d:34:8e:72:4a:04:06:67: cc:3d:8d:66:06:e3:08:7d:08:68:51:cc:0b:72:7f: 77:ba:44:59:00:d6:d4:20:62:1f:00:d5:b2:b9:1f: b3:fd:cc:d6:fb:df:7b:ff:2d:9c:b6:44:d6:d8:c9: ce:a7:5a:fc:86:52:fd:fa:be:a6:47:8d:e3:16:b8: a5:35:82:91:fb:71:89:48:10:bf:f1:26:39:eb:4a: b4:2c:b5:9f:b8:40:2d:87:c8:56:13:60:1d:d7:6d: 79:a3:da:46:56:81:9a:8b:64:a0:e2:c3:61:7d:ac: 4b:d8:9c:25:9c:09:32:d9:31:ae:f7:38:0a:b0:3d: 45:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:3E:3B:92:86:75:30:92:CF:D9:80:3C:E0:A4:E5:EA:BA:BF:0F:C8 X509v3 Authority Key Identifier: keyid:63:8C:50:9C:B7:7B:01:49:B6:F6:6F:50:19:F8:58:B3:AC:F9:42:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y4xQnLd7AUm29m9QGfhYs6z5Quk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/860a5e-e0d0-44f5-9c54-3cc4ff9aa1bc/1/Y4xQnLd7AUm29m9QGfhYs6z5Quk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/860a5e-e0d0-44f5-9c54-3cc4ff9aa1bc/1/Y4xQnLd7AUm29m9QGfhYs6z5Quk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:a7:64:67:63:61:14:20:71:02:97:20:81:75:7a:65:a6:98: cf:33:ef:bc:49:a2:aa:89:b4:5b:2d:35:ee:d0:dd:c0:82:49: 3d:fd:2a:af:1a:6f:a8:8a:22:f2:96:16:db:cb:90:bb:3d:dd: 69:34:97:9c:a2:05:ce:81:71:cc:d2:e0:86:14:c5:77:45:76: bf:86:49:b6:73:e1:a7:8d:78:b2:19:ec:07:72:13:ae:b1:e4: 6f:3d:36:ca:a4:b3:33:72:06:74:cc:7a:86:c8:0b:62:23:d5: 72:04:61:53:5d:d9:6d:dc:b6:b8:83:f0:4a:a0:ef:5b:94:0a: d5:f5:68:9b:58:ac:25:3e:5e:74:24:86:29:51:b4:d9:c0:12: 4c:cd:81:d0:fe:cf:0c:6e:30:3e:f7:7e:79:09:65:39:9c:f5: c6:28:5a:5f:f8:86:d5:ad:08:64:66:28:e5:07:09:de:e5:ae: d6:b3:d0:55:a0:bc:85:31:63:0f:2f:ea:c4:27:e3:8f:b9:93: 4e:ea:28:8c:5a:43:cc:d4:24:ff:d7:f5:05:90:e3:a6:c4:b2: cc:9d:b8:0c:55:6f:40:6b:37:34:bb:28:f2:7a:8f:e5:ad:22: 0d:5c:36:5f:d1:c3:4a:47:fb:1c:97:a9:ce:81:0f:73:c5:c7: d5:a2:8c:83 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6j+kOVxKVVmtOZFTbtMwaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzOGM1MDljYjc3YjAxNDliNmY2NmY1MDE5Zjg1OGIzYWNm OTQyZTkwHhcNMjUxMjIwMDcwMTA4WhcNMjUxMjIxMDcwMTA4WjAzMTEwLwYDVQQD EyhjOTNlM2I5Mjg2NzUzMDkyY2ZkOTgwM2NlMGE0ZTVlYWJhYmYwZmM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwQhSY9GVpa7xouaGcdrc0dTfz4RI NjmXnez+Uto80K/6AUpYnOYjPU2pQ3cUq/W1Y26naF+3obqkpEMw1nARrQAEaRfx QpbQBvJPlXhk85pV6DIJZMpeKaFtjHviwDhW3zEcCLMUT1Wb10V1mvzOgHff756A 3z2L/v3EcDGIPTSOckoEBmfMPY1mBuMIfQhoUcwLcn93ukRZANbUIGIfANWyuR+z /czW+997/y2ctkTW2MnOp1r8hlL9+r6mR43jFrilNYKR+3GJSBC/8SY560q0LLWf uEAth8hWE2Ad1215o9pGVoGai2Sg4sNhfaxL2JwlnAky2TGu9zgKsD1FIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMk+O5KGdTCSz9mAPOCk5eq6vw/IMB8GA1UdIwQY MBaAFGOMUJy3ewFJtvZvUBn4WLOs+ULpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWTR4UW5MZDdBVW0yOW05UUdmaFlzNno1UXVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC84NjBhNWUtZTBkMC00NGY1LTljNTQt M2NjNGZmOWFhMWJjLzEvWTR4UW5MZDdBVW0yOW05UUdmaFlzNno1UXVrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC84NjBhNWUtZTBkMC00NGY1LTljNTQtM2NjNGZmOWFhMWJj LzEvWTR4UW5MZDdBVW0yOW05UUdmaFlzNno1UXVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACadkZ2Nh FCBxApcggXV6ZaaYzzPvvEmiqom0Wy017tDdwIJJPf0qrxpvqIoi8pYW28uQuz3d aTSXnKIFzoFxzNLghhTFd0V2v4ZJtnPhp414shnsB3ITrrHkbz02yqSzM3IGdMx6 hsgLYiPVcgRhU13Zbdy2uIPwSqDvW5QK1fVom1isJT5edCSGKVG02cASTM2B0P7P DG4wPvd+eQllOZz1xihaX/iG1a0IZGYo5QcJ3uWu1rPQVaC8hTFjDy/qxCfjj7mT TuoojFpDzNQk/9f1BZDjpsSyzJ24DFVvQGs3NLso8nqP5a0iDVw2X9HDSkf7HJep zoEPc8XH1aKMgw== -----END CERTIFICATE-----Generated at Sat Dec 20 10:45:42 2025 by rpki-client