This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/fe7fc2-41cc-467d-980b-f5af616b5483/1/Y11bZE4i-0iOTWwAErCqvyOOYeU.mft File: Y11bZE4i-0iOTWwAErCqvyOOYeU.mft (raw, json) Hash identifier: yLwjaZkfj/8d8P2ECVGmJQ4uxPnNO8CrxOxMRsStqwk= Subject key identifier: 04:3C:FB:16:60:8A:35:6D:B4:F9:CB:50:55:09:46:32:DF:AB:A1:D7 Authority key identifier: 63:5D:5B:64:4E:22:FB:48:8E:4D:6C:00:12:B0:AA:BF:23:8E:61:E5 Certificate issuer: /CN=635d5b644e22fb488e4d6c0012b0aabf238e61e5 Certificate serial: 019B5F41C8C7095FD9A1354B75714FF6DB76 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y11bZE4i-0iOTWwAErCqvyOOYeU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/fe7fc2-41cc-467d-980b-f5af616b5483/1/Y11bZE4i-0iOTWwAErCqvyOOYeU.mft Manifest number: 0811 Signing time: Sat 27 Dec 2025 10:01:45 +0000 Manifest this update: Sat 27 Dec 2025 10:01:45 +0000 Manifest next update: Sun 28 Dec 2025 10:01:45 +0000 Files and hashes: 1: 1-7dAZzRBbFa11Vn8DGlQ2QYhnKQ.roa (hash: paOrHtzZ6Pf1no7vHSa5YDI9HD1Gf08R7MZd074FoNM=) 2: Y11bZE4i-0iOTWwAErCqvyOOYeU.crl (hash: GQ+wRm+xIgxKc0g/iW20CZqt1HTfbXH8EMux05yqOX8=) 3: aAUDoOMiIkIoTxqpgiR2vBHCYiA.roa (hash: bEbrJBN9qOyrrJrbKszXph6Dv/8oZGFIwIyFCbBw1tg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/fe7fc2-41cc-467d-980b-f5af616b5483/1/Y11bZE4i-0iOTWwAErCqvyOOYeU.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/fe7fc2-41cc-467d-980b-f5af616b5483/1/Y11bZE4i-0iOTWwAErCqvyOOYeU.mft rsync://rpki.ripe.net/repository/DEFAULT/Y11bZE4i-0iOTWwAErCqvyOOYeU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 10:01:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5f:41:c8:c7:09:5f:d9:a1:35:4b:75:71:4f:f6:db:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=635d5b644e22fb488e4d6c0012b0aabf238e61e5 Validity Not Before: Dec 27 10:01:45 2025 GMT Not After : Dec 28 10:01:45 2025 GMT Subject: CN=043cfb16608a356db4f9cb5055094632dfaba1d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:0a:e8:86:fe:16:0a:5b:ed:35:1f:71:a9:7b: 75:0e:00:8f:d3:ab:cb:11:e2:ff:e9:d2:c1:2c:bf: cf:c1:5c:47:82:4c:86:c5:df:97:0b:b9:6c:1b:e6: 9d:4f:a1:0f:fd:81:fb:e3:57:b8:7b:3a:42:96:e3: 69:aa:3e:8b:84:e9:c6:aa:40:9a:20:7e:60:9f:c9: 9c:47:d5:4a:7c:05:be:02:95:90:1e:79:b8:4d:65: 29:f5:5f:2a:41:04:f1:b8:fb:82:3f:c7:a8:00:2f: 82:fe:04:01:19:ff:43:6d:8e:01:e7:d8:aa:e5:bd: 85:26:5c:a4:e9:9e:24:52:a1:2e:f1:94:62:90:a1: bd:74:9b:99:26:14:d1:7b:59:87:5f:ff:f8:66:b5: 57:23:d5:e0:0a:fe:57:b0:ec:40:74:55:5e:4f:d1: 56:de:64:22:04:f3:38:bf:4a:74:33:01:47:09:dd: 5a:80:1b:2b:de:bf:4c:e9:86:27:55:fb:32:25:9b: 10:37:92:70:61:9f:a9:35:8e:4c:ed:c0:14:34:97: f5:f9:12:f4:66:a9:55:51:25:d6:de:04:84:81:e7: 5f:b5:27:b0:cc:77:09:26:4a:ba:cf:c7:c0:e3:0b: 22:22:c4:17:f2:57:41:93:b8:65:ea:9e:90:ee:98: 55:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:3C:FB:16:60:8A:35:6D:B4:F9:CB:50:55:09:46:32:DF:AB:A1:D7 X509v3 Authority Key Identifier: keyid:63:5D:5B:64:4E:22:FB:48:8E:4D:6C:00:12:B0:AA:BF:23:8E:61:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y11bZE4i-0iOTWwAErCqvyOOYeU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/fe7fc2-41cc-467d-980b-f5af616b5483/1/Y11bZE4i-0iOTWwAErCqvyOOYeU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/fe7fc2-41cc-467d-980b-f5af616b5483/1/Y11bZE4i-0iOTWwAErCqvyOOYeU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:71:c2:56:e5:85:c8:7e:4d:2f:8c:4d:b9:6e:a6:0a:78:b3: 4b:ba:ae:6c:d6:5d:d7:94:18:8a:5f:78:8b:f0:a7:61:aa:17: a9:13:d1:d1:50:4b:85:89:af:fb:06:fb:c9:86:ad:93:2b:24: 7d:a5:ab:9f:e2:b1:35:72:09:b8:fb:e0:55:51:a7:f2:41:58: b8:b1:d6:7e:ff:06:37:6e:6f:27:00:62:9b:e9:e6:66:b0:21: 39:44:28:31:3f:b1:0d:d6:72:a2:5b:a9:6c:9a:08:5b:d2:ec: c0:d4:df:bb:28:2d:6e:60:24:8e:91:7a:81:c9:02:ef:1e:46: e1:1c:d7:cd:d3:36:97:b0:f8:50:3f:46:2b:d2:27:f8:86:88: 66:b8:bb:5e:d9:4a:a6:2e:22:31:c1:86:c9:c7:54:14:78:67: 8c:36:1a:bf:a2:a7:9c:fe:09:ed:6d:ba:ef:50:31:d5:ce:a6: 98:fa:0f:bb:f1:c3:8d:ec:b4:99:be:b9:1c:c2:2c:09:06:d1: 3b:97:6c:45:b8:92:dd:69:c2:73:50:23:84:54:53:5d:65:db: 81:f0:3b:64:91:eb:2f:58:ab:9b:fd:3e:a7:83:85:a7:34:97: 7b:6a:24:c6:50:21:d6:80:27:0b:2a:f2:4e:58:46:d2:56:88: c1:e1:5f:57 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtfQcjHCV/ZoTVLdXFP9tt2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzNWQ1YjY0NGUyMmZiNDg4ZTRkNmMwMDEyYjBhYWJmMjM4 ZTYxZTUwHhcNMjUxMjI3MTAwMTQ1WhcNMjUxMjI4MTAwMTQ1WjAzMTEwLwYDVQQD EygwNDNjZmIxNjYwOGEzNTZkYjRmOWNiNTA1NTA5NDYzMmRmYWJhMWQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqQrohv4WClvtNR9xqXt1DgCP06vL EeL/6dLBLL/PwVxHgkyGxd+XC7lsG+adT6EP/YH741e4ezpCluNpqj6LhOnGqkCa IH5gn8mcR9VKfAW+ApWQHnm4TWUp9V8qQQTxuPuCP8eoAC+C/gQBGf9DbY4B59iq 5b2FJlyk6Z4kUqEu8ZRikKG9dJuZJhTRe1mHX//4ZrVXI9XgCv5XsOxAdFVeT9FW 3mQiBPM4v0p0MwFHCd1agBsr3r9M6YYnVfsyJZsQN5JwYZ+pNY5M7cAUNJf1+RL0 ZqlVUSXW3gSEgedftSewzHcJJkq6z8fA4wsiIsQX8ldBk7hl6p6Q7phVvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAQ8+xZgijVttPnLUFUJRjLfq6HXMB8GA1UdIwQY MBaAFGNdW2ROIvtIjk1sABKwqr8jjmHlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWTExYlpFNGktMGlPVFd3QUVyQ3F2eU9PWWVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC9mZTdmYzItNDFjYy00NjdkLTk4MGIt ZjVhZjYxNmI1NDgzLzEvWTExYlpFNGktMGlPVFd3QUVyQ3F2eU9PWWVVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC9mZTdmYzItNDFjYy00NjdkLTk4MGItZjVhZjYxNmI1NDgz LzEvWTExYlpFNGktMGlPVFd3QUVyQ3F2eU9PWWVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAnHCVuWF yH5NL4xNuW6mCnizS7qubNZd15QYil94i/CnYaoXqRPR0VBLhYmv+wb7yYatkysk faWrn+KxNXIJuPvgVVGn8kFYuLHWfv8GN25vJwBim+nmZrAhOUQoMT+xDdZyolup bJoIW9LswNTfuygtbmAkjpF6gckC7x5G4RzXzdM2l7D4UD9GK9In+IaIZri7XtlK pi4iMcGGycdUFHhnjDYav6KnnP4J7W2671Ax1c6mmPoPu/HDjey0mb65HMIsCQbR O5dsRbiS3WnCc1AjhFRTXWXbgfA7ZJHrL1irm/0+p4OFpzSXe2okxlAh1oAnCyry TlhG0laIweFfVw== -----END CERTIFICATE-----Generated at Sat Dec 27 19:27:00 2025 by rpki-client