This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/a564e9-3a4e-4d4a-807d-7055c2e0476f/1/Y2NsO-9V0SpkU2twEwp09T9E1tA.mft File: Y2NsO-9V0SpkU2twEwp09T9E1tA.mft (raw, json) Hash identifier: xD0hSqJ71nIA22zWPyp8ew8SeE3Yycs2N7MUa0+dko8= Subject key identifier: 55:A6:52:DD:46:B4:7C:4B:56:16:D6:CB:F5:D8:06:BC:E4:8F:37:F8 Authority key identifier: 63:63:6C:3B:EF:55:D1:2A:64:53:6B:70:13:0A:74:F5:3F:44:D6:D0 Certificate issuer: /CN=63636c3bef55d12a64536b70130a74f53f44d6d0 Certificate serial: 019B6C8E8292F0E98956C9D80D08F056ABA5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y2NsO-9V0SpkU2twEwp09T9E1tA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/a564e9-3a4e-4d4a-807d-7055c2e0476f/1/Y2NsO-9V0SpkU2twEwp09T9E1tA.mft Manifest number: 098B Signing time: Tue 30 Dec 2025 00:00:37 +0000 Manifest this update: Tue 30 Dec 2025 00:00:37 +0000 Manifest next update: Wed 31 Dec 2025 00:00:37 +0000 Files and hashes: 1: DtOZa_QnwbfCZcw6Ri25L5g5nKw.roa (hash: gPjF2bHK3b5JRNcNAuMcqGVmU2CAaScFraaS80Iy5UA=) 2: Y2NsO-9V0SpkU2twEwp09T9E1tA.crl (hash: jqjPjQXonKF/K7zK/Mq/UQoO47BxF5pbYOC+VHbxrTY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/a564e9-3a4e-4d4a-807d-7055c2e0476f/1/Y2NsO-9V0SpkU2twEwp09T9E1tA.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/a564e9-3a4e-4d4a-807d-7055c2e0476f/1/Y2NsO-9V0SpkU2twEwp09T9E1tA.mft rsync://rpki.ripe.net/repository/DEFAULT/Y2NsO-9V0SpkU2twEwp09T9E1tA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 00:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6c:8e:82:92:f0:e9:89:56:c9:d8:0d:08:f0:56:ab:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63636c3bef55d12a64536b70130a74f53f44d6d0 Validity Not Before: Dec 30 00:00:37 2025 GMT Not After : Dec 31 00:00:37 2025 GMT Subject: CN=55a652dd46b47c4b5616d6cbf5d806bce48f37f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:14:44:a2:54:c1:ca:b1:59:be:91:1d:3a:f5: 54:4e:7f:d0:f2:6c:40:80:c7:37:98:24:f5:56:73: 1d:b4:9e:d8:4f:16:be:9c:11:96:15:1a:ae:fe:86: d0:4b:ca:1b:e9:6b:d7:8c:52:6c:99:e1:6d:f8:fa: ed:16:d1:96:9d:ba:c2:88:3b:ba:29:0a:f4:7d:a0: dc:56:7f:18:76:3b:ad:fa:9a:44:ec:ff:2e:ba:64: ba:bd:15:b7:e6:62:3c:77:7d:d3:ad:42:dc:f3:7e: 6c:18:3d:47:3f:4a:e3:06:5a:3c:a8:bb:d4:37:9d: 77:38:48:6d:a1:6d:e1:95:5d:06:ce:c4:19:e7:11: 37:71:5e:e8:60:55:8f:3b:82:f0:f0:c2:3a:59:55: 8f:e7:27:48:dc:a0:a5:8f:aa:0c:6d:7d:54:40:22: 09:ec:a8:1e:e6:49:f5:2f:b9:94:16:40:46:75:3a: e5:8a:a2:f4:a5:a5:4a:bd:ec:67:0e:9a:dc:95:5d: b3:35:3a:81:26:6e:42:5c:5e:d3:e8:53:a6:21:06: 7b:cb:be:f2:44:3e:fc:71:6c:05:f8:b5:ab:86:6a: ed:a9:6e:36:1c:ec:e4:9f:8b:f9:81:99:44:0a:78: ba:4e:5d:06:c7:81:0f:54:20:a9:44:cd:55:d4:85: 2d:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:A6:52:DD:46:B4:7C:4B:56:16:D6:CB:F5:D8:06:BC:E4:8F:37:F8 X509v3 Authority Key Identifier: keyid:63:63:6C:3B:EF:55:D1:2A:64:53:6B:70:13:0A:74:F5:3F:44:D6:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y2NsO-9V0SpkU2twEwp09T9E1tA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a564e9-3a4e-4d4a-807d-7055c2e0476f/1/Y2NsO-9V0SpkU2twEwp09T9E1tA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a564e9-3a4e-4d4a-807d-7055c2e0476f/1/Y2NsO-9V0SpkU2twEwp09T9E1tA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:29:a5:56:ee:f8:93:a0:2b:68:a1:df:26:a2:fa:b5:a9:32: 58:52:43:a4:99:f6:fa:fa:20:c4:ff:96:c4:3f:c9:f1:35:d3: 86:6c:b5:31:1e:63:cb:90:16:49:83:98:3f:5d:1d:b7:4d:e8: 26:7e:1b:30:57:87:df:ff:19:2d:96:17:f4:6e:96:77:2d:3d: 7b:15:16:b0:8b:e6:cb:04:2a:27:6d:05:6b:bf:c2:d6:60:db: 5c:0d:5b:9e:3e:cc:64:7f:46:88:b5:bc:ad:40:c6:ef:54:d6: c9:27:22:ee:56:7c:2d:c4:cd:bd:7d:2c:0a:8e:57:e5:31:a4: 44:5f:4f:d1:ab:03:5a:12:82:cf:33:9b:73:6f:3a:45:34:7e: 1c:97:33:be:a3:b9:cf:d5:8b:c2:b5:e7:4f:36:a4:0e:91:2e: 0c:25:8e:fd:2f:83:b5:d2:68:14:68:15:18:9f:de:9d:2f:dd: b4:8b:71:b6:01:8e:a1:2c:63:78:8d:e5:17:6a:20:3c:8f:08: df:f2:bd:aa:c8:05:b6:e7:25:db:f7:98:e1:2f:7f:ce:49:44: 7d:8c:39:98:f4:fb:e4:ed:18:4c:53:9d:15:4b:a2:d8:a8:3f: 1e:6f:8b:98:de:54:fb:c3:2f:26:3c:98:6d:42:95:7c:cf:f1: d6:28:85:8d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtsjoKS8OmJVsnYDQjwVqulMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzNjM2YzNiZWY1NWQxMmE2NDUzNmI3MDEzMGE3NGY1M2Y0 NGQ2ZDAwHhcNMjUxMjMwMDAwMDM3WhcNMjUxMjMxMDAwMDM3WjAzMTEwLwYDVQQD Eyg1NWE2NTJkZDQ2YjQ3YzRiNTYxNmQ2Y2JmNWQ4MDZiY2U0OGYzN2Y4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0hREolTByrFZvpEdOvVUTn/Q8mxA gMc3mCT1VnMdtJ7YTxa+nBGWFRqu/obQS8ob6WvXjFJsmeFt+PrtFtGWnbrCiDu6 KQr0faDcVn8Ydjut+ppE7P8uumS6vRW35mI8d33TrULc835sGD1HP0rjBlo8qLvU N513OEhtoW3hlV0GzsQZ5xE3cV7oYFWPO4Lw8MI6WVWP5ydI3KClj6oMbX1UQCIJ 7Kge5kn1L7mUFkBGdTrliqL0paVKvexnDprclV2zNTqBJm5CXF7T6FOmIQZ7y77y RD78cWwF+LWrhmrtqW42HOzkn4v5gZlECni6Tl0Gx4EPVCCpRM1V1IUtpQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFWmUt1GtHxLVhbWy/XYBrzkjzf4MB8GA1UdIwQY MBaAFGNjbDvvVdEqZFNrcBMKdPU/RNbQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWTJOc08tOVYwU3BrVTJ0d0V3cDA5VDlFMXRBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS9hNTY0ZTktM2E0ZS00ZDRhLTgwN2Qt NzA1NWMyZTA0NzZmLzEvWTJOc08tOVYwU3BrVTJ0d0V3cDA5VDlFMXRBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS9hNTY0ZTktM2E0ZS00ZDRhLTgwN2QtNzA1NWMyZTA0NzZm LzEvWTJOc08tOVYwU3BrVTJ0d0V3cDA5VDlFMXRBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABCmlVu74 k6AraKHfJqL6takyWFJDpJn2+vogxP+WxD/J8TXThmy1MR5jy5AWSYOYP10dt03o Jn4bMFeH3/8ZLZYX9G6Wdy09exUWsIvmywQqJ20Fa7/C1mDbXA1bnj7MZH9GiLW8 rUDG71TWySci7lZ8LcTNvX0sCo5X5TGkRF9P0asDWhKCzzObc286RTR+HJczvqO5 z9WLwrXnTzakDpEuDCWO/S+DtdJoFGgVGJ/enS/dtItxtgGOoSxjeI3lF2ogPI8I 3/K9qsgFtucl2/eY4S9/zklEfYw5mPT75O0YTFOdFUui2Kg/Hm+LmN5U+8MvJjyY bUKVfM/x1iiFjQ== -----END CERTIFICATE-----Generated at Tue Dec 30 08:49:42 2025 by rpki-client