This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/a564e9-3a4e-4d4a-807d-7055c2e0476f/1/Y2NsO-9V0SpkU2twEwp09T9E1tA.mft File: Y2NsO-9V0SpkU2twEwp09T9E1tA.mft (raw, json) Hash identifier: /LMeAaq/OuEGREAk/10v7fA7j7aPuIesQp7MIBIE0Jc= Subject key identifier: 53:AC:28:88:E4:BB:A3:49:48:25:D1:0D:DE:8D:6E:DC:5A:64:4F:DF Authority key identifier: 63:63:6C:3B:EF:55:D1:2A:64:53:6B:70:13:0A:74:F5:3F:44:D6:D0 Certificate issuer: /CN=63636c3bef55d12a64536b70130a74f53f44d6d0 Certificate serial: 019B3C46F635651F257AA1B4D1B520DDE1B6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y2NsO-9V0SpkU2twEwp09T9E1tA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/a564e9-3a4e-4d4a-807d-7055c2e0476f/1/Y2NsO-9V0SpkU2twEwp09T9E1tA.mft Manifest number: 0972 Signing time: Sat 20 Dec 2025 15:00:41 +0000 Manifest this update: Sat 20 Dec 2025 15:00:41 +0000 Manifest next update: Sun 21 Dec 2025 15:00:41 +0000 Files and hashes: 1: DtOZa_QnwbfCZcw6Ri25L5g5nKw.roa (hash: gPjF2bHK3b5JRNcNAuMcqGVmU2CAaScFraaS80Iy5UA=) 2: Y2NsO-9V0SpkU2twEwp09T9E1tA.crl (hash: M1AAb82nO7GOpp1GF12Fl+xI0i3tzyc9FRcr08m6+Lo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/a564e9-3a4e-4d4a-807d-7055c2e0476f/1/Y2NsO-9V0SpkU2twEwp09T9E1tA.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/a564e9-3a4e-4d4a-807d-7055c2e0476f/1/Y2NsO-9V0SpkU2twEwp09T9E1tA.mft rsync://rpki.ripe.net/repository/DEFAULT/Y2NsO-9V0SpkU2twEwp09T9E1tA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:46:f6:35:65:1f:25:7a:a1:b4:d1:b5:20:dd:e1:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63636c3bef55d12a64536b70130a74f53f44d6d0 Validity Not Before: Dec 20 15:00:41 2025 GMT Not After : Dec 21 15:00:41 2025 GMT Subject: CN=53ac2888e4bba3494825d10dde8d6edc5a644fdf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:2e:19:19:92:94:38:2b:56:91:4c:94:9c:ea: 9f:b8:18:6a:bb:f7:b6:fd:f6:5f:cc:43:4a:d2:b2: b4:e4:26:55:ec:68:6c:08:99:ed:1c:b5:82:44:41: 3e:03:72:42:55:c1:c1:59:79:7d:8e:b1:82:8e:a7: 5f:89:c2:58:aa:fb:26:29:d7:47:30:a8:7c:9b:3e: 77:2d:80:02:db:f9:62:7e:1e:a6:2b:51:f4:5e:8c: a8:4b:b0:7c:de:1b:d7:34:26:11:40:ae:b5:85:a3: 50:bc:06:48:47:7a:f5:9f:92:c1:e1:37:96:1b:4f: 13:79:e7:ce:c8:c6:ca:4c:d4:6d:3e:fa:a2:52:01: 07:d3:e0:5d:6a:e6:44:14:6f:08:f1:4d:14:c3:a2: f1:5c:79:04:45:bc:82:0f:3a:01:90:7a:4a:b4:23: 2a:6f:54:f4:1e:ee:24:b4:04:40:9e:7e:da:64:e9: 88:c3:dd:30:94:53:e7:ea:20:0e:d4:13:b8:99:94: d2:db:46:2a:75:3b:48:7e:60:96:c3:c4:c7:59:04: 45:c0:a7:79:ef:3b:22:42:79:e0:62:87:c7:f3:28: ec:6a:c6:a3:49:db:62:3b:07:82:d3:f8:31:02:a3: b5:90:64:53:60:41:36:5c:fe:82:1b:0b:1e:e9:64: 54:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:AC:28:88:E4:BB:A3:49:48:25:D1:0D:DE:8D:6E:DC:5A:64:4F:DF X509v3 Authority Key Identifier: keyid:63:63:6C:3B:EF:55:D1:2A:64:53:6B:70:13:0A:74:F5:3F:44:D6:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y2NsO-9V0SpkU2twEwp09T9E1tA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a564e9-3a4e-4d4a-807d-7055c2e0476f/1/Y2NsO-9V0SpkU2twEwp09T9E1tA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a564e9-3a4e-4d4a-807d-7055c2e0476f/1/Y2NsO-9V0SpkU2twEwp09T9E1tA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:c5:ec:bc:70:2c:d9:b6:94:09:14:e6:fa:8e:82:df:34:51: a0:5d:cd:64:61:1d:2f:6f:87:02:63:8e:2c:dd:81:4c:01:a4: 8f:aa:fc:fd:d1:40:00:68:00:9a:5f:21:60:c9:5d:dd:13:3a: 9c:88:93:4f:85:94:15:13:be:b0:6d:08:ab:3c:ee:71:6d:2f: f4:b6:ce:64:ab:d4:39:c1:f2:f5:59:39:bb:f3:8b:58:7d:01: e1:46:cf:32:6c:b2:ac:b6:99:4a:cf:1f:7a:ec:70:b1:84:61: da:c9:6c:85:c1:c8:61:54:e9:c2:4a:f3:24:cb:3a:e7:4d:f9: 6b:36:34:ba:de:ab:54:dd:c1:26:21:2b:e6:74:d8:68:3a:15: 4d:c7:18:aa:47:16:67:e6:4d:21:eb:cb:13:31:1e:57:cb:0a: be:02:6b:b8:f6:3b:f0:db:e5:b5:d6:11:1f:81:12:2f:8b:0d: b4:11:97:30:f5:64:fb:db:aa:9d:b7:17:89:c3:d9:16:4c:c7: b2:25:97:03:bb:2e:da:c0:eb:c4:87:ed:72:eb:05:6b:3c:a3: 6f:87:ed:3f:e3:79:23:9f:7a:3f:79:bc:03:af:8d:b0:37:d4: d7:7e:a3:6a:7c:15:ed:74:e9:e0:39:a4:b3:28:1e:63:5c:18: 9f:18:72:2e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8RvY1ZR8leqG00bUg3eG2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzNjM2YzNiZWY1NWQxMmE2NDUzNmI3MDEzMGE3NGY1M2Y0 NGQ2ZDAwHhcNMjUxMjIwMTUwMDQxWhcNMjUxMjIxMTUwMDQxWjAzMTEwLwYDVQQD Eyg1M2FjMjg4OGU0YmJhMzQ5NDgyNWQxMGRkZThkNmVkYzVhNjQ0ZmRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuy4ZGZKUOCtWkUyUnOqfuBhqu/e2 /fZfzENK0rK05CZV7GhsCJntHLWCREE+A3JCVcHBWXl9jrGCjqdficJYqvsmKddH MKh8mz53LYAC2/lifh6mK1H0XoyoS7B83hvXNCYRQK61haNQvAZIR3r1n5LB4TeW G08TeefOyMbKTNRtPvqiUgEH0+BdauZEFG8I8U0Uw6LxXHkERbyCDzoBkHpKtCMq b1T0Hu4ktARAnn7aZOmIw90wlFPn6iAO1BO4mZTS20YqdTtIfmCWw8THWQRFwKd5 7zsiQnngYofH8yjsasajSdtiOweC0/gxAqO1kGRTYEE2XP6CGwse6WRUZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFOsKIjku6NJSCXRDd6NbtxaZE/fMB8GA1UdIwQY MBaAFGNjbDvvVdEqZFNrcBMKdPU/RNbQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWTJOc08tOVYwU3BrVTJ0d0V3cDA5VDlFMXRBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS9hNTY0ZTktM2E0ZS00ZDRhLTgwN2Qt NzA1NWMyZTA0NzZmLzEvWTJOc08tOVYwU3BrVTJ0d0V3cDA5VDlFMXRBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS9hNTY0ZTktM2E0ZS00ZDRhLTgwN2QtNzA1NWMyZTA0NzZm LzEvWTJOc08tOVYwU3BrVTJ0d0V3cDA5VDlFMXRBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbcXsvHAs 2baUCRTm+o6C3zRRoF3NZGEdL2+HAmOOLN2BTAGkj6r8/dFAAGgAml8hYMld3RM6 nIiTT4WUFRO+sG0IqzzucW0v9LbOZKvUOcHy9Vk5u/OLWH0B4UbPMmyyrLaZSs8f euxwsYRh2slshcHIYVTpwkrzJMs65035azY0ut6rVN3BJiEr5nTYaDoVTccYqkcW Z+ZNIevLEzEeV8sKvgJruPY78NvltdYRH4ESL4sNtBGXMPVk+9uqnbcXicPZFkzH siWXA7su2sDrxIftcusFazyjb4ftP+N5I596P3m8A6+NsDfU136janwV7XTp4Dmk sygeY1wYnxhyLg== -----END CERTIFICATE-----Generated at Sat Dec 20 22:24:43 2025 by rpki-client