This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/b81c0b-af1c-4ee8-b4c0-dca0fd509fb6/1/Y3bCUtsJvoF7hypxepWe3KxEJms.mft File: Y3bCUtsJvoF7hypxepWe3KxEJms.mft (raw, json) Hash identifier: 2OZYpwZPDCBXDNGgTF6CKuQrjleDirAPAqfy8iiPLQ0= Subject key identifier: 32:67:9B:9A:F0:55:C7:18:75:87:56:60:8B:FE:BC:E6:44:D1:88:07 Authority key identifier: 63:76:C2:52:DB:09:BE:81:7B:87:2A:71:7A:95:9E:DC:AC:44:26:6B Certificate issuer: /CN=6376c252db09be817b872a717a959edcac44266b Certificate serial: 019B2A09BA8060455A4F6FECAAF91819177F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y3bCUtsJvoF7hypxepWe3KxEJms.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/b81c0b-af1c-4ee8-b4c0-dca0fd509fb6/1/Y3bCUtsJvoF7hypxepWe3KxEJms.mft Manifest number: 177D Signing time: Wed 17 Dec 2025 02:00:39 +0000 Manifest this update: Wed 17 Dec 2025 02:00:39 +0000 Manifest next update: Thu 18 Dec 2025 02:00:39 +0000 Files and hashes: 1: Y3bCUtsJvoF7hypxepWe3KxEJms.crl (hash: Q/7Oihb61xqHml5MWYGDI32BCI63epR47MQ+/5A3er8=) 2: apB7016k1B8Xf8viYBYRSP8KhJw.roa (hash: xN1tgc1phNLRWfyHfJRqbKwJVFPPcIp9VBD24KOqkzQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/b81c0b-af1c-4ee8-b4c0-dca0fd509fb6/1/Y3bCUtsJvoF7hypxepWe3KxEJms.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/b81c0b-af1c-4ee8-b4c0-dca0fd509fb6/1/Y3bCUtsJvoF7hypxepWe3KxEJms.mft rsync://rpki.ripe.net/repository/DEFAULT/Y3bCUtsJvoF7hypxepWe3KxEJms.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 02:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2a:09:ba:80:60:45:5a:4f:6f:ec:aa:f9:18:19:17:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6376c252db09be817b872a717a959edcac44266b Validity Not Before: Dec 17 02:00:39 2025 GMT Not After : Dec 18 02:00:39 2025 GMT Subject: CN=32679b9af055c718758756608bfebce644d18807 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:2d:18:1f:a6:57:45:ab:24:24:91:a2:23:c1: a1:c5:c8:e9:77:2a:13:ee:92:9a:67:68:c9:94:9f: f3:57:3a:96:ae:ab:23:20:f2:2d:d5:4a:39:09:a7: 22:49:6d:b9:80:f1:e4:5d:65:10:65:f6:ee:ad:88: 7d:6d:1f:79:6e:b8:49:c2:61:21:e4:e8:02:29:af: d0:d7:5b:2f:3d:65:0a:4f:02:bb:d5:2b:d0:9c:a2: aa:b9:2d:cb:7f:10:c8:7f:c8:16:c5:22:07:a5:76: b7:8b:f9:db:93:b8:b0:16:27:b8:d2:4f:29:18:5b: 71:f5:0e:95:c0:01:8b:aa:17:ce:57:a2:a4:09:4e: 28:ab:cd:63:5d:52:2b:ff:f7:62:fb:25:e3:80:bf: 1f:8c:bd:19:2c:a0:b6:ff:6d:96:cf:ba:6b:68:b9: 93:fa:b1:22:78:fd:4a:4a:0e:a9:f2:ce:2a:2f:61: ef:77:83:64:d0:86:8f:6b:56:69:2e:2b:98:73:52: 26:50:74:55:d1:30:ff:23:fc:31:3c:d3:80:b0:af: 76:0e:95:b9:78:d7:fc:9c:f8:19:60:70:b6:8d:58: e4:a3:94:c2:1f:72:17:ac:15:42:00:bc:7a:25:f9: 48:ee:56:95:57:7b:e9:1d:ac:ee:37:aa:f8:29:39: 33:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:67:9B:9A:F0:55:C7:18:75:87:56:60:8B:FE:BC:E6:44:D1:88:07 X509v3 Authority Key Identifier: keyid:63:76:C2:52:DB:09:BE:81:7B:87:2A:71:7A:95:9E:DC:AC:44:26:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y3bCUtsJvoF7hypxepWe3KxEJms.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/b81c0b-af1c-4ee8-b4c0-dca0fd509fb6/1/Y3bCUtsJvoF7hypxepWe3KxEJms.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/b81c0b-af1c-4ee8-b4c0-dca0fd509fb6/1/Y3bCUtsJvoF7hypxepWe3KxEJms.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:9a:8e:8d:24:c8:26:5b:26:c9:52:f1:f1:03:62:f0:27:7e: 49:82:f4:03:bc:85:2e:5d:18:9e:95:46:95:a6:c1:95:4a:59: 89:c9:57:89:3f:24:ed:bd:01:59:bd:cd:71:b3:9f:cf:e8:20: e3:b2:9b:27:8a:36:2b:68:21:cb:ae:76:8e:43:f3:7e:61:53: 9e:55:ca:f3:ed:7f:5e:7a:81:71:db:ac:6d:9f:a3:6e:b4:49: 23:5f:1e:3f:f4:53:77:4e:00:23:b0:d1:e9:38:d1:fc:8d:38: 32:9f:0f:48:62:2a:10:74:87:a2:19:40:65:2c:ae:b1:31:f8: b0:2a:49:60:3b:bc:09:43:f4:79:8c:ee:16:6f:b0:f8:b6:ae: 0c:e1:ef:b5:80:d7:27:8d:3d:44:29:23:1e:3d:99:08:be:77: fc:d8:af:7d:f6:34:f4:46:03:d0:ac:6c:b8:ff:8e:5b:9c:15: 4c:f3:36:40:6c:9b:e0:65:bb:48:75:f6:d1:95:06:b1:d6:e7: 44:40:58:c8:e7:a5:cf:8c:e5:6e:19:07:fb:92:3f:c1:39:f6: da:27:08:89:57:7d:15:53:e8:8f:3c:82:ad:d5:1b:55:54:45: de:39:9d:7c:88:10:77:a0:74:39:28:a9:8c:70:31:0c:88:c0: 5b:09:2c:17 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsqCbqAYEVaT2/sqvkYGRd/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzNzZjMjUyZGIwOWJlODE3Yjg3MmE3MTdhOTU5ZWRjYWM0 NDI2NmIwHhcNMjUxMjE3MDIwMDM5WhcNMjUxMjE4MDIwMDM5WjAzMTEwLwYDVQQD EygzMjY3OWI5YWYwNTVjNzE4NzU4NzU2NjA4YmZlYmNlNjQ0ZDE4ODA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5y0YH6ZXRaskJJGiI8GhxcjpdyoT 7pKaZ2jJlJ/zVzqWrqsjIPIt1Uo5CaciSW25gPHkXWUQZfburYh9bR95brhJwmEh 5OgCKa/Q11svPWUKTwK71SvQnKKquS3LfxDIf8gWxSIHpXa3i/nbk7iwFie40k8p GFtx9Q6VwAGLqhfOV6KkCU4oq81jXVIr//di+yXjgL8fjL0ZLKC2/22Wz7praLmT +rEieP1KSg6p8s4qL2Hvd4Nk0IaPa1ZpLiuYc1ImUHRV0TD/I/wxPNOAsK92DpW5 eNf8nPgZYHC2jVjko5TCH3IXrBVCALx6JflI7laVV3vpHazuN6r4KTkzuwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDJnm5rwVccYdYdWYIv+vOZE0YgHMB8GA1UdIwQY MBaAFGN2wlLbCb6Be4cqcXqVntysRCZrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWTNiQ1V0c0p2b0Y3aHlweGVwV2UzS3hFSm1zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS9iODFjMGItYWYxYy00ZWU4LWI0YzAt ZGNhMGZkNTA5ZmI2LzEvWTNiQ1V0c0p2b0Y3aHlweGVwV2UzS3hFSm1zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS9iODFjMGItYWYxYy00ZWU4LWI0YzAtZGNhMGZkNTA5ZmI2 LzEvWTNiQ1V0c0p2b0Y3aHlweGVwV2UzS3hFSm1zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkpqOjSTI JlsmyVLx8QNi8Cd+SYL0A7yFLl0YnpVGlabBlUpZiclXiT8k7b0BWb3NcbOfz+gg 47KbJ4o2K2ghy652jkPzfmFTnlXK8+1/XnqBcdusbZ+jbrRJI18eP/RTd04AI7DR 6TjR/I04Mp8PSGIqEHSHohlAZSyusTH4sCpJYDu8CUP0eYzuFm+w+LauDOHvtYDX J409RCkjHj2ZCL53/NivffY09EYD0KxsuP+OW5wVTPM2QGyb4GW7SHX20ZUGsdbn REBYyOelz4zlbhkH+5I/wTn22icIiVd9FVPojzyCrdUbVVRF3jmdfIgQd6B0OSip jHAxDIjAWwksFw== -----END CERTIFICATE-----Generated at Wed Dec 17 09:50:50 2025 by rpki-client