This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/63432a-e5d9-46e2-9c01-ac809bbae737/1/Ym0k1r81OWP-WvolsKWWZxUqhtA.mft File: Ym0k1r81OWP-WvolsKWWZxUqhtA.mft (raw, json) Hash identifier: 41/Br/MKANDzj8fz649oKlY2RoeIVxiOhETbj1TsWC0= Subject key identifier: 7D:39:7B:55:F2:17:15:F9:7E:09:01:27:80:8B:CA:1B:1D:84:AB:EC Authority key identifier: 62:6D:24:D6:BF:35:39:63:FE:5A:FA:25:B0:A5:96:67:15:2A:86:D0 Certificate issuer: /CN=626d24d6bf353963fe5afa25b0a59667152a86d0 Certificate serial: 019B7222E8090CE2B7E95249C40F16653C1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ym0k1r81OWP-WvolsKWWZxUqhtA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/63432a-e5d9-46e2-9c01-ac809bbae737/1/Ym0k1r81OWP-WvolsKWWZxUqhtA.mft Manifest number: 0F33 Signing time: Wed 31 Dec 2025 02:00:48 +0000 Manifest this update: Wed 31 Dec 2025 02:00:48 +0000 Manifest next update: Thu 01 Jan 2026 02:00:48 +0000 Files and hashes: 1: XsLpmpu2xvBP4JjcplMw-4A56mY.roa (hash: zDQ4NxbIV24C02r59jK+8GO4r9TIoUq4yC6lv1rRxf0=) 2: Ym0k1r81OWP-WvolsKWWZxUqhtA.crl (hash: SvzSa4gb2DRY34Y9hJgMBd6V8V3kLMf4FV0RY6Tixms=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/63432a-e5d9-46e2-9c01-ac809bbae737/1/Ym0k1r81OWP-WvolsKWWZxUqhtA.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/63432a-e5d9-46e2-9c01-ac809bbae737/1/Ym0k1r81OWP-WvolsKWWZxUqhtA.mft rsync://rpki.ripe.net/repository/DEFAULT/Ym0k1r81OWP-WvolsKWWZxUqhtA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 01 Jan 2026 00:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:72:22:e8:09:0c:e2:b7:e9:52:49:c4:0f:16:65:3c:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=626d24d6bf353963fe5afa25b0a59667152a86d0 Validity Not Before: Dec 31 02:00:48 2025 GMT Not After : Jan 1 02:00:48 2026 GMT Subject: CN=7d397b55f21715f97e090127808bca1b1d84abec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:2d:c8:18:dc:a3:52:2f:aa:72:03:e1:f0:d0: 13:8a:97:56:5e:08:3b:48:9a:29:bd:b0:b7:f9:34: cf:96:b4:3e:9e:18:8d:21:f3:e3:c6:d7:1e:f2:63: 73:e3:6d:09:a6:e5:f0:34:6e:b4:de:2e:25:12:f1: 66:0c:ac:be:c7:ab:c4:eb:aa:9c:99:f4:79:5f:b7: b4:38:69:a9:51:55:89:e7:b8:96:f9:95:c6:0b:fe: f5:c8:40:1a:39:0a:1f:6c:76:ec:24:83:7e:ac:86: 13:d7:44:a5:7e:3d:02:8c:bc:b9:a8:3e:24:24:84: 0c:94:c5:17:d7:0d:29:af:8e:3c:90:59:6a:05:d0: 2f:a1:51:13:33:00:47:fe:04:87:ad:ad:1a:cd:96: 2b:d4:eb:82:0a:68:1c:87:9b:3a:62:81:d1:bd:16: f8:09:1a:1d:8f:99:61:e9:27:cd:a7:8e:b5:4d:ce: 18:47:ac:20:ea:5b:ef:b8:ef:26:7a:8c:53:33:5a: cd:3b:ab:eb:fa:9b:12:9a:3d:ee:18:bb:65:19:70: bb:63:2a:99:2a:ae:ef:47:e0:ae:a7:a8:97:97:9f: a2:1c:91:d7:34:57:c9:42:0d:6f:a2:fd:ea:99:77: f3:1a:69:32:b4:e6:c3:c8:5b:0b:1d:c2:bc:1c:2d: 83:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:39:7B:55:F2:17:15:F9:7E:09:01:27:80:8B:CA:1B:1D:84:AB:EC X509v3 Authority Key Identifier: keyid:62:6D:24:D6:BF:35:39:63:FE:5A:FA:25:B0:A5:96:67:15:2A:86:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ym0k1r81OWP-WvolsKWWZxUqhtA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/63432a-e5d9-46e2-9c01-ac809bbae737/1/Ym0k1r81OWP-WvolsKWWZxUqhtA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/63432a-e5d9-46e2-9c01-ac809bbae737/1/Ym0k1r81OWP-WvolsKWWZxUqhtA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:19:99:45:bd:d8:83:9e:4b:fe:ce:7d:f8:61:f2:d6:a3:56: c7:09:0e:fa:64:9d:2f:20:64:17:6b:80:59:91:6b:01:09:77: 77:69:4f:7e:02:48:b0:b5:83:c3:92:a9:9f:ed:97:f3:f9:85: f6:ec:b7:db:d2:ba:6f:32:b3:d9:d6:dc:42:2b:4c:6f:e0:5b: 8e:08:69:50:93:12:5b:ba:35:c0:14:1e:7c:60:f1:e0:43:dd: 1b:76:6c:92:2b:7b:1b:ab:a3:7c:b5:e4:e9:d0:57:cd:02:9d: 60:40:19:db:b3:62:fd:06:79:6f:47:0f:5f:4b:10:f9:b7:96: 3b:b8:b6:78:84:93:7f:08:c8:fb:25:1e:12:06:2a:d7:32:06: 1b:a1:2d:88:3e:e2:9e:7d:1b:4a:10:02:ff:45:0d:cd:aa:47: 8e:06:b3:2f:32:33:c7:3d:33:b9:bd:4f:cf:90:73:25:85:20: 3d:c3:bb:bd:79:58:9d:1d:a1:44:8c:bd:c0:84:00:9b:ec:5b: 72:1c:bb:9c:ff:db:46:cd:47:55:d8:7b:bd:b3:ae:53:0f:d1: 26:28:44:88:31:96:ce:fd:d9:ac:7a:55:07:c6:a9:71:f8:48: b9:0f:df:ff:a2:1d:66:aa:8d:68:f1:cd:cd:05:9c:cc:e4:5b: 8b:93:b9:b3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtyIugJDOK36VJJxA8WZTwbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyNmQyNGQ2YmYzNTM5NjNmZTVhZmEyNWIwYTU5NjY3MTUy YTg2ZDAwHhcNMjUxMjMxMDIwMDQ4WhcNMjYwMTAxMDIwMDQ4WjAzMTEwLwYDVQQD Eyg3ZDM5N2I1NWYyMTcxNWY5N2UwOTAxMjc4MDhiY2ExYjFkODRhYmVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsy3IGNyjUi+qcgPh8NATipdWXgg7 SJopvbC3+TTPlrQ+nhiNIfPjxtce8mNz420JpuXwNG603i4lEvFmDKy+x6vE66qc mfR5X7e0OGmpUVWJ57iW+ZXGC/71yEAaOQofbHbsJIN+rIYT10Slfj0CjLy5qD4k JIQMlMUX1w0pr448kFlqBdAvoVETMwBH/gSHra0azZYr1OuCCmgch5s6YoHRvRb4 CRodj5lh6SfNp461Tc4YR6wg6lvvuO8meoxTM1rNO6vr+psSmj3uGLtlGXC7YyqZ Kq7vR+Cup6iXl5+iHJHXNFfJQg1vov3qmXfzGmkytObDyFsLHcK8HC2D1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH05e1XyFxX5fgkBJ4CLyhsdhKvsMB8GA1UdIwQY MBaAFGJtJNa/NTlj/lr6JbCllmcVKobQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWW0wazFyODFPV1AtV3ZvbHNLV1daeFVxaHRBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC82MzQzMmEtZTVkOS00NmUyLTljMDEt YWM4MDliYmFlNzM3LzEvWW0wazFyODFPV1AtV3ZvbHNLV1daeFVxaHRBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC82MzQzMmEtZTVkOS00NmUyLTljMDEtYWM4MDliYmFlNzM3 LzEvWW0wazFyODFPV1AtV3ZvbHNLV1daeFVxaHRBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABBmZRb3Y g55L/s59+GHy1qNWxwkO+mSdLyBkF2uAWZFrAQl3d2lPfgJIsLWDw5Kpn+2X8/mF 9uy329K6bzKz2dbcQitMb+BbjghpUJMSW7o1wBQefGDx4EPdG3Zskit7G6ujfLXk 6dBXzQKdYEAZ27Ni/QZ5b0cPX0sQ+beWO7i2eISTfwjI+yUeEgYq1zIGG6EtiD7i nn0bShAC/0UNzapHjgazLzIzxz0zub1Pz5BzJYUgPcO7vXlYnR2hRIy9wIQAm+xb chy7nP/bRs1HVdh7vbOuUw/RJihEiDGWzv3ZrHpVB8apcfhIuQ/f/6IdZqqNaPHN zQWczORbi5O5sw== -----END CERTIFICATE-----Generated at Wed Dec 31 07:58:01 2025 by rpki-client