This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/7a1c2e-75fb-44c6-a83c-14673c72a1df/1/Y_lyZ-fAB5UwlQnx6NPZzeCnbE4.mft File: Y_lyZ-fAB5UwlQnx6NPZzeCnbE4.mft (raw, json) Hash identifier: RTqVk6ltodSoNkCTJX8hAr7XqN3PlaQmdYUjNhQYZew= Subject key identifier: 7E:63:C1:42:D8:60:21:32:12:38:5E:0D:0F:2B:AC:8C:27:C7:2E:BD Authority key identifier: 63:F9:72:67:E7:C0:07:95:30:95:09:F1:E8:D3:D9:CD:E0:A7:6C:4E Certificate issuer: /CN=63f97267e7c00795309509f1e8d3d9cde0a76c4e Certificate serial: 019B45B8687E2F53B17CC3267C6519580514 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y_lyZ-fAB5UwlQnx6NPZzeCnbE4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/7a1c2e-75fb-44c6-a83c-14673c72a1df/1/Y_lyZ-fAB5UwlQnx6NPZzeCnbE4.mft Manifest number: 144E Signing time: Mon 22 Dec 2025 11:01:11 +0000 Manifest this update: Mon 22 Dec 2025 11:01:11 +0000 Manifest next update: Tue 23 Dec 2025 11:01:11 +0000 Files and hashes: 1: 3q5cMH_JMDPWbBWsvj1oSnffC60.roa (hash: PsjJWV+kYSf71t9/bKVlp3KCFoEso5Ik+VCJED3EfZo=) 2: Y_lyZ-fAB5UwlQnx6NPZzeCnbE4.crl (hash: kCrBIXFUSfTFJoDpKQIxt/uaNpSBTo7cBs8jrXF/lSc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/7a1c2e-75fb-44c6-a83c-14673c72a1df/1/Y_lyZ-fAB5UwlQnx6NPZzeCnbE4.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/7a1c2e-75fb-44c6-a83c-14673c72a1df/1/Y_lyZ-fAB5UwlQnx6NPZzeCnbE4.mft rsync://rpki.ripe.net/repository/DEFAULT/Y_lyZ-fAB5UwlQnx6NPZzeCnbE4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 10:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:45:b8:68:7e:2f:53:b1:7c:c3:26:7c:65:19:58:05:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63f97267e7c00795309509f1e8d3d9cde0a76c4e Validity Not Before: Dec 22 11:01:11 2025 GMT Not After : Dec 23 11:01:11 2025 GMT Subject: CN=7e63c142d860213212385e0d0f2bac8c27c72ebd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:7c:c9:31:53:14:2c:3c:e3:2b:44:b6:bb:ac: 1f:b7:ca:71:a5:2f:16:11:c6:03:74:35:7d:1b:21: db:d9:b1:b4:09:92:be:41:2e:96:b7:25:20:36:f0: 7e:17:d1:1e:79:93:09:ba:40:b5:1b:1c:86:93:91: 00:3d:69:47:5d:b5:4e:f8:a8:2c:1a:22:b4:25:d7: a2:a7:9f:4b:c9:ce:0a:4c:66:75:1e:3b:8b:16:e0: 2d:5e:49:10:30:88:a8:aa:e5:3f:82:3e:0b:df:a9: 91:db:75:23:91:66:2a:d7:5d:e2:c2:81:84:09:21: 80:92:08:34:ee:56:b8:3c:ff:62:5b:de:00:3d:cb: 7a:04:b7:c8:45:19:29:e9:d0:f0:1d:62:f8:db:2a: de:c5:b5:fb:d8:9b:45:f1:06:ff:fd:63:cb:b2:e6: 17:25:01:6c:fd:23:fe:81:17:03:31:13:7e:bc:2a: ef:f9:b9:4b:3f:6c:5d:00:01:0f:eb:74:09:7d:7d: ac:81:17:70:01:f7:eb:c2:08:09:c8:ab:bb:8e:05: cd:8e:19:18:3d:93:07:48:bc:d9:d8:73:1d:5f:6c: aa:b7:c7:f0:34:bf:25:da:69:b3:41:73:f6:1d:5f: e1:7f:9d:8b:c8:f6:59:2b:55:7a:e4:dd:13:2c:00: 59:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:63:C1:42:D8:60:21:32:12:38:5E:0D:0F:2B:AC:8C:27:C7:2E:BD X509v3 Authority Key Identifier: keyid:63:F9:72:67:E7:C0:07:95:30:95:09:F1:E8:D3:D9:CD:E0:A7:6C:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y_lyZ-fAB5UwlQnx6NPZzeCnbE4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/7a1c2e-75fb-44c6-a83c-14673c72a1df/1/Y_lyZ-fAB5UwlQnx6NPZzeCnbE4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/7a1c2e-75fb-44c6-a83c-14673c72a1df/1/Y_lyZ-fAB5UwlQnx6NPZzeCnbE4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:42:ae:06:ce:9c:e5:d9:0c:91:3b:58:53:78:18:b6:75:35: df:51:9f:1f:f9:fa:b6:3f:48:ae:27:bb:fe:ad:01:a0:9f:e8: 24:f5:96:ce:23:3f:12:41:b1:53:79:b0:44:fa:4a:15:8c:41: 40:69:38:b1:1b:37:15:e6:55:f5:6c:56:82:c5:15:cd:f2:bb: 9c:ac:aa:a7:d3:dd:0e:c2:c5:41:3a:31:72:2e:01:8c:a9:13: 8f:cb:72:bb:d3:c0:93:0b:7a:06:db:1f:9f:f5:b6:33:1e:ef: f8:4f:d9:f5:e6:85:0f:55:b4:0f:55:54:2d:1f:05:88:fb:3d: c9:c6:c9:01:92:58:5d:3c:59:05:67:22:7f:c9:62:12:5d:1e: 85:62:ef:7b:bd:75:d3:d4:40:51:74:a0:a4:62:0f:c7:81:4f: cc:b6:18:d7:4c:b0:5b:1a:50:27:a9:b8:79:0c:d2:5b:be:52: 77:85:37:bf:89:35:c6:ed:70:33:3b:d0:f6:a8:f2:65:38:6b: 7a:53:da:45:bd:78:bf:07:be:4a:36:da:14:7f:bc:e7:dd:4c: 3e:52:b6:7c:11:2e:19:77:42:98:05:e5:69:2d:51:86:41:d5: e9:fd:18:41:b8:ac:45:9b:a2:26:ba:4a:80:62:0e:9c:a5:b2: af:34:35:89 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtFuGh+L1OxfMMmfGUZWAUUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZjk3MjY3ZTdjMDA3OTUzMDk1MDlmMWU4ZDNkOWNkZTBh NzZjNGUwHhcNMjUxMjIyMTEwMTExWhcNMjUxMjIzMTEwMTExWjAzMTEwLwYDVQQD Eyg3ZTYzYzE0MmQ4NjAyMTMyMTIzODVlMGQwZjJiYWM4YzI3YzcyZWJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAznzJMVMULDzjK0S2u6wft8pxpS8W EcYDdDV9GyHb2bG0CZK+QS6WtyUgNvB+F9EeeZMJukC1GxyGk5EAPWlHXbVO+Kgs GiK0Jdeip59Lyc4KTGZ1HjuLFuAtXkkQMIioquU/gj4L36mR23UjkWYq113iwoGE CSGAkgg07la4PP9iW94APct6BLfIRRkp6dDwHWL42yrexbX72JtF8Qb//WPLsuYX JQFs/SP+gRcDMRN+vCrv+blLP2xdAAEP63QJfX2sgRdwAffrwggJyKu7jgXNjhkY PZMHSLzZ2HMdX2yqt8fwNL8l2mmzQXP2HV/hf52LyPZZK1V65N0TLABZ3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH5jwULYYCEyEjheDQ8rrIwnxy69MB8GA1UdIwQY MBaAFGP5cmfnwAeVMJUJ8ejT2c3gp2xOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWV9seVotZkFCNVV3bFFueDZOUFp6ZUNuYkU0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS83YTFjMmUtNzVmYi00NGM2LWE4M2Mt MTQ2NzNjNzJhMWRmLzEvWV9seVotZkFCNVV3bFFueDZOUFp6ZUNuYkU0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS83YTFjMmUtNzVmYi00NGM2LWE4M2MtMTQ2NzNjNzJhMWRm LzEvWV9seVotZkFCNVV3bFFueDZOUFp6ZUNuYkU0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATUKuBs6c 5dkMkTtYU3gYtnU131GfH/n6tj9Irie7/q0BoJ/oJPWWziM/EkGxU3mwRPpKFYxB QGk4sRs3FeZV9WxWgsUVzfK7nKyqp9PdDsLFQToxci4BjKkTj8tyu9PAkwt6Btsf n/W2Mx7v+E/Z9eaFD1W0D1VULR8FiPs9ycbJAZJYXTxZBWcif8liEl0ehWLve711 09RAUXSgpGIPx4FPzLYY10ywWxpQJ6m4eQzSW75Sd4U3v4k1xu1wMzvQ9qjyZThr elPaRb14vwe+SjbaFH+8591MPlK2fBEuGXdCmAXlaS1RhkHV6f0YQbisRZuiJrpK gGIOnKWyrzQ1iQ== -----END CERTIFICATE-----Generated at Mon Dec 22 15:38:44 2025 by rpki-client