This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/7b2fcc-ebc9-4b02-b716-f80d5f31664e/1/Y14XDZsHxQ0bKa6GliBssUWk8fc.mft File: Y14XDZsHxQ0bKa6GliBssUWk8fc.mft (raw, json) Hash identifier: TYFsu0kBv+AR0pnXb4+eyhFMnRantfq6N7DU6m9KWEg= Subject key identifier: 2A:1F:55:19:F2:C9:B5:B5:04:46:90:2F:78:58:C0:FB:34:67:B6:75 Authority key identifier: 63:5E:17:0D:9B:07:C5:0D:1B:29:AE:86:96:20:6C:B1:45:A4:F1:F7 Certificate issuer: /CN=635e170d9b07c50d1b29ae8696206cb145a4f1f7 Certificate serial: 019B3FED3F4931DAEE33EDC704B66BAE5807 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y14XDZsHxQ0bKa6GliBssUWk8fc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/7b2fcc-ebc9-4b02-b716-f80d5f31664e/1/Y14XDZsHxQ0bKa6GliBssUWk8fc.mft Manifest number: DF Signing time: Sun 21 Dec 2025 08:01:11 +0000 Manifest this update: Sun 21 Dec 2025 08:01:11 +0000 Manifest next update: Mon 22 Dec 2025 08:01:11 +0000 Files and hashes: 1: Y14XDZsHxQ0bKa6GliBssUWk8fc.crl (hash: TH9YTzj07uniY0lyQRNjaansqiU/NYBg0QpU0jCkGVg=) 2: qdMXO5dxGNkyeRydnMIi_ZzZAVs.roa (hash: emXh4czyfau1VXJaPAfpRR7uc8vhZu0P1DoeRXNpxPQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/7b2fcc-ebc9-4b02-b716-f80d5f31664e/1/Y14XDZsHxQ0bKa6GliBssUWk8fc.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/7b2fcc-ebc9-4b02-b716-f80d5f31664e/1/Y14XDZsHxQ0bKa6GliBssUWk8fc.mft rsync://rpki.ripe.net/repository/DEFAULT/Y14XDZsHxQ0bKa6GliBssUWk8fc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 08:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:ed:3f:49:31:da:ee:33:ed:c7:04:b6:6b:ae:58:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=635e170d9b07c50d1b29ae8696206cb145a4f1f7 Validity Not Before: Dec 21 08:01:11 2025 GMT Not After : Dec 22 08:01:11 2025 GMT Subject: CN=2a1f5519f2c9b5b50446902f7858c0fb3467b675 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:f8:ca:7d:73:c9:b7:f4:23:7e:d9:3d:32:a6: 04:f5:15:f2:ce:59:c3:f1:99:f8:b0:40:33:9e:a3: 8d:5d:1e:a5:7a:ff:65:31:65:d6:1e:1d:7d:38:95: df:47:19:0c:c8:60:a7:cf:c2:ed:2b:34:b3:ce:31: 03:c5:fc:27:57:f3:d8:62:e2:d8:e7:0a:6c:7c:ea: ea:09:57:f7:83:c2:47:e6:12:74:86:89:f3:db:c1: 69:42:a3:2a:82:25:1a:53:98:d7:cf:8f:db:05:2d: a4:fc:51:64:f8:53:45:30:a5:44:c4:0c:83:ea:37: 5c:50:bb:84:04:af:7b:52:7b:e7:4d:ad:85:a9:8d: 05:87:7e:ab:1c:3d:ae:00:26:20:3f:62:cb:8d:16: f9:1f:52:70:00:06:bd:35:22:52:a1:e0:3e:c7:00: 58:18:d9:62:5b:1d:e7:05:b0:45:02:2e:85:6c:c0: 9c:f5:bb:a0:89:d8:a8:5b:f7:bc:fd:85:99:8a:b6: 3f:d7:df:da:f0:a6:a4:cc:09:85:f4:d1:c4:b0:58: a4:ad:a2:3d:fa:c2:2c:db:60:61:67:66:93:2c:5d: a7:75:5b:bf:46:ef:d7:61:9d:89:15:8e:c7:01:93: 40:73:8e:5c:62:70:88:70:c8:18:a9:79:8f:4f:46: 2f:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:1F:55:19:F2:C9:B5:B5:04:46:90:2F:78:58:C0:FB:34:67:B6:75 X509v3 Authority Key Identifier: keyid:63:5E:17:0D:9B:07:C5:0D:1B:29:AE:86:96:20:6C:B1:45:A4:F1:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y14XDZsHxQ0bKa6GliBssUWk8fc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/7b2fcc-ebc9-4b02-b716-f80d5f31664e/1/Y14XDZsHxQ0bKa6GliBssUWk8fc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/7b2fcc-ebc9-4b02-b716-f80d5f31664e/1/Y14XDZsHxQ0bKa6GliBssUWk8fc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c2:94:2a:10:18:7c:19:a2:11:6b:18:f6:f7:58:2a:05:5b:5b: 6a:e2:4c:70:cf:8d:84:6a:72:37:bd:95:62:24:22:d8:1c:a9: ad:65:e4:78:88:be:f7:3a:2c:c8:80:43:7e:15:80:67:d5:31: 26:08:90:f9:87:a6:ff:48:a8:15:02:d3:cf:10:b8:83:99:2a: 74:a3:17:98:8d:77:40:cc:42:a2:59:ac:e6:c7:09:b1:71:a0: eb:84:98:f9:d6:80:ff:3e:8d:de:2f:6b:ca:5c:0e:ea:d7:38: eb:45:1c:ec:c5:a1:20:ba:f2:18:d3:d6:e3:4a:28:19:61:3c: da:9c:da:72:d1:56:2b:6f:e5:85:1c:ab:31:2e:0d:6c:1d:fb: b1:30:a6:04:20:70:98:7a:2d:a3:4d:bd:f6:d5:b7:61:9a:d0: 49:d4:38:6d:96:02:02:b7:ed:c4:7c:7a:99:14:7b:3d:4b:73: 9d:81:da:85:51:3b:21:8a:83:b0:37:57:d3:f8:5b:49:bc:ec: 72:ae:22:53:8a:ef:62:27:a8:86:05:3c:c5:6a:01:b9:09:ad: f1:43:26:1a:32:d7:ec:37:ca:70:fd:3d:7e:1c:15:8a:9b:2d: 7b:e1:d7:e7:c8:f6:09:18:e1:4d:1b:d2:8a:b3:59:ba:95:be: 99:8e:96:20 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/7T9JMdruM+3HBLZrrlgHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzNWUxNzBkOWIwN2M1MGQxYjI5YWU4Njk2MjA2Y2IxNDVh NGYxZjcwHhcNMjUxMjIxMDgwMTExWhcNMjUxMjIyMDgwMTExWjAzMTEwLwYDVQQD EygyYTFmNTUxOWYyYzliNWI1MDQ0NjkwMmY3ODU4YzBmYjM0NjdiNjc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtfjKfXPJt/Qjftk9MqYE9RXyzlnD 8Zn4sEAznqONXR6lev9lMWXWHh19OJXfRxkMyGCnz8LtKzSzzjEDxfwnV/PYYuLY 5wpsfOrqCVf3g8JH5hJ0honz28FpQqMqgiUaU5jXz4/bBS2k/FFk+FNFMKVExAyD 6jdcULuEBK97UnvnTa2FqY0Fh36rHD2uACYgP2LLjRb5H1JwAAa9NSJSoeA+xwBY GNliWx3nBbBFAi6FbMCc9bugidioW/e8/YWZirY/19/a8KakzAmF9NHEsFikraI9 +sIs22BhZ2aTLF2ndVu/Ru/XYZ2JFY7HAZNAc45cYnCIcMgYqXmPT0YvYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCofVRnyybW1BEaQL3hYwPs0Z7Z1MB8GA1UdIwQY MBaAFGNeFw2bB8UNGymuhpYgbLFFpPH3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWTE0WERac0h4UTBiS2E2R2xpQnNzVVdrOGZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS83YjJmY2MtZWJjOS00YjAyLWI3MTYt ZjgwZDVmMzE2NjRlLzEvWTE0WERac0h4UTBiS2E2R2xpQnNzVVdrOGZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS83YjJmY2MtZWJjOS00YjAyLWI3MTYtZjgwZDVmMzE2NjRl LzEvWTE0WERac0h4UTBiS2E2R2xpQnNzVVdrOGZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwpQqEBh8 GaIRaxj291gqBVtbauJMcM+NhGpyN72VYiQi2ByprWXkeIi+9zosyIBDfhWAZ9Ux JgiQ+Yem/0ioFQLTzxC4g5kqdKMXmI13QMxColms5scJsXGg64SY+daA/z6N3i9r ylwO6tc460Uc7MWhILryGNPW40ooGWE82pzactFWK2/lhRyrMS4NbB37sTCmBCBw mHoto0299tW3YZrQSdQ4bZYCArftxHx6mRR7PUtznYHahVE7IYqDsDdX0/hbSbzs cq4iU4rvYieohgU8xWoBuQmt8UMmGjLX7DfKcP09fhwVipste+HX58j2CRjhTRvS irNZupW+mY6WIA== -----END CERTIFICATE-----Generated at Sun Dec 21 14:41:06 2025 by rpki-client