This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/3ad5e6-440b-453c-a29b-6fb67d9b8609/1/Y6wkfmJx8GSRY3K1If3IZJslTFU.mft File: Y6wkfmJx8GSRY3K1If3IZJslTFU.mft (raw, json) Hash identifier: mURC59fJcNG5jppVw7wTpAmqhubnSTvnZhGjNnkvrks= Subject key identifier: 99:A2:ED:4F:B2:1F:2F:41:2F:06:66:5C:09:EB:5D:F9:3B:3B:E7:AD Authority key identifier: 63:AC:24:7E:62:71:F0:64:91:63:72:B5:21:FD:C8:64:9B:25:4C:55 Certificate issuer: /CN=63ac247e6271f064916372b521fdc8649b254c55 Certificate serial: 019B35325768816CEF7375FD09BEBF7D3367 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y6wkfmJx8GSRY3K1If3IZJslTFU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/3ad5e6-440b-453c-a29b-6fb67d9b8609/1/Y6wkfmJx8GSRY3K1If3IZJslTFU.mft Manifest number: 016F Signing time: Fri 19 Dec 2025 06:00:50 +0000 Manifest this update: Fri 19 Dec 2025 06:00:50 +0000 Manifest next update: Sat 20 Dec 2025 06:00:50 +0000 Files and hashes: 1: Y6wkfmJx8GSRY3K1If3IZJslTFU.crl (hash: tW+zaFdlBUspUyTJP3EdCUp0BmIyeOSBwmIFnV8bBUk=) 2: t5kuZiYWUKa8KtyVbYW6nMpnU6k.roa (hash: LmnQkrb3HQUd6WNEyvE/YpZHC1nuWweBSns5N3HZYjE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/3ad5e6-440b-453c-a29b-6fb67d9b8609/1/Y6wkfmJx8GSRY3K1If3IZJslTFU.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/3ad5e6-440b-453c-a29b-6fb67d9b8609/1/Y6wkfmJx8GSRY3K1If3IZJslTFU.mft rsync://rpki.ripe.net/repository/DEFAULT/Y6wkfmJx8GSRY3K1If3IZJslTFU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 06:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:32:57:68:81:6c:ef:73:75:fd:09:be:bf:7d:33:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63ac247e6271f064916372b521fdc8649b254c55 Validity Not Before: Dec 19 06:00:50 2025 GMT Not After : Dec 20 06:00:50 2025 GMT Subject: CN=99a2ed4fb21f2f412f06665c09eb5df93b3be7ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:87:10:ca:c9:7d:33:49:9c:94:7a:bb:24:79: da:1c:07:45:6d:9d:52:be:76:ae:44:bf:42:59:88: 12:34:d0:99:ed:75:17:44:e3:8d:2f:25:49:bd:33: b7:4b:70:45:ae:07:3d:f2:ea:20:9e:3c:3b:ca:79: 2a:17:dd:08:9a:52:7b:ea:e5:6e:96:98:6a:2a:3b: 25:1f:55:ff:2b:b7:19:dd:5a:4d:59:fe:ce:fc:da: c3:16:17:c3:56:19:05:9f:ae:a4:fa:7d:14:21:7a: da:48:ec:95:2f:55:66:45:0e:76:0a:1b:a9:42:93: 96:6a:43:ee:93:2d:2f:c9:ef:82:c4:4c:68:08:33: 45:fd:8f:8b:30:b5:bc:8a:0d:ec:e8:61:2a:6f:23: 62:f1:09:81:cd:f9:19:dd:1e:d4:d9:de:df:84:ec: 97:72:54:81:5b:68:a4:9d:ea:ba:e4:54:73:9b:58: 81:62:57:34:a6:ca:05:53:65:b7:b6:c9:22:6c:63: 16:0d:53:bb:1c:d7:56:7e:9d:2e:15:a7:ed:9c:de: e7:60:18:b4:ea:b5:bb:de:00:d8:a1:4a:1c:71:6c: 6e:ea:54:11:cc:00:77:0a:41:57:ac:a8:0c:32:0f: c0:9b:a3:a3:28:f8:67:b1:fd:b0:cf:13:f1:79:5b: 7b:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:A2:ED:4F:B2:1F:2F:41:2F:06:66:5C:09:EB:5D:F9:3B:3B:E7:AD X509v3 Authority Key Identifier: keyid:63:AC:24:7E:62:71:F0:64:91:63:72:B5:21:FD:C8:64:9B:25:4C:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y6wkfmJx8GSRY3K1If3IZJslTFU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/3ad5e6-440b-453c-a29b-6fb67d9b8609/1/Y6wkfmJx8GSRY3K1If3IZJslTFU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/3ad5e6-440b-453c-a29b-6fb67d9b8609/1/Y6wkfmJx8GSRY3K1If3IZJslTFU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:61:d6:23:01:2a:55:d1:af:c6:ae:c3:71:87:54:f1:7b:d6: fe:12:c1:86:a1:2f:29:b6:f3:65:d7:58:f9:d3:c4:90:bc:e1: 54:c2:d5:4e:7c:ce:d2:60:78:7f:0b:da:e0:4c:aa:f7:4d:94: 9e:fa:a0:f1:cf:47:6f:0b:40:84:86:47:5b:71:ba:06:e7:9d: 6c:7b:1a:ac:37:07:ab:a1:90:82:60:60:7d:1f:43:f5:8e:18: 80:c8:22:61:64:f2:07:ec:eb:c7:42:db:32:07:42:74:6d:de: 8b:54:af:70:c5:4f:b7:6e:eb:d3:82:b7:a8:c8:2d:af:2c:87: fb:e1:51:95:b4:76:47:0c:d7:dd:02:54:66:ec:ed:97:7c:90: 63:ce:78:8a:3e:90:25:72:54:e3:ba:f2:ce:2e:6f:25:09:79: 35:3b:9a:4c:10:2a:fd:06:85:e7:ce:91:5e:43:91:34:62:b2: 70:37:e4:b9:cc:e8:7b:61:7e:d4:c3:68:9d:e1:7b:c5:d7:cd: fe:0f:49:33:f5:80:30:83:8c:d8:15:e0:d6:8e:f9:5d:f4:36: 08:6c:7d:11:6e:96:c1:af:6e:07:db:22:34:ed:a7:81:99:0d: b9:5a:af:7f:e0:29:dc:f4:8e:0c:c9:56:d4:a2:52:7f:83:b3: 36:9f:ef:36 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1MldogWzvc3X9Cb6/fTNnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzYWMyNDdlNjI3MWYwNjQ5MTYzNzJiNTIxZmRjODY0OWIy NTRjNTUwHhcNMjUxMjE5MDYwMDUwWhcNMjUxMjIwMDYwMDUwWjAzMTEwLwYDVQQD Eyg5OWEyZWQ0ZmIyMWYyZjQxMmYwNjY2NWMwOWViNWRmOTNiM2JlN2FkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwocQysl9M0mclHq7JHnaHAdFbZ1S vnauRL9CWYgSNNCZ7XUXROONLyVJvTO3S3BFrgc98uognjw7ynkqF90ImlJ76uVu lphqKjslH1X/K7cZ3VpNWf7O/NrDFhfDVhkFn66k+n0UIXraSOyVL1VmRQ52Chup QpOWakPuky0vye+CxExoCDNF/Y+LMLW8ig3s6GEqbyNi8QmBzfkZ3R7U2d7fhOyX clSBW2ikneq65FRzm1iBYlc0psoFU2W3tskibGMWDVO7HNdWfp0uFaftnN7nYBi0 6rW73gDYoUoccWxu6lQRzAB3CkFXrKgMMg/Am6OjKPhnsf2wzxPxeVt7vQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJmi7U+yHy9BLwZmXAnrXfk7O+etMB8GA1UdIwQY MBaAFGOsJH5icfBkkWNytSH9yGSbJUxVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWTZ3a2ZtSng4R1NSWTNLMUlmM0laSnNsVEZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy8zYWQ1ZTYtNDQwYi00NTNjLWEyOWIt NmZiNjdkOWI4NjA5LzEvWTZ3a2ZtSng4R1NSWTNLMUlmM0laSnNsVEZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy8zYWQ1ZTYtNDQwYi00NTNjLWEyOWItNmZiNjdkOWI4NjA5 LzEvWTZ3a2ZtSng4R1NSWTNLMUlmM0laSnNsVEZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEGHWIwEq VdGvxq7DcYdU8XvW/hLBhqEvKbbzZddY+dPEkLzhVMLVTnzO0mB4fwva4Eyq902U nvqg8c9HbwtAhIZHW3G6BuedbHsarDcHq6GQgmBgfR9D9Y4YgMgiYWTyB+zrx0Lb MgdCdG3ei1SvcMVPt27r04K3qMgtryyH++FRlbR2RwzX3QJUZuztl3yQY854ij6Q JXJU47ryzi5vJQl5NTuaTBAq/QaF586RXkORNGKycDfkuczoe2F+1MNoneF7xdfN /g9JM/WAMIOM2BXg1o75XfQ2CGx9EW6Wwa9uB9siNO2ngZkNuVqvf+Ap3PSODMlW 1KJSf4OzNp/vNg== -----END CERTIFICATE-----Generated at Fri Dec 19 14:20:30 2025 by rpki-client