This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/757786-cea5-49ba-8ef3-ac38d5a20afe/1/Y2-s66M0MntpXrOwyV6yMJL5PgE.mft File: Y2-s66M0MntpXrOwyV6yMJL5PgE.mft (raw, json) Hash identifier: d/3zK4tZjuDdCIjlOjkM2sUkEPETncFMJ+aeCsVHryM= Subject key identifier: 01:A7:8C:3D:32:C3:D8:FB:F4:A5:86:CE:4B:86:EF:1B:44:05:5A:CD Authority key identifier: 63:6F:AC:EB:A3:34:32:7B:69:5E:B3:B0:C9:5E:B2:30:92:F9:3E:01 Certificate issuer: /CN=636faceba334327b695eb3b0c95eb23092f93e01 Certificate serial: 019B5975FBB5147C40677CB034319D1C0FF4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y2-s66M0MntpXrOwyV6yMJL5PgE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/757786-cea5-49ba-8ef3-ac38d5a20afe/1/Y2-s66M0MntpXrOwyV6yMJL5PgE.mft Manifest number: 1284 Signing time: Fri 26 Dec 2025 07:01:02 +0000 Manifest this update: Fri 26 Dec 2025 07:01:02 +0000 Manifest next update: Sat 27 Dec 2025 07:01:02 +0000 Files and hashes: 1: Y2-s66M0MntpXrOwyV6yMJL5PgE.crl (hash: 1HsFYnGZjXgF7jxuZAMwF3hyGiga46walsF2KKQY8y0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/757786-cea5-49ba-8ef3-ac38d5a20afe/1/Y2-s66M0MntpXrOwyV6yMJL5PgE.crl rsync://rpki.ripe.net/repository/DEFAULT/03/757786-cea5-49ba-8ef3-ac38d5a20afe/1/Y2-s66M0MntpXrOwyV6yMJL5PgE.mft rsync://rpki.ripe.net/repository/DEFAULT/Y2-s66M0MntpXrOwyV6yMJL5PgE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:75:fb:b5:14:7c:40:67:7c:b0:34:31:9d:1c:0f:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=636faceba334327b695eb3b0c95eb23092f93e01 Validity Not Before: Dec 26 07:01:02 2025 GMT Not After : Dec 27 07:01:02 2025 GMT Subject: CN=01a78c3d32c3d8fbf4a586ce4b86ef1b44055acd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:86:15:9e:3e:1e:a6:ff:f2:8b:fe:62:3c:70: 2e:35:fc:ea:3f:9c:cc:8c:c5:c6:08:8a:6e:40:a1: fb:61:e0:dc:2e:00:d3:09:8f:06:31:9b:e9:b9:42: ac:af:d2:22:3b:93:d8:b9:95:68:33:3d:3d:53:16: 36:5f:43:7f:e3:1d:90:32:38:bc:cf:17:a0:c6:29: 34:9d:72:1d:7d:9d:2e:b3:65:17:5d:0c:d3:d0:ee: ef:31:e6:20:34:a0:53:bb:b2:d5:fd:70:85:91:33: e7:ac:9d:0a:3a:17:b6:09:b6:ec:21:2e:78:74:ff: 2b:b8:ce:6f:30:83:3d:f1:33:a3:85:e2:df:37:c3: 08:6c:18:a0:7b:3d:93:62:24:97:1c:aa:a7:fb:c5: 20:45:75:7e:fd:5b:94:2f:e7:2d:9e:1d:8e:f8:4c: 32:c1:43:e7:3c:cd:da:3e:7c:50:b0:03:db:f9:ff: 89:c5:c9:2f:a0:40:61:e7:19:b9:38:97:6f:b3:cf: dc:5f:76:29:41:3a:cb:56:76:5c:48:6f:19:07:6e: 66:1c:f2:69:9b:bd:f6:e9:b1:fa:2f:ee:62:e1:65: 7c:d1:c2:a0:d4:4e:40:8a:46:c1:aa:a3:85:84:af: 36:65:53:bd:92:64:97:b6:e1:a1:ae:da:ce:7f:53: 5e:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:A7:8C:3D:32:C3:D8:FB:F4:A5:86:CE:4B:86:EF:1B:44:05:5A:CD X509v3 Authority Key Identifier: keyid:63:6F:AC:EB:A3:34:32:7B:69:5E:B3:B0:C9:5E:B2:30:92:F9:3E:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y2-s66M0MntpXrOwyV6yMJL5PgE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/757786-cea5-49ba-8ef3-ac38d5a20afe/1/Y2-s66M0MntpXrOwyV6yMJL5PgE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/757786-cea5-49ba-8ef3-ac38d5a20afe/1/Y2-s66M0MntpXrOwyV6yMJL5PgE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:f0:72:f6:14:c9:ff:b6:a3:87:70:4b:b1:6b:04:e4:31:91: 25:68:ad:d8:92:26:34:4e:ba:ea:c3:40:49:5b:ec:04:5d:15: 52:01:db:fc:f4:d7:7b:83:70:29:12:ad:e7:0d:b9:4f:39:24: 33:53:6d:5c:df:6b:f3:47:b7:2b:66:07:da:e5:a6:79:b4:df: 08:bc:dc:4a:31:1c:99:dc:9b:d2:88:65:80:cb:44:b1:f0:76: 3b:84:e4:75:6e:dd:f3:23:07:ee:21:d8:66:0a:88:55:51:ba: b3:4a:a2:d9:45:c4:bf:83:f1:99:48:f8:e4:cf:26:ee:62:06: d6:13:d6:f2:ef:89:b4:a0:9d:56:a7:50:db:8f:d7:6d:d4:9e: 7e:1f:ed:79:f7:b2:cf:68:86:86:f3:d1:98:ac:87:62:3d:e9: c4:68:22:2e:43:23:b9:ff:eb:cd:f2:74:d8:d3:91:d7:ca:20: 19:46:e7:ba:0b:45:a6:64:2d:ac:fe:3f:af:3a:57:2f:89:f6: 53:84:d0:7b:81:3e:4f:25:6b:e4:d2:5e:a1:07:0a:86:13:aa: 23:51:64:47:56:15:bd:c6:4a:f6:05:96:0b:1e:a7:fb:94:72: 9a:d2:90:e6:13:76:c4:09:25:f2:14:53:ac:53:cb:de:2e:25: 9e:23:70:c5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZdfu1FHxAZ3ywNDGdHA/0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzNmZhY2ViYTMzNDMyN2I2OTVlYjNiMGM5NWViMjMwOTJm OTNlMDEwHhcNMjUxMjI2MDcwMTAyWhcNMjUxMjI3MDcwMTAyWjAzMTEwLwYDVQQD EygwMWE3OGMzZDMyYzNkOGZiZjRhNTg2Y2U0Yjg2ZWYxYjQ0MDU1YWNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmoYVnj4epv/yi/5iPHAuNfzqP5zM jMXGCIpuQKH7YeDcLgDTCY8GMZvpuUKsr9IiO5PYuZVoMz09UxY2X0N/4x2QMji8 zxegxik0nXIdfZ0us2UXXQzT0O7vMeYgNKBTu7LV/XCFkTPnrJ0KOhe2CbbsIS54 dP8ruM5vMIM98TOjheLfN8MIbBigez2TYiSXHKqn+8UgRXV+/VuUL+ctnh2O+Ewy wUPnPM3aPnxQsAPb+f+JxckvoEBh5xm5OJdvs8/cX3YpQTrLVnZcSG8ZB25mHPJp m7326bH6L+5i4WV80cKg1E5AikbBqqOFhK82ZVO9kmSXtuGhrtrOf1Ne3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAGnjD0yw9j79KWGzkuG7xtEBVrNMB8GA1UdIwQY MBaAFGNvrOujNDJ7aV6zsMlesjCS+T4BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWTItczY2TTBNbnRwWHJPd3lWNnlNSkw1UGdFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy83NTc3ODYtY2VhNS00OWJhLThlZjMt YWMzOGQ1YTIwYWZlLzEvWTItczY2TTBNbnRwWHJPd3lWNnlNSkw1UGdFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy83NTc3ODYtY2VhNS00OWJhLThlZjMtYWMzOGQ1YTIwYWZl LzEvWTItczY2TTBNbnRwWHJPd3lWNnlNSkw1UGdFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApvBy9hTJ /7ajh3BLsWsE5DGRJWit2JImNE666sNASVvsBF0VUgHb/PTXe4NwKRKt5w25Tzkk M1NtXN9r80e3K2YH2uWmebTfCLzcSjEcmdyb0ohlgMtEsfB2O4TkdW7d8yMH7iHY ZgqIVVG6s0qi2UXEv4PxmUj45M8m7mIG1hPW8u+JtKCdVqdQ24/XbdSefh/tefey z2iGhvPRmKyHYj3pxGgiLkMjuf/rzfJ02NOR18ogGUbnugtFpmQtrP4/rzpXL4n2 U4TQe4E+TyVr5NJeoQcKhhOqI1FkR1YVvcZK9gWWCx6n+5RymtKQ5hN2xAkl8hRT rFPL3i4lniNwxQ== -----END CERTIFICATE-----Generated at Fri Dec 26 14:18:19 2025 by rpki-client