This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/26d917-8c91-45ab-8442-e4e52ac0fefe/1/Y9krglYVmJTSubJfTYWYbBcnI8M.mft File: Y9krglYVmJTSubJfTYWYbBcnI8M.mft (raw, json) Hash identifier: +MA9Qk72CMcieoMB91xVdNo3FNcbB1uWOTHOEGlcikM= Subject key identifier: F7:92:C1:CA:19:A1:26:32:31:40:4F:2F:17:BC:43:05:AB:42:DE:97 Authority key identifier: 63:D9:2B:82:56:15:98:94:D2:B9:B2:5F:4D:85:98:6C:17:27:23:C3 Certificate issuer: /CN=63d92b8256159894d2b9b25f4d85986c172723c3 Certificate serial: 019B3B6BB3986488DEBBB45C9B7B4DFC203C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y9krglYVmJTSubJfTYWYbBcnI8M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/26d917-8c91-45ab-8442-e4e52ac0fefe/1/Y9krglYVmJTSubJfTYWYbBcnI8M.mft Manifest number: 0F51 Signing time: Sat 20 Dec 2025 11:01:12 +0000 Manifest this update: Sat 20 Dec 2025 11:01:12 +0000 Manifest next update: Sun 21 Dec 2025 11:01:12 +0000 Files and hashes: 1: VWwybFqWy2MXRW4GlH3TydNfWoU.roa (hash: AWURtsDjcCoYL2cv7BnBoU4GwDRl+uRuBqffs+8EChU=) 2: VsWH0dh23uHGDE4kVE5VRVWnLr0.roa (hash: hOVkpMTlrRKsdZ/dZuqLj9eHRUgLLpUyv0shzANzums=) 3: Y9krglYVmJTSubJfTYWYbBcnI8M.crl (hash: 2LybB34uxA6m6YMp2HB9k5OGR8KhWq1tpj0fY6XItso=) 4: gUlf15cCFOrr7zCpeZmrXHzHdJI.roa (hash: BZcCVc7umSblQi+mV0dsvmWzWVZejT4EU9eRPoEWNCA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/26d917-8c91-45ab-8442-e4e52ac0fefe/1/Y9krglYVmJTSubJfTYWYbBcnI8M.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/26d917-8c91-45ab-8442-e4e52ac0fefe/1/Y9krglYVmJTSubJfTYWYbBcnI8M.mft rsync://rpki.ripe.net/repository/DEFAULT/Y9krglYVmJTSubJfTYWYbBcnI8M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:6b:b3:98:64:88:de:bb:b4:5c:9b:7b:4d:fc:20:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63d92b8256159894d2b9b25f4d85986c172723c3 Validity Not Before: Dec 20 11:01:12 2025 GMT Not After : Dec 21 11:01:12 2025 GMT Subject: CN=f792c1ca19a1263231404f2f17bc4305ab42de97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:60:9a:f1:31:22:5a:a3:52:6c:5b:9a:74:14: 5c:71:2e:d0:fa:8e:0f:3c:a8:11:d8:b6:ee:80:20: de:c3:0b:e6:ce:8e:87:2a:e4:37:da:ef:e5:60:05: 9b:c1:ef:65:c6:52:1e:1c:c3:1c:d7:2e:11:fe:05: e5:00:c2:ea:db:bb:54:17:47:4d:4b:08:21:37:02: 52:cb:43:fd:59:ce:26:bb:28:ae:95:e1:ed:64:b0: 30:82:18:75:ce:74:13:85:51:29:d3:88:8d:5d:63: 64:22:66:9b:fd:da:40:0d:26:b8:9e:62:04:b4:67: 41:05:a7:13:9a:69:23:a4:ee:23:5c:bd:f6:30:45: 42:0f:8b:6f:fd:8d:ce:e6:fd:0f:d4:3e:fd:f6:b4: cc:2c:54:59:e3:67:74:fc:d9:cb:96:4c:d0:39:c1: a8:a0:25:d3:fb:4d:1f:6d:7c:fc:73:1c:f3:4d:65: c8:85:e9:dc:d5:02:ce:38:8f:ac:2c:c9:84:a0:8b: f9:7e:b8:7d:5f:4d:7b:b9:f7:91:1f:32:6d:47:2d: 7b:c6:a8:c5:7b:a6:9d:94:d3:4a:9b:de:31:63:02: f7:49:dd:ad:58:9a:60:b7:bd:2e:d8:65:5e:7a:a9: dc:44:c5:c2:54:43:b7:53:e5:fa:f5:47:f4:da:c6: 6c:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:92:C1:CA:19:A1:26:32:31:40:4F:2F:17:BC:43:05:AB:42:DE:97 X509v3 Authority Key Identifier: keyid:63:D9:2B:82:56:15:98:94:D2:B9:B2:5F:4D:85:98:6C:17:27:23:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y9krglYVmJTSubJfTYWYbBcnI8M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/26d917-8c91-45ab-8442-e4e52ac0fefe/1/Y9krglYVmJTSubJfTYWYbBcnI8M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/26d917-8c91-45ab-8442-e4e52ac0fefe/1/Y9krglYVmJTSubJfTYWYbBcnI8M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:eb:53:81:40:4c:d0:9b:59:ad:84:7e:de:8f:95:84:8f:9a: 02:72:af:e0:fc:39:bf:22:e7:6d:91:84:e4:7f:fb:9a:45:44: 57:62:d3:ce:f2:b4:68:ef:7c:f6:cf:a4:e0:12:c1:be:f2:05: 00:be:0e:c4:1a:3d:37:73:f0:bf:48:8b:70:84:6c:8f:b1:73: ab:cf:5a:d3:53:f4:e3:d8:5b:e8:a1:49:60:dd:7e:d6:10:d8: 73:3a:0f:48:ba:71:2f:03:de:11:db:35:35:bb:af:d8:14:6d: 93:64:da:ad:31:9d:43:e6:e2:a1:1b:e1:fd:57:74:cf:e0:f5: b9:bd:67:7c:1d:3a:0d:90:61:c2:7e:00:c3:7e:a5:59:b7:3d: 04:4c:32:e8:34:b6:02:04:2b:fb:49:88:0a:4a:25:9d:e1:65: 43:2a:de:f8:88:40:e5:26:ad:2b:7b:65:1b:0d:e1:4e:04:9a: bd:ef:09:db:b3:3a:90:21:bb:c0:31:66:3b:f8:af:79:11:82: b3:39:fa:9a:32:e9:8b:e0:69:43:04:3a:63:31:c2:8a:74:d3: 27:b5:94:b8:58:45:55:e2:ea:75:a4:70:34:9b:5b:e1:d4:d7: 60:e9:73:76:a2:99:36:cd:9c:92:8d:7e:94:e7:b8:e5:eb:54: 05:34:84:1d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7a7OYZIjeu7Rcm3tN/CA8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZDkyYjgyNTYxNTk4OTRkMmI5YjI1ZjRkODU5ODZjMTcy NzIzYzMwHhcNMjUxMjIwMTEwMTEyWhcNMjUxMjIxMTEwMTEyWjAzMTEwLwYDVQQD EyhmNzkyYzFjYTE5YTEyNjMyMzE0MDRmMmYxN2JjNDMwNWFiNDJkZTk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4mCa8TEiWqNSbFuadBRccS7Q+o4P PKgR2LbugCDewwvmzo6HKuQ32u/lYAWbwe9lxlIeHMMc1y4R/gXlAMLq27tUF0dN SwghNwJSy0P9Wc4muyiuleHtZLAwghh1znQThVEp04iNXWNkImab/dpADSa4nmIE tGdBBacTmmkjpO4jXL32MEVCD4tv/Y3O5v0P1D799rTMLFRZ42d0/NnLlkzQOcGo oCXT+00fbXz8cxzzTWXIhenc1QLOOI+sLMmEoIv5frh9X017ufeRHzJtRy17xqjF e6adlNNKm94xYwL3Sd2tWJpgt70u2GVeeqncRMXCVEO3U+X69Uf02sZsGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPeSwcoZoSYyMUBPLxe8QwWrQt6XMB8GA1UdIwQY MBaAFGPZK4JWFZiU0rmyX02FmGwXJyPDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWTlrcmdsWVZtSlRTdWJKZlRZV1liQmNuSThNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi8yNmQ5MTctOGM5MS00NWFiLTg0NDIt ZTRlNTJhYzBmZWZlLzEvWTlrcmdsWVZtSlRTdWJKZlRZV1liQmNuSThNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi8yNmQ5MTctOGM5MS00NWFiLTg0NDItZTRlNTJhYzBmZWZl LzEvWTlrcmdsWVZtSlRTdWJKZlRZV1liQmNuSThNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAautTgUBM 0JtZrYR+3o+VhI+aAnKv4Pw5vyLnbZGE5H/7mkVEV2LTzvK0aO989s+k4BLBvvIF AL4OxBo9N3Pwv0iLcIRsj7Fzq89a01P049hb6KFJYN1+1hDYczoPSLpxLwPeEds1 Nbuv2BRtk2TarTGdQ+bioRvh/Vd0z+D1ub1nfB06DZBhwn4Aw36lWbc9BEwy6DS2 AgQr+0mICkolneFlQyre+IhA5SatK3tlGw3hTgSave8J27M6kCG7wDFmO/iveRGC szn6mjLpi+BpQwQ6YzHCinTTJ7WUuFhFVeLqdaRwNJtb4dTXYOlzdqKZNs2cko1+ lOe45etUBTSEHQ== -----END CERTIFICATE-----Generated at Sat Dec 20 12:22:40 2025 by rpki-client