This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/bdd1e7-b79a-4c21-9ba9-f157c3294d40/1/Y7hCJUu9a_M-CdBaRY8AoEhM8W8.mft File: Y7hCJUu9a_M-CdBaRY8AoEhM8W8.mft (raw, json) Hash identifier: jxAQVG+DbGCOg5ziNoJSNCMqMOg/N3dH3GCqKIwxqkw= Subject key identifier: BB:81:AE:B9:F7:46:51:1E:4B:36:57:4F:A8:9C:3D:3F:D2:4C:1E:68 Authority key identifier: 63:B8:42:25:4B:BD:6B:F3:3E:09:D0:5A:45:8F:00:A0:48:4C:F1:6F Certificate issuer: /CN=63b842254bbd6bf33e09d05a458f00a0484cf16f Certificate serial: 019B243EB526AFF12FF8F5D870D7B7675DCB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y7hCJUu9a_M-CdBaRY8AoEhM8W8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/bdd1e7-b79a-4c21-9ba9-f157c3294d40/1/Y7hCJUu9a_M-CdBaRY8AoEhM8W8.mft Manifest number: 177A Signing time: Mon 15 Dec 2025 23:00:47 +0000 Manifest this update: Mon 15 Dec 2025 23:00:47 +0000 Manifest next update: Tue 16 Dec 2025 23:00:47 +0000 Files and hashes: 1: Y7hCJUu9a_M-CdBaRY8AoEhM8W8.crl (hash: H4R42mq6ziRpDEHoWBh/I/QvqB90GFvtOo+7zgd2QqY=) 2: _-3if3VEwGJAS0I_jDlqTGph8OQ.roa (hash: XgkrYG7AjIUlvGnLYa7FZ2ZiNNqvFknEkkF79303ihw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/bdd1e7-b79a-4c21-9ba9-f157c3294d40/1/Y7hCJUu9a_M-CdBaRY8AoEhM8W8.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/bdd1e7-b79a-4c21-9ba9-f157c3294d40/1/Y7hCJUu9a_M-CdBaRY8AoEhM8W8.mft rsync://rpki.ripe.net/repository/DEFAULT/Y7hCJUu9a_M-CdBaRY8AoEhM8W8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 23:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:24:3e:b5:26:af:f1:2f:f8:f5:d8:70:d7:b7:67:5d:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63b842254bbd6bf33e09d05a458f00a0484cf16f Validity Not Before: Dec 15 23:00:47 2025 GMT Not After : Dec 16 23:00:47 2025 GMT Subject: CN=bb81aeb9f746511e4b36574fa89c3d3fd24c1e68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:85:33:f3:2e:42:c3:00:b2:7b:df:d5:a8:69: 75:97:66:eb:89:94:29:0e:be:ea:8e:54:40:1c:39: b9:e9:89:e2:b8:81:80:35:04:0a:48:75:d3:51:88: 30:5c:56:cb:d7:46:ad:3e:a4:58:52:a5:52:0b:a1: fa:2e:93:67:92:bb:91:c4:1b:2c:a2:a5:76:42:04: 27:e1:33:8d:e8:7c:a4:e3:cf:49:b8:f1:41:00:a1: 0d:f7:c8:be:d0:ca:67:95:85:5b:ec:de:37:df:1f: 9f:4c:3e:43:fe:b8:ad:bc:39:85:c7:2c:ea:f1:2a: 09:be:1f:65:50:e4:50:2f:58:59:c3:4a:bf:98:46: aa:00:79:91:ee:ce:dd:cf:cd:42:35:12:4f:ca:5b: bd:8b:fb:21:6f:77:ac:fe:3f:73:f1:80:b5:5f:31: 74:01:d1:a6:4c:3d:cd:9c:22:c3:33:ee:4f:40:ec: 70:bc:06:db:f0:62:42:53:38:a2:8d:03:45:b2:9e: ad:1b:f3:64:51:51:5c:67:b7:8d:b1:ff:7e:bd:80: 62:9b:de:ba:4b:55:66:11:55:4d:71:65:72:e5:5d: 84:8a:ea:b3:bf:26:a8:67:80:ed:24:77:4e:46:5f: 12:d8:8f:98:f5:be:f5:5e:d9:c7:1b:2b:d0:89:d6: a5:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:81:AE:B9:F7:46:51:1E:4B:36:57:4F:A8:9C:3D:3F:D2:4C:1E:68 X509v3 Authority Key Identifier: keyid:63:B8:42:25:4B:BD:6B:F3:3E:09:D0:5A:45:8F:00:A0:48:4C:F1:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y7hCJUu9a_M-CdBaRY8AoEhM8W8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/bdd1e7-b79a-4c21-9ba9-f157c3294d40/1/Y7hCJUu9a_M-CdBaRY8AoEhM8W8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/bdd1e7-b79a-4c21-9ba9-f157c3294d40/1/Y7hCJUu9a_M-CdBaRY8AoEhM8W8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:bc:3d:98:9c:68:50:4f:c5:7a:77:6e:92:6e:d4:2b:d1:b5: 1c:7e:38:72:bb:8a:92:b0:48:25:8e:f8:f7:42:60:05:c3:78: 12:03:37:52:0e:c2:0d:ac:34:fb:c9:a2:5b:08:7f:77:71:e9: 14:34:81:4e:23:7f:ca:8b:0e:e1:b4:0f:f2:7e:51:f2:84:82: 9c:5a:d5:8d:21:51:93:c5:86:91:6e:d0:63:11:c6:2f:e6:d0: f6:5e:5d:da:0e:56:13:9c:60:1e:ac:4d:a1:6a:b3:d2:52:69: 04:2f:fc:a3:98:c5:b9:98:9d:9a:e2:e7:81:c3:6d:c8:93:fe: 9d:78:b9:10:84:f0:dd:84:ac:8f:bc:0c:c3:89:97:0a:1d:ca: 68:f6:7a:b0:0b:36:47:5c:80:3a:e3:68:e6:dc:26:c0:ef:d6: 96:f7:6c:2f:09:77:e2:d5:dd:db:c2:d9:df:84:c1:2c:c0:64: 31:8c:5f:17:83:e9:33:2f:4e:75:c7:df:11:a2:f0:8b:c7:3a: 5c:0f:df:9d:3e:74:3d:04:2b:d3:b1:e8:8f:a1:84:d8:20:0f: ae:a5:d7:b3:86:0f:59:3e:71:01:c8:85:12:a8:c1:02:f5:bb: 7f:f9:41:6c:bf:ef:2b:80:bb:47:0f:44:27:bb:e7:87:23:67: 33:f7:2c:80 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZskPrUmr/Ev+PXYcNe3Z13LMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzYjg0MjI1NGJiZDZiZjMzZTA5ZDA1YTQ1OGYwMGEwNDg0 Y2YxNmYwHhcNMjUxMjE1MjMwMDQ3WhcNMjUxMjE2MjMwMDQ3WjAzMTEwLwYDVQQD EyhiYjgxYWViOWY3NDY1MTFlNGIzNjU3NGZhODljM2QzZmQyNGMxZTY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjoUz8y5CwwCye9/VqGl1l2briZQp Dr7qjlRAHDm56YniuIGANQQKSHXTUYgwXFbL10atPqRYUqVSC6H6LpNnkruRxBss oqV2QgQn4TON6Hyk489JuPFBAKEN98i+0MpnlYVb7N433x+fTD5D/ritvDmFxyzq 8SoJvh9lUORQL1hZw0q/mEaqAHmR7s7dz81CNRJPylu9i/shb3es/j9z8YC1XzF0 AdGmTD3NnCLDM+5PQOxwvAbb8GJCUziijQNFsp6tG/NkUVFcZ7eNsf9+vYBim966 S1VmEVVNcWVy5V2EiuqzvyaoZ4DtJHdORl8S2I+Y9b71XtnHGyvQidallQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLuBrrn3RlEeSzZXT6icPT/STB5oMB8GA1UdIwQY MBaAFGO4QiVLvWvzPgnQWkWPAKBITPFvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWTdoQ0pVdTlhX00tQ2RCYVJZOEFvRWhNOFc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9iZGQxZTctYjc5YS00YzIxLTliYTkt ZjE1N2MzMjk0ZDQwLzEvWTdoQ0pVdTlhX00tQ2RCYVJZOEFvRWhNOFc4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy9iZGQxZTctYjc5YS00YzIxLTliYTktZjE1N2MzMjk0ZDQw LzEvWTdoQ0pVdTlhX00tQ2RCYVJZOEFvRWhNOFc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALbw9mJxo UE/Fendukm7UK9G1HH44cruKkrBIJY7490JgBcN4EgM3Ug7CDaw0+8miWwh/d3Hp FDSBTiN/yosO4bQP8n5R8oSCnFrVjSFRk8WGkW7QYxHGL+bQ9l5d2g5WE5xgHqxN oWqz0lJpBC/8o5jFuZidmuLngcNtyJP+nXi5EITw3YSsj7wMw4mXCh3KaPZ6sAs2 R1yAOuNo5twmwO/WlvdsLwl34tXd28LZ34TBLMBkMYxfF4PpMy9OdcffEaLwi8c6 XA/fnT50PQQr07Hoj6GE2CAPrqXXs4YPWT5xAciFEqjBAvW7f/lBbL/vK4C7Rw9E J7vnhyNnM/csgA== -----END CERTIFICATE-----Generated at Tue Dec 16 07:55:59 2025 by rpki-client