This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/5dc1d9-eba4-42c8-b3d6-d1c5f1b51e17/1/Y-5tHR7Mr5eZu9XyttrORtht9Is.mft File: Y-5tHR7Mr5eZu9XyttrORtht9Is.mft (raw, json) Hash identifier: lEOaEd6GycY4YZP9SRN7zd2eGjxPs+0jeoVd6qk7t0A= Subject key identifier: 00:37:45:7D:F8:7C:0C:79:71:65:9E:6B:B8:C1:AD:65:D9:C1:5E:C6 Authority key identifier: 63:EE:6D:1D:1E:CC:AF:97:99:BB:D5:F2:B6:DA:CE:46:D8:6D:F4:8B Certificate issuer: /CN=63ee6d1d1eccaf9799bbd5f2b6dace46d86df48b Certificate serial: 019B0E5C277A1513DFFF943C1B13E330CD45 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-5tHR7Mr5eZu9XyttrORtht9Is.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/5dc1d9-eba4-42c8-b3d6-d1c5f1b51e17/1/Y-5tHR7Mr5eZu9XyttrORtht9Is.mft Manifest number: 0649 Signing time: Thu 11 Dec 2025 17:01:18 +0000 Manifest this update: Thu 11 Dec 2025 17:01:18 +0000 Manifest next update: Fri 12 Dec 2025 17:01:18 +0000 Files and hashes: 1: GtwJZcMJzJfVot1AbvXcNrWZuUA.roa (hash: ntPN44ZmmFojLPzowglrHCEuS924DT/SbCX/IExl0bg=) 2: Y-5tHR7Mr5eZu9XyttrORtht9Is.crl (hash: 9gzPs4p4rJfikvyPrhDJe+ugbPQll3EM1TSCXvc9hK4=) 3: v9BFv3-TNowegyiv09vLFLV5UTQ.roa (hash: dKR68pnVeUnoZwpMGIMPLXESwr/B50jGdFPF9i1PucA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/5dc1d9-eba4-42c8-b3d6-d1c5f1b51e17/1/Y-5tHR7Mr5eZu9XyttrORtht9Is.crl rsync://rpki.ripe.net/repository/DEFAULT/17/5dc1d9-eba4-42c8-b3d6-d1c5f1b51e17/1/Y-5tHR7Mr5eZu9XyttrORtht9Is.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-5tHR7Mr5eZu9XyttrORtht9Is.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:5c:27:7a:15:13:df:ff:94:3c:1b:13:e3:30:cd:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63ee6d1d1eccaf9799bbd5f2b6dace46d86df48b Validity Not Before: Dec 11 17:01:18 2025 GMT Not After : Dec 12 17:01:18 2025 GMT Subject: CN=0037457df87c0c7971659e6bb8c1ad65d9c15ec6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:fb:bd:19:01:c6:17:91:84:ab:dd:ba:d6:97: cb:a1:2d:b9:ff:47:1e:be:a9:5a:1a:1e:33:7f:81: d3:21:67:7c:8e:db:8c:14:0e:09:eb:7a:f9:67:5c: 7f:65:26:03:97:ee:21:28:8d:ce:0c:21:1d:7a:e3: 91:6c:ff:86:44:e9:4e:6b:e5:5a:81:8c:41:4c:19: 62:7a:51:c8:50:4b:1c:ea:6b:d4:c0:69:64:17:73: a8:de:79:5f:81:9b:48:fa:3e:3f:af:e4:91:2b:b1: 03:d7:24:de:e4:30:c7:29:04:d4:03:d3:e6:fb:2f: c1:e7:31:34:22:91:e5:ca:2b:94:9e:1f:1c:2c:5e: 36:98:a1:0b:17:fe:09:31:36:4f:8b:b1:b8:e9:1e: 85:95:c6:1f:00:91:6b:c7:8d:5b:f6:71:87:e1:f6: 2b:f5:cb:cb:a7:a7:f1:3f:45:28:e0:c4:9f:fb:6d: f9:b7:d4:32:82:ae:b4:18:f2:aa:04:1f:b2:5f:9a: 60:18:61:91:ea:62:9b:6f:1f:09:b7:3b:eb:fa:bd: 76:bf:4e:44:a3:ad:80:4c:3c:79:4d:4c:01:20:e1: 7b:99:05:f6:b4:1b:82:12:70:86:1f:d8:74:9f:47: 6a:81:49:4e:40:b3:0a:a3:e9:02:84:8e:21:88:f1: 4b:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:37:45:7D:F8:7C:0C:79:71:65:9E:6B:B8:C1:AD:65:D9:C1:5E:C6 X509v3 Authority Key Identifier: keyid:63:EE:6D:1D:1E:CC:AF:97:99:BB:D5:F2:B6:DA:CE:46:D8:6D:F4:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-5tHR7Mr5eZu9XyttrORtht9Is.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/5dc1d9-eba4-42c8-b3d6-d1c5f1b51e17/1/Y-5tHR7Mr5eZu9XyttrORtht9Is.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/5dc1d9-eba4-42c8-b3d6-d1c5f1b51e17/1/Y-5tHR7Mr5eZu9XyttrORtht9Is.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:dc:4c:0e:b5:2b:c4:0b:50:fa:1b:85:03:5b:3a:3e:b8:ee: e5:04:4c:5f:03:5d:5b:99:89:09:bd:34:5d:de:6e:f0:d9:a7: 1b:f1:53:21:be:38:dc:1e:e9:60:cf:46:c1:96:4a:82:3c:9f: 23:58:ff:ae:a8:7d:6f:8f:bf:63:f3:a6:69:7e:dc:cf:35:c7: 48:9d:e0:32:c8:11:8b:77:a1:d3:67:f5:83:0f:c9:6b:57:5d: c7:9e:ac:f4:d6:da:84:b6:1f:5f:54:30:64:6b:cd:7f:f0:84: 06:03:fc:6a:97:bc:70:f9:d8:95:7b:eb:68:15:82:4a:f3:00: 9e:32:c9:ae:4f:20:3e:c0:1e:f8:b3:02:d1:4c:6f:a3:00:40: 25:70:19:6c:c7:dd:39:12:12:f9:2f:f0:7a:b5:01:71:3e:d0: 4c:e1:5f:19:a2:a9:c1:9b:77:06:b8:1a:d5:37:f2:88:d2:a4: 60:a1:a5:f0:e0:72:c5:85:80:e9:b7:12:55:cf:04:6f:43:87: 04:df:67:31:17:ba:7c:83:ac:93:be:9a:61:26:38:3c:a2:cc: 99:77:8c:5a:9b:aa:5c:a1:df:62:3f:88:43:c7:a1:9e:4d:08: 5d:2d:65:7b:92:8a:d6:d2:9a:e4:32:f2:cc:54:0e:3a:07:98: 55:70:44:a6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOXCd6FRPf/5Q8GxPjMM1FMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZWU2ZDFkMWVjY2FmOTc5OWJiZDVmMmI2ZGFjZTQ2ZDg2 ZGY0OGIwHhcNMjUxMjExMTcwMTE4WhcNMjUxMjEyMTcwMTE4WjAzMTEwLwYDVQQD EygwMDM3NDU3ZGY4N2MwYzc5NzE2NTllNmJiOGMxYWQ2NWQ5YzE1ZWM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsPu9GQHGF5GEq9261pfLoS25/0ce vqlaGh4zf4HTIWd8jtuMFA4J63r5Z1x/ZSYDl+4hKI3ODCEdeuORbP+GROlOa+Va gYxBTBlielHIUEsc6mvUwGlkF3Oo3nlfgZtI+j4/r+SRK7ED1yTe5DDHKQTUA9Pm +y/B5zE0IpHlyiuUnh8cLF42mKELF/4JMTZPi7G46R6FlcYfAJFrx41b9nGH4fYr 9cvLp6fxP0Uo4MSf+235t9Qygq60GPKqBB+yX5pgGGGR6mKbbx8Jtzvr+r12v05E o62ATDx5TUwBIOF7mQX2tBuCEnCGH9h0n0dqgUlOQLMKo+kChI4hiPFLDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAA3RX34fAx5cWWea7jBrWXZwV7GMB8GA1UdIwQY MBaAFGPubR0ezK+XmbvV8rbazkbYbfSLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS01dEhSN01yNWVadTlYeXR0ck9SdGh0OUlzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy81ZGMxZDktZWJhNC00MmM4LWIzZDYt ZDFjNWYxYjUxZTE3LzEvWS01dEhSN01yNWVadTlYeXR0ck9SdGh0OUlzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy81ZGMxZDktZWJhNC00MmM4LWIzZDYtZDFjNWYxYjUxZTE3 LzEvWS01dEhSN01yNWVadTlYeXR0ck9SdGh0OUlzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU9xMDrUr xAtQ+huFA1s6Prju5QRMXwNdW5mJCb00Xd5u8NmnG/FTIb443B7pYM9GwZZKgjyf I1j/rqh9b4+/Y/OmaX7czzXHSJ3gMsgRi3eh02f1gw/Ja1ddx56s9NbahLYfX1Qw ZGvNf/CEBgP8ape8cPnYlXvraBWCSvMAnjLJrk8gPsAe+LMC0UxvowBAJXAZbMfd ORIS+S/werUBcT7QTOFfGaKpwZt3Brga1TfyiNKkYKGl8OByxYWA6bcSVc8Eb0OH BN9nMRe6fIOsk76aYSY4PKLMmXeMWpuqXKHfYj+IQ8ehnk0IXS1le5KK1tKa5DLy zFQOOgeYVXBEpg== -----END CERTIFICATE-----Generated at Thu Dec 11 23:53:18 2025 by rpki-client