This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/13150c-85da-458d-bc6c-9e24968e6664/1/Y6dZsG5v7QOwkwdJFT_BahKlAeA.mft File: Y6dZsG5v7QOwkwdJFT_BahKlAeA.mft (raw, json) Hash identifier: zMPC+droT2NEHoihVv7JDg+yxLdJdOiwq5bDp1TYf3k= Subject key identifier: 05:73:6C:48:FD:A2:67:21:67:A1:41:5A:AB:FE:36:5A:E5:34:95:34 Authority key identifier: 63:A7:59:B0:6E:6F:ED:03:B0:93:07:49:15:3F:C1:6A:12:A5:01:E0 Certificate issuer: /CN=63a759b06e6fed03b0930749153fc16a12a501e0 Certificate serial: 019B31FA5CE66D57349F5C3BC16E1B192DFE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y6dZsG5v7QOwkwdJFT_BahKlAeA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/13150c-85da-458d-bc6c-9e24968e6664/1/Y6dZsG5v7QOwkwdJFT_BahKlAeA.mft Manifest number: 085A Signing time: Thu 18 Dec 2025 15:00:49 +0000 Manifest this update: Thu 18 Dec 2025 15:00:49 +0000 Manifest next update: Fri 19 Dec 2025 15:00:49 +0000 Files and hashes: 1: 7NPjy0_LNEtrF1BCG60HRzqdKlw.roa (hash: QFPKpHBMjVle5FlNRbqdK60lHpC8YmYJkA7cV7MHx8U=) 2: MB_KD3bxeM7K-OxuIIAzQqfVtmo.roa (hash: JedpLzW0zBpuOTjRbrIzIVmoqdb1dCTDslO3G1N2Fuc=) 3: Y6dZsG5v7QOwkwdJFT_BahKlAeA.crl (hash: lTBwbflLhvff/8Lie3g8zVEYrJ/K+J3jkjqVAd0ECN8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/13150c-85da-458d-bc6c-9e24968e6664/1/Y6dZsG5v7QOwkwdJFT_BahKlAeA.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/13150c-85da-458d-bc6c-9e24968e6664/1/Y6dZsG5v7QOwkwdJFT_BahKlAeA.mft rsync://rpki.ripe.net/repository/DEFAULT/Y6dZsG5v7QOwkwdJFT_BahKlAeA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 15:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:fa:5c:e6:6d:57:34:9f:5c:3b:c1:6e:1b:19:2d:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63a759b06e6fed03b0930749153fc16a12a501e0 Validity Not Before: Dec 18 15:00:49 2025 GMT Not After : Dec 19 15:00:49 2025 GMT Subject: CN=05736c48fda2672167a1415aabfe365ae5349534 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:2a:77:ff:0d:1a:1a:bf:93:73:5f:8e:9f:27: 01:c6:2c:c9:95:c5:a9:28:f4:8d:7b:09:66:ef:22: f0:9d:68:0c:8e:7b:5c:13:c3:d3:01:38:a4:ae:60: df:1a:c1:8e:39:8d:9d:84:d7:30:7e:72:64:0a:8f: ca:97:0b:48:b1:92:b7:3d:1a:c4:ff:ec:8b:09:6a: 38:99:57:7d:11:b4:00:85:7e:bf:12:a1:ef:c0:d7: 55:02:02:b9:dc:1b:e5:77:6a:cf:77:68:c9:af:27: 85:f7:78:18:c0:b5:64:ef:54:de:c2:1c:0f:41:39: da:c3:7e:8e:99:e3:47:da:f3:6a:a2:fc:f3:79:40: 5d:2c:2f:06:20:16:48:a2:0f:49:a0:2c:ac:89:e6: 45:ff:89:20:18:84:4d:8c:6b:7b:43:5c:6c:8a:64: 56:07:93:4f:37:e7:97:e6:21:11:72:5f:df:18:20: eb:fb:be:8a:82:e3:22:bc:9f:d4:79:ef:5f:ca:5e: b3:37:91:8f:ea:95:ff:c3:04:74:36:57:4f:df:7a: 5a:52:76:cb:12:46:5b:93:48:f5:3d:27:54:d4:2f: 08:bd:8d:15:4c:03:3f:47:7c:28:21:ef:01:fa:42: 5a:13:5d:0a:db:54:fd:00:35:1d:b9:d3:f2:e6:b5: d4:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:73:6C:48:FD:A2:67:21:67:A1:41:5A:AB:FE:36:5A:E5:34:95:34 X509v3 Authority Key Identifier: keyid:63:A7:59:B0:6E:6F:ED:03:B0:93:07:49:15:3F:C1:6A:12:A5:01:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y6dZsG5v7QOwkwdJFT_BahKlAeA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/13150c-85da-458d-bc6c-9e24968e6664/1/Y6dZsG5v7QOwkwdJFT_BahKlAeA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/13150c-85da-458d-bc6c-9e24968e6664/1/Y6dZsG5v7QOwkwdJFT_BahKlAeA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:8f:5f:9b:dd:27:0a:7a:5c:60:41:8b:70:67:ee:35:0a:58: c8:3b:94:b0:82:55:bf:44:00:4d:3e:6b:ab:ee:3e:05:5d:df: b8:a7:ed:8f:c6:d4:00:18:61:8a:b3:9c:44:97:f3:b4:cb:8d: bf:8f:c1:9a:a6:d1:91:41:16:e8:2e:93:1c:7d:95:82:cb:c8: d8:c6:ea:c8:e2:47:1b:34:cc:bf:c3:74:2b:36:b9:02:c7:21: 7b:d2:1c:b7:02:a1:35:ed:53:c2:a6:ae:ed:e3:78:8a:af:ee: ac:7b:3d:71:eb:d2:98:4f:64:14:dc:33:64:d9:a3:a3:a2:a5: 0d:f5:bc:33:43:aa:e2:8e:84:5f:f2:ee:43:1b:55:a0:29:03: 39:fc:47:49:e7:51:ca:36:54:0d:6c:03:eb:e1:a8:4b:49:f5: 3f:a4:c1:b7:93:74:d1:d9:e3:2a:4d:5d:41:54:bf:5c:a5:de: 48:59:fb:7f:7b:74:bf:f7:70:86:51:a1:f8:9b:51:af:20:78: e1:5b:ce:5b:9c:16:10:ef:6d:0d:56:34:08:55:b6:19:ae:48: da:81:26:9e:a9:82:34:61:bc:36:82:9a:99:b3:8b:cd:23:98: 24:12:a6:1e:4d:67:93:b2:9f:56:ef:3e:76:41:d5:19:d4:8a: 69:26:ba:46 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsx+lzmbVc0n1w7wW4bGS3+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzYTc1OWIwNmU2ZmVkMDNiMDkzMDc0OTE1M2ZjMTZhMTJh NTAxZTAwHhcNMjUxMjE4MTUwMDQ5WhcNMjUxMjE5MTUwMDQ5WjAzMTEwLwYDVQQD EygwNTczNmM0OGZkYTI2NzIxNjdhMTQxNWFhYmZlMzY1YWU1MzQ5NTM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmip3/w0aGr+Tc1+OnycBxizJlcWp KPSNewlm7yLwnWgMjntcE8PTATikrmDfGsGOOY2dhNcwfnJkCo/KlwtIsZK3PRrE /+yLCWo4mVd9EbQAhX6/EqHvwNdVAgK53Bvld2rPd2jJryeF93gYwLVk71TewhwP QTnaw36OmeNH2vNqovzzeUBdLC8GIBZIog9JoCysieZF/4kgGIRNjGt7Q1xsimRW B5NPN+eX5iERcl/fGCDr+76KguMivJ/Uee9fyl6zN5GP6pX/wwR0NldP33paUnbL EkZbk0j1PSdU1C8IvY0VTAM/R3woIe8B+kJaE10K21T9ADUdudPy5rXU/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAVzbEj9omchZ6FBWqv+NlrlNJU0MB8GA1UdIwQY MBaAFGOnWbBub+0DsJMHSRU/wWoSpQHgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWTZkWnNHNXY3UU93a3dkSkZUX0JhaEtsQWVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8xMzE1MGMtODVkYS00NThkLWJjNmMt OWUyNDk2OGU2NjY0LzEvWTZkWnNHNXY3UU93a3dkSkZUX0JhaEtsQWVBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy8xMzE1MGMtODVkYS00NThkLWJjNmMtOWUyNDk2OGU2NjY0 LzEvWTZkWnNHNXY3UU93a3dkSkZUX0JhaEtsQWVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcY9fm90n CnpcYEGLcGfuNQpYyDuUsIJVv0QATT5rq+4+BV3fuKftj8bUABhhirOcRJfztMuN v4/BmqbRkUEW6C6THH2VgsvI2MbqyOJHGzTMv8N0Kza5Asche9IctwKhNe1Twqau 7eN4iq/urHs9cevSmE9kFNwzZNmjo6KlDfW8M0Oq4o6EX/LuQxtVoCkDOfxHSedR yjZUDWwD6+GoS0n1P6TBt5N00dnjKk1dQVS/XKXeSFn7f3t0v/dwhlGh+JtRryB4 4VvOW5wWEO9tDVY0CFW2Ga5I2oEmnqmCNGG8NoKambOLzSOYJBKmHk1nk7KfVu8+ dkHVGdSKaSa6Rg== -----END CERTIFICATE-----Generated at Thu Dec 18 23:35:33 2025 by rpki-client