This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/edea6e-66cc-4fb1-a454-fe837f98e026/1/Y0RCEOoIrFKYeNUZF-OzAFTWINE.mft File: Y0RCEOoIrFKYeNUZF-OzAFTWINE.mft (raw, json) Hash identifier: mcOJwU2Ty2ZhCIh8Y5Fmo5N26r9NsADINuk8f/5YdBU= Subject key identifier: 42:3F:0C:BF:C4:1E:CA:3E:CF:C3:0F:D9:EA:56:4C:E1:12:FC:6F:92 Authority key identifier: 63:44:42:10:EA:08:AC:52:98:78:D5:19:17:E3:B3:00:54:D6:20:D1 Certificate issuer: /CN=63444210ea08ac529878d51917e3b30054d620d1 Certificate serial: 019B18DF9FB9AAEEC4DAC8C0EC9BB59F3F17 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y0RCEOoIrFKYeNUZF-OzAFTWINE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/edea6e-66cc-4fb1-a454-fe837f98e026/1/Y0RCEOoIrFKYeNUZF-OzAFTWINE.mft Manifest number: 0A08 Signing time: Sat 13 Dec 2025 18:01:07 +0000 Manifest this update: Sat 13 Dec 2025 18:01:07 +0000 Manifest next update: Sun 14 Dec 2025 18:01:07 +0000 Files and hashes: 1: Y0RCEOoIrFKYeNUZF-OzAFTWINE.crl (hash: GzBMKUQgwG0HPgm02+0lNZju6YDWYEpB+xCdkaWbg78=) 2: lvyZzZ0oMePyMWlwy0XrO4z88uM.roa (hash: r4CIZVZVu9rJJBGcwlDp7IO/A6q0RdzdbEDYw+nKWDQ=) 3: mS1r3nEBgAI3lLhm6noZgqn_cmA.roa (hash: JYzwmK7XTX/XFKUpzmhiGKHT8MDSKJlug0ZfpJhUdKA=) 4: s0n0nYu0NFOR7dPUCU7pEE3i9us.roa (hash: ljcKz24WN/R72QGD8KYnZ5Vd3hVV7DCVfn4eDdOXbTY=) 5: zxiStXGp24ax3PMaP2c669J9olI.roa (hash: Eoknss9yO3HZnM5fYU8DdmO/fqGjXaMOZMcIug7gXEU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/edea6e-66cc-4fb1-a454-fe837f98e026/1/Y0RCEOoIrFKYeNUZF-OzAFTWINE.crl rsync://rpki.ripe.net/repository/DEFAULT/25/edea6e-66cc-4fb1-a454-fe837f98e026/1/Y0RCEOoIrFKYeNUZF-OzAFTWINE.mft rsync://rpki.ripe.net/repository/DEFAULT/Y0RCEOoIrFKYeNUZF-OzAFTWINE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 17:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:18:df:9f:b9:aa:ee:c4:da:c8:c0:ec:9b:b5:9f:3f:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63444210ea08ac529878d51917e3b30054d620d1 Validity Not Before: Dec 13 18:01:07 2025 GMT Not After : Dec 14 18:01:07 2025 GMT Subject: CN=423f0cbfc41eca3ecfc30fd9ea564ce112fc6f92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:b4:f4:6d:a3:00:f9:3f:7f:76:96:f3:fe:80: f6:62:85:2f:b5:ff:2f:c7:51:30:b1:a4:c8:e9:bf: 56:7d:72:7c:4a:61:ed:2a:4b:fe:d0:08:c8:21:04: 98:5c:1c:55:59:9b:33:85:87:0e:31:eb:72:1b:4c: ed:16:75:af:f2:ce:f2:81:38:e6:80:d4:03:dd:5f: 09:e7:33:b0:b9:3e:6d:0e:ef:23:52:df:24:c3:9d: ee:7e:db:58:ab:bd:2e:73:14:f8:b8:9c:d5:bf:18: 73:f5:61:eb:cd:5b:0b:38:5a:e2:f8:c5:1a:1b:aa: 7a:68:3f:06:15:68:55:f3:19:86:73:94:15:31:65: 07:7b:67:cc:86:bd:53:6b:b9:e6:47:c9:3a:35:11: 0b:35:8f:ee:6d:f3:f6:00:21:5b:c8:ac:fb:95:dd: 70:56:b0:f5:78:1f:4e:f0:8a:e2:81:6b:2e:1a:99: f8:e7:f1:c5:05:9c:f5:dc:c5:2d:a6:52:1d:9b:e7: 9f:31:e6:5b:5b:32:b1:7d:1a:f7:c8:73:4b:6a:1e: ee:b4:30:b9:de:f9:24:60:c8:f8:04:e2:a8:4f:d7: 4d:8a:a2:ed:00:c2:13:f8:b7:8a:73:c3:cb:8d:3c: 9b:70:8a:fa:78:8a:30:07:d6:67:aa:5d:01:cf:d9: 3e:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:3F:0C:BF:C4:1E:CA:3E:CF:C3:0F:D9:EA:56:4C:E1:12:FC:6F:92 X509v3 Authority Key Identifier: keyid:63:44:42:10:EA:08:AC:52:98:78:D5:19:17:E3:B3:00:54:D6:20:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y0RCEOoIrFKYeNUZF-OzAFTWINE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/edea6e-66cc-4fb1-a454-fe837f98e026/1/Y0RCEOoIrFKYeNUZF-OzAFTWINE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/edea6e-66cc-4fb1-a454-fe837f98e026/1/Y0RCEOoIrFKYeNUZF-OzAFTWINE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:cf:63:df:31:a9:b4:b4:71:42:25:1e:1b:a8:d5:ce:f6:e7: d6:b6:bd:87:94:55:5b:39:23:ce:7c:a5:dd:72:0e:ab:dd:9a: 05:85:66:c4:41:4a:ad:f0:7d:65:b8:16:0c:71:db:9c:6c:95: 71:ee:9a:fa:97:9e:99:ad:d3:f4:e9:66:9c:48:bc:3c:36:0f: 54:e2:d7:c9:46:e3:d1:a6:db:5e:74:42:cb:c5:76:8f:11:99: 5b:66:73:ed:50:7f:4e:47:b1:14:7c:5c:9f:58:39:f5:fc:d4: a8:50:b9:85:ab:90:b8:5d:b4:41:f1:b0:41:27:89:2e:75:94: 6b:41:4f:4e:1b:7a:71:65:bd:8a:76:ed:36:f4:d8:5b:d5:bb: 71:5f:0c:31:c5:f1:b7:2b:28:5f:72:ff:f4:7d:e3:0d:d6:7f: 85:e7:da:2c:0e:86:df:08:f6:b3:cf:e0:db:a4:20:c0:86:1c: 7c:9a:93:f5:98:f9:f0:f3:fd:d4:44:6a:db:d5:0f:6e:a0:8d: ed:45:53:55:a0:77:f0:ec:87:d8:5c:74:11:45:99:c0:28:9a: 3f:64:05:c8:03:bb:d7:03:92:af:1f:a6:95:20:67:09:dc:7b: 34:b7:6c:cd:45:fa:fd:c3:62:2e:a9:e2:d8:fb:99:88:d9:38: 2c:c7:54:2b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsY35+5qu7E2sjA7Ju1nz8XMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzNDQ0MjEwZWEwOGFjNTI5ODc4ZDUxOTE3ZTNiMzAwNTRk NjIwZDEwHhcNMjUxMjEzMTgwMTA3WhcNMjUxMjE0MTgwMTA3WjAzMTEwLwYDVQQD Eyg0MjNmMGNiZmM0MWVjYTNlY2ZjMzBmZDllYTU2NGNlMTEyZmM2ZjkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtLT0baMA+T9/dpbz/oD2YoUvtf8v x1EwsaTI6b9WfXJ8SmHtKkv+0AjIIQSYXBxVWZszhYcOMetyG0ztFnWv8s7ygTjm gNQD3V8J5zOwuT5tDu8jUt8kw53ufttYq70ucxT4uJzVvxhz9WHrzVsLOFri+MUa G6p6aD8GFWhV8xmGc5QVMWUHe2fMhr1Ta7nmR8k6NRELNY/ubfP2ACFbyKz7ld1w VrD1eB9O8IrigWsuGpn45/HFBZz13MUtplIdm+efMeZbWzKxfRr3yHNLah7utDC5 3vkkYMj4BOKoT9dNiqLtAMIT+LeKc8PLjTybcIr6eIowB9Znql0Bz9k+XwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEI/DL/EHso+z8MP2epWTOES/G+SMB8GA1UdIwQY MBaAFGNEQhDqCKxSmHjVGRfjswBU1iDRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWTBSQ0VPb0lyRktZZU5VWkYtT3pBRlRXSU5FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS9lZGVhNmUtNjZjYy00ZmIxLWE0NTQt ZmU4MzdmOThlMDI2LzEvWTBSQ0VPb0lyRktZZU5VWkYtT3pBRlRXSU5FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS9lZGVhNmUtNjZjYy00ZmIxLWE0NTQtZmU4MzdmOThlMDI2 LzEvWTBSQ0VPb0lyRktZZU5VWkYtT3pBRlRXSU5FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALs9j3zGp tLRxQiUeG6jVzvbn1ra9h5RVWzkjznyl3XIOq92aBYVmxEFKrfB9ZbgWDHHbnGyV ce6a+peema3T9OlmnEi8PDYPVOLXyUbj0abbXnRCy8V2jxGZW2Zz7VB/TkexFHxc n1g59fzUqFC5hauQuF20QfGwQSeJLnWUa0FPTht6cWW9inbtNvTYW9W7cV8MMcXx tysoX3L/9H3jDdZ/hefaLA6G3wj2s8/g26QgwIYcfJqT9Zj58PP91ERq29UPbqCN 7UVTVaB38OyH2Fx0EUWZwCiaP2QFyAO71wOSrx+mlSBnCdx7NLdszUX6/cNiLqni 2PuZiNk4LMdUKw== -----END CERTIFICATE-----Generated at Sun Dec 14 01:56:59 2025 by rpki-client