This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/edea6e-66cc-4fb1-a454-fe837f98e026/1/Y0RCEOoIrFKYeNUZF-OzAFTWINE.mft File: Y0RCEOoIrFKYeNUZF-OzAFTWINE.mft (raw, json) Hash identifier: YGP7V3miOdlQXKOtsIQdYRycXAW6e8E3HRwOUrKF40g= Subject key identifier: 6C:DA:00:82:81:FF:3D:66:38:2C:BE:D8:9D:B5:F0:70:C3:5C:DD:F4 Authority key identifier: 63:44:42:10:EA:08:AC:52:98:78:D5:19:17:E3:B3:00:54:D6:20:D1 Certificate issuer: /CN=63444210ea08ac529878d51917e3b30054d620d1 Certificate serial: 019B0F37ABAFDC8433B646535152D3FF91DD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y0RCEOoIrFKYeNUZF-OzAFTWINE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/edea6e-66cc-4fb1-a454-fe837f98e026/1/Y0RCEOoIrFKYeNUZF-OzAFTWINE.mft Manifest number: 0A03 Signing time: Thu 11 Dec 2025 21:01:05 +0000 Manifest this update: Thu 11 Dec 2025 21:01:05 +0000 Manifest next update: Fri 12 Dec 2025 21:01:05 +0000 Files and hashes: 1: Y0RCEOoIrFKYeNUZF-OzAFTWINE.crl (hash: 0t/1GSHQ1ze6QDwemYFZbLrQIhQTjA4Q10u43lTePvk=) 2: lvyZzZ0oMePyMWlwy0XrO4z88uM.roa (hash: r4CIZVZVu9rJJBGcwlDp7IO/A6q0RdzdbEDYw+nKWDQ=) 3: mS1r3nEBgAI3lLhm6noZgqn_cmA.roa (hash: JYzwmK7XTX/XFKUpzmhiGKHT8MDSKJlug0ZfpJhUdKA=) 4: s0n0nYu0NFOR7dPUCU7pEE3i9us.roa (hash: ljcKz24WN/R72QGD8KYnZ5Vd3hVV7DCVfn4eDdOXbTY=) 5: zxiStXGp24ax3PMaP2c669J9olI.roa (hash: Eoknss9yO3HZnM5fYU8DdmO/fqGjXaMOZMcIug7gXEU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/edea6e-66cc-4fb1-a454-fe837f98e026/1/Y0RCEOoIrFKYeNUZF-OzAFTWINE.crl rsync://rpki.ripe.net/repository/DEFAULT/25/edea6e-66cc-4fb1-a454-fe837f98e026/1/Y0RCEOoIrFKYeNUZF-OzAFTWINE.mft rsync://rpki.ripe.net/repository/DEFAULT/Y0RCEOoIrFKYeNUZF-OzAFTWINE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:37:ab:af:dc:84:33:b6:46:53:51:52:d3:ff:91:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63444210ea08ac529878d51917e3b30054d620d1 Validity Not Before: Dec 11 21:01:05 2025 GMT Not After : Dec 12 21:01:05 2025 GMT Subject: CN=6cda008281ff3d66382cbed89db5f070c35cddf4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:84:8a:e2:31:cd:fe:d4:bb:1c:17:4a:21:48: a6:fa:ce:33:96:7e:a9:a5:28:2c:7b:6e:85:1b:86: 65:64:0b:3f:23:9c:98:c4:21:98:9a:93:bf:75:38: 9f:86:2d:3b:41:c0:b3:a6:70:c5:9f:0a:91:82:4c: 6f:ca:61:75:6a:68:e1:1e:d6:1d:7c:f0:7b:3d:31: 61:cc:36:76:0f:61:54:e2:d4:36:1a:f9:fb:d7:9f: 27:88:86:b1:75:a6:61:14:a7:54:29:21:00:70:73: 76:4e:55:7a:5b:75:08:1c:25:c1:f6:5d:d7:30:dc: a6:c6:67:c1:50:fe:6e:38:82:54:34:72:0c:93:a7: 1c:0d:14:8a:2d:bd:f9:d5:ac:3c:c2:23:ee:45:e6: 72:31:b4:d0:ec:3b:29:c5:c5:2d:a1:be:53:9b:fc: 6f:76:49:a9:70:28:e9:ee:d1:38:09:f3:20:c0:d8: 29:e1:82:ca:b1:63:d8:ee:f0:d1:69:2f:a1:42:67: 79:21:45:d4:ce:20:3f:12:21:6c:52:20:1f:55:41: e8:65:e5:ce:be:ad:b0:95:09:3a:38:36:62:24:d8: e6:5b:ec:63:82:3c:ee:69:66:54:dc:0f:c7:ad:f5: 17:c3:e4:af:d0:f8:31:e3:91:d0:95:9a:57:7b:af: b2:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:DA:00:82:81:FF:3D:66:38:2C:BE:D8:9D:B5:F0:70:C3:5C:DD:F4 X509v3 Authority Key Identifier: keyid:63:44:42:10:EA:08:AC:52:98:78:D5:19:17:E3:B3:00:54:D6:20:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y0RCEOoIrFKYeNUZF-OzAFTWINE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/edea6e-66cc-4fb1-a454-fe837f98e026/1/Y0RCEOoIrFKYeNUZF-OzAFTWINE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/edea6e-66cc-4fb1-a454-fe837f98e026/1/Y0RCEOoIrFKYeNUZF-OzAFTWINE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:e4:32:b5:e0:f1:56:27:ed:94:65:89:d3:0e:14:85:58:f0: 5e:3e:8f:3b:f5:e0:d1:54:2e:c0:c5:27:33:52:7c:d7:f2:fe: d1:58:fa:ce:47:74:c3:53:ce:14:2c:06:38:ba:b6:91:fe:56: 93:a5:26:d3:44:b7:d8:6a:3e:46:3d:da:f4:94:ff:3e:62:06: 29:5d:9f:5a:e1:cd:2b:7a:05:90:cf:fb:1c:eb:74:2f:bf:db: 59:7f:fc:64:24:b1:d9:85:2a:43:01:c8:d1:c1:ae:eb:c8:cc: a6:87:22:73:75:73:a5:c6:ac:89:9d:d4:b5:57:a0:28:b8:6e: 84:3d:a2:9e:ff:22:16:13:17:db:64:5c:34:01:05:70:ab:26: cf:57:3b:5a:ad:aa:3c:b4:81:9d:e8:fa:42:a8:09:81:69:a8: b9:81:d7:ba:62:c5:c6:f9:90:e6:5c:af:37:e0:18:8c:17:85: ea:5e:68:a4:86:66:6a:e0:f6:cc:94:8a:8a:61:0d:30:80:bb: 5f:26:92:48:f2:06:90:9c:7f:d4:a2:8b:0d:e6:77:60:93:21: b6:c7:8c:e9:c5:72:2a:e9:aa:5f:cb:18:03:57:57:8d:c9:53: 5b:a3:fe:4c:94:49:d9:1c:e4:52:94:18:7b:83:2e:69:5f:c1: bf:c0:e0:8b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPN6uv3IQztkZTUVLT/5HdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzNDQ0MjEwZWEwOGFjNTI5ODc4ZDUxOTE3ZTNiMzAwNTRk NjIwZDEwHhcNMjUxMjExMjEwMTA1WhcNMjUxMjEyMjEwMTA1WjAzMTEwLwYDVQQD Eyg2Y2RhMDA4MjgxZmYzZDY2MzgyY2JlZDg5ZGI1ZjA3MGMzNWNkZGY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxISK4jHN/tS7HBdKIUim+s4zln6p pSgse26FG4ZlZAs/I5yYxCGYmpO/dTifhi07QcCzpnDFnwqRgkxvymF1amjhHtYd fPB7PTFhzDZ2D2FU4tQ2Gvn7158niIaxdaZhFKdUKSEAcHN2TlV6W3UIHCXB9l3X MNymxmfBUP5uOIJUNHIMk6ccDRSKLb351aw8wiPuReZyMbTQ7DspxcUtob5Tm/xv dkmpcCjp7tE4CfMgwNgp4YLKsWPY7vDRaS+hQmd5IUXUziA/EiFsUiAfVUHoZeXO vq2wlQk6ODZiJNjmW+xjgjzuaWZU3A/HrfUXw+Sv0Pgx45HQlZpXe6+yRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGzaAIKB/z1mOCy+2J218HDDXN30MB8GA1UdIwQY MBaAFGNEQhDqCKxSmHjVGRfjswBU1iDRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWTBSQ0VPb0lyRktZZU5VWkYtT3pBRlRXSU5FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS9lZGVhNmUtNjZjYy00ZmIxLWE0NTQt ZmU4MzdmOThlMDI2LzEvWTBSQ0VPb0lyRktZZU5VWkYtT3pBRlRXSU5FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS9lZGVhNmUtNjZjYy00ZmIxLWE0NTQtZmU4MzdmOThlMDI2 LzEvWTBSQ0VPb0lyRktZZU5VWkYtT3pBRlRXSU5FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXuQyteDx ViftlGWJ0w4UhVjwXj6PO/Xg0VQuwMUnM1J81/L+0Vj6zkd0w1POFCwGOLq2kf5W k6Um00S32Go+Rj3a9JT/PmIGKV2fWuHNK3oFkM/7HOt0L7/bWX/8ZCSx2YUqQwHI 0cGu68jMpocic3VzpcasiZ3UtVegKLhuhD2inv8iFhMX22RcNAEFcKsmz1c7Wq2q PLSBnej6QqgJgWmouYHXumLFxvmQ5lyvN+AYjBeF6l5opIZmauD2zJSKimENMIC7 XyaSSPIGkJx/1KKLDeZ3YJMhtseM6cVyKumqX8sYA1dXjclTW6P+TJRJ2RzkUpQY e4MuaV/Bv8Dgiw== -----END CERTIFICATE-----Generated at Fri Dec 12 01:44:39 2025 by rpki-client