This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/3ed8dd-d36e-440c-8142-d80c6b85cda4/1/Y9nR2VwetxbugZUEWnfLohgdeew.mft File: Y9nR2VwetxbugZUEWnfLohgdeew.mft (raw, json) Hash identifier: pN8zKgxIZ9anEPazKMfAYM+yK4D/xGYf29pM9annHXk= Subject key identifier: 77:A1:37:C9:A9:F9:BA:7D:C1:F5:1B:19:77:4A:66:69:01:A0:B3:05 Authority key identifier: 63:D9:D1:D9:5C:1E:B7:16:EE:81:95:04:5A:77:CB:A2:18:1D:79:EC Certificate issuer: /CN=63d9d1d95c1eb716ee8195045a77cba2181d79ec Certificate serial: 019B0F00D0543E52E531896D9F0B1EA2C092 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y9nR2VwetxbugZUEWnfLohgdeew.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/3ed8dd-d36e-440c-8142-d80c6b85cda4/1/Y9nR2VwetxbugZUEWnfLohgdeew.mft Manifest number: 1782 Signing time: Thu 11 Dec 2025 20:01:10 +0000 Manifest this update: Thu 11 Dec 2025 20:01:10 +0000 Manifest next update: Fri 12 Dec 2025 20:01:10 +0000 Files and hashes: 1: Xpr9sRgbPmZViC8BU1QHYCRAm3g.roa (hash: /PhmdbdMunM2MY+0QaCxgwKDHy7Elu8z4ortzYVhL+Y=) 2: Y9nR2VwetxbugZUEWnfLohgdeew.crl (hash: kt8FZKYXdhR5bHsJBQi0kBK9iUmXIKVX9q8FobFdO6U=) 3: emyVhdOtUpRyesCtl5eoHp0JGEE.roa (hash: 86qnK0w4Cm+zX9631HiXs9UjrDd9iFThMb03qwigYKc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/3ed8dd-d36e-440c-8142-d80c6b85cda4/1/Y9nR2VwetxbugZUEWnfLohgdeew.crl rsync://rpki.ripe.net/repository/DEFAULT/35/3ed8dd-d36e-440c-8142-d80c6b85cda4/1/Y9nR2VwetxbugZUEWnfLohgdeew.mft rsync://rpki.ripe.net/repository/DEFAULT/Y9nR2VwetxbugZUEWnfLohgdeew.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:00:d0:54:3e:52:e5:31:89:6d:9f:0b:1e:a2:c0:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63d9d1d95c1eb716ee8195045a77cba2181d79ec Validity Not Before: Dec 11 20:01:10 2025 GMT Not After : Dec 12 20:01:10 2025 GMT Subject: CN=77a137c9a9f9ba7dc1f51b19774a666901a0b305 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:ae:1b:f0:8f:a6:4c:40:b2:dc:92:a9:0a:d4: c6:5b:ad:cf:df:46:e0:53:09:9f:b3:db:38:13:2a: 2d:d7:e9:85:65:27:c5:44:61:32:29:91:09:9c:a0: be:71:e3:69:63:10:7f:93:5c:ab:2f:70:b0:93:8c: 41:8d:7b:00:92:16:72:30:aa:c7:d5:c7:2e:92:b9: a4:5f:3b:69:3d:9e:6e:93:e1:25:06:4a:ea:90:1c: 28:ad:2d:81:ab:4a:31:b3:60:c1:8d:64:7e:0a:c9: c8:4c:21:95:78:e9:d6:8f:11:cb:0b:fd:c2:79:a7: 55:c1:40:80:df:d9:9c:f5:fd:a3:47:65:c2:2a:b6: d6:07:89:8a:bf:01:3d:a5:c6:02:79:90:e4:24:50: 3a:06:e3:33:75:26:7b:8a:a5:12:e6:8f:83:c9:10: 08:38:73:b7:49:8e:7e:5e:30:19:98:96:37:3b:1c: bd:1a:a9:b3:b3:1a:07:f8:83:cb:50:20:6c:4a:f1: 0b:05:71:08:28:b7:ef:1f:55:b3:5e:c2:1e:94:40: 97:16:b6:b1:db:0f:73:97:fd:8e:bf:7d:df:d9:6d: 12:e9:03:0a:c9:fd:f5:c1:04:c3:ed:20:44:d1:96: 7c:30:f4:37:61:1c:18:92:b2:61:9f:12:33:97:8a: eb:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:A1:37:C9:A9:F9:BA:7D:C1:F5:1B:19:77:4A:66:69:01:A0:B3:05 X509v3 Authority Key Identifier: keyid:63:D9:D1:D9:5C:1E:B7:16:EE:81:95:04:5A:77:CB:A2:18:1D:79:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y9nR2VwetxbugZUEWnfLohgdeew.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3ed8dd-d36e-440c-8142-d80c6b85cda4/1/Y9nR2VwetxbugZUEWnfLohgdeew.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3ed8dd-d36e-440c-8142-d80c6b85cda4/1/Y9nR2VwetxbugZUEWnfLohgdeew.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:d3:a7:df:df:af:06:ed:b4:d3:6f:e5:9a:09:c3:a7:49:a7: ba:c6:43:63:ac:78:2f:d0:7d:21:51:ad:94:a9:33:a3:60:4c: 3d:ba:93:90:4a:bf:47:91:3e:9f:e0:12:84:52:01:b7:02:1f: 5a:7e:78:fe:f5:d3:e9:04:aa:52:c8:24:69:9c:e5:5f:ba:05: 02:46:04:20:16:f7:17:b9:7f:a4:e4:08:c4:40:3d:cf:2f:c4: 3f:6b:f3:87:23:4b:af:93:df:47:b1:d0:43:aa:0a:67:1d:70: 7f:08:a0:cc:a2:a1:2f:26:2f:3d:c3:ce:3b:be:79:5c:91:7f: 4d:be:f6:2d:16:21:1d:5b:ed:da:f1:a8:25:46:fa:e9:55:90: a2:b9:73:82:59:6c:c8:e3:18:36:67:48:cc:f9:3c:16:11:bd: 4b:ae:b4:f8:53:d8:db:01:19:d5:29:9d:29:92:e3:d8:87:2f: e6:c9:5c:d9:1d:d4:31:72:19:52:0c:27:7c:10:93:2d:95:81: 8c:60:fb:7a:c0:15:5b:24:02:96:5d:9b:d3:66:29:92:02:2f: 58:4e:33:df:f3:b7:94:8b:da:7d:a6:24:bd:43:79:54:ff:bd: 81:88:77:8d:d9:d8:9a:38:d6:ca:cd:d9:e0:64:37:f8:b1:7a: f0:d4:97:f8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPANBUPlLlMYltnwseosCSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZDlkMWQ5NWMxZWI3MTZlZTgxOTUwNDVhNzdjYmEyMTgx ZDc5ZWMwHhcNMjUxMjExMjAwMTEwWhcNMjUxMjEyMjAwMTEwWjAzMTEwLwYDVQQD Eyg3N2ExMzdjOWE5ZjliYTdkYzFmNTFiMTk3NzRhNjY2OTAxYTBiMzA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyK4b8I+mTECy3JKpCtTGW63P30bg Uwmfs9s4Eyot1+mFZSfFRGEyKZEJnKC+ceNpYxB/k1yrL3Cwk4xBjXsAkhZyMKrH 1ccukrmkXztpPZ5uk+ElBkrqkBworS2Bq0oxs2DBjWR+CsnITCGVeOnWjxHLC/3C eadVwUCA39mc9f2jR2XCKrbWB4mKvwE9pcYCeZDkJFA6BuMzdSZ7iqUS5o+DyRAI OHO3SY5+XjAZmJY3Oxy9GqmzsxoH+IPLUCBsSvELBXEIKLfvH1WzXsIelECXFrax 2w9zl/2Ov33f2W0S6QMKyf31wQTD7SBE0ZZ8MPQ3YRwYkrJhnxIzl4rrZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHehN8mp+bp9wfUbGXdKZmkBoLMFMB8GA1UdIwQY MBaAFGPZ0dlcHrcW7oGVBFp3y6IYHXnsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWTluUjJWd2V0eGJ1Z1pVRVduZkxvaGdkZWV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS8zZWQ4ZGQtZDM2ZS00NDBjLTgxNDIt ZDgwYzZiODVjZGE0LzEvWTluUjJWd2V0eGJ1Z1pVRVduZkxvaGdkZWV3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS8zZWQ4ZGQtZDM2ZS00NDBjLTgxNDItZDgwYzZiODVjZGE0 LzEvWTluUjJWd2V0eGJ1Z1pVRVduZkxvaGdkZWV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH9On39+v Bu2002/lmgnDp0mnusZDY6x4L9B9IVGtlKkzo2BMPbqTkEq/R5E+n+AShFIBtwIf Wn54/vXT6QSqUsgkaZzlX7oFAkYEIBb3F7l/pOQIxEA9zy/EP2vzhyNLr5PfR7HQ Q6oKZx1wfwigzKKhLyYvPcPOO755XJF/Tb72LRYhHVvt2vGoJUb66VWQorlzglls yOMYNmdIzPk8FhG9S660+FPY2wEZ1SmdKZLj2Icv5slc2R3UMXIZUgwnfBCTLZWB jGD7esAVWyQCll2b02YpkgIvWE4z3/O3lIvafaYkvUN5VP+9gYh3jdnYmjjWys3Z 4GQ3+LF68NSX+A== -----END CERTIFICATE-----Generated at Fri Dec 12 00:14:14 2025 by rpki-client