This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/33e200-886b-427f-b9ed-ad9cffcebf1b/1/Y8Ncie1K6aPWQbEcvmrQ_L6TJlU.mft File: Y8Ncie1K6aPWQbEcvmrQ_L6TJlU.mft (raw, json) Hash identifier: is3mKqslBj/GayFnJ2isU8+UCQ2RtfLNhDgP2ydjKcM= Subject key identifier: 26:59:32:53:4C:F4:3C:23:A2:89:48:3B:0F:C0:23:A7:03:01:F9:FF Authority key identifier: 63:C3:5C:89:ED:4A:E9:A3:D6:41:B1:1C:BE:6A:D0:FC:BE:93:26:55 Certificate issuer: /CN=63c35c89ed4ae9a3d641b11cbe6ad0fcbe932655 Certificate serial: 019B59E4311F56A6A351751EA89B1391A9C8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y8Ncie1K6aPWQbEcvmrQ_L6TJlU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/33e200-886b-427f-b9ed-ad9cffcebf1b/1/Y8Ncie1K6aPWQbEcvmrQ_L6TJlU.mft Manifest number: 1C Signing time: Fri 26 Dec 2025 09:01:25 +0000 Manifest this update: Fri 26 Dec 2025 09:01:25 +0000 Manifest next update: Sat 27 Dec 2025 09:01:25 +0000 Files and hashes: 1: Y8Ncie1K6aPWQbEcvmrQ_L6TJlU.crl (hash: 8zGqyL9fDenHStWKSriPGCRrH0hq1I1NEBZbhVxNas8=) 2: tS1ymYZ2CRr4AeSmBTuFkFFCbJQ.roa (hash: N1jAAPqCDpOLE4LlhlpfdOi2tS8IlWX1povqxRFoIJ0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/33e200-886b-427f-b9ed-ad9cffcebf1b/1/Y8Ncie1K6aPWQbEcvmrQ_L6TJlU.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/33e200-886b-427f-b9ed-ad9cffcebf1b/1/Y8Ncie1K6aPWQbEcvmrQ_L6TJlU.mft rsync://rpki.ripe.net/repository/DEFAULT/Y8Ncie1K6aPWQbEcvmrQ_L6TJlU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:e4:31:1f:56:a6:a3:51:75:1e:a8:9b:13:91:a9:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63c35c89ed4ae9a3d641b11cbe6ad0fcbe932655 Validity Not Before: Dec 26 09:01:25 2025 GMT Not After : Dec 27 09:01:25 2025 GMT Subject: CN=265932534cf43c23a289483b0fc023a70301f9ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:7d:bb:f5:4d:4e:13:22:05:6f:a9:dc:cc:bf: d0:34:14:9f:de:7f:cd:42:d1:a4:10:b1:c7:ce:03: 14:e4:d6:a8:1f:bf:8a:07:65:18:35:6a:f3:41:0f: be:f0:96:c4:91:4d:66:bd:5d:01:1f:80:42:05:22: 58:bb:f9:e0:fc:b1:7d:60:d6:03:21:27:ce:a0:b6: fb:5f:e8:7e:8f:05:39:ec:b0:a6:f3:5e:a0:e0:a8: 1b:ac:d6:01:ea:da:3e:03:ae:b1:0b:36:60:29:55: 95:ef:20:c3:5d:16:3d:ef:d9:4c:aa:f4:37:f6:56: cd:f8:78:39:fe:3b:ad:77:df:cf:2a:22:0d:85:fc: ef:c8:9d:8b:84:49:15:a2:b1:81:f7:ca:d4:ef:ee: 90:c6:a2:5b:63:d6:bc:2b:e0:af:3d:69:ad:41:29: 4c:67:6b:be:f2:c1:61:fd:ac:f4:23:35:eb:cb:f5: d8:79:76:e4:98:8e:f7:67:6d:02:59:86:e8:1a:7f: 48:4c:37:ed:f2:7d:3f:d0:cc:b7:56:8c:d3:f8:8d: 15:0d:0e:4a:30:20:55:30:f7:f3:c9:bd:13:01:59: fe:88:16:45:9b:e0:19:f1:14:d6:a3:6e:d4:90:7c: 20:53:5d:d8:2a:a7:63:29:97:c9:cc:94:2f:4a:9a: 29:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:59:32:53:4C:F4:3C:23:A2:89:48:3B:0F:C0:23:A7:03:01:F9:FF X509v3 Authority Key Identifier: keyid:63:C3:5C:89:ED:4A:E9:A3:D6:41:B1:1C:BE:6A:D0:FC:BE:93:26:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y8Ncie1K6aPWQbEcvmrQ_L6TJlU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/33e200-886b-427f-b9ed-ad9cffcebf1b/1/Y8Ncie1K6aPWQbEcvmrQ_L6TJlU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/33e200-886b-427f-b9ed-ad9cffcebf1b/1/Y8Ncie1K6aPWQbEcvmrQ_L6TJlU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:f1:34:c5:74:5c:e3:f2:bb:cd:04:f1:44:9a:1f:af:0d:4b: 1a:cc:20:93:9c:74:c0:2a:2a:5d:15:ea:5f:37:6f:27:da:b9: 17:aa:56:2b:7f:ff:01:98:60:c9:04:17:f9:fa:5f:d0:6c:fd: c2:24:e6:0b:96:c5:2d:33:d1:34:6c:74:f8:81:86:5a:9c:88: 76:27:0c:e3:48:5f:8b:eb:c7:0d:df:6e:65:80:07:7c:67:d3: 99:b7:bf:12:72:77:0e:fa:c9:60:05:96:5e:f9:4f:f8:f2:77: b6:53:27:ef:30:32:29:1c:fa:54:1a:d8:62:f2:c2:6f:a8:7b: 78:2e:6c:03:86:b6:6b:63:9f:b8:11:9f:d2:42:70:95:75:36: 2b:99:3d:a5:38:fc:e9:bd:a7:7a:3a:7f:1f:25:b2:e5:91:28: de:33:f9:15:1f:eb:91:73:43:00:95:99:72:8e:56:5b:39:3f: 3d:2f:be:27:4d:9c:95:a8:9e:e6:2b:1e:b7:53:82:55:e2:f9: 4d:f0:ce:61:6d:f0:9a:48:db:97:0c:ba:a5:00:27:8e:4c:b4: f4:7e:5f:0c:36:e7:8f:a0:6a:21:82:a9:2f:58:6c:bb:8b:84: 0c:2e:83:af:12:0b:a3:56:b5:65:68:37:a1:75:0e:f7:fc:e6: 9d:b5:5a:b7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZ5DEfVqajUXUeqJsTkanIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzYzM1Yzg5ZWQ0YWU5YTNkNjQxYjExY2JlNmFkMGZjYmU5 MzI2NTUwHhcNMjUxMjI2MDkwMTI1WhcNMjUxMjI3MDkwMTI1WjAzMTEwLwYDVQQD EygyNjU5MzI1MzRjZjQzYzIzYTI4OTQ4M2IwZmMwMjNhNzAzMDFmOWZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxH279U1OEyIFb6nczL/QNBSf3n/N QtGkELHHzgMU5NaoH7+KB2UYNWrzQQ++8JbEkU1mvV0BH4BCBSJYu/ng/LF9YNYD ISfOoLb7X+h+jwU57LCm816g4KgbrNYB6to+A66xCzZgKVWV7yDDXRY979lMqvQ3 9lbN+Hg5/jutd9/PKiINhfzvyJ2LhEkVorGB98rU7+6QxqJbY9a8K+CvPWmtQSlM Z2u+8sFh/az0IzXry/XYeXbkmI73Z20CWYboGn9ITDft8n0/0My3VozT+I0VDQ5K MCBVMPfzyb0TAVn+iBZFm+AZ8RTWo27UkHwgU13YKqdjKZfJzJQvSpopAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCZZMlNM9DwjoolIOw/AI6cDAfn/MB8GA1UdIwQY MBaAFGPDXIntSumj1kGxHL5q0Py+kyZVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWThOY2llMUs2YVBXUWJFY3ZtclFfTDZUSmxVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi8zM2UyMDAtODg2Yi00MjdmLWI5ZWQt YWQ5Y2ZmY2ViZjFiLzEvWThOY2llMUs2YVBXUWJFY3ZtclFfTDZUSmxVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi8zM2UyMDAtODg2Yi00MjdmLWI5ZWQtYWQ5Y2ZmY2ViZjFi LzEvWThOY2llMUs2YVBXUWJFY3ZtclFfTDZUSmxVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhfE0xXRc 4/K7zQTxRJofrw1LGswgk5x0wCoqXRXqXzdvJ9q5F6pWK3//AZhgyQQX+fpf0Gz9 wiTmC5bFLTPRNGx0+IGGWpyIdicM40hfi+vHDd9uZYAHfGfTmbe/EnJ3DvrJYAWW XvlP+PJ3tlMn7zAyKRz6VBrYYvLCb6h7eC5sA4a2a2OfuBGf0kJwlXU2K5k9pTj8 6b2nejp/HyWy5ZEo3jP5FR/rkXNDAJWZco5WWzk/PS++J02claie5iset1OCVeL5 TfDOYW3wmkjblwy6pQAnjky09H5fDDbnj6BqIYKpL1hsu4uEDC6DrxILo1a1ZWg3 oXUO9/zmnbVatw== -----END CERTIFICATE-----Generated at Fri Dec 26 15:43:35 2025 by rpki-client