This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/7711d9-7f7c-4edb-a687-d6f04e708454/1/Y5jsFbwDnFpgQvvpBIRFa-Atp7k.mft File: Y5jsFbwDnFpgQvvpBIRFa-Atp7k.mft (raw, json) Hash identifier: Ni6JvwSOJs/Jr0zFbhW+j7VQdp53VoMej7CBlEi2ma4= Subject key identifier: 47:2B:E6:40:BA:1C:60:7E:C1:12:BB:29:CF:08:0F:1F:03:66:7F:1F Authority key identifier: 63:98:EC:15:BC:03:9C:5A:60:42:FB:E9:04:84:45:6B:E0:2D:A7:B9 Certificate issuer: /CN=6398ec15bc039c5a6042fbe90484456be02da7b9 Certificate serial: 019B323203DB584C3AE29C3BF8374581E78E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y5jsFbwDnFpgQvvpBIRFa-Atp7k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/7711d9-7f7c-4edb-a687-d6f04e708454/1/Y5jsFbwDnFpgQvvpBIRFa-Atp7k.mft Manifest number: 10B7 Signing time: Thu 18 Dec 2025 16:01:37 +0000 Manifest this update: Thu 18 Dec 2025 16:01:37 +0000 Manifest next update: Fri 19 Dec 2025 16:01:37 +0000 Files and hashes: 1: Y5jsFbwDnFpgQvvpBIRFa-Atp7k.crl (hash: TV1aWDJd4dBHW9bE3jGrrXE2DC4CiASDuICKQs+vS7s=) 2: e7A-mRDgO875HCDrxITlnnJ3Ki0.roa (hash: 7vWhmuACkkydDfcxmeEEUNVhiR5m0fscFivB+SuNzME=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/7711d9-7f7c-4edb-a687-d6f04e708454/1/Y5jsFbwDnFpgQvvpBIRFa-Atp7k.crl rsync://rpki.ripe.net/repository/DEFAULT/41/7711d9-7f7c-4edb-a687-d6f04e708454/1/Y5jsFbwDnFpgQvvpBIRFa-Atp7k.mft rsync://rpki.ripe.net/repository/DEFAULT/Y5jsFbwDnFpgQvvpBIRFa-Atp7k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 16:01:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:32:03:db:58:4c:3a:e2:9c:3b:f8:37:45:81:e7:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6398ec15bc039c5a6042fbe90484456be02da7b9 Validity Not Before: Dec 18 16:01:37 2025 GMT Not After : Dec 19 16:01:37 2025 GMT Subject: CN=472be640ba1c607ec112bb29cf080f1f03667f1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:12:a6:db:f1:88:3c:dc:95:84:85:80:e7:36: da:04:f4:5a:5a:d5:a3:8b:3a:27:9c:e7:3b:d6:e5: d5:ad:1d:fd:6e:9b:60:e9:4f:83:41:9e:86:0c:4e: 43:65:35:8e:44:29:41:e9:19:e0:9c:77:7c:ce:c9: 01:f8:8e:a9:8f:2c:be:3c:f3:21:ca:5c:82:29:e5: cf:81:25:3f:1a:6c:25:43:a1:31:62:bb:7e:df:51: 36:82:86:93:98:42:a8:19:f8:2f:c2:da:a4:49:b3: 9e:fb:57:2b:2a:3c:70:8b:86:fe:62:8a:1a:b4:f4: b8:b3:7b:7a:e9:68:39:15:c1:ce:fc:f5:c0:fc:48: 1b:e7:27:ee:64:2d:4f:7f:6a:3f:03:ed:eb:91:d3: da:e5:2e:f1:6f:72:e4:7c:06:21:8d:66:c6:5b:4a: e1:50:61:8d:e1:4c:40:c6:7a:68:10:9f:85:aa:72: ad:e9:3f:56:31:1c:c6:73:4e:b6:09:14:79:cb:fb: df:5a:d7:6e:30:d8:33:00:44:25:27:38:29:70:6f: c4:0c:20:2a:e3:33:ac:4b:5f:cd:ed:f7:8d:59:c8: 67:05:04:de:3f:d3:6d:ec:60:8e:bf:c1:6d:42:5e: 0d:f0:dd:7e:41:0b:f0:4b:bb:80:8a:d4:3f:1c:a6: d1:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:2B:E6:40:BA:1C:60:7E:C1:12:BB:29:CF:08:0F:1F:03:66:7F:1F X509v3 Authority Key Identifier: keyid:63:98:EC:15:BC:03:9C:5A:60:42:FB:E9:04:84:45:6B:E0:2D:A7:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y5jsFbwDnFpgQvvpBIRFa-Atp7k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/7711d9-7f7c-4edb-a687-d6f04e708454/1/Y5jsFbwDnFpgQvvpBIRFa-Atp7k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/41/7711d9-7f7c-4edb-a687-d6f04e708454/1/Y5jsFbwDnFpgQvvpBIRFa-Atp7k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:ea:9e:8a:e5:f7:e5:09:d1:a6:dc:ae:87:5c:bd:cb:32:dc: b3:05:be:ac:61:e7:9e:71:6a:4b:90:e5:ec:74:6c:a3:a8:a5: d7:51:9e:36:6a:9a:e0:8a:42:00:8e:5d:d4:15:34:1b:41:8f: 97:34:eb:93:ec:cc:f5:94:12:67:b0:fa:14:92:29:4e:54:d3: f3:2a:cf:f9:5c:86:0c:dc:52:9d:ef:b2:d4:b1:d1:c8:d9:23: 0d:51:e7:64:c5:c7:e1:87:f8:ba:90:28:03:d5:dc:fe:b9:9b: 6a:f3:e2:56:1f:90:a8:cd:cb:a0:d6:80:7e:91:2b:6d:23:72: 6a:67:33:a0:75:86:5e:36:46:4e:ea:84:7d:7c:db:8f:3a:cd: 30:a3:43:69:62:95:29:29:00:a7:ba:ea:8a:90:06:4f:81:85: 94:09:61:04:9f:0e:7d:75:a5:2d:35:bb:45:8e:db:46:46:92: 45:14:19:72:e1:d9:91:e7:df:68:81:49:7b:95:67:fe:d7:0d: 74:f2:72:e4:51:8d:51:5b:c7:2f:59:c0:64:af:85:56:8e:04: d2:10:6d:94:b6:31:d5:e0:9e:e5:f9:99:f3:e7:b6:d3:5e:b0: cf:67:74:14:ec:59:da:e5:5a:da:bf:53:8b:04:14:84:d5:79: fb:d5:a7:0c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsyMgPbWEw64pw7+DdFgeeOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzOThlYzE1YmMwMzljNWE2MDQyZmJlOTA0ODQ0NTZiZTAy ZGE3YjkwHhcNMjUxMjE4MTYwMTM3WhcNMjUxMjE5MTYwMTM3WjAzMTEwLwYDVQQD Eyg0NzJiZTY0MGJhMWM2MDdlYzExMmJiMjljZjA4MGYxZjAzNjY3ZjFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAthKm2/GIPNyVhIWA5zbaBPRaWtWj izonnOc71uXVrR39bptg6U+DQZ6GDE5DZTWORClB6RngnHd8zskB+I6pjyy+PPMh ylyCKeXPgSU/GmwlQ6ExYrt+31E2goaTmEKoGfgvwtqkSbOe+1crKjxwi4b+Yooa tPS4s3t66Wg5FcHO/PXA/Egb5yfuZC1Pf2o/A+3rkdPa5S7xb3LkfAYhjWbGW0rh UGGN4UxAxnpoEJ+FqnKt6T9WMRzGc062CRR5y/vfWtduMNgzAEQlJzgpcG/EDCAq 4zOsS1/N7feNWchnBQTeP9Nt7GCOv8FtQl4N8N1+QQvwS7uAitQ/HKbR9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEcr5kC6HGB+wRK7Kc8IDx8DZn8fMB8GA1UdIwQY MBaAFGOY7BW8A5xaYEL76QSERWvgLae5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWTVqc0Zid0RuRnBnUXZ2cEJJUkZhLUF0cDdrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS83NzExZDktN2Y3Yy00ZWRiLWE2ODct ZDZmMDRlNzA4NDU0LzEvWTVqc0Zid0RuRnBnUXZ2cEJJUkZhLUF0cDdrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MS83NzExZDktN2Y3Yy00ZWRiLWE2ODctZDZmMDRlNzA4NDU0 LzEvWTVqc0Zid0RuRnBnUXZ2cEJJUkZhLUF0cDdrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArOqeiuX3 5QnRptyuh1y9yzLcswW+rGHnnnFqS5Dl7HRso6il11GeNmqa4IpCAI5d1BU0G0GP lzTrk+zM9ZQSZ7D6FJIpTlTT8yrP+VyGDNxSne+y1LHRyNkjDVHnZMXH4Yf4upAo A9Xc/rmbavPiVh+QqM3LoNaAfpErbSNyamczoHWGXjZGTuqEfXzbjzrNMKNDaWKV KSkAp7rqipAGT4GFlAlhBJ8OfXWlLTW7RY7bRkaSRRQZcuHZkeffaIFJe5Vn/tcN dPJy5FGNUVvHL1nAZK+FVo4E0hBtlLYx1eCe5fmZ8+e2016wz2d0FOxZ2uVa2r9T iwQUhNV5+9WnDA== -----END CERTIFICATE-----Generated at Thu Dec 18 23:29:33 2025 by rpki-client