This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/661285-7965-4fa4-baab-74c1405c3475/1/Y_qsKbkFNPkan7DrYxjwAZRRxu4.mft File: Y_qsKbkFNPkan7DrYxjwAZRRxu4.mft (raw, json) Hash identifier: 9cK94QoHVl//q/evCEWA0/dsq0o0wrvNgv4ix62Ybog= Subject key identifier: A0:3D:8F:15:33:96:78:84:E4:0F:51:33:74:AF:8D:0A:03:28:B4:D6 Authority key identifier: 63:FA:AC:29:B9:05:34:F9:1A:9F:B0:EB:63:18:F0:01:94:51:C6:EE Certificate issuer: /CN=63faac29b90534f91a9fb0eb6318f0019451c6ee Certificate serial: 019B0F376D8D050DF37CD67C9EE245132B56 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y_qsKbkFNPkan7DrYxjwAZRRxu4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/661285-7965-4fa4-baab-74c1405c3475/1/Y_qsKbkFNPkan7DrYxjwAZRRxu4.mft Manifest number: 0D71 Signing time: Thu 11 Dec 2025 21:00:49 +0000 Manifest this update: Thu 11 Dec 2025 21:00:49 +0000 Manifest next update: Fri 12 Dec 2025 21:00:49 +0000 Files and hashes: 1: Y_qsKbkFNPkan7DrYxjwAZRRxu4.crl (hash: qRZrrCycm+W3UKIYfffq6StbhZ6YNopeC2b6s4T39Sw=) 2: _B7qhSnCxfn7CerNmWLFyrIUzIo.roa (hash: SylKEkKlUGkISQweMYeNKNB3Kfx1l1zxuoZbI4A8/rE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/661285-7965-4fa4-baab-74c1405c3475/1/Y_qsKbkFNPkan7DrYxjwAZRRxu4.crl rsync://rpki.ripe.net/repository/DEFAULT/48/661285-7965-4fa4-baab-74c1405c3475/1/Y_qsKbkFNPkan7DrYxjwAZRRxu4.mft rsync://rpki.ripe.net/repository/DEFAULT/Y_qsKbkFNPkan7DrYxjwAZRRxu4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:37:6d:8d:05:0d:f3:7c:d6:7c:9e:e2:45:13:2b:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63faac29b90534f91a9fb0eb6318f0019451c6ee Validity Not Before: Dec 11 21:00:49 2025 GMT Not After : Dec 12 21:00:49 2025 GMT Subject: CN=a03d8f1533967884e40f513374af8d0a0328b4d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:7f:00:66:29:83:a8:e3:2f:3b:1a:56:cd:b3: 5e:8c:69:40:68:87:d1:49:00:e9:6c:ff:e5:a8:36: 06:ac:cf:ce:66:2a:97:06:be:a9:ff:aa:f5:2c:9e: 5c:57:ac:d3:0f:14:92:36:d7:bd:c9:2d:75:0d:c2: 18:69:45:57:b0:f2:53:d7:7a:8d:5c:10:70:2c:cd: 35:72:0a:ba:b2:ba:3b:99:fb:71:22:e9:12:b6:74: 70:3e:87:6c:5d:56:cc:e3:a2:0f:15:5b:f4:90:4d: 2e:12:9b:ca:2f:5e:bf:6c:8b:a0:a6:1d:6d:12:f8: 70:ec:26:d9:69:a4:c4:0c:c8:4c:f1:d9:f9:94:5b: 24:3a:af:a1:2d:e8:86:2b:8c:31:6b:23:3e:0c:6e: 99:15:43:61:88:bf:d7:8a:41:54:27:d4:5e:2f:c1: 78:5f:39:51:f3:e9:39:aa:4d:f8:73:7f:43:fe:89: 44:86:aa:e0:30:eb:ec:82:74:46:21:b0:f4:6c:6a: d8:dc:92:2d:5e:ef:d1:6b:5e:e8:74:fd:82:77:b6: a1:91:c7:4b:bb:74:17:cb:1d:32:26:73:6b:2f:83: ce:15:11:60:e5:4a:14:0d:f3:1e:b3:47:96:c6:d1: 5f:0d:9e:80:81:94:83:b3:30:57:15:c1:80:8c:43: e6:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:3D:8F:15:33:96:78:84:E4:0F:51:33:74:AF:8D:0A:03:28:B4:D6 X509v3 Authority Key Identifier: keyid:63:FA:AC:29:B9:05:34:F9:1A:9F:B0:EB:63:18:F0:01:94:51:C6:EE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y_qsKbkFNPkan7DrYxjwAZRRxu4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/661285-7965-4fa4-baab-74c1405c3475/1/Y_qsKbkFNPkan7DrYxjwAZRRxu4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/661285-7965-4fa4-baab-74c1405c3475/1/Y_qsKbkFNPkan7DrYxjwAZRRxu4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:e7:1d:87:d8:88:42:53:ab:45:22:45:e6:ac:7f:3d:d1:02: be:0f:61:36:2e:f0:36:d9:02:5e:9f:f2:cb:c3:33:d7:c2:f5: 19:31:0c:bf:e8:97:89:06:8b:6b:80:32:4d:10:08:12:e4:08: 52:a2:57:0f:16:a3:b7:a1:80:8f:04:1e:83:fb:6b:2c:e5:ef: ca:81:ad:6f:8a:42:bd:a7:81:7f:8d:14:f2:d7:e4:81:79:5f: c0:c1:e4:60:48:f3:20:99:ef:9c:f9:77:5b:3a:d6:ae:c2:5f: ae:a1:93:0e:e1:33:b1:02:b9:6e:8c:c8:08:9a:d4:a6:76:c1: 7e:f2:89:42:b7:13:21:0d:90:ae:f3:03:a3:50:22:96:32:36: 54:32:3b:53:bb:1e:8c:cf:8b:9d:69:56:89:3d:f1:86:87:e9: ed:d7:e6:04:d8:8a:47:b8:a5:64:e0:63:9a:d2:2a:1f:0b:93: 0e:ae:c5:9a:f2:2e:53:5c:81:d0:b0:3f:36:60:b5:95:2b:4a: 55:cc:d6:35:92:81:53:13:e7:aa:a0:6e:de:f6:7a:ad:81:be: 8d:01:be:69:37:15:35:8e:ba:64:ca:96:de:ac:e0:30:f4:05: 6e:9e:fe:c7:bf:80:c9:b7:9e:3b:3f:b2:79:87:1b:d3:70:4d: 14:33:2a:63 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPN22NBQ3zfNZ8nuJFEytWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZmFhYzI5YjkwNTM0ZjkxYTlmYjBlYjYzMThmMDAxOTQ1 MWM2ZWUwHhcNMjUxMjExMjEwMDQ5WhcNMjUxMjEyMjEwMDQ5WjAzMTEwLwYDVQQD EyhhMDNkOGYxNTMzOTY3ODg0ZTQwZjUxMzM3NGFmOGQwYTAzMjhiNGQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApn8AZimDqOMvOxpWzbNejGlAaIfR SQDpbP/lqDYGrM/OZiqXBr6p/6r1LJ5cV6zTDxSSNte9yS11DcIYaUVXsPJT13qN XBBwLM01cgq6sro7mftxIukStnRwPodsXVbM46IPFVv0kE0uEpvKL16/bIugph1t Evhw7CbZaaTEDMhM8dn5lFskOq+hLeiGK4wxayM+DG6ZFUNhiL/XikFUJ9ReL8F4 XzlR8+k5qk34c39D/olEhqrgMOvsgnRGIbD0bGrY3JItXu/Ra17odP2Cd7ahkcdL u3QXyx0yJnNrL4POFRFg5UoUDfMes0eWxtFfDZ6AgZSDszBXFcGAjEPmnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKA9jxUzlniE5A9RM3SvjQoDKLTWMB8GA1UdIwQY MBaAFGP6rCm5BTT5Gp+w62MY8AGUUcbuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWV9xc0tia0ZOUGthbjdEcll4andBWlJSeHU0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC82NjEyODUtNzk2NS00ZmE0LWJhYWIt NzRjMTQwNWMzNDc1LzEvWV9xc0tia0ZOUGthbjdEcll4andBWlJSeHU0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC82NjEyODUtNzk2NS00ZmE0LWJhYWItNzRjMTQwNWMzNDc1 LzEvWV9xc0tia0ZOUGthbjdEcll4andBWlJSeHU0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGecdh9iI QlOrRSJF5qx/PdECvg9hNi7wNtkCXp/yy8Mz18L1GTEMv+iXiQaLa4AyTRAIEuQI UqJXDxajt6GAjwQeg/trLOXvyoGtb4pCvaeBf40U8tfkgXlfwMHkYEjzIJnvnPl3 WzrWrsJfrqGTDuEzsQK5bozICJrUpnbBfvKJQrcTIQ2QrvMDo1AiljI2VDI7U7se jM+LnWlWiT3xhofp7dfmBNiKR7ilZOBjmtIqHwuTDq7FmvIuU1yB0LA/NmC1lStK VczWNZKBUxPnqqBu3vZ6rYG+jQG+aTcVNY66ZMqW3qzgMPQFbp7+x7+AybeeOz+y eYcb03BNFDMqYw== -----END CERTIFICATE-----Generated at Fri Dec 12 03:07:45 2025 by rpki-client