This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/661285-7965-4fa4-baab-74c1405c3475/1/Y_qsKbkFNPkan7DrYxjwAZRRxu4.mft File: Y_qsKbkFNPkan7DrYxjwAZRRxu4.mft (raw, json) Hash identifier: Z3MkVB/VpdCvN5/SW1wpu/VGK+XLMu8EXRKfva7NM5g= Subject key identifier: C4:D6:EA:71:C6:C8:14:85:E9:E0:89:DC:63:1A:09:FA:A6:AB:9B:95 Authority key identifier: 63:FA:AC:29:B9:05:34:F9:1A:9F:B0:EB:63:18:F0:01:94:51:C6:EE Certificate issuer: /CN=63faac29b90534f91a9fb0eb6318f0019451c6ee Certificate serial: 019B4EF21F398D9421B422D1D7DBB316FB33 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y_qsKbkFNPkan7DrYxjwAZRRxu4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/661285-7965-4fa4-baab-74c1405c3475/1/Y_qsKbkFNPkan7DrYxjwAZRRxu4.mft Manifest number: 0D92 Signing time: Wed 24 Dec 2025 06:00:48 +0000 Manifest this update: Wed 24 Dec 2025 06:00:48 +0000 Manifest next update: Thu 25 Dec 2025 06:00:48 +0000 Files and hashes: 1: Y_qsKbkFNPkan7DrYxjwAZRRxu4.crl (hash: 0ZhhlCYQvWdU02en2SHKQhnLYWdJu9KEz68By6/idLI=) 2: _B7qhSnCxfn7CerNmWLFyrIUzIo.roa (hash: SylKEkKlUGkISQweMYeNKNB3Kfx1l1zxuoZbI4A8/rE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/661285-7965-4fa4-baab-74c1405c3475/1/Y_qsKbkFNPkan7DrYxjwAZRRxu4.crl rsync://rpki.ripe.net/repository/DEFAULT/48/661285-7965-4fa4-baab-74c1405c3475/1/Y_qsKbkFNPkan7DrYxjwAZRRxu4.mft rsync://rpki.ripe.net/repository/DEFAULT/Y_qsKbkFNPkan7DrYxjwAZRRxu4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 06:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4e:f2:1f:39:8d:94:21:b4:22:d1:d7:db:b3:16:fb:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63faac29b90534f91a9fb0eb6318f0019451c6ee Validity Not Before: Dec 24 06:00:48 2025 GMT Not After : Dec 25 06:00:48 2025 GMT Subject: CN=c4d6ea71c6c81485e9e089dc631a09faa6ab9b95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:0b:fb:29:78:12:2c:f2:f2:94:37:b5:f7:17: 94:48:20:4e:f3:ef:8d:5c:37:ff:90:d6:34:a7:0f: 6b:ae:d1:f0:10:85:72:b1:2b:89:3e:6d:de:b8:8d: c5:33:02:d6:bd:3e:75:6e:f5:cb:40:b2:9d:3c:83: 96:45:2f:9d:17:6c:96:7d:d6:71:d2:a8:c0:2b:4a: 29:4a:ad:0e:c0:bc:70:f7:5b:0a:cb:8b:85:fd:51: 61:c0:ad:55:b5:aa:b0:e2:a6:40:cf:a1:95:fb:11: cc:41:b8:be:87:17:2e:e0:f3:a5:af:2d:4b:bf:bb: e0:59:e6:08:c4:2d:dd:e3:64:af:15:c4:73:ee:00: 58:ac:0a:e6:d2:7c:f2:2d:ae:01:9e:c9:eb:ba:dc: 9f:0a:d9:ce:82:64:53:49:6d:cb:a4:6a:e7:f0:cc: db:4a:f4:c5:e4:25:76:82:f9:fb:80:86:68:21:a0: 17:9e:a5:fa:57:48:2b:ae:12:7a:d3:bb:44:57:f1: f5:d5:ea:12:87:1a:85:4c:ef:ea:39:5e:1c:74:1f: 72:31:fb:21:19:59:48:5c:57:a6:9b:d0:bd:8d:14: b6:95:18:09:e0:64:c8:4a:a6:4c:8a:87:70:43:66: e8:35:c2:26:01:b8:13:1b:45:a1:58:de:da:f5:88: 8d:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:D6:EA:71:C6:C8:14:85:E9:E0:89:DC:63:1A:09:FA:A6:AB:9B:95 X509v3 Authority Key Identifier: keyid:63:FA:AC:29:B9:05:34:F9:1A:9F:B0:EB:63:18:F0:01:94:51:C6:EE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y_qsKbkFNPkan7DrYxjwAZRRxu4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/661285-7965-4fa4-baab-74c1405c3475/1/Y_qsKbkFNPkan7DrYxjwAZRRxu4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/661285-7965-4fa4-baab-74c1405c3475/1/Y_qsKbkFNPkan7DrYxjwAZRRxu4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:c0:f6:ea:27:1b:f5:98:10:cd:fd:30:94:1e:5a:13:c2:18: 8d:41:99:6b:ff:88:e6:a8:50:5d:fd:e0:a3:f7:a9:3e:12:7b: 01:43:c9:1c:98:ff:d0:0f:3c:03:7e:98:a8:d0:48:78:02:b0: be:ce:7d:bc:3c:0e:00:94:f9:6f:b3:f3:8c:ce:07:fb:ee:b2: a3:0b:44:2e:cb:8a:5a:bd:dc:af:f6:69:a8:51:4a:d5:a9:de: e4:28:68:5a:2f:25:95:63:6c:17:80:0c:87:32:27:b9:ef:83: b8:ac:c5:40:49:6b:fa:b3:82:f3:e0:04:fc:1e:95:96:d8:73: f8:b9:52:8b:8d:33:22:18:0a:c7:8d:9a:33:16:cc:55:66:bd: 39:af:c4:e6:e6:16:b9:25:13:47:8d:b5:c9:b4:5b:74:f1:b1: 5a:89:38:21:06:03:f7:46:06:b0:7a:ab:6a:0e:fb:9d:9d:90: 5e:d8:0d:61:db:fd:5c:7f:85:1e:63:f6:af:42:6f:e5:03:5e: 1d:0d:cb:79:1d:dc:4a:5d:51:21:1b:41:94:d6:9b:9c:4c:1c: 79:80:4e:9c:ff:84:d9:7a:df:74:a9:eb:34:0d:a5:4f:c0:8b: 7b:a0:11:1d:82:e8:20:ff:8f:c0:17:b6:2b:19:2c:e4:84:b0: 01:9f:39:c4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtO8h85jZQhtCLR19uzFvszMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZmFhYzI5YjkwNTM0ZjkxYTlmYjBlYjYzMThmMDAxOTQ1 MWM2ZWUwHhcNMjUxMjI0MDYwMDQ4WhcNMjUxMjI1MDYwMDQ4WjAzMTEwLwYDVQQD EyhjNGQ2ZWE3MWM2YzgxNDg1ZTllMDg5ZGM2MzFhMDlmYWE2YWI5Yjk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjwv7KXgSLPLylDe19xeUSCBO8++N XDf/kNY0pw9rrtHwEIVysSuJPm3euI3FMwLWvT51bvXLQLKdPIOWRS+dF2yWfdZx 0qjAK0opSq0OwLxw91sKy4uF/VFhwK1Vtaqw4qZAz6GV+xHMQbi+hxcu4POlry1L v7vgWeYIxC3d42SvFcRz7gBYrArm0nzyLa4BnsnrutyfCtnOgmRTSW3LpGrn8Mzb SvTF5CV2gvn7gIZoIaAXnqX6V0grrhJ607tEV/H11eoShxqFTO/qOV4cdB9yMfsh GVlIXFemm9C9jRS2lRgJ4GTISqZMiodwQ2boNcImAbgTG0WhWN7a9YiNiQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMTW6nHGyBSF6eCJ3GMaCfqmq5uVMB8GA1UdIwQY MBaAFGP6rCm5BTT5Gp+w62MY8AGUUcbuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWV9xc0tia0ZOUGthbjdEcll4andBWlJSeHU0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC82NjEyODUtNzk2NS00ZmE0LWJhYWIt NzRjMTQwNWMzNDc1LzEvWV9xc0tia0ZOUGthbjdEcll4andBWlJSeHU0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC82NjEyODUtNzk2NS00ZmE0LWJhYWItNzRjMTQwNWMzNDc1 LzEvWV9xc0tia0ZOUGthbjdEcll4andBWlJSeHU0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOsD26icb 9ZgQzf0wlB5aE8IYjUGZa/+I5qhQXf3go/epPhJ7AUPJHJj/0A88A36YqNBIeAKw vs59vDwOAJT5b7PzjM4H++6yowtELsuKWr3cr/ZpqFFK1ane5ChoWi8llWNsF4AM hzInue+DuKzFQElr+rOC8+AE/B6Vlthz+LlSi40zIhgKx42aMxbMVWa9Oa/E5uYW uSUTR421ybRbdPGxWok4IQYD90YGsHqrag77nZ2QXtgNYdv9XH+FHmP2r0Jv5QNe HQ3LeR3cSl1RIRtBlNabnEwceYBOnP+E2XrfdKnrNA2lT8CLe6ARHYLoIP+PwBe2 Kxks5ISwAZ85xA== -----END CERTIFICATE-----Generated at Wed Dec 24 13:25:44 2025 by rpki-client