This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/ebf304-5ddb-4569-aa1e-d45c12472935/1/Y0cDI_IxIpymkfPglRnBrILy6gE.mft File: Y0cDI_IxIpymkfPglRnBrILy6gE.mft (raw, json) Hash identifier: /wa+gZkLYoeNlwz84wZI2WYUJY5ygvwR3AWhYdYdN/Y= Subject key identifier: 6A:B5:A5:2F:92:A4:A1:EE:71:C5:80:00:B5:31:59:2F:10:B4:A8:D2 Authority key identifier: 63:47:03:23:F2:31:22:9C:A6:91:F3:E0:95:19:C1:AC:82:F2:EA:01 Certificate issuer: /CN=63470323f231229ca691f3e09519c1ac82f2ea01 Certificate serial: 019B59766D11B2EC137822B197152F66F3D6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y0cDI_IxIpymkfPglRnBrILy6gE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/ebf304-5ddb-4569-aa1e-d45c12472935/1/Y0cDI_IxIpymkfPglRnBrILy6gE.mft Manifest number: 0281 Signing time: Fri 26 Dec 2025 07:01:31 +0000 Manifest this update: Fri 26 Dec 2025 07:01:31 +0000 Manifest next update: Sat 27 Dec 2025 07:01:31 +0000 Files and hashes: 1: WwWZ_i4rGRDbq67jPO4r6ZSGoFI.roa (hash: nLu8gOVrrY7uwr4TxE8bOFSJg3uFSsR06swIilrL5NA=) 2: Y0cDI_IxIpymkfPglRnBrILy6gE.crl (hash: x11lX2l+ANNBeM8/y53QXZfdKSKclo81rn4bk45s1xE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/ebf304-5ddb-4569-aa1e-d45c12472935/1/Y0cDI_IxIpymkfPglRnBrILy6gE.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/ebf304-5ddb-4569-aa1e-d45c12472935/1/Y0cDI_IxIpymkfPglRnBrILy6gE.mft rsync://rpki.ripe.net/repository/DEFAULT/Y0cDI_IxIpymkfPglRnBrILy6gE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:76:6d:11:b2:ec:13:78:22:b1:97:15:2f:66:f3:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63470323f231229ca691f3e09519c1ac82f2ea01 Validity Not Before: Dec 26 07:01:31 2025 GMT Not After : Dec 27 07:01:31 2025 GMT Subject: CN=6ab5a52f92a4a1ee71c58000b531592f10b4a8d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:94:fa:93:57:b1:ba:25:b8:fe:dc:df:e7:6b: fa:f5:2e:03:3a:47:d3:66:4b:ec:6f:1d:11:2a:00: 93:41:6b:da:5d:fa:f2:f5:3f:7f:e4:2f:55:c2:be: 28:86:c6:7a:8d:a3:24:80:41:82:03:3c:31:87:0e: 8a:68:ff:8d:b5:8e:77:5c:db:a8:7f:a2:68:78:0d: d9:c0:43:7c:5c:b6:15:72:88:a6:07:ef:f6:d0:5a: 46:8c:42:7f:f9:9d:25:8a:60:2c:a1:de:3a:03:e1: 40:97:e7:86:58:a6:bb:59:36:82:8d:c6:78:ac:d2: 8d:cc:6c:c9:23:52:33:13:40:56:b4:d9:52:72:57: ab:96:0e:6a:77:be:73:d4:db:91:05:18:6c:f5:10: 39:a2:5f:f8:4f:bf:9c:d9:6a:83:3c:01:a4:c4:72: 0f:61:c4:de:3f:fc:8b:06:0d:54:37:bb:46:69:1e: fa:52:72:d5:35:a2:6a:53:47:f8:97:04:58:e6:88: f6:5d:d6:74:61:0c:73:7f:5c:22:22:64:68:fa:59: 5a:a6:8c:2e:d1:eb:0e:3c:6c:7a:92:5a:c3:b6:30: 14:3f:f9:df:a9:a1:b2:f2:1b:e0:b8:eb:cb:2b:92: c2:e0:07:ca:3d:6e:ee:ea:6f:1a:99:8a:44:4b:81: 76:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:B5:A5:2F:92:A4:A1:EE:71:C5:80:00:B5:31:59:2F:10:B4:A8:D2 X509v3 Authority Key Identifier: keyid:63:47:03:23:F2:31:22:9C:A6:91:F3:E0:95:19:C1:AC:82:F2:EA:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y0cDI_IxIpymkfPglRnBrILy6gE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/ebf304-5ddb-4569-aa1e-d45c12472935/1/Y0cDI_IxIpymkfPglRnBrILy6gE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/ebf304-5ddb-4569-aa1e-d45c12472935/1/Y0cDI_IxIpymkfPglRnBrILy6gE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:bd:46:bc:0c:6f:65:2a:2c:ff:d2:3d:13:87:9f:d5:4d:04: fc:8f:4a:b5:39:3a:a3:77:92:f6:0c:52:27:37:ab:8a:e5:46: 31:96:1d:5b:76:bb:2f:b9:e5:6d:2a:45:95:3f:fa:2a:d0:53: 6d:bf:4b:93:b9:b7:55:0c:a5:f2:2f:e6:36:19:33:97:9a:9a: 00:4c:3a:fb:07:fe:df:22:1c:ed:54:a1:c5:6c:2a:71:d3:bf: bd:48:60:2c:ba:d1:9d:48:5b:4d:9e:8d:7d:f3:a0:b3:fc:d9: 76:e1:9c:be:41:06:04:1d:4e:31:c4:fb:2e:ed:9b:94:c8:92: 71:b7:69:65:fc:db:84:f3:f6:19:fd:02:4f:44:9a:45:06:f3: 8e:2f:c4:16:1f:4b:a6:c6:1d:33:f7:b0:1e:b8:34:bf:f5:0f: c3:d0:c1:51:7c:7d:14:67:82:b6:96:e8:78:3e:e5:4c:25:f3: f3:65:4f:93:10:72:db:bf:a7:ae:a1:17:c9:8d:99:60:4a:85: e2:32:97:63:10:2c:50:ae:4e:ef:bf:1b:f2:77:25:e9:0e:9c: ec:7c:16:39:b4:f5:91:49:83:74:25:ca:ff:cf:29:6b:65:f7: 83:06:e8:5c:5a:5e:bf:ed:c5:72:94:52:d7:b2:3b:e9:78:3e: 8e:7e:8f:8f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZdm0RsuwTeCKxlxUvZvPWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzNDcwMzIzZjIzMTIyOWNhNjkxZjNlMDk1MTljMWFjODJm MmVhMDEwHhcNMjUxMjI2MDcwMTMxWhcNMjUxMjI3MDcwMTMxWjAzMTEwLwYDVQQD Eyg2YWI1YTUyZjkyYTRhMWVlNzFjNTgwMDBiNTMxNTkyZjEwYjRhOGQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApJT6k1exuiW4/tzf52v69S4DOkfT Zkvsbx0RKgCTQWvaXfry9T9/5C9Vwr4ohsZ6jaMkgEGCAzwxhw6KaP+NtY53XNuo f6JoeA3ZwEN8XLYVcoimB+/20FpGjEJ/+Z0limAsod46A+FAl+eGWKa7WTaCjcZ4 rNKNzGzJI1IzE0BWtNlSclerlg5qd75z1NuRBRhs9RA5ol/4T7+c2WqDPAGkxHIP YcTeP/yLBg1UN7tGaR76UnLVNaJqU0f4lwRY5oj2XdZ0YQxzf1wiImRo+llapowu 0esOPGx6klrDtjAUP/nfqaGy8hvguOvLK5LC4AfKPW7u6m8amYpES4F2AwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGq1pS+SpKHuccWAALUxWS8QtKjSMB8GA1UdIwQY MBaAFGNHAyPyMSKcppHz4JUZwayC8uoBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWTBjRElfSXhJcHlta2ZQZ2xSbkJySUx5NmdFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy9lYmYzMDQtNWRkYi00NTY5LWFhMWUt ZDQ1YzEyNDcyOTM1LzEvWTBjRElfSXhJcHlta2ZQZ2xSbkJySUx5NmdFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy9lYmYzMDQtNWRkYi00NTY5LWFhMWUtZDQ1YzEyNDcyOTM1 LzEvWTBjRElfSXhJcHlta2ZQZ2xSbkJySUx5NmdFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABL1GvAxv ZSos/9I9E4ef1U0E/I9KtTk6o3eS9gxSJzeriuVGMZYdW3a7L7nlbSpFlT/6KtBT bb9Lk7m3VQyl8i/mNhkzl5qaAEw6+wf+3yIc7VShxWwqcdO/vUhgLLrRnUhbTZ6N ffOgs/zZduGcvkEGBB1OMcT7Lu2blMiScbdpZfzbhPP2Gf0CT0SaRQbzji/EFh9L psYdM/ewHrg0v/UPw9DBUXx9FGeCtpboeD7lTCXz82VPkxBy27+nrqEXyY2ZYEqF 4jKXYxAsUK5O778b8ncl6Q6c7HwWObT1kUmDdCXK/88pa2X3gwboXFpev+3FcpRS 17I76Xg+jn6Pjw== -----END CERTIFICATE-----Generated at Fri Dec 26 15:46:20 2025 by rpki-client