This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/99cbcf-7d4f-4b12-a577-cc8054a51d66/1/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.mft File: Y74I2hqzHj-Y9VT6ATc_lMyQEe0.mft (raw, json) Hash identifier: xlNG5dDA9QHoN5PyZzWGq2T5j1Z4E6vhy0CS0F//PxE= Subject key identifier: 82:F4:29:8C:BC:25:A2:22:A8:6E:23:F2:71:E0:58:E6:2C:FD:01:62 Authority key identifier: 63:BE:08:DA:1A:B3:1E:3F:98:F5:54:FA:01:37:3F:94:CC:90:11:ED Certificate issuer: /CN=63be08da1ab31e3f98f554fa01373f94cc9011ed Certificate serial: 019B0DB75353B9F6C86B2A91508F2D04B6D1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/99cbcf-7d4f-4b12-a577-cc8054a51d66/1/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.mft Manifest number: 11D5 Signing time: Thu 11 Dec 2025 14:01:16 +0000 Manifest this update: Thu 11 Dec 2025 14:01:16 +0000 Manifest next update: Fri 12 Dec 2025 14:01:16 +0000 Files and hashes: 1: Je7r8p2i15SExZL77Clbe_3pLIU.roa (hash: q5RkBfa8EqGTkb+E8fZ8KT2+q7JMLCFvRnhSE6vnDeU=) 2: Y74I2hqzHj-Y9VT6ATc_lMyQEe0.crl (hash: X8/ID4qcWmck7Hhg+bUc87rJzcOJhHRB+ZItHLZxOsw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/99cbcf-7d4f-4b12-a577-cc8054a51d66/1/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.crl rsync://rpki.ripe.net/repository/DEFAULT/64/99cbcf-7d4f-4b12-a577-cc8054a51d66/1/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.mft rsync://rpki.ripe.net/repository/DEFAULT/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0d:b7:53:53:b9:f6:c8:6b:2a:91:50:8f:2d:04:b6:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63be08da1ab31e3f98f554fa01373f94cc9011ed Validity Not Before: Dec 11 14:01:16 2025 GMT Not After : Dec 12 14:01:16 2025 GMT Subject: CN=82f4298cbc25a222a86e23f271e058e62cfd0162 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:cf:eb:69:8b:62:ce:8d:e6:9e:76:ab:6a:68: fe:19:12:32:ba:97:08:61:98:45:c4:88:3a:68:b4: ea:fa:22:77:c0:23:63:4f:b3:04:28:ff:bc:d9:80: d1:f7:16:d3:ec:d6:78:84:15:c8:98:2d:13:08:e4: d7:f0:09:a1:f1:58:6d:71:12:e3:cb:40:7d:7a:a0: 69:78:53:ec:4d:8c:b6:fa:b5:32:90:88:9a:7e:4c: 1e:e3:f3:07:35:1d:12:ba:91:23:0c:f2:ac:a2:74: a7:33:96:73:11:63:7c:cd:61:35:24:7c:fc:2c:af: a2:bc:85:f5:0e:7e:42:0d:e6:2b:0c:19:20:55:ec: a0:ca:fa:aa:ab:24:8b:28:34:23:0c:0b:6b:68:8b: dc:26:99:e6:13:e3:cd:9a:f7:2f:16:3e:d9:33:67: 2f:51:2e:ef:97:6f:39:c9:67:57:80:36:f6:24:b2: f4:3a:85:1f:2f:b2:3a:35:2f:16:e1:a4:4e:4a:61: d7:00:a5:0e:8b:7b:e3:9e:20:b5:27:7b:8a:0b:8a: 9a:78:47:7c:e5:77:ba:98:ed:79:ab:dc:dc:b5:eb: b6:36:c6:8a:9d:51:63:a6:c3:68:86:e3:64:5e:3a: a1:d9:a2:bd:2c:7f:00:68:3d:f2:bb:54:51:2e:fb: f9:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:F4:29:8C:BC:25:A2:22:A8:6E:23:F2:71:E0:58:E6:2C:FD:01:62 X509v3 Authority Key Identifier: keyid:63:BE:08:DA:1A:B3:1E:3F:98:F5:54:FA:01:37:3F:94:CC:90:11:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/99cbcf-7d4f-4b12-a577-cc8054a51d66/1/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/99cbcf-7d4f-4b12-a577-cc8054a51d66/1/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:1c:e9:7b:99:a7:27:be:27:8f:dd:ce:9f:91:4f:85:d8:28: db:ef:ea:78:e1:1c:6a:9f:9f:23:6a:45:9d:d0:20:cc:61:b6: 4a:0c:47:00:7a:da:9a:24:fa:e2:83:4f:e8:a1:8c:d0:6e:d4: 75:bf:30:5e:da:3a:24:e5:14:c2:0a:1d:ef:6f:cd:11:da:67: 84:43:01:d7:5b:43:28:f4:76:84:f9:67:9d:2d:47:4c:45:6c: ff:f8:98:bd:3d:74:b6:4a:ba:c3:b1:69:e0:03:42:cd:bb:83: 31:ad:a9:42:11:c1:28:30:3b:b0:b9:33:42:27:1d:ce:d4:39: e7:12:d6:44:bb:7d:c4:3a:26:e0:97:46:c2:71:4e:68:b3:fb: 84:92:33:58:b6:75:d9:8d:6b:55:cc:ef:49:fe:f8:92:e6:c4: 46:1c:a1:25:26:0f:c2:ea:00:59:40:23:9f:7f:33:d4:76:3a: 97:67:38:0c:b0:6c:cd:f0:ff:97:8e:f6:01:66:48:40:02:1b: 43:cb:d8:09:8b:60:92:e1:4d:2f:36:14:c7:be:35:3f:c7:dc: 7d:54:66:10:64:0a:50:71:fa:dc:72:d8:33:39:67:78:6c:06: 48:b1:e7:61:98:63:5f:42:6e:0c:ca:ed:03:c0:6a:39:46:9a: eb:22:5d:86 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsNt1NTufbIayqRUI8tBLbRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzYmUwOGRhMWFiMzFlM2Y5OGY1NTRmYTAxMzczZjk0Y2M5 MDExZWQwHhcNMjUxMjExMTQwMTE2WhcNMjUxMjEyMTQwMTE2WjAzMTEwLwYDVQQD Eyg4MmY0Mjk4Y2JjMjVhMjIyYTg2ZTIzZjI3MWUwNThlNjJjZmQwMTYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuc/raYtizo3mnnaramj+GRIyupcI YZhFxIg6aLTq+iJ3wCNjT7MEKP+82YDR9xbT7NZ4hBXImC0TCOTX8Amh8VhtcRLj y0B9eqBpeFPsTYy2+rUykIiafkwe4/MHNR0SupEjDPKsonSnM5ZzEWN8zWE1JHz8 LK+ivIX1Dn5CDeYrDBkgVeygyvqqqySLKDQjDAtraIvcJpnmE+PNmvcvFj7ZM2cv US7vl285yWdXgDb2JLL0OoUfL7I6NS8W4aROSmHXAKUOi3vjniC1J3uKC4qaeEd8 5Xe6mO15q9zcteu2NsaKnVFjpsNohuNkXjqh2aK9LH8AaD3yu1RRLvv5BwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIL0KYy8JaIiqG4j8nHgWOYs/QFiMB8GA1UdIwQY MBaAFGO+CNoasx4/mPVU+gE3P5TMkBHtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWTc0STJocXpIai1ZOVZUNkFUY19sTXlRRWUwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC85OWNiY2YtN2Q0Zi00YjEyLWE1Nzct Y2M4MDU0YTUxZDY2LzEvWTc0STJocXpIai1ZOVZUNkFUY19sTXlRRWUwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC85OWNiY2YtN2Q0Zi00YjEyLWE1NzctY2M4MDU0YTUxZDY2 LzEvWTc0STJocXpIai1ZOVZUNkFUY19sTXlRRWUwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlxzpe5mn J74nj93On5FPhdgo2+/qeOEcap+fI2pFndAgzGG2SgxHAHramiT64oNP6KGM0G7U db8wXto6JOUUwgod72/NEdpnhEMB11tDKPR2hPlnnS1HTEVs//iYvT10tkq6w7Fp 4ANCzbuDMa2pQhHBKDA7sLkzQicdztQ55xLWRLt9xDom4JdGwnFOaLP7hJIzWLZ1 2Y1rVczvSf74kubERhyhJSYPwuoAWUAjn38z1HY6l2c4DLBszfD/l472AWZIQAIb Q8vYCYtgkuFNLzYUx741P8fcfVRmEGQKUHH63HLYMzlneGwGSLHnYZhjX0JuDMrt A8BqOUaa6yJdhg== -----END CERTIFICATE-----Generated at Fri Dec 12 00:16:07 2025 by rpki-client