This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/61083c-4b3d-46d8-82aa-b2997bc61474/1/Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.mft File: Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.mft (raw, json) Hash identifier: GQHUVhg4xV0TJVtNeAuEIhXaKty68Zz5IpZ01p1bQP4= Subject key identifier: A5:AC:AD:15:BE:80:09:C6:AD:F7:57:6C:0B:01:D5:62:BD:C2:2E:43 Authority key identifier: 63:42:7C:53:58:73:E4:C4:EA:D8:04:2D:67:BB:F3:F1:F4:7B:26:B1 Certificate issuer: /CN=63427c535873e4c4ead8042d67bbf3f1f47b26b1 Certificate serial: 019B0FA56EF84FA0BCFCC3FB8818C1AC8A64 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/61083c-4b3d-46d8-82aa-b2997bc61474/1/Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.mft Manifest number: 1773 Signing time: Thu 11 Dec 2025 23:00:58 +0000 Manifest this update: Thu 11 Dec 2025 23:00:58 +0000 Manifest next update: Fri 12 Dec 2025 23:00:58 +0000 Files and hashes: 1: 0BwZhdU4Lc_MGtRgtacxMwCAmgo.roa (hash: YpXynUUs/IPOe7m4GtxSxjQNSHfpLk0MgTtZ8VR9x/E=) 2: Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.crl (hash: SXHj8gGgB4akCMSnFY3T2DG0Nl2olTJrDc2gk5wYIVM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/61083c-4b3d-46d8-82aa-b2997bc61474/1/Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/61083c-4b3d-46d8-82aa-b2997bc61474/1/Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.mft rsync://rpki.ripe.net/repository/DEFAULT/Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:a5:6e:f8:4f:a0:bc:fc:c3:fb:88:18:c1:ac:8a:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63427c535873e4c4ead8042d67bbf3f1f47b26b1 Validity Not Before: Dec 11 23:00:58 2025 GMT Not After : Dec 12 23:00:58 2025 GMT Subject: CN=a5acad15be8009c6adf7576c0b01d562bdc22e43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:e4:a6:2b:c5:04:56:5e:95:10:d8:a3:24:9c: e4:06:60:ea:8d:4b:00:18:93:d4:e1:7b:d1:dd:b8: 61:80:e7:08:42:32:1d:1b:fd:df:fe:69:27:5f:04: b7:18:42:76:59:b8:18:79:43:25:46:33:e4:47:d3: 18:26:db:e0:b0:fa:d1:13:d9:c0:8e:f2:01:f1:96: e3:02:b6:40:f0:c4:3c:91:ca:23:e1:bb:c1:93:5f: 23:c1:ed:8b:87:68:4d:5e:cd:0c:23:20:79:8d:1b: b1:9f:54:16:2a:a6:17:33:28:03:24:2d:48:83:e5: 6f:77:93:3c:ed:4b:07:3f:6c:17:14:4b:2b:45:a7: 43:54:ea:e5:ca:27:65:8f:3e:67:3e:7f:49:df:e4: 2b:de:b0:c0:4c:17:4c:4f:ec:b9:e8:86:dd:75:05: 47:c3:aa:db:92:e9:f7:07:fd:d2:64:b3:61:18:92: d4:77:ec:7d:27:2b:15:37:40:30:bc:ee:4e:c4:6a: da:98:4f:24:a2:9d:89:6b:da:47:89:99:78:f8:b9: 87:cc:61:d6:05:b3:72:69:ed:81:dc:60:1d:5c:d7: 68:f4:8c:6b:5f:41:5b:2d:b1:ef:b8:5e:9e:78:18: 1f:3d:09:6c:60:62:51:3d:ae:50:d3:41:6a:16:16: ac:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:AC:AD:15:BE:80:09:C6:AD:F7:57:6C:0B:01:D5:62:BD:C2:2E:43 X509v3 Authority Key Identifier: keyid:63:42:7C:53:58:73:E4:C4:EA:D8:04:2D:67:BB:F3:F1:F4:7B:26:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/61083c-4b3d-46d8-82aa-b2997bc61474/1/Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/61083c-4b3d-46d8-82aa-b2997bc61474/1/Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:0a:1f:e7:5b:e1:6e:39:37:54:e8:0c:0c:9d:87:61:d7:77: 09:b6:4b:1d:d7:52:3b:40:21:f1:d6:78:e2:04:73:9c:6b:4a: a0:7a:0b:6a:0a:d1:9a:f5:c9:ce:e9:44:61:72:45:af:e7:89: d5:41:6c:cb:cd:e3:6f:7f:df:d1:94:fb:df:85:7c:2b:bf:d5: 6b:b5:51:0d:72:cf:1c:fd:f8:f1:d6:4c:f1:37:bc:47:e9:e6: 03:ef:73:56:46:63:6e:dd:e7:d7:ec:fb:ef:35:61:62:97:4c: 7c:c8:6f:0e:12:f0:81:87:a9:29:fe:86:3c:7f:c9:7d:39:5b: 8d:14:20:a5:eb:a1:99:99:a3:e1:53:eb:f5:fc:fc:5d:45:54: 28:af:c7:35:3b:62:8b:de:ae:d2:50:fc:0a:93:61:10:c5:a4: 14:83:78:2d:96:71:11:3d:a6:1f:41:94:ec:be:8c:72:17:f6: 45:da:1b:0f:8b:9e:43:c7:f7:c6:14:8b:38:b9:5a:0c:10:64: ee:53:dc:14:70:9b:c7:e5:73:db:4c:71:6f:76:dd:4d:32:21: 91:0a:14:02:a3:cb:9d:8b:4b:11:58:71:c8:62:a3:0c:90:ea: a7:30:0d:50:e3:7b:9c:12:0c:74:a5:52:ff:b7:bc:e7:af:7f: 28:11:c1:c7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPpW74T6C8/MP7iBjBrIpkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzNDI3YzUzNTg3M2U0YzRlYWQ4MDQyZDY3YmJmM2YxZjQ3 YjI2YjEwHhcNMjUxMjExMjMwMDU4WhcNMjUxMjEyMjMwMDU4WjAzMTEwLwYDVQQD EyhhNWFjYWQxNWJlODAwOWM2YWRmNzU3NmMwYjAxZDU2MmJkYzIyZTQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyOSmK8UEVl6VENijJJzkBmDqjUsA GJPU4XvR3bhhgOcIQjIdG/3f/mknXwS3GEJ2WbgYeUMlRjPkR9MYJtvgsPrRE9nA jvIB8ZbjArZA8MQ8kcoj4bvBk18jwe2Lh2hNXs0MIyB5jRuxn1QWKqYXMygDJC1I g+Vvd5M87UsHP2wXFEsrRadDVOrlyidljz5nPn9J3+Qr3rDATBdMT+y56IbddQVH w6rbkun3B/3SZLNhGJLUd+x9JysVN0AwvO5OxGramE8kop2Ja9pHiZl4+LmHzGHW BbNyae2B3GAdXNdo9IxrX0FbLbHvuF6eeBgfPQlsYGJRPa5Q00FqFhas1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKWsrRW+gAnGrfdXbAsB1WK9wi5DMB8GA1UdIwQY MBaAFGNCfFNYc+TE6tgELWe78/H0eyaxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWTBKOFUxaHo1TVRxMkFRdFo3dno4ZlI3SnJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC82MTA4M2MtNGIzZC00NmQ4LTgyYWEt YjI5OTdiYzYxNDc0LzEvWTBKOFUxaHo1TVRxMkFRdFo3dno4ZlI3SnJFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC82MTA4M2MtNGIzZC00NmQ4LTgyYWEtYjI5OTdiYzYxNDc0 LzEvWTBKOFUxaHo1TVRxMkFRdFo3dno4ZlI3SnJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlwof51vh bjk3VOgMDJ2HYdd3CbZLHddSO0Ah8dZ44gRznGtKoHoLagrRmvXJzulEYXJFr+eJ 1UFsy83jb3/f0ZT734V8K7/Va7VRDXLPHP348dZM8Te8R+nmA+9zVkZjbt3n1+z7 7zVhYpdMfMhvDhLwgYepKf6GPH/JfTlbjRQgpeuhmZmj4VPr9fz8XUVUKK/HNTti i96u0lD8CpNhEMWkFIN4LZZxET2mH0GU7L6Mchf2RdobD4ueQ8f3xhSLOLlaDBBk 7lPcFHCbx+Vz20xxb3bdTTIhkQoUAqPLnYtLEVhxyGKjDJDqpzANUON7nBIMdKVS /7e8569/KBHBxw== -----END CERTIFICATE-----Generated at Fri Dec 12 05:18:12 2025 by rpki-client