This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/61083c-4b3d-46d8-82aa-b2997bc61474/1/Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.mft File: Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.mft (raw, json) Hash identifier: 8psQgFDjuSCta0GDnktaTEBNJOZHOe6gbgfXpgCjmJU= Subject key identifier: 4A:8A:00:DE:7B:04:32:92:54:9C:1E:44:5C:DF:CE:C0:E3:02:E7:BC Authority key identifier: 63:42:7C:53:58:73:E4:C4:EA:D8:04:2D:67:BB:F3:F1:F4:7B:26:B1 Certificate issuer: /CN=63427c535873e4c4ead8042d67bbf3f1f47b26b1 Certificate serial: 019B47A682A0415E9BD57332EFE8B6FA6E42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/61083c-4b3d-46d8-82aa-b2997bc61474/1/Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.mft Manifest number: 1790 Signing time: Mon 22 Dec 2025 20:00:53 +0000 Manifest this update: Mon 22 Dec 2025 20:00:53 +0000 Manifest next update: Tue 23 Dec 2025 20:00:53 +0000 Files and hashes: 1: 0BwZhdU4Lc_MGtRgtacxMwCAmgo.roa (hash: YpXynUUs/IPOe7m4GtxSxjQNSHfpLk0MgTtZ8VR9x/E=) 2: Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.crl (hash: xKOg4iWZx21tHY0i+x0RDR9sp+833WPKTVMakQIiniU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/61083c-4b3d-46d8-82aa-b2997bc61474/1/Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/61083c-4b3d-46d8-82aa-b2997bc61474/1/Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.mft rsync://rpki.ripe.net/repository/DEFAULT/Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 20:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:47:a6:82:a0:41:5e:9b:d5:73:32:ef:e8:b6:fa:6e:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63427c535873e4c4ead8042d67bbf3f1f47b26b1 Validity Not Before: Dec 22 20:00:53 2025 GMT Not After : Dec 23 20:00:53 2025 GMT Subject: CN=4a8a00de7b043292549c1e445cdfcec0e302e7bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:b0:3b:2b:7c:ae:04:2c:2a:15:03:3a:c9:68: 9c:cd:07:b3:ac:c7:5e:94:c4:38:90:cc:93:1e:b8: db:51:8e:14:d6:c2:76:33:a6:94:25:50:7d:e0:79: b3:9a:ca:78:f4:4e:da:2e:95:62:11:73:3b:2c:7d: fa:36:eb:23:78:be:6f:0b:5f:cb:ee:01:fe:cc:02: 33:95:a6:16:4b:31:f4:df:b3:07:bb:9f:ce:f4:6b: f0:d2:b4:21:39:3a:ab:e0:37:79:b5:c1:75:2a:73: 2b:46:80:9d:cf:46:5a:33:18:ba:39:00:08:ac:53: c5:4e:03:3b:db:6e:dc:8d:49:72:ce:81:c3:b9:55: 4b:cf:61:cd:49:1e:f5:76:c3:c3:cf:90:d0:14:27: 41:1b:4c:54:61:f1:3d:12:36:31:69:b3:45:e4:6a: cf:cc:85:1e:9f:99:23:f3:24:af:9f:32:9d:73:21: ee:85:20:82:ee:4b:41:e1:00:c5:81:e0:d0:d7:61: 08:fe:6c:0a:a0:d3:73:99:b3:c4:37:b3:66:39:09: 14:11:5d:fb:ad:a7:e1:b2:54:98:f8:a6:e3:75:98: fb:bb:22:af:22:52:d5:1f:7f:9a:e2:de:ef:ef:be: e7:8c:50:1d:fc:3d:7d:d3:ad:f1:59:28:ea:4a:67: 98:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:8A:00:DE:7B:04:32:92:54:9C:1E:44:5C:DF:CE:C0:E3:02:E7:BC X509v3 Authority Key Identifier: keyid:63:42:7C:53:58:73:E4:C4:EA:D8:04:2D:67:BB:F3:F1:F4:7B:26:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/61083c-4b3d-46d8-82aa-b2997bc61474/1/Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/61083c-4b3d-46d8-82aa-b2997bc61474/1/Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:85:54:cc:89:b0:6b:3b:22:19:06:ac:fb:02:45:04:e3:1e: b9:06:3f:6b:7a:e1:3d:68:a2:10:dd:8c:78:1d:e6:20:4d:a9: 7b:50:04:11:2b:ec:90:19:9b:24:f4:fe:c9:78:ec:12:bf:b6: ba:8e:13:f5:02:8a:64:18:c1:50:39:e3:d0:9c:a9:69:44:a9: 48:67:a7:c8:ce:70:73:d2:97:7c:0a:1a:48:60:ad:08:62:6d: 24:50:5d:f6:d4:0d:da:da:8d:e3:e2:47:c8:fe:0e:9f:55:b4: 6d:38:fa:0c:5e:34:a9:6b:a2:5d:9a:ac:c7:15:f9:3e:6f:3d: 32:ad:bc:21:69:84:b2:dc:e7:de:d8:2b:36:39:76:84:d9:d0: e6:1b:e7:65:65:dc:0d:1b:0b:ad:21:ee:c4:87:95:a8:69:c4: 67:0b:e5:26:b8:15:66:a0:21:cb:f9:97:ae:97:35:06:0a:74: 97:c4:91:f5:8c:f3:74:c3:84:a6:27:e7:ce:63:23:89:ab:a8: 83:96:58:df:c4:88:ce:7d:29:21:90:28:14:25:41:68:1e:c2: 90:07:30:ae:a0:79:70:62:6d:5e:5e:95:b9:f4:21:70:8b:dd: ea:c5:b3:ba:39:5c:21:31:36:a1:78:ad:19:25:08:44:51:ef: 02:dd:db:9f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtHpoKgQV6b1XMy7+i2+m5CMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzNDI3YzUzNTg3M2U0YzRlYWQ4MDQyZDY3YmJmM2YxZjQ3 YjI2YjEwHhcNMjUxMjIyMjAwMDUzWhcNMjUxMjIzMjAwMDUzWjAzMTEwLwYDVQQD Eyg0YThhMDBkZTdiMDQzMjkyNTQ5YzFlNDQ1Y2RmY2VjMGUzMDJlN2JjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs7A7K3yuBCwqFQM6yWiczQezrMde lMQ4kMyTHrjbUY4U1sJ2M6aUJVB94Hmzmsp49E7aLpViEXM7LH36NusjeL5vC1/L 7gH+zAIzlaYWSzH037MHu5/O9Gvw0rQhOTqr4Dd5tcF1KnMrRoCdz0ZaMxi6OQAI rFPFTgM7227cjUlyzoHDuVVLz2HNSR71dsPDz5DQFCdBG0xUYfE9EjYxabNF5GrP zIUen5kj8ySvnzKdcyHuhSCC7ktB4QDFgeDQ12EI/mwKoNNzmbPEN7NmOQkUEV37 rafhslSY+KbjdZj7uyKvIlLVH3+a4t7v777njFAd/D19063xWSjqSmeYHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEqKAN57BDKSVJweRFzfzsDjAue8MB8GA1UdIwQY MBaAFGNCfFNYc+TE6tgELWe78/H0eyaxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWTBKOFUxaHo1TVRxMkFRdFo3dno4ZlI3SnJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC82MTA4M2MtNGIzZC00NmQ4LTgyYWEt YjI5OTdiYzYxNDc0LzEvWTBKOFUxaHo1TVRxMkFRdFo3dno4ZlI3SnJFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC82MTA4M2MtNGIzZC00NmQ4LTgyYWEtYjI5OTdiYzYxNDc0 LzEvWTBKOFUxaHo1TVRxMkFRdFo3dno4ZlI3SnJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVYVUzImw azsiGQas+wJFBOMeuQY/a3rhPWiiEN2MeB3mIE2pe1AEESvskBmbJPT+yXjsEr+2 uo4T9QKKZBjBUDnj0JypaUSpSGenyM5wc9KXfAoaSGCtCGJtJFBd9tQN2tqN4+JH yP4On1W0bTj6DF40qWuiXZqsxxX5Pm89Mq28IWmEstzn3tgrNjl2hNnQ5hvnZWXc DRsLrSHuxIeVqGnEZwvlJrgVZqAhy/mXrpc1Bgp0l8SR9YzzdMOEpifnzmMjiauo g5ZY38SIzn0pIZAoFCVBaB7CkAcwrqB5cGJtXl6VufQhcIvd6sWzujlcITE2oXit GSUIRFHvAt3bnw== -----END CERTIFICATE-----Generated at Tue Dec 23 05:49:47 2025 by rpki-client