This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/35656a-066e-49df-b709-7bfcd7e94b9e/1/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.mft File: Y8NEVcDU5Pw7ovHEbwi0dcj22YA.mft (raw, json) Hash identifier: FWwPlhzHx1pkdPC0kyoH58++YCS+al8jPGbmMCfqNIU= Subject key identifier: 54:2F:0F:F6:4E:3F:C5:39:C3:22:DF:B0:D5:E5:E3:B9:88:27:D6:C8 Authority key identifier: 63:C3:44:55:C0:D4:E4:FC:3B:A2:F1:C4:6F:08:B4:75:C8:F6:D9:80 Certificate issuer: /CN=63c34455c0d4e4fc3ba2f1c46f08b475c8f6d980 Certificate serial: 019B0E5B6CED0BA86691FFA07F776D57A60F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/35656a-066e-49df-b709-7bfcd7e94b9e/1/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.mft Manifest number: 0DF4 Signing time: Thu 11 Dec 2025 17:00:31 +0000 Manifest this update: Thu 11 Dec 2025 17:00:31 +0000 Manifest next update: Fri 12 Dec 2025 17:00:31 +0000 Files and hashes: 1: 1c8AtbAMfHlASe1nRmNmVLi-IPE.roa (hash: Yc6B/ACFRjBHZdeDucnbU591dd3oO9WG4VeSfIdJAWg=) 2: B-YGSnw6mlzmsy9e1WdnYiYl8uA.roa (hash: dqAKP/dgHYPVRyqQIAqMlRLtWiN+IpM+mjudxWdaulM=) 3: Y8NEVcDU5Pw7ovHEbwi0dcj22YA.crl (hash: 23bknPc2T70xtsEj1wA4zT/4i/ak3wKgwvlb5/ZVedA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/35656a-066e-49df-b709-7bfcd7e94b9e/1/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/35656a-066e-49df-b709-7bfcd7e94b9e/1/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.mft rsync://rpki.ripe.net/repository/DEFAULT/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 17:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:5b:6c:ed:0b:a8:66:91:ff:a0:7f:77:6d:57:a6:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63c34455c0d4e4fc3ba2f1c46f08b475c8f6d980 Validity Not Before: Dec 11 17:00:31 2025 GMT Not After : Dec 12 17:00:31 2025 GMT Subject: CN=542f0ff64e3fc539c322dfb0d5e5e3b98827d6c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:a5:ee:19:16:0a:c1:16:02:80:60:5e:2e:81: 3a:91:0d:c4:9c:e7:27:0b:f4:51:44:2b:52:45:2c: 18:c8:53:d9:a6:d4:b9:c4:ae:12:9c:5e:a4:c8:40: 90:b2:62:89:74:e4:9e:d6:79:59:7d:65:e1:72:5b: 67:f0:9a:8b:8d:11:26:94:a9:71:31:df:56:21:cc: 8b:2c:82:e9:cc:7a:10:be:2b:87:25:7f:63:0a:d3: bd:37:ae:57:83:1e:af:7f:15:6f:b2:0f:16:91:e9: 02:ed:29:be:18:7d:4b:0b:7d:e3:33:f1:28:72:d8: 28:ba:5a:93:56:b7:22:41:04:9e:d9:72:00:f3:d2: 92:a4:1e:a3:a3:42:04:ad:9b:57:01:2f:ef:b7:52: 71:47:67:a7:49:9c:7f:c3:b9:50:60:36:c0:62:9e: a6:23:27:e6:57:d0:c6:3a:ad:d6:79:98:f0:20:5a: ea:72:aa:8a:1e:9d:ee:8d:fb:13:c3:3a:c7:33:0d: ee:76:02:32:02:86:9b:ce:c0:da:2d:a0:07:3d:2b: b5:9b:3e:8c:46:3a:e2:6a:aa:94:73:ec:cd:c9:4e: a4:22:df:36:55:23:66:7d:d9:0a:78:b7:5f:d4:42: 85:3c:ab:3a:e7:06:22:f4:a8:e6:76:d4:9e:62:5f: 8e:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:2F:0F:F6:4E:3F:C5:39:C3:22:DF:B0:D5:E5:E3:B9:88:27:D6:C8 X509v3 Authority Key Identifier: keyid:63:C3:44:55:C0:D4:E4:FC:3B:A2:F1:C4:6F:08:B4:75:C8:F6:D9:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/35656a-066e-49df-b709-7bfcd7e94b9e/1/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/35656a-066e-49df-b709-7bfcd7e94b9e/1/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:8f:db:30:e2:d3:31:5f:dc:e6:f2:aa:a3:07:e3:9a:03:25: 02:02:dd:5d:e1:e6:52:e1:f6:25:74:2e:c3:87:e2:aa:2d:c4: f7:d1:12:6c:77:8e:cb:71:2f:ae:7b:ec:0b:b9:c4:e8:ef:bb: 10:56:e6:22:61:03:79:07:14:8d:95:f2:e7:0e:4c:12:2f:5f: 3f:05:26:06:19:8d:bf:c3:31:77:ce:c5:50:71:9d:bc:a6:27: 91:54:07:a7:f7:bf:24:8a:6e:af:48:68:e8:5a:02:02:73:50: 43:5f:de:d6:68:1c:a0:02:d2:17:93:e0:d4:55:a4:4a:ad:43: 89:91:6d:39:98:c6:ae:e2:b3:b8:8a:89:b7:dc:09:7e:75:41: 70:19:bc:ac:49:44:ee:c9:11:92:24:6d:bd:5b:db:03:b9:d1: 7a:b5:15:76:b2:bf:58:c8:61:7f:9b:d2:18:7f:64:3e:a5:1c: 3f:76:d2:0d:57:3c:65:bf:b7:15:d7:fa:9d:8c:fa:17:66:5e: 20:42:b9:b0:d5:82:d5:43:e4:3b:4c:10:7d:12:db:05:b3:cd: c6:af:c2:6c:dc:1c:9b:ed:e4:d4:79:a4:da:91:f4:4b:56:ab: 8f:17:0c:9f:a1:b5:b8:5a:e6:1d:02:cb:d4:4e:59:14:bb:5d: 59:a0:a3:0c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOW2ztC6hmkf+gf3dtV6YPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzYzM0NDU1YzBkNGU0ZmMzYmEyZjFjNDZmMDhiNDc1Yzhm NmQ5ODAwHhcNMjUxMjExMTcwMDMxWhcNMjUxMjEyMTcwMDMxWjAzMTEwLwYDVQQD Eyg1NDJmMGZmNjRlM2ZjNTM5YzMyMmRmYjBkNWU1ZTNiOTg4MjdkNmM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlqXuGRYKwRYCgGBeLoE6kQ3EnOcn C/RRRCtSRSwYyFPZptS5xK4SnF6kyECQsmKJdOSe1nlZfWXhcltn8JqLjREmlKlx Md9WIcyLLILpzHoQviuHJX9jCtO9N65Xgx6vfxVvsg8WkekC7Sm+GH1LC33jM/Eo ctgoulqTVrciQQSe2XIA89KSpB6jo0IErZtXAS/vt1JxR2enSZx/w7lQYDbAYp6m IyfmV9DGOq3WeZjwIFrqcqqKHp3ujfsTwzrHMw3udgIyAoabzsDaLaAHPSu1mz6M RjriaqqUc+zNyU6kIt82VSNmfdkKeLdf1EKFPKs65wYi9KjmdtSeYl+OjQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFQvD/ZOP8U5wyLfsNXl47mIJ9bIMB8GA1UdIwQY MBaAFGPDRFXA1OT8O6LxxG8ItHXI9tmAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWThORVZjRFU1UHc3b3ZIRWJ3aTBkY2oyMllBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi8zNTY1NmEtMDY2ZS00OWRmLWI3MDkt N2JmY2Q3ZTk0YjllLzEvWThORVZjRFU1UHc3b3ZIRWJ3aTBkY2oyMllBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi8zNTY1NmEtMDY2ZS00OWRmLWI3MDktN2JmY2Q3ZTk0Yjll LzEvWThORVZjRFU1UHc3b3ZIRWJ3aTBkY2oyMllBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl4/bMOLT MV/c5vKqowfjmgMlAgLdXeHmUuH2JXQuw4fiqi3E99ESbHeOy3EvrnvsC7nE6O+7 EFbmImEDeQcUjZXy5w5MEi9fPwUmBhmNv8Mxd87FUHGdvKYnkVQHp/e/JIpur0ho 6FoCAnNQQ1/e1mgcoALSF5Pg1FWkSq1DiZFtOZjGruKzuIqJt9wJfnVBcBm8rElE 7skRkiRtvVvbA7nRerUVdrK/WMhhf5vSGH9kPqUcP3bSDVc8Zb+3Fdf6nYz6F2Ze IEK5sNWC1UPkO0wQfRLbBbPNxq/CbNwcm+3k1Hmk2pH0S1arjxcMn6G1uFrmHQLL 1E5ZFLtdWaCjDA== -----END CERTIFICATE-----Generated at Fri Dec 12 02:48:52 2025 by rpki-client