This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/1fde18-2873-4fe0-869c-3820f7ee2cb8/1/Y0laTOy-r7Pq327QNJuwuW2kZO4.mft File: Y0laTOy-r7Pq327QNJuwuW2kZO4.mft (raw, json) Hash identifier: GnwRZwwlgCpMAacE2/ND0yTJVgA1LeNX/WP2XPmtdPU= Subject key identifier: 63:D1:52:5B:AD:1E:AC:C8:9A:7C:22:E0:3A:B3:54:44:5D:68:F1:21 Authority key identifier: 63:49:5A:4C:EC:BE:AF:B3:EA:DF:6E:D0:34:9B:B0:B9:6D:A4:64:EE Certificate issuer: /CN=63495a4cecbeafb3eadf6ed0349bb0b96da464ee Certificate serial: 019B1201F98E3DC2C5AA5F7D7F6E8EB6FF01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y0laTOy-r7Pq327QNJuwuW2kZO4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/1fde18-2873-4fe0-869c-3820f7ee2cb8/1/Y0laTOy-r7Pq327QNJuwuW2kZO4.mft Manifest number: 0E04 Signing time: Fri 12 Dec 2025 10:01:17 +0000 Manifest this update: Fri 12 Dec 2025 10:01:17 +0000 Manifest next update: Sat 13 Dec 2025 10:01:17 +0000 Files and hashes: 1: GHhiTWJIrRnBFMlK6xuYQ1nDUn8.roa (hash: MsTf0syszxTszc8q1axFwJFUrUTMc1YgfxQY+NXxD28=) 2: Y0laTOy-r7Pq327QNJuwuW2kZO4.crl (hash: bT+ugOFX0lekSSPwHsj6WDnK1GMepdA2C1JUe7mGULk=) 3: r8SyFv2fzba2rsaAZpaSWzcngkw.roa (hash: nKMxn+pRmGytAQ++Vu6+D6lCb2MTuAqsH86iDcF9gs0=) 4: yLm-AHf2Wu1baGR2558SeGJ9vpc.roa (hash: /Bd5Eq0QqwLJoY4wAtUd+ZWldK7GG5PZ0zCSIxN6jTY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/1fde18-2873-4fe0-869c-3820f7ee2cb8/1/Y0laTOy-r7Pq327QNJuwuW2kZO4.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/1fde18-2873-4fe0-869c-3820f7ee2cb8/1/Y0laTOy-r7Pq327QNJuwuW2kZO4.mft rsync://rpki.ripe.net/repository/DEFAULT/Y0laTOy-r7Pq327QNJuwuW2kZO4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 08:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:12:01:f9:8e:3d:c2:c5:aa:5f:7d:7f:6e:8e:b6:ff:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63495a4cecbeafb3eadf6ed0349bb0b96da464ee Validity Not Before: Dec 12 10:01:17 2025 GMT Not After : Dec 13 10:01:17 2025 GMT Subject: CN=63d1525bad1eacc89a7c22e03ab354445d68f121 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:c2:39:f2:87:6d:ab:d3:08:1a:47:9c:0a:fe: 14:19:44:00:2c:3c:46:84:71:66:d8:1e:01:10:d2: 90:b0:6e:c9:4e:30:a7:bd:c5:10:f7:a3:37:66:b2: a6:f6:b9:d9:fd:92:77:19:f6:4d:12:fd:8c:3e:05: 05:54:1f:fc:ec:51:c4:c1:3f:7f:2d:71:b4:3e:2c: bf:ac:96:3a:da:37:22:b2:fc:ee:be:f8:6f:81:ff: 85:64:09:e6:c4:7b:45:81:5c:7f:59:4f:40:5f:a9: c6:5b:0b:b1:ba:cb:96:e0:33:9a:4b:9e:44:68:5c: 40:a4:e0:8d:98:15:71:19:c1:83:5b:29:16:2c:13: d1:b9:d4:5c:f8:6c:ad:65:2c:19:bc:a4:71:a4:90: 92:0d:3d:4a:55:bc:3c:56:4e:38:79:1f:79:06:fc: b1:b5:fb:9e:fb:58:84:18:b0:4b:89:0b:89:55:12: a9:93:c3:d2:08:1c:f4:73:17:bc:8a:18:1d:0d:0a: b6:15:15:5a:ad:e8:df:8c:ce:d3:42:52:fd:49:0c: 35:2e:e6:2d:8f:c7:1b:cd:1b:a9:ec:da:44:2b:5e: 11:e9:57:c7:02:f7:84:14:93:e5:57:f9:2d:57:a8: b5:87:9e:e0:be:93:6a:02:83:7d:4b:6b:39:ee:17: ee:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:D1:52:5B:AD:1E:AC:C8:9A:7C:22:E0:3A:B3:54:44:5D:68:F1:21 X509v3 Authority Key Identifier: keyid:63:49:5A:4C:EC:BE:AF:B3:EA:DF:6E:D0:34:9B:B0:B9:6D:A4:64:EE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y0laTOy-r7Pq327QNJuwuW2kZO4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/1fde18-2873-4fe0-869c-3820f7ee2cb8/1/Y0laTOy-r7Pq327QNJuwuW2kZO4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/1fde18-2873-4fe0-869c-3820f7ee2cb8/1/Y0laTOy-r7Pq327QNJuwuW2kZO4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bb:98:06:f2:1e:0d:e3:0b:dd:35:e3:6f:3c:72:14:80:02:9d: 45:ce:89:8f:be:11:64:41:8d:a7:67:18:8b:28:d9:29:9b:90: 12:dc:d7:d0:fa:20:5a:51:6a:8d:53:7e:09:46:0f:20:20:52: cf:05:ee:54:c9:f5:3f:fe:21:be:47:0c:e6:12:5c:b7:9d:ce: 36:06:2e:0e:c6:cb:2d:0d:5e:99:cf:97:6d:7e:15:00:cb:4b: fe:62:dd:41:4a:ef:f7:48:b6:e5:35:ac:07:49:b2:48:f1:7f: 58:00:ff:6b:37:34:c1:31:8e:2e:2b:c8:e8:de:4a:f5:b1:be: d0:44:46:eb:45:2a:c1:89:de:8d:ca:cb:fe:4e:60:5c:ce:4c: 5c:b7:01:14:8a:17:0b:4a:cb:46:b1:bc:40:35:0d:58:6a:68: e5:59:a5:1e:8c:2d:96:30:09:d4:75:38:d5:c2:8d:73:19:e0: 9b:01:69:ac:dd:c6:60:3c:fa:88:d8:0d:21:59:01:e6:4a:d3: 5c:bf:2d:05:bd:3f:62:7a:1d:1a:da:25:6c:53:c0:29:2c:27: cf:40:6a:e8:42:bc:38:23:fd:78:a6:b2:e6:6a:59:84:97:3f: e5:0a:52:d6:4c:f9:6c:e4:e9:b5:b6:19:31:4f:b8:db:43:71: 19:d0:7d:99 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsSAfmOPcLFql99f26Otv8BMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzNDk1YTRjZWNiZWFmYjNlYWRmNmVkMDM0OWJiMGI5NmRh NDY0ZWUwHhcNMjUxMjEyMTAwMTE3WhcNMjUxMjEzMTAwMTE3WjAzMTEwLwYDVQQD Eyg2M2QxNTI1YmFkMWVhY2M4OWE3YzIyZTAzYWIzNTQ0NDVkNjhmMTIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjcI58odtq9MIGkecCv4UGUQALDxG hHFm2B4BENKQsG7JTjCnvcUQ96M3ZrKm9rnZ/ZJ3GfZNEv2MPgUFVB/87FHEwT9/ LXG0Piy/rJY62jcisvzuvvhvgf+FZAnmxHtFgVx/WU9AX6nGWwuxusuW4DOaS55E aFxApOCNmBVxGcGDWykWLBPRudRc+GytZSwZvKRxpJCSDT1KVbw8Vk44eR95Bvyx tfue+1iEGLBLiQuJVRKpk8PSCBz0cxe8ihgdDQq2FRVarejfjM7TQlL9SQw1LuYt j8cbzRup7NpEK14R6VfHAveEFJPlV/ktV6i1h57gvpNqAoN9S2s57hfuzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGPRUlutHqzImnwi4DqzVERdaPEhMB8GA1UdIwQY MBaAFGNJWkzsvq+z6t9u0DSbsLltpGTuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWTBsYVRPeS1yN1BxMzI3UU5KdXd1VzJrWk80LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC8xZmRlMTgtMjg3My00ZmUwLTg2OWMt MzgyMGY3ZWUyY2I4LzEvWTBsYVRPeS1yN1BxMzI3UU5KdXd1VzJrWk80Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC8xZmRlMTgtMjg3My00ZmUwLTg2OWMtMzgyMGY3ZWUyY2I4 LzEvWTBsYVRPeS1yN1BxMzI3UU5KdXd1VzJrWk80LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAu5gG8h4N 4wvdNeNvPHIUgAKdRc6Jj74RZEGNp2cYiyjZKZuQEtzX0PogWlFqjVN+CUYPICBS zwXuVMn1P/4hvkcM5hJct53ONgYuDsbLLQ1emc+XbX4VAMtL/mLdQUrv90i25TWs B0mySPF/WAD/azc0wTGOLivI6N5K9bG+0ERG60UqwYnejcrL/k5gXM5MXLcBFIoX C0rLRrG8QDUNWGpo5VmlHowtljAJ1HU41cKNcxngmwFprN3GYDz6iNgNIVkB5krT XL8tBb0/YnodGtolbFPAKSwnz0Bq6EK8OCP9eKay5mpZhJc/5QpS1kz5bOTptbYZ MU+420NxGdB9mQ== -----END CERTIFICATE-----Generated at Fri Dec 12 14:19:52 2025 by rpki-client