This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/83607f-14b4-4217-b6cd-b7bae910c7ac/1/Y0FqyaIZN3iMrcd7ep-JttTFWko.mft File: Y0FqyaIZN3iMrcd7ep-JttTFWko.mft (raw, json) Hash identifier: uaimN8RDXVtPMn8rel6y+75D0j1VLWP4m63IMvTuXmY= Subject key identifier: 9A:EC:B8:F2:C5:2D:80:18:44:31:DA:1F:CA:F9:20:2A:CF:EE:75:93 Authority key identifier: 63:41:6A:C9:A2:19:37:78:8C:AD:C7:7B:7A:9F:89:B6:D4:C5:5A:4A Certificate issuer: /CN=63416ac9a21937788cadc77b7a9f89b6d4c55a4a Certificate serial: 019B58D18CE97AA8928AD2D86A57D609ED2F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y0FqyaIZN3iMrcd7ep-JttTFWko.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/83607f-14b4-4217-b6cd-b7bae910c7ac/1/Y0FqyaIZN3iMrcd7ep-JttTFWko.mft Manifest number: 1796 Signing time: Fri 26 Dec 2025 04:01:26 +0000 Manifest this update: Fri 26 Dec 2025 04:01:26 +0000 Manifest next update: Sat 27 Dec 2025 04:01:26 +0000 Files and hashes: 1: 0UbqABxvR9Kqt-i2oDJKBmEOIcY.roa (hash: sOBF/jnuYbPKw9b4UfAAmGDCy2JYvqAzi0krYUHoJ4Y=) 2: Y0FqyaIZN3iMrcd7ep-JttTFWko.crl (hash: 94JE+s/JU2UyZANqr5bv2CPSWvM/twEE8w+Blp0Eg8M=) 3: _wI9dgfN1p8T3ArXyq7NUMinHsQ.roa (hash: zHVbZrPjByz7ecEstvck1XG+KadlzRwYPNhhpEtqQfI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/83607f-14b4-4217-b6cd-b7bae910c7ac/1/Y0FqyaIZN3iMrcd7ep-JttTFWko.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/83607f-14b4-4217-b6cd-b7bae910c7ac/1/Y0FqyaIZN3iMrcd7ep-JttTFWko.mft rsync://rpki.ripe.net/repository/DEFAULT/Y0FqyaIZN3iMrcd7ep-JttTFWko.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 04:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:58:d1:8c:e9:7a:a8:92:8a:d2:d8:6a:57:d6:09:ed:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63416ac9a21937788cadc77b7a9f89b6d4c55a4a Validity Not Before: Dec 26 04:01:26 2025 GMT Not After : Dec 27 04:01:26 2025 GMT Subject: CN=9aecb8f2c52d80184431da1fcaf9202acfee7593 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:f8:ba:0b:c5:13:9d:32:4a:9b:e0:c0:ad:74: 4c:5c:f9:bd:a2:55:e7:99:82:63:07:f4:6d:d2:fd: 44:24:09:7d:60:f4:68:35:72:68:22:88:97:79:a7: 61:c1:14:e1:81:d7:23:9b:d7:2d:6f:6f:34:62:14: 4d:b8:2e:3c:17:47:45:dc:83:9e:22:fe:63:eb:3d: fe:90:2d:48:54:71:43:49:b2:1d:72:49:c2:8b:8a: 7c:26:37:cf:24:fb:ae:99:f8:45:6f:77:7c:73:ae: 5d:ef:3c:f2:63:6e:6d:e4:08:e2:95:8d:bc:7e:e4: 87:d7:80:fd:c7:6a:93:d0:1e:3a:7f:bf:67:20:67: fe:5c:91:70:ce:67:2f:04:6c:de:89:6e:fd:b8:31: 66:85:e2:25:d9:6c:d0:d3:34:fc:b0:e8:0e:27:fd: c7:e2:80:7d:d2:b3:01:f2:a3:e9:4e:1b:9f:42:92: c8:98:58:51:59:37:30:51:4f:31:c6:08:7c:cd:a4: 2d:76:5e:e1:a6:6b:9a:c5:13:11:67:cf:01:5f:6b: 39:40:99:5f:b7:10:a8:ba:37:77:15:ef:d7:92:17: 83:b4:ea:99:56:f1:0b:81:4d:05:69:04:28:d7:3d: 0d:8c:4d:86:0b:5c:aa:07:52:bf:16:c0:40:d1:51: f3:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:EC:B8:F2:C5:2D:80:18:44:31:DA:1F:CA:F9:20:2A:CF:EE:75:93 X509v3 Authority Key Identifier: keyid:63:41:6A:C9:A2:19:37:78:8C:AD:C7:7B:7A:9F:89:B6:D4:C5:5A:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y0FqyaIZN3iMrcd7ep-JttTFWko.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/83607f-14b4-4217-b6cd-b7bae910c7ac/1/Y0FqyaIZN3iMrcd7ep-JttTFWko.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/83607f-14b4-4217-b6cd-b7bae910c7ac/1/Y0FqyaIZN3iMrcd7ep-JttTFWko.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:78:b6:68:d6:5e:6d:a6:67:d5:e5:15:0e:2b:d4:6a:94:e8: 12:ad:b6:f7:d4:a8:ab:39:9d:5c:01:49:57:39:4f:14:b6:53: 4b:df:04:01:2f:df:c8:5d:16:74:5a:39:99:7f:dd:7f:19:00: 65:1c:68:43:72:a7:83:f7:9e:9a:63:db:ef:84:07:24:18:3d: 51:76:c2:6f:02:b3:12:d8:03:ca:30:7a:0c:ac:5d:0d:14:f9: 2f:57:8d:d8:c6:ef:90:66:28:b0:f8:28:d9:54:2b:db:36:f4: 3f:2e:4a:0d:18:ea:c8:e6:b2:28:ca:6f:b2:00:bc:0a:75:a8: 44:ad:2a:03:0d:e0:7b:f5:3f:e7:81:b9:52:11:83:b3:31:b3: 1c:4e:29:61:95:fe:60:84:f8:8a:a4:5a:fa:c7:4a:26:cb:1b: a7:6d:6c:e4:37:24:e4:45:dc:b8:2c:55:a7:4c:43:9e:38:7c: c0:9b:29:61:79:a0:0a:e5:66:cf:27:0e:dd:d9:c2:da:f5:13: 45:0d:be:b8:64:dd:50:a0:97:3f:f0:dc:f5:dc:f7:a3:6a:6b: 19:2c:9c:58:2b:42:6c:5e:41:84:1e:00:7b:9c:07:c2:6f:4b: 95:35:2f:4c:d3:9a:28:78:3b:4c:ba:3f:be:a4:5b:17:37:a2: f1:63:d0:4e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtY0YzpeqiSitLYalfWCe0vMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzNDE2YWM5YTIxOTM3Nzg4Y2FkYzc3YjdhOWY4OWI2ZDRj NTVhNGEwHhcNMjUxMjI2MDQwMTI2WhcNMjUxMjI3MDQwMTI2WjAzMTEwLwYDVQQD Eyg5YWVjYjhmMmM1MmQ4MDE4NDQzMWRhMWZjYWY5MjAyYWNmZWU3NTkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4vi6C8UTnTJKm+DArXRMXPm9olXn mYJjB/Rt0v1EJAl9YPRoNXJoIoiXeadhwRThgdcjm9ctb280YhRNuC48F0dF3IOe Iv5j6z3+kC1IVHFDSbIdcknCi4p8JjfPJPuumfhFb3d8c65d7zzyY25t5AjilY28 fuSH14D9x2qT0B46f79nIGf+XJFwzmcvBGzeiW79uDFmheIl2WzQ0zT8sOgOJ/3H 4oB90rMB8qPpThufQpLImFhRWTcwUU8xxgh8zaQtdl7hpmuaxRMRZ88BX2s5QJlf txCoujd3Fe/XkheDtOqZVvELgU0FaQQo1z0NjE2GC1yqB1K/FsBA0VHziQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJrsuPLFLYAYRDHaH8r5ICrP7nWTMB8GA1UdIwQY MBaAFGNBasmiGTd4jK3He3qfibbUxVpKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWTBGcXlhSVpOM2lNcmNkN2VwLUp0dFRGV2tvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy84MzYwN2YtMTRiNC00MjE3LWI2Y2Qt YjdiYWU5MTBjN2FjLzEvWTBGcXlhSVpOM2lNcmNkN2VwLUp0dFRGV2tvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy84MzYwN2YtMTRiNC00MjE3LWI2Y2QtYjdiYWU5MTBjN2Fj LzEvWTBGcXlhSVpOM2lNcmNkN2VwLUp0dFRGV2tvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiHi2aNZe baZn1eUVDivUapToEq2299SoqzmdXAFJVzlPFLZTS98EAS/fyF0WdFo5mX/dfxkA ZRxoQ3Kng/eemmPb74QHJBg9UXbCbwKzEtgDyjB6DKxdDRT5L1eN2MbvkGYosPgo 2VQr2zb0Py5KDRjqyOayKMpvsgC8CnWoRK0qAw3ge/U/54G5UhGDszGzHE4pYZX+ YIT4iqRa+sdKJssbp21s5Dck5EXcuCxVp0xDnjh8wJspYXmgCuVmzycO3dnC2vUT RQ2+uGTdUKCXP/Dc9dz3o2prGSycWCtCbF5BhB4Ae5wHwm9LlTUvTNOaKHg7TLo/ vqRbFzei8WPQTg== -----END CERTIFICATE-----Generated at Fri Dec 26 14:15:59 2025 by rpki-client