This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/860a5e-e0d0-44f5-9c54-3cc4ff9aa1bc/1/Y4xQnLd7AUm29m9QGfhYs6z5Quk.mft File: Y4xQnLd7AUm29m9QGfhYs6z5Quk.mft (raw, json) Hash identifier: 6TNArgfN7oX+mf3KkdEMlxcoW/Z2SJYLtkuv5kfd3DA= Subject key identifier: B9:19:1E:FB:64:45:50:3E:0C:60:86:4D:BD:51:7E:2E:F2:B7:B3:45 Authority key identifier: 63:8C:50:9C:B7:7B:01:49:B6:F6:6F:50:19:F8:58:B3:AC:F9:42:E9 Certificate issuer: /CN=638c509cb77b0149b6f66f5019f858b3acf942e9 Certificate serial: 019B0E253F26B7A4AEB7E9B8D27F9343E14F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y4xQnLd7AUm29m9QGfhYs6z5Quk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/860a5e-e0d0-44f5-9c54-3cc4ff9aa1bc/1/Y4xQnLd7AUm29m9QGfhYs6z5Quk.mft Manifest number: 1778 Signing time: Thu 11 Dec 2025 16:01:20 +0000 Manifest this update: Thu 11 Dec 2025 16:01:20 +0000 Manifest next update: Fri 12 Dec 2025 16:01:20 +0000 Files and hashes: 1: XVpCVjKP_Ci3PBb-SDD9rEF23jc.roa (hash: fb/E1ZjjaeELkfBCLdUXpvrP74l6BqHMfdZ9UTlkuWc=) 2: Y4xQnLd7AUm29m9QGfhYs6z5Quk.crl (hash: YA2+rVFcnkaH8din7lLbzluHKcKCEWz9pk8OaDKZqFw=) 3: Ygr-d1fsjv6D-0-qsUYAE5I_CT4.roa (hash: jcx2vm/E34fLSi/zBhEY8LVOd5D4GVaLPMNLqe0cuM4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/860a5e-e0d0-44f5-9c54-3cc4ff9aa1bc/1/Y4xQnLd7AUm29m9QGfhYs6z5Quk.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/860a5e-e0d0-44f5-9c54-3cc4ff9aa1bc/1/Y4xQnLd7AUm29m9QGfhYs6z5Quk.mft rsync://rpki.ripe.net/repository/DEFAULT/Y4xQnLd7AUm29m9QGfhYs6z5Quk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 16:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:25:3f:26:b7:a4:ae:b7:e9:b8:d2:7f:93:43:e1:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=638c509cb77b0149b6f66f5019f858b3acf942e9 Validity Not Before: Dec 11 16:01:20 2025 GMT Not After : Dec 12 16:01:20 2025 GMT Subject: CN=b9191efb6445503e0c60864dbd517e2ef2b7b345 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:30:8a:19:c2:79:03:70:60:b7:f6:24:f9:d5: db:c4:58:95:31:a6:3a:58:e5:4f:72:fc:61:89:cc: c6:36:b2:98:d9:25:f7:1e:49:21:e2:aa:c1:7f:94: 65:24:e0:d6:b2:9a:26:9b:45:d7:f6:8f:d9:c5:ed: b3:b8:7f:ee:51:5e:e8:48:e1:b0:d4:eb:14:5c:2c: cd:3e:e8:47:de:c1:8d:a1:cc:a6:a4:9c:ae:f8:2b: ac:f7:38:d4:0e:19:b9:bb:96:fc:ea:40:05:a7:66: 2e:21:74:cd:7e:4e:c3:ce:94:7d:87:3d:70:69:f5: 15:ab:26:6b:93:2e:4c:0c:e7:10:b5:df:e6:e3:3a: 7d:d6:61:23:6c:b7:fd:71:3c:93:18:63:1d:df:82: 6a:44:a2:dc:d9:fc:ab:47:d3:a1:9f:36:9f:74:3d: a2:28:a2:40:e6:a1:d4:c9:db:c6:57:83:f2:12:01: d5:9a:cc:56:8a:00:8b:e9:95:6c:b6:b5:d2:8e:20: 77:32:3a:cf:e5:2b:36:c1:a5:99:d3:85:79:db:b8: 4e:14:51:72:46:24:3b:6b:90:92:c5:80:9d:ba:82: 8c:83:68:4f:f5:53:32:85:19:85:96:48:9f:d0:79: 42:87:e9:3b:25:c8:28:30:0e:a9:a3:37:d2:c5:e3: b8:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:19:1E:FB:64:45:50:3E:0C:60:86:4D:BD:51:7E:2E:F2:B7:B3:45 X509v3 Authority Key Identifier: keyid:63:8C:50:9C:B7:7B:01:49:B6:F6:6F:50:19:F8:58:B3:AC:F9:42:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y4xQnLd7AUm29m9QGfhYs6z5Quk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/860a5e-e0d0-44f5-9c54-3cc4ff9aa1bc/1/Y4xQnLd7AUm29m9QGfhYs6z5Quk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/860a5e-e0d0-44f5-9c54-3cc4ff9aa1bc/1/Y4xQnLd7AUm29m9QGfhYs6z5Quk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:ff:f9:03:17:5f:fe:9b:a2:3e:8f:d3:45:eb:28:9b:a8:98: 96:be:9f:fd:26:ce:3e:80:25:95:d7:47:26:5c:91:0c:f1:63: 85:22:a9:cc:4e:32:c7:d9:e6:f6:28:74:67:8b:21:04:10:d4: d5:09:91:c0:fa:75:e5:a7:f0:7d:cc:2e:9c:c5:23:b0:c7:ec: 3c:fc:f5:88:c6:cf:4a:74:91:c3:b2:d4:d4:49:5a:cb:26:de: 9e:1f:f5:3a:e1:08:13:dd:c4:d1:d3:e7:c7:3e:2c:aa:f6:6f: 0c:48:1a:6a:22:9e:65:11:65:0d:f1:df:49:c6:74:99:12:f0: a2:19:ec:b2:69:bb:1c:6e:06:d8:95:7f:9e:5e:85:23:ef:48: 5b:56:ac:7b:71:71:a6:4f:55:d2:d3:ca:a5:67:19:d5:b3:c8: 5f:18:2f:8a:8a:42:71:78:e7:7d:78:f2:c6:85:b3:c5:a6:35: 52:c3:2e:84:ba:ac:c2:13:84:bd:ad:4a:1f:25:1a:84:f3:73: b1:98:ff:b7:90:4d:10:b3:b9:6e:fd:83:b8:4b:57:49:df:08: 74:1f:8d:23:10:8c:44:e9:87:31:6d:bf:19:45:b2:71:f3:fe: 40:e4:8c:48:78:de:6d:1b:3a:05:6b:58:b2:74:24:f5:c8:75: 11:1d:63:9e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOJT8mt6Sut+m40n+TQ+FPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzOGM1MDljYjc3YjAxNDliNmY2NmY1MDE5Zjg1OGIzYWNm OTQyZTkwHhcNMjUxMjExMTYwMTIwWhcNMjUxMjEyMTYwMTIwWjAzMTEwLwYDVQQD EyhiOTE5MWVmYjY0NDU1MDNlMGM2MDg2NGRiZDUxN2UyZWYyYjdiMzQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAljCKGcJ5A3Bgt/Yk+dXbxFiVMaY6 WOVPcvxhiczGNrKY2SX3Hkkh4qrBf5RlJODWspomm0XX9o/Zxe2zuH/uUV7oSOGw 1OsUXCzNPuhH3sGNocympJyu+Cus9zjUDhm5u5b86kAFp2YuIXTNfk7DzpR9hz1w afUVqyZrky5MDOcQtd/m4zp91mEjbLf9cTyTGGMd34JqRKLc2fyrR9OhnzafdD2i KKJA5qHUydvGV4PyEgHVmsxWigCL6ZVstrXSjiB3MjrP5Ss2waWZ04V527hOFFFy RiQ7a5CSxYCduoKMg2hP9VMyhRmFlkif0HlCh+k7JcgoMA6pozfSxeO4LwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLkZHvtkRVA+DGCGTb1Rfi7yt7NFMB8GA1UdIwQY MBaAFGOMUJy3ewFJtvZvUBn4WLOs+ULpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWTR4UW5MZDdBVW0yOW05UUdmaFlzNno1UXVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC84NjBhNWUtZTBkMC00NGY1LTljNTQt M2NjNGZmOWFhMWJjLzEvWTR4UW5MZDdBVW0yOW05UUdmaFlzNno1UXVrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC84NjBhNWUtZTBkMC00NGY1LTljNTQtM2NjNGZmOWFhMWJj LzEvWTR4UW5MZDdBVW0yOW05UUdmaFlzNno1UXVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb//5Axdf /puiPo/TResom6iYlr6f/SbOPoAllddHJlyRDPFjhSKpzE4yx9nm9ih0Z4shBBDU 1QmRwPp15afwfcwunMUjsMfsPPz1iMbPSnSRw7LU1Elayybenh/1OuEIE93E0dPn xz4sqvZvDEgaaiKeZRFlDfHfScZ0mRLwohnssmm7HG4G2JV/nl6FI+9IW1ase3Fx pk9V0tPKpWcZ1bPIXxgviopCcXjnfXjyxoWzxaY1UsMuhLqswhOEva1KHyUahPNz sZj/t5BNELO5bv2DuEtXSd8IdB+NIxCMROmHMW2/GUWycfP+QOSMSHjebRs6BWtY snQk9ch1ER1jng== -----END CERTIFICATE-----Generated at Fri Dec 12 01:56:02 2025 by rpki-client