This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/fe7fc2-41cc-467d-980b-f5af616b5483/1/Y11bZE4i-0iOTWwAErCqvyOOYeU.mft File: Y11bZE4i-0iOTWwAErCqvyOOYeU.mft (raw, json) Hash identifier: iAeCCniU8niP6Ay2aCGsBDk1YigLyioFo11KWuSezWA= Subject key identifier: 7A:35:60:2C:79:46:DD:90:65:30:05:62:A8:FA:FC:BA:51:6F:19:EA Authority key identifier: 63:5D:5B:64:4E:22:FB:48:8E:4D:6C:00:12:B0:AA:BF:23:8E:61:E5 Certificate issuer: /CN=635d5b644e22fb488e4d6c0012b0aabf238e61e5 Certificate serial: 019AEB62F129BFD0891CA24F6E04311B74C9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y11bZE4i-0iOTWwAErCqvyOOYeU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/fe7fc2-41cc-467d-980b-f5af616b5483/1/Y11bZE4i-0iOTWwAErCqvyOOYeU.mft Manifest number: 07D5 Signing time: Thu 04 Dec 2025 22:02:01 +0000 Manifest this update: Thu 04 Dec 2025 22:02:01 +0000 Manifest next update: Fri 05 Dec 2025 22:02:01 +0000 Files and hashes: 1: 1-7dAZzRBbFa11Vn8DGlQ2QYhnKQ.roa (hash: paOrHtzZ6Pf1no7vHSa5YDI9HD1Gf08R7MZd074FoNM=) 2: Y11bZE4i-0iOTWwAErCqvyOOYeU.crl (hash: OlPQ+7LdClu05Dwsm1Wq4LNiMY7ZXmcCnNt7Phwoyw4=) 3: aAUDoOMiIkIoTxqpgiR2vBHCYiA.roa (hash: bEbrJBN9qOyrrJrbKszXph6Dv/8oZGFIwIyFCbBw1tg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/fe7fc2-41cc-467d-980b-f5af616b5483/1/Y11bZE4i-0iOTWwAErCqvyOOYeU.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/fe7fc2-41cc-467d-980b-f5af616b5483/1/Y11bZE4i-0iOTWwAErCqvyOOYeU.mft rsync://rpki.ripe.net/repository/DEFAULT/Y11bZE4i-0iOTWwAErCqvyOOYeU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 21:22:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:eb:62:f1:29:bf:d0:89:1c:a2:4f:6e:04:31:1b:74:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=635d5b644e22fb488e4d6c0012b0aabf238e61e5 Validity Not Before: Dec 4 22:02:01 2025 GMT Not After : Dec 5 22:02:01 2025 GMT Subject: CN=7a35602c7946dd9065300562a8fafcba516f19ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:28:6c:be:b3:d2:1a:40:bd:6c:fe:2e:d1:59: 01:1a:5e:12:1e:e8:0e:ad:46:f9:04:98:a1:99:7d: 1f:b5:fb:db:a0:0f:1b:83:c2:d7:3e:30:b6:f8:be: 54:0d:a3:ad:2e:ba:4a:ba:33:04:38:bf:ec:f1:8a: dc:13:8c:e1:de:79:67:3e:c3:18:65:06:b5:8f:09: 89:67:e5:04:80:36:ca:ac:8a:74:fd:af:5e:3f:7b: 9f:db:a7:e3:e3:99:2a:a2:85:88:90:13:be:5e:d8: 0d:24:42:14:8e:e3:79:f9:86:8a:94:3a:4b:55:5c: 08:99:8d:9a:f6:27:f5:73:7d:09:05:a9:bf:16:6f: d6:1c:f6:54:3a:50:78:dc:2a:ad:14:98:2f:63:a1: 39:83:e4:9f:cf:4a:54:67:a0:7d:82:99:57:e9:62: 53:5f:1c:0c:a3:45:c2:01:f3:f1:6b:37:4b:42:e9: 04:64:08:ba:74:8b:11:69:5f:91:f2:2f:88:4a:bf: 15:63:16:ee:b6:de:50:bf:8c:3f:30:93:99:b5:03: 27:15:92:2a:f4:7d:fc:57:d8:0d:d3:f9:26:61:ff: 8d:65:fc:40:8d:07:28:32:90:73:55:19:e9:81:49: 8e:7e:8e:fd:c5:0e:5f:da:02:cb:a0:f1:7f:42:a1: 89:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:35:60:2C:79:46:DD:90:65:30:05:62:A8:FA:FC:BA:51:6F:19:EA X509v3 Authority Key Identifier: keyid:63:5D:5B:64:4E:22:FB:48:8E:4D:6C:00:12:B0:AA:BF:23:8E:61:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y11bZE4i-0iOTWwAErCqvyOOYeU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/fe7fc2-41cc-467d-980b-f5af616b5483/1/Y11bZE4i-0iOTWwAErCqvyOOYeU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/fe7fc2-41cc-467d-980b-f5af616b5483/1/Y11bZE4i-0iOTWwAErCqvyOOYeU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:ea:af:e0:27:ef:19:a9:4e:ac:25:91:3b:52:78:af:10:be: 8e:d9:05:90:46:ff:5f:c2:e2:4a:da:b2:af:4b:12:d4:2a:b5: 21:6a:0b:2c:c8:f3:b5:40:6e:23:3c:fa:3c:ae:28:71:af:9c: 74:56:fd:31:72:ca:4b:ea:46:e9:52:bd:6b:a0:c3:ac:2c:39: dc:40:ce:b0:01:a1:99:1f:f4:a8:4b:4c:67:86:56:92:5b:55: 1e:8c:47:ed:99:09:ec:1e:8c:d6:8c:cf:2d:0b:37:3c:32:20: 9b:e6:27:21:98:43:e2:32:b6:c2:82:10:e3:3d:4a:2f:bf:07: fa:d8:9b:e2:7f:54:2d:5d:1c:ec:f7:73:89:89:bf:01:f4:05: 5b:93:7f:c7:fa:97:e9:1b:4b:35:49:f4:31:21:9c:5e:59:f4: 43:5e:8a:08:57:13:83:e3:87:c1:0c:17:57:f9:64:4e:2c:60: 7b:57:e3:03:6b:16:5d:93:3a:c9:c6:a4:8c:d1:5a:57:65:3f: 44:12:7a:db:84:ba:eb:d3:27:c9:83:07:7d:93:b9:00:8a:87: 43:ef:21:02:37:26:10:09:5a:2e:f4:a5:fc:f0:e2:28:cd:0c: ae:61:8f:03:09:d5:98:0a:68:e9:64:7a:b6:e6:6d:64:f3:74: ba:a6:ae:e9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrrYvEpv9CJHKJPbgQxG3TJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzNWQ1YjY0NGUyMmZiNDg4ZTRkNmMwMDEyYjBhYWJmMjM4 ZTYxZTUwHhcNMjUxMjA0MjIwMjAxWhcNMjUxMjA1MjIwMjAxWjAzMTEwLwYDVQQD Eyg3YTM1NjAyYzc5NDZkZDkwNjUzMDA1NjJhOGZhZmNiYTUxNmYxOWVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoShsvrPSGkC9bP4u0VkBGl4SHugO rUb5BJihmX0ftfvboA8bg8LXPjC2+L5UDaOtLrpKujMEOL/s8YrcE4zh3nlnPsMY ZQa1jwmJZ+UEgDbKrIp0/a9eP3uf26fj45kqooWIkBO+XtgNJEIUjuN5+YaKlDpL VVwImY2a9if1c30JBam/Fm/WHPZUOlB43CqtFJgvY6E5g+Sfz0pUZ6B9gplX6WJT XxwMo0XCAfPxazdLQukEZAi6dIsRaV+R8i+ISr8VYxbutt5Qv4w/MJOZtQMnFZIq 9H38V9gN0/kmYf+NZfxAjQcoMpBzVRnpgUmOfo79xQ5f2gLLoPF/QqGJzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHo1YCx5Rt2QZTAFYqj6/LpRbxnqMB8GA1UdIwQY MBaAFGNdW2ROIvtIjk1sABKwqr8jjmHlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWTExYlpFNGktMGlPVFd3QUVyQ3F2eU9PWWVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC9mZTdmYzItNDFjYy00NjdkLTk4MGIt ZjVhZjYxNmI1NDgzLzEvWTExYlpFNGktMGlPVFd3QUVyQ3F2eU9PWWVVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC9mZTdmYzItNDFjYy00NjdkLTk4MGItZjVhZjYxNmI1NDgz LzEvWTExYlpFNGktMGlPVFd3QUVyQ3F2eU9PWWVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiOqv4Cfv GalOrCWRO1J4rxC+jtkFkEb/X8LiStqyr0sS1Cq1IWoLLMjztUBuIzz6PK4oca+c dFb9MXLKS+pG6VK9a6DDrCw53EDOsAGhmR/0qEtMZ4ZWkltVHoxH7ZkJ7B6M1ozP LQs3PDIgm+YnIZhD4jK2woIQ4z1KL78H+tib4n9ULV0c7PdziYm/AfQFW5N/x/qX 6RtLNUn0MSGcXln0Q16KCFcTg+OHwQwXV/lkTixge1fjA2sWXZM6ycakjNFaV2U/ RBJ624S669MnyYMHfZO5AIqHQ+8hAjcmEAlaLvSl/PDiKM0MrmGPAwnVmApo6WR6 tuZtZPN0uqau6Q== -----END CERTIFICATE-----Generated at Fri Dec 5 05:07:14 2025 by rpki-client