This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/fe7fc2-41cc-467d-980b-f5af616b5483/1/Y11bZE4i-0iOTWwAErCqvyOOYeU.mft File: Y11bZE4i-0iOTWwAErCqvyOOYeU.mft (raw, json) Hash identifier: gXMIrokSFL8xxMx7zlQEdbdXRwhZQ1Iw/reAJIA+ohQ= Subject key identifier: D6:6B:76:0F:95:03:9C:C1:95:77:4D:10:25:73:1E:14:47:90:4F:1D Authority key identifier: 63:5D:5B:64:4E:22:FB:48:8E:4D:6C:00:12:B0:AA:BF:23:8E:61:E5 Certificate issuer: /CN=635d5b644e22fb488e4d6c0012b0aabf238e61e5 Certificate serial: 019B44381DA509606ED04881F8B13E08ECA1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y11bZE4i-0iOTWwAErCqvyOOYeU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/fe7fc2-41cc-467d-980b-f5af616b5483/1/Y11bZE4i-0iOTWwAErCqvyOOYeU.mft Manifest number: 0803 Signing time: Mon 22 Dec 2025 04:01:26 +0000 Manifest this update: Mon 22 Dec 2025 04:01:26 +0000 Manifest next update: Tue 23 Dec 2025 04:01:26 +0000 Files and hashes: 1: 1-7dAZzRBbFa11Vn8DGlQ2QYhnKQ.roa (hash: paOrHtzZ6Pf1no7vHSa5YDI9HD1Gf08R7MZd074FoNM=) 2: Y11bZE4i-0iOTWwAErCqvyOOYeU.crl (hash: hVAz5JWvHvbxwZ885RRDb7neiu7AwT3/Frs+qUIqQpk=) 3: aAUDoOMiIkIoTxqpgiR2vBHCYiA.roa (hash: bEbrJBN9qOyrrJrbKszXph6Dv/8oZGFIwIyFCbBw1tg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/fe7fc2-41cc-467d-980b-f5af616b5483/1/Y11bZE4i-0iOTWwAErCqvyOOYeU.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/fe7fc2-41cc-467d-980b-f5af616b5483/1/Y11bZE4i-0iOTWwAErCqvyOOYeU.mft rsync://rpki.ripe.net/repository/DEFAULT/Y11bZE4i-0iOTWwAErCqvyOOYeU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:38:1d:a5:09:60:6e:d0:48:81:f8:b1:3e:08:ec:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=635d5b644e22fb488e4d6c0012b0aabf238e61e5 Validity Not Before: Dec 22 04:01:26 2025 GMT Not After : Dec 23 04:01:26 2025 GMT Subject: CN=d66b760f95039cc195774d1025731e1447904f1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:1e:01:f0:15:c3:7d:a9:f8:71:f5:66:54:a7: 3c:2b:0e:3e:20:14:75:27:85:ff:2e:43:ad:d7:1d: ad:23:2a:18:48:ec:01:d6:ac:f7:e2:c0:2f:bf:43: c3:4b:f2:46:e3:85:0b:c0:a3:90:f5:52:f5:48:3c: 12:3d:49:1e:78:1a:b5:e7:35:c0:14:cd:f2:39:bd: 3c:c3:6d:17:2d:b8:2f:de:11:78:5c:fd:ce:cb:45: 8e:6a:98:5e:b1:49:8c:1c:16:3f:d2:e7:4a:99:5e: 39:5a:04:11:ca:0c:0c:d9:8b:c3:4a:73:46:09:5c: 17:c0:18:a1:b9:bc:93:11:89:8e:d9:99:66:d4:6f: 65:fc:55:c8:4d:62:97:b6:87:51:e8:9b:33:dc:f3: 8a:a8:49:5d:78:df:0c:95:ce:8d:95:5d:a2:19:63: 3a:04:b7:ac:80:6b:85:dc:9d:6d:0e:39:d6:57:71: d6:73:b0:8a:5e:88:8b:fc:dc:9f:ea:7b:41:6c:df: f9:86:0a:cc:fa:8f:52:94:58:a6:2e:9d:dc:f9:69: 94:5f:b6:73:c6:5f:c4:97:6a:7e:0a:50:4a:eb:e5: 6c:c6:d3:a1:12:94:67:1a:04:ee:78:d6:e7:11:e4: cc:60:ed:78:e4:47:63:91:1a:08:78:1b:a1:70:c5: 25:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:6B:76:0F:95:03:9C:C1:95:77:4D:10:25:73:1E:14:47:90:4F:1D X509v3 Authority Key Identifier: keyid:63:5D:5B:64:4E:22:FB:48:8E:4D:6C:00:12:B0:AA:BF:23:8E:61:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y11bZE4i-0iOTWwAErCqvyOOYeU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/fe7fc2-41cc-467d-980b-f5af616b5483/1/Y11bZE4i-0iOTWwAErCqvyOOYeU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/fe7fc2-41cc-467d-980b-f5af616b5483/1/Y11bZE4i-0iOTWwAErCqvyOOYeU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:47:f0:ba:db:18:54:68:b2:d3:7e:04:6f:10:51:0e:62:c4: 59:9c:0d:ad:51:df:37:0e:d2:4b:20:2e:72:e9:2e:3c:33:54: 53:39:bb:50:40:6a:9c:8c:95:79:6a:1f:32:5d:21:d5:fd:6b: fb:8f:10:78:ae:1c:26:82:71:28:3f:81:82:7f:50:5f:fd:ec: 92:22:be:26:a9:58:dd:5b:1c:c5:ac:94:71:09:0b:df:f1:73: 7b:37:e0:ce:39:4f:33:a8:1d:1e:c1:07:e5:01:69:47:09:e5: b5:de:10:52:42:f0:17:40:e5:40:3b:98:d6:d8:09:06:c9:b9: af:23:cb:50:9f:48:41:57:c0:e7:81:5e:82:ce:8b:1b:54:e2: da:38:8f:dd:48:42:45:ec:9d:e1:3c:15:0a:7a:af:d0:30:d9: 82:53:c0:ae:48:11:aa:d5:80:8c:1e:29:26:fa:e9:3e:c3:af: 39:25:5b:01:fa:c5:21:30:82:19:72:ab:34:31:43:84:d2:e0: 91:66:7e:59:23:74:1d:eb:2d:fd:2b:9e:d9:73:d6:95:04:6d: ba:c7:ab:6f:68:a4:80:60:f8:b0:3e:5a:3d:8f:56:4c:27:d3: 9d:e1:9e:5b:60:ef:1e:ff:1d:6f:0b:f6:e7:31:fb:49:2a:81: 65:8c:5f:47 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtEOB2lCWBu0EiB+LE+COyhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzNWQ1YjY0NGUyMmZiNDg4ZTRkNmMwMDEyYjBhYWJmMjM4 ZTYxZTUwHhcNMjUxMjIyMDQwMTI2WhcNMjUxMjIzMDQwMTI2WjAzMTEwLwYDVQQD EyhkNjZiNzYwZjk1MDM5Y2MxOTU3NzRkMTAyNTczMWUxNDQ3OTA0ZjFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAph4B8BXDfan4cfVmVKc8Kw4+IBR1 J4X/LkOt1x2tIyoYSOwB1qz34sAvv0PDS/JG44ULwKOQ9VL1SDwSPUkeeBq15zXA FM3yOb08w20XLbgv3hF4XP3Oy0WOaphesUmMHBY/0udKmV45WgQRygwM2YvDSnNG CVwXwBihubyTEYmO2Zlm1G9l/FXITWKXtodR6Jsz3POKqEldeN8Mlc6NlV2iGWM6 BLesgGuF3J1tDjnWV3HWc7CKXoiL/Nyf6ntBbN/5hgrM+o9SlFimLp3c+WmUX7Zz xl/El2p+ClBK6+VsxtOhEpRnGgTueNbnEeTMYO145EdjkRoIeBuhcMUlBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNZrdg+VA5zBlXdNECVzHhRHkE8dMB8GA1UdIwQY MBaAFGNdW2ROIvtIjk1sABKwqr8jjmHlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWTExYlpFNGktMGlPVFd3QUVyQ3F2eU9PWWVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC9mZTdmYzItNDFjYy00NjdkLTk4MGIt ZjVhZjYxNmI1NDgzLzEvWTExYlpFNGktMGlPVFd3QUVyQ3F2eU9PWWVVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC9mZTdmYzItNDFjYy00NjdkLTk4MGItZjVhZjYxNmI1NDgz LzEvWTExYlpFNGktMGlPVFd3QUVyQ3F2eU9PWWVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAREfwutsY VGiy034EbxBRDmLEWZwNrVHfNw7SSyAucukuPDNUUzm7UEBqnIyVeWofMl0h1f1r +48QeK4cJoJxKD+Bgn9QX/3skiK+JqlY3VscxayUcQkL3/FzezfgzjlPM6gdHsEH 5QFpRwnltd4QUkLwF0DlQDuY1tgJBsm5ryPLUJ9IQVfA54Fegs6LG1Ti2jiP3UhC Reyd4TwVCnqv0DDZglPArkgRqtWAjB4pJvrpPsOvOSVbAfrFITCCGXKrNDFDhNLg kWZ+WSN0Hest/Sue2XPWlQRtuserb2ikgGD4sD5aPY9WTCfTneGeW2DvHv8dbwv2 5zH7SSqBZYxfRw== -----END CERTIFICATE-----Generated at Mon Dec 22 06:16:22 2025 by rpki-client