This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/f9f4a9-a0cd-4107-aa41-d52a18985999/1/Yy49A3vwUHVxsqBoy5Awg3TOU-0.mft
File: Yy49A3vwUHVxsqBoy5Awg3TOU-0.mft (raw, json)
Hash identifier: VBqEeINF1EWzPvVITsxpfBWTDXqFFIzejwSsXnkR+LM=
Subject key identifier: 44:F2:6E:75:E1:C1:44:DC:B9:8B:3C:B8:B1:8A:24:8D:2B:F7:C4:1F
Authority key identifier: 63:2E:3D:03:7B:F0:50:75:71:B2:A0:68:CB:90:30:83:74:CE:53:ED
Certificate issuer: /CN=632e3d037bf0507571b2a068cb90308374ce53ed
Certificate serial: 019AAC82DD9EF0C9E699411E88C0E8875216
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yy49A3vwUHVxsqBoy5Awg3TOU-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/f9f4a9-a0cd-4107-aa41-d52a18985999/1/Yy49A3vwUHVxsqBoy5Awg3TOU-0.mft
Manifest number: 096B
Signing time: Sat 22 Nov 2025 17:00:48 +0000
Manifest this update: Sat 22 Nov 2025 17:00:48 +0000
Manifest next update: Sun 23 Nov 2025 17:00:48 +0000
Files and hashes: 1: L3qEBBzeJh8D6UqzEEk-9tnLcMA.roa (hash: shN2h6IdPkthKGJ1t7rh4Tc86Qf0XZxCIaY0/EgLJfA=)
2: U47KHWtk8fl1zeBfptx2dxwuW-0.roa (hash: MCpZ0AwLfoDIQ9+ASI13wQUEawZmPsd+gtRUPbEtBbI=)
3: Yy49A3vwUHVxsqBoy5Awg3TOU-0.crl (hash: 193mHATiKrtjNTRn/+YMA3zF7RtYZnElABPNu/kWCNM=)
4: yMbSdUOBKCqn_NswdvutijlK684.roa (hash: K0IjYQFHztO8K2x6H3KgphHn4JSijnZlB4Ox3bR44Pk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/f9f4a9-a0cd-4107-aa41-d52a18985999/1/Yy49A3vwUHVxsqBoy5Awg3TOU-0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/f9f4a9-a0cd-4107-aa41-d52a18985999/1/Yy49A3vwUHVxsqBoy5Awg3TOU-0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yy49A3vwUHVxsqBoy5Awg3TOU-0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Nov 2025 12:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:ac:82:dd:9e:f0:c9:e6:99:41:1e:88:c0:e8:87:52:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=632e3d037bf0507571b2a068cb90308374ce53ed
Validity
Not Before: Nov 22 17:00:48 2025 GMT
Not After : Nov 23 17:00:48 2025 GMT
Subject: CN=44f26e75e1c144dcb98b3cb8b18a248d2bf7c41f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:4c:f7:08:d6:e4:92:22:1b:64:35:e4:39:1d:
42:f5:6c:1c:24:09:2a:9b:83:3b:3d:b3:80:e0:11:
56:e0:8e:b1:61:91:11:1c:ac:76:7b:25:da:94:60:
21:3d:45:68:4e:16:32:4d:d8:bc:38:00:3b:22:a2:
be:dd:1a:b1:f3:a3:c2:ed:8d:93:e8:87:a6:9c:05:
95:67:8c:93:7c:24:d9:c1:10:0f:83:73:d9:d3:53:
e3:f5:41:a2:5f:19:27:4f:2e:c9:ad:56:fa:7c:bc:
e9:e2:9b:0f:ce:f4:8c:03:45:20:af:79:49:a6:4d:
92:53:a0:51:ac:59:09:b1:e4:c1:dc:22:e8:5a:b7:
34:33:ee:a0:26:f3:14:53:e9:eb:32:76:29:7f:c1:
00:9e:e5:ca:b2:a0:37:db:b8:3c:f9:58:c2:3b:d2:
6e:36:7d:b9:ea:0d:0c:9c:55:4e:43:8c:29:ee:5c:
90:a1:f1:8a:3a:66:ae:59:59:c4:29:48:05:39:64:
29:d8:01:76:c1:8a:80:89:b9:21:75:d0:26:74:f0:
25:03:f3:35:53:b8:64:b1:7a:33:84:63:e7:a9:7f:
5c:18:ba:67:c9:26:67:82:4a:72:b2:b2:51:47:17:
0c:6f:e9:c8:0f:50:fb:36:c0:82:fa:e2:4f:3f:41:
03:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:F2:6E:75:E1:C1:44:DC:B9:8B:3C:B8:B1:8A:24:8D:2B:F7:C4:1F
X509v3 Authority Key Identifier:
keyid:63:2E:3D:03:7B:F0:50:75:71:B2:A0:68:CB:90:30:83:74:CE:53:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yy49A3vwUHVxsqBoy5Awg3TOU-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/f9f4a9-a0cd-4107-aa41-d52a18985999/1/Yy49A3vwUHVxsqBoy5Awg3TOU-0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/f9f4a9-a0cd-4107-aa41-d52a18985999/1/Yy49A3vwUHVxsqBoy5Awg3TOU-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:7e:1c:2e:33:62:5e:b0:4d:79:06:7f:5e:41:b0:47:2b:48:
23:f1:21:a8:82:e2:c3:b5:55:ca:94:4b:0b:6e:98:28:92:2d:
1a:7b:09:56:59:dc:71:cc:e0:a7:82:b3:85:07:2b:b5:84:d2:
e6:5b:6b:83:65:05:fc:be:59:c7:cb:50:5e:e8:45:17:36:35:
4c:ea:62:d5:7f:90:be:7f:8c:33:28:3b:44:1b:52:9d:ba:2c:
0e:4f:82:db:b3:59:40:02:72:33:f3:0a:4c:13:b2:db:2f:17:
a3:d5:6c:bc:af:d9:ab:fe:95:69:4a:04:43:6e:c3:60:ed:1a:
41:fc:29:14:fd:c9:67:59:9f:78:57:64:c1:4f:ee:81:d7:70:
8d:ca:52:ec:09:1c:e5:1a:27:f5:b9:13:11:5c:fd:70:24:cf:
79:d3:8a:39:a2:69:d8:44:27:9c:ce:d6:ce:a4:1c:fa:a3:b8:
f2:d9:15:63:f6:97:a7:ec:9b:c4:3e:e7:29:48:3a:45:e6:e1:
24:4f:64:95:4a:c4:e0:ba:80:89:1a:b1:f1:c7:27:dd:44:7f:
bc:db:34:43:d3:40:19:c8:31:0b:66:a9:b2:bd:8a:b3:ef:1b:
9f:bb:43:75:2b:5a:68:91:c1:1e:fb:fe:65:4f:53:00:40:8c:
d7:d4:53:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 22 20:55:31 2025 by rpki-client