This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/7b2fcc-ebc9-4b02-b716-f80d5f31664e/1/Y14XDZsHxQ0bKa6GliBssUWk8fc.mft File: Y14XDZsHxQ0bKa6GliBssUWk8fc.mft (raw, json) Hash identifier: rQLFJHXEUwgwkMAMwLQN/ejCk2dkwxay1diFs8jvUlQ= Subject key identifier: 22:11:40:BE:55:6F:D7:24:59:B8:44:1F:4A:E7:3A:28:D0:54:97:04 Authority key identifier: 63:5E:17:0D:9B:07:C5:0D:1B:29:AE:86:96:20:6C:B1:45:A4:F1:F7 Certificate issuer: /CN=635e170d9b07c50d1b29ae8696206cb145a4f1f7 Certificate serial: 019B0FA53369BF45EBA097E716BC7E2961CD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y14XDZsHxQ0bKa6GliBssUWk8fc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/7b2fcc-ebc9-4b02-b716-f80d5f31664e/1/Y14XDZsHxQ0bKa6GliBssUWk8fc.mft Manifest number: C6 Signing time: Thu 11 Dec 2025 23:00:43 +0000 Manifest this update: Thu 11 Dec 2025 23:00:43 +0000 Manifest next update: Fri 12 Dec 2025 23:00:43 +0000 Files and hashes: 1: Y14XDZsHxQ0bKa6GliBssUWk8fc.crl (hash: piLljCKa2dfiPzSlZmZF16NEJ2PRnTo/DPBc9+GqucM=) 2: qdMXO5dxGNkyeRydnMIi_ZzZAVs.roa (hash: emXh4czyfau1VXJaPAfpRR7uc8vhZu0P1DoeRXNpxPQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/7b2fcc-ebc9-4b02-b716-f80d5f31664e/1/Y14XDZsHxQ0bKa6GliBssUWk8fc.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/7b2fcc-ebc9-4b02-b716-f80d5f31664e/1/Y14XDZsHxQ0bKa6GliBssUWk8fc.mft rsync://rpki.ripe.net/repository/DEFAULT/Y14XDZsHxQ0bKa6GliBssUWk8fc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:a5:33:69:bf:45:eb:a0:97:e7:16:bc:7e:29:61:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=635e170d9b07c50d1b29ae8696206cb145a4f1f7 Validity Not Before: Dec 11 23:00:43 2025 GMT Not After : Dec 12 23:00:43 2025 GMT Subject: CN=221140be556fd72459b8441f4ae73a28d0549704 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:0d:8e:8b:06:fd:67:32:71:4b:c9:3d:b3:79: ba:da:00:88:80:ec:61:e0:bb:70:52:c1:10:63:5c: fb:4e:d5:c6:a3:16:49:ed:81:b4:82:82:16:aa:f7: 52:b7:1b:a5:4f:e4:09:77:d7:de:5a:42:63:81:d4: e6:81:3b:96:68:89:31:83:7a:6a:fe:3a:13:27:72: 0a:62:23:9d:df:c9:26:93:e1:f5:11:e4:01:e5:38: 0a:93:5c:ba:69:ca:2d:38:73:3d:82:c0:b6:aa:cf: fc:ed:35:05:4a:8c:0b:88:db:03:7d:53:1d:fc:85: 2e:ac:7f:86:ad:9b:77:60:89:37:db:7e:14:90:0b: 58:30:f4:d8:f2:29:1e:3b:f1:be:c2:ec:08:d6:49: f9:78:32:48:4c:5c:1e:4c:8c:ad:b5:8f:02:3c:aa: c5:ab:eb:4b:f5:28:85:bf:8b:11:cb:d6:ad:56:6e: 07:b1:dc:5b:fe:94:cd:87:1e:42:ed:7a:75:ab:b1: 64:36:2c:1f:e5:80:d7:39:3e:90:3b:5b:81:b9:d7: c9:29:0a:6b:d4:bd:3b:92:5b:a5:a2:cc:a3:60:18: a7:cc:af:5e:16:af:08:11:11:e5:3d:e2:17:ba:0a: f8:2b:3f:1b:2f:a5:78:9e:6f:93:fb:e8:e7:a2:6d: 69:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:11:40:BE:55:6F:D7:24:59:B8:44:1F:4A:E7:3A:28:D0:54:97:04 X509v3 Authority Key Identifier: keyid:63:5E:17:0D:9B:07:C5:0D:1B:29:AE:86:96:20:6C:B1:45:A4:F1:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y14XDZsHxQ0bKa6GliBssUWk8fc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/7b2fcc-ebc9-4b02-b716-f80d5f31664e/1/Y14XDZsHxQ0bKa6GliBssUWk8fc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/7b2fcc-ebc9-4b02-b716-f80d5f31664e/1/Y14XDZsHxQ0bKa6GliBssUWk8fc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:0c:d8:ed:38:d3:ea:b5:9c:1e:15:8d:06:33:fb:9d:6d:e2: 08:2a:ec:17:1e:5c:12:27:8c:01:f0:9f:08:7c:9b:a3:1d:16: f4:b9:7c:df:60:bc:d9:da:2f:30:b9:03:bd:bb:fc:79:fe:16: 6c:84:c5:8a:50:47:d5:73:16:22:86:a3:9a:df:87:3e:7b:41: 75:60:c5:ca:6b:aa:8c:f7:69:9f:44:34:55:0c:9c:a2:bb:7e: f8:a8:a1:55:ac:29:05:4d:e2:57:93:fb:9c:8f:bf:b6:0c:af: 06:a2:dd:14:90:36:0f:8b:4e:72:e7:f0:1d:1d:79:12:8a:ba: 69:3c:40:5e:a4:9b:f5:d9:05:f5:72:6f:99:d6:84:dc:37:2b: 06:29:c3:a6:b6:08:97:1b:25:a4:55:c8:c4:73:41:27:29:48: 7d:cf:2c:ba:9f:15:3c:71:52:59:8f:6c:f7:fb:d1:0f:b2:eb: a0:1e:ef:8e:37:5c:6d:08:14:de:6d:ca:11:49:af:76:cc:a2: 94:30:d9:84:fc:fc:e7:84:11:d2:d3:ea:3c:5d:7d:9d:f6:ff: d4:58:5b:d3:fc:b5:45:2c:67:6d:79:ec:11:2f:b4:6e:ae:fa: dc:0a:39:24:e6:7c:65:1a:59:d4:ba:cb:65:76:6c:85:5d:88: d8:91:21:c2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPpTNpv0XroJfnFrx+KWHNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzNWUxNzBkOWIwN2M1MGQxYjI5YWU4Njk2MjA2Y2IxNDVh NGYxZjcwHhcNMjUxMjExMjMwMDQzWhcNMjUxMjEyMjMwMDQzWjAzMTEwLwYDVQQD EygyMjExNDBiZTU1NmZkNzI0NTliODQ0MWY0YWU3M2EyOGQwNTQ5NzA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjA2Oiwb9ZzJxS8k9s3m62gCIgOxh 4LtwUsEQY1z7TtXGoxZJ7YG0goIWqvdStxulT+QJd9feWkJjgdTmgTuWaIkxg3pq /joTJ3IKYiOd38kmk+H1EeQB5TgKk1y6acotOHM9gsC2qs/87TUFSowLiNsDfVMd /IUurH+GrZt3YIk3234UkAtYMPTY8ikeO/G+wuwI1kn5eDJITFweTIyttY8CPKrF q+tL9SiFv4sRy9atVm4Hsdxb/pTNhx5C7Xp1q7FkNiwf5YDXOT6QO1uBudfJKQpr 1L07klulosyjYBinzK9eFq8IERHlPeIXugr4Kz8bL6V4nm+T++jnom1pgwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCIRQL5Vb9ckWbhEH0rnOijQVJcEMB8GA1UdIwQY MBaAFGNeFw2bB8UNGymuhpYgbLFFpPH3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWTE0WERac0h4UTBiS2E2R2xpQnNzVVdrOGZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS83YjJmY2MtZWJjOS00YjAyLWI3MTYt ZjgwZDVmMzE2NjRlLzEvWTE0WERac0h4UTBiS2E2R2xpQnNzVVdrOGZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS83YjJmY2MtZWJjOS00YjAyLWI3MTYtZjgwZDVmMzE2NjRl LzEvWTE0WERac0h4UTBiS2E2R2xpQnNzVVdrOGZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMAzY7TjT 6rWcHhWNBjP7nW3iCCrsFx5cEieMAfCfCHybox0W9Ll832C82dovMLkDvbv8ef4W bITFilBH1XMWIoajmt+HPntBdWDFymuqjPdpn0Q0VQycort++KihVawpBU3iV5P7 nI+/tgyvBqLdFJA2D4tOcufwHR15Eoq6aTxAXqSb9dkF9XJvmdaE3DcrBinDprYI lxslpFXIxHNBJylIfc8sup8VPHFSWY9s9/vRD7LroB7vjjdcbQgU3m3KEUmvdsyi lDDZhPz854QR0tPqPF19nfb/1Fhb0/y1RSxnbXnsES+0bq763Ao5JOZ8ZRpZ1LrL ZXZshV2I2JEhwg== -----END CERTIFICATE-----Generated at Fri Dec 12 04:03:50 2025 by rpki-client