This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/b756b4-ce41-41b5-a1d9-bb4d242ed2cd/1/ybBR6OaBSbZgROfeSuWdc25Teqo.mft File: ybBR6OaBSbZgROfeSuWdc25Teqo.mft (raw, json) Hash identifier: lGMIvzb7S+bsQBCQ/uOkqKlq29GG1/LE7uNY6fantQU= Subject key identifier: 7C:4F:8E:97:47:A9:27:1F:99:FE:43:4F:0B:F3:B2:53:4F:54:F1:9F Authority key identifier: C9:B0:51:E8:E6:81:49:B6:60:44:E7:DE:4A:E5:9D:73:6E:53:7A:AA Certificate issuer: /CN=c9b051e8e68149b66044e7de4ae59d736e537aaa Certificate serial: 019B1C17ADE7A5279FD4650A6CE147D765FA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ybBR6OaBSbZgROfeSuWdc25Teqo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/b756b4-ce41-41b5-a1d9-bb4d242ed2cd/1/ybBR6OaBSbZgROfeSuWdc25Teqo.mft Manifest number: 0760 Signing time: Sun 14 Dec 2025 09:01:12 +0000 Manifest this update: Sun 14 Dec 2025 09:01:12 +0000 Manifest next update: Mon 15 Dec 2025 09:01:12 +0000 Files and hashes: 1: ArFunhGUh4z5gE5BaMxIilumjuo.roa (hash: +Y+pIXJkKqGVxuRKoBP5VqtBPTsF8z5U0O22HLQqFaA=) 2: byUVA5qV1IbcwSPIkfdvjR5Q_jI.roa (hash: dK4W//mWQId08viaOEDpjWgfsu+tE5gfBKP2LChtCus=) 3: tLmXVGY6n6fVRzQmW79aMR0MJps.roa (hash: TSYx/9L1XrTJwYjdabKmZhceP9EJlWD0fOeM06mdy/g=) 4: ybBR6OaBSbZgROfeSuWdc25Teqo.crl (hash: /7vLXmlPQAbUv+RgalyWwMKfSDxMN78vDthold7nMvQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/b756b4-ce41-41b5-a1d9-bb4d242ed2cd/1/ybBR6OaBSbZgROfeSuWdc25Teqo.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/b756b4-ce41-41b5-a1d9-bb4d242ed2cd/1/ybBR6OaBSbZgROfeSuWdc25Teqo.mft rsync://rpki.ripe.net/repository/DEFAULT/ybBR6OaBSbZgROfeSuWdc25Teqo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1c:17:ad:e7:a5:27:9f:d4:65:0a:6c:e1:47:d7:65:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c9b051e8e68149b66044e7de4ae59d736e537aaa Validity Not Before: Dec 14 09:01:12 2025 GMT Not After : Dec 15 09:01:12 2025 GMT Subject: CN=7c4f8e9747a9271f99fe434f0bf3b2534f54f19f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:82:dd:40:40:0e:47:3a:5e:03:1a:32:49:f6: 58:05:54:45:ed:a9:a9:c6:f9:d0:8f:cb:9b:54:81: 8c:9e:1a:df:fa:18:b8:ed:fd:43:df:57:5d:5c:3d: d1:cb:a0:49:af:03:8c:f0:91:d8:3d:9d:31:0d:46: fc:50:31:dc:97:a3:67:64:0a:65:01:2b:6a:38:f0: 55:a4:2c:a9:0f:d3:0e:4e:78:1a:f5:5e:45:3a:5e: ac:fa:98:bb:67:7e:7f:1e:59:4a:c1:38:82:61:93: f3:8e:ac:d3:f6:af:4b:c4:97:bb:8a:9e:47:dc:f0: 7a:bc:23:86:86:ba:50:21:61:b9:61:61:6c:31:dd: 9d:c5:65:d5:10:0d:07:53:3a:cb:fe:3a:9f:0c:c2: 80:14:15:b5:45:93:92:db:ed:8b:13:9c:38:c0:99: 33:78:d5:79:23:70:1e:27:72:93:39:d8:fa:57:b2: a8:cc:51:1d:9d:e1:cf:1f:3d:f6:8d:83:5d:70:a4: f3:67:b0:e5:96:b8:f2:59:5d:bf:cf:30:f3:4a:0b: 6e:51:61:ef:d4:4d:17:17:d4:39:a4:2a:78:a9:6c: 8d:ad:ec:09:aa:0c:7c:15:32:ee:5d:fe:5e:5d:2f: 73:0e:2d:9a:3d:a6:13:cc:ca:a4:c3:31:bf:f0:29: 01:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:4F:8E:97:47:A9:27:1F:99:FE:43:4F:0B:F3:B2:53:4F:54:F1:9F X509v3 Authority Key Identifier: keyid:C9:B0:51:E8:E6:81:49:B6:60:44:E7:DE:4A:E5:9D:73:6E:53:7A:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ybBR6OaBSbZgROfeSuWdc25Teqo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/b756b4-ce41-41b5-a1d9-bb4d242ed2cd/1/ybBR6OaBSbZgROfeSuWdc25Teqo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/b756b4-ce41-41b5-a1d9-bb4d242ed2cd/1/ybBR6OaBSbZgROfeSuWdc25Teqo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:29:49:59:2d:4f:bc:bf:59:78:c1:6c:6c:0b:61:dc:f3:36: bd:61:2d:02:92:71:b9:d9:05:25:c0:0a:11:2e:11:d5:8d:4c: 23:e7:c9:70:9d:29:01:aa:9a:73:98:21:62:f2:92:d5:2c:fa: 60:4f:d9:ad:e8:52:f8:e2:80:04:d8:e4:3f:21:ee:38:ed:46: 70:06:1f:cd:bc:e7:8a:b5:5c:37:ce:46:e0:55:a9:0a:ec:8f: 89:f8:c1:b2:eb:ac:3a:43:cd:27:12:fd:bd:cb:b5:6c:b6:d2: ef:0e:cc:b9:21:45:4b:c9:51:b3:32:b4:12:7e:4c:f2:57:3c: 01:71:36:11:7d:ee:0a:e1:1f:4b:0f:30:40:9e:8e:07:20:f9: 7a:4f:ec:e5:56:91:ed:34:df:ca:67:e2:22:3e:b4:b5:49:93: 8e:51:7e:b3:1d:83:a1:42:21:ed:ea:37:69:ba:73:7e:f2:c4: 43:ac:42:2e:41:d4:20:b7:d2:57:9e:09:60:72:33:86:00:45: 93:88:e7:c3:a3:45:94:d4:21:8a:b2:13:d0:9f:de:1a:33:cc: e0:cd:b3:21:a5:ad:a8:61:f9:ae:29:06:7f:d0:d3:e4:c7:77: b7:25:14:b5:7b:fc:53:ad:05:6e:2e:48:32:7e:e1:ad:98:8c: c8:a8:02:1a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZscF63npSef1GUKbOFH12X6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5YjA1MWU4ZTY4MTQ5YjY2MDQ0ZTdkZTRhZTU5ZDczNmU1 MzdhYWEwHhcNMjUxMjE0MDkwMTEyWhcNMjUxMjE1MDkwMTEyWjAzMTEwLwYDVQQD Eyg3YzRmOGU5NzQ3YTkyNzFmOTlmZTQzNGYwYmYzYjI1MzRmNTRmMTlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuoLdQEAORzpeAxoySfZYBVRF7amp xvnQj8ubVIGMnhrf+hi47f1D31ddXD3Ry6BJrwOM8JHYPZ0xDUb8UDHcl6NnZApl AStqOPBVpCypD9MOTnga9V5FOl6s+pi7Z35/HllKwTiCYZPzjqzT9q9LxJe7ip5H 3PB6vCOGhrpQIWG5YWFsMd2dxWXVEA0HUzrL/jqfDMKAFBW1RZOS2+2LE5w4wJkz eNV5I3AeJ3KTOdj6V7KozFEdneHPHz32jYNdcKTzZ7DllrjyWV2/zzDzSgtuUWHv 1E0XF9Q5pCp4qWyNrewJqgx8FTLuXf5eXS9zDi2aPaYTzMqkwzG/8CkBewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHxPjpdHqScfmf5DTwvzslNPVPGfMB8GA1UdIwQY MBaAFMmwUejmgUm2YETn3krlnXNuU3qqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWJCUjZPYUJTYlpnUk9mZVN1V2RjMjVUZXFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9iNzU2YjQtY2U0MS00MWI1LWExZDkt YmI0ZDI0MmVkMmNkLzEveWJCUjZPYUJTYlpnUk9mZVN1V2RjMjVUZXFvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC9iNzU2YjQtY2U0MS00MWI1LWExZDktYmI0ZDI0MmVkMmNk LzEveWJCUjZPYUJTYlpnUk9mZVN1V2RjMjVUZXFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZSlJWS1P vL9ZeMFsbAth3PM2vWEtApJxudkFJcAKES4R1Y1MI+fJcJ0pAaqac5ghYvKS1Sz6 YE/ZrehS+OKABNjkPyHuOO1GcAYfzbznirVcN85G4FWpCuyPifjBsuusOkPNJxL9 vcu1bLbS7w7MuSFFS8lRszK0En5M8lc8AXE2EX3uCuEfSw8wQJ6OByD5ek/s5VaR 7TTfymfiIj60tUmTjlF+sx2DoUIh7eo3abpzfvLEQ6xCLkHUILfSV54JYHIzhgBF k4jnw6NFlNQhirIT0J/eGjPM4M2zIaWtqGH5rikGf9DT5Md3tyUUtXv8U60Fbi5I Mn7hrZiMyKgCGg== -----END CERTIFICATE-----Generated at Sun Dec 14 11:45:00 2025 by rpki-client