This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/c1acd6-230a-4e36-a58f-f555e2e68a10/1/YbU0Q3UDZogVrdk80X0K0-GxqHc.mft File: YbU0Q3UDZogVrdk80X0K0-GxqHc.mft (raw, json) Hash identifier: 5H/d4xVeVM4xPPv8F558X5CDRqybNEsNSH71oSFnXzY= Subject key identifier: 8F:C7:1E:82:2E:8D:97:15:4F:01:2B:EA:78:FB:09:F8:04:06:9A:F1 Authority key identifier: 61:B5:34:43:75:03:66:88:15:AD:D9:3C:D1:7D:0A:D3:E1:B1:A8:77 Certificate issuer: /CN=61b534437503668815add93cd17d0ad3e1b1a877 Certificate serial: 019AEF76166B777AC8C73739149DBC772188 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbU0Q3UDZogVrdk80X0K0-GxqHc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/c1acd6-230a-4e36-a58f-f555e2e68a10/1/YbU0Q3UDZogVrdk80X0K0-GxqHc.mft Manifest number: 1774 Signing time: Fri 05 Dec 2025 17:01:24 +0000 Manifest this update: Fri 05 Dec 2025 17:01:24 +0000 Manifest next update: Sat 06 Dec 2025 17:01:24 +0000 Files and hashes: 1: 9nL5_P24JLKYMiakkVMo6TlgCug.roa (hash: fWkZp6QpsCRR5QNNT0hz/+58v4Qis8o4l0c2LUn7tD0=) 2: Hs5OpoVTxSJfvS3erDXXhGQXJSE.roa (hash: ETk/+dQR/qhcGpGtYBL6fSkfntPwX1tHoXTuoqNreRs=) 3: YbU0Q3UDZogVrdk80X0K0-GxqHc.crl (hash: mS/cDYITU2t61yAhQr4LlyAkDMfJEmV7XKrC4rhj6g4=) 4: cRbQbZI4caSihSJdxBwTOdI7jHI.roa (hash: l064fVVkmmooFHUiz4jiDmBf7OxJUiTNePDan7lSIBE=) 5: ct4uh4Dvn38kuKb2J9OedNnfBrQ.roa (hash: nZxVoJ4prQOuIIhd7SEgU19Z8RQI5zRlz6rYzsDEzRI=) 6: u7siAwXzbgFTEGp6PKjrdqf7Z4A.roa (hash: vJGRmjZ9RvsYFu3lwU4eezlqzVwLgmj9/3K2yZjY284=) 7: y5D4TaXJLkrfa4Of0NlhAIHZfQY.roa (hash: IeCyxZUbWUBk/m+unrT9oFimJ4vs3IvgUDAcRXAQ5dA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/c1acd6-230a-4e36-a58f-f555e2e68a10/1/YbU0Q3UDZogVrdk80X0K0-GxqHc.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/c1acd6-230a-4e36-a58f-f555e2e68a10/1/YbU0Q3UDZogVrdk80X0K0-GxqHc.mft rsync://rpki.ripe.net/repository/DEFAULT/YbU0Q3UDZogVrdk80X0K0-GxqHc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 17:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ef:76:16:6b:77:7a:c8:c7:37:39:14:9d:bc:77:21:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61b534437503668815add93cd17d0ad3e1b1a877 Validity Not Before: Dec 5 17:01:24 2025 GMT Not After : Dec 6 17:01:24 2025 GMT Subject: CN=8fc71e822e8d97154f012bea78fb09f804069af1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:74:dc:17:51:5c:76:3f:89:f9:49:17:ea:89: d8:58:ed:f4:24:4e:90:82:d6:7e:21:35:bb:41:7b: d7:2e:ba:76:10:eb:7b:89:08:2a:cd:06:06:e2:0a: 08:64:0e:7f:01:b7:32:76:da:96:94:1d:ef:c7:4e: e7:eb:6c:e0:76:49:04:55:e7:d4:55:8c:4a:ee:a2: da:7e:62:c9:c5:55:4e:21:e8:ba:95:5f:dd:d7:e4: c7:b5:98:96:be:31:f5:9c:78:ec:ed:62:48:2c:70: f8:c3:10:9b:69:05:61:a3:e6:c1:df:9b:ff:96:b5: d6:35:58:73:1d:71:48:75:2b:ec:15:c5:2a:b8:2f: 96:c0:9b:71:c9:cc:4d:a8:b0:2f:51:b6:02:d0:49: 62:20:af:ce:9c:d6:3d:d8:4b:77:50:8f:53:15:5b: 44:c6:20:59:df:b0:79:00:41:79:44:a0:d9:11:55: ac:39:a0:9b:d6:77:8f:50:1b:9b:3c:ec:b4:92:eb: a2:cb:58:c5:99:38:77:9e:a1:81:ed:67:d4:95:82: 40:9a:cd:97:17:cc:99:d1:97:dd:d8:b4:b0:7c:b0: a8:af:3a:22:f5:57:a8:14:84:c0:6d:34:b2:28:87: 94:fa:be:f7:90:18:1d:56:36:b2:a3:7e:a3:f8:f3: 28:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:C7:1E:82:2E:8D:97:15:4F:01:2B:EA:78:FB:09:F8:04:06:9A:F1 X509v3 Authority Key Identifier: keyid:61:B5:34:43:75:03:66:88:15:AD:D9:3C:D1:7D:0A:D3:E1:B1:A8:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbU0Q3UDZogVrdk80X0K0-GxqHc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/c1acd6-230a-4e36-a58f-f555e2e68a10/1/YbU0Q3UDZogVrdk80X0K0-GxqHc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/c1acd6-230a-4e36-a58f-f555e2e68a10/1/YbU0Q3UDZogVrdk80X0K0-GxqHc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:8f:bc:1a:69:65:58:df:28:53:77:ac:53:28:c8:b4:03:67: 61:1a:41:cf:8b:3d:b8:61:fb:7f:a9:61:82:98:fb:34:30:b6: a8:1f:a3:16:d8:f1:3e:e5:5b:5e:b7:7c:53:42:da:73:c7:c4: 65:41:19:13:91:69:97:25:23:5b:30:55:32:44:df:eb:67:da: 54:bf:8f:a6:19:a8:04:7e:80:da:8e:da:a9:5f:13:8c:43:7a: d3:dc:89:40:27:92:a2:4e:83:f8:2c:9e:1c:8b:e9:c8:f4:e5: 71:9f:de:b4:cd:85:5e:18:72:d2:17:68:95:14:d6:71:16:af: 30:45:21:9b:51:97:fa:97:94:a2:19:2d:b8:1f:31:b9:ac:47: 89:29:f0:d6:d6:05:3f:48:f6:fa:da:80:78:be:44:7d:7a:c8: 29:36:1d:ac:4a:d2:17:54:0b:67:0d:31:fc:dc:61:2a:2f:6d: 78:a1:3b:3c:5e:f5:85:2c:e3:f0:36:99:58:45:bf:12:21:93: a7:8d:22:b6:56:16:87:4d:24:6a:bb:17:61:88:5d:6e:2f:b5: 6e:75:2b:6d:b4:67:fc:f4:d9:e7:2c:2b:5f:91:dd:7a:cd:6c: 0b:93:cb:cd:4c:df:70:c1:b8:38:71:08:b8:71:0d:86:74:23: 99:2d:f7:d6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrvdhZrd3rIxzc5FJ28dyGIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxYjUzNDQzNzUwMzY2ODgxNWFkZDkzY2QxN2QwYWQzZTFi MWE4NzcwHhcNMjUxMjA1MTcwMTI0WhcNMjUxMjA2MTcwMTI0WjAzMTEwLwYDVQQD Eyg4ZmM3MWU4MjJlOGQ5NzE1NGYwMTJiZWE3OGZiMDlmODA0MDY5YWYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmXTcF1Fcdj+J+UkX6onYWO30JE6Q gtZ+ITW7QXvXLrp2EOt7iQgqzQYG4goIZA5/AbcydtqWlB3vx07n62zgdkkEVefU VYxK7qLafmLJxVVOIei6lV/d1+THtZiWvjH1nHjs7WJILHD4wxCbaQVho+bB35v/ lrXWNVhzHXFIdSvsFcUquC+WwJtxycxNqLAvUbYC0EliIK/OnNY92Et3UI9TFVtE xiBZ37B5AEF5RKDZEVWsOaCb1nePUBubPOy0kuuiy1jFmTh3nqGB7WfUlYJAms2X F8yZ0Zfd2LSwfLCorzoi9VeoFITAbTSyKIeU+r73kBgdVjayo36j+PMoXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI/HHoIujZcVTwEr6nj7CfgEBprxMB8GA1UdIwQY MBaAFGG1NEN1A2aIFa3ZPNF9CtPhsah3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWWJVMFEzVURab2dWcmRrODBYMEswLUd4cUhjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9jMWFjZDYtMjMwYS00ZTM2LWE1OGYt ZjU1NWUyZTY4YTEwLzEvWWJVMFEzVURab2dWcmRrODBYMEswLUd4cUhjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS9jMWFjZDYtMjMwYS00ZTM2LWE1OGYtZjU1NWUyZTY4YTEw LzEvWWJVMFEzVURab2dWcmRrODBYMEswLUd4cUhjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG4+8Gmll WN8oU3esUyjItANnYRpBz4s9uGH7f6lhgpj7NDC2qB+jFtjxPuVbXrd8U0Lac8fE ZUEZE5FplyUjWzBVMkTf62faVL+PphmoBH6A2o7aqV8TjEN609yJQCeSok6D+Cye HIvpyPTlcZ/etM2FXhhy0hdolRTWcRavMEUhm1GX+peUohktuB8xuaxHiSnw1tYF P0j2+tqAeL5EfXrIKTYdrErSF1QLZw0x/NxhKi9teKE7PF71hSzj8DaZWEW/EiGT p40itlYWh00karsXYYhdbi+1bnUrbbRn/PTZ5ywrX5Hdes1sC5PLzUzfcMG4OHEI uHENhnQjmS331g== -----END CERTIFICATE-----Generated at Sat Dec 6 02:47:06 2025 by rpki-client