This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/fb2a45-8d94-4a8d-bcb0-6191b9d0cda3/1/YbHjHAn-gm_k15Ln-ohV4K05NCo.mft File: YbHjHAn-gm_k15Ln-ohV4K05NCo.mft (raw, json) Hash identifier: UqZEoU/DnVg3pN6HZMqoDlGqhHnhG/W+Mc0CGt6n990= Subject key identifier: 9F:15:E3:EC:6C:11:32:0F:86:CA:76:E2:2D:86:78:A9:19:0D:ED:85 Authority key identifier: 61:B1:E3:1C:09:FE:82:6F:E4:D7:92:E7:FA:88:55:E0:AD:39:34:2A Certificate issuer: /CN=61b1e31c09fe826fe4d792e7fa8855e0ad39342a Certificate serial: 019B3D59B102B9C8F3B9685A6BC08FFD26CD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbHjHAn-gm_k15Ln-ohV4K05NCo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/fb2a45-8d94-4a8d-bcb0-6191b9d0cda3/1/YbHjHAn-gm_k15Ln-ohV4K05NCo.mft Manifest number: 1786 Signing time: Sat 20 Dec 2025 20:00:46 +0000 Manifest this update: Sat 20 Dec 2025 20:00:46 +0000 Manifest next update: Sun 21 Dec 2025 20:00:46 +0000 Files and hashes: 1: 6NZRnUE5rHquhh6nv9A14s2aRkA.roa (hash: BDIznY+oSrAehNVVW8SN5zZkQxk6NfrwDHMlr9/Gl2o=) 2: YbHjHAn-gm_k15Ln-ohV4K05NCo.crl (hash: aNjcIGjl5LehhO6HXD/FmBdo8KX/7B1iOW5LhjWJ578=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/fb2a45-8d94-4a8d-bcb0-6191b9d0cda3/1/YbHjHAn-gm_k15Ln-ohV4K05NCo.crl rsync://rpki.ripe.net/repository/DEFAULT/37/fb2a45-8d94-4a8d-bcb0-6191b9d0cda3/1/YbHjHAn-gm_k15Ln-ohV4K05NCo.mft rsync://rpki.ripe.net/repository/DEFAULT/YbHjHAn-gm_k15Ln-ohV4K05NCo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:59:b1:02:b9:c8:f3:b9:68:5a:6b:c0:8f:fd:26:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61b1e31c09fe826fe4d792e7fa8855e0ad39342a Validity Not Before: Dec 20 20:00:46 2025 GMT Not After : Dec 21 20:00:46 2025 GMT Subject: CN=9f15e3ec6c11320f86ca76e22d8678a9190ded85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:40:09:3b:51:c6:ed:4a:11:3c:a0:97:94:06: 8e:a7:9f:96:59:21:16:70:55:cb:d2:44:e9:4f:27: 71:e5:a7:cc:27:cc:b3:0f:59:68:e3:1d:78:82:df: 6e:54:b5:c3:4a:6d:b2:2c:98:b1:c4:87:3e:76:c1: a1:39:05:bc:7c:b3:59:e5:c5:ef:47:05:82:12:6c: 34:50:f7:2a:4f:8d:8c:47:77:a0:10:ca:95:e2:59: a2:50:50:b2:df:7a:45:69:4c:6e:fb:a1:94:37:89: 10:61:b8:59:6e:ad:77:98:78:34:df:db:e1:98:10: 55:83:81:c6:29:99:df:e5:e3:44:94:31:76:4d:46: 71:d5:dc:0a:93:af:7a:91:4a:a4:1d:35:b2:85:38: 4a:b3:29:50:f7:20:c7:8e:c8:cb:1a:b6:a8:a2:5c: 57:3f:b6:8c:be:60:4b:f2:29:dd:0c:07:ed:e1:19: b2:48:19:cf:cd:20:df:c8:4e:75:c1:8e:d2:e0:e8: 16:94:f9:31:f6:eb:89:7f:c3:88:d8:e0:d5:31:5e: ba:58:0d:45:46:b3:80:82:7e:52:32:94:c5:d4:d0: 3a:37:64:4b:03:18:20:bd:dd:58:08:6b:81:02:91: b3:98:34:a4:0f:5e:1f:89:be:34:a9:d0:2b:6c:93: 07:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:15:E3:EC:6C:11:32:0F:86:CA:76:E2:2D:86:78:A9:19:0D:ED:85 X509v3 Authority Key Identifier: keyid:61:B1:E3:1C:09:FE:82:6F:E4:D7:92:E7:FA:88:55:E0:AD:39:34:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbHjHAn-gm_k15Ln-ohV4K05NCo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/fb2a45-8d94-4a8d-bcb0-6191b9d0cda3/1/YbHjHAn-gm_k15Ln-ohV4K05NCo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/37/fb2a45-8d94-4a8d-bcb0-6191b9d0cda3/1/YbHjHAn-gm_k15Ln-ohV4K05NCo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:15:19:51:1a:7e:4a:b4:11:96:01:04:82:e3:64:c7:12:e2: 01:31:a1:83:8d:90:4c:0c:d4:a0:cb:77:d0:0c:23:57:35:52: d4:17:3d:ed:a2:6d:4c:05:8a:93:c7:34:8a:21:59:f9:f4:cd: 9e:83:d0:b9:83:3b:dd:7e:25:a3:6e:9b:45:2c:4f:c5:5d:25: 97:75:6f:71:60:0c:8a:e2:d0:88:28:cb:ab:a9:46:96:9d:14: 4d:f1:34:c0:11:ae:04:46:37:18:a6:7c:03:99:40:f3:8a:0f: e5:0b:de:77:d1:97:b0:57:f6:f9:6b:f5:28:74:c2:ac:18:e6: 1b:bf:78:01:10:6d:84:33:a9:65:ee:40:a4:53:54:4c:1d:dc: 63:10:3a:8b:4c:3d:cb:b8:a9:c5:39:7f:b9:e2:41:4d:cf:50: 47:a1:1d:e1:b6:ab:0f:07:d7:8d:97:6f:47:b5:b5:6d:d9:77: f1:50:c8:92:a3:c9:0a:bc:a5:81:d1:34:70:13:ac:b2:6b:bf: c8:de:1f:ab:7d:c8:c5:06:9b:47:2a:ca:6d:c7:1e:c8:81:90: 72:79:9d:84:1e:a1:4b:ee:f6:57:e0:23:df:d4:ff:d5:3b:66: 3e:b7:6b:91:4b:b1:db:91:75:7b:3c:c7:f9:b4:c3:08:0a:bd: e3:b3:91:03 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9WbECucjzuWhaa8CP/SbNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxYjFlMzFjMDlmZTgyNmZlNGQ3OTJlN2ZhODg1NWUwYWQz OTM0MmEwHhcNMjUxMjIwMjAwMDQ2WhcNMjUxMjIxMjAwMDQ2WjAzMTEwLwYDVQQD Eyg5ZjE1ZTNlYzZjMTEzMjBmODZjYTc2ZTIyZDg2NzhhOTE5MGRlZDg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAykAJO1HG7UoRPKCXlAaOp5+WWSEW cFXL0kTpTydx5afMJ8yzD1lo4x14gt9uVLXDSm2yLJixxIc+dsGhOQW8fLNZ5cXv RwWCEmw0UPcqT42MR3egEMqV4lmiUFCy33pFaUxu+6GUN4kQYbhZbq13mHg039vh mBBVg4HGKZnf5eNElDF2TUZx1dwKk696kUqkHTWyhThKsylQ9yDHjsjLGraoolxX P7aMvmBL8indDAft4RmySBnPzSDfyE51wY7S4OgWlPkx9uuJf8OI2ODVMV66WA1F RrOAgn5SMpTF1NA6N2RLAxggvd1YCGuBApGzmDSkD14fib40qdArbJMHzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ8V4+xsETIPhsp24i2GeKkZDe2FMB8GA1UdIwQY MBaAFGGx4xwJ/oJv5NeS5/qIVeCtOTQqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWWJIakhBbi1nbV9rMTVMbi1vaFY0SzA1TkNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy9mYjJhNDUtOGQ5NC00YThkLWJjYjAt NjE5MWI5ZDBjZGEzLzEvWWJIakhBbi1nbV9rMTVMbi1vaFY0SzA1TkNvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNy9mYjJhNDUtOGQ5NC00YThkLWJjYjAtNjE5MWI5ZDBjZGEz LzEvWWJIakhBbi1nbV9rMTVMbi1vaFY0SzA1TkNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAehUZURp+ SrQRlgEEguNkxxLiATGhg42QTAzUoMt30AwjVzVS1Bc97aJtTAWKk8c0iiFZ+fTN noPQuYM73X4lo26bRSxPxV0ll3VvcWAMiuLQiCjLq6lGlp0UTfE0wBGuBEY3GKZ8 A5lA84oP5Qved9GXsFf2+Wv1KHTCrBjmG794ARBthDOpZe5ApFNUTB3cYxA6i0w9 y7ipxTl/ueJBTc9QR6Ed4barDwfXjZdvR7W1bdl38VDIkqPJCrylgdE0cBOssmu/ yN4fq33IxQabRyrKbcceyIGQcnmdhB6hS+72V+Aj39T/1TtmPrdrkUux25F1ezzH +bTDCAq947ORAw== -----END CERTIFICATE-----Generated at Sun Dec 21 04:06:32 2025 by rpki-client