This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/c0e7a1-06f5-4ca0-8210-ea6ed29cab5e/1/YbgkuFq6e8NRKxIUs4XeVw-ylL8.mft File: YbgkuFq6e8NRKxIUs4XeVw-ylL8.mft (raw, json) Hash identifier: 1zAkF679rzJprAPeIbq68jBY/NPqLVi4B2wGLDLrBVU= Subject key identifier: 7E:F9:6E:7B:DA:D5:55:D9:9D:8B:B7:7A:65:96:67:73:DA:AF:EA:5F Authority key identifier: 61:B8:24:B8:5A:BA:7B:C3:51:2B:12:14:B3:85:DE:57:0F:B2:94:BF Certificate issuer: /CN=61b824b85aba7bc3512b1214b385de570fb294bf Certificate serial: 019B54BD8FC9CE2C6C5C3123F9872D4951B4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbgkuFq6e8NRKxIUs4XeVw-ylL8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/c0e7a1-06f5-4ca0-8210-ea6ed29cab5e/1/YbgkuFq6e8NRKxIUs4XeVw-ylL8.mft Manifest number: 0D90 Signing time: Thu 25 Dec 2025 09:01:07 +0000 Manifest this update: Thu 25 Dec 2025 09:01:07 +0000 Manifest next update: Fri 26 Dec 2025 09:01:07 +0000 Files and hashes: 1: YbgkuFq6e8NRKxIUs4XeVw-ylL8.crl (hash: 84tSGZz+2y+IC0OoFWhyodBkNzm2KzmrCadTELxUjPQ=) 2: b9-Xe57-P3gr_wKG9Fdk9x-8_jI.roa (hash: 6yS6JDMkNFqPC6IhCp7cvJnugVcw1WsjLczS6bmB5js=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/c0e7a1-06f5-4ca0-8210-ea6ed29cab5e/1/YbgkuFq6e8NRKxIUs4XeVw-ylL8.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/c0e7a1-06f5-4ca0-8210-ea6ed29cab5e/1/YbgkuFq6e8NRKxIUs4XeVw-ylL8.mft rsync://rpki.ripe.net/repository/DEFAULT/YbgkuFq6e8NRKxIUs4XeVw-ylL8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 03:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:54:bd:8f:c9:ce:2c:6c:5c:31:23:f9:87:2d:49:51:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61b824b85aba7bc3512b1214b385de570fb294bf Validity Not Before: Dec 25 09:01:07 2025 GMT Not After : Dec 26 09:01:07 2025 GMT Subject: CN=7ef96e7bdad555d99d8bb77a65966773daafea5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:7e:c3:7c:9e:a7:8a:60:33:86:14:de:06:08: fc:1f:c0:83:26:ee:e2:03:ae:62:3d:c4:8f:c1:ea: f6:5d:c3:5d:fb:f6:10:93:63:ff:07:67:ac:10:48: a1:ef:69:61:81:f1:1f:1e:8f:ed:2e:62:21:34:be: 97:b7:fc:8a:34:72:c7:7c:e2:c4:fc:a3:db:63:e6: 0f:e6:1e:c0:f0:5d:52:00:d2:42:54:41:32:d4:20: ca:c3:a8:5e:9a:8d:55:03:33:31:64:2c:df:d8:11: 7b:a9:94:1e:43:74:1c:8b:54:80:3c:8e:94:fe:e0: c3:13:e1:d7:bb:91:60:56:63:a9:15:42:65:30:f7: d2:3c:58:c0:c4:0d:7c:c0:d7:3b:4e:d6:44:62:99: 4c:6d:3e:30:e4:ad:0f:5c:ab:f7:61:58:bf:4e:a5: dc:52:1a:74:04:05:8f:e1:29:79:68:eb:3a:10:82: 77:a5:cb:d1:a9:83:d6:a7:95:a5:b1:78:c8:45:af: c8:4b:f8:a8:86:d0:ca:0c:d5:91:50:c2:73:e8:13: 37:9c:ca:f6:5a:03:6d:de:b2:54:ed:a9:fb:71:8e: 43:f0:96:3d:93:d4:4c:9f:46:ee:e1:10:4f:81:5d: 21:f0:d0:05:4a:ba:6c:49:d7:15:ec:3b:0d:fd:47: 01:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:F9:6E:7B:DA:D5:55:D9:9D:8B:B7:7A:65:96:67:73:DA:AF:EA:5F X509v3 Authority Key Identifier: keyid:61:B8:24:B8:5A:BA:7B:C3:51:2B:12:14:B3:85:DE:57:0F:B2:94:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbgkuFq6e8NRKxIUs4XeVw-ylL8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/c0e7a1-06f5-4ca0-8210-ea6ed29cab5e/1/YbgkuFq6e8NRKxIUs4XeVw-ylL8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/c0e7a1-06f5-4ca0-8210-ea6ed29cab5e/1/YbgkuFq6e8NRKxIUs4XeVw-ylL8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:6e:ce:de:08:8d:06:ea:2d:a1:c4:86:01:dd:60:41:a5:9a: 0c:c9:97:a2:6f:1c:67:fd:33:51:5a:ad:b0:2a:ea:a2:59:8a: 8d:7b:3f:f0:a4:ee:16:45:ec:14:36:5b:c9:92:64:80:a0:04: 3f:48:e8:b8:dc:67:b3:bd:ba:be:f9:77:24:07:33:66:bd:d5: 02:bf:4b:68:21:bd:95:87:d3:fe:41:f0:cd:55:6d:dd:d6:e2: b1:80:47:a1:55:9f:dc:50:36:1b:dc:ed:9b:5a:f1:c9:46:a8: a6:31:5a:c9:8e:ea:3c:b5:78:ee:cf:fd:04:1c:45:be:bd:8c: 36:5b:9c:45:22:90:26:38:a6:2b:31:70:5e:64:2b:68:78:95: bf:40:2d:2f:4e:43:e0:38:fb:e2:ea:f1:e4:db:e2:5e:ac:9d: 68:a2:f5:4b:cb:3b:5f:c1:c6:0a:88:79:a0:48:00:79:70:ca: ca:6b:86:f5:fa:c2:da:87:41:f4:87:ef:e7:ff:3e:40:fd:07: e1:61:1f:f0:28:eb:ab:5e:f0:9c:1d:79:a8:0b:c2:69:4f:4d: 3a:07:28:79:20:7a:74:31:38:4f:a1:74:07:b3:cb:58:94:92: a2:8f:c0:23:a9:4c:4c:09:0d:0a:66:2f:c5:be:54:0b:75:19: 09:33:42:1d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtUvY/JzixsXDEj+YctSVG0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxYjgyNGI4NWFiYTdiYzM1MTJiMTIxNGIzODVkZTU3MGZi Mjk0YmYwHhcNMjUxMjI1MDkwMTA3WhcNMjUxMjI2MDkwMTA3WjAzMTEwLwYDVQQD Eyg3ZWY5NmU3YmRhZDU1NWQ5OWQ4YmI3N2E2NTk2Njc3M2RhYWZlYTVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp37DfJ6nimAzhhTeBgj8H8CDJu7i A65iPcSPwer2XcNd+/YQk2P/B2esEEih72lhgfEfHo/tLmIhNL6Xt/yKNHLHfOLE /KPbY+YP5h7A8F1SANJCVEEy1CDKw6hemo1VAzMxZCzf2BF7qZQeQ3Qci1SAPI6U /uDDE+HXu5FgVmOpFUJlMPfSPFjAxA18wNc7TtZEYplMbT4w5K0PXKv3YVi/TqXc Uhp0BAWP4Sl5aOs6EIJ3pcvRqYPWp5WlsXjIRa/IS/iohtDKDNWRUMJz6BM3nMr2 WgNt3rJU7an7cY5D8JY9k9RMn0bu4RBPgV0h8NAFSrpsSdcV7DsN/UcBPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH75bnva1VXZnYu3emWWZ3Par+pfMB8GA1UdIwQY MBaAFGG4JLhaunvDUSsSFLOF3lcPspS/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWWJna3VGcTZlOE5SS3hJVXM0WGVWdy15bEw4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS9jMGU3YTEtMDZmNS00Y2EwLTgyMTAt ZWE2ZWQyOWNhYjVlLzEvWWJna3VGcTZlOE5SS3hJVXM0WGVWdy15bEw4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS9jMGU3YTEtMDZmNS00Y2EwLTgyMTAtZWE2ZWQyOWNhYjVl LzEvWWJna3VGcTZlOE5SS3hJVXM0WGVWdy15bEw4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQG7O3giN BuotocSGAd1gQaWaDMmXom8cZ/0zUVqtsCrqolmKjXs/8KTuFkXsFDZbyZJkgKAE P0jouNxns726vvl3JAczZr3VAr9LaCG9lYfT/kHwzVVt3dbisYBHoVWf3FA2G9zt m1rxyUaopjFayY7qPLV47s/9BBxFvr2MNlucRSKQJjimKzFwXmQraHiVv0AtL05D 4Dj74urx5NviXqydaKL1S8s7X8HGCoh5oEgAeXDKymuG9frC2odB9Ifv5/8+QP0H 4WEf8Cjrq17wnB15qAvCaU9NOgcoeSB6dDE4T6F0B7PLWJSSoo/AI6lMTAkNCmYv xb5UC3UZCTNCHQ== -----END CERTIFICATE-----Generated at Thu Dec 25 11:00:32 2025 by rpki-client