This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/5e29b5-f217-4b6b-8d2f-8973b2d7062c/1/ybcNl-3yjHYHbA8Gm1K82OJq4L0.mft File: ybcNl-3yjHYHbA8Gm1K82OJq4L0.mft (raw, json) Hash identifier: RcZwl0FmXKI/Vtc9MDSinU3ggD+DOSRN2jBEdQ/6E6U= Subject key identifier: 19:B6:F5:59:25:38:1A:B4:AF:D5:58:66:FD:0E:5D:84:BD:CD:86:74 Authority key identifier: C9:B7:0D:97:ED:F2:8C:76:07:6C:0F:06:9B:52:BC:D8:E2:6A:E0:BD Certificate issuer: /CN=c9b70d97edf28c76076c0f069b52bcd8e26ae0bd Certificate serial: 019B2E54FD93C14A52D5CDEF97C9DD080FC6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ybcNl-3yjHYHbA8Gm1K82OJq4L0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/5e29b5-f217-4b6b-8d2f-8973b2d7062c/1/ybcNl-3yjHYHbA8Gm1K82OJq4L0.mft Manifest number: 177E Signing time: Wed 17 Dec 2025 22:01:20 +0000 Manifest this update: Wed 17 Dec 2025 22:01:20 +0000 Manifest next update: Thu 18 Dec 2025 22:01:20 +0000 Files and hashes: 1: CA1FNHSnELY2j7gmDHjDS2dsoX8.roa (hash: cFZtRXhk5SHYLVuLELTuEuyCvo+k9H5qi+XN9Dm3gEY=) 2: ybcNl-3yjHYHbA8Gm1K82OJq4L0.crl (hash: nUfAjQfYaTHVMvW1nvmTCE0dzHGXkpDb7ryF6OIz074=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/5e29b5-f217-4b6b-8d2f-8973b2d7062c/1/ybcNl-3yjHYHbA8Gm1K82OJq4L0.crl rsync://rpki.ripe.net/repository/DEFAULT/51/5e29b5-f217-4b6b-8d2f-8973b2d7062c/1/ybcNl-3yjHYHbA8Gm1K82OJq4L0.mft rsync://rpki.ripe.net/repository/DEFAULT/ybcNl-3yjHYHbA8Gm1K82OJq4L0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 22:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2e:54:fd:93:c1:4a:52:d5:cd:ef:97:c9:dd:08:0f:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c9b70d97edf28c76076c0f069b52bcd8e26ae0bd Validity Not Before: Dec 17 22:01:20 2025 GMT Not After : Dec 18 22:01:20 2025 GMT Subject: CN=19b6f55925381ab4afd55866fd0e5d84bdcd8674 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:67:43:9f:4e:2e:95:e2:92:9e:43:a2:04:af: 2d:85:72:db:bf:67:37:2a:6c:02:a6:42:3d:61:a8: 69:b2:ca:35:dd:93:bd:b3:a0:7b:46:3f:ad:8f:6b: 51:df:7b:b3:a2:34:ed:d1:65:ef:0e:1e:04:90:71: 49:13:c6:b7:b8:3a:84:87:ea:62:88:91:1e:ed:64: 5d:69:4a:00:6a:3f:28:5e:da:34:b0:c6:7c:f2:01: d5:fc:0a:cf:33:39:4d:2f:6c:1d:86:e8:bb:44:88: df:3e:d8:0c:ee:a9:06:6d:5b:35:92:19:0d:d1:47: 60:bb:99:0a:1c:ff:75:8a:8d:08:b0:75:35:29:5c: 71:8e:f3:ec:ab:37:75:88:b7:c2:fb:d0:23:aa:45: fb:4d:3e:d0:43:b9:a2:74:bb:60:d8:d2:af:cc:63: 01:3f:a7:96:ad:2a:f5:dc:bd:12:5a:e5:0a:19:28: 15:d7:9b:ed:b6:3e:ab:e5:af:f1:e3:d7:96:c3:15: 5a:96:0f:8f:29:fd:df:02:fe:bb:bc:10:6f:20:79: 0f:a8:7e:80:27:c8:85:06:6b:14:f0:47:51:d5:7c: 6f:6f:11:ec:29:e7:e4:ff:e1:ab:4c:e1:0d:99:5e: 30:0f:71:aa:74:c0:a7:21:e0:c0:cc:42:74:a0:d8: 6a:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:B6:F5:59:25:38:1A:B4:AF:D5:58:66:FD:0E:5D:84:BD:CD:86:74 X509v3 Authority Key Identifier: keyid:C9:B7:0D:97:ED:F2:8C:76:07:6C:0F:06:9B:52:BC:D8:E2:6A:E0:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ybcNl-3yjHYHbA8Gm1K82OJq4L0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/5e29b5-f217-4b6b-8d2f-8973b2d7062c/1/ybcNl-3yjHYHbA8Gm1K82OJq4L0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/5e29b5-f217-4b6b-8d2f-8973b2d7062c/1/ybcNl-3yjHYHbA8Gm1K82OJq4L0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:ab:b0:3c:d9:ee:9a:86:51:d2:00:ae:b6:db:06:90:8e:bc: dd:31:7d:ab:7a:b4:a8:ca:4a:30:03:03:95:3e:c8:96:9c:70: 7a:14:35:59:86:41:07:95:e0:95:df:56:32:a4:b9:af:c3:9d: a4:d3:9a:10:a3:15:8a:7e:22:11:2a:88:8b:c3:c1:f7:d0:0a: 70:f3:0a:f0:fb:04:6b:fd:cd:b9:05:b8:b9:ea:6b:f3:9d:34: e8:b4:8f:e7:35:12:84:84:97:08:e6:95:f1:58:5d:a6:54:dc: 52:1c:00:55:36:15:44:86:24:99:48:80:e0:85:6c:b3:6d:d9: 01:2c:6a:76:73:93:44:3f:e4:4f:0b:c8:01:63:1d:bc:14:7f: f6:81:31:04:ee:0d:ab:26:df:b5:af:7b:09:8b:bc:3b:cf:4d: 0c:23:a5:e6:e6:c5:12:1e:54:78:e9:f3:70:c6:0b:f3:be:0b: 28:89:17:62:10:27:bd:b5:9c:09:08:ed:98:e7:e6:7f:07:2c: a5:e6:17:5a:88:9c:ee:1a:f6:03:e9:bc:27:f1:f3:50:5f:e9: 54:e7:11:20:a5:d8:e2:e8:c3:f0:c0:f6:63:96:48:50:93:12: ea:f1:37:e3:4f:07:ef:d2:41:4c:d5:30:90:e4:fb:2e:52:dc: 45:b3:a1:4a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsuVP2TwUpS1c3vl8ndCA/GMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5YjcwZDk3ZWRmMjhjNzYwNzZjMGYwNjliNTJiY2Q4ZTI2 YWUwYmQwHhcNMjUxMjE3MjIwMTIwWhcNMjUxMjE4MjIwMTIwWjAzMTEwLwYDVQQD EygxOWI2ZjU1OTI1MzgxYWI0YWZkNTU4NjZmZDBlNWQ4NGJkY2Q4Njc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyGdDn04uleKSnkOiBK8thXLbv2c3 KmwCpkI9Yahpsso13ZO9s6B7Rj+tj2tR33uzojTt0WXvDh4EkHFJE8a3uDqEh+pi iJEe7WRdaUoAaj8oXto0sMZ88gHV/ArPMzlNL2wdhui7RIjfPtgM7qkGbVs1khkN 0Udgu5kKHP91io0IsHU1KVxxjvPsqzd1iLfC+9AjqkX7TT7QQ7midLtg2NKvzGMB P6eWrSr13L0SWuUKGSgV15vttj6r5a/x49eWwxValg+PKf3fAv67vBBvIHkPqH6A J8iFBmsU8EdR1XxvbxHsKefk/+GrTOENmV4wD3GqdMCnIeDAzEJ0oNhqGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBm29VklOBq0r9VYZv0OXYS9zYZ0MB8GA1UdIwQY MBaAFMm3DZft8ox2B2wPBptSvNjiauC9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWJjTmwtM3lqSFlIYkE4R20xSzgyT0pxNEwwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS81ZTI5YjUtZjIxNy00YjZiLThkMmYt ODk3M2IyZDcwNjJjLzEveWJjTmwtM3lqSFlIYkE4R20xSzgyT0pxNEwwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS81ZTI5YjUtZjIxNy00YjZiLThkMmYtODk3M2IyZDcwNjJj LzEveWJjTmwtM3lqSFlIYkE4R20xSzgyT0pxNEwwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATKuwPNnu moZR0gCuttsGkI683TF9q3q0qMpKMAMDlT7IlpxwehQ1WYZBB5Xgld9WMqS5r8Od pNOaEKMVin4iESqIi8PB99AKcPMK8PsEa/3NuQW4uepr85006LSP5zUShISXCOaV 8VhdplTcUhwAVTYVRIYkmUiA4IVss23ZASxqdnOTRD/kTwvIAWMdvBR/9oExBO4N qybfta97CYu8O89NDCOl5ubFEh5UeOnzcMYL874LKIkXYhAnvbWcCQjtmOfmfwcs peYXWoic7hr2A+m8J/HzUF/pVOcRIKXY4ujD8MD2Y5ZIUJMS6vE3408H79JBTNUw kOT7LlLcRbOhSg== -----END CERTIFICATE-----Generated at Thu Dec 18 06:49:15 2025 by rpki-client