This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/7f2c07-cef5-42f4-8f32-8631fbf5c620/1/YbBXiaToJL6BA953DcJcWT7z_co.mft File: YbBXiaToJL6BA953DcJcWT7z_co.mft (raw, json) Hash identifier: jERW8X/4cwJJFKGFWOEJJ7QS3Y4LmkRR8uuY0uYC8KA= Subject key identifier: CF:44:89:7C:F1:90:23:53:9A:D8:9D:E7:1C:5C:CC:60:12:23:3A:33 Authority key identifier: 61:B0:57:89:A4:E8:24:BE:81:03:DE:77:0D:C2:5C:59:3E:F3:FD:CA Certificate issuer: /CN=61b05789a4e824be8103de770dc25c593ef3fdca Certificate serial: 019B41DB2F920B55402E745FA3A3DFA5F6BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbBXiaToJL6BA953DcJcWT7z_co.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/7f2c07-cef5-42f4-8f32-8631fbf5c620/1/YbBXiaToJL6BA953DcJcWT7z_co.mft Manifest number: 1338 Signing time: Sun 21 Dec 2025 17:00:42 +0000 Manifest this update: Sun 21 Dec 2025 17:00:42 +0000 Manifest next update: Mon 22 Dec 2025 17:00:42 +0000 Files and hashes: 1: YbBXiaToJL6BA953DcJcWT7z_co.crl (hash: c3WtCDUuoYF5qz2P42h1BYRy8/XXMfQENyZ6yprSQNo=) 2: shQWrGUmL_hnxXrykLqgxjUrJSo.roa (hash: WyhgYBiNi+KPH14FenrkvjOQfAHnL6lB02jl9DUrbbs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/7f2c07-cef5-42f4-8f32-8631fbf5c620/1/YbBXiaToJL6BA953DcJcWT7z_co.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/7f2c07-cef5-42f4-8f32-8631fbf5c620/1/YbBXiaToJL6BA953DcJcWT7z_co.mft rsync://rpki.ripe.net/repository/DEFAULT/YbBXiaToJL6BA953DcJcWT7z_co.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 17:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:db:2f:92:0b:55:40:2e:74:5f:a3:a3:df:a5:f6:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61b05789a4e824be8103de770dc25c593ef3fdca Validity Not Before: Dec 21 17:00:42 2025 GMT Not After : Dec 22 17:00:42 2025 GMT Subject: CN=cf44897cf19023539ad89de71c5ccc6012233a33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:f9:15:0d:55:5a:cd:3e:b0:d3:e7:30:1f:7d: a4:02:c3:5a:2b:7b:8e:69:65:02:5d:ec:1a:0c:3e: 4f:31:02:9e:0e:1a:00:2e:a9:55:fc:71:b2:30:fc: 05:fb:f1:b9:25:54:05:53:c5:5b:49:f1:14:86:01: 9b:6d:e5:94:18:ed:db:9c:50:7b:43:45:99:f8:f1: 4e:ef:37:c4:ba:5f:6e:2c:fd:c4:bd:c7:3d:f9:b6: c4:17:2b:e4:e4:71:30:87:26:cf:65:2e:2a:14:25: f9:ae:cb:1f:9e:25:57:03:b7:e9:69:c2:cc:4e:a4: da:4e:35:2c:d8:e8:35:f8:ec:1f:76:a6:40:37:33: 91:8f:98:d6:f2:b6:02:0c:e6:06:5e:d1:b4:ca:c4: 14:fe:60:a2:21:88:b5:7a:62:cb:b0:57:d9:b5:24: 92:bb:f5:14:ea:a4:5d:bb:b0:72:61:5e:eb:04:15: 08:5c:e5:d3:99:99:ab:72:95:84:b0:5a:f7:ba:21: a7:19:04:0b:f9:bc:1d:5e:9e:f8:5f:22:cf:17:e0: 32:76:09:57:1d:ee:06:19:33:28:2c:46:e0:7d:86: b3:21:47:e1:d6:d1:c5:8d:fc:fe:a8:c3:27:76:a9: 28:b8:f6:c6:f7:41:2c:8a:1f:2a:a4:b4:e0:f6:86: f7:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:44:89:7C:F1:90:23:53:9A:D8:9D:E7:1C:5C:CC:60:12:23:3A:33 X509v3 Authority Key Identifier: keyid:61:B0:57:89:A4:E8:24:BE:81:03:DE:77:0D:C2:5C:59:3E:F3:FD:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbBXiaToJL6BA953DcJcWT7z_co.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7f2c07-cef5-42f4-8f32-8631fbf5c620/1/YbBXiaToJL6BA953DcJcWT7z_co.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7f2c07-cef5-42f4-8f32-8631fbf5c620/1/YbBXiaToJL6BA953DcJcWT7z_co.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:10:5b:b8:d7:38:31:80:dd:b6:ec:1b:b8:94:e6:82:15:70: 07:4c:96:9a:7b:42:cf:91:2e:79:14:a0:a0:d5:1c:bb:69:fe: 28:12:92:1b:e8:0e:c3:be:dc:db:eb:f0:90:23:25:eb:3a:8b: ba:2f:84:92:e2:58:af:ef:56:6c:fa:08:9f:44:cd:7c:1c:8b: b3:7d:45:65:8d:d1:0c:64:bb:03:0f:f7:f7:28:4d:2b:ad:14: c1:9b:e1:5e:b9:4e:c3:8f:52:2c:28:c4:47:54:c8:e3:fe:66: f0:82:b0:0c:ea:88:b8:9e:8c:7c:bf:f8:b5:4d:90:84:b8:83: 82:85:37:d2:ef:91:20:3d:3c:11:0d:b9:ed:57:bd:60:c5:6b: 0f:57:68:33:10:9d:e2:e5:dc:fa:2b:fe:76:04:67:97:38:15: 41:b1:e3:44:93:07:8b:c3:57:9e:ec:14:6c:00:5b:5b:e8:75: 0c:c3:43:1d:cb:2b:23:cb:4f:56:02:da:80:46:0e:cb:95:1a: b5:df:18:bc:8c:7b:09:f8:a6:50:2a:e8:cc:c8:c5:7d:c5:b6: 4d:bd:ac:24:ad:91:09:30:41:a5:82:a9:1e:8e:74:81:6c:5a: ae:63:9d:50:11:a0:c1:56:cc:06:0c:7b:91:3d:e7:dc:7a:bf: 25:79:c8:84 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtB2y+SC1VALnRfo6Pfpfa8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxYjA1Nzg5YTRlODI0YmU4MTAzZGU3NzBkYzI1YzU5M2Vm M2ZkY2EwHhcNMjUxMjIxMTcwMDQyWhcNMjUxMjIyMTcwMDQyWjAzMTEwLwYDVQQD EyhjZjQ0ODk3Y2YxOTAyMzUzOWFkODlkZTcxYzVjY2M2MDEyMjMzYTMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwPkVDVVazT6w0+cwH32kAsNaK3uO aWUCXewaDD5PMQKeDhoALqlV/HGyMPwF+/G5JVQFU8VbSfEUhgGbbeWUGO3bnFB7 Q0WZ+PFO7zfEul9uLP3Evcc9+bbEFyvk5HEwhybPZS4qFCX5rssfniVXA7fpacLM TqTaTjUs2Og1+OwfdqZANzORj5jW8rYCDOYGXtG0ysQU/mCiIYi1emLLsFfZtSSS u/UU6qRdu7ByYV7rBBUIXOXTmZmrcpWEsFr3uiGnGQQL+bwdXp74XyLPF+AydglX He4GGTMoLEbgfYazIUfh1tHFjfz+qMMndqkouPbG90Esih8qpLTg9ob3SwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM9EiXzxkCNTmtid5xxczGASIzozMB8GA1UdIwQY MBaAFGGwV4mk6CS+gQPedw3CXFk+8/3KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWWJCWGlhVG9KTDZCQTk1M0RjSmNXVDd6X2NvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC83ZjJjMDctY2VmNS00MmY0LThmMzIt ODYzMWZiZjVjNjIwLzEvWWJCWGlhVG9KTDZCQTk1M0RjSmNXVDd6X2NvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC83ZjJjMDctY2VmNS00MmY0LThmMzItODYzMWZiZjVjNjIw LzEvWWJCWGlhVG9KTDZCQTk1M0RjSmNXVDd6X2NvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfhBbuNc4 MYDdtuwbuJTmghVwB0yWmntCz5EueRSgoNUcu2n+KBKSG+gOw77c2+vwkCMl6zqL ui+EkuJYr+9WbPoIn0TNfByLs31FZY3RDGS7Aw/39yhNK60UwZvhXrlOw49SLCjE R1TI4/5m8IKwDOqIuJ6MfL/4tU2QhLiDgoU30u+RID08EQ257Ve9YMVrD1doMxCd 4uXc+iv+dgRnlzgVQbHjRJMHi8NXnuwUbABbW+h1DMNDHcsrI8tPVgLagEYOy5Ua td8YvIx7CfimUCrozMjFfcW2Tb2sJK2RCTBBpYKpHo50gWxarmOdUBGgwVbMBgx7 kT3n3Hq/JXnIhA== -----END CERTIFICATE-----Generated at Mon Dec 22 02:09:44 2025 by rpki-client