This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/2f3c19-56d5-4924-8bcb-bac472ab7b6a/1/YbGV0TBQ_zxGihSXeHELU1giUdk.mft File: YbGV0TBQ_zxGihSXeHELU1giUdk.mft (raw, json) Hash identifier: /aWZ4G329OkpE49g29A51Pf16JPKhlxRnYCGB4YWc2M= Subject key identifier: 1D:B2:42:87:C1:88:77:70:F9:72:81:5D:6B:30:43:67:87:0C:09:20 Authority key identifier: 61:B1:95:D1:30:50:FF:3C:46:8A:14:97:78:71:0B:53:58:22:51:D9 Certificate issuer: /CN=61b195d13050ff3c468a149778710b53582251d9 Certificate serial: 019B4E4DCC60228B2F1E9A93296A28D2A4BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbGV0TBQ_zxGihSXeHELU1giUdk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/2f3c19-56d5-4924-8bcb-bac472ab7b6a/1/YbGV0TBQ_zxGihSXeHELU1giUdk.mft Manifest number: 1795 Signing time: Wed 24 Dec 2025 03:01:20 +0000 Manifest this update: Wed 24 Dec 2025 03:01:20 +0000 Manifest next update: Thu 25 Dec 2025 03:01:20 +0000 Files and hashes: 1: Wt3X3B6NcZ-mxrNPh2fG99PqrRE.roa (hash: q1LYdMsfXSEFkYw+v/2PtBLKm0CXtMVR1H0DEe1ErnY=) 2: YbGV0TBQ_zxGihSXeHELU1giUdk.crl (hash: QtrrofRFrXyH2fWLdGKgbKq1wWCsa4jPa67uNaB7I8A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/2f3c19-56d5-4924-8bcb-bac472ab7b6a/1/YbGV0TBQ_zxGihSXeHELU1giUdk.crl rsync://rpki.ripe.net/repository/DEFAULT/61/2f3c19-56d5-4924-8bcb-bac472ab7b6a/1/YbGV0TBQ_zxGihSXeHELU1giUdk.mft rsync://rpki.ripe.net/repository/DEFAULT/YbGV0TBQ_zxGihSXeHELU1giUdk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 03:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4e:4d:cc:60:22:8b:2f:1e:9a:93:29:6a:28:d2:a4:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61b195d13050ff3c468a149778710b53582251d9 Validity Not Before: Dec 24 03:01:20 2025 GMT Not After : Dec 25 03:01:20 2025 GMT Subject: CN=1db24287c1887770f972815d6b304367870c0920 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:9b:f2:7b:7c:e3:ec:80:2c:3b:2c:16:08:00: 1b:ed:84:09:c8:09:14:6b:3f:df:a6:44:d7:26:c2: 40:40:aa:a4:19:b9:d5:81:1c:bb:5e:3b:1f:1b:f3: 97:21:67:aa:27:f4:21:2a:f2:e4:94:75:ef:75:25: 3e:a9:dc:62:08:5f:d8:af:6f:fd:23:86:55:b7:af: b7:59:b3:69:75:45:dd:d7:22:8f:43:72:15:7d:39: c2:ac:1f:e1:b9:06:78:8f:6a:c1:51:7c:3e:dc:8b: 8a:53:d8:db:81:a8:c1:c1:a0:e4:80:81:a3:5c:75: 8b:75:22:d0:08:c9:24:82:5a:84:7b:a4:72:28:92: b9:1e:53:ca:9c:32:22:4d:31:12:e7:88:f3:7c:47: de:33:5d:bb:31:90:4e:ce:90:e7:5c:f8:6b:bb:dc: ba:38:7d:a1:1e:d3:77:ac:5b:5a:99:a4:13:e6:29: 7b:52:1a:65:57:77:5d:39:a9:b5:24:1b:ca:54:e5: d4:8a:df:4b:91:9a:70:ec:52:ef:2b:85:f1:d8:54: 4e:7d:78:f9:b3:d6:12:d5:68:60:df:83:b2:ae:73: 78:33:7b:4f:c3:99:fb:71:f1:09:6f:3e:48:28:4d: 27:36:60:70:8f:bd:92:45:2d:95:0d:6a:a3:1d:47: 40:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:B2:42:87:C1:88:77:70:F9:72:81:5D:6B:30:43:67:87:0C:09:20 X509v3 Authority Key Identifier: keyid:61:B1:95:D1:30:50:FF:3C:46:8A:14:97:78:71:0B:53:58:22:51:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbGV0TBQ_zxGihSXeHELU1giUdk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/2f3c19-56d5-4924-8bcb-bac472ab7b6a/1/YbGV0TBQ_zxGihSXeHELU1giUdk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/2f3c19-56d5-4924-8bcb-bac472ab7b6a/1/YbGV0TBQ_zxGihSXeHELU1giUdk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:e1:b0:7b:e8:e1:af:61:4d:23:b7:9a:08:58:c1:a5:7c:b3: c7:5d:d4:bd:d6:87:d8:b0:45:41:73:44:c9:23:2e:b2:58:65: 31:41:6e:ce:80:c4:93:1d:2d:77:1e:c5:a9:0a:f1:4d:5c:ff: e7:9d:15:31:a4:0a:3b:72:90:bd:14:94:bf:d3:4a:1a:62:c8: d3:37:19:5d:cf:37:39:8a:7b:e6:ca:a7:0a:d4:ef:95:38:af: 73:b5:1f:a4:67:3c:db:12:b5:f2:f9:65:f0:92:1e:23:18:7c: a3:8c:f9:7b:86:f8:5d:9e:aa:ee:43:cb:b3:64:e9:0b:8c:a6: b6:cd:88:74:2e:e7:6f:81:fc:0e:d4:34:00:b2:6e:86:bc:2c: 7f:e9:13:3c:81:55:ab:f0:e8:d4:55:4f:22:9d:7f:1d:3b:e0: 42:5f:9f:e4:e7:d4:d3:63:7e:46:48:2f:6c:d0:09:3e:b8:d1: 4a:07:29:9d:22:7b:ec:c3:93:ac:58:58:39:45:0c:fa:fe:6e: 6b:9f:c9:44:bf:1c:b5:11:ac:52:7a:19:93:7b:ef:7b:41:e2: 98:cd:b2:8f:9b:d1:d2:33:0c:28:1c:55:5a:38:2d:2c:80:ee: 2e:a9:0b:19:42:92:07:39:65:72:f0:83:12:a8:4b:12:77:3b: 1c:61:20:64 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtOTcxgIosvHpqTKWoo0qS8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxYjE5NWQxMzA1MGZmM2M0NjhhMTQ5Nzc4NzEwYjUzNTgy MjUxZDkwHhcNMjUxMjI0MDMwMTIwWhcNMjUxMjI1MDMwMTIwWjAzMTEwLwYDVQQD EygxZGIyNDI4N2MxODg3NzcwZjk3MjgxNWQ2YjMwNDM2Nzg3MGMwOTIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr5vye3zj7IAsOywWCAAb7YQJyAkU az/fpkTXJsJAQKqkGbnVgRy7XjsfG/OXIWeqJ/QhKvLklHXvdSU+qdxiCF/Yr2/9 I4ZVt6+3WbNpdUXd1yKPQ3IVfTnCrB/huQZ4j2rBUXw+3IuKU9jbgajBwaDkgIGj XHWLdSLQCMkkglqEe6RyKJK5HlPKnDIiTTES54jzfEfeM127MZBOzpDnXPhru9y6 OH2hHtN3rFtamaQT5il7UhplV3ddOam1JBvKVOXUit9LkZpw7FLvK4Xx2FROfXj5 s9YS1Whg34OyrnN4M3tPw5n7cfEJbz5IKE0nNmBwj72SRS2VDWqjHUdA6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB2yQofBiHdw+XKBXWswQ2eHDAkgMB8GA1UdIwQY MBaAFGGxldEwUP88RooUl3hxC1NYIlHZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWWJHVjBUQlFfenhHaWhTWGVIRUxVMWdpVWRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS8yZjNjMTktNTZkNS00OTI0LThiY2It YmFjNDcyYWI3YjZhLzEvWWJHVjBUQlFfenhHaWhTWGVIRUxVMWdpVWRrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS8yZjNjMTktNTZkNS00OTI0LThiY2ItYmFjNDcyYWI3YjZh LzEvWWJHVjBUQlFfenhHaWhTWGVIRUxVMWdpVWRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIuGwe+jh r2FNI7eaCFjBpXyzx13UvdaH2LBFQXNEySMuslhlMUFuzoDEkx0tdx7FqQrxTVz/ 550VMaQKO3KQvRSUv9NKGmLI0zcZXc83OYp75sqnCtTvlTivc7UfpGc82xK18vll 8JIeIxh8o4z5e4b4XZ6q7kPLs2TpC4ymts2IdC7nb4H8DtQ0ALJuhrwsf+kTPIFV q/Do1FVPIp1/HTvgQl+f5OfU02N+RkgvbNAJPrjRSgcpnSJ77MOTrFhYOUUM+v5u a5/JRL8ctRGsUnoZk3vve0HimM2yj5vR0jMMKBxVWjgtLIDuLqkLGUKSBzllcvCD EqhLEnc7HGEgZA== -----END CERTIFICATE-----Generated at Wed Dec 24 13:09:29 2025 by rpki-client