This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/ab2b25-2a13-41f0-b9c5-fba49b0cdded/1/YB3AD5pIG0FQhrFDp91M2h_7JHA.mft File: YB3AD5pIG0FQhrFDp91M2h_7JHA.mft (raw, json) Hash identifier: v+bPwidcnxKYYs7f6V3bo1JIcZio5kHg6Q05O7U7HPI= Subject key identifier: 69:2D:72:75:D4:91:98:CE:E4:82:F0:ED:21:06:F9:09:51:A6:C1:0C Authority key identifier: 60:1D:C0:0F:9A:48:1B:41:50:86:B1:43:A7:DD:4C:DA:1F:FB:24:70 Certificate issuer: /CN=601dc00f9a481b415086b143a7dd4cda1ffb2470 Certificate serial: 019B4E84F94598C509C6D79382A7CBBDCFF0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YB3AD5pIG0FQhrFDp91M2h_7JHA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/ab2b25-2a13-41f0-b9c5-fba49b0cdded/1/YB3AD5pIG0FQhrFDp91M2h_7JHA.mft Manifest number: 178F Signing time: Wed 24 Dec 2025 04:01:35 +0000 Manifest this update: Wed 24 Dec 2025 04:01:35 +0000 Manifest next update: Thu 25 Dec 2025 04:01:35 +0000 Files and hashes: 1: 4mIaRiVfusRCW_nZ919kue73VcU.roa (hash: KAlnZdYdnEt6W3Qh7SxuikxG/eJq1ZmaN4m/5vXa+us=) 2: YB3AD5pIG0FQhrFDp91M2h_7JHA.crl (hash: 9DpwTqUqzUmd7z13YOp8UihD1MTbIQwFuMUdyHPZ5Gc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/ab2b25-2a13-41f0-b9c5-fba49b0cdded/1/YB3AD5pIG0FQhrFDp91M2h_7JHA.crl rsync://rpki.ripe.net/repository/DEFAULT/a4/ab2b25-2a13-41f0-b9c5-fba49b0cdded/1/YB3AD5pIG0FQhrFDp91M2h_7JHA.mft rsync://rpki.ripe.net/repository/DEFAULT/YB3AD5pIG0FQhrFDp91M2h_7JHA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 04:01:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4e:84:f9:45:98:c5:09:c6:d7:93:82:a7:cb:bd:cf:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=601dc00f9a481b415086b143a7dd4cda1ffb2470 Validity Not Before: Dec 24 04:01:35 2025 GMT Not After : Dec 25 04:01:35 2025 GMT Subject: CN=692d7275d49198cee482f0ed2106f90951a6c10c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:19:b6:46:c7:10:bc:bd:4b:52:5e:e6:90:44: 33:96:b3:07:d7:d8:27:72:3d:b7:6b:8f:a4:84:29: 8b:80:ce:60:1b:10:6b:9c:02:31:63:f8:d4:ba:92: c5:86:72:6f:0f:34:ea:2a:1e:1e:cc:79:54:96:68: 39:57:2c:e3:8a:94:9b:83:75:48:6b:77:91:85:9c: dd:34:e1:2f:da:eb:d0:5f:98:b4:eb:44:77:7a:ab: ff:f5:76:5a:17:ce:c4:d3:47:94:07:ee:97:61:11: a9:5d:e7:21:ee:ce:35:2f:f7:ad:98:48:a8:2c:d2: 07:56:ed:8a:f5:73:cc:9f:3a:ab:e3:c8:b2:91:1c: 73:5b:96:c8:51:28:d5:dc:76:db:08:85:1a:f2:c1: 95:76:aa:a9:bd:8d:65:2c:4c:16:04:b5:7e:0b:2a: e9:4e:16:36:62:31:28:1f:b4:57:d2:7d:2b:ee:fe: 56:8a:a9:c1:ef:f7:1c:a9:fa:b7:fd:9e:fd:99:09: a9:db:ab:ee:02:72:1d:4f:79:23:d8:b8:9f:3d:8d: 6f:53:7b:06:86:38:f7:c7:a5:de:4d:41:e8:a0:40: f7:a6:8e:be:cd:e4:a8:be:64:40:36:1c:f9:f0:d5: 32:44:eb:a7:de:be:d0:33:b3:53:8f:37:40:c9:cf: 4b:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:2D:72:75:D4:91:98:CE:E4:82:F0:ED:21:06:F9:09:51:A6:C1:0C X509v3 Authority Key Identifier: keyid:60:1D:C0:0F:9A:48:1B:41:50:86:B1:43:A7:DD:4C:DA:1F:FB:24:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YB3AD5pIG0FQhrFDp91M2h_7JHA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/ab2b25-2a13-41f0-b9c5-fba49b0cdded/1/YB3AD5pIG0FQhrFDp91M2h_7JHA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/ab2b25-2a13-41f0-b9c5-fba49b0cdded/1/YB3AD5pIG0FQhrFDp91M2h_7JHA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:07:45:d8:68:60:58:56:b1:50:55:bd:52:76:3d:7c:f2:6a: 6a:cf:b5:1b:f4:c6:b4:e2:c6:d6:73:a7:19:ff:a3:0f:95:0c: 9e:b5:ff:a6:8c:71:cc:7e:d7:ce:73:fe:c3:8b:49:43:6e:20: 14:9e:36:50:70:ec:81:e9:a5:57:ca:73:b0:d9:74:f9:3e:6f: 2e:fc:3c:15:4c:5b:21:88:28:99:e4:7f:7b:cf:da:0a:22:f6: d5:4a:9a:19:6e:ee:a4:66:a2:e4:6d:74:c9:0d:af:9b:ef:a8: 35:96:c1:25:42:4c:3b:2b:2f:c5:91:d6:5a:7c:b2:0a:76:25: 7c:09:23:48:e0:f8:c9:0b:87:da:6a:5c:d5:e8:34:0c:37:70: 35:c6:52:7e:9f:be:5b:6b:70:a4:5e:92:90:47:ea:04:8d:87: 27:73:0b:b9:83:01:bc:81:05:3a:76:e0:97:81:a7:95:38:cb: 27:1c:a9:e2:6e:0b:3d:ef:70:2d:03:cb:35:f9:ab:f2:17:8e: c8:a8:98:11:3f:a9:73:d0:ad:27:78:80:5b:20:7b:30:df:ae: e0:c8:bc:d8:16:4f:01:76:2e:12:15:e4:94:56:3b:8b:54:0e: 30:32:83:93:d9:49:29:d0:7c:12:ef:7e:1e:96:d2:f9:e1:59: b7:7e:61:35 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtOhPlFmMUJxteTgqfLvc/wMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwMWRjMDBmOWE0ODFiNDE1MDg2YjE0M2E3ZGQ0Y2RhMWZm YjI0NzAwHhcNMjUxMjI0MDQwMTM1WhcNMjUxMjI1MDQwMTM1WjAzMTEwLwYDVQQD Eyg2OTJkNzI3NWQ0OTE5OGNlZTQ4MmYwZWQyMTA2ZjkwOTUxYTZjMTBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkBm2RscQvL1LUl7mkEQzlrMH19gn cj23a4+khCmLgM5gGxBrnAIxY/jUupLFhnJvDzTqKh4ezHlUlmg5VyzjipSbg3VI a3eRhZzdNOEv2uvQX5i060R3eqv/9XZaF87E00eUB+6XYRGpXech7s41L/etmEio LNIHVu2K9XPMnzqr48iykRxzW5bIUSjV3HbbCIUa8sGVdqqpvY1lLEwWBLV+Cyrp ThY2YjEoH7RX0n0r7v5WiqnB7/ccqfq3/Z79mQmp26vuAnIdT3kj2LifPY1vU3sG hjj3x6XeTUHooED3po6+zeSovmRANhz58NUyROun3r7QM7NTjzdAyc9LcwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGktcnXUkZjO5ILw7SEG+QlRpsEMMB8GA1UdIwQY MBaAFGAdwA+aSBtBUIaxQ6fdTNof+yRwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUIzQUQ1cElHMEZRaHJGRHA5MU0yaF83SkhBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC9hYjJiMjUtMmExMy00MWYwLWI5YzUt ZmJhNDliMGNkZGVkLzEvWUIzQUQ1cElHMEZRaHJGRHA5MU0yaF83SkhBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNC9hYjJiMjUtMmExMy00MWYwLWI5YzUtZmJhNDliMGNkZGVk LzEvWUIzQUQ1cElHMEZRaHJGRHA5MU0yaF83SkhBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAAdF2Ghg WFaxUFW9UnY9fPJqas+1G/TGtOLG1nOnGf+jD5UMnrX/poxxzH7XznP+w4tJQ24g FJ42UHDsgemlV8pzsNl0+T5vLvw8FUxbIYgomeR/e8/aCiL21UqaGW7upGai5G10 yQ2vm++oNZbBJUJMOysvxZHWWnyyCnYlfAkjSOD4yQuH2mpc1eg0DDdwNcZSfp++ W2twpF6SkEfqBI2HJ3MLuYMBvIEFOnbgl4GnlTjLJxyp4m4LPe9wLQPLNfmr8heO yKiYET+pc9CtJ3iAWyB7MN+u4Mi82BZPAXYuEhXklFY7i1QOMDKDk9lJKdB8Eu9+ HpbS+eFZt35hNQ== -----END CERTIFICATE-----Generated at Wed Dec 24 13:37:21 2025 by rpki-client