This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/027c8b-4009-4da6-ae97-72367cbb19ef/1/ybWfQXeebyQ19Z8aFxwIClp6RNI.mft File: ybWfQXeebyQ19Z8aFxwIClp6RNI.mft (raw, json) Hash identifier: DP42mx5ri5rzXLqPs7kBBEgWoPdgCT6BnxAYFV4Ks6s= Subject key identifier: 69:01:D0:E5:C2:83:8B:F7:53:B3:E0:A9:4B:41:57:56:3C:CD:04:45 Authority key identifier: C9:B5:9F:41:77:9E:6F:24:35:F5:9F:1A:17:1C:08:0A:5A:7A:44:D2 Certificate issuer: /CN=c9b59f41779e6f2435f59f1a171c080a5a7a44d2 Certificate serial: 019B631DEF8C7E0C361B9B49B22F35918FFC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ybWfQXeebyQ19Z8aFxwIClp6RNI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/027c8b-4009-4da6-ae97-72367cbb19ef/1/ybWfQXeebyQ19Z8aFxwIClp6RNI.mft Manifest number: 179B Signing time: Sun 28 Dec 2025 04:01:04 +0000 Manifest this update: Sun 28 Dec 2025 04:01:04 +0000 Manifest next update: Mon 29 Dec 2025 04:01:04 +0000 Files and hashes: 1: mcCnj0YcjKVWKNRUEHJJ9oCILI8.roa (hash: QCD+FHuTsYXCE9fg4S64GzeBQUQDK650c6oIs3Pqi/Y=) 2: qnmXcL8dUJj7rdFkLv5IIJUwDDY.roa (hash: SbXai8opNHzQzJTVhIMV1eYK9jsCmNmT7MYPyjYeprw=) 3: ybWfQXeebyQ19Z8aFxwIClp6RNI.crl (hash: GfyrKFN6qZJ8SZ8G+r1RjsGaCKM76J1UL7oScfIQ5bo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/027c8b-4009-4da6-ae97-72367cbb19ef/1/ybWfQXeebyQ19Z8aFxwIClp6RNI.crl rsync://rpki.ripe.net/repository/DEFAULT/af/027c8b-4009-4da6-ae97-72367cbb19ef/1/ybWfQXeebyQ19Z8aFxwIClp6RNI.mft rsync://rpki.ripe.net/repository/DEFAULT/ybWfQXeebyQ19Z8aFxwIClp6RNI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 03:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:63:1d:ef:8c:7e:0c:36:1b:9b:49:b2:2f:35:91:8f:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c9b59f41779e6f2435f59f1a171c080a5a7a44d2 Validity Not Before: Dec 28 04:01:04 2025 GMT Not After : Dec 29 04:01:04 2025 GMT Subject: CN=6901d0e5c2838bf753b3e0a94b4157563ccd0445 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:60:2f:72:53:5b:3c:a9:c9:ab:33:37:8b:65: 04:c1:4c:12:f7:d9:dd:90:3f:c8:25:9c:34:9b:b9: 2e:30:7a:1d:e0:e6:eb:1a:93:b7:7a:f5:ff:20:73: 0f:cf:ef:43:7a:70:c0:2a:0d:43:5d:10:14:bd:5e: 49:50:24:3e:0b:55:3f:9a:87:fe:92:e7:99:4c:ec: bd:c4:ae:b2:82:42:5f:a7:4d:05:13:47:42:89:c4: 0a:f9:bb:a4:08:52:fa:35:6e:49:a1:a9:00:90:7f: b9:00:c7:60:d3:9b:75:25:11:ec:df:82:32:85:d3: 42:da:51:20:15:af:17:9e:ff:73:52:92:95:5e:60: dc:83:e3:2a:04:86:84:ea:e9:42:8e:42:37:ce:5c: 8d:f6:7b:8d:7a:4d:88:8f:40:0d:9c:c7:d7:ad:8b: 70:d5:55:6c:2c:9c:34:90:d5:e4:3c:b0:c3:8e:13: 6d:5d:03:62:65:c9:ef:cb:49:df:8b:5a:ef:31:2d: 59:e1:07:3e:92:8c:96:07:67:1d:9f:b5:da:40:41: 28:9b:17:57:75:e3:f8:d0:18:94:bc:43:75:75:f2: ee:07:62:7a:cf:84:17:6c:ff:bd:41:d1:77:74:98: f6:23:95:c2:bb:2b:71:46:d0:9b:02:63:de:37:3c: ac:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:01:D0:E5:C2:83:8B:F7:53:B3:E0:A9:4B:41:57:56:3C:CD:04:45 X509v3 Authority Key Identifier: keyid:C9:B5:9F:41:77:9E:6F:24:35:F5:9F:1A:17:1C:08:0A:5A:7A:44:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ybWfQXeebyQ19Z8aFxwIClp6RNI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/027c8b-4009-4da6-ae97-72367cbb19ef/1/ybWfQXeebyQ19Z8aFxwIClp6RNI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/af/027c8b-4009-4da6-ae97-72367cbb19ef/1/ybWfQXeebyQ19Z8aFxwIClp6RNI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:fe:7f:60:23:bf:50:10:1d:66:74:b9:30:91:d7:a6:c3:a3: a7:be:17:de:8c:41:4f:bf:1d:20:b6:e7:fb:bb:48:7d:7e:a1: 21:ef:0c:a7:33:10:19:07:5e:b3:49:35:8e:ab:6b:7b:05:45: 7c:f0:b3:f3:9b:af:99:2e:4d:8e:f9:2e:fb:57:83:05:1e:b5: ff:75:1b:85:29:27:93:dd:1a:cc:0b:44:ef:fc:ff:f3:7f:36: 12:47:df:1e:a1:23:9e:02:15:a3:b0:b4:d5:af:83:21:11:ae: 11:b5:8b:a0:8c:01:21:5b:c6:ac:4d:6e:a6:17:40:4c:44:f5: 38:7a:4f:64:30:3f:23:b2:85:d7:09:c9:94:d5:30:2b:5b:eb: 08:85:a3:df:64:17:94:24:d7:64:bd:ec:a1:03:f9:0b:db:3d: d3:da:0f:48:f2:a7:48:a9:e4:db:5d:12:20:82:1b:65:ac:e5: 99:14:68:b7:f8:7c:c9:34:5e:30:7d:7a:65:c7:3d:a8:8e:de: 73:63:09:ba:24:c9:97:5f:7d:d6:f9:b6:44:7f:ce:25:8e:15: 15:e8:97:66:3d:92:a2:9c:d3:f7:fb:83:18:2a:9e:85:7b:dd: 94:ef:89:d9:f4:6d:a7:38:79:98:cb:06:28:96:62:5b:02:d7: 09:38:c9:80 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtjHe+Mfgw2G5tJsi81kY/8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5YjU5ZjQxNzc5ZTZmMjQzNWY1OWYxYTE3MWMwODBhNWE3 YTQ0ZDIwHhcNMjUxMjI4MDQwMTA0WhcNMjUxMjI5MDQwMTA0WjAzMTEwLwYDVQQD Eyg2OTAxZDBlNWMyODM4YmY3NTNiM2UwYTk0YjQxNTc1NjNjY2QwNDQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAymAvclNbPKnJqzM3i2UEwUwS99nd kD/IJZw0m7kuMHod4ObrGpO3evX/IHMPz+9DenDAKg1DXRAUvV5JUCQ+C1U/mof+ kueZTOy9xK6ygkJfp00FE0dCicQK+bukCFL6NW5JoakAkH+5AMdg05t1JRHs34Iy hdNC2lEgFa8Xnv9zUpKVXmDcg+MqBIaE6ulCjkI3zlyN9nuNek2Ij0ANnMfXrYtw 1VVsLJw0kNXkPLDDjhNtXQNiZcnvy0nfi1rvMS1Z4Qc+koyWB2cdn7XaQEEomxdX deP40BiUvEN1dfLuB2J6z4QXbP+9QdF3dJj2I5XCuytxRtCbAmPeNzysIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGkB0OXCg4v3U7PgqUtBV1Y8zQRFMB8GA1UdIwQY MBaAFMm1n0F3nm8kNfWfGhccCApaekTSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWJXZlFYZWVieVExOVo4YUZ4d0lDbHA2Uk5JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi8wMjdjOGItNDAwOS00ZGE2LWFlOTct NzIzNjdjYmIxOWVmLzEveWJXZlFYZWVieVExOVo4YUZ4d0lDbHA2Uk5JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZi8wMjdjOGItNDAwOS00ZGE2LWFlOTctNzIzNjdjYmIxOWVm LzEveWJXZlFYZWVieVExOVo4YUZ4d0lDbHA2Uk5JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPf5/YCO/ UBAdZnS5MJHXpsOjp74X3oxBT78dILbn+7tIfX6hIe8MpzMQGQdes0k1jqtrewVF fPCz85uvmS5Njvku+1eDBR61/3UbhSknk90azAtE7/z/8382EkffHqEjngIVo7C0 1a+DIRGuEbWLoIwBIVvGrE1uphdATET1OHpPZDA/I7KF1wnJlNUwK1vrCIWj32QX lCTXZL3soQP5C9s909oPSPKnSKnk210SIIIbZazlmRRot/h8yTReMH16Zcc9qI7e c2MJuiTJl1991vm2RH/OJY4VFeiXZj2SopzT9/uDGCqehXvdlO+J2fRtpzh5mMsG KJZiWwLXCTjJgA== -----END CERTIFICATE-----Generated at Sun Dec 28 12:30:04 2025 by rpki-client