This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/8840f0-271e-4527-a413-6c4719bcf9ee/1/yBi-GcEJgPFbze4HZpAHhJGoqiE.mft File: yBi-GcEJgPFbze4HZpAHhJGoqiE.mft (raw, json) Hash identifier: iaEddFvkyR6ZRssLT4KXw5WrQ65Qj2Rb/tKsUIAh7ck= Subject key identifier: CA:29:CB:4C:30:AF:1B:6B:49:68:F6:30:89:82:C7:8F:56:F4:00:61 Authority key identifier: C8:18:BE:19:C1:09:80:F1:5B:CD:EE:07:66:90:07:84:91:A8:AA:21 Certificate issuer: /CN=c818be19c10980f15bcdee076690078491a8aa21 Certificate serial: 019B4AA7C26AC21CEE596C99A417B8856444 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yBi-GcEJgPFbze4HZpAHhJGoqiE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/8840f0-271e-4527-a413-6c4719bcf9ee/1/yBi-GcEJgPFbze4HZpAHhJGoqiE.mft Manifest number: 0DBD Signing time: Tue 23 Dec 2025 10:01:06 +0000 Manifest this update: Tue 23 Dec 2025 10:01:06 +0000 Manifest next update: Wed 24 Dec 2025 10:01:06 +0000 Files and hashes: 1: gZMQxr61w0P4Si-B6lBsVj_b8vM.roa (hash: 3Vc/pW8ygtdQIimX5iqQ/MSW6PLhJ2nbGCIzRJsZshI=) 2: yBi-GcEJgPFbze4HZpAHhJGoqiE.crl (hash: lWCZBVv0zoFTFrpeHXtde/OOhQC93l5MMT3LR4ju744=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/8840f0-271e-4527-a413-6c4719bcf9ee/1/yBi-GcEJgPFbze4HZpAHhJGoqiE.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/8840f0-271e-4527-a413-6c4719bcf9ee/1/yBi-GcEJgPFbze4HZpAHhJGoqiE.mft rsync://rpki.ripe.net/repository/DEFAULT/yBi-GcEJgPFbze4HZpAHhJGoqiE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 09:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4a:a7:c2:6a:c2:1c:ee:59:6c:99:a4:17:b8:85:64:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c818be19c10980f15bcdee076690078491a8aa21 Validity Not Before: Dec 23 10:01:06 2025 GMT Not After : Dec 24 10:01:06 2025 GMT Subject: CN=ca29cb4c30af1b6b4968f6308982c78f56f40061 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:27:39:5b:80:55:85:cc:82:e5:82:62:a8:f2: 7c:ac:cb:0d:40:9c:9a:3e:69:62:58:02:c4:4b:33: 2d:b2:e0:58:e3:5e:8f:07:13:c7:9d:6c:b3:59:60: d6:1e:51:26:c6:94:96:71:87:2e:83:31:04:81:3e: 1c:cd:7e:eb:5d:df:57:8f:f8:bc:63:a8:ff:4e:47: a1:3e:95:fb:76:c4:74:65:a7:a1:2a:7a:ef:03:59: d6:7b:c5:23:4e:6b:a5:f7:ff:3b:c1:61:fa:3b:72: e3:a8:83:d9:18:01:64:20:7e:95:29:2c:2a:8f:19: c5:33:e9:fb:53:c8:c0:f1:49:37:09:43:36:d8:49: ca:dc:00:0a:b1:c2:33:66:87:ba:df:8d:cc:c0:34: b4:ce:d5:18:e2:fd:19:1e:42:e1:e5:56:c1:a7:b7: d0:dc:3b:b7:66:ea:60:cf:b7:98:62:d9:d1:89:39: cf:06:13:3b:7a:79:0f:68:c5:b2:be:7f:f8:7b:8e: 4a:0d:bf:52:d5:4c:55:01:9f:b8:2a:a2:41:0f:47: 9c:51:59:51:ab:76:1a:7e:6a:1e:66:20:06:32:18: cf:61:4b:6e:80:8f:2e:76:af:8b:4f:bf:07:b6:ca: 1d:ab:d4:b6:15:b0:93:61:9e:13:20:cb:50:b5:a3: a2:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:29:CB:4C:30:AF:1B:6B:49:68:F6:30:89:82:C7:8F:56:F4:00:61 X509v3 Authority Key Identifier: keyid:C8:18:BE:19:C1:09:80:F1:5B:CD:EE:07:66:90:07:84:91:A8:AA:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yBi-GcEJgPFbze4HZpAHhJGoqiE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/8840f0-271e-4527-a413-6c4719bcf9ee/1/yBi-GcEJgPFbze4HZpAHhJGoqiE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/8840f0-271e-4527-a413-6c4719bcf9ee/1/yBi-GcEJgPFbze4HZpAHhJGoqiE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:28:c5:ac:28:00:0c:4c:8e:21:00:32:2b:38:6c:e2:c8:4c: 7a:4b:e4:86:03:74:82:52:82:a5:cf:18:86:b2:fa:5e:fb:d0: bd:d1:c7:1a:4d:44:7e:89:42:d8:0a:23:49:10:3c:c6:46:a3: 16:f7:b6:be:64:b0:b9:ef:2a:a9:e2:22:7e:36:c7:1b:dd:22: ad:a5:60:21:c0:b0:9a:39:d1:f1:b1:69:3d:e5:45:2f:26:c7: 68:08:a9:14:1f:fe:24:6c:2e:0d:d1:b9:c5:65:86:98:82:54: e7:0b:05:24:f1:50:39:4c:33:59:af:50:73:42:af:5c:4f:0a: b3:6e:02:b6:92:b4:d9:9a:ea:ab:4a:a3:87:49:bc:e1:0a:ae: 79:f5:27:0d:b1:76:54:81:d9:cf:4c:c8:0d:8e:aa:8d:3f:4a: c5:ba:a3:15:2e:bd:ce:20:ff:4a:17:57:9f:d2:36:38:81:91: 5c:46:34:cc:c0:e2:7f:d5:1a:13:39:28:9c:30:bc:b9:f0:11: 98:21:a7:6b:bf:12:ea:d2:21:6a:df:84:e3:11:06:e9:a4:b9: 7a:30:9e:8a:c6:a3:3b:ee:35:cd:94:e7:f7:00:7d:e5:c9:f0: d3:5a:24:e7:7c:ed:5f:2c:02:df:7c:98:5c:1b:92:14:18:a4: 7c:51:5d:a4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtKp8JqwhzuWWyZpBe4hWREMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM4MThiZTE5YzEwOTgwZjE1YmNkZWUwNzY2OTAwNzg0OTFh OGFhMjEwHhcNMjUxMjIzMTAwMTA2WhcNMjUxMjI0MTAwMTA2WjAzMTEwLwYDVQQD EyhjYTI5Y2I0YzMwYWYxYjZiNDk2OGY2MzA4OTgyYzc4ZjU2ZjQwMDYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzyc5W4BVhcyC5YJiqPJ8rMsNQJya PmliWALESzMtsuBY416PBxPHnWyzWWDWHlEmxpSWcYcugzEEgT4czX7rXd9Xj/i8 Y6j/TkehPpX7dsR0ZaehKnrvA1nWe8UjTmul9/87wWH6O3LjqIPZGAFkIH6VKSwq jxnFM+n7U8jA8Uk3CUM22EnK3AAKscIzZoe6343MwDS0ztUY4v0ZHkLh5VbBp7fQ 3Du3Zupgz7eYYtnRiTnPBhM7enkPaMWyvn/4e45KDb9S1UxVAZ+4KqJBD0ecUVlR q3YafmoeZiAGMhjPYUtugI8udq+LT78Htsodq9S2FbCTYZ4TIMtQtaOikwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMopy0wwrxtrSWj2MImCx49W9ABhMB8GA1UdIwQY MBaAFMgYvhnBCYDxW83uB2aQB4SRqKohMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveUJpLUdjRUpnUEZiemU0SFpwQUhoSkdvcWlFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi84ODQwZjAtMjcxZS00NTI3LWE0MTMt NmM0NzE5YmNmOWVlLzEveUJpLUdjRUpnUEZiemU0SFpwQUhoSkdvcWlFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi84ODQwZjAtMjcxZS00NTI3LWE0MTMtNmM0NzE5YmNmOWVl LzEveUJpLUdjRUpnUEZiemU0SFpwQUhoSkdvcWlFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANijFrCgA DEyOIQAyKzhs4shMekvkhgN0glKCpc8YhrL6XvvQvdHHGk1EfolC2AojSRA8xkaj Fve2vmSwue8qqeIifjbHG90iraVgIcCwmjnR8bFpPeVFLybHaAipFB/+JGwuDdG5 xWWGmIJU5wsFJPFQOUwzWa9Qc0KvXE8Ks24CtpK02Zrqq0qjh0m84QquefUnDbF2 VIHZz0zIDY6qjT9KxbqjFS69ziD/ShdXn9I2OIGRXEY0zMDif9UaEzkonDC8ufAR mCGna78S6tIhat+E4xEG6aS5ejCeisajO+41zZTn9wB95cnw01ok53ztXywC33yY XBuSFBikfFFdpA== -----END CERTIFICATE-----Generated at Tue Dec 23 12:37:22 2025 by rpki-client