This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/f35432-cf99-4f19-a76e-07b7fef0858f/1/ybIylYCXtYY-r9BHuzFRceqgH7c.mft File: ybIylYCXtYY-r9BHuzFRceqgH7c.mft (raw, json) Hash identifier: 9hdIheV/TtL10z4OOb6IkVJ84y2hwq7xMhXGQbf5wI0= Subject key identifier: 81:B6:E3:88:DF:60:88:4F:96:DB:A0:E1:4C:11:95:62:16:B1:2F:A1 Authority key identifier: C9:B2:32:95:80:97:B5:86:3E:AF:D0:47:BB:31:51:71:EA:A0:1F:B7 Certificate issuer: /CN=c9b232958097b5863eafd047bb315171eaa01fb7 Certificate serial: 019B3BA27363D7A8F70253ACB2738FA27EDD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ybIylYCXtYY-r9BHuzFRceqgH7c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/f35432-cf99-4f19-a76e-07b7fef0858f/1/ybIylYCXtYY-r9BHuzFRceqgH7c.mft Manifest number: 1788 Signing time: Sat 20 Dec 2025 12:01:00 +0000 Manifest this update: Sat 20 Dec 2025 12:01:00 +0000 Manifest next update: Sun 21 Dec 2025 12:01:00 +0000 Files and hashes: 1: 36kJZTUd_sWq6XGYaO7P5RhoNYQ.roa (hash: SQ9ogBKHb+rGHe3BXgCbUKWuF1/SVTNnqc7Qrrn9o88=) 2: BLIbcZ8gVGAjnHegyR2lqH6xAJM.roa (hash: Bj27w9uQHRhZtkX+wPrDSZtYcxRX/Qm5XlGgHnKEj+g=) 3: c_Ixc3AYPX_fmGAE0EUaA8iCaCY.roa (hash: G3UZF7fxpF7R/IVnk9rPAZ+jjio/iwehlQmNNTZ8rAo=) 4: h_RE6WU4ZuYi01oBDIse0-pY6i0.roa (hash: WA+t8DetCDYbdx3o6UcknVGJ3PsCQ51UnZ6QRrSNIm0=) 5: oq_HXzOCCJ3V-kFxFIeDBDnbULg.roa (hash: n4S14t4ExmuKX91bG38pFLwh1gNdMqcOWis+wx+O8jw=) 6: ybIylYCXtYY-r9BHuzFRceqgH7c.crl (hash: mgVTVhZxR996lxLhLUhPxHClTKcwwOL6Yf532DVjBHQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/f35432-cf99-4f19-a76e-07b7fef0858f/1/ybIylYCXtYY-r9BHuzFRceqgH7c.crl rsync://rpki.ripe.net/repository/DEFAULT/de/f35432-cf99-4f19-a76e-07b7fef0858f/1/ybIylYCXtYY-r9BHuzFRceqgH7c.mft rsync://rpki.ripe.net/repository/DEFAULT/ybIylYCXtYY-r9BHuzFRceqgH7c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:a2:73:63:d7:a8:f7:02:53:ac:b2:73:8f:a2:7e:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c9b232958097b5863eafd047bb315171eaa01fb7 Validity Not Before: Dec 20 12:01:00 2025 GMT Not After : Dec 21 12:01:00 2025 GMT Subject: CN=81b6e388df60884f96dba0e14c11956216b12fa1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:fa:48:cb:6d:e6:45:e8:e9:8a:b1:21:af:8a: 0a:c2:90:6a:a2:5f:0b:98:e3:30:8e:28:39:d9:c7: b9:28:bf:7f:fa:38:a7:23:f5:ab:7a:72:d1:48:0a: 7b:a4:f3:30:3a:05:a0:12:3c:ea:5a:3d:64:99:9a: e4:b3:96:05:22:2b:e9:b0:6e:84:df:4d:18:d5:c6: 72:cb:b3:e7:cb:f8:97:f6:e5:d3:0e:03:89:d7:ba: bc:ca:4f:37:67:5b:0e:42:e7:94:44:f7:06:b7:91: f7:16:1c:ed:60:a6:6c:b2:83:0b:bd:5c:35:b2:c0: f3:d2:08:c4:2b:57:1a:18:60:36:a1:41:61:50:a1: 99:29:a3:76:50:80:4c:62:e5:71:40:aa:c8:f1:10: 0e:f6:25:89:3d:ea:d8:1d:b6:93:37:07:9b:37:ad: ab:27:d7:bc:c6:52:65:2f:dc:9a:3a:87:ce:a3:60: 26:a9:fb:d6:4d:d4:1b:01:8f:d7:02:4d:5e:e2:9a: d5:d4:12:40:35:5a:7e:d2:3d:08:80:3c:14:45:5f: 1d:da:1d:3b:0e:8b:9b:d9:bf:1a:c2:15:ce:fe:df: 84:18:50:a3:98:42:df:87:2c:db:25:5b:0f:3d:79: fb:dc:7f:29:ac:a0:84:b0:c0:65:39:77:c9:af:a3: 18:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:B6:E3:88:DF:60:88:4F:96:DB:A0:E1:4C:11:95:62:16:B1:2F:A1 X509v3 Authority Key Identifier: keyid:C9:B2:32:95:80:97:B5:86:3E:AF:D0:47:BB:31:51:71:EA:A0:1F:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ybIylYCXtYY-r9BHuzFRceqgH7c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f35432-cf99-4f19-a76e-07b7fef0858f/1/ybIylYCXtYY-r9BHuzFRceqgH7c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f35432-cf99-4f19-a76e-07b7fef0858f/1/ybIylYCXtYY-r9BHuzFRceqgH7c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:54:07:6c:03:ea:20:80:99:ee:28:13:34:17:84:44:f2:a7: 7c:3f:5b:81:a6:41:86:76:0f:35:5c:f5:72:fe:5b:ca:92:b2: 99:a7:99:2e:7c:90:d3:37:19:19:54:2d:68:3b:5e:56:18:30: 37:90:99:c8:26:d7:c8:a5:6a:82:dc:73:dd:1a:63:a3:77:c8: ea:1a:12:1a:54:10:19:65:e1:a3:01:bb:05:e4:ff:f2:95:43: d5:53:25:a7:29:6f:c1:b2:ec:6b:5d:39:5b:54:43:26:52:1c: 12:d8:7a:31:4c:1d:13:a4:62:29:86:64:e9:77:d2:5a:09:4f: df:85:47:3a:e5:9d:68:fc:24:c2:b4:44:da:3c:9d:93:72:4d: 0b:b5:6f:11:bb:84:76:41:4a:4f:d1:21:40:c5:82:c7:d3:7d: 58:34:af:ff:1d:3c:a4:5f:0b:f0:6b:c7:74:42:78:5a:1a:4b: cf:bb:8e:2f:51:d4:0f:d0:29:42:42:64:dd:92:d7:8e:c5:4e: 56:a5:27:23:7c:19:9e:f6:d0:34:e0:44:69:82:ba:b1:1b:f0: bb:e1:70:35:8e:66:30:c5:85:07:e7:4a:1d:c6:fe:d7:57:fd: dd:cc:6c:0b:06:e6:f4:04:62:70:ac:7f:a5:b5:71:7a:76:f8: 62:72:f9:5f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7onNj16j3AlOssnOPon7dMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5YjIzMjk1ODA5N2I1ODYzZWFmZDA0N2JiMzE1MTcxZWFh MDFmYjcwHhcNMjUxMjIwMTIwMTAwWhcNMjUxMjIxMTIwMTAwWjAzMTEwLwYDVQQD Eyg4MWI2ZTM4OGRmNjA4ODRmOTZkYmEwZTE0YzExOTU2MjE2YjEyZmExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs/pIy23mRejpirEhr4oKwpBqol8L mOMwjig52ce5KL9/+jinI/WrenLRSAp7pPMwOgWgEjzqWj1kmZrks5YFIivpsG6E 300Y1cZyy7Pny/iX9uXTDgOJ17q8yk83Z1sOQueURPcGt5H3FhztYKZssoMLvVw1 ssDz0gjEK1caGGA2oUFhUKGZKaN2UIBMYuVxQKrI8RAO9iWJPerYHbaTNwebN62r J9e8xlJlL9yaOofOo2AmqfvWTdQbAY/XAk1e4prV1BJANVp+0j0IgDwURV8d2h07 Doub2b8awhXO/t+EGFCjmELfhyzbJVsPPXn73H8prKCEsMBlOXfJr6MYhQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIG244jfYIhPltug4UwRlWIWsS+hMB8GA1UdIwQY MBaAFMmyMpWAl7WGPq/QR7sxUXHqoB+3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWJJeWxZQ1h0WVktcjlCSHV6RlJjZXFnSDdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS9mMzU0MzItY2Y5OS00ZjE5LWE3NmUt MDdiN2ZlZjA4NThmLzEveWJJeWxZQ1h0WVktcjlCSHV6RlJjZXFnSDdjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZS9mMzU0MzItY2Y5OS00ZjE5LWE3NmUtMDdiN2ZlZjA4NThm LzEveWJJeWxZQ1h0WVktcjlCSHV6RlJjZXFnSDdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhlQHbAPq IICZ7igTNBeERPKnfD9bgaZBhnYPNVz1cv5bypKymaeZLnyQ0zcZGVQtaDteVhgw N5CZyCbXyKVqgtxz3Rpjo3fI6hoSGlQQGWXhowG7BeT/8pVD1VMlpylvwbLsa105 W1RDJlIcEth6MUwdE6RiKYZk6XfSWglP34VHOuWdaPwkwrRE2jydk3JNC7VvEbuE dkFKT9EhQMWCx9N9WDSv/x08pF8L8GvHdEJ4WhpLz7uOL1HUD9ApQkJk3ZLXjsVO VqUnI3wZnvbQNOBEaYK6sRvwu+FwNY5mMMWFB+dKHcb+11f93cxsCwbm9ARicKx/ pbVxenb4YnL5Xw== -----END CERTIFICATE-----Generated at Sat Dec 20 16:17:49 2025 by rpki-client