This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/c1acd6-230a-4e36-a58f-f555e2e68a10/1/YbU0Q3UDZogVrdk80X0K0-GxqHc.mft File: YbU0Q3UDZogVrdk80X0K0-GxqHc.mft (raw, json) Hash identifier: XfpCG4UZy2tPBHpbhxMdXFppjJOUYxOqN667KB4QLyU= Subject key identifier: 16:E8:02:0D:EA:90:FA:D7:34:84:AA:29:97:D5:44:E4:B4:39:E1:2E Authority key identifier: 61:B5:34:43:75:03:66:88:15:AD:D9:3C:D1:7D:0A:D3:E1:B1:A8:77 Certificate issuer: /CN=61b534437503668815add93cd17d0ad3e1b1a877 Certificate serial: 019B3CB55176EABA9432F36D1D5FD41C7C8E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbU0Q3UDZogVrdk80X0K0-GxqHc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/c1acd6-230a-4e36-a58f-f555e2e68a10/1/YbU0Q3UDZogVrdk80X0K0-GxqHc.mft Manifest number: 179C Signing time: Sat 20 Dec 2025 17:01:14 +0000 Manifest this update: Sat 20 Dec 2025 17:01:14 +0000 Manifest next update: Sun 21 Dec 2025 17:01:14 +0000 Files and hashes: 1: 9nL5_P24JLKYMiakkVMo6TlgCug.roa (hash: fWkZp6QpsCRR5QNNT0hz/+58v4Qis8o4l0c2LUn7tD0=) 2: Hs5OpoVTxSJfvS3erDXXhGQXJSE.roa (hash: ETk/+dQR/qhcGpGtYBL6fSkfntPwX1tHoXTuoqNreRs=) 3: YbU0Q3UDZogVrdk80X0K0-GxqHc.crl (hash: RhbYriwdIBgks8Eba+AwW3H5jhfZFlso08hAgrwd+Eo=) 4: cRbQbZI4caSihSJdxBwTOdI7jHI.roa (hash: l064fVVkmmooFHUiz4jiDmBf7OxJUiTNePDan7lSIBE=) 5: ct4uh4Dvn38kuKb2J9OedNnfBrQ.roa (hash: nZxVoJ4prQOuIIhd7SEgU19Z8RQI5zRlz6rYzsDEzRI=) 6: u7siAwXzbgFTEGp6PKjrdqf7Z4A.roa (hash: vJGRmjZ9RvsYFu3lwU4eezlqzVwLgmj9/3K2yZjY284=) 7: y5D4TaXJLkrfa4Of0NlhAIHZfQY.roa (hash: IeCyxZUbWUBk/m+unrT9oFimJ4vs3IvgUDAcRXAQ5dA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/c1acd6-230a-4e36-a58f-f555e2e68a10/1/YbU0Q3UDZogVrdk80X0K0-GxqHc.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/c1acd6-230a-4e36-a58f-f555e2e68a10/1/YbU0Q3UDZogVrdk80X0K0-GxqHc.mft rsync://rpki.ripe.net/repository/DEFAULT/YbU0Q3UDZogVrdk80X0K0-GxqHc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:b5:51:76:ea:ba:94:32:f3:6d:1d:5f:d4:1c:7c:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61b534437503668815add93cd17d0ad3e1b1a877 Validity Not Before: Dec 20 17:01:14 2025 GMT Not After : Dec 21 17:01:14 2025 GMT Subject: CN=16e8020dea90fad73484aa2997d544e4b439e12e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:03:e2:40:01:c6:a7:fc:bf:ac:d3:f6:01:48: 8e:23:8c:d7:6d:69:46:0b:d1:38:b2:81:4a:a3:0c: 40:e5:45:66:b6:fa:18:24:74:85:19:0f:d3:90:bc: b8:62:6e:27:0d:08:9c:b5:ee:5e:29:ef:30:55:64: 85:34:2b:20:20:c6:fc:cb:f3:30:f5:2d:1b:6a:74: df:54:49:2f:1c:b4:74:ea:4f:a4:48:e9:79:1d:ca: a2:8e:2f:ab:85:90:8a:7d:0c:14:ee:24:3b:0a:e3: d7:df:61:ed:35:1b:01:60:88:56:e0:9c:97:c0:ff: 5b:30:7f:88:50:04:3b:05:bb:30:c8:9a:23:0d:33: 7d:65:89:b5:83:9a:96:9a:af:93:0e:0d:38:72:df: 27:da:4a:51:55:a8:d2:8d:0a:14:85:91:eb:b3:34: d0:08:02:06:de:2c:57:4c:12:ca:32:e3:da:67:13: 4f:c9:02:c5:72:75:b4:31:79:5c:2d:44:07:40:49: 91:a8:2b:04:02:87:03:41:de:79:b4:1d:f7:2c:8f: 93:00:0a:4d:d7:76:24:99:48:ed:26:28:d0:de:47: 55:5e:19:0a:f4:42:21:c8:dd:41:fb:ea:44:4a:84: f2:09:32:25:37:29:cf:96:11:db:44:5b:25:9f:1f: 7c:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:E8:02:0D:EA:90:FA:D7:34:84:AA:29:97:D5:44:E4:B4:39:E1:2E X509v3 Authority Key Identifier: keyid:61:B5:34:43:75:03:66:88:15:AD:D9:3C:D1:7D:0A:D3:E1:B1:A8:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbU0Q3UDZogVrdk80X0K0-GxqHc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/c1acd6-230a-4e36-a58f-f555e2e68a10/1/YbU0Q3UDZogVrdk80X0K0-GxqHc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/c1acd6-230a-4e36-a58f-f555e2e68a10/1/YbU0Q3UDZogVrdk80X0K0-GxqHc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:f2:3e:a7:c1:37:b0:ce:40:70:4d:48:98:37:94:cf:0b:6d: c7:9e:2b:b8:ec:91:87:2f:4d:ae:29:4a:7d:5f:46:25:24:f1: b9:27:51:44:cd:28:0e:ca:18:86:8d:41:bd:a0:55:90:d9:00: ed:45:c1:71:e5:20:f3:16:f0:a7:3a:d6:c7:86:50:4a:59:4d: 2a:70:b3:f6:55:d5:74:2b:3d:ff:71:91:ca:11:86:f5:c7:cf: c0:3d:09:3a:13:5f:7e:42:78:7c:05:d2:e1:4b:66:38:15:a4: 91:c7:c9:24:d8:33:7b:78:7c:b0:98:f1:3d:33:f6:bd:94:d3: 15:5a:5e:33:f3:91:38:36:1c:02:3d:f6:c5:5d:f7:b4:07:17: 99:26:0e:52:a4:75:d2:ef:4a:8e:84:d6:08:75:8b:5d:cf:93: 18:34:97:7a:d1:02:58:2e:01:db:2c:0c:5b:d6:51:61:c1:d5: 04:fc:3b:ca:48:8b:4f:b7:cc:f1:ee:bd:eb:ad:46:8f:99:cb: 9d:e6:d5:c3:2a:6b:57:de:c2:b5:af:2c:c3:e4:a7:68:d1:9e: 10:b9:89:e8:cd:25:8d:da:dc:2f:73:b3:8e:7f:5b:7f:09:aa: 25:99:83:12:30:67:f1:e3:8f:b6:16:b8:78:a2:34:f7:19:89: 5e:44:f5:24 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8tVF26rqUMvNtHV/UHHyOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxYjUzNDQzNzUwMzY2ODgxNWFkZDkzY2QxN2QwYWQzZTFi MWE4NzcwHhcNMjUxMjIwMTcwMTE0WhcNMjUxMjIxMTcwMTE0WjAzMTEwLwYDVQQD EygxNmU4MDIwZGVhOTBmYWQ3MzQ4NGFhMjk5N2Q1NDRlNGI0MzllMTJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjwPiQAHGp/y/rNP2AUiOI4zXbWlG C9E4soFKowxA5UVmtvoYJHSFGQ/TkLy4Ym4nDQicte5eKe8wVWSFNCsgIMb8y/Mw 9S0banTfVEkvHLR06k+kSOl5Hcqiji+rhZCKfQwU7iQ7CuPX32HtNRsBYIhW4JyX wP9bMH+IUAQ7BbswyJojDTN9ZYm1g5qWmq+TDg04ct8n2kpRVajSjQoUhZHrszTQ CAIG3ixXTBLKMuPaZxNPyQLFcnW0MXlcLUQHQEmRqCsEAocDQd55tB33LI+TAApN 13YkmUjtJijQ3kdVXhkK9EIhyN1B++pESoTyCTIlNynPlhHbRFslnx98yQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBboAg3qkPrXNISqKZfVROS0OeEuMB8GA1UdIwQY MBaAFGG1NEN1A2aIFa3ZPNF9CtPhsah3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWWJVMFEzVURab2dWcmRrODBYMEswLUd4cUhjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9jMWFjZDYtMjMwYS00ZTM2LWE1OGYt ZjU1NWUyZTY4YTEwLzEvWWJVMFEzVURab2dWcmRrODBYMEswLUd4cUhjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS9jMWFjZDYtMjMwYS00ZTM2LWE1OGYtZjU1NWUyZTY4YTEw LzEvWWJVMFEzVURab2dWcmRrODBYMEswLUd4cUhjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU/I+p8E3 sM5AcE1ImDeUzwttx54ruOyRhy9NrilKfV9GJSTxuSdRRM0oDsoYho1BvaBVkNkA 7UXBceUg8xbwpzrWx4ZQSllNKnCz9lXVdCs9/3GRyhGG9cfPwD0JOhNffkJ4fAXS 4UtmOBWkkcfJJNgze3h8sJjxPTP2vZTTFVpeM/ORODYcAj32xV33tAcXmSYOUqR1 0u9KjoTWCHWLXc+TGDSXetECWC4B2ywMW9ZRYcHVBPw7ykiLT7fM8e69661Gj5nL nebVwyprV97Cta8sw+SnaNGeELmJ6M0ljdrcL3Ozjn9bfwmqJZmDEjBn8eOPtha4 eKI09xmJXkT1JA== -----END CERTIFICATE-----Generated at Sat Dec 20 23:08:06 2025 by rpki-client