This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/c1acd6-230a-4e36-a58f-f555e2e68a10/1/YbU0Q3UDZogVrdk80X0K0-GxqHc.mft File: YbU0Q3UDZogVrdk80X0K0-GxqHc.mft (raw, json) Hash identifier: lVSPUBx6C0TvlVcd0t11WVfxfzxIX0nGjasmP7axahg= Subject key identifier: 11:F9:EB:3E:A6:CB:56:07:9F:C2:B4:91:A7:61:43:3B:CB:17:3B:88 Authority key identifier: 61:B5:34:43:75:03:66:88:15:AD:D9:3C:D1:7D:0A:D3:E1:B1:A8:77 Certificate issuer: /CN=61b534437503668815add93cd17d0ad3e1b1a877 Certificate serial: 019B4E16C398B68BEFB6D6978B7937D393D7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbU0Q3UDZogVrdk80X0K0-GxqHc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/c1acd6-230a-4e36-a58f-f555e2e68a10/1/YbU0Q3UDZogVrdk80X0K0-GxqHc.mft Manifest number: 17A5 Signing time: Wed 24 Dec 2025 02:01:13 +0000 Manifest this update: Wed 24 Dec 2025 02:01:13 +0000 Manifest next update: Thu 25 Dec 2025 02:01:13 +0000 Files and hashes: 1: 9nL5_P24JLKYMiakkVMo6TlgCug.roa (hash: fWkZp6QpsCRR5QNNT0hz/+58v4Qis8o4l0c2LUn7tD0=) 2: Hs5OpoVTxSJfvS3erDXXhGQXJSE.roa (hash: ETk/+dQR/qhcGpGtYBL6fSkfntPwX1tHoXTuoqNreRs=) 3: YbU0Q3UDZogVrdk80X0K0-GxqHc.crl (hash: MJFPjlyM7b1r3UNAlZf5xqBMCmZqMCf0d2q6NVmnLCA=) 4: cRbQbZI4caSihSJdxBwTOdI7jHI.roa (hash: l064fVVkmmooFHUiz4jiDmBf7OxJUiTNePDan7lSIBE=) 5: ct4uh4Dvn38kuKb2J9OedNnfBrQ.roa (hash: nZxVoJ4prQOuIIhd7SEgU19Z8RQI5zRlz6rYzsDEzRI=) 6: u7siAwXzbgFTEGp6PKjrdqf7Z4A.roa (hash: vJGRmjZ9RvsYFu3lwU4eezlqzVwLgmj9/3K2yZjY284=) 7: y5D4TaXJLkrfa4Of0NlhAIHZfQY.roa (hash: IeCyxZUbWUBk/m+unrT9oFimJ4vs3IvgUDAcRXAQ5dA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/c1acd6-230a-4e36-a58f-f555e2e68a10/1/YbU0Q3UDZogVrdk80X0K0-GxqHc.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/c1acd6-230a-4e36-a58f-f555e2e68a10/1/YbU0Q3UDZogVrdk80X0K0-GxqHc.mft rsync://rpki.ripe.net/repository/DEFAULT/YbU0Q3UDZogVrdk80X0K0-GxqHc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 02:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4e:16:c3:98:b6:8b:ef:b6:d6:97:8b:79:37:d3:93:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61b534437503668815add93cd17d0ad3e1b1a877 Validity Not Before: Dec 24 02:01:13 2025 GMT Not After : Dec 25 02:01:13 2025 GMT Subject: CN=11f9eb3ea6cb56079fc2b491a761433bcb173b88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:5a:04:73:88:00:b9:41:19:d5:23:23:6b:50: 29:79:5a:39:08:83:5a:6b:53:d1:af:99:cc:df:aa: e3:35:5b:98:42:a7:d8:6b:bd:47:e2:c9:de:83:98: 73:04:e9:9c:59:d3:81:68:66:88:5a:5d:44:35:9a: e2:6e:ab:e8:e6:86:98:60:f4:04:a5:86:54:72:37: 16:59:7b:a7:a3:b5:69:22:96:90:a9:63:15:47:4c: 87:46:73:32:66:cb:dc:58:d0:0c:d9:fe:c3:08:25: cc:d9:33:67:9d:9b:21:64:66:04:7a:13:e0:07:60: 85:8c:ea:3a:f9:f1:9a:9a:3d:59:f6:38:aa:98:4a: 8e:7e:47:fd:97:e2:11:2b:75:44:d8:a9:ca:27:2f: 6d:b8:8b:97:86:1c:0a:9a:45:62:04:1e:b4:04:cb: 6b:3e:1d:b3:85:3c:96:b9:fb:df:54:5d:36:ed:38: 02:6e:ec:15:5e:ca:b3:65:97:87:e3:94:96:7a:82: e5:3b:40:38:b3:28:2c:fa:70:7b:78:2f:99:4d:5b: 36:a1:4d:c3:db:40:1f:8c:60:f4:bb:58:05:fa:0e: a2:70:03:bc:71:fc:7b:18:a7:36:a2:6e:c9:ed:3a: 6d:43:e4:c7:0a:50:99:5f:45:8a:d6:fe:2a:c5:3b: 27:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:F9:EB:3E:A6:CB:56:07:9F:C2:B4:91:A7:61:43:3B:CB:17:3B:88 X509v3 Authority Key Identifier: keyid:61:B5:34:43:75:03:66:88:15:AD:D9:3C:D1:7D:0A:D3:E1:B1:A8:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbU0Q3UDZogVrdk80X0K0-GxqHc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/c1acd6-230a-4e36-a58f-f555e2e68a10/1/YbU0Q3UDZogVrdk80X0K0-GxqHc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/c1acd6-230a-4e36-a58f-f555e2e68a10/1/YbU0Q3UDZogVrdk80X0K0-GxqHc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:29:9d:41:87:c6:9d:0d:25:61:e5:2a:ef:57:db:6f:da:f7: b8:08:9c:26:6b:8d:26:d4:4c:e2:95:fb:9f:e0:42:00:66:e2: 79:62:a5:56:63:76:b9:5f:e8:0f:6a:ad:2d:ea:9a:58:30:0b: ca:6e:05:fa:2e:9c:83:f5:4a:3f:61:19:26:a8:75:65:25:06: 6b:80:ba:4f:31:1f:60:94:3d:10:08:53:bd:aa:9e:10:42:52: 99:ed:dc:23:cd:97:71:75:1a:3e:d2:f4:37:d9:0c:bf:01:e7: 54:d7:70:fe:ed:c9:30:1b:36:8c:e7:36:e3:41:96:c5:6c:07: 93:e9:84:50:a1:30:b2:07:f3:77:2a:bf:d3:e7:dd:46:af:06: b1:56:31:91:78:1b:7d:19:55:1a:1c:c6:3c:ac:8b:13:2a:90: 22:e6:39:7f:c5:7c:a1:6a:00:27:21:22:70:b1:1a:61:67:04: 29:c9:d0:b9:2a:79:e1:0e:b2:6f:14:71:bd:9f:4d:77:3b:b4: 95:53:1c:60:04:3b:c1:5c:62:73:02:89:63:11:9b:20:c7:30: 77:46:37:ed:ae:f7:f5:2a:3c:21:ed:c2:fe:be:6f:93:38:d2: 9a:7b:22:58:2e:f5:c6:e2:fe:77:34:be:76:f7:13:5d:14:8c: 7a:c4:0a:2b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtOFsOYtovvttaXi3k305PXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxYjUzNDQzNzUwMzY2ODgxNWFkZDkzY2QxN2QwYWQzZTFi MWE4NzcwHhcNMjUxMjI0MDIwMTEzWhcNMjUxMjI1MDIwMTEzWjAzMTEwLwYDVQQD EygxMWY5ZWIzZWE2Y2I1NjA3OWZjMmI0OTFhNzYxNDMzYmNiMTczYjg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiVoEc4gAuUEZ1SMja1ApeVo5CINa a1PRr5nM36rjNVuYQqfYa71H4sneg5hzBOmcWdOBaGaIWl1ENZribqvo5oaYYPQE pYZUcjcWWXuno7VpIpaQqWMVR0yHRnMyZsvcWNAM2f7DCCXM2TNnnZshZGYEehPg B2CFjOo6+fGamj1Z9jiqmEqOfkf9l+IRK3VE2KnKJy9tuIuXhhwKmkViBB60BMtr Ph2zhTyWufvfVF027TgCbuwVXsqzZZeH45SWeoLlO0A4sygs+nB7eC+ZTVs2oU3D 20AfjGD0u1gF+g6icAO8cfx7GKc2om7J7TptQ+THClCZX0WK1v4qxTsnCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBH56z6my1YHn8K0kadhQzvLFzuIMB8GA1UdIwQY MBaAFGG1NEN1A2aIFa3ZPNF9CtPhsah3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWWJVMFEzVURab2dWcmRrODBYMEswLUd4cUhjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9jMWFjZDYtMjMwYS00ZTM2LWE1OGYt ZjU1NWUyZTY4YTEwLzEvWWJVMFEzVURab2dWcmRrODBYMEswLUd4cUhjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS9jMWFjZDYtMjMwYS00ZTM2LWE1OGYtZjU1NWUyZTY4YTEw LzEvWWJVMFEzVURab2dWcmRrODBYMEswLUd4cUhjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALymdQYfG nQ0lYeUq71fbb9r3uAicJmuNJtRM4pX7n+BCAGbieWKlVmN2uV/oD2qtLeqaWDAL ym4F+i6cg/VKP2EZJqh1ZSUGa4C6TzEfYJQ9EAhTvaqeEEJSme3cI82XcXUaPtL0 N9kMvwHnVNdw/u3JMBs2jOc240GWxWwHk+mEUKEwsgfzdyq/0+fdRq8GsVYxkXgb fRlVGhzGPKyLEyqQIuY5f8V8oWoAJyEicLEaYWcEKcnQuSp54Q6ybxRxvZ9Ndzu0 lVMcYAQ7wVxicwKJYxGbIMcwd0Y37a739So8Ie3C/r5vkzjSmnsiWC71xuL+dzS+ dvcTXRSMesQKKw== -----END CERTIFICATE-----Generated at Wed Dec 24 11:27:28 2025 by rpki-client