This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/fb2a45-8d94-4a8d-bcb0-6191b9d0cda3/1/YbHjHAn-gm_k15Ln-ohV4K05NCo.mft File: YbHjHAn-gm_k15Ln-ohV4K05NCo.mft (raw, json) Hash identifier: /iig/kzYvGQrp4CpVFwcXOcuni81Mp6VuRz2JmEd1aY= Subject key identifier: 7B:0C:8D:DA:2E:02:81:0F:96:2A:CE:A9:0A:90:AD:58:F1:FB:E6:CE Authority key identifier: 61:B1:E3:1C:09:FE:82:6F:E4:D7:92:E7:FA:88:55:E0:AD:39:34:2A Certificate issuer: /CN=61b1e31c09fe826fe4d792e7fa8855e0ad39342a Certificate serial: 019AF2098A9D4D58A767710A271C8E441CD6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbHjHAn-gm_k15Ln-ohV4K05NCo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/fb2a45-8d94-4a8d-bcb0-6191b9d0cda3/1/YbHjHAn-gm_k15Ln-ohV4K05NCo.mft Manifest number: 175F Signing time: Sat 06 Dec 2025 05:01:42 +0000 Manifest this update: Sat 06 Dec 2025 05:01:42 +0000 Manifest next update: Sun 07 Dec 2025 05:01:42 +0000 Files and hashes: 1: 6NZRnUE5rHquhh6nv9A14s2aRkA.roa (hash: BDIznY+oSrAehNVVW8SN5zZkQxk6NfrwDHMlr9/Gl2o=) 2: YbHjHAn-gm_k15Ln-ohV4K05NCo.crl (hash: gvKk7dcmUOVw2kDujrz2+2vtzqIbWO5h8PuZbAy/N+Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/fb2a45-8d94-4a8d-bcb0-6191b9d0cda3/1/YbHjHAn-gm_k15Ln-ohV4K05NCo.crl rsync://rpki.ripe.net/repository/DEFAULT/37/fb2a45-8d94-4a8d-bcb0-6191b9d0cda3/1/YbHjHAn-gm_k15Ln-ohV4K05NCo.mft rsync://rpki.ripe.net/repository/DEFAULT/YbHjHAn-gm_k15Ln-ohV4K05NCo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:8a:9d:4d:58:a7:67:71:0a:27:1c:8e:44:1c:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61b1e31c09fe826fe4d792e7fa8855e0ad39342a Validity Not Before: Dec 6 05:01:42 2025 GMT Not After : Dec 7 05:01:42 2025 GMT Subject: CN=7b0c8dda2e02810f962acea90a90ad58f1fbe6ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:4d:6f:43:b5:fc:6a:f5:12:b4:22:ea:ee:04: e5:01:1b:3e:a4:93:0a:b4:7f:bc:9c:d9:fc:0d:5f: cd:6d:e6:c9:5b:4c:d3:81:fb:d2:42:d2:78:d4:99: ed:53:07:39:c2:76:09:d0:3f:15:f4:03:43:01:02: a8:f8:e5:5b:98:f1:4d:37:76:93:13:63:42:49:a6: 48:9c:13:d6:18:eb:98:d4:35:ea:14:7c:01:3f:41: cc:66:9b:82:0a:c6:7e:a8:37:66:d6:d6:75:53:94: 4f:93:d3:bb:e9:b6:d0:ff:77:cf:af:f5:42:13:97: ae:41:16:58:41:05:30:5d:7f:e2:65:f4:cc:4e:97: 57:3a:2d:76:85:fc:69:c1:ff:47:58:9e:10:5e:c0: b9:c8:73:ab:d8:c3:e3:a6:87:1c:ee:54:3f:44:9e: f8:0b:a9:fa:b1:dc:54:2c:c3:9b:4b:34:4f:f0:13: df:0c:21:16:59:5b:dc:d2:1e:87:5b:73:12:f0:68: a6:75:b6:b0:fe:83:95:1f:bd:ea:4b:51:44:bc:96: b1:f5:df:45:fe:90:37:c4:a9:d5:eb:af:5e:34:aa: ca:ef:4f:08:75:37:ac:f6:0e:64:41:65:64:13:21: 67:23:8d:13:8b:e9:0c:03:9d:07:c2:81:e3:4d:36: 37:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:0C:8D:DA:2E:02:81:0F:96:2A:CE:A9:0A:90:AD:58:F1:FB:E6:CE X509v3 Authority Key Identifier: keyid:61:B1:E3:1C:09:FE:82:6F:E4:D7:92:E7:FA:88:55:E0:AD:39:34:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbHjHAn-gm_k15Ln-ohV4K05NCo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/fb2a45-8d94-4a8d-bcb0-6191b9d0cda3/1/YbHjHAn-gm_k15Ln-ohV4K05NCo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/37/fb2a45-8d94-4a8d-bcb0-6191b9d0cda3/1/YbHjHAn-gm_k15Ln-ohV4K05NCo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:8b:5a:8d:d4:e2:be:df:ab:e2:98:31:69:f1:f0:40:a4:8a: 10:2b:6a:44:12:0a:98:0b:71:4a:87:88:c1:cd:3a:ee:11:79: 50:f8:24:84:95:3b:fd:76:c3:e1:f9:68:d3:2e:20:14:82:1f: 87:09:b8:32:cb:aa:33:ab:87:d1:02:5b:4f:9f:fa:ba:79:00: 96:41:6a:ea:ba:cd:84:67:27:3b:b6:14:43:e5:d5:c5:5e:20: 3b:0d:0a:b5:be:ab:77:bf:dc:7e:73:5c:69:6c:c1:28:7e:c8: 11:f5:0f:a0:3f:64:31:16:6c:e9:29:84:49:9b:9c:38:33:3b: 2c:89:55:de:eb:61:a5:62:87:88:54:aa:7d:06:43:b9:46:27: 79:da:ed:25:e0:b6:8d:cf:08:f0:11:40:39:0d:76:26:7f:92: 07:93:db:c8:fd:71:9d:c8:32:84:a2:5a:5d:7c:e3:d6:8b:cb: fa:f8:1d:35:b6:1d:21:46:53:ed:e1:12:06:e0:ca:3f:5f:24: ce:0f:40:c0:25:a0:8f:14:09:c9:36:50:cd:ab:1e:b1:19:ab: 07:23:87:b3:fe:62:82:29:99:9e:08:83:e0:be:d7:f9:02:59: f6:fd:bb:d5:9d:bd:9b:ef:6a:bf:2c:bc:68:92:96:8d:96:0f: 71:8e:8a:07 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCYqdTVinZ3EKJxyORBzWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxYjFlMzFjMDlmZTgyNmZlNGQ3OTJlN2ZhODg1NWUwYWQz OTM0MmEwHhcNMjUxMjA2MDUwMTQyWhcNMjUxMjA3MDUwMTQyWjAzMTEwLwYDVQQD Eyg3YjBjOGRkYTJlMDI4MTBmOTYyYWNlYTkwYTkwYWQ1OGYxZmJlNmNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx01vQ7X8avUStCLq7gTlARs+pJMK tH+8nNn8DV/NbebJW0zTgfvSQtJ41JntUwc5wnYJ0D8V9ANDAQKo+OVbmPFNN3aT E2NCSaZInBPWGOuY1DXqFHwBP0HMZpuCCsZ+qDdm1tZ1U5RPk9O76bbQ/3fPr/VC E5euQRZYQQUwXX/iZfTMTpdXOi12hfxpwf9HWJ4QXsC5yHOr2MPjpocc7lQ/RJ74 C6n6sdxULMObSzRP8BPfDCEWWVvc0h6HW3MS8Gimdbaw/oOVH73qS1FEvJax9d9F /pA3xKnV669eNKrK708IdTes9g5kQWVkEyFnI40Ti+kMA50HwoHjTTY3cQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHsMjdouAoEPlirOqQqQrVjx++bOMB8GA1UdIwQY MBaAFGGx4xwJ/oJv5NeS5/qIVeCtOTQqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWWJIakhBbi1nbV9rMTVMbi1vaFY0SzA1TkNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy9mYjJhNDUtOGQ5NC00YThkLWJjYjAt NjE5MWI5ZDBjZGEzLzEvWWJIakhBbi1nbV9rMTVMbi1vaFY0SzA1TkNvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNy9mYjJhNDUtOGQ5NC00YThkLWJjYjAtNjE5MWI5ZDBjZGEz LzEvWWJIakhBbi1nbV9rMTVMbi1vaFY0SzA1TkNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN4tajdTi vt+r4pgxafHwQKSKECtqRBIKmAtxSoeIwc067hF5UPgkhJU7/XbD4flo0y4gFIIf hwm4MsuqM6uH0QJbT5/6unkAlkFq6rrNhGcnO7YUQ+XVxV4gOw0Ktb6rd7/cfnNc aWzBKH7IEfUPoD9kMRZs6SmESZucODM7LIlV3uthpWKHiFSqfQZDuUYnedrtJeC2 jc8I8BFAOQ12Jn+SB5PbyP1xncgyhKJaXXzj1ovL+vgdNbYdIUZT7eESBuDKP18k zg9AwCWgjxQJyTZQzasesRmrByOHs/5igimZngiD4L7X+QJZ9v271Z29m+9qvyy8 aJKWjZYPcY6KBw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:21:35 2025 by rpki-client