This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/c0e7a1-06f5-4ca0-8210-ea6ed29cab5e/1/YbgkuFq6e8NRKxIUs4XeVw-ylL8.mft File: YbgkuFq6e8NRKxIUs4XeVw-ylL8.mft (raw, json) Hash identifier: mjzT+DrxZPZ+b8RydMiRrQYIbk2h856ixuqhUk0h4L4= Subject key identifier: 8C:2D:F6:09:8C:25:62:B5:28:42:97:6A:26:09:99:0B:5C:BD:72:8D Authority key identifier: 61:B8:24:B8:5A:BA:7B:C3:51:2B:12:14:B3:85:DE:57:0F:B2:94:BF Certificate issuer: /CN=61b824b85aba7bc3512b1214b385de570fb294bf Certificate serial: 019AF61C26D890B1F7089DB1802C125ED049 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbgkuFq6e8NRKxIUs4XeVw-ylL8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/c0e7a1-06f5-4ca0-8210-ea6ed29cab5e/1/YbgkuFq6e8NRKxIUs4XeVw-ylL8.mft Manifest number: 0D5F Signing time: Sun 07 Dec 2025 00:00:31 +0000 Manifest this update: Sun 07 Dec 2025 00:00:31 +0000 Manifest next update: Mon 08 Dec 2025 00:00:31 +0000 Files and hashes: 1: YbgkuFq6e8NRKxIUs4XeVw-ylL8.crl (hash: fFOfu62QiQ26Go0ueY7rtg/9IUO0eK0DzE7Vgfrzw5s=) 2: b9-Xe57-P3gr_wKG9Fdk9x-8_jI.roa (hash: 6yS6JDMkNFqPC6IhCp7cvJnugVcw1WsjLczS6bmB5js=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/c0e7a1-06f5-4ca0-8210-ea6ed29cab5e/1/YbgkuFq6e8NRKxIUs4XeVw-ylL8.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/c0e7a1-06f5-4ca0-8210-ea6ed29cab5e/1/YbgkuFq6e8NRKxIUs4XeVw-ylL8.mft rsync://rpki.ripe.net/repository/DEFAULT/YbgkuFq6e8NRKxIUs4XeVw-ylL8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:1c:26:d8:90:b1:f7:08:9d:b1:80:2c:12:5e:d0:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61b824b85aba7bc3512b1214b385de570fb294bf Validity Not Before: Dec 7 00:00:31 2025 GMT Not After : Dec 8 00:00:31 2025 GMT Subject: CN=8c2df6098c2562b52842976a2609990b5cbd728d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:1b:5b:7e:e9:ca:53:a5:3c:c5:f9:15:38:b3: dc:b2:8f:77:82:c4:63:ad:34:64:59:92:b9:25:8e: e2:3e:de:ef:d2:d6:ee:9c:57:d2:a6:b2:01:cf:f3: ac:42:49:3a:13:b8:6c:3c:6a:ab:99:72:c2:dd:90: 3a:7f:a7:cd:97:08:78:ee:cb:17:df:04:2d:0d:ce: 19:16:79:0d:b0:77:90:cf:ed:d7:be:33:46:f6:10: 8d:20:75:19:9e:0c:64:bd:cd:fd:a5:84:59:c9:01: de:a1:8d:f2:54:00:ca:ba:73:8d:a4:fa:cf:b7:d7: 12:d3:86:f0:17:14:95:ba:24:86:c8:c8:e1:c6:43: 4e:12:62:d2:f5:d2:74:db:3e:b1:fd:c5:cf:9a:3b: 36:aa:46:28:c0:45:42:95:5a:8c:9c:60:f4:f4:4b: 72:fe:e6:bb:23:54:4d:ff:1b:3b:85:ba:e2:c5:44: 7d:8d:82:6d:72:3f:7f:85:18:7d:1e:c1:c6:b4:c0: 25:04:6b:27:f7:36:ff:da:31:38:0f:4e:d7:6d:90: f3:e4:ea:17:48:1c:d6:f9:03:ec:63:f3:07:8a:1d: ea:87:d6:4b:80:40:ec:50:25:22:9d:ba:c8:f0:07: 63:5e:81:4b:d4:ae:9b:03:c4:38:50:3b:f4:b6:55: ff:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:2D:F6:09:8C:25:62:B5:28:42:97:6A:26:09:99:0B:5C:BD:72:8D X509v3 Authority Key Identifier: keyid:61:B8:24:B8:5A:BA:7B:C3:51:2B:12:14:B3:85:DE:57:0F:B2:94:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbgkuFq6e8NRKxIUs4XeVw-ylL8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/c0e7a1-06f5-4ca0-8210-ea6ed29cab5e/1/YbgkuFq6e8NRKxIUs4XeVw-ylL8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/c0e7a1-06f5-4ca0-8210-ea6ed29cab5e/1/YbgkuFq6e8NRKxIUs4XeVw-ylL8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:5b:8d:4b:4d:d1:91:92:85:0d:e5:ba:09:9a:5a:ae:fa:80: 6f:eb:6b:26:57:69:72:17:b2:2a:03:47:1a:a8:34:cd:96:33: 73:fb:be:b6:cc:2a:96:bf:24:38:fb:9d:2d:d8:f2:62:1a:95: c4:c7:cd:83:4c:49:72:a0:4e:22:6f:3d:9e:a0:0f:b3:ad:97: 65:53:e1:ca:17:15:ea:4e:b7:60:4a:05:58:b0:76:77:b7:b3: bb:82:75:13:06:c8:17:11:93:dd:40:d4:c5:0d:a7:a7:ba:5c: 3a:78:64:a0:f4:f3:63:26:41:e1:27:59:9b:55:8e:bf:5c:75: d0:09:b5:5e:54:2b:3e:0b:03:d6:40:e6:38:1f:af:7e:c6:e6: 14:72:b6:bc:61:e8:ee:45:f5:cf:75:c2:dd:70:52:26:8d:17: d7:9e:5b:fa:3e:49:56:a1:7d:98:da:11:96:63:d9:34:19:bb: 0f:5d:96:bd:12:bf:3a:05:1f:80:ec:ed:ed:b5:d2:d9:b4:46: 3f:d8:f1:44:24:b9:a7:da:08:2a:3b:04:02:1f:fd:45:b3:85: 37:5e:a1:e3:a3:17:38:6d:88:1e:2e:20:c2:e9:a1:83:89:eb: 58:04:f5:ea:46:ea:c9:ae:3f:a3:f0:04:31:7c:ca:84:1e:1b: bd:2b:bd:3f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2HCbYkLH3CJ2xgCwSXtBJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxYjgyNGI4NWFiYTdiYzM1MTJiMTIxNGIzODVkZTU3MGZi Mjk0YmYwHhcNMjUxMjA3MDAwMDMxWhcNMjUxMjA4MDAwMDMxWjAzMTEwLwYDVQQD Eyg4YzJkZjYwOThjMjU2MmI1Mjg0Mjk3NmEyNjA5OTkwYjVjYmQ3MjhkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2htbfunKU6U8xfkVOLPcso93gsRj rTRkWZK5JY7iPt7v0tbunFfSprIBz/OsQkk6E7hsPGqrmXLC3ZA6f6fNlwh47ssX 3wQtDc4ZFnkNsHeQz+3XvjNG9hCNIHUZngxkvc39pYRZyQHeoY3yVADKunONpPrP t9cS04bwFxSVuiSGyMjhxkNOEmLS9dJ02z6x/cXPmjs2qkYowEVClVqMnGD09Ety /ua7I1RN/xs7hbrixUR9jYJtcj9/hRh9HsHGtMAlBGsn9zb/2jE4D07XbZDz5OoX SBzW+QPsY/MHih3qh9ZLgEDsUCUinbrI8AdjXoFL1K6bA8Q4UDv0tlX/3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIwt9gmMJWK1KEKXaiYJmQtcvXKNMB8GA1UdIwQY MBaAFGG4JLhaunvDUSsSFLOF3lcPspS/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWWJna3VGcTZlOE5SS3hJVXM0WGVWdy15bEw4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS9jMGU3YTEtMDZmNS00Y2EwLTgyMTAt ZWE2ZWQyOWNhYjVlLzEvWWJna3VGcTZlOE5SS3hJVXM0WGVWdy15bEw4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS9jMGU3YTEtMDZmNS00Y2EwLTgyMTAtZWE2ZWQyOWNhYjVl LzEvWWJna3VGcTZlOE5SS3hJVXM0WGVWdy15bEw4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACFuNS03R kZKFDeW6CZparvqAb+trJldpcheyKgNHGqg0zZYzc/u+tswqlr8kOPudLdjyYhqV xMfNg0xJcqBOIm89nqAPs62XZVPhyhcV6k63YEoFWLB2d7ezu4J1EwbIFxGT3UDU xQ2np7pcOnhkoPTzYyZB4SdZm1WOv1x10Am1XlQrPgsD1kDmOB+vfsbmFHK2vGHo 7kX1z3XC3XBSJo0X155b+j5JVqF9mNoRlmPZNBm7D12WvRK/OgUfgOzt7bXS2bRG P9jxRCS5p9oIKjsEAh/9RbOFN16h46MXOG2IHi4gwumhg4nrWAT16kbqya4/o/AE MXzKhB4bvSu9Pw== -----END CERTIFICATE-----Generated at Sun Dec 7 04:57:24 2025 by rpki-client