This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/766988-3f1e-43d4-bec4-9fa95aa9b079/1/ybTWgj7LKLSjXkDcEe8inLI3XN8.mft File: ybTWgj7LKLSjXkDcEe8inLI3XN8.mft (raw, json) Hash identifier: IN5HPVuJTijvW0dd/vDyQ4LnZdvSHZE0NPNwMurHyKw= Subject key identifier: 79:00:BF:F3:95:DF:B7:45:85:92:68:F3:5B:21:8B:59:4E:FF:E0:35 Authority key identifier: C9:B4:D6:82:3E:CB:28:B4:A3:5E:40:DC:11:EF:22:9C:B2:37:5C:DF Certificate issuer: /CN=c9b4d6823ecb28b4a35e40dc11ef229cb2375cdf Certificate serial: 019AF50987C8053C02A9B5B600E36127EBB5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ybTWgj7LKLSjXkDcEe8inLI3XN8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/766988-3f1e-43d4-bec4-9fa95aa9b079/1/ybTWgj7LKLSjXkDcEe8inLI3XN8.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 19:00:33 +0000 Manifest this update: Sat 06 Dec 2025 19:00:33 +0000 Manifest next update: Sun 07 Dec 2025 19:00:33 +0000 Files and hashes: 1: u2ztrN64ny4t-5qedlgZVwCCd-I.roa (hash: L/fv9+pcl735U5hA8Uy57NEou3lVd9gt0o2oOToLmgY=) 2: ybTWgj7LKLSjXkDcEe8inLI3XN8.crl (hash: 23qJCn4Z0fwcRAzPSv71Qqo6s1e+rzjdjU8OGA4eGyg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/766988-3f1e-43d4-bec4-9fa95aa9b079/1/ybTWgj7LKLSjXkDcEe8inLI3XN8.crl rsync://rpki.ripe.net/repository/DEFAULT/56/766988-3f1e-43d4-bec4-9fa95aa9b079/1/ybTWgj7LKLSjXkDcEe8inLI3XN8.mft rsync://rpki.ripe.net/repository/DEFAULT/ybTWgj7LKLSjXkDcEe8inLI3XN8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:09:87:c8:05:3c:02:a9:b5:b6:00:e3:61:27:eb:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c9b4d6823ecb28b4a35e40dc11ef229cb2375cdf Validity Not Before: Dec 6 19:00:33 2025 GMT Not After : Dec 7 19:00:33 2025 GMT Subject: CN=7900bff395dfb745859268f35b218b594effe035 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:dd:91:e8:6d:f7:c4:e5:07:b1:c4:db:e6:52: 7b:79:43:10:47:5a:c1:c6:b5:6e:e2:bf:00:ae:1b: e6:b9:c1:2b:90:20:59:ad:89:31:9d:d6:1d:bf:f3: 50:db:b3:a2:3e:17:00:ad:b4:20:46:2f:14:4f:75: 5d:77:5c:b8:5b:b7:2e:00:a3:21:f4:20:19:5c:9b: 2c:96:b6:3f:ed:b3:6e:4b:e7:0d:77:09:d2:90:6b: 75:b8:e2:21:dc:20:e4:c2:c8:06:a0:1b:6a:12:b9: 28:79:66:6d:c3:35:77:28:b4:93:f9:b6:ac:ae:89: 06:89:e2:a5:bf:26:cf:6e:ff:8a:8a:4b:1e:e8:15: b6:ec:e9:8c:ae:98:bf:c9:ac:12:5d:de:a0:67:39: 77:74:8c:01:4d:85:b7:5c:bf:e1:d9:8f:31:dc:93: 0d:e7:98:01:c6:6a:b0:c5:7b:db:d9:4f:ea:f7:09: ce:30:90:42:15:46:4f:d4:e4:3e:00:ab:31:31:11: d2:d2:b4:4f:dd:55:9d:c6:d0:1c:ae:1a:a4:7c:36: 7b:a1:17:f4:72:df:fe:20:f1:e6:fa:6f:66:7b:9d: aa:14:2e:00:ea:df:d8:bd:69:33:c7:91:5e:e2:28: bf:24:e3:22:82:ee:23:78:65:0b:50:76:d1:5f:7e: 43:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:00:BF:F3:95:DF:B7:45:85:92:68:F3:5B:21:8B:59:4E:FF:E0:35 X509v3 Authority Key Identifier: keyid:C9:B4:D6:82:3E:CB:28:B4:A3:5E:40:DC:11:EF:22:9C:B2:37:5C:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ybTWgj7LKLSjXkDcEe8inLI3XN8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/766988-3f1e-43d4-bec4-9fa95aa9b079/1/ybTWgj7LKLSjXkDcEe8inLI3XN8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/766988-3f1e-43d4-bec4-9fa95aa9b079/1/ybTWgj7LKLSjXkDcEe8inLI3XN8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:ae:98:a4:4d:a8:87:69:36:4e:34:ab:76:40:96:d8:fb:1c: 06:03:89:9d:20:18:e5:f1:1a:2d:0f:79:32:b6:3b:95:d4:f6: ec:19:c1:7b:ab:36:6e:a9:66:ac:98:54:72:9d:47:0c:a1:d3: 4e:f5:5d:6a:35:43:2a:f2:3a:c5:e5:6b:be:5e:00:a5:55:b2: 0f:d7:7d:82:e8:8b:18:2c:4b:9b:de:66:b1:69:aa:2b:ee:f8: 0e:15:5b:ce:ac:c0:97:7b:49:94:94:07:0c:e2:fc:f4:f7:e5: 88:a7:86:e7:18:ee:9c:71:26:71:15:87:e3:d6:83:cf:6d:a9: 52:a5:25:44:8d:d6:eb:bc:b6:bf:0a:aa:18:9c:cc:d8:de:18: 20:86:cb:6a:57:db:2c:36:45:3a:bb:ef:fc:42:5c:52:42:2d: 7b:82:ca:8a:fa:f8:b5:f3:4d:80:93:b1:95:64:4c:3b:f7:9d: eb:0b:70:0a:c2:d1:1e:07:19:3c:68:ae:a4:90:37:b2:f5:d2: 9a:2c:d7:b1:88:97:c7:f7:b5:31:50:35:52:d1:05:4f:15:22: 75:0c:9b:3a:49:59:14:a9:13:07:99:15:79:dc:0a:c9:97:16: 3b:2a:94:9d:06:37:3d:dc:bf:97:98:29:e6:0c:96:2c:6b:80: fb:13:69:bb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1CYfIBTwCqbW2AONhJ+u1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5YjRkNjgyM2VjYjI4YjRhMzVlNDBkYzExZWYyMjljYjIz NzVjZGYwHhcNMjUxMjA2MTkwMDMzWhcNMjUxMjA3MTkwMDMzWjAzMTEwLwYDVQQD Eyg3OTAwYmZmMzk1ZGZiNzQ1ODU5MjY4ZjM1YjIxOGI1OTRlZmZlMDM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk92R6G33xOUHscTb5lJ7eUMQR1rB xrVu4r8ArhvmucErkCBZrYkxndYdv/NQ27OiPhcArbQgRi8UT3Vdd1y4W7cuAKMh 9CAZXJsslrY/7bNuS+cNdwnSkGt1uOIh3CDkwsgGoBtqErkoeWZtwzV3KLST+bas rokGieKlvybPbv+Kikse6BW27OmMrpi/yawSXd6gZzl3dIwBTYW3XL/h2Y8x3JMN 55gBxmqwxXvb2U/q9wnOMJBCFUZP1OQ+AKsxMRHS0rRP3VWdxtAcrhqkfDZ7oRf0 ct/+IPHm+m9me52qFC4A6t/YvWkzx5Fe4ii/JOMigu4jeGULUHbRX35DrQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHkAv/OV37dFhZJo81shi1lO/+A1MB8GA1UdIwQY MBaAFMm01oI+yyi0o15A3BHvIpyyN1zfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWJUV2dqN0xLTFNqWGtEY0VlOGluTEkzWE44LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni83NjY5ODgtM2YxZS00M2Q0LWJlYzQt OWZhOTVhYTliMDc5LzEveWJUV2dqN0xLTFNqWGtEY0VlOGluTEkzWE44Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni83NjY5ODgtM2YxZS00M2Q0LWJlYzQtOWZhOTVhYTliMDc5 LzEveWJUV2dqN0xLTFNqWGtEY0VlOGluTEkzWE44LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiK6YpE2o h2k2TjSrdkCW2PscBgOJnSAY5fEaLQ95MrY7ldT27BnBe6s2bqlmrJhUcp1HDKHT TvVdajVDKvI6xeVrvl4ApVWyD9d9guiLGCxLm95msWmqK+74DhVbzqzAl3tJlJQH DOL89PfliKeG5xjunHEmcRWH49aDz22pUqUlRI3W67y2vwqqGJzM2N4YIIbLalfb LDZFOrvv/EJcUkIte4LKivr4tfNNgJOxlWRMO/ed6wtwCsLRHgcZPGiupJA3svXS mizXsYiXx/e1MVA1UtEFTxUidQybOklZFKkTB5kVedwKyZcWOyqUnQY3Pdy/l5gp 5gyWLGuA+xNpuw== -----END CERTIFICATE-----Generated at Sat Dec 6 23:17:30 2025 by rpki-client