This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/7f2c07-cef5-42f4-8f32-8631fbf5c620/1/YbBXiaToJL6BA953DcJcWT7z_co.mft File: YbBXiaToJL6BA953DcJcWT7z_co.mft (raw, json) Hash identifier: u02v5msHypkkhdovOIU5uUmOwSE6HgaP/1Um8fr/5Kw= Subject key identifier: EF:D9:79:B0:7A:AE:81:01:CD:DC:90:70:A6:20:B0:67:F3:02:6F:C4 Authority key identifier: 61:B0:57:89:A4:E8:24:BE:81:03:DE:77:0D:C2:5C:59:3E:F3:FD:CA Certificate issuer: /CN=61b05789a4e824be8103de770dc25c593ef3fdca Certificate serial: 019B0FA5506D8B856ACE4893C18974701D23 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbBXiaToJL6BA953DcJcWT7z_co.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/7f2c07-cef5-42f4-8f32-8631fbf5c620/1/YbBXiaToJL6BA953DcJcWT7z_co.mft Manifest number: 131E Signing time: Thu 11 Dec 2025 23:00:50 +0000 Manifest this update: Thu 11 Dec 2025 23:00:50 +0000 Manifest next update: Fri 12 Dec 2025 23:00:50 +0000 Files and hashes: 1: YbBXiaToJL6BA953DcJcWT7z_co.crl (hash: a/OS2oElogaA55oPOpDbXmMWyNtCt4tHYmDLuDg+VEA=) 2: shQWrGUmL_hnxXrykLqgxjUrJSo.roa (hash: WyhgYBiNi+KPH14FenrkvjOQfAHnL6lB02jl9DUrbbs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/7f2c07-cef5-42f4-8f32-8631fbf5c620/1/YbBXiaToJL6BA953DcJcWT7z_co.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/7f2c07-cef5-42f4-8f32-8631fbf5c620/1/YbBXiaToJL6BA953DcJcWT7z_co.mft rsync://rpki.ripe.net/repository/DEFAULT/YbBXiaToJL6BA953DcJcWT7z_co.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:a5:50:6d:8b:85:6a:ce:48:93:c1:89:74:70:1d:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61b05789a4e824be8103de770dc25c593ef3fdca Validity Not Before: Dec 11 23:00:50 2025 GMT Not After : Dec 12 23:00:50 2025 GMT Subject: CN=efd979b07aae8101cddc9070a620b067f3026fc4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:60:e5:58:a9:bf:50:f6:b0:f4:f6:0d:a4:fe: 86:de:81:6d:a6:9b:b4:29:c5:97:29:ba:b2:76:85: ea:52:b4:c5:8e:90:38:37:0c:51:fa:a0:6a:dd:5b: cd:97:c5:ab:53:92:59:52:d4:07:a4:26:e2:79:91: be:ee:d9:02:0f:15:5f:6b:29:51:9c:42:02:2a:d4: fd:8f:a5:f5:5e:4d:26:35:49:a9:2d:2c:31:6f:aa: 38:77:95:36:6e:6e:1b:5d:be:8c:cc:ec:15:60:9c: 6b:f6:43:d7:59:50:e9:99:06:8b:dd:22:55:19:ae: 8f:32:73:af:c3:b9:0c:31:e4:d0:22:83:78:4e:f1: 76:22:51:02:68:fd:f2:09:22:13:73:4e:f3:fb:b8: d5:e0:54:9b:fb:33:b5:c4:91:8c:ec:b7:98:bc:86: 21:98:aa:c1:92:df:e5:2d:6c:64:81:8c:ce:9c:1d: 16:eb:b4:8f:fb:24:f5:36:6e:29:f4:d0:47:00:50: 26:bd:0d:0c:a7:ed:57:83:63:86:96:7c:e8:4d:c7: 0b:be:c1:8c:f3:04:62:84:fa:ef:ee:af:d0:e8:4a: cd:48:fe:73:98:92:35:db:4d:a8:18:15:6f:b1:67: cf:09:28:2a:db:13:b5:ff:34:24:65:df:8b:e4:c2: c3:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:D9:79:B0:7A:AE:81:01:CD:DC:90:70:A6:20:B0:67:F3:02:6F:C4 X509v3 Authority Key Identifier: keyid:61:B0:57:89:A4:E8:24:BE:81:03:DE:77:0D:C2:5C:59:3E:F3:FD:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbBXiaToJL6BA953DcJcWT7z_co.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7f2c07-cef5-42f4-8f32-8631fbf5c620/1/YbBXiaToJL6BA953DcJcWT7z_co.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7f2c07-cef5-42f4-8f32-8631fbf5c620/1/YbBXiaToJL6BA953DcJcWT7z_co.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:7b:8b:33:e0:dd:45:c5:f7:ed:62:7e:c7:59:b8:56:28:1f: 11:a4:de:7f:74:22:27:76:76:ef:55:6c:be:53:97:97:f6:e6: 26:2e:c6:52:79:26:e2:23:fa:ef:81:84:e0:64:8b:42:4f:ae: 2c:10:80:b2:9d:7b:b7:d9:f7:16:8a:75:d2:5c:52:33:02:c9: 4e:2d:0e:df:37:50:02:c9:eb:c8:86:29:0a:d5:90:94:0e:34: bb:57:01:a9:c0:ed:18:a8:50:4f:89:83:4c:2c:11:cd:e2:8f: c9:d2:61:5d:5b:85:df:a8:e3:9a:78:8f:34:58:5c:13:6c:d1: 04:db:35:99:b8:73:a5:0f:e1:4d:bb:8b:07:b3:4f:92:10:41: 50:b1:0e:74:9b:06:5d:df:ee:49:78:1d:46:46:0e:e9:2d:25: 5c:1d:ee:32:a4:c8:ca:4d:76:95:75:4d:9c:8c:27:00:8f:ac: e9:9c:ef:4a:64:ba:d1:59:c4:95:2d:4c:0b:fb:23:10:f8:89: 2c:1b:a8:58:53:f5:a6:6a:94:09:06:fd:6d:35:5b:da:f9:bd: 4f:5b:9a:dd:61:71:a2:88:67:f7:48:69:ca:25:46:ec:cc:45: 7a:d2:9b:63:07:f9:33:99:36:81:08:40:b1:a9:b7:0e:94:4e: 03:93:73:5b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPpVBti4VqzkiTwYl0cB0jMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxYjA1Nzg5YTRlODI0YmU4MTAzZGU3NzBkYzI1YzU5M2Vm M2ZkY2EwHhcNMjUxMjExMjMwMDUwWhcNMjUxMjEyMjMwMDUwWjAzMTEwLwYDVQQD EyhlZmQ5NzliMDdhYWU4MTAxY2RkYzkwNzBhNjIwYjA2N2YzMDI2ZmM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA02DlWKm/UPaw9PYNpP6G3oFtppu0 KcWXKbqydoXqUrTFjpA4NwxR+qBq3VvNl8WrU5JZUtQHpCbieZG+7tkCDxVfaylR nEICKtT9j6X1Xk0mNUmpLSwxb6o4d5U2bm4bXb6MzOwVYJxr9kPXWVDpmQaL3SJV Ga6PMnOvw7kMMeTQIoN4TvF2IlECaP3yCSITc07z+7jV4FSb+zO1xJGM7LeYvIYh mKrBkt/lLWxkgYzOnB0W67SP+yT1Nm4p9NBHAFAmvQ0Mp+1Xg2OGlnzoTccLvsGM 8wRihPrv7q/Q6ErNSP5zmJI1202oGBVvsWfPCSgq2xO1/zQkZd+L5MLDNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO/ZebB6roEBzdyQcKYgsGfzAm/EMB8GA1UdIwQY MBaAFGGwV4mk6CS+gQPedw3CXFk+8/3KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWWJCWGlhVG9KTDZCQTk1M0RjSmNXVDd6X2NvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC83ZjJjMDctY2VmNS00MmY0LThmMzIt ODYzMWZiZjVjNjIwLzEvWWJCWGlhVG9KTDZCQTk1M0RjSmNXVDd6X2NvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC83ZjJjMDctY2VmNS00MmY0LThmMzItODYzMWZiZjVjNjIw LzEvWWJCWGlhVG9KTDZCQTk1M0RjSmNXVDd6X2NvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm3uLM+Dd RcX37WJ+x1m4VigfEaTef3QiJ3Z271VsvlOXl/bmJi7GUnkm4iP674GE4GSLQk+u LBCAsp17t9n3Fop10lxSMwLJTi0O3zdQAsnryIYpCtWQlA40u1cBqcDtGKhQT4mD TCwRzeKPydJhXVuF36jjmniPNFhcE2zRBNs1mbhzpQ/hTbuLB7NPkhBBULEOdJsG Xd/uSXgdRkYO6S0lXB3uMqTIyk12lXVNnIwnAI+s6ZzvSmS60VnElS1MC/sjEPiJ LBuoWFP1pmqUCQb9bTVb2vm9T1ua3WFxoohn90hpyiVG7MxFetKbYwf5M5k2gQhA sam3DpROA5NzWw== -----END CERTIFICATE-----Generated at Fri Dec 12 06:51:52 2025 by rpki-client