This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/2f3c19-56d5-4924-8bcb-bac472ab7b6a/1/YbGV0TBQ_zxGihSXeHELU1giUdk.mft File: YbGV0TBQ_zxGihSXeHELU1giUdk.mft (raw, json) Hash identifier: ZbQLUN+y16Arj7gI4ObO1HV2NsaWDgyBu1HnEt8KC4c= Subject key identifier: 8A:DD:31:EF:B1:74:89:C6:24:0E:66:44:10:55:DD:A9:58:8F:24:B7 Authority key identifier: 61:B1:95:D1:30:50:FF:3C:46:8A:14:97:78:71:0B:53:58:22:51:D9 Certificate issuer: /CN=61b195d13050ff3c468a149778710b53582251d9 Certificate serial: 019AF19B2DCAFE89A03200A4CAA8EE477662 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbGV0TBQ_zxGihSXeHELU1giUdk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/2f3c19-56d5-4924-8bcb-bac472ab7b6a/1/YbGV0TBQ_zxGihSXeHELU1giUdk.mft Manifest number: 1765 Signing time: Sat 06 Dec 2025 03:01:09 +0000 Manifest this update: Sat 06 Dec 2025 03:01:09 +0000 Manifest next update: Sun 07 Dec 2025 03:01:09 +0000 Files and hashes: 1: Wt3X3B6NcZ-mxrNPh2fG99PqrRE.roa (hash: q1LYdMsfXSEFkYw+v/2PtBLKm0CXtMVR1H0DEe1ErnY=) 2: YbGV0TBQ_zxGihSXeHELU1giUdk.crl (hash: 9duGO+EhWrE7v2S4/NbxsVHbRWgNJCQ7gZQiVHdNYUg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/2f3c19-56d5-4924-8bcb-bac472ab7b6a/1/YbGV0TBQ_zxGihSXeHELU1giUdk.crl rsync://rpki.ripe.net/repository/DEFAULT/61/2f3c19-56d5-4924-8bcb-bac472ab7b6a/1/YbGV0TBQ_zxGihSXeHELU1giUdk.mft rsync://rpki.ripe.net/repository/DEFAULT/YbGV0TBQ_zxGihSXeHELU1giUdk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:2d:ca:fe:89:a0:32:00:a4:ca:a8:ee:47:76:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61b195d13050ff3c468a149778710b53582251d9 Validity Not Before: Dec 6 03:01:09 2025 GMT Not After : Dec 7 03:01:09 2025 GMT Subject: CN=8add31efb17489c6240e66441055dda9588f24b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:0c:77:a9:a1:75:37:39:8d:eb:50:0d:6f:6c: 01:c0:1e:93:67:e3:56:36:24:3f:0a:31:f4:d1:84: c3:f4:20:bd:09:44:de:29:91:2a:22:80:6e:38:4f: 1c:80:e3:b8:70:3b:74:2c:6d:77:bc:20:ed:20:8f: 47:7d:db:ce:95:e1:1c:60:36:e7:b3:29:85:89:40: f2:89:28:9a:40:58:0d:b1:f7:15:d6:e7:ca:0c:06: 6b:ca:0d:80:95:58:5a:e9:82:1b:5b:08:e8:bc:47: 5f:ef:4c:2c:54:3f:f8:c2:f3:41:8b:04:fd:c1:c0: 78:47:f7:67:8c:b4:72:e9:38:78:a9:de:a6:d8:5d: da:9c:38:30:a6:38:ee:08:8b:cd:48:c8:91:d2:83: 96:e5:7c:63:6b:30:ba:ea:65:cd:34:6f:cf:56:22: c8:61:ea:f2:32:3a:7c:68:cf:bc:5a:77:e0:6d:cd: 77:a4:88:3a:d8:3a:5e:58:74:3e:67:cd:4b:e7:da: d6:2d:94:6b:d4:07:cd:70:bc:af:8c:9e:69:38:79: 9b:72:82:4f:68:df:3a:6a:8a:91:a2:40:3b:ed:c2: 6b:08:79:b2:96:db:5e:c3:fd:ee:54:1b:c5:c1:54: b2:f7:c8:be:3e:e7:e4:9b:f9:85:46:f0:3f:12:98: 23:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:DD:31:EF:B1:74:89:C6:24:0E:66:44:10:55:DD:A9:58:8F:24:B7 X509v3 Authority Key Identifier: keyid:61:B1:95:D1:30:50:FF:3C:46:8A:14:97:78:71:0B:53:58:22:51:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbGV0TBQ_zxGihSXeHELU1giUdk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/2f3c19-56d5-4924-8bcb-bac472ab7b6a/1/YbGV0TBQ_zxGihSXeHELU1giUdk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/2f3c19-56d5-4924-8bcb-bac472ab7b6a/1/YbGV0TBQ_zxGihSXeHELU1giUdk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:b0:11:28:cf:87:0f:d0:b9:9f:1c:24:d3:91:b4:56:40:d8: 5c:59:18:f1:65:19:d8:4c:7e:ba:0f:2e:c6:db:ba:85:97:d4: 4d:a6:c9:fd:1e:d4:67:97:50:50:5c:23:06:e2:ff:08:27:ca: 38:9a:a4:dc:d1:51:ec:ac:09:c4:60:56:e4:0d:75:e2:bb:54: f0:88:ab:8e:0c:5b:78:34:13:fb:f8:29:35:c8:07:04:b2:ad: c1:26:8c:92:64:d6:a4:c9:0f:83:65:1e:da:27:60:02:b5:5d: 66:20:de:b0:09:2b:16:c0:68:98:b5:cd:06:19:e0:50:98:dc: a8:28:69:52:87:a3:35:3e:4d:fc:d9:7a:b8:ad:ac:9d:b2:41: 81:43:2a:d5:11:1f:db:a8:95:99:31:60:e5:2f:75:92:3f:05: 21:93:8d:7b:cf:ef:bc:79:be:91:7a:08:bc:cc:a0:8f:90:65: 11:be:68:d0:f9:1f:60:7a:83:a5:fc:c6:97:9b:66:0f:06:74: 46:e5:c6:39:f1:83:73:aa:29:48:d1:29:b2:d5:4f:d2:51:8f: 5a:8d:7b:6a:a9:5c:0f:ef:56:4a:f4:db:19:14:d7:b5:d4:a1: 41:66:e3:d7:4a:81:b9:1c:f7:63:56:ef:49:03:61:eb:e5:d1: 84:e2:1b:40 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmy3K/omgMgCkyqjuR3ZiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxYjE5NWQxMzA1MGZmM2M0NjhhMTQ5Nzc4NzEwYjUzNTgy MjUxZDkwHhcNMjUxMjA2MDMwMTA5WhcNMjUxMjA3MDMwMTA5WjAzMTEwLwYDVQQD Eyg4YWRkMzFlZmIxNzQ4OWM2MjQwZTY2NDQxMDU1ZGRhOTU4OGYyNGI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArwx3qaF1NzmN61ANb2wBwB6TZ+NW NiQ/CjH00YTD9CC9CUTeKZEqIoBuOE8cgOO4cDt0LG13vCDtII9HfdvOleEcYDbn symFiUDyiSiaQFgNsfcV1ufKDAZryg2AlVha6YIbWwjovEdf70wsVD/4wvNBiwT9 wcB4R/dnjLRy6Th4qd6m2F3anDgwpjjuCIvNSMiR0oOW5XxjazC66mXNNG/PViLI YeryMjp8aM+8Wnfgbc13pIg62DpeWHQ+Z81L59rWLZRr1AfNcLyvjJ5pOHmbcoJP aN86aoqRokA77cJrCHmylttew/3uVBvFwVSy98i+Pufkm/mFRvA/EpgjbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIrdMe+xdInGJA5mRBBV3alYjyS3MB8GA1UdIwQY MBaAFGGxldEwUP88RooUl3hxC1NYIlHZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWWJHVjBUQlFfenhHaWhTWGVIRUxVMWdpVWRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS8yZjNjMTktNTZkNS00OTI0LThiY2It YmFjNDcyYWI3YjZhLzEvWWJHVjBUQlFfenhHaWhTWGVIRUxVMWdpVWRrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS8yZjNjMTktNTZkNS00OTI0LThiY2ItYmFjNDcyYWI3YjZh LzEvWWJHVjBUQlFfenhHaWhTWGVIRUxVMWdpVWRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHbARKM+H D9C5nxwk05G0VkDYXFkY8WUZ2Ex+ug8uxtu6hZfUTabJ/R7UZ5dQUFwjBuL/CCfK OJqk3NFR7KwJxGBW5A114rtU8IirjgxbeDQT+/gpNcgHBLKtwSaMkmTWpMkPg2Ue 2idgArVdZiDesAkrFsBomLXNBhngUJjcqChpUoejNT5N/Nl6uK2snbJBgUMq1REf 26iVmTFg5S91kj8FIZONe8/vvHm+kXoIvMygj5BlEb5o0PkfYHqDpfzGl5tmDwZ0 RuXGOfGDc6opSNEpstVP0lGPWo17aqlcD+9WSvTbGRTXtdShQWbj10qBuRz3Y1bv SQNh6+XRhOIbQA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:22:33 2025 by rpki-client