This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/4ef4a9-6d96-4989-9c81-d92e68dfffe4/1/Ybhm4yM4LK6pYefSQj5TyrUJkTE.mft File: Ybhm4yM4LK6pYefSQj5TyrUJkTE.mft (raw, json) Hash identifier: vTw65yKra8nLYD8QvowCbD5bJO+KqpNp4y+fqo8Mn54= Subject key identifier: F9:99:BB:F1:BD:10:EC:E2:EE:4C:9C:B0:3B:0F:68:B0:F2:5A:CA:5D Authority key identifier: 61:B8:66:E3:23:38:2C:AE:A9:61:E7:D2:42:3E:53:CA:B5:09:91:31 Certificate issuer: /CN=61b866e323382caea961e7d2423e53cab5099131 Certificate serial: 019AF1D18C230FCAEE8C634B4B02F12B5D5B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ybhm4yM4LK6pYefSQj5TyrUJkTE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/4ef4a9-6d96-4989-9c81-d92e68dfffe4/1/Ybhm4yM4LK6pYefSQj5TyrUJkTE.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 04:00:33 +0000 Manifest this update: Sat 06 Dec 2025 04:00:33 +0000 Manifest next update: Sun 07 Dec 2025 04:00:33 +0000 Files and hashes: 1: Ybhm4yM4LK6pYefSQj5TyrUJkTE.crl (hash: QmZTxEVE85u1z2wG40k4jE+P9AwpIXdKLVBsGeHPSRU=) 2: d6C8v6GoigEzg6pbLvTWJvddupU.roa (hash: EXaNGOIp/fMA/oSDDsbRGa0FHPZi/hzE5RwEYVseBGk=) 3: og-QYcWWG7blmQPnjS8N7Pfy2CI.roa (hash: F2sqc18qvqzf4/nshb6Uc/1k3H2tfbxW4Ckt/4G4dtQ=) 4: q8IlRbnDa7-lnFAs-hO2WPcOwLk.roa (hash: hbIKEj6KOMWmptm4f819IMKKqrXG2uGf4j2uozA9qks=) 5: zZc3DeDwts9pkaWZgvcKrYsKK6M.roa (hash: oGvkVQFGZUcaVi+hdfOY9pZnUYCxpKrEsPEP9NwnTEA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/4ef4a9-6d96-4989-9c81-d92e68dfffe4/1/Ybhm4yM4LK6pYefSQj5TyrUJkTE.crl rsync://rpki.ripe.net/repository/DEFAULT/81/4ef4a9-6d96-4989-9c81-d92e68dfffe4/1/Ybhm4yM4LK6pYefSQj5TyrUJkTE.mft rsync://rpki.ripe.net/repository/DEFAULT/Ybhm4yM4LK6pYefSQj5TyrUJkTE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:8c:23:0f:ca:ee:8c:63:4b:4b:02:f1:2b:5d:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61b866e323382caea961e7d2423e53cab5099131 Validity Not Before: Dec 6 04:00:33 2025 GMT Not After : Dec 7 04:00:33 2025 GMT Subject: CN=f999bbf1bd10ece2ee4c9cb03b0f68b0f25aca5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:4c:81:41:73:1f:6a:98:f5:d8:43:a5:ad:cc: 11:6f:12:30:fa:6b:75:ea:8e:d9:08:65:1f:94:64: f2:1c:0e:d9:48:3f:9d:87:37:18:ea:2a:39:9a:6e: bf:43:58:c5:03:8c:be:6b:79:69:bb:0e:95:50:0d: 3f:b3:f6:9d:4d:0e:e7:82:5a:05:09:d2:6b:31:4b: 7d:09:da:87:25:f8:f3:d7:01:7a:7d:0a:00:c8:1e: b6:09:23:ab:00:f5:64:42:6d:77:a4:2c:e4:51:f9: 2a:2e:44:c3:0e:3d:5e:f1:f0:1b:87:48:5b:9d:66: 33:12:32:96:0d:9e:3a:35:83:85:11:bb:c3:0d:d2: ad:66:9e:8c:39:2b:6a:1b:84:b9:01:c4:b7:e5:dc: 6b:e1:f1:cd:2c:7f:3e:1f:00:a7:98:ba:3c:19:88: 52:94:b5:34:2b:93:b7:39:0f:e6:9e:21:20:b1:dc: 66:58:11:aa:e2:2f:1a:62:ac:e8:13:13:2e:6f:c0: 97:25:62:c6:aa:78:00:69:ab:59:7f:30:ca:b5:ef: e6:ec:0b:80:fe:bb:15:a9:80:e9:d2:53:a2:0f:32: 9b:74:9e:37:73:a4:7a:1d:ad:92:b0:a5:5d:a5:05: 73:c9:37:59:b6:74:f6:8b:ce:5e:db:66:7b:06:b4: 6c:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:99:BB:F1:BD:10:EC:E2:EE:4C:9C:B0:3B:0F:68:B0:F2:5A:CA:5D X509v3 Authority Key Identifier: keyid:61:B8:66:E3:23:38:2C:AE:A9:61:E7:D2:42:3E:53:CA:B5:09:91:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ybhm4yM4LK6pYefSQj5TyrUJkTE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/4ef4a9-6d96-4989-9c81-d92e68dfffe4/1/Ybhm4yM4LK6pYefSQj5TyrUJkTE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/81/4ef4a9-6d96-4989-9c81-d92e68dfffe4/1/Ybhm4yM4LK6pYefSQj5TyrUJkTE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:fa:0c:b5:ac:1b:c2:3c:c6:0a:61:42:dd:0c:6e:6f:fc:19: a0:b9:d1:62:af:7f:99:bd:da:06:83:d9:82:f5:df:a9:fb:22: e2:f0:64:37:5f:eb:d2:ab:87:56:55:af:cd:53:8f:ec:16:11: 02:e7:f1:bd:b2:ec:a2:d2:e2:76:d8:db:eb:a8:e1:0b:16:c0: 93:c7:9a:13:5f:c2:1d:af:67:f5:84:6d:1d:61:1d:21:1d:c2: 1b:29:0d:af:ac:d5:bb:e7:e2:ff:13:96:8a:55:e6:6b:47:3b: 57:25:8f:d4:57:99:02:b5:f2:c1:20:cd:6c:bf:a8:47:51:3c: 74:a2:aa:e8:e7:bb:5f:5d:09:f4:51:d6:06:c5:14:b4:67:13: 78:f5:da:24:32:ec:78:be:60:17:db:29:2a:b3:86:58:73:5b: dc:ae:0b:1b:bf:6b:4f:0d:e6:90:36:2a:c9:96:f0:07:0b:b8: 29:61:56:84:b5:f2:65:1a:99:cd:38:52:cf:89:07:a1:ef:73: b6:68:8e:d0:77:39:46:41:0c:7f:a7:69:0a:c5:f5:67:65:f9: cd:2a:7b:e9:c3:34:a2:04:39:3c:9e:e2:d3:ea:47:72:63:9b: e7:52:75:ac:be:61:7c:55:06:8c:e6:58:a3:4d:a4:05:7e:4d: af:fc:7c:80 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0YwjD8rujGNLSwLxK11bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxYjg2NmUzMjMzODJjYWVhOTYxZTdkMjQyM2U1M2NhYjUw OTkxMzEwHhcNMjUxMjA2MDQwMDMzWhcNMjUxMjA3MDQwMDMzWjAzMTEwLwYDVQQD EyhmOTk5YmJmMWJkMTBlY2UyZWU0YzljYjAzYjBmNjhiMGYyNWFjYTVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnkyBQXMfapj12EOlrcwRbxIw+mt1 6o7ZCGUflGTyHA7ZSD+dhzcY6io5mm6/Q1jFA4y+a3lpuw6VUA0/s/adTQ7ngloF CdJrMUt9CdqHJfjz1wF6fQoAyB62CSOrAPVkQm13pCzkUfkqLkTDDj1e8fAbh0hb nWYzEjKWDZ46NYOFEbvDDdKtZp6MOStqG4S5AcS35dxr4fHNLH8+HwCnmLo8GYhS lLU0K5O3OQ/mniEgsdxmWBGq4i8aYqzoExMub8CXJWLGqngAaatZfzDKte/m7AuA /rsVqYDp0lOiDzKbdJ43c6R6Ha2SsKVdpQVzyTdZtnT2i85e22Z7BrRs8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPmZu/G9EOzi7kycsDsPaLDyWspdMB8GA1UdIwQY MBaAFGG4ZuMjOCyuqWHn0kI+U8q1CZExMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWWJobTR5TTRMSzZwWWVmU1FqNVR5clVKa1RFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS80ZWY0YTktNmQ5Ni00OTg5LTljODEt ZDkyZTY4ZGZmZmU0LzEvWWJobTR5TTRMSzZwWWVmU1FqNVR5clVKa1RFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MS80ZWY0YTktNmQ5Ni00OTg5LTljODEtZDkyZTY4ZGZmZmU0 LzEvWWJobTR5TTRMSzZwWWVmU1FqNVR5clVKa1RFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL/oMtawb wjzGCmFC3Qxub/wZoLnRYq9/mb3aBoPZgvXfqfsi4vBkN1/r0quHVlWvzVOP7BYR AufxvbLsotLidtjb66jhCxbAk8eaE1/CHa9n9YRtHWEdIR3CGykNr6zVu+fi/xOW ilXma0c7VyWP1FeZArXywSDNbL+oR1E8dKKq6Oe7X10J9FHWBsUUtGcTePXaJDLs eL5gF9spKrOGWHNb3K4LG79rTw3mkDYqyZbwBwu4KWFWhLXyZRqZzThSz4kHoe9z tmiO0Hc5RkEMf6dpCsX1Z2X5zSp76cM0ogQ5PJ7i0+pHcmOb51J1rL5hfFUGjOZY o02kBX5Nr/x8gA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:12:10 2025 by rpki-client