This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/4ef4a9-6d96-4989-9c81-d92e68dfffe4/1/Ybhm4yM4LK6pYefSQj5TyrUJkTE.mft File: Ybhm4yM4LK6pYefSQj5TyrUJkTE.mft (raw, json) Hash identifier: 5bpbXzRcoATe/3jKdq3fzlZLu0F8POSBEFekOY3ugPQ= Subject key identifier: 3A:AC:6B:43:0F:F6:22:65:B5:5A:BF:6B:1F:E5:32:EC:2F:50:7C:88 Authority key identifier: 61:B8:66:E3:23:38:2C:AE:A9:61:E7:D2:42:3E:53:CA:B5:09:91:31 Certificate issuer: /CN=61b866e323382caea961e7d2423e53cab5099131 Certificate serial: 019B337AD3F6DE580F82AF117D2E7AB0E3DE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ybhm4yM4LK6pYefSQj5TyrUJkTE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/4ef4a9-6d96-4989-9c81-d92e68dfffe4/1/Ybhm4yM4LK6pYefSQj5TyrUJkTE.mft Manifest number: 1784 Signing time: Thu 18 Dec 2025 22:00:46 +0000 Manifest this update: Thu 18 Dec 2025 22:00:46 +0000 Manifest next update: Fri 19 Dec 2025 22:00:46 +0000 Files and hashes: 1: Ybhm4yM4LK6pYefSQj5TyrUJkTE.crl (hash: JNicKwSI79nnLX5eJ0SgH9PFIfyBQCLDZXlk3IKzed4=) 2: d6C8v6GoigEzg6pbLvTWJvddupU.roa (hash: EXaNGOIp/fMA/oSDDsbRGa0FHPZi/hzE5RwEYVseBGk=) 3: og-QYcWWG7blmQPnjS8N7Pfy2CI.roa (hash: F2sqc18qvqzf4/nshb6Uc/1k3H2tfbxW4Ckt/4G4dtQ=) 4: q8IlRbnDa7-lnFAs-hO2WPcOwLk.roa (hash: hbIKEj6KOMWmptm4f819IMKKqrXG2uGf4j2uozA9qks=) 5: zZc3DeDwts9pkaWZgvcKrYsKK6M.roa (hash: oGvkVQFGZUcaVi+hdfOY9pZnUYCxpKrEsPEP9NwnTEA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/4ef4a9-6d96-4989-9c81-d92e68dfffe4/1/Ybhm4yM4LK6pYefSQj5TyrUJkTE.crl rsync://rpki.ripe.net/repository/DEFAULT/81/4ef4a9-6d96-4989-9c81-d92e68dfffe4/1/Ybhm4yM4LK6pYefSQj5TyrUJkTE.mft rsync://rpki.ripe.net/repository/DEFAULT/Ybhm4yM4LK6pYefSQj5TyrUJkTE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:7a:d3:f6:de:58:0f:82:af:11:7d:2e:7a:b0:e3:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61b866e323382caea961e7d2423e53cab5099131 Validity Not Before: Dec 18 22:00:46 2025 GMT Not After : Dec 19 22:00:46 2025 GMT Subject: CN=3aac6b430ff62265b55abf6b1fe532ec2f507c88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:61:3c:cb:85:46:3d:42:8d:12:44:0c:66:3c: 55:5c:50:de:5a:5e:63:3b:eb:d0:dc:99:35:32:98: be:28:0b:dd:18:0e:ff:4d:2d:53:1b:20:d2:0d:ba: 20:8a:65:e9:bc:f7:7e:d0:ac:86:90:f8:2a:50:6c: 2c:88:05:57:32:f9:81:70:00:c6:a0:b9:a2:44:43: 0a:55:4c:3e:09:7c:bc:4a:a0:18:4c:e8:aa:d5:02: 14:5f:8e:d1:0d:d5:4b:5d:d4:9e:93:e4:1f:c5:b6: 05:ee:3e:b7:8e:a0:7b:37:04:fa:bb:85:40:07:f9: 79:97:80:cf:7a:7e:f9:08:63:a5:8e:69:d5:cb:1d: 57:64:9e:1f:b7:83:1e:44:d9:e1:ab:69:2c:0d:74: 2d:63:8e:d8:bd:db:29:f9:00:6b:34:04:4d:aa:8c: 51:fa:6d:78:7b:66:02:b1:50:bf:f3:62:fb:1e:4f: 99:d9:11:2e:eb:9b:9a:0c:19:e3:c7:bd:8a:80:34: 1d:df:af:96:37:4d:b1:b2:f1:f3:02:df:e8:e3:5e: 6c:8e:dd:2a:80:14:9f:38:b7:ce:39:80:04:3d:d9: b7:46:08:ad:1b:99:42:43:99:69:2c:fd:7a:49:90: a0:4c:d1:9a:7f:65:cc:d8:1a:f8:ef:f5:dc:de:4f: 8a:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:AC:6B:43:0F:F6:22:65:B5:5A:BF:6B:1F:E5:32:EC:2F:50:7C:88 X509v3 Authority Key Identifier: keyid:61:B8:66:E3:23:38:2C:AE:A9:61:E7:D2:42:3E:53:CA:B5:09:91:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ybhm4yM4LK6pYefSQj5TyrUJkTE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/4ef4a9-6d96-4989-9c81-d92e68dfffe4/1/Ybhm4yM4LK6pYefSQj5TyrUJkTE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/81/4ef4a9-6d96-4989-9c81-d92e68dfffe4/1/Ybhm4yM4LK6pYefSQj5TyrUJkTE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:72:8e:6c:2b:45:75:7f:2f:c3:f9:6f:26:00:46:bc:bf:53: 4a:5c:d1:15:1d:71:23:80:83:df:55:3e:a8:b6:e4:5e:f3:00: 2e:21:15:13:bc:af:73:5e:4f:e1:89:a6:37:49:b5:63:80:e7: 8c:fe:45:fc:24:08:96:39:80:37:3c:ea:f2:c1:cc:53:95:5e: 67:37:16:d3:77:d7:8e:3a:ea:14:96:53:58:2a:e9:b4:36:01: b2:8f:fc:b2:83:41:80:39:11:a5:d4:db:5c:d5:5f:c9:3d:ab: 95:8e:9c:10:7a:b4:98:9e:ce:bb:e3:38:28:96:6d:10:3f:bc: 52:92:f1:42:20:7d:7d:3a:70:e3:cf:fd:a0:09:54:15:4e:4c: 6a:8f:ea:d8:5a:3d:1e:41:0a:f4:4c:b1:21:00:79:60:7d:58: 89:dd:1a:ee:24:8a:44:fb:0c:c9:90:2f:82:89:97:e3:05:86: fc:c2:dc:68:b7:0f:16:eb:48:dd:f0:b2:ed:9a:d3:5d:b8:92: 5d:54:60:71:17:a4:ad:8c:28:3a:0f:57:49:c4:7b:35:96:1a: 11:c1:32:f2:7d:e3:b1:4b:06:4f:5a:5d:5d:48:fe:61:7f:1d: 1f:0e:5d:3e:14:90:ab:20:32:0a:39:ae:fe:b1:ac:d6:f0:a6: 79:92:91:f7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszetP23lgPgq8RfS56sOPeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxYjg2NmUzMjMzODJjYWVhOTYxZTdkMjQyM2U1M2NhYjUw OTkxMzEwHhcNMjUxMjE4MjIwMDQ2WhcNMjUxMjE5MjIwMDQ2WjAzMTEwLwYDVQQD EygzYWFjNmI0MzBmZjYyMjY1YjU1YWJmNmIxZmU1MzJlYzJmNTA3Yzg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvWE8y4VGPUKNEkQMZjxVXFDeWl5j O+vQ3Jk1Mpi+KAvdGA7/TS1TGyDSDbogimXpvPd+0KyGkPgqUGwsiAVXMvmBcADG oLmiREMKVUw+CXy8SqAYTOiq1QIUX47RDdVLXdSek+QfxbYF7j63jqB7NwT6u4VA B/l5l4DPen75CGOljmnVyx1XZJ4ft4MeRNnhq2ksDXQtY47Yvdsp+QBrNARNqoxR +m14e2YCsVC/82L7Hk+Z2REu65uaDBnjx72KgDQd36+WN02xsvHzAt/o415sjt0q gBSfOLfOOYAEPdm3RgitG5lCQ5lpLP16SZCgTNGaf2XM2Br47/Xc3k+KWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDqsa0MP9iJltVq/ax/lMuwvUHyIMB8GA1UdIwQY MBaAFGG4ZuMjOCyuqWHn0kI+U8q1CZExMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWWJobTR5TTRMSzZwWWVmU1FqNVR5clVKa1RFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS80ZWY0YTktNmQ5Ni00OTg5LTljODEt ZDkyZTY4ZGZmZmU0LzEvWWJobTR5TTRMSzZwWWVmU1FqNVR5clVKa1RFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MS80ZWY0YTktNmQ5Ni00OTg5LTljODEtZDkyZTY4ZGZmZmU0 LzEvWWJobTR5TTRMSzZwWWVmU1FqNVR5clVKa1RFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgHKObCtF dX8vw/lvJgBGvL9TSlzRFR1xI4CD31U+qLbkXvMALiEVE7yvc15P4YmmN0m1Y4Dn jP5F/CQIljmANzzq8sHMU5VeZzcW03fXjjrqFJZTWCrptDYBso/8soNBgDkRpdTb XNVfyT2rlY6cEHq0mJ7Ou+M4KJZtED+8UpLxQiB9fTpw48/9oAlUFU5Mao/q2Fo9 HkEK9EyxIQB5YH1Yid0a7iSKRPsMyZAvgomX4wWG/MLcaLcPFutI3fCy7ZrTXbiS XVRgcRekrYwoOg9XScR7NZYaEcEy8n3jsUsGT1pdXUj+YX8dHw5dPhSQqyAyCjmu /rGs1vCmeZKR9w== -----END CERTIFICATE-----Generated at Fri Dec 19 06:20:05 2025 by rpki-client