This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/ab2b25-2a13-41f0-b9c5-fba49b0cdded/1/YB3AD5pIG0FQhrFDp91M2h_7JHA.mft File: YB3AD5pIG0FQhrFDp91M2h_7JHA.mft (raw, json) Hash identifier: UJpeoRiH5OSqu5T2OMjly3j2yUkWc9UYtEClmIL70/o= Subject key identifier: 07:54:DD:70:EA:76:AA:6E:04:59:0F:05:75:A0:78:6D:8D:C4:C0:52 Authority key identifier: 60:1D:C0:0F:9A:48:1B:41:50:86:B1:43:A7:DD:4C:DA:1F:FB:24:70 Certificate issuer: /CN=601dc00f9a481b415086b143a7dd4cda1ffb2470 Certificate serial: 019AF1D267E69B81E118863C8CFF6CAD9453 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YB3AD5pIG0FQhrFDp91M2h_7JHA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/ab2b25-2a13-41f0-b9c5-fba49b0cdded/1/YB3AD5pIG0FQhrFDp91M2h_7JHA.mft Manifest number: 175F Signing time: Sat 06 Dec 2025 04:01:29 +0000 Manifest this update: Sat 06 Dec 2025 04:01:29 +0000 Manifest next update: Sun 07 Dec 2025 04:01:29 +0000 Files and hashes: 1: 4mIaRiVfusRCW_nZ919kue73VcU.roa (hash: KAlnZdYdnEt6W3Qh7SxuikxG/eJq1ZmaN4m/5vXa+us=) 2: YB3AD5pIG0FQhrFDp91M2h_7JHA.crl (hash: Cqr0FvaFlC73XYnLimXcfNHyakJQ+JxqFEtcFgusP7k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/ab2b25-2a13-41f0-b9c5-fba49b0cdded/1/YB3AD5pIG0FQhrFDp91M2h_7JHA.crl rsync://rpki.ripe.net/repository/DEFAULT/a4/ab2b25-2a13-41f0-b9c5-fba49b0cdded/1/YB3AD5pIG0FQhrFDp91M2h_7JHA.mft rsync://rpki.ripe.net/repository/DEFAULT/YB3AD5pIG0FQhrFDp91M2h_7JHA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:67:e6:9b:81:e1:18:86:3c:8c:ff:6c:ad:94:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=601dc00f9a481b415086b143a7dd4cda1ffb2470 Validity Not Before: Dec 6 04:01:29 2025 GMT Not After : Dec 7 04:01:29 2025 GMT Subject: CN=0754dd70ea76aa6e04590f0575a0786d8dc4c052 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:32:7b:61:98:b8:d3:07:94:67:b3:34:f3:cc: 98:8d:ef:0c:e8:9c:c2:72:ee:36:38:18:b1:a2:0b: fe:f1:aa:d0:16:f3:6b:8c:e5:6f:d8:5b:97:61:57: ff:fa:69:2a:88:c5:63:3e:d4:34:8c:1b:e7:00:c9: 24:e8:35:c2:0d:f1:eb:94:4c:bf:af:85:7c:c2:e9: fc:07:af:52:87:1d:a7:1f:d1:1d:35:5b:97:8b:10: 06:09:b9:f7:b2:f7:9f:66:cb:2c:fa:2e:92:6d:be: be:10:5b:59:78:ac:15:d9:22:f9:e4:4f:cc:f2:64: f8:38:0f:42:ac:73:62:4f:63:4e:d1:96:f1:e4:74: fd:d7:e2:aa:58:0b:63:9c:ea:52:d4:f8:33:4c:64: 41:15:3f:26:44:a2:f7:70:30:26:f2:36:19:f8:78: 32:1c:59:15:38:72:15:af:8d:d8:0c:f9:a6:da:ea: a1:92:e4:03:d8:bb:a9:21:6f:ec:15:21:28:fd:f1: 64:ec:53:f0:6b:44:c0:9a:4a:2b:60:fc:01:a5:b8: 7c:c9:e8:90:0f:38:8b:39:75:71:fe:3c:72:e0:24: 32:d7:94:3e:12:73:e6:b9:90:1f:9c:77:4d:b4:16: a1:85:3c:45:bf:52:7c:20:5b:f7:a7:a1:42:11:e7: 9a:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:54:DD:70:EA:76:AA:6E:04:59:0F:05:75:A0:78:6D:8D:C4:C0:52 X509v3 Authority Key Identifier: keyid:60:1D:C0:0F:9A:48:1B:41:50:86:B1:43:A7:DD:4C:DA:1F:FB:24:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YB3AD5pIG0FQhrFDp91M2h_7JHA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/ab2b25-2a13-41f0-b9c5-fba49b0cdded/1/YB3AD5pIG0FQhrFDp91M2h_7JHA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/ab2b25-2a13-41f0-b9c5-fba49b0cdded/1/YB3AD5pIG0FQhrFDp91M2h_7JHA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:11:55:55:ff:62:1b:b8:75:b5:52:66:ee:12:19:97:45:48: 4b:80:9d:73:94:20:46:bd:b0:fb:a1:89:37:f3:19:7d:b6:46: a3:25:d3:34:c9:80:35:40:88:22:9c:60:dd:b8:7d:34:a0:70: ea:12:f8:40:10:ce:39:e2:37:4e:da:75:27:8a:2b:06:e6:6e: 33:0d:a1:57:80:24:d4:6c:76:7c:13:78:24:7e:4e:ec:04:85: 28:da:7e:16:ed:0e:2c:7e:18:c4:81:f6:6f:2f:36:f0:a6:f3: a9:5a:04:c3:8f:f8:37:05:1e:d5:98:a4:14:43:6a:14:90:ee: 6a:57:5b:2c:a6:d5:7e:ea:6a:f6:f9:84:26:76:13:f7:3f:42: 71:f9:c5:e8:25:e4:f2:0b:04:04:35:fc:be:5b:02:1e:69:ee: cb:93:f8:28:05:b9:39:b4:03:54:dd:13:1e:02:8c:34:f5:e8: 9a:53:8d:c4:1b:da:24:7d:bd:6b:95:ca:2c:f1:b3:03:92:ee: e2:60:f2:f6:af:fa:22:a4:ed:1e:4b:6c:f4:d5:fa:4f:17:2c: e8:30:ff:73:6f:43:cf:ef:21:38:5a:08:dc:c9:10:41:96:4a: f3:97:80:57:68:ee:7d:df:0d:9b:58:0d:a4:fd:8f:60:57:d1: 66:23:ab:46 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0mfmm4HhGIY8jP9srZRTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwMWRjMDBmOWE0ODFiNDE1MDg2YjE0M2E3ZGQ0Y2RhMWZm YjI0NzAwHhcNMjUxMjA2MDQwMTI5WhcNMjUxMjA3MDQwMTI5WjAzMTEwLwYDVQQD EygwNzU0ZGQ3MGVhNzZhYTZlMDQ1OTBmMDU3NWEwNzg2ZDhkYzRjMDUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnjJ7YZi40weUZ7M088yYje8M6JzC cu42OBixogv+8arQFvNrjOVv2FuXYVf/+mkqiMVjPtQ0jBvnAMkk6DXCDfHrlEy/ r4V8wun8B69Shx2nH9EdNVuXixAGCbn3svefZsss+i6Sbb6+EFtZeKwV2SL55E/M 8mT4OA9CrHNiT2NO0Zbx5HT91+KqWAtjnOpS1PgzTGRBFT8mRKL3cDAm8jYZ+Hgy HFkVOHIVr43YDPmm2uqhkuQD2LupIW/sFSEo/fFk7FPwa0TAmkorYPwBpbh8yeiQ DziLOXVx/jxy4CQy15Q+EnPmuZAfnHdNtBahhTxFv1J8IFv3p6FCEeeapwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAdU3XDqdqpuBFkPBXWgeG2NxMBSMB8GA1UdIwQY MBaAFGAdwA+aSBtBUIaxQ6fdTNof+yRwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUIzQUQ1cElHMEZRaHJGRHA5MU0yaF83SkhBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC9hYjJiMjUtMmExMy00MWYwLWI5YzUt ZmJhNDliMGNkZGVkLzEvWUIzQUQ1cElHMEZRaHJGRHA5MU0yaF83SkhBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNC9hYjJiMjUtMmExMy00MWYwLWI5YzUtZmJhNDliMGNkZGVk LzEvWUIzQUQ1cElHMEZRaHJGRHA5MU0yaF83SkhBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHBFVVf9i G7h1tVJm7hIZl0VIS4Cdc5QgRr2w+6GJN/MZfbZGoyXTNMmANUCIIpxg3bh9NKBw 6hL4QBDOOeI3Ttp1J4orBuZuMw2hV4Ak1Gx2fBN4JH5O7ASFKNp+Fu0OLH4YxIH2 by828KbzqVoEw4/4NwUe1ZikFENqFJDualdbLKbVfupq9vmEJnYT9z9CcfnF6CXk 8gsEBDX8vlsCHmnuy5P4KAW5ObQDVN0THgKMNPXomlONxBvaJH29a5XKLPGzA5Lu 4mDy9q/6IqTtHkts9NX6Txcs6DD/c29Dz+8hOFoI3MkQQZZK85eAV2jufd8Nm1gN pP2PYFfRZiOrRg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:24:26 2025 by rpki-client