This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/c1acd6-230a-4e36-a58f-f555e2e68a10/1/YbU0Q3UDZogVrdk80X0K0-GxqHc.mft File: YbU0Q3UDZogVrdk80X0K0-GxqHc.mft (raw, json) Hash identifier: RtHi+6b8xSIXLhIc/GdpRPGj2hK8fYPTik6c/FjQAqU= Subject key identifier: 53:31:EA:53:AB:FF:9E:63:B4:CA:11:70:27:88:42:35:32:E9:6B:B7 Authority key identifier: 61:B5:34:43:75:03:66:88:15:AD:D9:3C:D1:7D:0A:D3:E1:B1:A8:77 Certificate issuer: /CN=61b534437503668815add93cd17d0ad3e1b1a877 Certificate serial: 019AF1649A1E575649F7F33D397AD7BAC991 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbU0Q3UDZogVrdk80X0K0-GxqHc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/c1acd6-230a-4e36-a58f-f555e2e68a10/1/YbU0Q3UDZogVrdk80X0K0-GxqHc.mft Manifest number: 1775 Signing time: Sat 06 Dec 2025 02:01:33 +0000 Manifest this update: Sat 06 Dec 2025 02:01:33 +0000 Manifest next update: Sun 07 Dec 2025 02:01:33 +0000 Files and hashes: 1: 9nL5_P24JLKYMiakkVMo6TlgCug.roa (hash: fWkZp6QpsCRR5QNNT0hz/+58v4Qis8o4l0c2LUn7tD0=) 2: Hs5OpoVTxSJfvS3erDXXhGQXJSE.roa (hash: ETk/+dQR/qhcGpGtYBL6fSkfntPwX1tHoXTuoqNreRs=) 3: YbU0Q3UDZogVrdk80X0K0-GxqHc.crl (hash: dp9p/G0KSTlZmXwTdbFRybjFAVpR8nQFPegV7wvfkxo=) 4: cRbQbZI4caSihSJdxBwTOdI7jHI.roa (hash: l064fVVkmmooFHUiz4jiDmBf7OxJUiTNePDan7lSIBE=) 5: ct4uh4Dvn38kuKb2J9OedNnfBrQ.roa (hash: nZxVoJ4prQOuIIhd7SEgU19Z8RQI5zRlz6rYzsDEzRI=) 6: u7siAwXzbgFTEGp6PKjrdqf7Z4A.roa (hash: vJGRmjZ9RvsYFu3lwU4eezlqzVwLgmj9/3K2yZjY284=) 7: y5D4TaXJLkrfa4Of0NlhAIHZfQY.roa (hash: IeCyxZUbWUBk/m+unrT9oFimJ4vs3IvgUDAcRXAQ5dA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/c1acd6-230a-4e36-a58f-f555e2e68a10/1/YbU0Q3UDZogVrdk80X0K0-GxqHc.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/c1acd6-230a-4e36-a58f-f555e2e68a10/1/YbU0Q3UDZogVrdk80X0K0-GxqHc.mft rsync://rpki.ripe.net/repository/DEFAULT/YbU0Q3UDZogVrdk80X0K0-GxqHc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:9a:1e:57:56:49:f7:f3:3d:39:7a:d7:ba:c9:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61b534437503668815add93cd17d0ad3e1b1a877 Validity Not Before: Dec 6 02:01:33 2025 GMT Not After : Dec 7 02:01:33 2025 GMT Subject: CN=5331ea53abff9e63b4ca11702788423532e96bb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:43:4f:e8:f7:65:57:67:7d:9c:a1:11:ba:7e: 30:21:8d:6d:92:5e:4f:e6:c3:be:17:2d:16:d3:f5: b8:a9:f3:4c:10:37:9d:cd:af:75:2e:40:7b:dc:50: b6:55:ec:fa:7e:ad:ea:30:6c:75:86:43:eb:77:d5: 2e:e9:cd:e6:9d:f4:b0:08:f7:21:d1:a9:f7:14:e3: 09:ed:48:85:6e:5a:ee:7f:02:db:2d:bd:70:31:1e: e9:5a:ed:a0:30:34:5a:57:61:39:68:84:78:51:57: b6:e7:a7:9d:0c:25:19:13:f8:20:0f:68:a2:e4:dc: 0c:55:29:e7:30:5a:cd:5e:c1:ae:fe:b1:ff:2f:8f: b8:41:15:d6:1e:b2:aa:48:3e:2a:47:1f:f1:87:66: d3:a0:56:dd:3b:52:42:34:61:84:91:71:43:11:c2: 6b:d5:09:29:c0:61:8f:6b:f4:01:56:5b:21:02:7a: e9:74:5b:67:85:bb:37:c9:59:1a:dd:bd:25:23:4f: 61:75:12:2c:f9:99:64:ce:c1:8f:6c:58:55:17:77: 2e:e2:68:86:46:f1:9a:e3:f4:19:9a:6b:d0:ef:92: dd:2e:af:40:1c:ef:05:58:74:d6:8d:03:12:17:27: a5:5e:41:3d:33:5a:ae:fb:b5:32:76:9b:5b:6d:a8: c2:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:31:EA:53:AB:FF:9E:63:B4:CA:11:70:27:88:42:35:32:E9:6B:B7 X509v3 Authority Key Identifier: keyid:61:B5:34:43:75:03:66:88:15:AD:D9:3C:D1:7D:0A:D3:E1:B1:A8:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbU0Q3UDZogVrdk80X0K0-GxqHc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/c1acd6-230a-4e36-a58f-f555e2e68a10/1/YbU0Q3UDZogVrdk80X0K0-GxqHc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/c1acd6-230a-4e36-a58f-f555e2e68a10/1/YbU0Q3UDZogVrdk80X0K0-GxqHc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:47:d8:eb:47:18:91:fc:79:3b:89:de:6c:6c:14:4a:51:9b: 6a:85:2c:66:40:9f:7b:0e:e0:01:82:29:73:d0:82:54:3c:16: f1:bd:e9:54:87:a7:36:df:f1:1d:61:ba:9a:e2:70:2d:f9:6a: df:1f:71:eb:8a:4c:22:34:77:e0:a0:4d:47:c1:d3:3f:9e:3b: 9b:97:01:c7:e4:97:09:e2:a6:02:93:fd:f2:93:e9:cf:9c:c2: b0:dc:18:0e:8c:9a:75:e9:e6:92:80:ba:2d:1c:8b:3e:78:5b: 32:45:74:4c:4d:83:1b:84:0f:f8:64:7d:d2:93:62:c9:16:0b: 88:2d:c5:58:c2:b5:5e:e9:75:57:6b:fe:18:d5:4e:5c:af:29: 22:66:05:81:cd:cf:53:dc:de:7d:67:d2:10:56:08:63:2a:14: 00:ab:d8:33:5f:d0:82:69:28:04:66:fa:d5:f8:c7:f0:5e:7a: 24:85:f3:0d:6d:64:eb:f1:61:4f:9b:84:46:35:49:9f:c3:96: da:21:a8:34:89:d0:3a:cd:43:2f:32:58:c1:b6:fe:40:b1:37: 8d:4a:38:e9:b8:09:77:09:7c:4f:b3:06:5a:fc:5f:d6:5c:e1: fc:e8:a9:10:05:f3:3e:08:5b:c7:fd:72:6d:cf:8a:82:a0:36: 6f:6f:77:cc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZJoeV1ZJ9/M9OXrXusmRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxYjUzNDQzNzUwMzY2ODgxNWFkZDkzY2QxN2QwYWQzZTFi MWE4NzcwHhcNMjUxMjA2MDIwMTMzWhcNMjUxMjA3MDIwMTMzWjAzMTEwLwYDVQQD Eyg1MzMxZWE1M2FiZmY5ZTYzYjRjYTExNzAyNzg4NDIzNTMyZTk2YmI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+kNP6PdlV2d9nKERun4wIY1tkl5P 5sO+Fy0W0/W4qfNMEDedza91LkB73FC2Vez6fq3qMGx1hkPrd9Uu6c3mnfSwCPch 0an3FOMJ7UiFblrufwLbLb1wMR7pWu2gMDRaV2E5aIR4UVe256edDCUZE/ggD2ii 5NwMVSnnMFrNXsGu/rH/L4+4QRXWHrKqSD4qRx/xh2bToFbdO1JCNGGEkXFDEcJr 1QkpwGGPa/QBVlshAnrpdFtnhbs3yVka3b0lI09hdRIs+ZlkzsGPbFhVF3cu4miG RvGa4/QZmmvQ75LdLq9AHO8FWHTWjQMSFyelXkE9M1qu+7UydptbbajCVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFMx6lOr/55jtMoRcCeIQjUy6Wu3MB8GA1UdIwQY MBaAFGG1NEN1A2aIFa3ZPNF9CtPhsah3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWWJVMFEzVURab2dWcmRrODBYMEswLUd4cUhjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9jMWFjZDYtMjMwYS00ZTM2LWE1OGYt ZjU1NWUyZTY4YTEwLzEvWWJVMFEzVURab2dWcmRrODBYMEswLUd4cUhjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS9jMWFjZDYtMjMwYS00ZTM2LWE1OGYtZjU1NWUyZTY4YTEw LzEvWWJVMFEzVURab2dWcmRrODBYMEswLUd4cUhjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGUfY60cY kfx5O4nebGwUSlGbaoUsZkCfew7gAYIpc9CCVDwW8b3pVIenNt/xHWG6muJwLflq 3x9x64pMIjR34KBNR8HTP547m5cBx+SXCeKmApP98pPpz5zCsNwYDoyadenmkoC6 LRyLPnhbMkV0TE2DG4QP+GR90pNiyRYLiC3FWMK1Xul1V2v+GNVOXK8pImYFgc3P U9zefWfSEFYIYyoUAKvYM1/QgmkoBGb61fjH8F56JIXzDW1k6/FhT5uERjVJn8OW 2iGoNInQOs1DLzJYwbb+QLE3jUo46bgJdwl8T7MGWvxf1lzh/OipEAXzPghbx/1y bc+KgqA2b293zA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:55:43 2025 by rpki-client