This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.mft File: ymRB2dgH4NeM51IToQNADuFKfNw.mft (raw, json) Hash identifier: TjCgQbC0COCOmNDJp3op4+gfSeZ5uiuA+Ef40seQpyA= Subject key identifier: CC:8A:F7:BE:7E:F6:80:41:DB:DC:41:37:E6:D5:FB:00:B1:9C:80:7D Authority key identifier: CA:64:41:D9:D8:07:E0:D7:8C:E7:52:13:A1:03:40:0E:E1:4A:7C:DC Certificate issuer: /CN=ca6441d9d807e0d78ce75213a103400ee14a7cdc Certificate serial: 019AF23FD5EB8E9D4B0491FE49A74273947E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ymRB2dgH4NeM51IToQNADuFKfNw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.mft Manifest number: 02D5 Signing time: Sat 06 Dec 2025 06:01:01 +0000 Manifest this update: Sat 06 Dec 2025 06:01:01 +0000 Manifest next update: Sun 07 Dec 2025 06:01:01 +0000 Files and hashes: 1: DIvBgZwS0Tso3aVf8EICkFleMLM.roa (hash: uFxBmENfxdwwVihL06QRGFulr8RLsRLP+PeZmW4yvHM=) 2: QTI2jWOE2hcS0P8FvwS3gPaVuSY.roa (hash: ym/RyiFastWTZGcEp8UN9E30CRk6eCzYsSVGPj7ydGQ=) 3: aO_whLt90j7emxpJJj2cDf7ZJOg.roa (hash: p39kDWxY5GmkiU51YIoY0fQ+QLGvMq74UJt/qetIBDg=) 4: ciHagOHLSoKpc1FusaVxL3_Ptq8.roa (hash: qVZyRrrycJITJq8e+Oqg9n1s/m1DGfbQ92cmAOV1Z5A=) 5: hebYL6M-z610FLivX7dM3OowSRU.roa (hash: IcjCerJ7GmqoXjZHtfS/CxBpCm6nwEU8LVGTcI76v2s=) 6: lhj_M8rEkQSJwVv1yErO59O5n_8.roa (hash: xGs/2/KINx9gwhsGdLRhMgCHL3pZEAIZqG8TlXFn9lc=) 7: qxGJPGhPdavkt3fDlmKOC0R6Ufk.roa (hash: V4CR5QSqFwKQtj1zVlfNBmPaneN3PqkC+1ZuaxUJeBM=) 8: xIyXjBVQ6PY7db0-kU0MPNqfG_k.roa (hash: hoQlQ49AMRXyr8IYH6xHVURJ84d0LGLOqucCIHUfGFM=) 9: ymRB2dgH4NeM51IToQNADuFKfNw.crl (hash: 9GT9fJnh/PnLuRUCqBsrvQ6uqE51J+JLrZzB+5Qu/7w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.mft rsync://rpki.ripe.net/repository/DEFAULT/ymRB2dgH4NeM51IToQNADuFKfNw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:d5:eb:8e:9d:4b:04:91:fe:49:a7:42:73:94:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ca6441d9d807e0d78ce75213a103400ee14a7cdc Validity Not Before: Dec 6 06:01:01 2025 GMT Not After : Dec 7 06:01:01 2025 GMT Subject: CN=cc8af7be7ef68041dbdc4137e6d5fb00b19c807d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:c5:d9:03:15:13:6d:87:42:19:c7:f2:3e:04: c9:12:9b:4c:dc:b1:34:2a:c0:af:7b:40:2b:4f:98: a0:d3:60:01:5b:c0:6c:2f:7c:2a:af:20:ac:4c:47: af:db:00:b6:60:38:99:d8:9d:5a:29:b3:b2:68:49: e4:77:35:07:ae:34:93:fa:1c:b9:b8:64:06:21:59: d3:5a:59:1c:cd:0c:9b:45:3c:6b:70:58:5c:c6:63: 9d:12:17:06:ca:41:69:8e:0f:8f:8e:44:86:1e:53: fc:74:9e:ae:c7:0d:8a:12:22:ae:0f:8f:7c:90:33: 28:f5:5c:99:3a:9d:54:82:2c:5d:5d:04:76:ad:99: d4:3d:22:d5:17:af:5b:71:c8:c0:eb:3b:69:22:0d: 04:da:46:c6:75:6d:a7:26:f5:39:fc:4c:a2:c1:bb: 91:81:2e:04:a9:1f:73:ad:da:ff:17:47:e9:c1:06: a9:91:56:93:bb:40:0a:55:b7:93:4e:0c:1c:6e:ba: d6:34:9d:9d:72:7f:16:74:1e:4d:31:cf:2c:f9:ea: ea:7a:a3:14:a6:fd:7c:86:ad:f3:35:32:b6:52:d2: 31:30:d1:01:ee:ff:69:18:93:45:22:f6:77:80:d3: e5:8d:61:37:59:64:e4:2f:fa:f6:f7:1c:ef:ac:de: de:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:8A:F7:BE:7E:F6:80:41:DB:DC:41:37:E6:D5:FB:00:B1:9C:80:7D X509v3 Authority Key Identifier: keyid:CA:64:41:D9:D8:07:E0:D7:8C:E7:52:13:A1:03:40:0E:E1:4A:7C:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ymRB2dgH4NeM51IToQNADuFKfNw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:7b:ea:6a:61:36:fe:dc:39:67:e7:26:aa:3e:17:98:bd:8b: a4:c1:e1:5b:fb:fa:2c:0f:d2:1a:82:cd:0f:e8:a8:c4:30:4d: a1:8d:b9:d3:80:5f:79:a8:4c:ed:be:9d:69:c1:2c:c7:13:b7: 36:1f:b0:da:0e:39:c7:ca:66:ed:b2:ef:2f:81:83:ae:a6:8d: 7d:97:87:5e:16:07:36:55:05:e8:a4:26:3e:92:d7:b4:e9:aa: 2e:1f:2b:c7:34:a5:e7:63:52:b2:75:9e:7f:07:4b:48:76:03: cf:da:fd:a9:04:16:a4:6b:21:64:e5:f7:68:67:7d:0f:9b:65: a0:13:98:2e:f7:a4:c1:3e:ba:a9:91:3f:ca:1b:ae:7a:8c:37: 9b:1b:90:db:70:eb:fe:46:4c:8d:dd:68:73:e6:b1:21:56:2c: e9:a1:3e:91:dc:5f:71:97:c9:f9:1d:b0:5c:61:d2:60:8b:41: ec:05:ad:f9:0f:03:58:ba:46:bf:e9:40:c6:07:94:01:ee:d7: 90:65:a1:5e:94:a2:ad:95:aa:3c:0e:38:52:50:8d:a8:aa:3a: 2b:e8:b7:3e:7d:38:c2:17:27:0e:70:a9:e0:3b:7b:1f:b8:8e: 54:1b:df:5a:5f:9b:7a:7c:f3:fc:ab:4e:d6:09:0f:bd:ac:a9: 00:c1:19:16 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP9Xrjp1LBJH+SadCc5R+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNhNjQ0MWQ5ZDgwN2UwZDc4Y2U3NTIxM2ExMDM0MDBlZTE0 YTdjZGMwHhcNMjUxMjA2MDYwMTAxWhcNMjUxMjA3MDYwMTAxWjAzMTEwLwYDVQQD EyhjYzhhZjdiZTdlZjY4MDQxZGJkYzQxMzdlNmQ1ZmIwMGIxOWM4MDdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArMXZAxUTbYdCGcfyPgTJEptM3LE0 KsCve0ArT5ig02ABW8BsL3wqryCsTEev2wC2YDiZ2J1aKbOyaEnkdzUHrjST+hy5 uGQGIVnTWlkczQybRTxrcFhcxmOdEhcGykFpjg+PjkSGHlP8dJ6uxw2KEiKuD498 kDMo9VyZOp1UgixdXQR2rZnUPSLVF69bccjA6ztpIg0E2kbGdW2nJvU5/EyiwbuR gS4EqR9zrdr/F0fpwQapkVaTu0AKVbeTTgwcbrrWNJ2dcn8WdB5NMc8s+erqeqMU pv18hq3zNTK2UtIxMNEB7v9pGJNFIvZ3gNPljWE3WWTkL/r29xzvrN7e3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMyK975+9oBB29xBN+bV+wCxnIB9MB8GA1UdIwQY MBaAFMpkQdnYB+DXjOdSE6EDQA7hSnzcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveW1SQjJkZ0g0TmVNNTFJVG9RTkFEdUZLZk53LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC85OTQ3YjYtMzRiYy00NzdlLTg4MTYt MmUyOGI5NjQ5OGE5LzEveW1SQjJkZ0g0TmVNNTFJVG9RTkFEdUZLZk53Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC85OTQ3YjYtMzRiYy00NzdlLTg4MTYtMmUyOGI5NjQ5OGE5 LzEveW1SQjJkZ0g0TmVNNTFJVG9RTkFEdUZLZk53LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOHvqamE2 /tw5Z+cmqj4XmL2LpMHhW/v6LA/SGoLND+ioxDBNoY2504BfeahM7b6dacEsxxO3 Nh+w2g45x8pm7bLvL4GDrqaNfZeHXhYHNlUF6KQmPpLXtOmqLh8rxzSl52NSsnWe fwdLSHYDz9r9qQQWpGshZOX3aGd9D5tloBOYLvekwT66qZE/yhuueow3mxuQ23Dr /kZMjd1oc+axIVYs6aE+kdxfcZfJ+R2wXGHSYItB7AWt+Q8DWLpGv+lAxgeUAe7X kGWhXpSirZWqPA44UlCNqKo6K+i3Pn04whcnDnCp4Dt7H7iOVBvfWl+benzz/KtO 1gkPvaypAMEZFg== -----END CERTIFICATE-----Generated at Sat Dec 6 10:17:52 2025 by rpki-client