This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/d7a484-3d4a-48bf-b516-caf2f7a5b5f4/1/_ymks_Cjr4u-1gKaiyZdyTIE594.mft File: _ymks_Cjr4u-1gKaiyZdyTIE594.mft (raw, json) Hash identifier: VYQwpWfoVABRoiAsa11j6Vnv+tvfH5UukFHl1tgyOf8= Subject key identifier: C3:F9:E9:E7:ED:A0:32:4C:B3:EA:CC:5E:0A:76:21:6B:B2:37:B6:E0 Authority key identifier: FF:29:A4:B3:F0:A3:AF:8B:BE:D6:02:9A:8B:26:5D:C9:32:04:E7:DE Certificate issuer: /CN=ff29a4b3f0a3af8bbed6029a8b265dc93204e7de Certificate serial: 019AF4D28CF2A06CA6B6B407710CB914F2D2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_ymks_Cjr4u-1gKaiyZdyTIE594.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/d7a484-3d4a-48bf-b516-caf2f7a5b5f4/1/_ymks_Cjr4u-1gKaiyZdyTIE594.mft Manifest number: 056E Signing time: Sat 06 Dec 2025 18:00:30 +0000 Manifest this update: Sat 06 Dec 2025 18:00:30 +0000 Manifest next update: Sun 07 Dec 2025 18:00:30 +0000 Files and hashes: 1: Sz2bdOCE_Wcxx_Cr6328GnhL2kg.roa (hash: xLto0l4O/7LoweUajPoDbmBCNQiQzqcGIgLGSKNHb6A=) 2: _ymks_Cjr4u-1gKaiyZdyTIE594.crl (hash: Vz1cf+AEr8fIA8DELGQqNrP2u4Sm1vc0gIkmo3tgwlM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/d7a484-3d4a-48bf-b516-caf2f7a5b5f4/1/_ymks_Cjr4u-1gKaiyZdyTIE594.crl rsync://rpki.ripe.net/repository/DEFAULT/61/d7a484-3d4a-48bf-b516-caf2f7a5b5f4/1/_ymks_Cjr4u-1gKaiyZdyTIE594.mft rsync://rpki.ripe.net/repository/DEFAULT/_ymks_Cjr4u-1gKaiyZdyTIE594.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:d2:8c:f2:a0:6c:a6:b6:b4:07:71:0c:b9:14:f2:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff29a4b3f0a3af8bbed6029a8b265dc93204e7de Validity Not Before: Dec 6 18:00:30 2025 GMT Not After : Dec 7 18:00:30 2025 GMT Subject: CN=c3f9e9e7eda0324cb3eacc5e0a76216bb237b6e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:e5:5d:bb:da:14:2e:61:4a:2f:e5:c4:c8:d1: fe:ae:77:96:92:2a:93:a6:f3:6b:61:92:90:36:be: 7c:e0:01:40:87:45:25:99:de:11:98:51:0a:5d:99: 67:f5:ea:c6:f5:25:32:f7:40:94:9c:e9:74:fd:2d: eb:d6:dc:56:c4:90:53:95:72:e7:bb:da:52:23:2e: dd:d9:ac:fa:58:a9:33:09:87:f5:09:7e:31:cf:93: 93:f2:a9:8a:39:77:c0:5d:82:6b:b8:cc:27:fc:af: db:ef:d5:59:58:a3:c3:95:84:8c:8c:dc:17:5e:32: 24:c7:37:fc:46:34:6c:1f:b2:34:33:f7:69:68:b6: f7:ca:05:59:a9:d6:dc:49:2e:a1:53:11:7d:17:ad: 36:9d:a9:fe:f7:16:eb:43:4f:d6:b4:be:48:a3:48: 73:87:8e:dc:2f:ad:3f:26:ad:97:3e:4b:48:e0:1e: 8f:ae:61:2c:d8:40:c2:00:90:46:8e:e2:b8:3c:5c: 7d:36:c1:c3:ff:74:20:8b:82:1a:6d:6f:52:28:df: 6b:87:44:a5:6b:a3:f1:a7:d0:ee:67:c3:63:95:57: ca:a5:67:dc:f7:bc:99:41:97:dd:71:ed:25:68:ce: c9:a2:70:ad:2d:1e:76:40:d6:4d:be:4d:be:8b:3c: 3d:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:F9:E9:E7:ED:A0:32:4C:B3:EA:CC:5E:0A:76:21:6B:B2:37:B6:E0 X509v3 Authority Key Identifier: keyid:FF:29:A4:B3:F0:A3:AF:8B:BE:D6:02:9A:8B:26:5D:C9:32:04:E7:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_ymks_Cjr4u-1gKaiyZdyTIE594.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/d7a484-3d4a-48bf-b516-caf2f7a5b5f4/1/_ymks_Cjr4u-1gKaiyZdyTIE594.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/d7a484-3d4a-48bf-b516-caf2f7a5b5f4/1/_ymks_Cjr4u-1gKaiyZdyTIE594.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:13:b7:aa:4b:9d:de:cb:ff:e7:97:6a:72:b4:0e:2f:63:22: e4:60:ed:c2:8b:5d:22:25:7f:51:40:58:31:03:bf:6b:c4:52: 81:b1:05:6b:a0:bc:ed:29:b6:55:6b:3c:9c:f1:d4:9c:ba:41: 04:ef:c1:c6:16:11:a1:03:2c:28:d5:3a:86:fb:d6:ac:20:27: 9e:9d:21:0d:b1:f9:00:1a:a5:20:1c:8b:02:73:3e:59:e2:d0: bc:5a:3e:31:1f:16:04:2f:da:2f:d6:6c:ed:83:34:10:f6:58: 78:8e:c4:2c:34:26:d5:7e:95:66:ce:7d:46:28:d1:07:09:03: 30:8a:a4:87:22:9f:73:f8:d0:df:7e:c5:90:45:b4:77:88:39: 99:f8:da:b7:4b:2f:77:bf:ee:7c:ae:87:18:93:fa:3c:7f:18: cf:d6:57:50:d1:b4:0b:a9:41:c1:8c:5f:84:cf:6b:ef:c7:f8: e0:ce:40:f8:2d:5c:b5:9e:14:07:15:57:e4:51:fd:e1:c9:0f: bb:83:ed:e8:42:b0:82:98:b9:d8:34:83:3d:f6:b3:44:cd:c3: aa:d8:a5:e5:da:df:77:7d:12:f4:59:c2:7f:08:37:63:ed:2a: b3:1a:18:32:f2:60:4f:3f:ae:37:ac:b1:28:15:d1:0d:a4:64: 1f:01:93:ae -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr00ozyoGymtrQHcQy5FPLSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmMjlhNGIzZjBhM2FmOGJiZWQ2MDI5YThiMjY1ZGM5MzIw NGU3ZGUwHhcNMjUxMjA2MTgwMDMwWhcNMjUxMjA3MTgwMDMwWjAzMTEwLwYDVQQD EyhjM2Y5ZTllN2VkYTAzMjRjYjNlYWNjNWUwYTc2MjE2YmIyMzdiNmUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2+Vdu9oULmFKL+XEyNH+rneWkiqT pvNrYZKQNr584AFAh0Ulmd4RmFEKXZln9erG9SUy90CUnOl0/S3r1txWxJBTlXLn u9pSIy7d2az6WKkzCYf1CX4xz5OT8qmKOXfAXYJruMwn/K/b79VZWKPDlYSMjNwX XjIkxzf8RjRsH7I0M/dpaLb3ygVZqdbcSS6hUxF9F602nan+9xbrQ0/WtL5Io0hz h47cL60/Jq2XPktI4B6PrmEs2EDCAJBGjuK4PFx9NsHD/3Qgi4IabW9SKN9rh0Sl a6Pxp9DuZ8NjlVfKpWfc97yZQZfdce0laM7JonCtLR52QNZNvk2+izw9MQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMP56eftoDJMs+rMXgp2IWuyN7bgMB8GA1UdIwQY MBaAFP8ppLPwo6+LvtYCmosmXckyBOfeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX3lta3NfQ2pyNHUtMWdLYWl5WmR5VElFNTk0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS9kN2E0ODQtM2Q0YS00OGJmLWI1MTYt Y2FmMmY3YTViNWY0LzEvX3lta3NfQ2pyNHUtMWdLYWl5WmR5VElFNTk0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS9kN2E0ODQtM2Q0YS00OGJmLWI1MTYtY2FmMmY3YTViNWY0 LzEvX3lta3NfQ2pyNHUtMWdLYWl5WmR5VElFNTk0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlRO3qkud 3sv/55dqcrQOL2Mi5GDtwotdIiV/UUBYMQO/a8RSgbEFa6C87Sm2VWs8nPHUnLpB BO/BxhYRoQMsKNU6hvvWrCAnnp0hDbH5ABqlIByLAnM+WeLQvFo+MR8WBC/aL9Zs 7YM0EPZYeI7ELDQm1X6VZs59RijRBwkDMIqkhyKfc/jQ337FkEW0d4g5mfjat0sv d7/ufK6HGJP6PH8Yz9ZXUNG0C6lBwYxfhM9r78f44M5A+C1ctZ4UBxVX5FH94ckP u4Pt6EKwgpi52DSDPfazRM3Dqtil5drfd30S9FnCfwg3Y+0qsxoYMvJgTz+uN6yx KBXRDaRkHwGTrg== -----END CERTIFICATE-----Generated at Sat Dec 6 23:55:23 2025 by rpki-client