This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/ff5ffc-22ff-46a1-8d2b-d34d120287d3/1/yMaJKmjOUKGGwNYM1cnkyYjOFsU.mft File: yMaJKmjOUKGGwNYM1cnkyYjOFsU.mft (raw, json) Hash identifier: NIc4akdOcU9pSpRCt4FF3HeNp3IzcoA+vJAFDuNYXqE= Subject key identifier: 25:0A:15:49:E9:A8:21:90:E1:F8:57:C1:94:6D:10:E6:FB:6F:96:5D Authority key identifier: C8:C6:89:2A:68:CE:50:A1:86:C0:D6:0C:D5:C9:E4:C9:88:CE:16:C5 Certificate issuer: /CN=c8c6892a68ce50a186c0d60cd5c9e4c988ce16c5 Certificate serial: 019B2E543CED0B77A690F7434F5C1098CD5C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yMaJKmjOUKGGwNYM1cnkyYjOFsU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/ff5ffc-22ff-46a1-8d2b-d34d120287d3/1/yMaJKmjOUKGGwNYM1cnkyYjOFsU.mft Manifest number: 0384 Signing time: Wed 17 Dec 2025 22:00:30 +0000 Manifest this update: Wed 17 Dec 2025 22:00:30 +0000 Manifest next update: Thu 18 Dec 2025 22:00:30 +0000 Files and hashes: 1: llQmZ7ox31md1xrVsOBux0Zjo94.roa (hash: zilK3SjPa7if6qVjP4zB4BrLdTd+JnUFnl8CYZtGV0I=) 2: yMaJKmjOUKGGwNYM1cnkyYjOFsU.crl (hash: DnM6r8gyt5hm7XYJgf2bPo9VJV+WoeTkZUlq5U02aB0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/ff5ffc-22ff-46a1-8d2b-d34d120287d3/1/yMaJKmjOUKGGwNYM1cnkyYjOFsU.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/ff5ffc-22ff-46a1-8d2b-d34d120287d3/1/yMaJKmjOUKGGwNYM1cnkyYjOFsU.mft rsync://rpki.ripe.net/repository/DEFAULT/yMaJKmjOUKGGwNYM1cnkyYjOFsU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 19:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2e:54:3c:ed:0b:77:a6:90:f7:43:4f:5c:10:98:cd:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c8c6892a68ce50a186c0d60cd5c9e4c988ce16c5 Validity Not Before: Dec 17 22:00:30 2025 GMT Not After : Dec 18 22:00:30 2025 GMT Subject: CN=250a1549e9a82190e1f857c1946d10e6fb6f965d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:f2:68:a4:ec:ff:f9:dd:eb:cd:c8:ac:4f:c2: 1d:5e:08:0b:2d:92:db:89:cf:e0:3b:83:64:27:e9: e0:74:dd:b7:65:f3:ae:af:e2:ce:5f:52:89:af:6c: 5b:79:88:b3:36:86:e0:3a:9a:2c:9a:91:d9:51:ab: c9:be:c7:d2:26:56:1a:a9:fc:5d:da:45:3b:41:0a: c7:d7:9f:d8:2f:d4:7d:97:38:a4:00:a7:77:b3:c2: a7:6e:db:bb:36:2f:63:f4:89:50:e2:02:d8:7e:e9: 9c:6b:3b:a0:81:d1:6b:7b:e9:1a:5f:a5:d5:4f:29: 00:8c:e8:24:12:5b:08:c4:be:1b:ac:25:92:36:fa: 9d:eb:33:b9:bb:35:b1:11:9f:36:02:b5:31:db:a9: 4a:b8:0a:93:b9:60:03:92:e7:24:19:ce:c1:e4:58: 20:5b:f4:14:5c:3d:36:b6:27:81:35:19:c3:5c:33: 73:b2:78:95:06:08:44:74:c6:a8:2e:21:86:38:3f: f1:56:7c:84:0a:af:8e:b2:f5:b0:b5:0b:3b:2c:61: 32:9f:0b:25:c4:73:17:8e:83:9c:1b:f8:93:f8:c4: d6:17:3c:77:b4:ea:22:7d:8b:0c:46:36:51:a4:15: 3c:05:43:5d:47:2d:42:a7:4c:e8:90:5c:23:75:e8: 62:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:0A:15:49:E9:A8:21:90:E1:F8:57:C1:94:6D:10:E6:FB:6F:96:5D X509v3 Authority Key Identifier: keyid:C8:C6:89:2A:68:CE:50:A1:86:C0:D6:0C:D5:C9:E4:C9:88:CE:16:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yMaJKmjOUKGGwNYM1cnkyYjOFsU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/ff5ffc-22ff-46a1-8d2b-d34d120287d3/1/yMaJKmjOUKGGwNYM1cnkyYjOFsU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/ff5ffc-22ff-46a1-8d2b-d34d120287d3/1/yMaJKmjOUKGGwNYM1cnkyYjOFsU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:05:3b:e6:a8:a4:54:fc:24:d2:58:39:4b:e3:d6:08:9d:39: 26:1f:f6:92:d1:7e:64:79:1f:01:34:f0:b7:dd:27:ee:df:68: 4d:54:3b:90:32:2c:70:ac:79:c6:44:c4:0f:24:bf:8d:61:ca: 3b:f4:a6:64:67:ea:47:54:42:36:1b:16:76:b8:e3:1f:1e:a8: dc:50:37:31:ec:f1:0c:60:ce:1a:a3:3d:c3:10:be:86:d7:23: 4a:1b:6f:04:44:0f:ae:4e:46:32:6a:ce:3f:f0:66:df:83:7d: f0:f9:07:d9:10:8f:42:b4:18:7f:3a:f2:36:0b:dd:a0:fa:9f: 36:0f:e7:50:78:65:4a:bf:35:cc:e7:38:a1:48:b8:80:25:8d: 35:cc:a7:59:6a:ec:10:e6:16:c8:97:6e:b1:04:7e:d2:63:78: 82:f7:76:8f:0d:73:7c:3c:fb:4d:51:4a:8f:88:fe:d3:94:dc: 1b:52:f7:0d:da:6c:c9:dc:1d:c8:fb:27:53:6a:b8:4d:a8:8b: eb:96:ec:b4:e1:64:cd:74:c3:25:29:d3:d2:a3:40:99:5b:f3: 34:f2:b6:07:72:09:eb:8c:77:a4:42:19:43:8d:88:8e:1a:27: 20:cc:6f:5c:23:4c:d0:60:21:ea:53:7e:8b:2a:45:b8:04:4c: bd:03:d1:57 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsuVDztC3emkPdDT1wQmM1cMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM4YzY4OTJhNjhjZTUwYTE4NmMwZDYwY2Q1YzllNGM5ODhj ZTE2YzUwHhcNMjUxMjE3MjIwMDMwWhcNMjUxMjE4MjIwMDMwWjAzMTEwLwYDVQQD EygyNTBhMTU0OWU5YTgyMTkwZTFmODU3YzE5NDZkMTBlNmZiNmY5NjVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvfJopOz/+d3rzcisT8IdXggLLZLb ic/gO4NkJ+ngdN23ZfOur+LOX1KJr2xbeYizNobgOposmpHZUavJvsfSJlYaqfxd 2kU7QQrH15/YL9R9lzikAKd3s8Knbtu7Ni9j9IlQ4gLYfumcazuggdFre+kaX6XV TykAjOgkElsIxL4brCWSNvqd6zO5uzWxEZ82ArUx26lKuAqTuWADkuckGc7B5Fgg W/QUXD02tieBNRnDXDNzsniVBghEdMaoLiGGOD/xVnyECq+OsvWwtQs7LGEynwsl xHMXjoOcG/iT+MTWFzx3tOoifYsMRjZRpBU8BUNdRy1Cp0zokFwjdehiYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCUKFUnpqCGQ4fhXwZRtEOb7b5ZdMB8GA1UdIwQY MBaAFMjGiSpozlChhsDWDNXJ5MmIzhbFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveU1hSkttak9VS0dHd05ZTTFjbmt5WWpPRnNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy9mZjVmZmMtMjJmZi00NmExLThkMmIt ZDM0ZDEyMDI4N2QzLzEveU1hSkttak9VS0dHd05ZTTFjbmt5WWpPRnNVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy9mZjVmZmMtMjJmZi00NmExLThkMmItZDM0ZDEyMDI4N2Qz LzEveU1hSkttak9VS0dHd05ZTTFjbmt5WWpPRnNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmwU75qik VPwk0lg5S+PWCJ05Jh/2ktF+ZHkfATTwt90n7t9oTVQ7kDIscKx5xkTEDyS/jWHK O/SmZGfqR1RCNhsWdrjjHx6o3FA3MezxDGDOGqM9wxC+htcjShtvBEQPrk5GMmrO P/Bm34N98PkH2RCPQrQYfzryNgvdoPqfNg/nUHhlSr81zOc4oUi4gCWNNcynWWrs EOYWyJdusQR+0mN4gvd2jw1zfDz7TVFKj4j+05TcG1L3DdpsydwdyPsnU2q4TaiL 65bstOFkzXTDJSnT0qNAmVvzNPK2B3IJ64x3pEIZQ42IjhonIMxvXCNM0GAh6lN+ iypFuARMvQPRVw== -----END CERTIFICATE-----Generated at Thu Dec 18 05:44:36 2025 by rpki-client