This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/ff5ffc-22ff-46a1-8d2b-d34d120287d3/1/yMaJKmjOUKGGwNYM1cnkyYjOFsU.mft File: yMaJKmjOUKGGwNYM1cnkyYjOFsU.mft (raw, json) Hash identifier: RNH9Nqasu/wCH7SyreU5B2YQrPk59xVOrxJDcMFL6V0= Subject key identifier: F7:A1:13:5F:44:C1:2F:7C:07:A8:44:B1:02:F5:52:08:A9:B8:CD:F8 Authority key identifier: C8:C6:89:2A:68:CE:50:A1:86:C0:D6:0C:D5:C9:E4:C9:88:CE:16:C5 Certificate issuer: /CN=c8c6892a68ce50a186c0d60cd5c9e4c988ce16c5 Certificate serial: 019AF2764BDEB070ADB2222F88DF71A37659 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yMaJKmjOUKGGwNYM1cnkyYjOFsU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/ff5ffc-22ff-46a1-8d2b-d34d120287d3/1/yMaJKmjOUKGGwNYM1cnkyYjOFsU.mft Manifest number: 0365 Signing time: Sat 06 Dec 2025 07:00:30 +0000 Manifest this update: Sat 06 Dec 2025 07:00:30 +0000 Manifest next update: Sun 07 Dec 2025 07:00:30 +0000 Files and hashes: 1: llQmZ7ox31md1xrVsOBux0Zjo94.roa (hash: zilK3SjPa7if6qVjP4zB4BrLdTd+JnUFnl8CYZtGV0I=) 2: yMaJKmjOUKGGwNYM1cnkyYjOFsU.crl (hash: 8FxyjpNRRgmOarQcygfGpYoB+b2Uh2CCh+T23TFJWEs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/ff5ffc-22ff-46a1-8d2b-d34d120287d3/1/yMaJKmjOUKGGwNYM1cnkyYjOFsU.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/ff5ffc-22ff-46a1-8d2b-d34d120287d3/1/yMaJKmjOUKGGwNYM1cnkyYjOFsU.mft rsync://rpki.ripe.net/repository/DEFAULT/yMaJKmjOUKGGwNYM1cnkyYjOFsU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:4b:de:b0:70:ad:b2:22:2f:88:df:71:a3:76:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c8c6892a68ce50a186c0d60cd5c9e4c988ce16c5 Validity Not Before: Dec 6 07:00:30 2025 GMT Not After : Dec 7 07:00:30 2025 GMT Subject: CN=f7a1135f44c12f7c07a844b102f55208a9b8cdf8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:79:58:41:1d:4f:97:25:9c:3d:97:98:05:eb: 69:98:eb:1d:ff:52:d4:a2:aa:10:5e:94:52:ac:e3: f2:8d:9d:c4:a3:ba:44:8b:a7:ba:6d:5b:5a:7e:c7: 5a:c5:32:90:19:2b:51:15:55:c2:9b:d5:b3:38:43: a8:5f:f5:a9:22:18:8e:ae:2a:dd:b3:97:2d:f5:f4: da:56:53:fc:40:5c:19:70:f1:0d:76:27:39:5a:c7: 1f:69:93:95:5b:ab:a5:8a:04:80:c1:cb:c8:25:07: c3:04:d6:75:5e:75:48:6b:d8:c7:13:f6:23:b6:ec: f1:0a:f6:16:22:e5:cd:6f:97:0c:52:d5:18:53:ca: 76:3d:b9:74:c0:5f:ed:a7:fa:ff:16:15:e9:35:a2: f3:c0:ff:d0:68:b3:91:0b:93:a6:40:39:82:cb:d0: 29:b1:b8:bb:1a:a0:a6:f6:04:c3:52:7f:07:fb:71: a1:ec:6c:0f:12:cc:37:5b:b7:1e:72:da:d9:67:74: c5:d5:eb:b2:12:a2:f6:15:d4:a1:b0:d9:57:95:a4: f9:9b:21:83:9d:8e:85:0b:5e:42:36:be:f3:f5:2c: be:8e:a0:17:05:f9:19:15:88:c2:4d:90:b9:ff:69: 83:06:00:6c:3b:ff:e0:1c:77:f0:25:a5:9f:bd:9b: 47:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:A1:13:5F:44:C1:2F:7C:07:A8:44:B1:02:F5:52:08:A9:B8:CD:F8 X509v3 Authority Key Identifier: keyid:C8:C6:89:2A:68:CE:50:A1:86:C0:D6:0C:D5:C9:E4:C9:88:CE:16:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yMaJKmjOUKGGwNYM1cnkyYjOFsU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/ff5ffc-22ff-46a1-8d2b-d34d120287d3/1/yMaJKmjOUKGGwNYM1cnkyYjOFsU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/ff5ffc-22ff-46a1-8d2b-d34d120287d3/1/yMaJKmjOUKGGwNYM1cnkyYjOFsU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:be:4d:03:fd:19:3f:83:31:70:db:fd:65:08:d2:89:7b:59: 9b:f6:0f:06:bc:b6:2b:a2:8d:c2:5d:ba:36:5c:a1:e4:ef:95: 50:f9:3f:20:8d:ce:55:38:4d:f5:60:c4:cd:46:bf:a4:be:9b: 30:66:6e:ca:6d:b9:0e:bf:c6:0f:a3:68:c8:63:4b:f0:77:66: 63:86:00:84:43:ef:de:e9:12:44:cc:6a:0d:28:32:f8:07:4f: c2:c2:02:cb:0e:17:6c:a9:e4:16:6f:08:97:7b:be:b1:d3:07: ee:a2:ce:b3:16:51:6f:7c:24:32:fe:0d:ba:a0:67:88:d8:8e: 37:9d:de:10:d8:23:4c:e5:13:54:92:c8:fc:c4:08:04:63:69: 7c:da:fb:44:2e:7b:ea:fd:08:a1:ff:32:4e:69:5e:4d:7f:90: 0c:eb:f8:6f:c7:7a:23:df:45:d4:a5:38:89:97:bb:d7:ff:52: d5:c5:43:3e:85:f6:73:c7:84:de:dd:ae:5f:62:54:3a:69:cb: 6a:c4:57:43:c3:71:72:3c:b0:44:1b:05:8d:a8:59:00:96:70: e4:2f:94:fc:72:e2:1f:88:44:30:67:82:75:a1:59:ee:0f:93: dd:fe:15:77:2a:7a:78:77:b1:85:56:a3:bd:42:80:2b:58:8c: 66:5a:83:90 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydkvesHCtsiIviN9xo3ZZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM4YzY4OTJhNjhjZTUwYTE4NmMwZDYwY2Q1YzllNGM5ODhj ZTE2YzUwHhcNMjUxMjA2MDcwMDMwWhcNMjUxMjA3MDcwMDMwWjAzMTEwLwYDVQQD EyhmN2ExMTM1ZjQ0YzEyZjdjMDdhODQ0YjEwMmY1NTIwOGE5YjhjZGY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqXlYQR1PlyWcPZeYBetpmOsd/1LU oqoQXpRSrOPyjZ3Eo7pEi6e6bVtafsdaxTKQGStRFVXCm9WzOEOoX/WpIhiOrird s5ct9fTaVlP8QFwZcPENdic5WscfaZOVW6uligSAwcvIJQfDBNZ1XnVIa9jHE/Yj tuzxCvYWIuXNb5cMUtUYU8p2Pbl0wF/tp/r/FhXpNaLzwP/QaLORC5OmQDmCy9Ap sbi7GqCm9gTDUn8H+3Gh7GwPEsw3W7cectrZZ3TF1euyEqL2FdShsNlXlaT5myGD nY6FC15CNr7z9Sy+jqAXBfkZFYjCTZC5/2mDBgBsO//gHHfwJaWfvZtHyQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPehE19EwS98B6hEsQL1UgipuM34MB8GA1UdIwQY MBaAFMjGiSpozlChhsDWDNXJ5MmIzhbFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveU1hSkttak9VS0dHd05ZTTFjbmt5WWpPRnNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy9mZjVmZmMtMjJmZi00NmExLThkMmIt ZDM0ZDEyMDI4N2QzLzEveU1hSkttak9VS0dHd05ZTTFjbmt5WWpPRnNVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy9mZjVmZmMtMjJmZi00NmExLThkMmItZDM0ZDEyMDI4N2Qz LzEveU1hSkttak9VS0dHd05ZTTFjbmt5WWpPRnNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUr5NA/0Z P4MxcNv9ZQjSiXtZm/YPBry2K6KNwl26Nlyh5O+VUPk/II3OVThN9WDEzUa/pL6b MGZuym25Dr/GD6NoyGNL8HdmY4YAhEPv3ukSRMxqDSgy+AdPwsICyw4XbKnkFm8I l3u+sdMH7qLOsxZRb3wkMv4NuqBniNiON53eENgjTOUTVJLI/MQIBGNpfNr7RC57 6v0Iof8yTmleTX+QDOv4b8d6I99F1KU4iZe71/9S1cVDPoX2c8eE3t2uX2JUOmnL asRXQ8NxcjywRBsFjahZAJZw5C+U/HLiH4hEMGeCdaFZ7g+T3f4Vdyp6eHexhVaj vUKAK1iMZlqDkA== -----END CERTIFICATE-----Generated at Sat Dec 6 09:20:55 2025 by rpki-client