This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/6ce994-8e99-40f9-a4eb-b2d73678727b/1/YMRN_3GHmGPqcUQgI7fzVNw9rXw.mft File: YMRN_3GHmGPqcUQgI7fzVNw9rXw.mft (raw, json) Hash identifier: YVYp66MW021wcZs9IdTRrV6RauSype4FK2/qkJj3Ck0= Subject key identifier: 4F:41:92:66:8D:01:47:0E:5F:6D:68:3A:E4:EE:AC:3D:CE:D2:0B:1A Authority key identifier: 60:C4:4D:FF:71:87:98:63:EA:71:44:20:23:B7:F3:54:DC:3D:AD:7C Certificate issuer: /CN=60c44dff71879863ea71442023b7f354dc3dad7c Certificate serial: 019AF23F722DF690B52D6BA29587A15A2668 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YMRN_3GHmGPqcUQgI7fzVNw9rXw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/6ce994-8e99-40f9-a4eb-b2d73678727b/1/YMRN_3GHmGPqcUQgI7fzVNw9rXw.mft Manifest number: 07C5 Signing time: Sat 06 Dec 2025 06:00:35 +0000 Manifest this update: Sat 06 Dec 2025 06:00:35 +0000 Manifest next update: Sun 07 Dec 2025 06:00:35 +0000 Files and hashes: 1: 1DSZn5ns00u_zh3eaHcMM8S9LJ8.roa (hash: f2k2Rp4Tvmjd6WBxwwnYblRCaq4QO4K1UztQrgvzq4k=) 2: MNaMRPeSME_XYwjj2iW6Vinmifg.roa (hash: /1QrovjxUCyErSvoCQnPnqMxU5YJcSU6R6BPRoCuQcg=) 3: YMRN_3GHmGPqcUQgI7fzVNw9rXw.crl (hash: 4dnkOB+EoHZs9WIPx4lLi4B9FN2ARUUsUDBEfZ8g/o4=) 4: yIFDC3DQyKnYJrOVoxpI_9NxtQ4.roa (hash: cgrK+K+/SobWe5sM1Xw8KgFBTC6aou6l85u0UGfO0is=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/6ce994-8e99-40f9-a4eb-b2d73678727b/1/YMRN_3GHmGPqcUQgI7fzVNw9rXw.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/6ce994-8e99-40f9-a4eb-b2d73678727b/1/YMRN_3GHmGPqcUQgI7fzVNw9rXw.mft rsync://rpki.ripe.net/repository/DEFAULT/YMRN_3GHmGPqcUQgI7fzVNw9rXw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:72:2d:f6:90:b5:2d:6b:a2:95:87:a1:5a:26:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60c44dff71879863ea71442023b7f354dc3dad7c Validity Not Before: Dec 6 06:00:35 2025 GMT Not After : Dec 7 06:00:35 2025 GMT Subject: CN=4f4192668d01470e5f6d683ae4eeac3dced20b1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:94:56:52:29:d6:f6:50:62:76:ee:ec:b4:e3: 75:84:df:ed:02:35:09:d1:7c:da:94:fa:3b:bb:86: 80:91:40:e0:3f:37:09:84:76:2c:f2:e3:b5:51:1c: d4:67:30:e3:f0:e8:92:95:33:ee:49:60:c5:cb:1e: a7:64:4b:6e:67:b2:3a:4f:39:74:98:63:ac:49:cd: ae:99:b5:54:4b:f7:96:ee:9b:e8:39:5b:b4:44:a6: 62:a4:90:81:eb:7c:ad:ad:7a:69:60:5b:9f:d1:32: 9f:5b:6c:08:24:be:b3:45:98:9a:14:1c:46:ac:fe: 27:d1:50:fd:c4:82:9e:1f:e5:78:0f:7a:aa:f3:92: 58:3b:ef:4e:bb:c9:1d:13:c8:9b:6d:1d:71:58:6b: b5:e1:a1:b0:ca:19:8a:8c:ec:bb:22:a4:f5:b2:52: ee:7f:35:76:a6:47:39:c3:80:a2:8f:ac:88:73:52: 0b:6b:0f:4c:05:1d:8b:f5:a2:5b:4f:ea:41:4d:0c: d6:19:ef:95:d9:87:23:95:64:12:75:51:7e:f7:72: d9:b8:af:18:02:86:0c:ba:61:86:0b:04:4b:3a:c6: dd:29:ca:b5:41:e0:0a:17:9c:02:02:bb:eb:03:58: 8e:63:69:4f:df:e4:c8:50:f2:36:05:8e:09:94:99: db:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:41:92:66:8D:01:47:0E:5F:6D:68:3A:E4:EE:AC:3D:CE:D2:0B:1A X509v3 Authority Key Identifier: keyid:60:C4:4D:FF:71:87:98:63:EA:71:44:20:23:B7:F3:54:DC:3D:AD:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YMRN_3GHmGPqcUQgI7fzVNw9rXw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/6ce994-8e99-40f9-a4eb-b2d73678727b/1/YMRN_3GHmGPqcUQgI7fzVNw9rXw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/6ce994-8e99-40f9-a4eb-b2d73678727b/1/YMRN_3GHmGPqcUQgI7fzVNw9rXw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:c8:58:ca:2c:4b:c9:16:ed:0f:a2:04:18:a2:a5:46:54:21: 09:f8:ad:92:d6:44:47:59:e5:de:ac:51:71:76:59:ae:34:c0: 0b:78:d4:66:fc:c2:db:6e:2b:29:4a:5f:02:e4:5c:a4:23:03: 41:c3:9c:d3:53:8a:f6:86:a6:f6:34:1b:45:2d:fe:6e:67:26: 14:e7:e3:bc:41:85:de:5b:c8:f2:54:9b:99:9b:97:65:ee:82: 01:20:82:fd:61:94:1f:30:ab:1a:08:a0:29:d2:71:4c:6e:2c: ea:0a:f2:61:dc:5a:48:75:47:f5:75:64:1a:4e:d0:c7:db:e3: c5:9d:7a:1c:53:51:a8:6b:37:e5:cb:30:1b:02:25:36:83:c1: 88:fa:66:ab:0d:0e:b8:fc:0b:e8:d7:3f:41:14:f1:d5:a0:0b: 39:c5:c4:a8:a9:f7:c7:d3:e7:62:6e:2b:96:a2:76:b1:a1:41: fa:66:a5:98:a1:24:7d:3f:0e:c6:a3:fa:45:c7:85:5f:8b:07: f3:79:d0:7c:11:3d:39:b3:b7:d6:57:88:67:ae:04:71:f0:07: 50:7b:be:1c:ab:83:0c:17:04:68:83:80:dc:09:ca:58:38:6f: 2d:cb:82:11:22:24:ac:a8:bb:9a:77:ff:1b:0c:d0:aa:64:60: 50:6f:6e:a0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP3It9pC1LWuilYehWiZoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwYzQ0ZGZmNzE4Nzk4NjNlYTcxNDQyMDIzYjdmMzU0ZGMz ZGFkN2MwHhcNMjUxMjA2MDYwMDM1WhcNMjUxMjA3MDYwMDM1WjAzMTEwLwYDVQQD Eyg0ZjQxOTI2NjhkMDE0NzBlNWY2ZDY4M2FlNGVlYWMzZGNlZDIwYjFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtZRWUinW9lBidu7stON1hN/tAjUJ 0XzalPo7u4aAkUDgPzcJhHYs8uO1URzUZzDj8OiSlTPuSWDFyx6nZEtuZ7I6Tzl0 mGOsSc2umbVUS/eW7pvoOVu0RKZipJCB63ytrXppYFuf0TKfW2wIJL6zRZiaFBxG rP4n0VD9xIKeH+V4D3qq85JYO+9Ou8kdE8ibbR1xWGu14aGwyhmKjOy7IqT1slLu fzV2pkc5w4Cij6yIc1ILaw9MBR2L9aJbT+pBTQzWGe+V2YcjlWQSdVF+93LZuK8Y AoYMumGGCwRLOsbdKcq1QeAKF5wCArvrA1iOY2lP3+TIUPI2BY4JlJnbzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE9BkmaNAUcOX21oOuTurD3O0gsaMB8GA1UdIwQY MBaAFGDETf9xh5hj6nFEICO381TcPa18MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWU1STl8zR0htR1BxY1VRZ0k3ZnpWTnc5clh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC82Y2U5OTQtOGU5OS00MGY5LWE0ZWIt YjJkNzM2Nzg3MjdiLzEvWU1STl8zR0htR1BxY1VRZ0k3ZnpWTnc5clh3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC82Y2U5OTQtOGU5OS00MGY5LWE0ZWItYjJkNzM2Nzg3Mjdi LzEvWU1STl8zR0htR1BxY1VRZ0k3ZnpWTnc5clh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR8hYyixL yRbtD6IEGKKlRlQhCfitktZER1nl3qxRcXZZrjTAC3jUZvzC224rKUpfAuRcpCMD QcOc01OK9oam9jQbRS3+bmcmFOfjvEGF3lvI8lSbmZuXZe6CASCC/WGUHzCrGgig KdJxTG4s6gryYdxaSHVH9XVkGk7Qx9vjxZ16HFNRqGs35cswGwIlNoPBiPpmqw0O uPwL6Nc/QRTx1aALOcXEqKn3x9PnYm4rlqJ2saFB+malmKEkfT8OxqP6RceFX4sH 83nQfBE9ObO31leIZ64EcfAHUHu+HKuDDBcEaIOA3AnKWDhvLcuCESIkrKi7mnf/ GwzQqmRgUG9uoA== -----END CERTIFICATE-----Generated at Sat Dec 6 12:17:59 2025 by rpki-client