This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/Ymoot8Y-9qshSlLPp8PnjbmkCCM.mft File: Ymoot8Y-9qshSlLPp8PnjbmkCCM.mft (raw, json) Hash identifier: 0KIvwFWDolzHvssQH+IJMhE+q6J43//wD9nXrAX6x3s= Subject key identifier: 2C:9D:7C:28:B6:0B:1A:82:6D:92:8E:0B:55:B1:F7:03:12:73:36:91 Authority key identifier: 62:6A:28:B7:C6:3E:F6:AB:21:4A:52:CF:A7:C3:E7:8D:B9:A4:08:23 Certificate issuer: /CN=626a28b7c63ef6ab214a52cfa7c3e78db9a40823 Certificate serial: 019AFB42C52264725604D14352C0CA10F4CA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ymoot8Y-9qshSlLPp8PnjbmkCCM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/Ymoot8Y-9qshSlLPp8PnjbmkCCM.mft Manifest number: 10E6 Signing time: Mon 08 Dec 2025 00:00:48 +0000 Manifest this update: Mon 08 Dec 2025 00:00:48 +0000 Manifest next update: Tue 09 Dec 2025 00:00:48 +0000 Files and hashes: 1: 1-Q0Fpm13AkA52n8l5k0ctr3-0Uw.roa (hash: ImmrJcgcy8CHYkqIH5BT8/9I+/F0fh7xK4lUIvl0rVw=) 2: 1-ZL92pBvmLmsFkFwjoPraYV-lmk.roa (hash: 8GeHeU/ZbqCG3e/9dpSkHP1UnCP8xK4IoGXKHOFjl60=) 3: 6rkR-BBPpjGCoeX_YAqv5KrJW6Y.roa (hash: semgquQlEGADPqa3w63dRwF4Un/PAwUCdRww4JGKAZ8=) 4: 7G9BATflDTu21vt4c9hB8iiswlM.roa (hash: P9Za6RbhgxcCprlrob8HoCtWOEssiOOzNtrX617o2iA=) 5: Ht_HptBql6mw1xzUkgumDZRCGTs.roa (hash: fAFJkBZjVK/h9A5uSjcq4pIcQpbiAe3EL49qs0G3t0k=) 6: N1KahuaH4ywVDh5vnQRZfE-0JBo.roa (hash: Wu4yHucu0ZzzchZ+LFYsPLlBMoJ/1TTM1l51egvuWFs=) 7: RB-kmvtWIZxfX4s_GWqpUMWBav8.roa (hash: mz77dGj7KT4Y12imMMdj/cXmV+eNEz+qEQ+Q1rCDxAw=) 8: VT0K_B8TP9VNzMUCzAKb_pcrAJs.roa (hash: +Nq8vpSYKTk/bSDILQBzEhxSC3uLfEy4XvcRR6emT/s=) 9: Ymoot8Y-9qshSlLPp8PnjbmkCCM.crl (hash: NyNaFggQTKJeN23+DObncR5njj5hr71o5Yg1UO8ZR3M=) 10: _kXaQ2FdCpwF3M9nzoyWI9BFlCQ.roa (hash: 97UVb+hen49ZRqbTWGdoa5CM13JgLH3wxGVphYzTsW0=) 11: dEwDgHNRwB2VoPRdx0_R_r9VvXs.roa (hash: ZmaavjquA+5GJ96FSUOD0qeY6WuxDd/G1b1qQ9SzWGc=) 12: e4LlGesTD6mTPv65_Xasp4NEd_8.roa (hash: CpYDArXMRbmqYH5++yHN1CPQrtF6bSosJ95ZT4bP1HU=) 13: l9XP7gaCaWGis4j2_HYtNslfm-c.roa (hash: onTtv8prZDY2J8tyTCAIkrUkYzKJXBwYs1TgFOfQ6IQ=) 14: olF-cqmBWshxTUVWVkUbPRk749w.roa (hash: d6Z33VIcGK/j1/1oQ6IsYl5fAAA03zSUORhuXcW/d1k=) 15: ybZOnwo7V3lT7eoweeCyhTkuEvY.roa (hash: bG74HvJ2Sidz7r+t/B4ZKKXFrK/QgK4Ti3F+AcXvYpU=) 16: yx4UeEJJehLGQNrl-6Cz6WXZEuc.roa (hash: cKTgQmRRI7fV8spNs49a7RCxPTAZrMP6AMPoszGiJzU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/Ymoot8Y-9qshSlLPp8PnjbmkCCM.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/Ymoot8Y-9qshSlLPp8PnjbmkCCM.mft rsync://rpki.ripe.net/repository/DEFAULT/Ymoot8Y-9qshSlLPp8PnjbmkCCM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 09 Dec 2025 00:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:fb:42:c5:22:64:72:56:04:d1:43:52:c0:ca:10:f4:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=626a28b7c63ef6ab214a52cfa7c3e78db9a40823 Validity Not Before: Dec 8 00:00:48 2025 GMT Not After : Dec 9 00:00:48 2025 GMT Subject: CN=2c9d7c28b60b1a826d928e0b55b1f70312733691 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:0c:f5:ea:3c:b4:aa:4d:da:b7:ac:0c:71:23: 5b:d9:98:d5:2f:ba:a7:03:59:d6:0d:c6:9f:40:8d: a8:0a:43:e3:02:a4:a5:66:8e:d1:00:c0:0e:61:4e: 2b:c3:0d:63:8f:8a:59:1b:56:3c:da:38:98:bf:2e: 71:03:bc:0f:47:58:99:6a:86:92:18:74:90:55:98: 2d:bc:17:74:cd:2a:80:f4:fa:1b:ad:27:21:71:1d: 9a:e9:f3:e1:e9:2b:f6:57:73:14:1d:5f:ff:58:c7: e6:5c:04:52:d6:87:40:91:e5:9f:5e:d2:dd:72:8b: b6:fb:1f:88:06:4e:cb:9b:d9:8e:ea:62:d8:d0:23: 76:a2:32:7f:a1:7a:89:a9:b7:b8:1e:23:78:78:d0: b8:ea:66:fb:55:4f:91:ba:2a:3b:b2:20:b7:83:74: 87:6f:da:bf:19:84:8a:94:51:8e:97:f5:68:b6:3a: ec:1e:85:81:1b:c6:bc:89:e5:01:f9:c2:15:03:32: c8:38:66:83:53:4a:85:d5:c6:65:ca:14:95:ee:ea: 5b:d0:77:f3:57:0b:d9:fe:a2:20:55:83:7e:0b:1c: ab:0c:b1:81:d8:77:54:a0:56:d8:4f:e9:a9:2e:30: 00:eb:c9:29:ee:b6:cf:dc:04:1a:f9:92:5c:35:02: ec:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:9D:7C:28:B6:0B:1A:82:6D:92:8E:0B:55:B1:F7:03:12:73:36:91 X509v3 Authority Key Identifier: keyid:62:6A:28:B7:C6:3E:F6:AB:21:4A:52:CF:A7:C3:E7:8D:B9:A4:08:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ymoot8Y-9qshSlLPp8PnjbmkCCM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/Ymoot8Y-9qshSlLPp8PnjbmkCCM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/Ymoot8Y-9qshSlLPp8PnjbmkCCM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:8b:a6:c7:3f:81:da:1e:d2:ab:99:63:c5:8f:ab:96:81:59: 8b:a1:84:7e:34:dd:ac:52:e1:d2:12:a9:47:c1:8d:28:a7:83: 6d:1c:b2:86:93:64:1b:c1:01:ad:15:12:da:21:8e:58:af:b2: 00:b8:1c:a1:cb:58:5f:d8:87:70:e9:93:b4:ae:b5:f0:37:5b: a9:ae:bd:51:6a:91:c0:b2:b8:20:c6:b8:5c:a2:c6:fa:b9:c5: 64:d1:15:01:48:1f:e6:60:e8:30:f5:6e:c8:64:a3:c8:9d:19: 4d:ad:c4:6c:48:99:24:d3:9b:7d:97:44:d5:59:1c:03:f3:ea: b4:4e:42:17:43:1b:09:ff:f2:13:a2:23:fa:65:da:a1:15:33: 74:3e:6e:2c:2f:81:5f:ee:d6:c1:cc:ee:db:40:71:f3:63:cc: f2:3d:7c:af:56:80:49:05:f2:24:6d:91:18:57:b2:ef:55:a3: c1:0c:f8:ea:62:e8:93:9b:ae:eb:17:57:ef:19:ed:3f:d5:33: 3e:cd:54:d5:da:63:72:ce:a5:e9:28:6d:14:93:1c:61:7e:57: e1:59:f3:21:40:27:b9:e2:29:5a:2f:d0:8e:6c:49:c7:4c:03: 03:7a:ed:23:27:5a:b6:08:1f:25:13:09:64:a8:d4:df:59:61: b4:63:92:29 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr7QsUiZHJWBNFDUsDKEPTKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyNmEyOGI3YzYzZWY2YWIyMTRhNTJjZmE3YzNlNzhkYjlh NDA4MjMwHhcNMjUxMjA4MDAwMDQ4WhcNMjUxMjA5MDAwMDQ4WjAzMTEwLwYDVQQD EygyYzlkN2MyOGI2MGIxYTgyNmQ5MjhlMGI1NWIxZjcwMzEyNzMzNjkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhwz16jy0qk3at6wMcSNb2ZjVL7qn A1nWDcafQI2oCkPjAqSlZo7RAMAOYU4rww1jj4pZG1Y82jiYvy5xA7wPR1iZaoaS GHSQVZgtvBd0zSqA9PobrSchcR2a6fPh6Sv2V3MUHV//WMfmXARS1odAkeWfXtLd cou2+x+IBk7Lm9mO6mLY0CN2ojJ/oXqJqbe4HiN4eNC46mb7VU+Ruio7siC3g3SH b9q/GYSKlFGOl/VotjrsHoWBG8a8ieUB+cIVAzLIOGaDU0qF1cZlyhSV7upb0Hfz VwvZ/qIgVYN+CxyrDLGB2HdUoFbYT+mpLjAA68kp7rbP3AQa+ZJcNQLsrQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCydfCi2CxqCbZKOC1Wx9wMSczaRMB8GA1UdIwQY MBaAFGJqKLfGPvarIUpSz6fD5425pAgjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWW1vb3Q4WS05cXNoU2xMUHA4UG5qYm1rQ0NNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS8zYzA3ODUtYjI3My00MDcyLWE2MzUt ZDJjZDI2YjY5ZGYxLzEvWW1vb3Q4WS05cXNoU2xMUHA4UG5qYm1rQ0NNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS8zYzA3ODUtYjI3My00MDcyLWE2MzUtZDJjZDI2YjY5ZGYx LzEvWW1vb3Q4WS05cXNoU2xMUHA4UG5qYm1rQ0NNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZoumxz+B 2h7Sq5ljxY+rloFZi6GEfjTdrFLh0hKpR8GNKKeDbRyyhpNkG8EBrRUS2iGOWK+y ALgcoctYX9iHcOmTtK618Ddbqa69UWqRwLK4IMa4XKLG+rnFZNEVAUgf5mDoMPVu yGSjyJ0ZTa3EbEiZJNObfZdE1VkcA/PqtE5CF0MbCf/yE6Ij+mXaoRUzdD5uLC+B X+7Wwczu20Bx82PM8j18r1aASQXyJG2RGFey71WjwQz46mLok5uu6xdX7xntP9Uz Ps1U1dpjcs6l6ShtFJMcYX5X4VnzIUAnueIpWi/QjmxJx0wDA3rtIydatggfJRMJ ZKjU31lhtGOSKQ== -----END CERTIFICATE-----Generated at Mon Dec 8 07:11:34 2025 by rpki-client