This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.mft File: ymRB2dgH4NeM51IToQNADuFKfNw.mft (raw, json) Hash identifier: pgXcozVha83ZghDB3kzm+zCv3BIUpk8MOf7uFG5HXh0= Subject key identifier: 69:E0:C9:6F:71:0E:CF:EA:F7:A3:44:94:3C:19:9D:52:65:40:DB:B2 Authority key identifier: CA:64:41:D9:D8:07:E0:D7:8C:E7:52:13:A1:03:40:0E:E1:4A:7C:DC Certificate issuer: /CN=ca6441d9d807e0d78ce75213a103400ee14a7cdc Certificate serial: 019B1CBC43B4898B11BFD33785C7E7CA1EEA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ymRB2dgH4NeM51IToQNADuFKfNw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.mft Manifest number: 02EC Signing time: Sun 14 Dec 2025 12:00:58 +0000 Manifest this update: Sun 14 Dec 2025 12:00:58 +0000 Manifest next update: Mon 15 Dec 2025 12:00:58 +0000 Files and hashes: 1: NjHgFN-bgeuMrrhH0PuX7QntI6w.roa (hash: 8CuzTrfsWZs7k9//TsAfabS5/PhcTs42plQ9YsHXHIY=) 2: QTI2jWOE2hcS0P8FvwS3gPaVuSY.roa (hash: ym/RyiFastWTZGcEp8UN9E30CRk6eCzYsSVGPj7ydGQ=) 3: aO_whLt90j7emxpJJj2cDf7ZJOg.roa (hash: p39kDWxY5GmkiU51YIoY0fQ+QLGvMq74UJt/qetIBDg=) 4: ciHagOHLSoKpc1FusaVxL3_Ptq8.roa (hash: qVZyRrrycJITJq8e+Oqg9n1s/m1DGfbQ92cmAOV1Z5A=) 5: hebYL6M-z610FLivX7dM3OowSRU.roa (hash: IcjCerJ7GmqoXjZHtfS/CxBpCm6nwEU8LVGTcI76v2s=) 6: lhj_M8rEkQSJwVv1yErO59O5n_8.roa (hash: xGs/2/KINx9gwhsGdLRhMgCHL3pZEAIZqG8TlXFn9lc=) 7: qxGJPGhPdavkt3fDlmKOC0R6Ufk.roa (hash: V4CR5QSqFwKQtj1zVlfNBmPaneN3PqkC+1ZuaxUJeBM=) 8: xIyXjBVQ6PY7db0-kU0MPNqfG_k.roa (hash: hoQlQ49AMRXyr8IYH6xHVURJ84d0LGLOqucCIHUfGFM=) 9: ymRB2dgH4NeM51IToQNADuFKfNw.crl (hash: HRFMqHMWKkihM//qHLRf3K84cQXa2y8NFydZV4q6PHk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.mft rsync://rpki.ripe.net/repository/DEFAULT/ymRB2dgH4NeM51IToQNADuFKfNw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1c:bc:43:b4:89:8b:11:bf:d3:37:85:c7:e7:ca:1e:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ca6441d9d807e0d78ce75213a103400ee14a7cdc Validity Not Before: Dec 14 12:00:58 2025 GMT Not After : Dec 15 12:00:58 2025 GMT Subject: CN=69e0c96f710ecfeaf7a344943c199d526540dbb2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:5d:87:59:4b:15:72:0b:d7:ba:6d:0c:ee:2e: 9a:4f:d9:25:fb:e6:e7:12:51:35:e2:e6:ba:d9:6c: 6d:3b:7e:d1:e2:25:d3:c9:67:03:49:5c:13:49:dd: 42:f5:74:85:45:2d:64:ba:de:9f:db:98:92:b3:bc: 0e:5e:87:b2:8d:b9:f4:24:1d:92:52:db:8a:09:73: a7:09:a9:3f:03:c5:48:87:c9:35:b5:b3:71:dc:07: 9e:5c:87:8a:82:99:df:75:df:ef:12:78:c1:1f:5c: 65:48:92:ea:0b:b9:48:7b:54:d7:f6:61:11:b4:8a: 25:1c:6b:de:45:a3:4f:1c:d3:de:59:39:23:fb:7a: 0f:f4:b4:82:f6:33:2f:ec:a9:6d:1f:30:2d:64:bd: 8e:cd:3f:a1:c1:41:6b:ad:f0:da:a2:f5:2d:4b:f9: 32:ed:c2:0d:6b:ba:a3:3b:74:c6:42:ad:c5:2e:02: 14:cf:47:68:cf:e5:1e:68:a7:e1:b4:85:45:e8:74: 54:ab:b8:24:5b:1c:b0:44:d4:22:4e:af:8b:0e:0f: d3:35:af:40:ae:7d:43:73:63:4b:a1:d0:89:78:a7: 3f:b7:ce:22:3c:82:37:3a:2a:eb:95:0f:35:c5:37: 06:ed:80:4b:49:7d:06:bb:52:26:c6:30:9e:b7:db: c0:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:E0:C9:6F:71:0E:CF:EA:F7:A3:44:94:3C:19:9D:52:65:40:DB:B2 X509v3 Authority Key Identifier: keyid:CA:64:41:D9:D8:07:E0:D7:8C:E7:52:13:A1:03:40:0E:E1:4A:7C:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ymRB2dgH4NeM51IToQNADuFKfNw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:64:ac:8a:18:25:a5:b8:73:9a:ec:87:4c:34:86:7b:0e:69: 7b:ab:3b:d6:73:0f:6f:93:fd:e1:c0:c9:60:01:8e:05:77:c8: e6:74:81:09:09:86:30:f3:ac:9e:ba:98:95:26:4b:5d:47:1a: 0e:31:56:80:b6:77:9a:24:e8:32:43:76:ce:38:53:12:b2:83: 9b:4e:68:e8:5e:18:b2:19:d8:09:3b:fd:05:55:22:26:f7:8c: 6c:5c:a9:b0:d6:f1:a6:e5:1d:03:cb:5f:40:7f:d7:12:9b:ca: 95:b7:e5:e8:95:6a:2e:3e:c4:30:de:81:49:3c:ed:72:e4:9a: f5:8f:ee:54:62:d4:f2:c1:bb:cb:30:c8:56:9e:1e:5d:68:6c: 8d:91:c3:03:50:9d:42:2f:15:0d:6d:32:04:be:11:3c:ed:f5: 36:5f:d0:21:9f:06:ee:65:29:d8:2d:8d:d4:6c:a1:d7:28:51: 11:3a:09:8d:87:f2:e3:e5:85:c7:fe:0f:31:1a:98:f8:db:3b: e4:8f:35:de:35:2c:67:38:06:98:f1:9d:b7:4f:93:66:00:32: ec:89:e5:72:cd:e4:51:0e:7c:c4:f2:f4:94:77:60:31:6c:28: be:b1:62:de:23:83:91:7c:e5:7c:ff:eb:17:20:e4:3d:a2:a3: d2:e8:91:62 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZscvEO0iYsRv9M3hcfnyh7qMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNhNjQ0MWQ5ZDgwN2UwZDc4Y2U3NTIxM2ExMDM0MDBlZTE0 YTdjZGMwHhcNMjUxMjE0MTIwMDU4WhcNMjUxMjE1MTIwMDU4WjAzMTEwLwYDVQQD Eyg2OWUwYzk2ZjcxMGVjZmVhZjdhMzQ0OTQzYzE5OWQ1MjY1NDBkYmIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwF2HWUsVcgvXum0M7i6aT9kl++bn ElE14ua62WxtO37R4iXTyWcDSVwTSd1C9XSFRS1kut6f25iSs7wOXoeyjbn0JB2S UtuKCXOnCak/A8VIh8k1tbNx3AeeXIeKgpnfdd/vEnjBH1xlSJLqC7lIe1TX9mER tIolHGveRaNPHNPeWTkj+3oP9LSC9jMv7KltHzAtZL2OzT+hwUFrrfDaovUtS/ky 7cINa7qjO3TGQq3FLgIUz0doz+UeaKfhtIVF6HRUq7gkWxywRNQiTq+LDg/TNa9A rn1Dc2NLodCJeKc/t84iPII3OirrlQ81xTcG7YBLSX0Gu1ImxjCet9vA1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGngyW9xDs/q96NElDwZnVJlQNuyMB8GA1UdIwQY MBaAFMpkQdnYB+DXjOdSE6EDQA7hSnzcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveW1SQjJkZ0g0TmVNNTFJVG9RTkFEdUZLZk53LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC85OTQ3YjYtMzRiYy00NzdlLTg4MTYt MmUyOGI5NjQ5OGE5LzEveW1SQjJkZ0g0TmVNNTFJVG9RTkFEdUZLZk53Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC85OTQ3YjYtMzRiYy00NzdlLTg4MTYtMmUyOGI5NjQ5OGE5 LzEveW1SQjJkZ0g0TmVNNTFJVG9RTkFEdUZLZk53LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcGSsihgl pbhzmuyHTDSGew5pe6s71nMPb5P94cDJYAGOBXfI5nSBCQmGMPOsnrqYlSZLXUca DjFWgLZ3miToMkN2zjhTErKDm05o6F4YshnYCTv9BVUiJveMbFypsNbxpuUdA8tf QH/XEpvKlbfl6JVqLj7EMN6BSTztcuSa9Y/uVGLU8sG7yzDIVp4eXWhsjZHDA1Cd Qi8VDW0yBL4RPO31Nl/QIZ8G7mUp2C2N1Gyh1yhREToJjYfy4+WFx/4PMRqY+Ns7 5I813jUsZzgGmPGdt0+TZgAy7Inlcs3kUQ58xPL0lHdgMWwovrFi3iODkXzlfP/r FyDkPaKj0uiRYg== -----END CERTIFICATE-----Generated at Sun Dec 14 14:39:39 2025 by rpki-client