This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/279b66-38f1-41a5-90e2-946da5f5efbb/1/ymFHjk1lm-zoIDxei6jo-C8EcNc.mft File: ymFHjk1lm-zoIDxei6jo-C8EcNc.mft (raw, json) Hash identifier: W1cjhZDyEicRM1HB5ZKK7JptegqfW/fhOousvEAmz+s= Subject key identifier: 04:32:D8:39:AB:3E:BA:07:DB:63:34:D5:34:E0:49:73:FD:42:2B:93 Authority key identifier: CA:61:47:8E:4D:65:9B:EC:E8:20:3C:5E:8B:A8:E8:F8:2F:04:70:D7 Certificate issuer: /CN=ca61478e4d659bece8203c5e8ba8e8f82f0470d7 Certificate serial: 019B687AF083788BAB4D6E722B97BE1FFF8E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ymFHjk1lm-zoIDxei6jo-C8EcNc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/279b66-38f1-41a5-90e2-946da5f5efbb/1/ymFHjk1lm-zoIDxei6jo-C8EcNc.mft Manifest number: 01C1 Signing time: Mon 29 Dec 2025 05:00:45 +0000 Manifest this update: Mon 29 Dec 2025 05:00:45 +0000 Manifest next update: Tue 30 Dec 2025 05:00:45 +0000 Files and hashes: 1: vALQrFLzmQ9gR7444eJDUe8p3-s.roa (hash: dsgrUgBij2LrHHDbh/hbKc9/jOogaHIIxPw9xdtp6OY=) 2: ymFHjk1lm-zoIDxei6jo-C8EcNc.crl (hash: 2uN5dHoC1tqnxDzGPE2VGEyKzmXmiTdYSvH195RQCx4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/279b66-38f1-41a5-90e2-946da5f5efbb/1/ymFHjk1lm-zoIDxei6jo-C8EcNc.crl rsync://rpki.ripe.net/repository/DEFAULT/68/279b66-38f1-41a5-90e2-946da5f5efbb/1/ymFHjk1lm-zoIDxei6jo-C8EcNc.mft rsync://rpki.ripe.net/repository/DEFAULT/ymFHjk1lm-zoIDxei6jo-C8EcNc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 05:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:68:7a:f0:83:78:8b:ab:4d:6e:72:2b:97:be:1f:ff:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ca61478e4d659bece8203c5e8ba8e8f82f0470d7 Validity Not Before: Dec 29 05:00:45 2025 GMT Not After : Dec 30 05:00:45 2025 GMT Subject: CN=0432d839ab3eba07db6334d534e04973fd422b93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:92:d9:05:f9:d8:49:72:e1:f7:b8:fa:0f:aa: b9:09:be:bf:2c:77:17:02:2d:0c:95:9a:c8:61:c3: 1f:fd:4e:d9:dc:6b:d3:39:78:f9:c3:82:f1:cc:5b: b6:6d:53:ae:50:58:ba:27:cb:cd:e7:a2:de:9c:77: d3:bb:47:03:aa:18:8c:ef:c7:d6:d2:cf:e5:04:53: 54:5e:08:81:13:34:ae:37:a9:29:db:cc:af:4b:e5: 91:97:db:71:93:0c:e0:74:54:f0:d7:23:6f:d1:92: 4a:b0:f2:9b:ec:55:00:64:75:13:29:45:e9:1c:76: a8:64:b0:35:a9:8d:90:ea:df:64:47:e9:d5:3d:d9: 8e:30:ac:9c:75:cf:d6:b6:7d:07:8a:e8:e8:ef:db: 9f:93:60:7f:63:78:16:cd:10:fd:d4:fd:82:a3:22: 51:99:d3:51:1e:60:0a:33:03:2d:6e:d9:a8:09:52: 84:62:9e:f7:97:f2:af:63:ec:d7:ac:d9:95:60:8c: a9:fa:a4:f0:b1:ef:19:f1:59:d8:af:94:9b:4a:4a: 6c:02:57:71:99:bf:06:ae:12:5c:15:ca:85:0c:ba: 48:76:a5:9a:1a:3f:2f:2a:da:95:ce:07:5c:ac:f3: 3b:c2:8f:86:cc:1a:63:f2:77:e3:79:09:86:d9:af: 9c:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:32:D8:39:AB:3E:BA:07:DB:63:34:D5:34:E0:49:73:FD:42:2B:93 X509v3 Authority Key Identifier: keyid:CA:61:47:8E:4D:65:9B:EC:E8:20:3C:5E:8B:A8:E8:F8:2F:04:70:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ymFHjk1lm-zoIDxei6jo-C8EcNc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/279b66-38f1-41a5-90e2-946da5f5efbb/1/ymFHjk1lm-zoIDxei6jo-C8EcNc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/68/279b66-38f1-41a5-90e2-946da5f5efbb/1/ymFHjk1lm-zoIDxei6jo-C8EcNc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:10:08:17:e5:f7:bd:5e:d4:a5:f0:ab:11:a3:1d:25:cd:0d: 93:99:12:6b:f4:94:73:c6:99:dc:d1:80:94:d8:b5:c3:db:c4: 31:45:78:4b:9d:3f:ae:bc:5f:4c:7d:9f:15:f9:7f:10:03:8a: fd:fa:fa:cc:9a:62:9f:9b:ca:6b:c2:b7:34:35:37:97:3d:ff: eb:e4:95:3f:7e:e5:e0:f0:7f:c5:a8:98:0d:f4:b2:c7:56:8d: 04:fc:99:e4:b8:02:3d:0d:dc:70:b6:15:01:b8:eb:3c:fb:0e: 82:d9:e5:0c:84:2c:98:46:d5:2b:2f:14:c8:e1:51:16:a0:94: 77:86:61:f2:2e:ba:da:d3:70:82:d9:79:11:96:50:f1:37:a2: a3:ca:55:ac:73:84:be:54:19:ac:bc:11:5a:cd:16:5b:85:9a: 57:ac:3d:d9:ac:f9:4e:c1:3c:d2:13:83:37:50:70:0c:00:16: 20:a4:14:72:c1:3d:36:b7:d3:9b:a2:ca:89:d8:c8:71:90:fc: 37:7f:64:cf:8b:a3:b7:ce:f9:4c:42:ab:81:94:d2:8b:c7:52: c6:7a:d2:82:c6:3c:b3:47:78:67:ed:7f:a6:31:ea:d3:73:3f: fe:88:96:98:bc:ed:4c:d9:94:0a:41:3c:93:75:4a:1a:91:99: bb:cf:80:06 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtoevCDeIurTW5yK5e+H/+OMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNhNjE0NzhlNGQ2NTliZWNlODIwM2M1ZThiYThlOGY4MmYw NDcwZDcwHhcNMjUxMjI5MDUwMDQ1WhcNMjUxMjMwMDUwMDQ1WjAzMTEwLwYDVQQD EygwNDMyZDgzOWFiM2ViYTA3ZGI2MzM0ZDUzNGUwNDk3M2ZkNDIyYjkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtpLZBfnYSXLh97j6D6q5Cb6/LHcX Ai0MlZrIYcMf/U7Z3GvTOXj5w4LxzFu2bVOuUFi6J8vN56LenHfTu0cDqhiM78fW 0s/lBFNUXgiBEzSuN6kp28yvS+WRl9txkwzgdFTw1yNv0ZJKsPKb7FUAZHUTKUXp HHaoZLA1qY2Q6t9kR+nVPdmOMKycdc/Wtn0Hiujo79ufk2B/Y3gWzRD91P2CoyJR mdNRHmAKMwMtbtmoCVKEYp73l/KvY+zXrNmVYIyp+qTwse8Z8VnYr5SbSkpsAldx mb8GrhJcFcqFDLpIdqWaGj8vKtqVzgdcrPM7wo+GzBpj8nfjeQmG2a+c8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAQy2DmrProH22M01TTgSXP9QiuTMB8GA1UdIwQY MBaAFMphR45NZZvs6CA8Xouo6PgvBHDXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveW1GSGprMWxtLXpvSUR4ZWk2am8tQzhFY05jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC8yNzliNjYtMzhmMS00MWE1LTkwZTIt OTQ2ZGE1ZjVlZmJiLzEveW1GSGprMWxtLXpvSUR4ZWk2am8tQzhFY05jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OC8yNzliNjYtMzhmMS00MWE1LTkwZTItOTQ2ZGE1ZjVlZmJi LzEveW1GSGprMWxtLXpvSUR4ZWk2am8tQzhFY05jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMxAIF+X3 vV7UpfCrEaMdJc0Nk5kSa/SUc8aZ3NGAlNi1w9vEMUV4S50/rrxfTH2fFfl/EAOK /fr6zJpin5vKa8K3NDU3lz3/6+SVP37l4PB/xaiYDfSyx1aNBPyZ5LgCPQ3ccLYV AbjrPPsOgtnlDIQsmEbVKy8UyOFRFqCUd4Zh8i662tNwgtl5EZZQ8Teio8pVrHOE vlQZrLwRWs0WW4WaV6w92az5TsE80hODN1BwDAAWIKQUcsE9NrfTm6LKidjIcZD8 N39kz4ujt875TEKrgZTSi8dSxnrSgsY8s0d4Z+1/pjHq03M//oiWmLztTNmUCkE8 k3VKGpGZu8+ABg== -----END CERTIFICATE-----Generated at Mon Dec 29 10:26:22 2025 by rpki-client