This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/d7a484-3d4a-48bf-b516-caf2f7a5b5f4/1/_ymks_Cjr4u-1gKaiyZdyTIE594.mft File: _ymks_Cjr4u-1gKaiyZdyTIE594.mft (raw, json) Hash identifier: 4V5MLtgtI9N2wfsq3UZyEkVSTbhrs7CHX2gGKkXFXtM= Subject key identifier: 36:16:DD:E1:0A:DB:04:9E:D8:5C:8B:BF:5E:D1:51:4E:52:BA:C9:C7 Authority key identifier: FF:29:A4:B3:F0:A3:AF:8B:BE:D6:02:9A:8B:26:5D:C9:32:04:E7:DE Certificate issuer: /CN=ff29a4b3f0a3af8bbed6029a8b265dc93204e7de Certificate serial: 019B42121D2F3334B961A328EC3E306879BD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_ymks_Cjr4u-1gKaiyZdyTIE594.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/d7a484-3d4a-48bf-b516-caf2f7a5b5f4/1/_ymks_Cjr4u-1gKaiyZdyTIE594.mft Manifest number: 0596 Signing time: Sun 21 Dec 2025 18:00:41 +0000 Manifest this update: Sun 21 Dec 2025 18:00:41 +0000 Manifest next update: Mon 22 Dec 2025 18:00:41 +0000 Files and hashes: 1: Sz2bdOCE_Wcxx_Cr6328GnhL2kg.roa (hash: xLto0l4O/7LoweUajPoDbmBCNQiQzqcGIgLGSKNHb6A=) 2: _ymks_Cjr4u-1gKaiyZdyTIE594.crl (hash: g7P0J4ifOH3u2b0sJla3DgBBhnnYaqJhoFODPGWVr3s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/d7a484-3d4a-48bf-b516-caf2f7a5b5f4/1/_ymks_Cjr4u-1gKaiyZdyTIE594.crl rsync://rpki.ripe.net/repository/DEFAULT/61/d7a484-3d4a-48bf-b516-caf2f7a5b5f4/1/_ymks_Cjr4u-1gKaiyZdyTIE594.mft rsync://rpki.ripe.net/repository/DEFAULT/_ymks_Cjr4u-1gKaiyZdyTIE594.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:12:1d:2f:33:34:b9:61:a3:28:ec:3e:30:68:79:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff29a4b3f0a3af8bbed6029a8b265dc93204e7de Validity Not Before: Dec 21 18:00:41 2025 GMT Not After : Dec 22 18:00:41 2025 GMT Subject: CN=3616dde10adb049ed85c8bbf5ed1514e52bac9c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:37:d5:69:4e:e9:d1:39:f0:e4:a2:27:2e:3e: 1f:9a:c5:4a:3c:9e:ed:d8:4b:05:45:90:1b:d8:0a: 5f:64:9e:51:4d:5d:ee:72:c2:10:c2:39:ce:76:a2: 28:18:92:98:94:97:9b:a1:5d:e5:9d:c6:52:9e:2b: a9:ec:3c:2d:3f:49:cd:c2:b9:0f:1b:64:a9:38:1f: 10:bd:50:a0:f8:eb:ce:63:89:e7:11:28:54:b5:98: 4b:9d:30:c7:49:78:6e:8d:9d:9f:24:b1:be:46:fd: ba:74:7a:43:f7:4a:bc:7d:0a:62:33:00:d6:c8:a2: 70:1b:10:70:b9:93:55:5b:6b:a9:a3:01:aa:ca:41: 00:c4:e4:96:f5:4f:9f:f5:d1:e7:12:bd:9b:36:d9: 0c:a6:7e:a3:3d:15:62:1f:3f:f8:c5:d3:d0:fc:b0: 3f:9f:75:ac:bd:05:91:1e:e7:f4:f8:e3:25:3b:0d: 90:91:72:f4:5f:45:03:25:f0:f5:83:a7:9a:9b:0e: 8b:58:63:66:ac:9f:4e:87:65:32:8c:98:e4:f2:f6: ed:41:10:18:d3:9c:a0:1f:13:a4:07:c4:32:4a:8b: 47:a7:f4:52:7c:3a:27:1c:84:0c:f4:ed:80:e4:33: 0d:23:e7:8c:29:89:23:a5:3a:8f:32:f7:b5:27:0d: 72:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:16:DD:E1:0A:DB:04:9E:D8:5C:8B:BF:5E:D1:51:4E:52:BA:C9:C7 X509v3 Authority Key Identifier: keyid:FF:29:A4:B3:F0:A3:AF:8B:BE:D6:02:9A:8B:26:5D:C9:32:04:E7:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_ymks_Cjr4u-1gKaiyZdyTIE594.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/d7a484-3d4a-48bf-b516-caf2f7a5b5f4/1/_ymks_Cjr4u-1gKaiyZdyTIE594.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/d7a484-3d4a-48bf-b516-caf2f7a5b5f4/1/_ymks_Cjr4u-1gKaiyZdyTIE594.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:9d:04:51:b6:5b:65:1c:88:fd:a1:e8:06:b4:9b:5e:4b:6f: eb:84:51:75:ab:1c:10:ac:31:16:d8:31:ab:a9:47:f4:80:20: 9a:8a:6d:d1:c9:80:07:6e:e9:3d:cc:69:8b:c7:35:df:9d:bf: 2e:e1:fe:9a:98:f8:04:fd:51:31:24:fc:e1:35:9a:f6:49:65: 20:d7:19:37:e7:76:ef:4e:e9:2c:2e:f3:18:04:64:eb:42:75: 21:93:c4:a2:bb:a1:4e:8c:3f:7f:09:f9:55:e1:c6:b4:45:69: 1d:77:17:34:ea:18:54:9d:4f:39:11:70:fb:c2:bf:13:ec:36: 01:d8:41:54:56:cd:6c:66:b0:5d:1c:88:ba:c0:52:e6:e6:28: 7a:34:b7:ab:62:12:7e:c0:ba:3a:00:28:14:2a:35:38:ff:19: 6b:fa:94:0b:dd:4e:9a:5c:87:df:99:f7:57:68:53:aa:79:db: 25:d0:1c:16:1c:ff:ec:bf:5a:f8:8d:5f:7a:19:e5:c3:7d:aa: b2:a1:8b:bc:70:cc:59:32:a2:de:5e:88:8f:9b:f7:e2:12:d0: 68:6a:80:06:fa:75:00:f2:c4:80:b2:1a:84:d2:aa:ba:da:0f: 11:20:fd:5f:1d:9f:1c:e8:0f:d6:e9:f5:f1:be:04:73:41:ef: f5:0b:1c:8f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCEh0vMzS5YaMo7D4waHm9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmMjlhNGIzZjBhM2FmOGJiZWQ2MDI5YThiMjY1ZGM5MzIw NGU3ZGUwHhcNMjUxMjIxMTgwMDQxWhcNMjUxMjIyMTgwMDQxWjAzMTEwLwYDVQQD EygzNjE2ZGRlMTBhZGIwNDllZDg1YzhiYmY1ZWQxNTE0ZTUyYmFjOWM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2zfVaU7p0Tnw5KInLj4fmsVKPJ7t 2EsFRZAb2ApfZJ5RTV3ucsIQwjnOdqIoGJKYlJeboV3lncZSniup7DwtP0nNwrkP G2SpOB8QvVCg+OvOY4nnEShUtZhLnTDHSXhujZ2fJLG+Rv26dHpD90q8fQpiMwDW yKJwGxBwuZNVW2upowGqykEAxOSW9U+f9dHnEr2bNtkMpn6jPRViHz/4xdPQ/LA/ n3WsvQWRHuf0+OMlOw2QkXL0X0UDJfD1g6eamw6LWGNmrJ9Oh2UyjJjk8vbtQRAY 05ygHxOkB8QySotHp/RSfDonHIQM9O2A5DMNI+eMKYkjpTqPMve1Jw1y+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDYW3eEK2wSe2FyLv17RUU5SusnHMB8GA1UdIwQY MBaAFP8ppLPwo6+LvtYCmosmXckyBOfeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX3lta3NfQ2pyNHUtMWdLYWl5WmR5VElFNTk0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS9kN2E0ODQtM2Q0YS00OGJmLWI1MTYt Y2FmMmY3YTViNWY0LzEvX3lta3NfQ2pyNHUtMWdLYWl5WmR5VElFNTk0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS9kN2E0ODQtM2Q0YS00OGJmLWI1MTYtY2FmMmY3YTViNWY0 LzEvX3lta3NfQ2pyNHUtMWdLYWl5WmR5VElFNTk0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaJ0EUbZb ZRyI/aHoBrSbXktv64RRdascEKwxFtgxq6lH9IAgmopt0cmAB27pPcxpi8c1352/ LuH+mpj4BP1RMST84TWa9kllINcZN+d2707pLC7zGARk60J1IZPEoruhTow/fwn5 VeHGtEVpHXcXNOoYVJ1PORFw+8K/E+w2AdhBVFbNbGawXRyIusBS5uYoejS3q2IS fsC6OgAoFCo1OP8Za/qUC91OmlyH35n3V2hTqnnbJdAcFhz/7L9a+I1fehnlw32q sqGLvHDMWTKi3l6Ij5v34hLQaGqABvp1APLEgLIahNKqutoPESD9Xx2fHOgP1un1 8b4Ec0Hv9Qscjw== -----END CERTIFICATE-----Generated at Sun Dec 21 20:03:25 2025 by rpki-client