This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/b39a59-b424-413b-a693-39d4b3f5710f/1/ygMmi7Zmsb1CMHnl3yvVpU4emGE.mft File: ygMmi7Zmsb1CMHnl3yvVpU4emGE.mft (raw, json) Hash identifier: mwnsMBDWHCFLxR4rs6FCRqezN4CLxctKrNAUe4HniPY= Subject key identifier: 3C:41:42:52:FB:FF:F3:E2:C2:60:C3:99:56:90:AC:0F:1D:54:7D:BC Authority key identifier: CA:03:26:8B:B6:66:B1:BD:42:30:79:E5:DF:2B:D5:A5:4E:1E:98:61 Certificate issuer: /CN=ca03268bb666b1bd423079e5df2bd5a54e1e9861 Certificate serial: 019B34C5E22F9F8C017C286B56BF9447790A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ygMmi7Zmsb1CMHnl3yvVpU4emGE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/b39a59-b424-413b-a693-39d4b3f5710f/1/ygMmi7Zmsb1CMHnl3yvVpU4emGE.mft Manifest number: 01FC Signing time: Fri 19 Dec 2025 04:02:22 +0000 Manifest this update: Fri 19 Dec 2025 04:02:22 +0000 Manifest next update: Sat 20 Dec 2025 04:02:22 +0000 Files and hashes: 1: Blt---jsIFQZ1r2IAxC-z0fx3gA.roa (hash: WMXyefoTuj2dAlvEBS8JjIjWNUd09eEAuE+gYKf1VT4=) 2: ygMmi7Zmsb1CMHnl3yvVpU4emGE.crl (hash: chI/Vj8A25SKSBWO4anGSO4lCaKHUIgIf0lSqU4r7Gk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/b39a59-b424-413b-a693-39d4b3f5710f/1/ygMmi7Zmsb1CMHnl3yvVpU4emGE.crl rsync://rpki.ripe.net/repository/DEFAULT/6d/b39a59-b424-413b-a693-39d4b3f5710f/1/ygMmi7Zmsb1CMHnl3yvVpU4emGE.mft rsync://rpki.ripe.net/repository/DEFAULT/ygMmi7Zmsb1CMHnl3yvVpU4emGE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 04:02:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:c5:e2:2f:9f:8c:01:7c:28:6b:56:bf:94:47:79:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ca03268bb666b1bd423079e5df2bd5a54e1e9861 Validity Not Before: Dec 19 04:02:22 2025 GMT Not After : Dec 20 04:02:22 2025 GMT Subject: CN=3c414252fbfff3e2c260c3995690ac0f1d547dbc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:68:26:cb:78:c5:e2:85:42:67:b7:64:fe:8f: 88:91:20:a3:03:98:ee:ea:ff:22:d6:0c:22:9a:f1: db:13:f6:ec:b1:0e:1b:c6:51:ca:7b:61:0e:c0:d0: b1:02:00:14:43:31:e7:73:b7:55:13:88:eb:6a:48: 21:86:84:ce:3b:c0:72:cb:f0:45:eb:91:d5:17:c5: 86:c3:45:fc:4c:bb:99:58:c8:d6:ee:66:b5:94:09: 41:2c:c8:81:a2:ec:42:f0:91:ee:b2:7a:f9:85:36: 3f:50:f1:3f:94:c0:16:79:80:71:5a:a1:d0:64:f3: 4f:f3:1b:74:af:c4:bf:0d:d5:5a:7a:46:c6:01:71: 25:eb:60:56:16:ff:ef:96:4c:60:26:1b:0c:af:09: 84:08:7f:ce:99:44:59:46:b9:bf:1f:de:49:b8:ca: c0:4e:8f:79:69:75:de:d0:6b:52:9d:17:ca:87:bd: 37:b4:1e:74:75:0e:fd:de:b2:36:49:d9:a5:0d:9b: e3:cc:2a:bd:67:c8:fa:e6:f6:24:c4:66:05:e1:10: c5:be:91:68:e3:c2:41:87:8b:be:75:89:68:87:ce: 6d:ba:ad:00:6d:fc:85:4c:c2:7d:a9:63:cd:ac:71: be:73:33:36:85:37:fc:7d:59:34:7c:e2:84:23:f2: 03:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:41:42:52:FB:FF:F3:E2:C2:60:C3:99:56:90:AC:0F:1D:54:7D:BC X509v3 Authority Key Identifier: keyid:CA:03:26:8B:B6:66:B1:BD:42:30:79:E5:DF:2B:D5:A5:4E:1E:98:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ygMmi7Zmsb1CMHnl3yvVpU4emGE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/b39a59-b424-413b-a693-39d4b3f5710f/1/ygMmi7Zmsb1CMHnl3yvVpU4emGE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/b39a59-b424-413b-a693-39d4b3f5710f/1/ygMmi7Zmsb1CMHnl3yvVpU4emGE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:c6:c2:c1:e1:86:8d:5c:3c:49:d0:46:e5:f2:ba:76:cc:16: 8b:52:81:48:0c:3e:0d:2a:4c:c8:d3:3c:29:97:e1:7a:56:c8: c7:39:47:7e:f4:bf:29:b9:27:6b:c4:f9:92:08:b8:05:31:0a: 6e:ec:84:29:02:cc:df:47:74:f0:eb:8c:0f:a4:37:80:b2:06: a6:5a:5a:a3:7b:31:1b:a4:6a:97:a3:ca:a5:2b:7f:c9:c8:f4: 97:76:42:92:09:22:f6:ea:ce:f9:0c:1b:d6:b4:6b:d2:39:de: 12:46:2f:a6:7f:ed:2f:ea:be:b3:a9:10:b3:2c:c7:63:d5:47: c9:82:8e:a4:ae:a9:64:b7:b2:69:d9:47:7c:be:67:b0:5a:8d: 86:4b:9f:07:81:f9:55:71:4b:d6:4b:28:e1:f7:c8:6e:d1:e3: 3b:68:ab:07:25:06:5a:f4:ea:08:c6:43:aa:25:2e:c8:fd:1f: 0c:b4:45:fb:fd:91:f1:dc:9c:5b:fa:7a:69:21:1c:c7:24:52: 37:ac:5d:14:48:1d:ab:c3:61:12:e3:02:0e:96:7a:dd:a5:b7: b1:4c:1d:26:e6:33:9b:d7:fe:f3:35:19:e6:fa:73:08:9d:34: b5:30:49:9f:25:9b:e4:90:ad:3f:fb:7c:18:c9:37:9a:77:a6: 5e:19:4e:22 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0xeIvn4wBfChrVr+UR3kKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNhMDMyNjhiYjY2NmIxYmQ0MjMwNzllNWRmMmJkNWE1NGUx ZTk4NjEwHhcNMjUxMjE5MDQwMjIyWhcNMjUxMjIwMDQwMjIyWjAzMTEwLwYDVQQD EygzYzQxNDI1MmZiZmZmM2UyYzI2MGMzOTk1NjkwYWMwZjFkNTQ3ZGJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuWgmy3jF4oVCZ7dk/o+IkSCjA5ju 6v8i1gwimvHbE/bssQ4bxlHKe2EOwNCxAgAUQzHnc7dVE4jrakghhoTOO8Byy/BF 65HVF8WGw0X8TLuZWMjW7ma1lAlBLMiBouxC8JHusnr5hTY/UPE/lMAWeYBxWqHQ ZPNP8xt0r8S/DdVaekbGAXEl62BWFv/vlkxgJhsMrwmECH/OmURZRrm/H95JuMrA To95aXXe0GtSnRfKh703tB50dQ793rI2SdmlDZvjzCq9Z8j65vYkxGYF4RDFvpFo 48JBh4u+dYloh85tuq0AbfyFTMJ9qWPNrHG+czM2hTf8fVk0fOKEI/IDKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDxBQlL7//PiwmDDmVaQrA8dVH28MB8GA1UdIwQY MBaAFMoDJou2ZrG9QjB55d8r1aVOHphhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWdNbWk3Wm1zYjFDTUhubDN5dlZwVTRlbUdFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC9iMzlhNTktYjQyNC00MTNiLWE2OTMt MzlkNGIzZjU3MTBmLzEveWdNbWk3Wm1zYjFDTUhubDN5dlZwVTRlbUdFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZC9iMzlhNTktYjQyNC00MTNiLWE2OTMtMzlkNGIzZjU3MTBm LzEveWdNbWk3Wm1zYjFDTUhubDN5dlZwVTRlbUdFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHsbCweGG jVw8SdBG5fK6dswWi1KBSAw+DSpMyNM8KZfhelbIxzlHfvS/Kbkna8T5kgi4BTEK buyEKQLM30d08OuMD6Q3gLIGplpao3sxG6Rql6PKpSt/ycj0l3ZCkgki9urO+Qwb 1rRr0jneEkYvpn/tL+q+s6kQsyzHY9VHyYKOpK6pZLeyadlHfL5nsFqNhkufB4H5 VXFL1kso4ffIbtHjO2irByUGWvTqCMZDqiUuyP0fDLRF+/2R8dycW/p6aSEcxyRS N6xdFEgdq8NhEuMCDpZ63aW3sUwdJuYzm9f+8zUZ5vpzCJ00tTBJnyWb5JCtP/t8 GMk3mnemXhlOIg== -----END CERTIFICATE-----Generated at Fri Dec 19 14:37:53 2025 by rpki-client