This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/ff5ffc-22ff-46a1-8d2b-d34d120287d3/1/yMaJKmjOUKGGwNYM1cnkyYjOFsU.mft File: yMaJKmjOUKGGwNYM1cnkyYjOFsU.mft (raw, json) Hash identifier: WpPqQAZ7LrCYWVwemnxbwqE2zesMHIq+Xqfza+0xaYs= Subject key identifier: 75:4E:4C:C9:B0:3D:79:67:2E:7C:D3:63:D7:AD:CC:33:DB:13:B0:BA Authority key identifier: C8:C6:89:2A:68:CE:50:A1:86:C0:D6:0C:D5:C9:E4:C9:88:CE:16:C5 Certificate issuer: /CN=c8c6892a68ce50a186c0d60cd5c9e4c988ce16c5 Certificate serial: 019B3BD8F345E6C575AD0E8DE6F235C17E74 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yMaJKmjOUKGGwNYM1cnkyYjOFsU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/ff5ffc-22ff-46a1-8d2b-d34d120287d3/1/yMaJKmjOUKGGwNYM1cnkyYjOFsU.mft Manifest number: 038B Signing time: Sat 20 Dec 2025 13:00:32 +0000 Manifest this update: Sat 20 Dec 2025 13:00:32 +0000 Manifest next update: Sun 21 Dec 2025 13:00:32 +0000 Files and hashes: 1: llQmZ7ox31md1xrVsOBux0Zjo94.roa (hash: zilK3SjPa7if6qVjP4zB4BrLdTd+JnUFnl8CYZtGV0I=) 2: yMaJKmjOUKGGwNYM1cnkyYjOFsU.crl (hash: DLhkIGg8IFfN7x+RFC868LfnY1Ma8LxZXuxt13tyv+Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/ff5ffc-22ff-46a1-8d2b-d34d120287d3/1/yMaJKmjOUKGGwNYM1cnkyYjOFsU.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/ff5ffc-22ff-46a1-8d2b-d34d120287d3/1/yMaJKmjOUKGGwNYM1cnkyYjOFsU.mft rsync://rpki.ripe.net/repository/DEFAULT/yMaJKmjOUKGGwNYM1cnkyYjOFsU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 13:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:d8:f3:45:e6:c5:75:ad:0e:8d:e6:f2:35:c1:7e:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c8c6892a68ce50a186c0d60cd5c9e4c988ce16c5 Validity Not Before: Dec 20 13:00:32 2025 GMT Not After : Dec 21 13:00:32 2025 GMT Subject: CN=754e4cc9b03d79672e7cd363d7adcc33db13b0ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:e2:98:8e:14:30:39:74:47:eb:0f:b4:e6:1b: 13:ba:af:41:13:3f:16:81:04:e3:fb:40:12:fd:f6: 90:f1:79:40:32:c2:77:74:03:b6:00:22:4d:f8:a0: 36:7e:8f:8d:f5:35:87:90:ec:41:12:ae:db:a4:ff: a9:6e:a2:c2:6a:ff:28:a9:86:2d:65:f8:2b:65:61: a6:0a:28:39:ac:8e:0a:15:f0:01:ea:15:13:47:f3: d0:e0:86:04:e9:95:f4:15:dd:5d:51:6b:f5:98:5c: f4:64:67:d0:03:bc:d2:ab:b0:3a:5e:38:30:2b:ef: 20:c2:18:d3:26:32:9c:da:f6:46:a0:05:b6:04:62: 79:b8:d9:d7:2c:8f:d8:ff:cc:54:79:41:8e:7d:51: 7e:85:fc:c5:10:7d:a4:2e:f4:71:b8:6b:d6:d2:45: a0:a4:f9:73:29:4c:f1:f9:a4:bf:c2:25:4f:7c:57: 06:7b:f0:68:20:32:80:5b:fb:ab:1a:54:23:c7:31: 47:e0:5e:8a:9a:b2:01:39:f6:6e:8f:d6:a0:7d:33: 90:ef:97:43:a4:e5:53:8a:f4:2c:b8:84:44:11:e7: 3e:25:07:ce:fd:bd:a2:39:f8:e8:1d:35:40:b0:86: 36:e9:41:92:44:b9:7c:4b:79:a0:88:88:50:ad:e4: 01:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:4E:4C:C9:B0:3D:79:67:2E:7C:D3:63:D7:AD:CC:33:DB:13:B0:BA X509v3 Authority Key Identifier: keyid:C8:C6:89:2A:68:CE:50:A1:86:C0:D6:0C:D5:C9:E4:C9:88:CE:16:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yMaJKmjOUKGGwNYM1cnkyYjOFsU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/ff5ffc-22ff-46a1-8d2b-d34d120287d3/1/yMaJKmjOUKGGwNYM1cnkyYjOFsU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/ff5ffc-22ff-46a1-8d2b-d34d120287d3/1/yMaJKmjOUKGGwNYM1cnkyYjOFsU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:51:ca:ee:53:1a:7e:c9:c9:b4:f0:46:8a:e0:f1:8a:ef:9e: e0:32:c8:f6:69:07:9d:a6:91:5c:86:e7:f6:b4:00:ab:05:a6: d4:38:4a:62:18:3f:c5:3a:ed:e7:61:30:8e:9a:41:52:03:0b: fd:88:f4:90:8a:60:0e:70:9a:25:ed:aa:46:02:6d:d2:25:0b: 54:02:13:ba:64:a5:1e:67:05:97:30:0d:d2:06:68:03:48:65: 28:ad:97:c6:3e:e5:3a:4f:1b:bc:7a:a2:8e:28:da:92:81:da: fc:ee:4e:16:96:90:ae:b7:ca:76:5b:6d:6a:b3:af:ef:13:3c: 5c:af:34:5a:00:64:ac:6d:a5:52:2e:ca:0f:e2:cc:48:8f:05: 49:81:d1:28:77:31:c9:53:7c:42:b9:80:07:5d:43:86:99:9e: 3c:ad:12:60:f2:53:79:49:7b:b3:4e:e2:2d:fd:41:a4:42:d5: cf:70:f8:05:31:ce:36:96:27:72:4d:ac:f6:a8:5e:d9:fd:51: 02:42:ea:75:71:01:fb:7e:e4:2d:7d:32:4f:9b:8d:27:78:54: d3:a2:d9:fb:b0:82:50:9a:e1:b0:0c:69:d0:6f:d1:8d:4a:df: 8a:6c:4b:3d:0e:64:48:28:86:05:e0:67:59:4f:02:1f:93:09: 3a:68:5a:02 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs72PNF5sV1rQ6N5vI1wX50MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM4YzY4OTJhNjhjZTUwYTE4NmMwZDYwY2Q1YzllNGM5ODhj ZTE2YzUwHhcNMjUxMjIwMTMwMDMyWhcNMjUxMjIxMTMwMDMyWjAzMTEwLwYDVQQD Eyg3NTRlNGNjOWIwM2Q3OTY3MmU3Y2QzNjNkN2FkY2MzM2RiMTNiMGJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu+KYjhQwOXRH6w+05hsTuq9BEz8W gQTj+0AS/faQ8XlAMsJ3dAO2ACJN+KA2fo+N9TWHkOxBEq7bpP+pbqLCav8oqYYt ZfgrZWGmCig5rI4KFfAB6hUTR/PQ4IYE6ZX0Fd1dUWv1mFz0ZGfQA7zSq7A6Xjgw K+8gwhjTJjKc2vZGoAW2BGJ5uNnXLI/Y/8xUeUGOfVF+hfzFEH2kLvRxuGvW0kWg pPlzKUzx+aS/wiVPfFcGe/BoIDKAW/urGlQjxzFH4F6KmrIBOfZuj9agfTOQ75dD pOVTivQsuIREEec+JQfO/b2iOfjoHTVAsIY26UGSRLl8S3mgiIhQreQB0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHVOTMmwPXlnLnzTY9etzDPbE7C6MB8GA1UdIwQY MBaAFMjGiSpozlChhsDWDNXJ5MmIzhbFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveU1hSkttak9VS0dHd05ZTTFjbmt5WWpPRnNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy9mZjVmZmMtMjJmZi00NmExLThkMmIt ZDM0ZDEyMDI4N2QzLzEveU1hSkttak9VS0dHd05ZTTFjbmt5WWpPRnNVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy9mZjVmZmMtMjJmZi00NmExLThkMmItZDM0ZDEyMDI4N2Qz LzEveU1hSkttak9VS0dHd05ZTTFjbmt5WWpPRnNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkVHK7lMa fsnJtPBGiuDxiu+e4DLI9mkHnaaRXIbn9rQAqwWm1DhKYhg/xTrt52EwjppBUgML /Yj0kIpgDnCaJe2qRgJt0iULVAITumSlHmcFlzAN0gZoA0hlKK2Xxj7lOk8bvHqi jijakoHa/O5OFpaQrrfKdlttarOv7xM8XK80WgBkrG2lUi7KD+LMSI8FSYHRKHcx yVN8QrmAB11DhpmePK0SYPJTeUl7s07iLf1BpELVz3D4BTHONpYnck2s9qhe2f1R AkLqdXEB+37kLX0yT5uNJ3hU06LZ+7CCUJrhsAxp0G/RjUrfimxLPQ5kSCiGBeBn WU8CH5MJOmhaAg== -----END CERTIFICATE-----Generated at Sat Dec 20 21:16:11 2025 by rpki-client