This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/6ce994-8e99-40f9-a4eb-b2d73678727b/1/YMRN_3GHmGPqcUQgI7fzVNw9rXw.mft
File:                     YMRN_3GHmGPqcUQgI7fzVNw9rXw.mft (raw, json)
Hash identifier:          GBSqx5TMLhpRj8X8TC2cjWjV/JprsIzPmZq5XcIhHPk=
Subject key identifier:   74:74:9C:5E:07:E5:64:C8:9E:DC:B3:D6:E4:9C:37:03:1E:0D:70:AB
Authority key identifier: 60:C4:4D:FF:71:87:98:63:EA:71:44:20:23:B7:F3:54:DC:3D:AD:7C
Certificate issuer:       /CN=60c44dff71879863ea71442023b7f354dc3dad7c
Certificate serial:       019B39B3B459AE294B40F1D4ACFBC3BEC889
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YMRN_3GHmGPqcUQgI7fzVNw9rXw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/6ce994-8e99-40f9-a4eb-b2d73678727b/1/YMRN_3GHmGPqcUQgI7fzVNw9rXw.mft
Manifest number:          07EA
Signing time:             Sat 20 Dec 2025 03:00:36 +0000
Manifest this update:     Sat 20 Dec 2025 03:00:36 +0000
Manifest next update:     Sun 21 Dec 2025 03:00:36 +0000
Files and hashes:         1: 1DSZn5ns00u_zh3eaHcMM8S9LJ8.roa (hash: f2k2Rp4Tvmjd6WBxwwnYblRCaq4QO4K1UztQrgvzq4k=)
                          2: MNaMRPeSME_XYwjj2iW6Vinmifg.roa (hash: /1QrovjxUCyErSvoCQnPnqMxU5YJcSU6R6BPRoCuQcg=)
                          3: YMRN_3GHmGPqcUQgI7fzVNw9rXw.crl (hash: 0dllX670ddaBsYQr3fWGfz/zFdks0jbUzoEaPkJhv2s=)
                          4: yIFDC3DQyKnYJrOVoxpI_9NxtQ4.roa (hash: cgrK+K+/SobWe5sM1Xw8KgFBTC6aou6l85u0UGfO0is=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b4/6ce994-8e99-40f9-a4eb-b2d73678727b/1/YMRN_3GHmGPqcUQgI7fzVNw9rXw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b4/6ce994-8e99-40f9-a4eb-b2d73678727b/1/YMRN_3GHmGPqcUQgI7fzVNw9rXw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YMRN_3GHmGPqcUQgI7fzVNw9rXw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 01:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:39:b3:b4:59:ae:29:4b:40:f1:d4:ac:fb:c3:be:c8:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60c44dff71879863ea71442023b7f354dc3dad7c
        Validity
            Not Before: Dec 20 03:00:36 2025 GMT
            Not After : Dec 21 03:00:36 2025 GMT
        Subject: CN=74749c5e07e564c89edcb3d6e49c37031e0d70ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:f4:e9:d7:a5:23:2a:28:1a:31:82:6d:9a:31:
                    54:05:c6:aa:a9:1e:fa:2a:7b:d2:43:bb:2b:b7:5d:
                    aa:18:ca:1e:e2:54:6c:fc:0b:2b:77:db:0a:15:3d:
                    a8:f3:af:4c:25:8e:69:78:ad:bc:d0:91:73:2d:8a:
                    0a:07:00:1b:30:b9:8e:4f:60:be:a5:12:30:d5:e1:
                    84:ca:62:2c:c5:0d:cd:46:42:0d:34:9a:58:16:8a:
                    e5:be:f9:1e:2f:1f:1d:a8:d6:75:b3:98:73:e1:57:
                    0a:d9:4d:fc:36:41:b7:61:83:df:31:24:71:e6:78:
                    77:e7:1a:d3:82:fb:15:e8:77:ed:96:04:9b:99:b2:
                    f7:24:0d:ad:9d:16:a9:fe:85:8b:0e:36:f0:eb:58:
                    d9:93:7b:b8:30:a1:25:ab:e1:5e:fb:63:ab:69:d5:
                    e3:da:42:08:a7:fa:64:9d:d7:be:0a:2c:7b:83:4e:
                    00:01:40:e1:66:0d:1c:cf:93:90:3d:4f:14:60:fc:
                    be:e7:8c:05:7a:60:a9:ec:d7:0d:c6:cb:ba:55:ba:
                    03:a8:9b:91:ad:b5:58:98:88:60:5b:d9:74:bb:5e:
                    28:50:1e:07:c2:73:f0:43:c0:69:be:d2:15:19:a6:
                    73:ef:26:a8:28:f4:8d:a0:32:b2:f4:8a:68:7c:19:
                    56:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:74:9C:5E:07:E5:64:C8:9E:DC:B3:D6:E4:9C:37:03:1E:0D:70:AB
            X509v3 Authority Key Identifier:
                keyid:60:C4:4D:FF:71:87:98:63:EA:71:44:20:23:B7:F3:54:DC:3D:AD:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YMRN_3GHmGPqcUQgI7fzVNw9rXw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/6ce994-8e99-40f9-a4eb-b2d73678727b/1/YMRN_3GHmGPqcUQgI7fzVNw9rXw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/6ce994-8e99-40f9-a4eb-b2d73678727b/1/YMRN_3GHmGPqcUQgI7fzVNw9rXw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:22:d1:4f:26:e4:a0:e9:67:75:9f:48:34:09:82:f6:1c:41:
         45:4e:7e:c4:eb:26:11:73:8f:12:24:a0:df:53:5a:01:ac:c3:
         4e:8d:c5:ff:94:92:df:a5:a7:c7:9d:aa:57:0b:43:d9:8b:11:
         46:50:5a:65:2c:de:c0:ce:a2:79:10:3d:29:d0:17:64:98:9e:
         a2:76:de:67:3a:fc:11:ae:16:18:e0:96:3e:e7:e9:f4:24:60:
         4b:3e:52:31:36:c9:7a:b2:b1:43:8b:7a:ec:fa:ff:2a:36:24:
         97:91:17:a3:4c:42:9e:cf:c3:92:2a:bd:96:1d:a9:43:84:e3:
         21:b3:27:9b:ca:8e:b1:71:02:4b:22:71:21:07:68:21:e0:3c:
         1b:79:6a:a0:cf:85:67:c0:b0:49:05:c8:c7:10:24:5d:cf:5d:
         28:79:95:aa:68:a2:2f:88:b8:1d:ae:a4:e3:ce:4c:98:e8:15:
         85:de:2e:54:d5:da:2b:20:14:fb:b4:b8:66:ce:9e:5e:8c:cb:
         21:13:c6:fd:49:c4:05:34:75:18:a9:89:6e:7e:5c:f1:4a:c5:
         9b:e4:b7:20:07:26:3f:67:a0:42:f5:87:a7:b9:92:0f:89:51:
         44:3c:26:c6:ef:90:e4:53:42:bf:00:d6:14:9e:b8:c3:8d:36:
         a2:31:fb:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 06:06:31 2025 by rpki-client