This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/0186a2-f8aa-41d8-9a4e-8726dd88f529/1/YlDmLARIEp9jWJGKccM0TiWoLZs.mft File: YlDmLARIEp9jWJGKccM0TiWoLZs.mft (raw, json) Hash identifier: Lhd2G72ZqQrdjShGZ8GyuIMV0dIWOeTfJH4pYh1dSos= Subject key identifier: 72:EC:63:8D:29:C9:E4:36:7F:E5:D1:1F:84:02:CE:45:B2:4A:0B:34 Authority key identifier: 62:50:E6:2C:04:48:12:9F:63:58:91:8A:71:C3:34:4E:25:A8:2D:9B Certificate issuer: /CN=6250e62c0448129f6358918a71c3344e25a82d9b Certificate serial: 019AF12D55D8540FBEC885AC540FF9D1CFDE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YlDmLARIEp9jWJGKccM0TiWoLZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/0186a2-f8aa-41d8-9a4e-8726dd88f529/1/YlDmLARIEp9jWJGKccM0TiWoLZs.mft Manifest number: 010E Signing time: Sat 06 Dec 2025 01:01:11 +0000 Manifest this update: Sat 06 Dec 2025 01:01:11 +0000 Manifest next update: Sun 07 Dec 2025 01:01:11 +0000 Files and hashes: 1: Gof8cYl_-_S4WvBztVMMpN2lO6Y.roa (hash: 6km18MyJ5IHTThvCW2WxtbASJyCxFy1OyHEgHJJtY7Y=) 2: YlDmLARIEp9jWJGKccM0TiWoLZs.crl (hash: c13mip+/Uaf1v4Sy/51KzCr4vrqLtNV5C3j95LIp44k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/0186a2-f8aa-41d8-9a4e-8726dd88f529/1/YlDmLARIEp9jWJGKccM0TiWoLZs.crl rsync://rpki.ripe.net/repository/DEFAULT/78/0186a2-f8aa-41d8-9a4e-8726dd88f529/1/YlDmLARIEp9jWJGKccM0TiWoLZs.mft rsync://rpki.ripe.net/repository/DEFAULT/YlDmLARIEp9jWJGKccM0TiWoLZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:55:d8:54:0f:be:c8:85:ac:54:0f:f9:d1:cf:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6250e62c0448129f6358918a71c3344e25a82d9b Validity Not Before: Dec 6 01:01:11 2025 GMT Not After : Dec 7 01:01:11 2025 GMT Subject: CN=72ec638d29c9e4367fe5d11f8402ce45b24a0b34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:9d:ec:a4:06:bc:cb:7a:0b:2b:68:36:a8:8d: d3:e3:e3:3d:37:c6:d4:f0:c0:46:ea:68:14:8a:03: 2f:ec:d4:5d:72:9b:c1:c3:61:9c:c0:2a:93:b9:59: c9:74:44:17:97:af:73:22:3d:71:78:ff:6a:21:9a: cd:65:67:e3:3b:96:f7:5a:28:54:9a:06:8c:d0:9b: 55:e4:af:c3:75:ab:c4:fd:c8:ba:ac:27:ee:e1:c7: 73:c6:6e:1a:33:70:5b:9e:98:4a:8d:ed:85:08:9a: 94:f1:e3:27:24:84:9b:6e:e4:c0:43:50:d5:f5:50: 94:ad:d6:9c:ad:9f:63:90:bb:3e:d7:3a:57:c9:40: b2:a7:59:95:2c:87:5d:05:06:1a:1a:f0:6e:ff:4d: fc:ab:a8:24:65:ed:27:bf:d4:36:aa:18:b7:3e:eb: 61:72:86:df:88:3c:d8:e6:31:f0:fc:b5:6c:3a:39: c2:95:bb:cd:cc:27:3a:01:1a:8d:cc:37:c2:26:51: 0e:ef:bb:e6:e0:d9:09:9f:1f:73:20:b1:e1:1e:7a: 52:2e:7c:db:6a:0c:65:a5:22:49:c2:90:66:f2:77: 4d:d5:f4:c3:4f:18:2d:6e:75:34:11:fc:e1:ae:da: 92:88:9a:41:27:fb:94:82:06:72:93:56:68:26:11: 1a:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:EC:63:8D:29:C9:E4:36:7F:E5:D1:1F:84:02:CE:45:B2:4A:0B:34 X509v3 Authority Key Identifier: keyid:62:50:E6:2C:04:48:12:9F:63:58:91:8A:71:C3:34:4E:25:A8:2D:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YlDmLARIEp9jWJGKccM0TiWoLZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/0186a2-f8aa-41d8-9a4e-8726dd88f529/1/YlDmLARIEp9jWJGKccM0TiWoLZs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/0186a2-f8aa-41d8-9a4e-8726dd88f529/1/YlDmLARIEp9jWJGKccM0TiWoLZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:2d:ba:f5:e4:ce:11:2b:fe:9a:be:fb:97:46:25:27:b6:04: 18:0c:f3:20:8e:bc:38:82:4a:31:c5:91:1c:b7:cb:b3:ac:22: 2c:98:7e:44:66:f2:98:21:3c:78:60:84:f6:92:8f:42:10:97: 5e:37:dc:55:60:93:11:e0:3a:38:50:6a:22:ba:b2:4f:d7:1f: 5e:08:09:68:da:13:87:42:a9:96:60:62:a4:2c:95:b5:1c:50: e4:16:66:78:fe:a0:31:7e:aa:bf:78:af:6b:ad:62:a7:23:15: f4:c7:65:b9:8f:e6:7a:cb:f0:d2:85:30:3c:69:1b:54:59:56: 48:26:9e:2d:aa:bb:a1:6a:23:cb:2a:de:d7:bb:9d:b0:65:9c: ec:0e:a2:2e:20:28:d2:2b:5f:73:43:92:f3:5b:85:09:cf:35: 1b:48:76:73:28:84:4e:97:42:94:fa:ce:76:ef:66:06:ee:a4: 17:70:58:84:4f:59:0a:4f:d8:fa:b5:37:e5:36:3b:c4:01:dc: 69:29:ed:70:88:d0:b2:e9:22:14:49:1f:4b:6b:5c:c4:46:55: 43:7e:3a:d6:33:ad:55:12:6c:93:b7:42:8b:1e:13:93:4f:ce: 00:b7:91:ee:15:31:18:24:8c:30:75:8a:96:cd:c9:06:13:75: eb:2f:aa:26 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLVXYVA++yIWsVA/50c/eMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyNTBlNjJjMDQ0ODEyOWY2MzU4OTE4YTcxYzMzNDRlMjVh ODJkOWIwHhcNMjUxMjA2MDEwMTExWhcNMjUxMjA3MDEwMTExWjAzMTEwLwYDVQQD Eyg3MmVjNjM4ZDI5YzllNDM2N2ZlNWQxMWY4NDAyY2U0NWIyNGEwYjM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwZ3spAa8y3oLK2g2qI3T4+M9N8bU 8MBG6mgUigMv7NRdcpvBw2GcwCqTuVnJdEQXl69zIj1xeP9qIZrNZWfjO5b3WihU mgaM0JtV5K/DdavE/ci6rCfu4cdzxm4aM3BbnphKje2FCJqU8eMnJISbbuTAQ1DV 9VCUrdacrZ9jkLs+1zpXyUCyp1mVLIddBQYaGvBu/038q6gkZe0nv9Q2qhi3Puth cobfiDzY5jHw/LVsOjnClbvNzCc6ARqNzDfCJlEO77vm4NkJnx9zILHhHnpSLnzb agxlpSJJwpBm8ndN1fTDTxgtbnU0EfzhrtqSiJpBJ/uUggZyk1ZoJhEaowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHLsY40pyeQ2f+XRH4QCzkWySgs0MB8GA1UdIwQY MBaAFGJQ5iwESBKfY1iRinHDNE4lqC2bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWWxEbUxBUklFcDlqV0pHS2NjTTBUaVdvTFpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC8wMTg2YTItZjhhYS00MWQ4LTlhNGUt ODcyNmRkODhmNTI5LzEvWWxEbUxBUklFcDlqV0pHS2NjTTBUaVdvTFpzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OC8wMTg2YTItZjhhYS00MWQ4LTlhNGUtODcyNmRkODhmNTI5 LzEvWWxEbUxBUklFcDlqV0pHS2NjTTBUaVdvTFpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhS269eTO ESv+mr77l0YlJ7YEGAzzII68OIJKMcWRHLfLs6wiLJh+RGbymCE8eGCE9pKPQhCX XjfcVWCTEeA6OFBqIrqyT9cfXggJaNoTh0KplmBipCyVtRxQ5BZmeP6gMX6qv3iv a61ipyMV9MdluY/mesvw0oUwPGkbVFlWSCaeLaq7oWojyyre17udsGWc7A6iLiAo 0itfc0OS81uFCc81G0h2cyiETpdClPrOdu9mBu6kF3BYhE9ZCk/Y+rU35TY7xAHc aSntcIjQsukiFEkfS2tcxEZVQ3461jOtVRJsk7dCix4Tk0/OALeR7hUxGCSMMHWK ls3JBhN16y+qJg== -----END CERTIFICATE-----Generated at Sat Dec 6 11:25:49 2025 by rpki-client