This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/3b9215-9807-481e-9a1e-732272023ec2/1/YtGLMS41Pnj6juX4DTb3Qc3N46o.mft File: YtGLMS41Pnj6juX4DTb3Qc3N46o.mft (raw, json) Hash identifier: hh7Io4kfXjWVRIh2XY9W7iKMV8iVUPZlC4VFfz+3xDU= Subject key identifier: A0:A4:58:E2:5E:93:2C:F4:FE:67:97:61:80:6F:42:76:1C:0B:4D:F7 Authority key identifier: 62:D1:8B:31:2E:35:3E:78:FA:8E:E5:F8:0D:36:F7:41:CD:CD:E3:AA Certificate issuer: /CN=62d18b312e353e78fa8ee5f80d36f741cdcde3aa Certificate serial: 019AF2AD73584D6EE1610EA865E2B8FA1AD1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YtGLMS41Pnj6juX4DTb3Qc3N46o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/3b9215-9807-481e-9a1e-732272023ec2/1/YtGLMS41Pnj6juX4DTb3Qc3N46o.mft Manifest number: 1206 Signing time: Sat 06 Dec 2025 08:00:44 +0000 Manifest this update: Sat 06 Dec 2025 08:00:44 +0000 Manifest next update: Sun 07 Dec 2025 08:00:44 +0000 Files and hashes: 1: YtGLMS41Pnj6juX4DTb3Qc3N46o.crl (hash: iVGXfcgtgW7mJH8pR+ajZ00JySwpykOIlbeSoXZ/NJg=) 2: _Zz1Cu9GIz20qsemRnTOxpptbFA.roa (hash: Nq/fM/hd3jyGxJ/ud7QdLP64eh6OFLHRS+jqgC+mzSI=) 3: i2IsJ0_IABmEW_nqATqO3eXE_yA.roa (hash: NG0njCUXWjhkgeU+Tlptt1T4nDTRU6KlU6CCdc6Agjg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/3b9215-9807-481e-9a1e-732272023ec2/1/YtGLMS41Pnj6juX4DTb3Qc3N46o.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/3b9215-9807-481e-9a1e-732272023ec2/1/YtGLMS41Pnj6juX4DTb3Qc3N46o.mft rsync://rpki.ripe.net/repository/DEFAULT/YtGLMS41Pnj6juX4DTb3Qc3N46o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:73:58:4d:6e:e1:61:0e:a8:65:e2:b8:fa:1a:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=62d18b312e353e78fa8ee5f80d36f741cdcde3aa Validity Not Before: Dec 6 08:00:44 2025 GMT Not After : Dec 7 08:00:44 2025 GMT Subject: CN=a0a458e25e932cf4fe679761806f42761c0b4df7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:69:ca:bd:d7:b7:1b:2c:d8:c0:e0:42:c7:ae: 88:9d:46:6c:e7:5d:47:ad:13:b6:ee:41:da:25:14: d6:ab:08:95:dd:a9:6e:a6:14:de:9b:16:80:5a:68: 2d:8a:f0:e4:8d:80:24:ae:71:b8:12:f3:e8:77:7d: ca:f9:26:c2:00:f8:41:5c:ca:01:6c:f5:22:dd:fd: 98:48:49:b2:3f:1d:fd:44:1e:07:44:df:dd:14:5e: 0c:a0:8f:58:f7:f3:23:20:62:09:6f:b3:ce:12:8c: 4b:56:ab:b1:57:d6:cc:d1:fa:76:50:48:0b:f5:19: d7:1d:bb:a4:aa:13:3b:0f:55:14:a1:20:87:c3:db: 70:fe:75:cf:d1:0a:09:ca:1e:35:78:47:87:e3:b7: 89:6d:9f:1f:8d:b7:91:86:8d:74:29:c8:47:d2:f8: e9:9f:43:d1:7c:3c:ff:b3:75:45:a2:21:4e:5b:6c: 2e:86:bf:79:3b:51:66:49:fe:4b:9e:1f:ca:be:1a: 9c:2d:17:2c:0b:43:2f:8d:21:fa:41:a2:da:15:17: 6f:e8:84:c9:5e:a4:66:a2:46:d4:0b:c7:fe:7a:8a: 30:e4:b4:0d:79:04:f9:00:bf:6b:2e:9f:50:1b:ac: 16:76:95:5d:27:93:6b:87:e2:a3:ce:07:f2:fa:3e: 8a:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:A4:58:E2:5E:93:2C:F4:FE:67:97:61:80:6F:42:76:1C:0B:4D:F7 X509v3 Authority Key Identifier: keyid:62:D1:8B:31:2E:35:3E:78:FA:8E:E5:F8:0D:36:F7:41:CD:CD:E3:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YtGLMS41Pnj6juX4DTb3Qc3N46o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/3b9215-9807-481e-9a1e-732272023ec2/1/YtGLMS41Pnj6juX4DTb3Qc3N46o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/3b9215-9807-481e-9a1e-732272023ec2/1/YtGLMS41Pnj6juX4DTb3Qc3N46o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:ba:54:81:a1:2c:b6:94:5b:6c:14:27:e4:df:a3:06:48:c6: 57:f3:4c:39:3e:52:ba:72:01:c1:02:81:99:ef:03:7f:05:e9: 9f:cf:8a:ea:c5:1f:4a:75:c0:0e:9a:e3:1b:bf:21:2c:b7:50: d9:60:26:34:c4:58:83:d5:c3:e8:d7:45:6e:da:63:ff:73:ac: 04:60:84:0e:e3:ce:82:8f:f1:cb:e6:65:57:73:93:c3:56:5c: ed:d7:ef:a0:67:4a:ed:c4:58:8b:ba:85:a0:3c:d3:3d:fe:eb: 19:c2:13:24:39:6e:c5:f2:18:2f:e9:4c:77:86:84:bb:ff:74: 57:59:b2:ae:41:31:42:5a:dc:72:d6:3a:e1:b5:b5:84:f3:15: 0e:30:b4:2f:85:dc:c4:64:67:cb:d1:47:ce:55:7b:2e:1b:c8: d0:b6:03:eb:3c:e6:b3:41:ba:1c:46:4a:2b:77:01:a5:26:f5: 41:41:4a:10:52:81:25:e3:fd:53:ff:a2:e0:fa:5b:3b:34:6f: 4e:87:d2:4a:c3:cf:61:ec:f1:dd:f9:71:e3:3c:54:bc:6c:45: 9f:fc:56:5a:62:4c:45:45:2f:da:9f:74:a8:77:a7:a5:e3:9b: 3e:88:c4:96:fb:10:7c:4b:d0:c2:ce:9a:a7:fd:4c:33:75:c5: cc:18:6e:b5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrXNYTW7hYQ6oZeK4+hrRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyZDE4YjMxMmUzNTNlNzhmYThlZTVmODBkMzZmNzQxY2Rj ZGUzYWEwHhcNMjUxMjA2MDgwMDQ0WhcNMjUxMjA3MDgwMDQ0WjAzMTEwLwYDVQQD EyhhMGE0NThlMjVlOTMyY2Y0ZmU2Nzk3NjE4MDZmNDI3NjFjMGI0ZGY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw2nKvde3GyzYwOBCx66InUZs511H rRO27kHaJRTWqwiV3aluphTemxaAWmgtivDkjYAkrnG4EvPod33K+SbCAPhBXMoB bPUi3f2YSEmyPx39RB4HRN/dFF4MoI9Y9/MjIGIJb7POEoxLVquxV9bM0fp2UEgL 9RnXHbukqhM7D1UUoSCHw9tw/nXP0QoJyh41eEeH47eJbZ8fjbeRho10KchH0vjp n0PRfDz/s3VFoiFOW2wuhr95O1FmSf5Lnh/KvhqcLRcsC0MvjSH6QaLaFRdv6ITJ XqRmokbUC8f+eoow5LQNeQT5AL9rLp9QG6wWdpVdJ5Nrh+Kjzgfy+j6KLwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKCkWOJekyz0/meXYYBvQnYcC033MB8GA1UdIwQY MBaAFGLRizEuNT54+o7l+A0290HNzeOqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWXRHTE1TNDFQbmo2anVYNERUYjNRYzNONDZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS8zYjkyMTUtOTgwNy00ODFlLTlhMWUt NzMyMjcyMDIzZWMyLzEvWXRHTE1TNDFQbmo2anVYNERUYjNRYzNONDZvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS8zYjkyMTUtOTgwNy00ODFlLTlhMWUtNzMyMjcyMDIzZWMy LzEvWXRHTE1TNDFQbmo2anVYNERUYjNRYzNONDZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZLpUgaEs tpRbbBQn5N+jBkjGV/NMOT5SunIBwQKBme8DfwXpn8+K6sUfSnXADprjG78hLLdQ 2WAmNMRYg9XD6NdFbtpj/3OsBGCEDuPOgo/xy+ZlV3OTw1Zc7dfvoGdK7cRYi7qF oDzTPf7rGcITJDluxfIYL+lMd4aEu/90V1myrkExQlrcctY64bW1hPMVDjC0L4Xc xGRny9FHzlV7LhvI0LYD6zzms0G6HEZKK3cBpSb1QUFKEFKBJeP9U/+i4PpbOzRv TofSSsPPYezx3flx4zxUvGxFn/xWWmJMRUUv2p90qHenpeObPojElvsQfEvQws6a p/1MM3XFzBhutQ== -----END CERTIFICATE-----Generated at Sat Dec 6 15:19:35 2025 by rpki-client