This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/3b9215-9807-481e-9a1e-732272023ec2/1/YtGLMS41Pnj6juX4DTb3Qc3N46o.mft File: YtGLMS41Pnj6juX4DTb3Qc3N46o.mft (raw, json) Hash identifier: i3vjJsGRQxqBzNmT+RFx2vTdzhZ4JttsFfPy/S0OV+8= Subject key identifier: 81:48:F3:98:49:7D:1C:C2:59:00:BE:76:3A:04:C4:0E:2A:52:59:A6 Authority key identifier: 62:D1:8B:31:2E:35:3E:78:FA:8E:E5:F8:0D:36:F7:41:CD:CD:E3:AA Certificate issuer: /CN=62d18b312e353e78fa8ee5f80d36f741cdcde3aa Certificate serial: 019B345695475CC6FC27D3C62154DD0EA153 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YtGLMS41Pnj6juX4DTb3Qc3N46o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/3b9215-9807-481e-9a1e-732272023ec2/1/YtGLMS41Pnj6juX4DTb3Qc3N46o.mft Manifest number: 1228 Signing time: Fri 19 Dec 2025 02:00:48 +0000 Manifest this update: Fri 19 Dec 2025 02:00:48 +0000 Manifest next update: Sat 20 Dec 2025 02:00:48 +0000 Files and hashes: 1: YtGLMS41Pnj6juX4DTb3Qc3N46o.crl (hash: ecQYuuK8ErM82hPUDdbcSWIufzaWwjMcL328KQc+wOU=) 2: _Zz1Cu9GIz20qsemRnTOxpptbFA.roa (hash: Nq/fM/hd3jyGxJ/ud7QdLP64eh6OFLHRS+jqgC+mzSI=) 3: i2IsJ0_IABmEW_nqATqO3eXE_yA.roa (hash: NG0njCUXWjhkgeU+Tlptt1T4nDTRU6KlU6CCdc6Agjg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/3b9215-9807-481e-9a1e-732272023ec2/1/YtGLMS41Pnj6juX4DTb3Qc3N46o.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/3b9215-9807-481e-9a1e-732272023ec2/1/YtGLMS41Pnj6juX4DTb3Qc3N46o.mft rsync://rpki.ripe.net/repository/DEFAULT/YtGLMS41Pnj6juX4DTb3Qc3N46o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 01:23:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:56:95:47:5c:c6:fc:27:d3:c6:21:54:dd:0e:a1:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=62d18b312e353e78fa8ee5f80d36f741cdcde3aa Validity Not Before: Dec 19 02:00:48 2025 GMT Not After : Dec 20 02:00:48 2025 GMT Subject: CN=8148f398497d1cc25900be763a04c40e2a5259a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:85:28:cf:da:d6:37:f2:db:50:d9:d5:0a:7b: 27:48:6b:4f:cf:85:ac:9c:4a:a0:e9:24:45:bb:31: 5f:44:12:d0:cd:b0:6b:82:90:3e:d5:a3:29:7d:16: e6:e9:e9:cd:b1:44:66:7b:8c:b0:07:aa:28:fb:6e: f5:bc:93:5a:1c:1a:83:73:d8:a1:e0:5e:75:fe:be: 12:97:87:e9:c0:de:05:37:72:30:56:65:49:b6:95: f9:86:0b:d3:e6:6c:25:29:f9:3e:db:4e:7d:dc:e4: 69:da:b1:91:0b:49:09:49:c8:38:6b:f1:0f:7a:af: d9:d2:16:f4:8f:d3:e1:ac:a4:70:a0:eb:82:3c:2c: db:38:91:6a:5b:58:c5:d0:d3:48:64:7d:96:18:1c: 0c:2d:16:6f:50:92:15:90:f4:b8:7c:14:7a:97:ff: d7:6d:78:fb:23:a0:c6:9a:74:39:a1:88:27:8b:49: c6:b5:02:3a:91:3b:ea:b8:45:3a:83:87:df:46:1b: ff:ca:db:42:7c:b4:71:6b:4f:36:77:11:92:19:24: c6:bf:59:39:bf:e5:1f:61:26:bb:68:87:cd:5c:d4: f2:6c:0c:41:ce:89:91:3f:f8:af:f2:15:a6:e1:8b: 81:2f:b2:77:ec:65:a3:bb:9d:9a:01:65:fc:1b:d2: 1f:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:48:F3:98:49:7D:1C:C2:59:00:BE:76:3A:04:C4:0E:2A:52:59:A6 X509v3 Authority Key Identifier: keyid:62:D1:8B:31:2E:35:3E:78:FA:8E:E5:F8:0D:36:F7:41:CD:CD:E3:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YtGLMS41Pnj6juX4DTb3Qc3N46o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/3b9215-9807-481e-9a1e-732272023ec2/1/YtGLMS41Pnj6juX4DTb3Qc3N46o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/3b9215-9807-481e-9a1e-732272023ec2/1/YtGLMS41Pnj6juX4DTb3Qc3N46o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:3f:53:58:3b:dd:30:06:00:d6:a7:c4:e0:be:1e:d8:ae:2f: dc:2c:b3:29:b6:67:c4:16:69:1e:62:87:c2:63:69:f8:cf:d3: 26:a6:c9:b2:45:9e:58:63:41:1e:77:04:65:9d:db:34:96:3d: ac:53:c0:c4:a5:17:5c:d5:d7:06:4f:83:09:02:42:d4:74:2a: 70:27:a4:45:9b:f4:77:5f:8e:ad:25:a9:1f:2c:72:cc:6b:f6: 10:37:15:5e:85:d1:2a:ac:d6:40:1e:c2:aa:ca:5f:b5:19:15: d7:84:5d:f4:73:36:b5:a5:d3:47:6a:c8:00:87:9a:5a:e4:1a: 03:41:b2:84:41:d1:53:8d:08:7f:3a:4b:fb:dd:bb:34:79:48: d2:54:d0:2d:7f:a2:9c:09:c2:27:1c:cb:aa:d4:30:10:0e:89: ca:38:d2:79:70:01:8d:a5:34:5f:1b:8d:bc:70:5d:d4:55:ef: f7:dc:f2:88:f4:45:fc:c7:66:ab:aa:14:c6:68:09:44:85:68: c7:b0:47:b6:8a:11:29:bd:4c:8d:64:6c:72:ca:51:8f:40:e1: 2e:8c:53:a6:60:da:c9:33:c5:89:01:74:97:49:b5:a9:1b:6f: a3:fc:47:79:27:6e:25:c8:52:3a:fc:b0:7b:42:fd:66:fe:67: 6e:7f:c6:98 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0VpVHXMb8J9PGIVTdDqFTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyZDE4YjMxMmUzNTNlNzhmYThlZTVmODBkMzZmNzQxY2Rj ZGUzYWEwHhcNMjUxMjE5MDIwMDQ4WhcNMjUxMjIwMDIwMDQ4WjAzMTEwLwYDVQQD Eyg4MTQ4ZjM5ODQ5N2QxY2MyNTkwMGJlNzYzYTA0YzQwZTJhNTI1OWE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoYUoz9rWN/LbUNnVCnsnSGtPz4Ws nEqg6SRFuzFfRBLQzbBrgpA+1aMpfRbm6enNsURme4ywB6oo+271vJNaHBqDc9ih 4F51/r4Sl4fpwN4FN3IwVmVJtpX5hgvT5mwlKfk+20593ORp2rGRC0kJScg4a/EP eq/Z0hb0j9PhrKRwoOuCPCzbOJFqW1jF0NNIZH2WGBwMLRZvUJIVkPS4fBR6l//X bXj7I6DGmnQ5oYgni0nGtQI6kTvquEU6g4ffRhv/yttCfLRxa082dxGSGSTGv1k5 v+UfYSa7aIfNXNTybAxBzomRP/iv8hWm4YuBL7J37GWju52aAWX8G9If1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIFI85hJfRzCWQC+djoExA4qUlmmMB8GA1UdIwQY MBaAFGLRizEuNT54+o7l+A0290HNzeOqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWXRHTE1TNDFQbmo2anVYNERUYjNRYzNONDZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS8zYjkyMTUtOTgwNy00ODFlLTlhMWUt NzMyMjcyMDIzZWMyLzEvWXRHTE1TNDFQbmo2anVYNERUYjNRYzNONDZvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS8zYjkyMTUtOTgwNy00ODFlLTlhMWUtNzMyMjcyMDIzZWMy LzEvWXRHTE1TNDFQbmo2anVYNERUYjNRYzNONDZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXz9TWDvd MAYA1qfE4L4e2K4v3CyzKbZnxBZpHmKHwmNp+M/TJqbJskWeWGNBHncEZZ3bNJY9 rFPAxKUXXNXXBk+DCQJC1HQqcCekRZv0d1+OrSWpHyxyzGv2EDcVXoXRKqzWQB7C qspftRkV14Rd9HM2taXTR2rIAIeaWuQaA0GyhEHRU40IfzpL+927NHlI0lTQLX+i nAnCJxzLqtQwEA6JyjjSeXABjaU0XxuNvHBd1FXv99zyiPRF/Mdmq6oUxmgJRIVo x7BHtooRKb1MjWRscspRj0DhLoxTpmDayTPFiQF0l0m1qRtvo/xHeSduJchSOvyw e0L9Zv5nbn/GmA== -----END CERTIFICATE-----Generated at Fri Dec 19 08:52:59 2025 by rpki-client