This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/63b6ae-d4f5-4946-bbf5-b133e6e6fa85/1/Ylqfaf4Hl-CDtRYoHKs_C6ZeLqg.mft File: Ylqfaf4Hl-CDtRYoHKs_C6ZeLqg.mft (raw, json) Hash identifier: 5gi7Bd0ZlS2K48uQt8s8AgxmPD1u391KBhkMx8vp964= Subject key identifier: 0E:EE:BF:43:60:7D:6D:7B:5A:3B:AA:B6:CF:4D:4D:F3:BF:0E:47:4C Authority key identifier: 62:5A:9F:69:FE:07:97:E0:83:B5:16:28:1C:AB:3F:0B:A6:5E:2E:A8 Certificate issuer: /CN=625a9f69fe0797e083b516281cab3f0ba65e2ea8 Certificate serial: 019AF23FFA5534EB2C246FF522BBFC10A9F3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ylqfaf4Hl-CDtRYoHKs_C6ZeLqg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/63b6ae-d4f5-4946-bbf5-b133e6e6fa85/1/Ylqfaf4Hl-CDtRYoHKs_C6ZeLqg.mft Manifest number: 16CB Signing time: Sat 06 Dec 2025 06:01:10 +0000 Manifest this update: Sat 06 Dec 2025 06:01:10 +0000 Manifest next update: Sun 07 Dec 2025 06:01:10 +0000 Files and hashes: 1: Ylqfaf4Hl-CDtRYoHKs_C6ZeLqg.crl (hash: cwzy6N+atknLPvqXc414Lo+ff+LIxJT54ufH3nH4yLg=) 2: gFgwOulWz8EdjBx0WPIuskEa2Xo.roa (hash: kmccz6rQP+OANRlJVswlZw+GA51smpUT7A9JAOVNjXI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/63b6ae-d4f5-4946-bbf5-b133e6e6fa85/1/Ylqfaf4Hl-CDtRYoHKs_C6ZeLqg.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/63b6ae-d4f5-4946-bbf5-b133e6e6fa85/1/Ylqfaf4Hl-CDtRYoHKs_C6ZeLqg.mft rsync://rpki.ripe.net/repository/DEFAULT/Ylqfaf4Hl-CDtRYoHKs_C6ZeLqg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:fa:55:34:eb:2c:24:6f:f5:22:bb:fc:10:a9:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=625a9f69fe0797e083b516281cab3f0ba65e2ea8 Validity Not Before: Dec 6 06:01:10 2025 GMT Not After : Dec 7 06:01:10 2025 GMT Subject: CN=0eeebf43607d6d7b5a3baab6cf4d4df3bf0e474c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:e6:7b:1a:72:77:97:75:c3:49:51:62:00:08: 22:5e:99:31:d1:ee:ee:09:e2:b8:8f:42:96:46:31: 8e:02:16:3e:94:37:18:45:31:2e:1b:56:63:89:1a: 21:f1:e9:25:57:98:1e:73:5d:26:29:62:19:3a:95: 63:26:73:f8:9c:40:dc:42:af:f0:22:ab:05:11:a3: 87:25:2d:e5:f5:60:bf:d5:b5:98:26:11:df:97:00: 44:02:97:6e:bf:95:10:c6:2b:18:ba:a7:59:8a:c2: b1:be:13:46:da:f1:ab:4a:26:6d:18:91:18:6c:a5: da:6f:20:46:60:5a:09:f0:d7:35:87:c0:2f:88:7e: 62:5a:18:38:08:00:55:b8:67:2e:53:d7:bb:10:7b: 40:b7:bd:21:6e:30:d4:08:3a:db:b2:15:ea:9e:39: 71:ad:86:3b:ef:17:99:52:86:7a:d4:3a:dc:02:32: b2:83:08:99:14:eb:52:96:27:57:80:08:09:0d:4a: 3f:ca:60:c0:72:d7:18:ea:3a:c5:bf:74:4a:6d:17: 9f:50:d7:cb:5b:8b:8d:9b:61:8b:59:04:7a:63:08: e4:a5:37:38:b0:e1:80:b3:05:fc:01:6c:96:16:ed: be:30:60:ee:55:4a:e4:8f:c7:b8:5f:d2:dd:fc:ae: b6:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:EE:BF:43:60:7D:6D:7B:5A:3B:AA:B6:CF:4D:4D:F3:BF:0E:47:4C X509v3 Authority Key Identifier: keyid:62:5A:9F:69:FE:07:97:E0:83:B5:16:28:1C:AB:3F:0B:A6:5E:2E:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ylqfaf4Hl-CDtRYoHKs_C6ZeLqg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/63b6ae-d4f5-4946-bbf5-b133e6e6fa85/1/Ylqfaf4Hl-CDtRYoHKs_C6ZeLqg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/63b6ae-d4f5-4946-bbf5-b133e6e6fa85/1/Ylqfaf4Hl-CDtRYoHKs_C6ZeLqg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e5:27:01:0d:82:71:11:32:cb:60:6e:64:4b:71:9b:be:65:00: 44:ce:63:ee:c6:fa:b6:9d:21:65:15:5f:0f:59:72:86:f3:9d: dd:79:32:9d:f5:c5:7f:45:26:44:b7:92:1e:d0:46:fd:a1:be: a9:e5:a8:39:41:7d:c3:51:7e:06:a7:cc:a1:10:b5:cf:b0:f6: 69:b3:84:2e:b7:38:4f:80:b5:3d:54:f7:b9:79:df:f8:f2:44: 32:90:18:80:21:11:da:ad:69:67:a8:52:48:0b:96:fa:4a:df: 2b:8d:fa:da:c9:c5:9c:4c:7c:79:8b:19:c4:c6:c1:c7:dd:14: 78:4e:9b:51:04:fe:1f:4a:05:2d:75:9c:c6:4c:96:b5:ac:e8: 69:35:fb:db:98:c5:42:cc:24:f4:92:16:ca:ba:75:ce:4d:d0: e9:f0:86:b1:02:ff:09:9d:a0:e0:1c:c8:43:3d:c8:26:73:6d: 5d:a3:11:5d:e6:b7:57:54:2c:2d:9e:73:0c:39:d1:b5:06:d1: 06:f6:6d:af:1a:29:eb:e0:d7:82:02:5a:7e:8b:89:88:05:e0: 30:81:3f:04:57:2b:e4:ce:c8:86:43:ae:97:e8:fd:30:54:a4: 95:76:08:d5:65:50:0c:8a:3a:4c:e7:79:43:65:70:3d:4a:a9: c4:13:ac:40 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP/pVNOssJG/1Irv8EKnzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyNWE5ZjY5ZmUwNzk3ZTA4M2I1MTYyODFjYWIzZjBiYTY1 ZTJlYTgwHhcNMjUxMjA2MDYwMTEwWhcNMjUxMjA3MDYwMTEwWjAzMTEwLwYDVQQD EygwZWVlYmY0MzYwN2Q2ZDdiNWEzYmFhYjZjZjRkNGRmM2JmMGU0NzRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoeZ7GnJ3l3XDSVFiAAgiXpkx0e7u CeK4j0KWRjGOAhY+lDcYRTEuG1ZjiRoh8eklV5gec10mKWIZOpVjJnP4nEDcQq/w IqsFEaOHJS3l9WC/1bWYJhHflwBEApduv5UQxisYuqdZisKxvhNG2vGrSiZtGJEY bKXabyBGYFoJ8Nc1h8AviH5iWhg4CABVuGcuU9e7EHtAt70hbjDUCDrbshXqnjlx rYY77xeZUoZ61DrcAjKygwiZFOtSlidXgAgJDUo/ymDActcY6jrFv3RKbRefUNfL W4uNm2GLWQR6YwjkpTc4sOGAswX8AWyWFu2+MGDuVUrkj8e4X9Ld/K62GwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA7uv0NgfW17Wjuqts9NTfO/DkdMMB8GA1UdIwQY MBaAFGJan2n+B5fgg7UWKByrPwumXi6oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWWxxZmFmNEhsLUNEdFJZb0hLc19DNlplTHFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC82M2I2YWUtZDRmNS00OTQ2LWJiZjUt YjEzM2U2ZTZmYTg1LzEvWWxxZmFmNEhsLUNEdFJZb0hLc19DNlplTHFnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC82M2I2YWUtZDRmNS00OTQ2LWJiZjUtYjEzM2U2ZTZmYTg1 LzEvWWxxZmFmNEhsLUNEdFJZb0hLc19DNlplTHFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA5ScBDYJx ETLLYG5kS3GbvmUARM5j7sb6tp0hZRVfD1lyhvOd3XkynfXFf0UmRLeSHtBG/aG+ qeWoOUF9w1F+BqfMoRC1z7D2abOELrc4T4C1PVT3uXnf+PJEMpAYgCER2q1pZ6hS SAuW+krfK4362snFnEx8eYsZxMbBx90UeE6bUQT+H0oFLXWcxkyWtazoaTX725jF Qswk9JIWyrp1zk3Q6fCGsQL/CZ2g4BzIQz3IJnNtXaMRXea3V1QsLZ5zDDnRtQbR BvZtrxop6+DXggJafouJiAXgMIE/BFcr5M7IhkOul+j9MFSklXYI1WVQDIo6TOd5 Q2VwPUqpxBOsQA== -----END CERTIFICATE-----Generated at Sat Dec 6 12:25:08 2025 by rpki-client