This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/1cecb8-97d9-473f-b004-cc912746e47e/1/ylmb3Bz8eujML7oV_NgMoRc3hGc.mft File: ylmb3Bz8eujML7oV_NgMoRc3hGc.mft (raw, json) Hash identifier: y9n5Zz/ochSIHrFtsVX/GKRB2p1FcoNwXy/mRtqnKR8= Subject key identifier: 86:BB:DE:35:DB:19:4E:99:D6:58:0C:3B:85:CE:1C:61:43:EF:E9:B4 Authority key identifier: CA:59:9B:DC:1C:FC:7A:E8:CC:2F:BA:15:FC:D8:0C:A1:17:37:84:67 Certificate issuer: /CN=ca599bdc1cfc7ae8cc2fba15fcd80ca117378467 Certificate serial: 019AF2AD9726CFC17017B9F386A39D458FE8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ylmb3Bz8eujML7oV_NgMoRc3hGc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/1cecb8-97d9-473f-b004-cc912746e47e/1/ylmb3Bz8eujML7oV_NgMoRc3hGc.mft Manifest number: 0379 Signing time: Sat 06 Dec 2025 08:00:53 +0000 Manifest this update: Sat 06 Dec 2025 08:00:53 +0000 Manifest next update: Sun 07 Dec 2025 08:00:53 +0000 Files and hashes: 1: ylmb3Bz8eujML7oV_NgMoRc3hGc.crl (hash: m9AzThQlR/eS6nm/a9n9ihWQkIjQxH5ZsM9vWDHmgKg=) 2: zIZvUw6LEttnk9GqCkFL8S-ncbM.roa (hash: g5dRThI/Wu6nM24igsF8Y2hQEgVjjdxUN3aRLJWGc3E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/1cecb8-97d9-473f-b004-cc912746e47e/1/ylmb3Bz8eujML7oV_NgMoRc3hGc.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/1cecb8-97d9-473f-b004-cc912746e47e/1/ylmb3Bz8eujML7oV_NgMoRc3hGc.mft rsync://rpki.ripe.net/repository/DEFAULT/ylmb3Bz8eujML7oV_NgMoRc3hGc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:97:26:cf:c1:70:17:b9:f3:86:a3:9d:45:8f:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ca599bdc1cfc7ae8cc2fba15fcd80ca117378467 Validity Not Before: Dec 6 08:00:53 2025 GMT Not After : Dec 7 08:00:53 2025 GMT Subject: CN=86bbde35db194e99d6580c3b85ce1c6143efe9b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:15:35:22:60:49:a6:dc:2a:97:8d:47:a6:35: 35:a9:f8:f5:9f:c5:ac:dd:4e:e7:ce:34:f4:d4:0a: aa:c5:c6:fb:af:f1:da:c3:fc:d7:e1:57:d6:0b:f5: 33:a4:6a:f2:f7:fd:1b:64:ad:0f:21:a9:3c:3e:75: be:96:4f:c1:ce:00:a8:6e:99:6c:39:75:c6:e1:2a: d6:19:6b:53:7c:3e:a6:eb:de:a3:6a:82:d7:10:09: 4c:22:75:ca:8e:f0:f6:94:67:52:7b:7c:e2:7a:17: fb:c1:0d:7f:4b:5d:03:9b:b8:a2:0a:82:35:ea:b5: f7:9e:a8:57:08:2e:fe:5e:c7:75:6f:70:b3:f5:ab: 9a:6e:4d:22:1c:d2:26:af:f0:52:8a:2c:20:bb:b1: 67:7e:2e:6a:69:d6:96:dd:d4:3f:d3:c7:6d:26:fb: 90:c1:a0:c6:6a:b5:49:15:bd:8c:dc:5b:38:1e:0a: 46:2e:5a:e3:aa:3c:d1:23:44:f2:29:f3:b4:7c:51: 6a:0a:82:b7:41:c3:57:a5:78:16:55:04:9e:61:91: 19:ed:35:65:13:c2:8c:d8:57:6e:7d:f3:ff:52:8b: 08:10:23:b4:69:b9:d5:c5:82:a3:79:13:a6:2b:80: 1d:ba:0e:82:65:4f:08:8f:35:53:41:24:9c:c3:a2: 64:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:BB:DE:35:DB:19:4E:99:D6:58:0C:3B:85:CE:1C:61:43:EF:E9:B4 X509v3 Authority Key Identifier: keyid:CA:59:9B:DC:1C:FC:7A:E8:CC:2F:BA:15:FC:D8:0C:A1:17:37:84:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ylmb3Bz8eujML7oV_NgMoRc3hGc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/1cecb8-97d9-473f-b004-cc912746e47e/1/ylmb3Bz8eujML7oV_NgMoRc3hGc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/1cecb8-97d9-473f-b004-cc912746e47e/1/ylmb3Bz8eujML7oV_NgMoRc3hGc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:70:08:51:8b:f8:2b:a0:92:80:56:13:fa:ef:62:8f:1e:fc: c1:63:cc:18:28:d7:da:f4:4f:94:d4:4f:6d:cc:37:85:83:c8: 67:3f:ce:a6:ee:5a:11:c5:02:aa:f9:50:f9:9a:7e:6a:cc:8c: 1d:22:0b:6b:76:04:53:1a:17:00:21:f6:ab:44:b0:cb:55:f6: 32:ea:0f:21:5d:b9:89:88:8f:ab:4e:11:b6:d0:cf:f8:c9:76: 9f:f9:9b:f6:7b:2a:53:0f:8f:1d:a9:be:bb:5a:e7:12:06:18: 8e:97:e1:55:39:0a:11:6e:20:fe:39:bd:02:36:2e:d1:06:55: ca:e5:93:dd:e1:19:7b:9a:83:7a:fa:14:7f:74:f6:fd:77:c0: 4e:91:64:e7:da:91:e3:82:4c:e2:03:4a:fc:3b:6d:0c:1d:4c: 77:6e:25:69:36:3d:78:04:fc:1d:06:4a:07:a0:33:55:20:d6: 97:c3:b7:a7:ce:87:2f:7d:23:82:9e:24:72:a4:a8:cf:8d:86: 03:20:2a:04:eb:14:e7:2e:51:34:20:4d:01:72:78:d2:e3:7d: 99:af:0c:a9:8b:27:83:73:56:8e:06:bb:6c:48:10:df:68:b3: d3:1e:0f:49:6a:fb:02:dc:8f:17:cd:2d:bd:09:62:ec:71:d0: ca:87:62:51 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrZcmz8FwF7nzhqOdRY/oMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNhNTk5YmRjMWNmYzdhZThjYzJmYmExNWZjZDgwY2ExMTcz Nzg0NjcwHhcNMjUxMjA2MDgwMDUzWhcNMjUxMjA3MDgwMDUzWjAzMTEwLwYDVQQD Eyg4NmJiZGUzNWRiMTk0ZTk5ZDY1ODBjM2I4NWNlMWM2MTQzZWZlOWI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmRU1ImBJptwql41HpjU1qfj1n8Ws 3U7nzjT01Aqqxcb7r/Haw/zX4VfWC/UzpGry9/0bZK0PIak8PnW+lk/BzgCobpls OXXG4SrWGWtTfD6m696jaoLXEAlMInXKjvD2lGdSe3ziehf7wQ1/S10Dm7iiCoI1 6rX3nqhXCC7+Xsd1b3Cz9auabk0iHNImr/BSiiwgu7Fnfi5qadaW3dQ/08dtJvuQ waDGarVJFb2M3Fs4HgpGLlrjqjzRI0TyKfO0fFFqCoK3QcNXpXgWVQSeYZEZ7TVl E8KM2FduffP/UosIECO0abnVxYKjeROmK4Adug6CZU8IjzVTQSScw6JkMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIa73jXbGU6Z1lgMO4XOHGFD7+m0MB8GA1UdIwQY MBaAFMpZm9wc/HrozC+6FfzYDKEXN4RnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWxtYjNCejhldWpNTDdvVl9OZ01vUmMzaEdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi8xY2VjYjgtOTdkOS00NzNmLWIwMDQt Y2M5MTI3NDZlNDdlLzEveWxtYjNCejhldWpNTDdvVl9OZ01vUmMzaEdjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi8xY2VjYjgtOTdkOS00NzNmLWIwMDQtY2M5MTI3NDZlNDdl LzEveWxtYjNCejhldWpNTDdvVl9OZ01vUmMzaEdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApXAIUYv4 K6CSgFYT+u9ijx78wWPMGCjX2vRPlNRPbcw3hYPIZz/Opu5aEcUCqvlQ+Zp+asyM HSILa3YEUxoXACH2q0Swy1X2MuoPIV25iYiPq04RttDP+Ml2n/mb9nsqUw+PHam+ u1rnEgYYjpfhVTkKEW4g/jm9AjYu0QZVyuWT3eEZe5qDevoUf3T2/XfATpFk59qR 44JM4gNK/DttDB1Md24laTY9eAT8HQZKB6AzVSDWl8O3p86HL30jgp4kcqSoz42G AyAqBOsU5y5RNCBNAXJ40uN9ma8MqYsng3NWjga7bEgQ32iz0x4PSWr7AtyPF80t vQli7HHQyodiUQ== -----END CERTIFICATE-----Generated at Sat Dec 6 12:08:16 2025 by rpki-client