This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/0186a2-f8aa-41d8-9a4e-8726dd88f529/1/YlDmLARIEp9jWJGKccM0TiWoLZs.mft File: YlDmLARIEp9jWJGKccM0TiWoLZs.mft (raw, json) Hash identifier: PY299G8GIE15TQA1D+96Hq5S62FLK0nPpi7qwlhPZ2Y= Subject key identifier: D2:75:D8:FD:15:B2:90:7B:69:D6:4E:33:7A:CA:27:6B:6E:F6:D6:4D Authority key identifier: 62:50:E6:2C:04:48:12:9F:63:58:91:8A:71:C3:34:4E:25:A8:2D:9B Certificate issuer: /CN=6250e62c0448129f6358918a71c3344e25a82d9b Certificate serial: 019B3E6C4EFFA8BF13F6BC82289F645A5F6B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YlDmLARIEp9jWJGKccM0TiWoLZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/0186a2-f8aa-41d8-9a4e-8726dd88f529/1/YlDmLARIEp9jWJGKccM0TiWoLZs.mft Manifest number: 0136 Signing time: Sun 21 Dec 2025 01:00:44 +0000 Manifest this update: Sun 21 Dec 2025 01:00:44 +0000 Manifest next update: Mon 22 Dec 2025 01:00:44 +0000 Files and hashes: 1: Gof8cYl_-_S4WvBztVMMpN2lO6Y.roa (hash: 6km18MyJ5IHTThvCW2WxtbASJyCxFy1OyHEgHJJtY7Y=) 2: YlDmLARIEp9jWJGKccM0TiWoLZs.crl (hash: wNJscJsoLGHqsadfna/RdD/+EnM9g55h8epqmzMx9lc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/0186a2-f8aa-41d8-9a4e-8726dd88f529/1/YlDmLARIEp9jWJGKccM0TiWoLZs.crl rsync://rpki.ripe.net/repository/DEFAULT/78/0186a2-f8aa-41d8-9a4e-8726dd88f529/1/YlDmLARIEp9jWJGKccM0TiWoLZs.mft rsync://rpki.ripe.net/repository/DEFAULT/YlDmLARIEp9jWJGKccM0TiWoLZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:6c:4e:ff:a8:bf:13:f6:bc:82:28:9f:64:5a:5f:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6250e62c0448129f6358918a71c3344e25a82d9b Validity Not Before: Dec 21 01:00:44 2025 GMT Not After : Dec 22 01:00:44 2025 GMT Subject: CN=d275d8fd15b2907b69d64e337aca276b6ef6d64d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:f1:bc:bf:6c:94:b8:3b:65:2d:35:93:3a:03: 4f:9e:d6:ab:e7:a1:02:70:d4:98:98:18:6c:b6:36: 90:88:e8:ff:76:dc:36:42:53:0f:01:9d:02:b0:41: 93:63:77:77:8e:b4:f7:64:4e:19:4c:04:d5:b1:78: 99:2d:7d:95:3c:7f:e3:c6:a0:c1:c6:60:91:43:7c: 55:83:99:86:a9:a8:2f:11:dc:6c:2b:15:be:6c:6d: 2c:1c:23:29:23:ec:e6:99:fb:fb:50:8a:d5:10:13: 85:78:b9:13:e1:18:7b:60:87:11:fc:81:fb:1d:f2: 48:fb:26:cc:85:40:02:08:96:4c:6f:2f:91:73:e7: 87:58:af:c7:d9:4d:4c:ff:3c:e1:39:f1:88:98:95: d0:fb:3d:85:cd:ab:2c:a7:1e:ce:d9:0c:b7:be:7b: e3:6f:f0:e4:3a:6d:24:b7:14:78:0a:93:e2:7e:3b: 3b:dc:63:a2:c2:37:3b:5f:00:a9:d5:4d:fe:5a:49: 4e:cf:0c:04:76:f2:d8:04:f2:97:af:ad:1e:c6:5a: d5:49:30:3d:47:2c:35:bb:11:de:e1:4f:8d:c6:38: aa:f0:59:82:21:b0:ee:62:e3:b5:41:b7:93:4a:90: 76:32:0d:2b:4a:b7:20:47:79:12:f8:09:50:a0:1b: 89:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:75:D8:FD:15:B2:90:7B:69:D6:4E:33:7A:CA:27:6B:6E:F6:D6:4D X509v3 Authority Key Identifier: keyid:62:50:E6:2C:04:48:12:9F:63:58:91:8A:71:C3:34:4E:25:A8:2D:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YlDmLARIEp9jWJGKccM0TiWoLZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/0186a2-f8aa-41d8-9a4e-8726dd88f529/1/YlDmLARIEp9jWJGKccM0TiWoLZs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/0186a2-f8aa-41d8-9a4e-8726dd88f529/1/YlDmLARIEp9jWJGKccM0TiWoLZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:1f:1d:17:38:43:e2:f5:31:39:df:6a:58:37:02:ef:07:d8: ac:69:59:bc:45:67:e3:4c:d6:83:50:ea:e0:48:b5:0a:7a:57: 7a:84:1d:5b:34:41:03:26:1f:45:83:6d:ea:e0:2c:13:77:59: a5:62:50:7c:45:99:17:39:6f:3a:8c:8d:e4:90:e6:bd:f8:00: 50:d6:18:15:96:58:36:7b:6f:3c:6b:d4:51:a4:ac:fc:4a:e8: f4:d9:b6:ad:84:7b:7c:be:27:07:e2:df:1c:7e:b4:0d:44:bc: 73:7a:61:b3:8a:fd:54:9b:3f:5d:98:72:44:68:8f:d0:87:3d: 2c:32:60:76:dc:87:73:f5:92:b1:40:48:f6:de:e3:d8:98:ad: 94:cd:e0:bc:4b:d7:55:8c:be:75:9c:1c:db:db:45:b1:5e:e3: 9e:e2:40:e2:55:b5:0e:3d:e1:c2:46:1f:f9:0a:2b:48:33:75: 13:d9:20:45:17:fe:a4:a1:aa:b0:96:72:38:94:eb:d1:0c:b0: b9:d5:f5:44:3c:e9:5a:db:29:59:2b:bd:f4:c8:a1:e4:8c:97: a0:77:f4:f3:c3:6c:a3:84:9e:a2:05:c6:dc:9a:36:3b:1c:2c: 8e:2a:d3:b0:7e:c5:9b:a7:48:d0:dd:c9:a5:38:8a:1d:f0:6f: 8b:25:9a:b0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+bE7/qL8T9ryCKJ9kWl9rMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyNTBlNjJjMDQ0ODEyOWY2MzU4OTE4YTcxYzMzNDRlMjVh ODJkOWIwHhcNMjUxMjIxMDEwMDQ0WhcNMjUxMjIyMDEwMDQ0WjAzMTEwLwYDVQQD EyhkMjc1ZDhmZDE1YjI5MDdiNjlkNjRlMzM3YWNhMjc2YjZlZjZkNjRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw/G8v2yUuDtlLTWTOgNPntar56EC cNSYmBhstjaQiOj/dtw2QlMPAZ0CsEGTY3d3jrT3ZE4ZTATVsXiZLX2VPH/jxqDB xmCRQ3xVg5mGqagvEdxsKxW+bG0sHCMpI+zmmfv7UIrVEBOFeLkT4Rh7YIcR/IH7 HfJI+ybMhUACCJZMby+Rc+eHWK/H2U1M/zzhOfGImJXQ+z2Fzasspx7O2Qy3vnvj b/DkOm0ktxR4CpPifjs73GOiwjc7XwCp1U3+WklOzwwEdvLYBPKXr60exlrVSTA9 Ryw1uxHe4U+Nxjiq8FmCIbDuYuO1QbeTSpB2Mg0rSrcgR3kS+AlQoBuJ5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNJ12P0VspB7adZOM3rKJ2tu9tZNMB8GA1UdIwQY MBaAFGJQ5iwESBKfY1iRinHDNE4lqC2bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWWxEbUxBUklFcDlqV0pHS2NjTTBUaVdvTFpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC8wMTg2YTItZjhhYS00MWQ4LTlhNGUt ODcyNmRkODhmNTI5LzEvWWxEbUxBUklFcDlqV0pHS2NjTTBUaVdvTFpzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OC8wMTg2YTItZjhhYS00MWQ4LTlhNGUtODcyNmRkODhmNTI5 LzEvWWxEbUxBUklFcDlqV0pHS2NjTTBUaVdvTFpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEB8dFzhD 4vUxOd9qWDcC7wfYrGlZvEVn40zWg1Dq4Ei1CnpXeoQdWzRBAyYfRYNt6uAsE3dZ pWJQfEWZFzlvOoyN5JDmvfgAUNYYFZZYNntvPGvUUaSs/Ero9Nm2rYR7fL4nB+Lf HH60DUS8c3phs4r9VJs/XZhyRGiP0Ic9LDJgdtyHc/WSsUBI9t7j2JitlM3gvEvX VYy+dZwc29tFsV7jnuJA4lW1Dj3hwkYf+QorSDN1E9kgRRf+pKGqsJZyOJTr0Qyw udX1RDzpWtspWSu99Mih5IyXoHf088Nso4SeogXG3Jo2OxwsjirTsH7Fm6dI0N3J pTiKHfBviyWasA== -----END CERTIFICATE-----Generated at Sun Dec 21 08:58:37 2025 by rpki-client