This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/3b9215-9807-481e-9a1e-732272023ec2/1/YtGLMS41Pnj6juX4DTb3Qc3N46o.mft File: YtGLMS41Pnj6juX4DTb3Qc3N46o.mft (raw, json) Hash identifier: DAn9oslxuZRG46qs148b5QjYU/NrYFM4xlIfBh+K/GM= Subject key identifier: 22:AE:BA:FE:4A:77:F6:63:4F:EF:4B:D3:AD:63:FE:77:FA:5E:28:5C Authority key identifier: 62:D1:8B:31:2E:35:3E:78:FA:8E:E5:F8:0D:36:F7:41:CD:CD:E3:AA Certificate issuer: /CN=62d18b312e353e78fa8ee5f80d36f741cdcde3aa Certificate serial: 019B3DFE79FD2D1117732E1870E3B1053CC0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YtGLMS41Pnj6juX4DTb3Qc3N46o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/3b9215-9807-481e-9a1e-732272023ec2/1/YtGLMS41Pnj6juX4DTb3Qc3N46o.mft Manifest number: 122D Signing time: Sat 20 Dec 2025 23:00:46 +0000 Manifest this update: Sat 20 Dec 2025 23:00:46 +0000 Manifest next update: Sun 21 Dec 2025 23:00:46 +0000 Files and hashes: 1: YtGLMS41Pnj6juX4DTb3Qc3N46o.crl (hash: djUclv9uEnDHc9FARBNm7KuXt8EMG7qrq6uhw/ECKVM=) 2: _Zz1Cu9GIz20qsemRnTOxpptbFA.roa (hash: Nq/fM/hd3jyGxJ/ud7QdLP64eh6OFLHRS+jqgC+mzSI=) 3: i2IsJ0_IABmEW_nqATqO3eXE_yA.roa (hash: NG0njCUXWjhkgeU+Tlptt1T4nDTRU6KlU6CCdc6Agjg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/3b9215-9807-481e-9a1e-732272023ec2/1/YtGLMS41Pnj6juX4DTb3Qc3N46o.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/3b9215-9807-481e-9a1e-732272023ec2/1/YtGLMS41Pnj6juX4DTb3Qc3N46o.mft rsync://rpki.ripe.net/repository/DEFAULT/YtGLMS41Pnj6juX4DTb3Qc3N46o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:fe:79:fd:2d:11:17:73:2e:18:70:e3:b1:05:3c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=62d18b312e353e78fa8ee5f80d36f741cdcde3aa Validity Not Before: Dec 20 23:00:46 2025 GMT Not After : Dec 21 23:00:46 2025 GMT Subject: CN=22aebafe4a77f6634fef4bd3ad63fe77fa5e285c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:c5:e2:41:fe:c1:c8:29:95:ba:4f:2c:02:a2: 5c:df:98:98:66:6d:b1:b2:4b:3f:a1:8e:f7:5c:1e: 17:1e:39:26:0c:89:8e:d0:66:e7:0f:e5:69:1d:77: 17:f6:ba:4c:e0:86:ba:29:5a:ab:c6:39:3c:d1:c1: 69:4b:3f:40:57:98:5e:39:a9:70:08:f7:b6:9d:e3: be:5d:0c:bf:36:94:c6:97:94:98:ff:82:c9:bb:d7: af:92:b1:32:94:f5:4f:f3:22:24:9e:34:d6:67:f2: 43:09:f5:0c:1b:d2:20:e2:90:14:e2:b2:6d:91:9d: 6f:23:e1:85:ff:f3:4a:a4:d4:ba:6b:02:eb:41:47: 20:0e:d3:6b:ee:03:0f:52:fb:b8:69:e5:97:6c:dd: 57:ef:ca:87:7a:6e:0e:15:31:7f:af:b3:f8:2a:f2: 55:5b:90:bb:30:23:0e:b1:16:3b:1c:52:e4:fa:db: f2:75:bb:d8:4b:7f:ba:4f:21:bf:3c:20:bb:be:2c: 16:51:14:13:17:c5:36:1e:a4:d4:d8:08:93:97:47: cc:32:d1:67:5d:9b:82:6f:c5:12:64:0a:88:e2:4c: f6:f4:76:44:2a:62:9f:de:d8:fb:31:f7:76:a2:39: 8e:a6:5a:c9:16:7e:a4:ba:4e:67:f5:d6:a5:b6:8e: b1:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:AE:BA:FE:4A:77:F6:63:4F:EF:4B:D3:AD:63:FE:77:FA:5E:28:5C X509v3 Authority Key Identifier: keyid:62:D1:8B:31:2E:35:3E:78:FA:8E:E5:F8:0D:36:F7:41:CD:CD:E3:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YtGLMS41Pnj6juX4DTb3Qc3N46o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/3b9215-9807-481e-9a1e-732272023ec2/1/YtGLMS41Pnj6juX4DTb3Qc3N46o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/3b9215-9807-481e-9a1e-732272023ec2/1/YtGLMS41Pnj6juX4DTb3Qc3N46o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:57:61:e4:a6:7b:eb:7d:d0:79:5f:38:d0:5b:7b:df:96:11: 3b:fc:22:61:59:71:e3:f7:eb:74:d2:2c:76:4a:7a:d8:0d:f6: 23:f9:ba:68:8b:ae:08:4b:5c:5c:08:63:a2:a5:26:b5:06:9f: 37:31:5e:66:57:af:90:b8:6e:7e:2a:78:9f:77:9d:50:89:0f: 1a:34:55:2a:7c:b7:ba:74:e4:0b:5b:19:42:d0:26:49:88:80: 05:30:77:78:08:73:3e:2b:ee:73:7e:e7:c4:cc:5d:10:1b:3c: 21:22:d0:79:c4:53:a7:f0:1c:e4:e1:13:3e:ba:2c:ee:f4:e2: ba:10:26:55:1c:30:6e:1e:cd:cb:f5:8b:ad:dd:fe:1f:a8:f8: 74:20:0e:eb:a6:18:f6:a6:b5:6a:bd:c8:61:1a:15:86:93:a9: 9a:36:88:63:07:42:35:48:a9:be:b8:16:c8:ac:a6:0f:19:9e: c1:aa:61:44:0a:9a:5e:bd:53:f6:56:2b:20:6a:9f:cd:5a:8d: 0c:5c:4d:1e:62:f1:29:12:6a:e2:ed:4c:b5:1c:8c:57:90:57: 5d:4e:7a:6e:96:93:aa:c0:1f:20:81:01:54:81:4e:d5:15:72: b2:3e:72:81:85:58:33:4a:5c:9b:50:69:fb:1c:ca:4b:87:cf: c0:87:6b:17 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9/nn9LREXcy4YcOOxBTzAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyZDE4YjMxMmUzNTNlNzhmYThlZTVmODBkMzZmNzQxY2Rj ZGUzYWEwHhcNMjUxMjIwMjMwMDQ2WhcNMjUxMjIxMjMwMDQ2WjAzMTEwLwYDVQQD EygyMmFlYmFmZTRhNzdmNjYzNGZlZjRiZDNhZDYzZmU3N2ZhNWUyODVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3MXiQf7ByCmVuk8sAqJc35iYZm2x sks/oY73XB4XHjkmDImO0GbnD+VpHXcX9rpM4Ia6KVqrxjk80cFpSz9AV5heOalw CPe2neO+XQy/NpTGl5SY/4LJu9evkrEylPVP8yIknjTWZ/JDCfUMG9Ig4pAU4rJt kZ1vI+GF//NKpNS6awLrQUcgDtNr7gMPUvu4aeWXbN1X78qHem4OFTF/r7P4KvJV W5C7MCMOsRY7HFLk+tvydbvYS3+6TyG/PCC7viwWURQTF8U2HqTU2AiTl0fMMtFn XZuCb8USZAqI4kz29HZEKmKf3tj7Mfd2ojmOplrJFn6kuk5n9dalto6xawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCKuuv5Kd/ZjT+9L061j/nf6XihcMB8GA1UdIwQY MBaAFGLRizEuNT54+o7l+A0290HNzeOqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWXRHTE1TNDFQbmo2anVYNERUYjNRYzNONDZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS8zYjkyMTUtOTgwNy00ODFlLTlhMWUt NzMyMjcyMDIzZWMyLzEvWXRHTE1TNDFQbmo2anVYNERUYjNRYzNONDZvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS8zYjkyMTUtOTgwNy00ODFlLTlhMWUtNzMyMjcyMDIzZWMy LzEvWXRHTE1TNDFQbmo2anVYNERUYjNRYzNONDZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXVdh5KZ7 633QeV840Ft735YRO/wiYVlx4/frdNIsdkp62A32I/m6aIuuCEtcXAhjoqUmtQaf NzFeZlevkLhufip4n3edUIkPGjRVKny3unTkC1sZQtAmSYiABTB3eAhzPivuc37n xMxdEBs8ISLQecRTp/Ac5OETPros7vTiuhAmVRwwbh7Ny/WLrd3+H6j4dCAO66YY 9qa1ar3IYRoVhpOpmjaIYwdCNUipvrgWyKymDxmewaphRAqaXr1T9lYrIGqfzVqN DFxNHmLxKRJq4u1MtRyMV5BXXU56bpaTqsAfIIEBVIFO1RVysj5ygYVYM0pcm1Bp +xzKS4fPwIdrFw== -----END CERTIFICATE-----Generated at Sun Dec 21 01:41:19 2025 by rpki-client