This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/772323-1cde-4b21-a839-4a167b159c88/1/YOLI9184WstLlKaNiZNRujR6MyM.mft File: YOLI9184WstLlKaNiZNRujR6MyM.mft (raw, json) Hash identifier: Fs1SEdnj8vb/xCyH3buxtMG4nWAG+jstTbFUA2rWi7o= Subject key identifier: 3D:6D:F4:43:D5:74:59:53:66:8F:7D:D2:C4:D3:FC:2D:8B:DB:8B:5B Authority key identifier: 60:E2:C8:F7:5F:38:5A:CB:4B:94:A6:8D:89:93:51:BA:34:7A:33:23 Certificate issuer: /CN=60e2c8f75f385acb4b94a68d899351ba347a3323 Certificate serial: 019B53AA75B86AE95940C908BE6BA8CE3277 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YOLI9184WstLlKaNiZNRujR6MyM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/772323-1cde-4b21-a839-4a167b159c88/1/YOLI9184WstLlKaNiZNRujR6MyM.mft Manifest number: 16A3 Signing time: Thu 25 Dec 2025 04:00:38 +0000 Manifest this update: Thu 25 Dec 2025 04:00:38 +0000 Manifest next update: Fri 26 Dec 2025 04:00:38 +0000 Files and hashes: 1: YOLI9184WstLlKaNiZNRujR6MyM.crl (hash: OGVsi5fzUBvreatK6Nj7wN80M8jwU3nJGy7kiooja9Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/772323-1cde-4b21-a839-4a167b159c88/1/YOLI9184WstLlKaNiZNRujR6MyM.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/772323-1cde-4b21-a839-4a167b159c88/1/YOLI9184WstLlKaNiZNRujR6MyM.mft rsync://rpki.ripe.net/repository/DEFAULT/YOLI9184WstLlKaNiZNRujR6MyM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 03:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:53:aa:75:b8:6a:e9:59:40:c9:08:be:6b:a8:ce:32:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60e2c8f75f385acb4b94a68d899351ba347a3323 Validity Not Before: Dec 25 04:00:38 2025 GMT Not After : Dec 26 04:00:38 2025 GMT Subject: CN=3d6df443d5745953668f7dd2c4d3fc2d8bdb8b5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:47:c3:e3:b8:56:64:96:e6:e6:d2:f2:cf:cd: 91:66:cd:7a:95:a2:ed:3d:8b:6c:d3:7a:02:ad:78: 4c:77:4a:97:c7:2b:1d:6d:ea:dd:7d:e4:44:03:14: 54:62:59:02:9b:9d:dd:2c:ea:a1:3c:41:25:31:4e: af:47:f1:f9:21:50:f1:29:62:cd:83:b8:bf:a3:60: 06:ab:db:63:72:53:f1:ef:4d:a0:a6:a5:70:03:8c: cd:cb:0d:32:69:f2:64:01:ff:ed:8b:e5:93:45:88: 96:69:ab:81:d0:36:bd:a7:da:f4:b9:ea:08:a9:91: 3d:39:8a:72:a7:d5:60:d2:96:88:0a:57:d6:f1:0c: 66:8c:b6:72:d8:f2:04:32:29:41:7f:fe:c6:ab:a7: 21:5e:cc:ae:86:4a:59:4e:fb:7d:e6:ad:a7:4f:6a: 43:d9:0e:0e:58:e6:d5:d3:7a:90:44:9d:41:10:61: ce:64:7d:7f:b8:50:1a:43:3e:5f:a6:d8:92:3e:a6: 93:37:70:c4:b1:ba:d7:f3:d3:17:e6:b2:8a:60:c2: b7:5b:59:c9:bf:e9:e2:3b:f0:99:ef:49:55:60:2e: d2:b2:c5:b0:7e:23:46:98:f8:1f:93:38:a4:c4:3a: 23:47:7d:7b:d6:0e:e3:02:9f:f4:4b:eb:f8:c8:03: 86:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:6D:F4:43:D5:74:59:53:66:8F:7D:D2:C4:D3:FC:2D:8B:DB:8B:5B X509v3 Authority Key Identifier: keyid:60:E2:C8:F7:5F:38:5A:CB:4B:94:A6:8D:89:93:51:BA:34:7A:33:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YOLI9184WstLlKaNiZNRujR6MyM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/772323-1cde-4b21-a839-4a167b159c88/1/YOLI9184WstLlKaNiZNRujR6MyM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/772323-1cde-4b21-a839-4a167b159c88/1/YOLI9184WstLlKaNiZNRujR6MyM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:41:00:db:35:2c:d5:09:b3:52:dd:19:84:68:a8:01:38:6f: aa:43:85:ec:fc:90:f8:98:e9:a8:ea:b2:d2:cb:8c:0d:7b:de: 03:f2:f2:60:2d:5e:b3:42:23:85:38:a2:ec:80:3c:7f:b9:2e: 2c:98:36:e3:fd:a5:3e:37:e6:6d:04:78:d1:b1:f4:96:8d:a8: 50:6f:fc:b6:b5:5c:ed:35:bb:cc:1c:b8:de:14:0b:4a:af:19: 92:71:0a:f5:45:60:23:b6:a4:ad:db:a5:4d:c9:a0:cf:90:3f: 86:5b:4e:4c:27:7e:db:f7:e8:c1:82:d9:06:c7:50:d4:27:e7: 28:20:45:0a:45:3a:30:a7:2b:fa:a5:20:55:d7:9e:a5:9f:e5: 6e:19:31:a9:89:bc:1a:bd:44:e5:0c:d6:48:05:0b:61:92:22: c3:78:2e:0a:dc:89:20:11:61:45:b6:9c:68:17:0e:5c:7e:fd: 57:4f:31:71:8e:84:85:21:f7:b5:95:e6:7d:4c:0c:b4:c0:62: b5:65:dc:53:e7:7d:ac:86:8a:fd:2b:8b:af:de:d3:9e:95:62: cc:41:f1:ed:04:31:d3:c9:82:64:82:ea:1e:ce:b9:56:42:67: 9b:44:e5:1a:a5:9e:b3:20:01:bd:dd:11:1f:4d:5c:b1:34:64: e8:10:c1:82 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtTqnW4aulZQMkIvmuozjJ3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwZTJjOGY3NWYzODVhY2I0Yjk0YTY4ZDg5OTM1MWJhMzQ3 YTMzMjMwHhcNMjUxMjI1MDQwMDM4WhcNMjUxMjI2MDQwMDM4WjAzMTEwLwYDVQQD EygzZDZkZjQ0M2Q1NzQ1OTUzNjY4ZjdkZDJjNGQzZmMyZDhiZGI4YjViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy0fD47hWZJbm5tLyz82RZs16laLt PYts03oCrXhMd0qXxysdberdfeREAxRUYlkCm53dLOqhPEElMU6vR/H5IVDxKWLN g7i/o2AGq9tjclPx702gpqVwA4zNyw0yafJkAf/ti+WTRYiWaauB0Da9p9r0ueoI qZE9OYpyp9Vg0paIClfW8QxmjLZy2PIEMilBf/7Gq6chXsyuhkpZTvt95q2nT2pD 2Q4OWObV03qQRJ1BEGHOZH1/uFAaQz5fptiSPqaTN3DEsbrX89MX5rKKYMK3W1nJ v+niO/CZ70lVYC7SssWwfiNGmPgfkzikxDojR3171g7jAp/0S+v4yAOGyQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD1t9EPVdFlTZo990sTT/C2L24tbMB8GA1UdIwQY MBaAFGDiyPdfOFrLS5SmjYmTUbo0ejMjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWU9MSTkxODRXc3RMbEthTmlaTlJ1alI2TXlNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi83NzIzMjMtMWNkZS00YjIxLWE4Mzkt NGExNjdiMTU5Yzg4LzEvWU9MSTkxODRXc3RMbEthTmlaTlJ1alI2TXlNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi83NzIzMjMtMWNkZS00YjIxLWE4MzktNGExNjdiMTU5Yzg4 LzEvWU9MSTkxODRXc3RMbEthTmlaTlJ1alI2TXlNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXUEA2zUs 1QmzUt0ZhGioAThvqkOF7PyQ+JjpqOqy0suMDXveA/LyYC1es0IjhTii7IA8f7ku LJg24/2lPjfmbQR40bH0lo2oUG/8trVc7TW7zBy43hQLSq8ZknEK9UVgI7akrdul Tcmgz5A/hltOTCd+2/fowYLZBsdQ1CfnKCBFCkU6MKcr+qUgVdeepZ/lbhkxqYm8 Gr1E5QzWSAULYZIiw3guCtyJIBFhRbacaBcOXH79V08xcY6EhSH3tZXmfUwMtMBi tWXcU+d9rIaK/SuLr97TnpVizEHx7QQx08mCZILqHs65VkJnm0TlGqWesyABvd0R H01csTRk6BDBgg== -----END CERTIFICATE-----Generated at Thu Dec 25 12:49:45 2025 by rpki-client