This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/0186a2-f8aa-41d8-9a4e-8726dd88f529/1/YlDmLARIEp9jWJGKccM0TiWoLZs.mft File: YlDmLARIEp9jWJGKccM0TiWoLZs.mft (raw, json) Hash identifier: oO3pi/iyZGy0FCOwhDsQskHBzOfNP3w3YwrEVUBoC6g= Subject key identifier: 2A:29:6A:DD:4E:4F:6C:65:07:2D:50:D6:41:61:4A:CA:73:0B:89:E1 Authority key identifier: 62:50:E6:2C:04:48:12:9F:63:58:91:8A:71:C3:34:4E:25:A8:2D:9B Certificate issuer: /CN=6250e62c0448129f6358918a71c3344e25a82d9b Certificate serial: 019B0E25788061F11FF786F221AAAD53556E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YlDmLARIEp9jWJGKccM0TiWoLZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/0186a2-f8aa-41d8-9a4e-8726dd88f529/1/YlDmLARIEp9jWJGKccM0TiWoLZs.mft Manifest number: 011D Signing time: Thu 11 Dec 2025 16:01:35 +0000 Manifest this update: Thu 11 Dec 2025 16:01:35 +0000 Manifest next update: Fri 12 Dec 2025 16:01:35 +0000 Files and hashes: 1: Gof8cYl_-_S4WvBztVMMpN2lO6Y.roa (hash: 6km18MyJ5IHTThvCW2WxtbASJyCxFy1OyHEgHJJtY7Y=) 2: YlDmLARIEp9jWJGKccM0TiWoLZs.crl (hash: 6rkc0dxVw4Xu1dLe0/uEkeLA04WxabG7pPNkQxP7FDI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/0186a2-f8aa-41d8-9a4e-8726dd88f529/1/YlDmLARIEp9jWJGKccM0TiWoLZs.crl rsync://rpki.ripe.net/repository/DEFAULT/78/0186a2-f8aa-41d8-9a4e-8726dd88f529/1/YlDmLARIEp9jWJGKccM0TiWoLZs.mft rsync://rpki.ripe.net/repository/DEFAULT/YlDmLARIEp9jWJGKccM0TiWoLZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:25:78:80:61:f1:1f:f7:86:f2:21:aa:ad:53:55:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6250e62c0448129f6358918a71c3344e25a82d9b Validity Not Before: Dec 11 16:01:35 2025 GMT Not After : Dec 12 16:01:35 2025 GMT Subject: CN=2a296add4e4f6c65072d50d641614aca730b89e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:dd:b3:fb:81:dc:fa:04:08:a9:82:1e:7f:7a: 37:dd:5e:79:d1:37:c6:c1:e6:db:9e:5c:37:78:95: fb:91:ee:7a:ce:b1:7c:8d:5b:72:6e:9f:65:67:f3: 24:96:95:24:ea:0c:c7:78:c7:6a:c7:d7:cc:7f:39: 3e:32:b9:ae:6c:2b:40:77:ac:66:a3:91:65:09:b2: a4:11:97:17:a9:4a:7f:aa:cb:d5:55:48:32:6d:c0: cc:37:93:28:35:ef:64:24:fe:6b:c1:87:69:27:0f: c8:70:5d:6d:f1:f1:d3:c3:36:6e:46:2b:64:74:ad: 14:74:85:3c:5c:c4:af:39:2c:4f:17:3a:c0:ab:00: 5b:b8:05:ce:08:16:47:68:29:8d:c4:12:cd:88:dd: e8:d1:36:2c:93:94:2b:47:b7:21:86:32:2f:9a:a2: 08:3c:6b:1d:01:cf:2a:d3:2a:1e:63:2e:5c:d9:e4: c8:af:24:5d:95:cd:0e:6c:4e:c6:ae:3c:21:c8:92: 33:c0:68:82:9d:4b:93:f2:bf:b1:58:72:76:49:0e: 4d:6d:9f:32:24:63:9d:e8:a2:9b:28:7b:d3:ed:74: 5d:3a:ac:d4:d0:c0:1c:36:34:0b:af:a4:fb:70:a8: dc:1c:c2:42:63:af:fc:2e:34:3f:db:a7:07:20:16: a7:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:29:6A:DD:4E:4F:6C:65:07:2D:50:D6:41:61:4A:CA:73:0B:89:E1 X509v3 Authority Key Identifier: keyid:62:50:E6:2C:04:48:12:9F:63:58:91:8A:71:C3:34:4E:25:A8:2D:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YlDmLARIEp9jWJGKccM0TiWoLZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/0186a2-f8aa-41d8-9a4e-8726dd88f529/1/YlDmLARIEp9jWJGKccM0TiWoLZs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/0186a2-f8aa-41d8-9a4e-8726dd88f529/1/YlDmLARIEp9jWJGKccM0TiWoLZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:9c:4a:b7:03:34:27:96:d5:eb:94:99:10:fe:ea:3c:d0:8b: 7d:99:8e:68:65:7b:4a:9d:c8:c3:bb:92:ea:8a:10:b1:5f:1c: 93:b7:0d:32:eb:1b:6b:95:ec:0c:99:ba:a5:0e:74:e6:5c:d7: 33:8f:0e:9f:3a:ba:97:32:ce:17:62:2e:c0:b3:f1:37:ea:3c: 01:08:38:cc:ae:62:a4:22:6c:f8:25:6f:58:4f:f3:c7:bc:35: 0d:b7:4d:d7:2f:c0:af:84:80:e6:3c:3c:bd:39:ab:ce:69:88: 76:56:69:c7:03:bd:1d:93:75:62:43:34:e2:04:39:e0:73:9d: c3:60:9a:2b:cd:cf:68:46:35:19:0a:80:2a:e2:b4:38:51:93: 4d:ce:d2:7c:3d:98:3d:1c:fe:27:f5:fc:83:20:e9:d8:21:67: 65:77:c4:e9:14:f4:f1:38:da:57:96:73:2d:f2:93:67:ff:3f: 1f:e5:ac:00:fb:df:97:50:9d:a8:d0:5d:5d:03:c0:3d:34:53: dd:3a:39:82:10:5f:05:6b:6f:bc:97:37:40:17:82:35:f3:49: 48:00:5c:a7:e6:32:ec:8f:4c:6e:f1:d2:51:8f:15:0a:9c:b9: b1:0b:4d:3b:95:29:e7:0b:77:fc:5b:63:05:da:a2:81:a3:a2: f9:91:59:7c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOJXiAYfEf94byIaqtU1VuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyNTBlNjJjMDQ0ODEyOWY2MzU4OTE4YTcxYzMzNDRlMjVh ODJkOWIwHhcNMjUxMjExMTYwMTM1WhcNMjUxMjEyMTYwMTM1WjAzMTEwLwYDVQQD EygyYTI5NmFkZDRlNGY2YzY1MDcyZDUwZDY0MTYxNGFjYTczMGI4OWUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtN2z+4Hc+gQIqYIef3o33V550TfG webbnlw3eJX7ke56zrF8jVtybp9lZ/MklpUk6gzHeMdqx9fMfzk+MrmubCtAd6xm o5FlCbKkEZcXqUp/qsvVVUgybcDMN5MoNe9kJP5rwYdpJw/IcF1t8fHTwzZuRitk dK0UdIU8XMSvOSxPFzrAqwBbuAXOCBZHaCmNxBLNiN3o0TYsk5QrR7chhjIvmqII PGsdAc8q0yoeYy5c2eTIryRdlc0ObE7GrjwhyJIzwGiCnUuT8r+xWHJ2SQ5NbZ8y JGOd6KKbKHvT7XRdOqzU0MAcNjQLr6T7cKjcHMJCY6/8LjQ/26cHIBanlQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCopat1OT2xlBy1Q1kFhSspzC4nhMB8GA1UdIwQY MBaAFGJQ5iwESBKfY1iRinHDNE4lqC2bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWWxEbUxBUklFcDlqV0pHS2NjTTBUaVdvTFpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC8wMTg2YTItZjhhYS00MWQ4LTlhNGUt ODcyNmRkODhmNTI5LzEvWWxEbUxBUklFcDlqV0pHS2NjTTBUaVdvTFpzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OC8wMTg2YTItZjhhYS00MWQ4LTlhNGUtODcyNmRkODhmNTI5 LzEvWWxEbUxBUklFcDlqV0pHS2NjTTBUaVdvTFpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX5xKtwM0 J5bV65SZEP7qPNCLfZmOaGV7Sp3Iw7uS6ooQsV8ck7cNMusba5XsDJm6pQ505lzX M48Onzq6lzLOF2IuwLPxN+o8AQg4zK5ipCJs+CVvWE/zx7w1DbdN1y/Ar4SA5jw8 vTmrzmmIdlZpxwO9HZN1YkM04gQ54HOdw2CaK83PaEY1GQqAKuK0OFGTTc7SfD2Y PRz+J/X8gyDp2CFnZXfE6RT08TjaV5ZzLfKTZ/8/H+WsAPvfl1CdqNBdXQPAPTRT 3To5ghBfBWtvvJc3QBeCNfNJSABcp+Yy7I9MbvHSUY8VCpy5sQtNO5Up5wt3/Ftj BdqigaOi+ZFZfA== -----END CERTIFICATE-----Generated at Thu Dec 11 20:08:14 2025 by rpki-client