This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/3b9215-9807-481e-9a1e-732272023ec2/1/YtGLMS41Pnj6juX4DTb3Qc3N46o.mft File: YtGLMS41Pnj6juX4DTb3Qc3N46o.mft (raw, json) Hash identifier: DBkQt2MKn/UIcsLULNawFQLe4znm8H3IFUnIBMobepU= Subject key identifier: B9:D2:2A:8E:89:A7:A7:01:89:9B:39:A4:2E:EE:95:68:81:09:97:EA Authority key identifier: 62:D1:8B:31:2E:35:3E:78:FA:8E:E5:F8:0D:36:F7:41:CD:CD:E3:AA Certificate issuer: /CN=62d18b312e353e78fa8ee5f80d36f741cdcde3aa Certificate serial: 019B24E37C9D47090C9F1D47EA6FCB6F895B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YtGLMS41Pnj6juX4DTb3Qc3N46o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/3b9215-9807-481e-9a1e-732272023ec2/1/YtGLMS41Pnj6juX4DTb3Qc3N46o.mft Manifest number: 1220 Signing time: Tue 16 Dec 2025 02:00:46 +0000 Manifest this update: Tue 16 Dec 2025 02:00:46 +0000 Manifest next update: Wed 17 Dec 2025 02:00:46 +0000 Files and hashes: 1: YtGLMS41Pnj6juX4DTb3Qc3N46o.crl (hash: EdxEpAJexy6pct0TJnG4wv4yfMRE/+GnWhAwf1+lhrM=) 2: _Zz1Cu9GIz20qsemRnTOxpptbFA.roa (hash: Nq/fM/hd3jyGxJ/ud7QdLP64eh6OFLHRS+jqgC+mzSI=) 3: i2IsJ0_IABmEW_nqATqO3eXE_yA.roa (hash: NG0njCUXWjhkgeU+Tlptt1T4nDTRU6KlU6CCdc6Agjg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/3b9215-9807-481e-9a1e-732272023ec2/1/YtGLMS41Pnj6juX4DTb3Qc3N46o.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/3b9215-9807-481e-9a1e-732272023ec2/1/YtGLMS41Pnj6juX4DTb3Qc3N46o.mft rsync://rpki.ripe.net/repository/DEFAULT/YtGLMS41Pnj6juX4DTb3Qc3N46o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 02:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:24:e3:7c:9d:47:09:0c:9f:1d:47:ea:6f:cb:6f:89:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=62d18b312e353e78fa8ee5f80d36f741cdcde3aa Validity Not Before: Dec 16 02:00:46 2025 GMT Not After : Dec 17 02:00:46 2025 GMT Subject: CN=b9d22a8e89a7a701899b39a42eee9568810997ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:71:ae:53:90:0e:3a:d0:22:1f:97:88:5c:b2: 75:4a:8a:b1:46:47:c1:10:ef:68:cb:81:75:dc:22: 71:14:17:eb:0b:21:f2:52:51:d4:2c:a4:c6:6b:62: 83:0f:40:a5:3e:2d:f0:ab:18:be:d6:ef:33:a3:c5: 73:67:1b:40:41:51:4b:14:ee:3d:80:39:c4:8d:fc: b6:2e:5b:ed:dc:4a:b7:b1:92:e1:10:73:bc:41:e5: 7a:b2:4b:b3:7a:e0:35:a0:85:f3:01:58:86:a0:75: db:74:43:7f:71:46:12:5a:a4:5e:e1:b4:e3:dd:7e: ca:5b:e2:4c:ff:34:20:f8:65:23:0f:14:19:3d:44: dd:25:e8:4e:f3:c5:af:94:51:a7:95:2c:3d:43:73: 34:89:b2:d1:e8:4b:c4:2f:e7:de:7f:2c:c6:dc:0b: cf:8f:5b:08:c5:e9:83:b1:03:da:03:0d:b0:87:5a: 55:16:bf:b9:53:31:d2:8a:08:30:f3:b7:5a:2f:51: 5c:4d:2c:19:71:56:ff:05:98:e2:37:12:3a:8f:69: 4b:72:7c:5e:ff:e1:73:6b:87:33:e4:0e:ed:e1:03: b0:6c:19:0a:b1:bd:42:71:38:b1:66:21:31:ba:19: 7f:6f:fe:9d:ff:ff:ca:2e:08:3f:73:23:5a:13:13: 0a:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:D2:2A:8E:89:A7:A7:01:89:9B:39:A4:2E:EE:95:68:81:09:97:EA X509v3 Authority Key Identifier: keyid:62:D1:8B:31:2E:35:3E:78:FA:8E:E5:F8:0D:36:F7:41:CD:CD:E3:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YtGLMS41Pnj6juX4DTb3Qc3N46o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/3b9215-9807-481e-9a1e-732272023ec2/1/YtGLMS41Pnj6juX4DTb3Qc3N46o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/3b9215-9807-481e-9a1e-732272023ec2/1/YtGLMS41Pnj6juX4DTb3Qc3N46o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:0c:17:89:dd:12:fa:79:b5:82:80:1e:e2:8d:38:55:d2:e9: cc:2a:f9:70:89:b3:d2:5c:ca:17:1c:13:6c:ee:61:b8:37:e0: 6f:0b:19:f2:d0:5c:09:39:a6:fa:ac:26:52:47:0c:ea:ad:4a: 6a:7c:2d:ce:b8:e9:d3:02:58:a3:95:1a:06:54:9f:77:57:bf: 70:28:6b:b9:77:4d:40:a3:25:61:06:fc:44:8a:71:e9:f7:05: a1:34:da:7d:24:af:41:8d:6a:b8:78:f3:c8:34:db:b5:63:5f: 6a:cc:c3:42:69:a3:56:7e:3d:a2:be:c2:ec:08:4f:53:16:92: 0a:21:24:fc:f9:11:3b:e1:82:bd:bf:1a:81:53:28:35:d8:a3: 8f:d3:12:16:d3:f0:e4:1e:27:d9:0b:78:29:fe:86:11:52:8e: d4:1e:1b:bc:19:02:65:6a:8d:b6:42:17:82:ff:9e:03:9f:b7: bf:d9:1e:74:da:7c:ef:91:26:3b:a7:2e:a9:93:89:00:9c:e8: 69:d9:c5:f4:da:78:46:70:b7:7d:95:74:18:13:e9:ab:48:81: e4:b3:91:cf:1c:2f:5c:5f:dc:b9:de:a9:a7:5b:47:c2:b1:8d: be:9e:4f:07:45:f9:8b:c1:a1:5e:63:a5:85:e3:af:d1:4e:ae: c1:02:27:59 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsk43ydRwkMnx1H6m/Lb4lbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyZDE4YjMxMmUzNTNlNzhmYThlZTVmODBkMzZmNzQxY2Rj ZGUzYWEwHhcNMjUxMjE2MDIwMDQ2WhcNMjUxMjE3MDIwMDQ2WjAzMTEwLwYDVQQD EyhiOWQyMmE4ZTg5YTdhNzAxODk5YjM5YTQyZWVlOTU2ODgxMDk5N2VhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1nGuU5AOOtAiH5eIXLJ1SoqxRkfB EO9oy4F13CJxFBfrCyHyUlHULKTGa2KDD0ClPi3wqxi+1u8zo8VzZxtAQVFLFO49 gDnEjfy2Llvt3Eq3sZLhEHO8QeV6skuzeuA1oIXzAViGoHXbdEN/cUYSWqRe4bTj 3X7KW+JM/zQg+GUjDxQZPUTdJehO88WvlFGnlSw9Q3M0ibLR6EvEL+fefyzG3AvP j1sIxemDsQPaAw2wh1pVFr+5UzHSiggw87daL1FcTSwZcVb/BZjiNxI6j2lLcnxe /+Fza4cz5A7t4QOwbBkKsb1CcTixZiExuhl/b/6d///KLgg/cyNaExMKiQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLnSKo6Jp6cBiZs5pC7ulWiBCZfqMB8GA1UdIwQY MBaAFGLRizEuNT54+o7l+A0290HNzeOqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWXRHTE1TNDFQbmo2anVYNERUYjNRYzNONDZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS8zYjkyMTUtOTgwNy00ODFlLTlhMWUt NzMyMjcyMDIzZWMyLzEvWXRHTE1TNDFQbmo2anVYNERUYjNRYzNONDZvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS8zYjkyMTUtOTgwNy00ODFlLTlhMWUtNzMyMjcyMDIzZWMy LzEvWXRHTE1TNDFQbmo2anVYNERUYjNRYzNONDZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnwwXid0S +nm1goAe4o04VdLpzCr5cImz0lzKFxwTbO5huDfgbwsZ8tBcCTmm+qwmUkcM6q1K anwtzrjp0wJYo5UaBlSfd1e/cChruXdNQKMlYQb8RIpx6fcFoTTafSSvQY1quHjz yDTbtWNfaszDQmmjVn49or7C7AhPUxaSCiEk/PkRO+GCvb8agVMoNdijj9MSFtPw 5B4n2Qt4Kf6GEVKO1B4bvBkCZWqNtkIXgv+eA5+3v9kedNp875EmO6cuqZOJAJzo adnF9Np4RnC3fZV0GBPpq0iB5LORzxwvXF/cud6pp1tHwrGNvp5PB0X5i8GhXmOl heOv0U6uwQInWQ== -----END CERTIFICATE-----Generated at Tue Dec 16 12:33:24 2025 by rpki-client