This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/a3d3bb-aa98-4ced-80a6-2673707fd8e5/1/y8Zg8DJNjLG2E3ednoMON9UuqrM.mft File: y8Zg8DJNjLG2E3ednoMON9UuqrM.mft (raw, json) Hash identifier: c0DH9bMpnfwio+J8nTjX1gyuRzvrpsNj7hjWgHfKU94= Subject key identifier: E7:5E:2A:32:D9:52:3E:58:B5:51:FD:D0:5E:B1:3F:72:2B:B7:F3:14 Authority key identifier: CB:C6:60:F0:32:4D:8C:B1:B6:13:77:9D:9E:83:0E:37:D5:2E:AA:B3 Certificate issuer: /CN=cbc660f0324d8cb1b613779d9e830e37d52eaab3 Certificate serial: 019AF31CED4CFDC207E251D30098D7F501B4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y8Zg8DJNjLG2E3ednoMON9UuqrM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/a3d3bb-aa98-4ced-80a6-2673707fd8e5/1/y8Zg8DJNjLG2E3ednoMON9UuqrM.mft Manifest number: 05C4 Signing time: Sat 06 Dec 2025 10:02:30 +0000 Manifest this update: Sat 06 Dec 2025 10:02:30 +0000 Manifest next update: Sun 07 Dec 2025 10:02:30 +0000 Files and hashes: 1: y8Zg8DJNjLG2E3ednoMON9UuqrM.crl (hash: TyB89UvjK/3XqC3dQs4Vxo3b3rv5DfMxgTJprO5DwnY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/a3d3bb-aa98-4ced-80a6-2673707fd8e5/1/y8Zg8DJNjLG2E3ednoMON9UuqrM.crl rsync://rpki.ripe.net/repository/DEFAULT/8b/a3d3bb-aa98-4ced-80a6-2673707fd8e5/1/y8Zg8DJNjLG2E3ednoMON9UuqrM.mft rsync://rpki.ripe.net/repository/DEFAULT/y8Zg8DJNjLG2E3ednoMON9UuqrM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:02:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:ed:4c:fd:c2:07:e2:51:d3:00:98:d7:f5:01:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cbc660f0324d8cb1b613779d9e830e37d52eaab3 Validity Not Before: Dec 6 10:02:30 2025 GMT Not After : Dec 7 10:02:30 2025 GMT Subject: CN=e75e2a32d9523e58b551fdd05eb13f722bb7f314 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:1a:04:36:0f:27:41:bf:61:aa:ea:9c:f0:89: 60:dc:46:32:b8:12:1b:f0:d1:67:5e:93:fd:bf:2e: af:c4:11:26:aa:38:f9:ed:be:41:53:17:57:da:5c: 4f:da:61:8e:a0:2a:98:da:32:5c:c0:59:6a:1c:d2: 7f:4e:ac:96:7e:95:bc:49:f3:f6:ef:c6:d6:23:a8: c2:7f:22:3b:86:6d:ab:a9:ec:46:c8:60:0c:3b:4d: 80:ac:e1:52:23:25:71:8e:95:9d:50:6e:f7:9f:33: d0:da:b8:6d:5b:f9:71:fa:59:9a:e0:44:47:74:32: f9:1d:76:0a:7f:b3:c9:57:0c:22:31:d6:c3:a0:78: 63:d8:0b:82:96:c5:24:30:c3:c8:ee:d8:10:ac:68: f8:79:4e:d5:63:9f:f2:58:b6:dd:7f:8a:6e:be:85: 28:76:ef:db:d7:e4:71:8a:a5:b3:4d:8c:73:c5:64: 1f:62:f8:9e:ae:63:bd:13:13:ef:59:d9:37:07:63: d8:c7:d1:38:21:d7:de:29:ff:e3:c2:ab:42:8d:39: c4:45:92:f9:21:af:79:07:b6:5f:98:73:18:eb:d4: 33:30:30:d7:6a:2d:5a:61:15:e2:dc:1b:c5:f4:9c: 73:ac:8e:a8:0e:ae:89:2c:fc:16:46:13:30:a5:23: b3:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:5E:2A:32:D9:52:3E:58:B5:51:FD:D0:5E:B1:3F:72:2B:B7:F3:14 X509v3 Authority Key Identifier: keyid:CB:C6:60:F0:32:4D:8C:B1:B6:13:77:9D:9E:83:0E:37:D5:2E:AA:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y8Zg8DJNjLG2E3ednoMON9UuqrM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/a3d3bb-aa98-4ced-80a6-2673707fd8e5/1/y8Zg8DJNjLG2E3ednoMON9UuqrM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/a3d3bb-aa98-4ced-80a6-2673707fd8e5/1/y8Zg8DJNjLG2E3ednoMON9UuqrM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:ce:40:80:54:ad:c2:d4:d5:7f:d6:46:c2:e6:9d:e2:41:5c: ce:ab:24:1b:01:41:b5:d5:a9:5b:dc:8d:00:91:4e:23:7c:af: c1:58:58:5e:23:a3:5a:2d:61:c9:f2:3a:9f:22:8b:51:b9:5e: bc:aa:3f:aa:83:05:66:fd:16:35:70:4b:3b:b6:21:f1:4e:14: 59:00:7b:9b:be:d7:db:c8:f3:55:1e:fe:42:9d:70:f6:10:00: 0a:a3:ec:f2:3c:9f:9f:9a:1d:69:46:54:b2:21:50:20:8e:c5: 9e:60:71:2c:d2:85:49:39:cb:ec:3a:10:77:37:28:54:47:11: e6:70:a1:07:84:31:27:ed:d0:2e:b5:83:98:26:94:fd:a6:ed: 86:04:da:c5:f9:87:da:84:d2:50:84:05:cf:2d:b3:f9:dc:5c: ae:ec:56:73:48:da:22:df:5b:86:f6:08:ac:36:f6:46:10:6a: 91:bb:08:51:ce:45:80:4e:4f:73:35:91:23:22:95:ca:61:59: df:45:20:d8:be:c5:b5:04:b7:63:62:2a:9e:2c:42:7f:90:0e: c1:ee:14:f4:48:0b:9c:71:6b:8a:44:df:f8:54:b8:be:ae:33: 4b:5b:5f:65:cb:2a:ae:c4:6b:97:e1:4c:73:0d:52:0a:03:86: 23:ca:b2:32 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHO1M/cIH4lHTAJjX9QG0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiYzY2MGYwMzI0ZDhjYjFiNjEzNzc5ZDllODMwZTM3ZDUy ZWFhYjMwHhcNMjUxMjA2MTAwMjMwWhcNMjUxMjA3MTAwMjMwWjAzMTEwLwYDVQQD EyhlNzVlMmEzMmQ5NTIzZTU4YjU1MWZkZDA1ZWIxM2Y3MjJiYjdmMzE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzhoENg8nQb9hquqc8Ilg3EYyuBIb 8NFnXpP9vy6vxBEmqjj57b5BUxdX2lxP2mGOoCqY2jJcwFlqHNJ/TqyWfpW8SfP2 78bWI6jCfyI7hm2rqexGyGAMO02ArOFSIyVxjpWdUG73nzPQ2rhtW/lx+lma4ERH dDL5HXYKf7PJVwwiMdbDoHhj2AuClsUkMMPI7tgQrGj4eU7VY5/yWLbdf4puvoUo du/b1+RxiqWzTYxzxWQfYviermO9ExPvWdk3B2PYx9E4IdfeKf/jwqtCjTnERZL5 Ia95B7ZfmHMY69QzMDDXai1aYRXi3BvF9JxzrI6oDq6JLPwWRhMwpSOzdwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOdeKjLZUj5YtVH90F6xP3Irt/MUMB8GA1UdIwQY MBaAFMvGYPAyTYyxthN3nZ6DDjfVLqqzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveThaZzhESk5qTEcyRTNlZG5vTU9OOVV1cXJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9hM2QzYmItYWE5OC00Y2VkLTgwYTYt MjY3MzcwN2ZkOGU1LzEveThaZzhESk5qTEcyRTNlZG5vTU9OOVV1cXJNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yi9hM2QzYmItYWE5OC00Y2VkLTgwYTYtMjY3MzcwN2ZkOGU1 LzEveThaZzhESk5qTEcyRTNlZG5vTU9OOVV1cXJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKs5AgFSt wtTVf9ZGwuad4kFczqskGwFBtdWpW9yNAJFOI3yvwVhYXiOjWi1hyfI6nyKLUble vKo/qoMFZv0WNXBLO7Yh8U4UWQB7m77X28jzVR7+Qp1w9hAACqPs8jyfn5odaUZU siFQII7FnmBxLNKFSTnL7DoQdzcoVEcR5nChB4QxJ+3QLrWDmCaU/abthgTaxfmH 2oTSUIQFzy2z+dxcruxWc0jaIt9bhvYIrDb2RhBqkbsIUc5FgE5PczWRIyKVymFZ 30Ug2L7FtQS3Y2IqnixCf5AOwe4U9EgLnHFrikTf+FS4vq4zS1tfZcsqrsRrl+FM cw1SCgOGI8qyMg== -----END CERTIFICATE-----Generated at Sat Dec 6 20:29:27 2025 by rpki-client