This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/af1d49-d0e4-4d68-8dee-dd69a4ee1350/1/y58ZzBrXh0Wl2rMdY0BX4pq_7Yw.mft File: y58ZzBrXh0Wl2rMdY0BX4pq_7Yw.mft (raw, json) Hash identifier: 5EQvGlNZxHH3n/TjZGRaLbIr+9vp8r2y7t5iCji7Whw= Subject key identifier: 87:52:5A:56:B2:03:1D:FA:C3:48:E1:A2:60:08:FC:34:0D:3E:F3:DA Authority key identifier: CB:9F:19:CC:1A:D7:87:45:A5:DA:B3:1D:63:40:57:E2:9A:BF:ED:8C Certificate issuer: /CN=cb9f19cc1ad78745a5dab31d634057e29abfed8c Certificate serial: 019AF2AD6DF0F2AAC8E13E5BBB7EEA884573 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y58ZzBrXh0Wl2rMdY0BX4pq_7Yw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/af1d49-d0e4-4d68-8dee-dd69a4ee1350/1/y58ZzBrXh0Wl2rMdY0BX4pq_7Yw.mft Manifest number: 0826 Signing time: Sat 06 Dec 2025 08:00:43 +0000 Manifest this update: Sat 06 Dec 2025 08:00:43 +0000 Manifest next update: Sun 07 Dec 2025 08:00:43 +0000 Files and hashes: 1: CJzjdjvv4FGhNJdLtLXWzDG2qxM.roa (hash: LgF/Ta729VSsHPxynFr9+mRLhRpy51NkOyQe2/JSJU4=) 2: y58ZzBrXh0Wl2rMdY0BX4pq_7Yw.crl (hash: d5h1uvX7ywea05GRiKoyU49TIXnlE05zQWnPEyTUi/c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/af1d49-d0e4-4d68-8dee-dd69a4ee1350/1/y58ZzBrXh0Wl2rMdY0BX4pq_7Yw.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/af1d49-d0e4-4d68-8dee-dd69a4ee1350/1/y58ZzBrXh0Wl2rMdY0BX4pq_7Yw.mft rsync://rpki.ripe.net/repository/DEFAULT/y58ZzBrXh0Wl2rMdY0BX4pq_7Yw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:6d:f0:f2:aa:c8:e1:3e:5b:bb:7e:ea:88:45:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb9f19cc1ad78745a5dab31d634057e29abfed8c Validity Not Before: Dec 6 08:00:43 2025 GMT Not After : Dec 7 08:00:43 2025 GMT Subject: CN=87525a56b2031dfac348e1a26008fc340d3ef3da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:c6:40:f9:58:73:59:3d:7b:11:5e:ca:06:4b: 95:2e:77:9b:30:b7:9b:99:60:ae:bd:8d:89:8a:10: cf:31:35:b6:41:3a:96:51:e6:a2:d3:f4:f9:02:46: 92:43:87:a6:cd:51:fb:d0:b4:b2:57:86:bb:cd:20: 39:88:bc:84:d2:43:d0:ca:2e:26:71:cf:bf:5c:fa: 1c:ba:5b:61:d6:bf:32:0a:ef:09:a3:f0:2e:6c:9f: 83:97:3c:81:84:02:8b:21:22:e6:4b:8c:e2:08:4a: 28:1e:d8:f0:8f:e4:a0:e6:99:81:e6:27:a6:30:52: ab:ee:dc:48:f8:67:45:b3:a0:01:15:1c:6f:d4:89: 4e:4b:8c:b7:20:f6:2c:00:a7:5b:95:21:0a:d1:eb: cb:2a:86:13:b2:95:e4:a7:1f:e6:69:36:16:97:3e: cd:9d:17:e3:ab:1a:fb:e0:a6:6a:b2:ad:84:8c:c7: 55:ed:bf:5a:53:fb:a4:b2:47:35:d8:69:0e:06:9c: 71:0a:45:2e:ba:04:de:76:02:ce:49:89:66:7e:6d: 94:b3:a6:51:89:4c:79:5d:3a:64:73:0e:17:fc:8a: e8:c4:eb:03:3d:46:98:49:67:53:02:b9:a0:5c:60: 36:c7:74:8f:41:67:23:cd:2f:b0:08:2a:c0:e9:68: 02:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:52:5A:56:B2:03:1D:FA:C3:48:E1:A2:60:08:FC:34:0D:3E:F3:DA X509v3 Authority Key Identifier: keyid:CB:9F:19:CC:1A:D7:87:45:A5:DA:B3:1D:63:40:57:E2:9A:BF:ED:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y58ZzBrXh0Wl2rMdY0BX4pq_7Yw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/af1d49-d0e4-4d68-8dee-dd69a4ee1350/1/y58ZzBrXh0Wl2rMdY0BX4pq_7Yw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/af1d49-d0e4-4d68-8dee-dd69a4ee1350/1/y58ZzBrXh0Wl2rMdY0BX4pq_7Yw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:f7:e0:00:c4:2b:7c:3b:e3:ff:4e:3e:fa:5d:e3:ad:09:79: 2b:4e:49:6f:bb:e8:f1:e3:7e:99:10:3d:c6:b6:06:f8:c9:0f: fc:f2:9b:85:f2:cc:c0:5d:b2:b0:fa:12:a0:6e:7c:cd:24:3a: 2f:bc:64:00:49:ee:eb:8f:36:8b:b3:fb:f9:92:d3:84:52:78: c4:5e:b6:34:98:cc:6d:17:dd:8a:fa:a1:b5:df:07:49:8e:1d: d1:17:4b:f2:b5:ff:a2:f3:e7:6c:d8:4f:41:3f:0a:f8:5c:06: e0:3d:5f:27:21:95:8a:2a:5e:16:60:cb:1e:13:ab:db:d0:a0: bc:63:87:3c:e1:c4:9f:17:96:ed:e9:13:8f:5c:4e:0b:7d:57: 9e:3d:be:16:a2:73:97:61:e2:36:1e:e8:ff:12:18:1c:b1:7b: 6e:2e:28:dd:a1:2f:cf:93:85:f1:2b:2e:64:16:3e:65:d7:3e: 8a:61:8b:37:3b:58:17:09:7f:84:cf:16:9a:0e:09:68:c1:c0: 04:95:ea:48:36:88:70:a6:af:24:e0:d6:3a:2a:8c:a5:e0:06: c7:90:f8:ec:07:12:f5:d4:40:26:08:ea:eb:e5:54:54:99:29: 31:c4:9e:4e:a2:60:ac:90:8f:a7:88:ff:63:86:45:6f:88:2e: 50:51:83:7c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrW3w8qrI4T5bu37qiEVzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiOWYxOWNjMWFkNzg3NDVhNWRhYjMxZDYzNDA1N2UyOWFi ZmVkOGMwHhcNMjUxMjA2MDgwMDQzWhcNMjUxMjA3MDgwMDQzWjAzMTEwLwYDVQQD Eyg4NzUyNWE1NmIyMDMxZGZhYzM0OGUxYTI2MDA4ZmMzNDBkM2VmM2RhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArMZA+VhzWT17EV7KBkuVLnebMLeb mWCuvY2JihDPMTW2QTqWUeai0/T5AkaSQ4emzVH70LSyV4a7zSA5iLyE0kPQyi4m cc+/XPoculth1r8yCu8Jo/AubJ+DlzyBhAKLISLmS4ziCEooHtjwj+Sg5pmB5iem MFKr7txI+GdFs6ABFRxv1IlOS4y3IPYsAKdblSEK0evLKoYTspXkpx/maTYWlz7N nRfjqxr74KZqsq2EjMdV7b9aU/ukskc12GkOBpxxCkUuugTedgLOSYlmfm2Us6ZR iUx5XTpkcw4X/IroxOsDPUaYSWdTArmgXGA2x3SPQWcjzS+wCCrA6WgCfQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIdSWlayAx36w0jhomAI/DQNPvPaMB8GA1UdIwQY MBaAFMufGcwa14dFpdqzHWNAV+Kav+2MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveTU4WnpCclhoMFdsMnJNZFkwQlg0cHFfN1l3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy9hZjFkNDktZDBlNC00ZDY4LThkZWUt ZGQ2OWE0ZWUxMzUwLzEveTU4WnpCclhoMFdsMnJNZFkwQlg0cHFfN1l3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy9hZjFkNDktZDBlNC00ZDY4LThkZWUtZGQ2OWE0ZWUxMzUw LzEveTU4WnpCclhoMFdsMnJNZFkwQlg0cHFfN1l3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOvfgAMQr fDvj/04++l3jrQl5K05Jb7vo8eN+mRA9xrYG+MkP/PKbhfLMwF2ysPoSoG58zSQ6 L7xkAEnu6482i7P7+ZLThFJ4xF62NJjMbRfdivqhtd8HSY4d0RdL8rX/ovPnbNhP QT8K+FwG4D1fJyGViipeFmDLHhOr29CgvGOHPOHEnxeW7ekTj1xOC31Xnj2+FqJz l2HiNh7o/xIYHLF7bi4o3aEvz5OF8SsuZBY+Zdc+imGLNztYFwl/hM8Wmg4JaMHA BJXqSDaIcKavJODWOiqMpeAGx5D47AcS9dRAJgjq6+VUVJkpMcSeTqJgrJCPp4j/ Y4ZFb4guUFGDfA== -----END CERTIFICATE-----Generated at Sat Dec 6 15:56:23 2025 by rpki-client