This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/22885a-42c8-47e2-90ad-16e8fe3c506f/1/y5l80U86a8NEosk47g_etU0iEkA.mft File: y5l80U86a8NEosk47g_etU0iEkA.mft (raw, json) Hash identifier: ENHObDq4Z+OhOR3nRjD88doDfahtzdXmJ/42UlKxdzU= Subject key identifier: 27:83:28:3D:B6:67:94:BF:6D:8A:A2:F8:A4:3E:CF:4E:0F:1F:C0:D5 Authority key identifier: CB:99:7C:D1:4F:3A:6B:C3:44:A2:C9:38:EE:0F:DE:B5:4D:22:12:40 Certificate issuer: /CN=cb997cd14f3a6bc344a2c938ee0fdeb54d221240 Certificate serial: 019AF2768784C08EB9696C4858CA03EDDBE6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y5l80U86a8NEosk47g_etU0iEkA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/22885a-42c8-47e2-90ad-16e8fe3c506f/1/y5l80U86a8NEosk47g_etU0iEkA.mft Manifest number: 0535 Signing time: Sat 06 Dec 2025 07:00:45 +0000 Manifest this update: Sat 06 Dec 2025 07:00:45 +0000 Manifest next update: Sun 07 Dec 2025 07:00:45 +0000 Files and hashes: 1: 9Aeacxzy-u4aevKcCQ9nXd_FU7Q.roa (hash: vKC+rREuRemLdV33ThPXHvcW71bg+LHpzDOvqZUoqy4=) 2: y5l80U86a8NEosk47g_etU0iEkA.crl (hash: AIhgWeb1dUNZJziuQjvFKGCCkoQYTjCTCWFkv2S0rMo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/22885a-42c8-47e2-90ad-16e8fe3c506f/1/y5l80U86a8NEosk47g_etU0iEkA.crl rsync://rpki.ripe.net/repository/DEFAULT/f9/22885a-42c8-47e2-90ad-16e8fe3c506f/1/y5l80U86a8NEosk47g_etU0iEkA.mft rsync://rpki.ripe.net/repository/DEFAULT/y5l80U86a8NEosk47g_etU0iEkA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:87:84:c0:8e:b9:69:6c:48:58:ca:03:ed:db:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb997cd14f3a6bc344a2c938ee0fdeb54d221240 Validity Not Before: Dec 6 07:00:45 2025 GMT Not After : Dec 7 07:00:45 2025 GMT Subject: CN=2783283db66794bf6d8aa2f8a43ecf4e0f1fc0d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:fc:22:c4:fb:cf:64:9b:af:1a:cb:b2:cc:a4: a4:f1:1a:35:43:28:43:3f:3f:3b:dd:fc:7f:0e:03: 4b:4c:13:4c:68:fe:ec:8a:ce:8d:36:c2:1f:a2:43: fc:d5:1e:f2:25:d4:48:0b:34:6f:ae:b9:e9:cc:b8: 9f:ba:ea:bd:0e:64:ae:05:db:0a:8d:4f:94:f4:81: ea:01:3d:22:77:38:bd:37:65:e1:ec:24:6d:9e:78: 72:a0:bd:7f:d4:8f:47:79:fb:b3:70:42:7b:68:65: f4:16:89:dd:7e:cf:ab:f8:41:bf:91:51:24:30:aa: 81:72:c1:e0:5f:11:c0:d7:f0:a9:a6:0a:0b:fa:b3: ab:f9:3b:e9:66:fe:40:c0:07:35:5d:38:d1:0b:e7: 1d:05:3d:a3:a0:a1:09:99:8f:38:20:41:bd:87:4a: 37:18:64:13:a1:a4:a8:a8:f8:e9:8a:05:f3:78:53: 48:e9:bf:07:e7:57:bc:a7:5d:c9:cf:2c:aa:d8:1a: 2b:5c:27:81:cc:dc:ec:b3:6f:df:4e:c9:70:c3:16: 1b:c7:13:65:c5:51:7f:c3:69:73:30:a9:35:f3:1b: ed:31:5e:1c:9c:c3:fa:20:48:0f:f5:e3:95:cb:c9: 71:c9:cc:a7:cd:6c:be:7b:aa:e6:e0:91:a1:e8:e3: 21:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:83:28:3D:B6:67:94:BF:6D:8A:A2:F8:A4:3E:CF:4E:0F:1F:C0:D5 X509v3 Authority Key Identifier: keyid:CB:99:7C:D1:4F:3A:6B:C3:44:A2:C9:38:EE:0F:DE:B5:4D:22:12:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y5l80U86a8NEosk47g_etU0iEkA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/22885a-42c8-47e2-90ad-16e8fe3c506f/1/y5l80U86a8NEosk47g_etU0iEkA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/22885a-42c8-47e2-90ad-16e8fe3c506f/1/y5l80U86a8NEosk47g_etU0iEkA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:76:b7:94:c2:52:f2:4f:f9:89:f5:72:e5:25:3d:0b:ba:fd: b9:9c:af:7d:bd:76:e3:8e:03:a3:8d:dc:ec:b7:9f:f6:36:89: 97:29:2d:ba:b1:d4:44:73:11:72:c4:42:46:ed:be:d0:c4:d7: 5c:99:0c:c7:dc:e6:0b:73:0a:46:bb:77:e8:1e:23:2a:5a:bc: 51:25:dd:59:95:4a:37:e5:9d:ab:06:6a:84:9a:a2:d3:71:4f: f8:1e:98:26:19:b8:bc:78:fd:f2:bc:5f:ae:9b:fb:c4:a3:e2: 43:3f:b7:2e:04:79:b2:01:37:ae:bd:af:21:7b:6b:3c:2c:1b: 4d:47:9b:86:1c:ae:9f:08:1f:9c:55:8e:2e:37:42:f8:ea:63: 4a:68:86:2b:a9:97:e9:92:46:df:ef:ec:fb:ad:f1:62:83:9e: 66:7f:ef:e1:ee:90:09:de:60:7c:c7:89:3c:a2:8c:39:1b:93: e3:b8:fb:12:10:da:d3:02:58:12:7d:3f:12:36:07:bc:6b:f5: 0d:e3:a2:9e:69:f8:58:56:a8:5a:dd:9c:1a:07:c8:93:79:2b: e5:39:eb:de:57:f5:7d:3d:f6:00:1f:19:52:38:ef:1e:93:a9: 93:c7:52:44:63:a2:7f:9c:f5:5f:af:8f:26:1c:15:41:ca:79: 62:18:eb:05 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydoeEwI65aWxIWMoD7dvmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiOTk3Y2QxNGYzYTZiYzM0NGEyYzkzOGVlMGZkZWI1NGQy MjEyNDAwHhcNMjUxMjA2MDcwMDQ1WhcNMjUxMjA3MDcwMDQ1WjAzMTEwLwYDVQQD EygyNzgzMjgzZGI2Njc5NGJmNmQ4YWEyZjhhNDNlY2Y0ZTBmMWZjMGQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjvwixPvPZJuvGsuyzKSk8Ro1QyhD Pz873fx/DgNLTBNMaP7sis6NNsIfokP81R7yJdRICzRvrrnpzLifuuq9DmSuBdsK jU+U9IHqAT0idzi9N2Xh7CRtnnhyoL1/1I9HefuzcEJ7aGX0Fondfs+r+EG/kVEk MKqBcsHgXxHA1/CppgoL+rOr+TvpZv5AwAc1XTjRC+cdBT2joKEJmY84IEG9h0o3 GGQToaSoqPjpigXzeFNI6b8H51e8p13Jzyyq2BorXCeBzNzss2/fTslwwxYbxxNl xVF/w2lzMKk18xvtMV4cnMP6IEgP9eOVy8lxycynzWy+e6rm4JGh6OMh5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCeDKD22Z5S/bYqi+KQ+z04PH8DVMB8GA1UdIwQY MBaAFMuZfNFPOmvDRKLJOO4P3rVNIhJAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveTVsODBVODZhOE5Fb3NrNDdnX2V0VTBpRWtBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS8yMjg4NWEtNDJjOC00N2UyLTkwYWQt MTZlOGZlM2M1MDZmLzEveTVsODBVODZhOE5Fb3NrNDdnX2V0VTBpRWtBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOS8yMjg4NWEtNDJjOC00N2UyLTkwYWQtMTZlOGZlM2M1MDZm LzEveTVsODBVODZhOE5Fb3NrNDdnX2V0VTBpRWtBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWHa3lMJS 8k/5ifVy5SU9C7r9uZyvfb12444Do43c7Lef9jaJlykturHURHMRcsRCRu2+0MTX XJkMx9zmC3MKRrt36B4jKlq8USXdWZVKN+WdqwZqhJqi03FP+B6YJhm4vHj98rxf rpv7xKPiQz+3LgR5sgE3rr2vIXtrPCwbTUebhhyunwgfnFWOLjdC+OpjSmiGK6mX 6ZJG3+/s+63xYoOeZn/v4e6QCd5gfMeJPKKMORuT47j7EhDa0wJYEn0/EjYHvGv1 DeOinmn4WFaoWt2cGgfIk3kr5Tnr3lf1fT32AB8ZUjjvHpOpk8dSRGOif5z1X6+P JhwVQcp5YhjrBQ== -----END CERTIFICATE-----Generated at Sat Dec 6 12:13:20 2025 by rpki-client