This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/22885a-42c8-47e2-90ad-16e8fe3c506f/1/y5l80U86a8NEosk47g_etU0iEkA.mft File: y5l80U86a8NEosk47g_etU0iEkA.mft (raw, json) Hash identifier: nQ8gDclciDImGuE/G6urzpjuG6EUVbQwLz8TR//rmpI= Subject key identifier: 6E:AD:4C:C7:44:B1:09:45:31:AA:4E:BF:82:3A:57:22:02:42:DD:DC Authority key identifier: CB:99:7C:D1:4F:3A:6B:C3:44:A2:C9:38:EE:0F:DE:B5:4D:22:12:40 Certificate issuer: /CN=cb997cd14f3a6bc344a2c938ee0fdeb54d221240 Certificate serial: 019B360E221D212ABDB973E59F6825734394 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y5l80U86a8NEosk47g_etU0iEkA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/22885a-42c8-47e2-90ad-16e8fe3c506f/1/y5l80U86a8NEosk47g_etU0iEkA.mft Manifest number: 0558 Signing time: Fri 19 Dec 2025 10:00:54 +0000 Manifest this update: Fri 19 Dec 2025 10:00:54 +0000 Manifest next update: Sat 20 Dec 2025 10:00:54 +0000 Files and hashes: 1: 9Aeacxzy-u4aevKcCQ9nXd_FU7Q.roa (hash: vKC+rREuRemLdV33ThPXHvcW71bg+LHpzDOvqZUoqy4=) 2: y5l80U86a8NEosk47g_etU0iEkA.crl (hash: llTzI0LthI56Sdkh1FCRoRZeawpRidAlmGs1o+wnUOw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/22885a-42c8-47e2-90ad-16e8fe3c506f/1/y5l80U86a8NEosk47g_etU0iEkA.crl rsync://rpki.ripe.net/repository/DEFAULT/f9/22885a-42c8-47e2-90ad-16e8fe3c506f/1/y5l80U86a8NEosk47g_etU0iEkA.mft rsync://rpki.ripe.net/repository/DEFAULT/y5l80U86a8NEosk47g_etU0iEkA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:0e:22:1d:21:2a:bd:b9:73:e5:9f:68:25:73:43:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb997cd14f3a6bc344a2c938ee0fdeb54d221240 Validity Not Before: Dec 19 10:00:54 2025 GMT Not After : Dec 20 10:00:54 2025 GMT Subject: CN=6ead4cc744b1094531aa4ebf823a57220242dddc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:c6:29:2a:eb:a7:60:62:78:87:7b:bd:eb:55: 06:f7:3a:89:21:90:03:90:eb:60:58:be:e0:de:e2: 8b:b9:a0:69:ae:c9:c6:e0:94:e2:85:cb:75:ee:20: a7:91:b5:cf:14:79:d1:7f:77:1f:10:f0:d0:fe:5f: 47:21:07:24:37:30:b7:04:c6:a2:15:2f:f4:45:7c: d0:11:d2:9e:23:d6:99:ae:33:ee:40:63:02:c6:4c: a8:50:61:1d:0a:e5:61:b3:d5:b7:e5:dc:67:3e:56: 0d:fe:b5:0a:f5:cb:ee:2f:d0:45:f1:50:32:11:07: 3f:9c:b7:7c:eb:fb:a3:b3:cb:c2:05:eb:5f:f1:3d: bf:04:15:9b:3a:e0:57:61:bf:f6:e3:19:df:b9:d3: 08:00:58:ff:90:5f:7a:95:d4:7c:3a:c0:15:60:ee: 7e:f8:4a:f0:1b:17:57:92:bc:14:94:a0:c6:89:02: a9:e0:61:9f:1f:a4:41:64:ef:b5:67:23:b3:18:b1: 03:54:cf:4a:2f:60:0d:34:9c:37:97:b4:d0:65:d3: 8b:ff:23:4b:8e:00:30:65:c7:64:07:3c:80:cc:3a: 75:24:ef:6c:16:62:1c:31:62:54:e8:a5:47:d6:9f: 38:75:2b:c4:0c:59:4a:31:56:19:a6:ef:ca:7f:b9: 21:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:AD:4C:C7:44:B1:09:45:31:AA:4E:BF:82:3A:57:22:02:42:DD:DC X509v3 Authority Key Identifier: keyid:CB:99:7C:D1:4F:3A:6B:C3:44:A2:C9:38:EE:0F:DE:B5:4D:22:12:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y5l80U86a8NEosk47g_etU0iEkA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/22885a-42c8-47e2-90ad-16e8fe3c506f/1/y5l80U86a8NEosk47g_etU0iEkA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/22885a-42c8-47e2-90ad-16e8fe3c506f/1/y5l80U86a8NEosk47g_etU0iEkA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:fe:13:a4:af:9d:07:1d:a0:b5:d4:50:34:77:dc:81:d0:7d: 4d:83:d2:12:95:15:fa:20:4b:cf:46:72:26:e9:f6:bc:58:ea: 02:db:79:73:30:b7:0a:8d:94:d1:0a:bf:83:9f:dd:da:54:57: f3:44:3f:ca:48:8a:36:3b:6d:dc:4a:6d:c0:93:6d:cf:d8:06: 5f:b3:f5:82:a3:58:e4:bc:8b:bd:26:1c:e4:8d:d2:49:a2:ea: fa:9d:43:9b:99:c2:aa:4d:91:dd:64:a4:4c:42:c7:96:e5:97: 28:38:e5:b2:32:c5:cf:f0:7a:2a:70:5e:b6:c9:a4:f4:ed:5e: f4:30:e9:c8:4e:90:54:ab:08:2b:c4:d8:b8:90:0c:1f:42:2f: 16:9a:39:41:1a:0e:ba:97:4d:70:8f:36:4e:ee:1d:85:f5:6b: 21:55:83:ce:b4:cc:87:9d:54:6d:94:bd:ef:17:c2:9f:98:d5: 38:cf:38:a5:fb:e4:dc:06:8d:f6:2c:28:01:9d:6a:52:e8:97: fa:c7:c1:ac:aa:3f:a6:43:6f:6d:a9:3c:f7:c4:bd:35:ad:97: 7c:d2:5d:f8:90:41:10:6f:b2:b8:7c:bb:07:bd:57:5d:e6:f6: 78:d0:88:2e:69:84:2f:9a:d4:55:01:da:b0:6b:c5:60:2c:b7: 05:ab:66:21 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs2DiIdISq9uXPln2glc0OUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiOTk3Y2QxNGYzYTZiYzM0NGEyYzkzOGVlMGZkZWI1NGQy MjEyNDAwHhcNMjUxMjE5MTAwMDU0WhcNMjUxMjIwMTAwMDU0WjAzMTEwLwYDVQQD Eyg2ZWFkNGNjNzQ0YjEwOTQ1MzFhYTRlYmY4MjNhNTcyMjAyNDJkZGRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAysYpKuunYGJ4h3u961UG9zqJIZAD kOtgWL7g3uKLuaBprsnG4JTihct17iCnkbXPFHnRf3cfEPDQ/l9HIQckNzC3BMai FS/0RXzQEdKeI9aZrjPuQGMCxkyoUGEdCuVhs9W35dxnPlYN/rUK9cvuL9BF8VAy EQc/nLd86/ujs8vCBetf8T2/BBWbOuBXYb/24xnfudMIAFj/kF96ldR8OsAVYO5+ +ErwGxdXkrwUlKDGiQKp4GGfH6RBZO+1ZyOzGLEDVM9KL2ANNJw3l7TQZdOL/yNL jgAwZcdkBzyAzDp1JO9sFmIcMWJU6KVH1p84dSvEDFlKMVYZpu/Kf7khWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG6tTMdEsQlFMapOv4I6VyICQt3cMB8GA1UdIwQY MBaAFMuZfNFPOmvDRKLJOO4P3rVNIhJAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveTVsODBVODZhOE5Fb3NrNDdnX2V0VTBpRWtBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS8yMjg4NWEtNDJjOC00N2UyLTkwYWQt MTZlOGZlM2M1MDZmLzEveTVsODBVODZhOE5Fb3NrNDdnX2V0VTBpRWtBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOS8yMjg4NWEtNDJjOC00N2UyLTkwYWQtMTZlOGZlM2M1MDZm LzEveTVsODBVODZhOE5Fb3NrNDdnX2V0VTBpRWtBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKf4TpK+d Bx2gtdRQNHfcgdB9TYPSEpUV+iBLz0ZyJun2vFjqAtt5czC3Co2U0Qq/g5/d2lRX 80Q/ykiKNjtt3EptwJNtz9gGX7P1gqNY5LyLvSYc5I3SSaLq+p1Dm5nCqk2R3WSk TELHluWXKDjlsjLFz/B6KnBetsmk9O1e9DDpyE6QVKsIK8TYuJAMH0IvFpo5QRoO updNcI82Tu4dhfVrIVWDzrTMh51UbZS97xfCn5jVOM84pfvk3AaN9iwoAZ1qUuiX +sfBrKo/pkNvbak898S9Na2XfNJd+JBBEG+yuHy7B71XXeb2eNCILmmEL5rUVQHa sGvFYCy3BatmIQ== -----END CERTIFICATE-----Generated at Fri Dec 19 14:34:49 2025 by rpki-client