This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/ea37f1-ce1a-4816-bcb6-4412defede73/1/y4P7_Bds1I6-Lyzen0wB7SU7uy0.mft File: y4P7_Bds1I6-Lyzen0wB7SU7uy0.mft (raw, json) Hash identifier: zLgwG9woGKUzoUKDu5C0Sa5e/uaU0Y4r3TJgGdjUOn8= Subject key identifier: 08:3F:35:97:D6:6D:A6:BB:E0:44:9E:DB:40:91:C8:77:12:2B:21:43 Authority key identifier: CB:83:FB:FC:17:6C:D4:8E:BE:2F:2C:DE:9F:4C:01:ED:25:3B:BB:2D Certificate issuer: /CN=cb83fbfc176cd48ebe2f2cde9f4c01ed253bbb2d Certificate serial: 019AF31BFC0725E9117E9DA778C770A25DA9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y4P7_Bds1I6-Lyzen0wB7SU7uy0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/ea37f1-ce1a-4816-bcb6-4412defede73/1/y4P7_Bds1I6-Lyzen0wB7SU7uy0.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 10:01:28 +0000 Manifest this update: Sat 06 Dec 2025 10:01:28 +0000 Manifest next update: Sun 07 Dec 2025 10:01:28 +0000 Files and hashes: 1: y4P7_Bds1I6-Lyzen0wB7SU7uy0.crl (hash: a0SGhVF2QEvXDKz9ULPPCKBL9hd3FrAPxtLb78oSzZM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/ea37f1-ce1a-4816-bcb6-4412defede73/1/y4P7_Bds1I6-Lyzen0wB7SU7uy0.crl rsync://rpki.ripe.net/repository/DEFAULT/08/ea37f1-ce1a-4816-bcb6-4412defede73/1/y4P7_Bds1I6-Lyzen0wB7SU7uy0.mft rsync://rpki.ripe.net/repository/DEFAULT/y4P7_Bds1I6-Lyzen0wB7SU7uy0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:fc:07:25:e9:11:7e:9d:a7:78:c7:70:a2:5d:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb83fbfc176cd48ebe2f2cde9f4c01ed253bbb2d Validity Not Before: Dec 6 10:01:28 2025 GMT Not After : Dec 7 10:01:28 2025 GMT Subject: CN=083f3597d66da6bbe0449edb4091c877122b2143 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:e8:7d:76:29:cd:b9:7d:a9:ba:0e:02:72:42: c1:04:e6:f5:6c:a6:12:33:33:13:ac:96:39:d1:dc: 33:c9:ad:b6:52:8a:1b:23:fb:e4:3c:ff:a4:33:2a: 45:b2:4f:c6:a0:8b:9f:ad:93:33:0a:c2:0e:6a:24: f6:08:ca:ba:23:21:68:96:7c:08:f6:a2:3d:59:a2: d2:d1:af:48:24:01:6a:df:26:60:e7:51:65:3d:9f: f4:4e:6a:dc:f8:d3:52:91:14:01:bd:19:cc:25:75: f0:89:c5:58:ca:49:f5:c0:65:64:c7:8a:6f:25:70: 2d:b8:eb:ff:62:de:77:a6:13:ad:d1:e7:d2:50:06: 1e:80:a1:d4:82:88:d3:2d:3e:4b:88:9c:56:62:0e: 39:45:e0:dc:9f:34:a2:d1:03:08:d9:03:d1:aa:92: ef:bb:aa:0c:dd:92:47:91:19:13:d3:5a:aa:16:f6: 1f:f4:dc:de:62:59:0c:b1:9d:48:67:03:5d:62:03: cc:9d:79:d4:2a:78:64:e8:a6:6f:e5:88:e0:9b:79: 14:72:09:6d:4f:2d:7e:7e:03:9e:1d:4d:3d:14:9b: 86:3b:20:92:65:f2:40:b7:48:0d:5b:c9:f7:a1:c5: 36:3b:22:05:fb:54:9c:ec:a6:fd:de:95:9f:1f:26: 41:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:3F:35:97:D6:6D:A6:BB:E0:44:9E:DB:40:91:C8:77:12:2B:21:43 X509v3 Authority Key Identifier: keyid:CB:83:FB:FC:17:6C:D4:8E:BE:2F:2C:DE:9F:4C:01:ED:25:3B:BB:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y4P7_Bds1I6-Lyzen0wB7SU7uy0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ea37f1-ce1a-4816-bcb6-4412defede73/1/y4P7_Bds1I6-Lyzen0wB7SU7uy0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ea37f1-ce1a-4816-bcb6-4412defede73/1/y4P7_Bds1I6-Lyzen0wB7SU7uy0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:6e:51:1d:fd:82:c2:b8:69:65:0f:33:e9:d2:02:aa:4d:72: 33:ce:b9:87:a1:1a:85:66:e6:58:cb:16:78:5c:19:6c:cf:92: b3:29:d5:18:37:bf:67:83:c4:39:39:4c:0b:06:42:e0:59:a2: 1f:25:3f:3f:25:03:95:da:e5:13:27:29:a9:8d:a5:ed:b4:0b: 28:dc:44:39:d1:9b:8d:5e:5d:f2:e7:99:de:59:8b:48:a0:54: 5e:1e:d8:8a:3f:92:d8:67:91:dd:14:5d:c6:10:9b:21:57:51: e1:01:08:63:f9:4d:ed:52:8c:f9:18:d2:b1:b9:c1:82:8b:4b: fc:18:39:e0:5b:d7:d7:33:9c:14:67:d3:c0:72:4a:1b:fe:58: 38:a6:7f:e2:24:9b:12:f5:60:78:be:44:ef:18:a7:1e:72:90: 0c:a0:da:3a:c6:95:76:40:e1:68:eb:3c:5c:05:b2:ac:7f:24: bc:12:a2:b6:83:a2:91:fb:df:92:4f:58:4e:7b:51:3b:2a:8d: 71:4d:6b:1f:74:dc:6b:d3:2f:22:5e:bc:d7:75:dd:09:7b:27: 57:17:4d:46:50:d2:77:de:cb:86:c9:2a:b0:dd:b0:ba:92:de: d2:97:4d:e2:a7:18:59:db:ca:85:5b:da:8a:20:41:5e:17:dc: de:fd:30:23 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG/wHJekRfp2neMdwol2pMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiODNmYmZjMTc2Y2Q0OGViZTJmMmNkZTlmNGMwMWVkMjUz YmJiMmQwHhcNMjUxMjA2MTAwMTI4WhcNMjUxMjA3MTAwMTI4WjAzMTEwLwYDVQQD EygwODNmMzU5N2Q2NmRhNmJiZTA0NDllZGI0MDkxYzg3NzEyMmIyMTQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7+h9dinNuX2pug4CckLBBOb1bKYS MzMTrJY50dwzya22UoobI/vkPP+kMypFsk/GoIufrZMzCsIOaiT2CMq6IyFolnwI 9qI9WaLS0a9IJAFq3yZg51FlPZ/0Tmrc+NNSkRQBvRnMJXXwicVYykn1wGVkx4pv JXAtuOv/Yt53phOt0efSUAYegKHUgojTLT5LiJxWYg45ReDcnzSi0QMI2QPRqpLv u6oM3ZJHkRkT01qqFvYf9NzeYlkMsZ1IZwNdYgPMnXnUKnhk6KZv5Yjgm3kUcglt Ty1+fgOeHU09FJuGOyCSZfJAt0gNW8n3ocU2OyIF+1Sc7Kb93pWfHyZB+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAg/NZfWbaa74ESe20CRyHcSKyFDMB8GA1UdIwQY MBaAFMuD+/wXbNSOvi8s3p9MAe0lO7stMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveTRQN19CZHMxSTYtTHl6ZW4wd0I3U1U3dXkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9lYTM3ZjEtY2UxYS00ODE2LWJjYjYt NDQxMmRlZmVkZTczLzEveTRQN19CZHMxSTYtTHl6ZW4wd0I3U1U3dXkwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC9lYTM3ZjEtY2UxYS00ODE2LWJjYjYtNDQxMmRlZmVkZTcz LzEveTRQN19CZHMxSTYtTHl6ZW4wd0I3U1U3dXkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAam5RHf2C wrhpZQ8z6dICqk1yM865h6EahWbmWMsWeFwZbM+SsynVGDe/Z4PEOTlMCwZC4Fmi HyU/PyUDldrlEycpqY2l7bQLKNxEOdGbjV5d8ueZ3lmLSKBUXh7Yij+S2GeR3RRd xhCbIVdR4QEIY/lN7VKM+RjSsbnBgotL/Bg54FvX1zOcFGfTwHJKG/5YOKZ/4iSb EvVgeL5E7xinHnKQDKDaOsaVdkDhaOs8XAWyrH8kvBKitoOikfvfkk9YTntROyqN cU1rH3Tca9MvIl6813XdCXsnVxdNRlDSd97LhskqsN2wupLe0pdN4qcYWdvKhVva iiBBXhfc3v0wIw== -----END CERTIFICATE-----Generated at Sat Dec 6 15:37:29 2025 by rpki-client