This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/726a52-5c73-4905-a19d-9f72f8dec468/1/cYTIBdTlPCoTLHOcTjdSr8Na6ZU.mft File: cYTIBdTlPCoTLHOcTjdSr8Na6ZU.mft (raw, json) Hash identifier: c9+qnqvWxUbzn3B3PkqvvtC/JLTuN/hY7cWgeX7y1xc= Subject key identifier: D3:FF:57:A2:11:B0:91:93:56:AA:E8:E2:D6:5E:25:42:5B:9C:32:EC Authority key identifier: 71:84:C8:05:D4:E5:3C:2A:13:2C:73:9C:4E:37:52:AF:C3:5A:E9:95 Certificate issuer: /CN=7184c805d4e53c2a132c739c4e3752afc35ae995 Certificate serial: 019AF1D23F76B7A2484F3CF8EA05F2FF790F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cYTIBdTlPCoTLHOcTjdSr8Na6ZU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/726a52-5c73-4905-a19d-9f72f8dec468/1/cYTIBdTlPCoTLHOcTjdSr8Na6ZU.mft Manifest number: 0A2C Signing time: Sat 06 Dec 2025 04:01:19 +0000 Manifest this update: Sat 06 Dec 2025 04:01:19 +0000 Manifest next update: Sun 07 Dec 2025 04:01:19 +0000 Files and hashes: 1: cYTIBdTlPCoTLHOcTjdSr8Na6ZU.crl (hash: w3uBr2SpuZSRDk+/kfoa8zBvY3yOTncc8iG6oYvEzG0=) 2: hyeaa7WHUt2Rcq_9qyU3ynO8FJA.roa (hash: 1lxOMkF/m/0MqdFiTX81zywF3SRcX+JuIQEJSNJChMU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/726a52-5c73-4905-a19d-9f72f8dec468/1/cYTIBdTlPCoTLHOcTjdSr8Na6ZU.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/726a52-5c73-4905-a19d-9f72f8dec468/1/cYTIBdTlPCoTLHOcTjdSr8Na6ZU.mft rsync://rpki.ripe.net/repository/DEFAULT/cYTIBdTlPCoTLHOcTjdSr8Na6ZU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:3f:76:b7:a2:48:4f:3c:f8:ea:05:f2:ff:79:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7184c805d4e53c2a132c739c4e3752afc35ae995 Validity Not Before: Dec 6 04:01:19 2025 GMT Not After : Dec 7 04:01:19 2025 GMT Subject: CN=d3ff57a211b0919356aae8e2d65e25425b9c32ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:85:0f:04:c7:3d:f7:19:d8:ed:8e:4e:e7:ea: 68:b0:14:45:0b:e8:95:dd:e8:5a:a2:2e:28:a4:30: 9d:d3:11:0b:7f:ac:21:cb:d9:47:23:a7:68:4f:ca: 47:0b:03:46:21:69:7f:e3:02:04:64:3f:35:f1:3f: 0b:d0:2c:74:0b:0f:37:df:a4:1a:23:53:10:ac:b3: 8c:dd:d4:c9:03:2f:76:27:47:19:54:80:43:11:37: de:48:35:04:e3:84:fe:41:e4:4b:11:3f:eb:71:9b: 73:8c:ee:99:b8:a8:f5:67:0e:dc:8a:5f:7c:6c:3b: 05:f8:28:82:93:69:ac:c4:29:26:72:ea:66:7a:a1: f7:c6:88:ca:e4:db:d2:5a:d9:68:df:32:c9:b5:a5: 7d:4d:c1:cb:90:db:42:cd:dd:ab:f4:11:bb:ee:15: 51:20:91:a9:77:44:20:5e:70:84:c7:5f:81:2a:cc: de:ce:5b:2b:02:5d:ef:5f:8c:0e:11:58:71:54:c3: 62:7f:2f:e0:bc:b8:21:62:19:7c:d8:a3:ad:ec:a5: 76:c0:4e:d0:6e:cc:92:b0:87:e1:43:32:2e:f2:5d: 07:a8:04:2e:e3:4e:fe:5b:e9:c0:f6:fe:f9:07:93: 85:ab:e4:3a:3b:c8:b4:9d:d1:a1:3e:c1:0d:1e:e5: 12:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:FF:57:A2:11:B0:91:93:56:AA:E8:E2:D6:5E:25:42:5B:9C:32:EC X509v3 Authority Key Identifier: keyid:71:84:C8:05:D4:E5:3C:2A:13:2C:73:9C:4E:37:52:AF:C3:5A:E9:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cYTIBdTlPCoTLHOcTjdSr8Na6ZU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/726a52-5c73-4905-a19d-9f72f8dec468/1/cYTIBdTlPCoTLHOcTjdSr8Na6ZU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/726a52-5c73-4905-a19d-9f72f8dec468/1/cYTIBdTlPCoTLHOcTjdSr8Na6ZU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:b9:04:1a:b8:66:e3:85:6d:9e:9f:c1:84:a2:2a:77:3b:30: e3:c1:80:b8:17:71:e4:52:e0:d8:29:20:04:d5:cc:0a:57:ca: c4:12:34:dc:ab:cb:24:4b:ae:3f:07:47:06:ef:f5:e8:fd:94: 28:6a:8f:25:1f:77:6f:14:55:0f:eb:29:87:a1:1d:b5:69:af: 0b:93:29:f5:e1:ff:69:d3:e1:ab:bb:0e:24:5c:10:4c:fc:94: a8:16:c7:99:96:43:55:55:93:47:10:42:3e:26:e3:76:6a:3e: 7a:76:3b:df:af:f4:38:8f:4c:b5:94:d3:6c:b6:ba:1a:64:86: 44:6f:08:c5:59:95:82:af:a2:e9:99:cd:18:43:e7:63:e7:a6: 8f:9f:82:a2:ab:23:cc:2a:0b:4b:b5:9e:37:05:0e:4b:87:e6: 05:29:ff:9c:f6:d6:30:c4:6b:9f:66:4e:26:5b:5e:66:5a:0f: 6a:3d:97:6b:5b:a1:92:29:2e:d0:99:0a:0d:5f:f8:80:32:78: 01:e0:59:5f:c0:a3:a1:d5:05:66:aa:63:37:0a:d0:7a:13:1b: e7:85:31:15:6c:a8:a7:33:ba:02:d0:7e:b9:7f:6c:09:d3:18: cb:72:23:e3:c4:06:52:58:fc:3c:37:3d:f0:a4:34:34:87:ac: 4a:2a:be:b9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0j92t6JITzz46gXy/3kPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcxODRjODA1ZDRlNTNjMmExMzJjNzM5YzRlMzc1MmFmYzM1 YWU5OTUwHhcNMjUxMjA2MDQwMTE5WhcNMjUxMjA3MDQwMTE5WjAzMTEwLwYDVQQD EyhkM2ZmNTdhMjExYjA5MTkzNTZhYWU4ZTJkNjVlMjU0MjViOWMzMmVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApYUPBMc99xnY7Y5O5+posBRFC+iV 3ehaoi4opDCd0xELf6why9lHI6doT8pHCwNGIWl/4wIEZD818T8L0Cx0Cw8336Qa I1MQrLOM3dTJAy92J0cZVIBDETfeSDUE44T+QeRLET/rcZtzjO6ZuKj1Zw7cil98 bDsF+CiCk2msxCkmcupmeqH3xojK5NvSWtlo3zLJtaV9TcHLkNtCzd2r9BG77hVR IJGpd0QgXnCEx1+BKszezlsrAl3vX4wOEVhxVMNify/gvLghYhl82KOt7KV2wE7Q bsySsIfhQzIu8l0HqAQu407+W+nA9v75B5OFq+Q6O8i0ndGhPsENHuUSYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNP/V6IRsJGTVqro4tZeJUJbnDLsMB8GA1UdIwQY MBaAFHGEyAXU5TwqEyxznE43Uq/DWumVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY1lUSUJkVGxQQ29UTEhPY1RqZFNyOE5hNlpVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC83MjZhNTItNWM3My00OTA1LWExOWQt OWY3MmY4ZGVjNDY4LzEvY1lUSUJkVGxQQ29UTEhPY1RqZFNyOE5hNlpVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC83MjZhNTItNWM3My00OTA1LWExOWQtOWY3MmY4ZGVjNDY4 LzEvY1lUSUJkVGxQQ29UTEhPY1RqZFNyOE5hNlpVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD7kEGrhm 44Vtnp/BhKIqdzsw48GAuBdx5FLg2CkgBNXMClfKxBI03KvLJEuuPwdHBu/16P2U KGqPJR93bxRVD+sph6EdtWmvC5Mp9eH/adPhq7sOJFwQTPyUqBbHmZZDVVWTRxBC Pibjdmo+enY736/0OI9MtZTTbLa6GmSGRG8IxVmVgq+i6ZnNGEPnY+emj5+Coqsj zCoLS7WeNwUOS4fmBSn/nPbWMMRrn2ZOJlteZloPaj2Xa1uhkiku0JkKDV/4gDJ4 AeBZX8CjodUFZqpjNwrQehMb54UxFWyopzO6AtB+uX9sCdMYy3Ij48QGUlj8PDc9 8KQ0NIesSiq+uQ== -----END CERTIFICATE-----Generated at Sat Dec 6 12:12:57 2025 by rpki-client