This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/6ef832-d4a3-4614-83eb-ba177c197965/1/cMySQTZlvWsN3lGpprVl5ywyHlI.mft File: cMySQTZlvWsN3lGpprVl5ywyHlI.mft (raw, json) Hash identifier: ngGZPPqWfnkFtpXcFyXFNT/YOW/4oIhkmBU52Iyh//4= Subject key identifier: B9:F4:CA:3A:FF:14:0A:0F:0A:D7:71:3F:CC:15:83:DE:BF:7A:14:94 Authority key identifier: 70:CC:92:41:36:65:BD:6B:0D:DE:51:A9:A6:B5:65:E7:2C:32:1E:52 Certificate issuer: /CN=70cc92413665bd6b0dde51a9a6b565e72c321e52 Certificate serial: 019AF50AF0258ACC1D483C41FBAF675A682E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cMySQTZlvWsN3lGpprVl5ywyHlI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/6ef832-d4a3-4614-83eb-ba177c197965/1/cMySQTZlvWsN3lGpprVl5ywyHlI.mft Manifest number: 083F Signing time: Sat 06 Dec 2025 19:02:06 +0000 Manifest this update: Sat 06 Dec 2025 19:02:06 +0000 Manifest next update: Sun 07 Dec 2025 19:02:06 +0000 Files and hashes: 1: cMySQTZlvWsN3lGpprVl5ywyHlI.crl (hash: PwTtug9vQwbKGSQZzu0Ukj8PtHLVzxSMOibWdL/NqmM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/6ef832-d4a3-4614-83eb-ba177c197965/1/cMySQTZlvWsN3lGpprVl5ywyHlI.crl rsync://rpki.ripe.net/repository/DEFAULT/40/6ef832-d4a3-4614-83eb-ba177c197965/1/cMySQTZlvWsN3lGpprVl5ywyHlI.mft rsync://rpki.ripe.net/repository/DEFAULT/cMySQTZlvWsN3lGpprVl5ywyHlI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:02:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0a:f0:25:8a:cc:1d:48:3c:41:fb:af:67:5a:68:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70cc92413665bd6b0dde51a9a6b565e72c321e52 Validity Not Before: Dec 6 19:02:06 2025 GMT Not After : Dec 7 19:02:06 2025 GMT Subject: CN=b9f4ca3aff140a0f0ad7713fcc1583debf7a1494 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:a9:5f:a3:3d:d7:20:db:f2:dc:05:25:bd:cf: 19:7d:27:2b:18:e3:45:e5:9d:da:1f:ba:63:0f:7e: 3a:d6:94:15:e6:ec:da:2c:c4:5c:ad:74:13:b9:ed: ce:36:49:03:0a:b4:10:79:9c:82:dc:74:e4:82:09: 1c:e0:f8:79:72:5c:a5:c0:c6:00:52:22:4c:02:41: dd:26:dc:b4:90:b0:86:86:fb:e4:c9:b3:21:16:2a: dc:58:f8:46:e4:e1:56:f8:15:ef:4b:03:99:bd:22: d9:0c:71:5e:3c:41:4a:1f:15:27:28:6c:35:c6:1c: eb:dd:54:f0:0d:d0:22:9e:c3:3c:7c:29:e9:7e:c9: 06:be:2d:16:e7:84:a2:05:51:19:00:8a:3b:3c:75: dd:24:cf:33:46:b6:82:e5:06:ba:5e:a7:aa:de:14: ea:d3:24:2a:5d:7e:db:50:5f:c3:4b:8d:12:63:85: b5:85:7e:aa:46:49:6c:90:8c:af:24:04:1a:41:27: dd:9a:7f:ce:ad:5e:01:80:e3:19:25:b0:88:6a:eb: 95:8d:a5:f9:00:fe:41:bc:76:50:24:f5:32:7a:1a: 15:ab:9c:91:52:29:80:27:0f:01:bc:1d:ca:04:ec: f6:51:37:bf:00:f0:de:41:1b:fe:3d:67:3b:9a:37: c2:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:F4:CA:3A:FF:14:0A:0F:0A:D7:71:3F:CC:15:83:DE:BF:7A:14:94 X509v3 Authority Key Identifier: keyid:70:CC:92:41:36:65:BD:6B:0D:DE:51:A9:A6:B5:65:E7:2C:32:1E:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMySQTZlvWsN3lGpprVl5ywyHlI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/6ef832-d4a3-4614-83eb-ba177c197965/1/cMySQTZlvWsN3lGpprVl5ywyHlI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/6ef832-d4a3-4614-83eb-ba177c197965/1/cMySQTZlvWsN3lGpprVl5ywyHlI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:8d:05:0d:09:e5:29:96:9f:db:06:1f:aa:ef:3a:38:7a:a0: fd:5f:59:90:aa:f5:b0:3b:1e:1f:0d:a7:b2:20:ed:29:aa:57: 53:7c:c5:6a:47:40:ea:87:c6:0f:77:e7:26:89:7f:81:4a:90: a3:35:ec:f3:56:53:89:35:82:b3:0f:8c:12:68:02:60:32:ce: 39:0f:ac:92:31:51:a8:8f:46:a0:7a:48:08:01:3e:72:35:1f: 2d:ee:9d:3b:52:98:0b:29:c5:1b:12:ff:cb:12:e6:5e:13:1a: 7f:03:9d:5f:83:68:0d:9c:b7:ce:47:97:4f:74:ce:68:57:1e: f6:d5:bc:9a:d7:7c:5a:e8:43:e7:f1:65:08:d9:06:a7:20:e8: 80:d4:0f:43:e1:e2:99:aa:7d:19:58:8f:ac:59:44:43:e6:b9: 89:e3:c5:66:18:de:58:ae:15:47:78:a1:3e:7d:09:6a:5f:77: fc:85:c3:af:e7:66:77:c9:a7:49:8f:7b:c0:83:3e:10:56:21: 82:a2:a4:b2:fe:f2:76:ad:fe:87:ea:fe:f8:34:89:e2:3d:55: 4a:63:a1:fc:5b:ff:37:3b:06:0f:03:dc:f4:89:33:82:2a:7a: c0:a8:36:1c:c9:82:e9:07:e3:31:8b:0d:96:17:19:05:7c:d8: ec:1d:ed:ca -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1CvAliswdSDxB+69nWmguMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwY2M5MjQxMzY2NWJkNmIwZGRlNTFhOWE2YjU2NWU3MmMz MjFlNTIwHhcNMjUxMjA2MTkwMjA2WhcNMjUxMjA3MTkwMjA2WjAzMTEwLwYDVQQD EyhiOWY0Y2EzYWZmMTQwYTBmMGFkNzcxM2ZjYzE1ODNkZWJmN2ExNDk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuKlfoz3XINvy3AUlvc8ZfScrGONF 5Z3aH7pjD3461pQV5uzaLMRcrXQTue3ONkkDCrQQeZyC3HTkggkc4Ph5clylwMYA UiJMAkHdJty0kLCGhvvkybMhFircWPhG5OFW+BXvSwOZvSLZDHFePEFKHxUnKGw1 xhzr3VTwDdAinsM8fCnpfskGvi0W54SiBVEZAIo7PHXdJM8zRraC5Qa6Xqeq3hTq 0yQqXX7bUF/DS40SY4W1hX6qRklskIyvJAQaQSfdmn/OrV4BgOMZJbCIauuVjaX5 AP5BvHZQJPUyehoVq5yRUimAJw8BvB3KBOz2UTe/APDeQRv+PWc7mjfCDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLn0yjr/FAoPCtdxP8wVg96/ehSUMB8GA1UdIwQY MBaAFHDMkkE2Zb1rDd5Rqaa1ZecsMh5SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY015U1FUWmx2V3NOM2xHcHByVmw1eXd5SGxJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC82ZWY4MzItZDRhMy00NjE0LTgzZWIt YmExNzdjMTk3OTY1LzEvY015U1FUWmx2V3NOM2xHcHByVmw1eXd5SGxJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC82ZWY4MzItZDRhMy00NjE0LTgzZWItYmExNzdjMTk3OTY1 LzEvY015U1FUWmx2V3NOM2xHcHByVmw1eXd5SGxJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJY0FDQnl KZaf2wYfqu86OHqg/V9ZkKr1sDseHw2nsiDtKapXU3zFakdA6ofGD3fnJol/gUqQ ozXs81ZTiTWCsw+MEmgCYDLOOQ+skjFRqI9GoHpICAE+cjUfLe6dO1KYCynFGxL/ yxLmXhMafwOdX4NoDZy3zkeXT3TOaFce9tW8mtd8WuhD5/FlCNkGpyDogNQPQ+Hi map9GViPrFlEQ+a5iePFZhjeWK4VR3ihPn0Jal93/IXDr+dmd8mnSY97wIM+EFYh gqKksv7ydq3+h+r++DSJ4j1VSmOh/Fv/NzsGDwPc9Ikzgip6wKg2HMmC6QfjMYsN lhcZBXzY7B3tyg== -----END CERTIFICATE-----Generated at Sun Dec 7 04:43:22 2025 by rpki-client