This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/3a9cbe-496d-45fa-9b6f-bf93303ac41c/1/mylnPtSjkR9z1Le94bHnP7l4Nak.mft File: mylnPtSjkR9z1Le94bHnP7l4Nak.mft (raw, json) Hash identifier: y05NjAvElsCqAwrO8O+H9qr1zpffGOICtfXtkP1xKLc= Subject key identifier: BD:FC:85:A6:A3:BC:A3:79:B2:C8:72:F9:D3:22:F6:33:EC:AD:0D:ED Authority key identifier: 9B:29:67:3E:D4:A3:91:1F:73:D4:B7:BD:E1:B1:E7:3F:B9:78:35:A9 Certificate issuer: /CN=9b29673ed4a3911f73d4b7bde1b1e73fb97835a9 Certificate serial: 019AF19B2D5B94D04EB4F93A6F29D695C1E6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mylnPtSjkR9z1Le94bHnP7l4Nak.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/3a9cbe-496d-45fa-9b6f-bf93303ac41c/1/mylnPtSjkR9z1Le94bHnP7l4Nak.mft Manifest number: 8C Signing time: Sat 06 Dec 2025 03:01:09 +0000 Manifest this update: Sat 06 Dec 2025 03:01:09 +0000 Manifest next update: Sun 07 Dec 2025 03:01:09 +0000 Files and hashes: 1: mylnPtSjkR9z1Le94bHnP7l4Nak.crl (hash: 9pl4fmRCgs4bCOooAeDnR1y8wYdx+T3vwAm4oEh/J8w=) 2: pmhToACE6Z904v0QaJlEdW18_ig.roa (hash: MKUwU4Rq//uzJTt/a+BtsfAk5/82XATI4rUdtUbh/C0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/3a9cbe-496d-45fa-9b6f-bf93303ac41c/1/mylnPtSjkR9z1Le94bHnP7l4Nak.crl rsync://rpki.ripe.net/repository/DEFAULT/43/3a9cbe-496d-45fa-9b6f-bf93303ac41c/1/mylnPtSjkR9z1Le94bHnP7l4Nak.mft rsync://rpki.ripe.net/repository/DEFAULT/mylnPtSjkR9z1Le94bHnP7l4Nak.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:2d:5b:94:d0:4e:b4:f9:3a:6f:29:d6:95:c1:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9b29673ed4a3911f73d4b7bde1b1e73fb97835a9 Validity Not Before: Dec 6 03:01:09 2025 GMT Not After : Dec 7 03:01:09 2025 GMT Subject: CN=bdfc85a6a3bca379b2c872f9d322f633ecad0ded Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:71:12:a9:57:83:49:a2:7b:d7:42:35:3a:90: 06:cf:69:9d:14:08:d2:d0:49:89:0d:9a:15:8f:57: e8:2d:20:d9:61:15:5a:ee:b6:37:46:2e:ae:d4:5a: 01:e5:63:4a:c5:77:b7:1e:05:9e:43:fb:93:89:e0: 05:0d:97:7f:06:a6:65:ae:08:ed:ee:72:e6:2f:d6: 1e:1b:d8:d1:81:8a:d0:d0:72:4d:f4:9d:b2:f7:4e: 11:80:96:1c:16:d5:88:aa:a0:ba:11:d3:52:37:2f: 27:48:70:97:33:69:45:b9:57:6d:07:35:a8:10:45: 93:9a:38:36:53:c9:97:76:36:e1:27:94:8d:dc:41: 34:1c:0b:58:95:a5:91:ee:55:5f:d4:1e:7f:db:f7: d8:29:19:3e:10:b8:f6:cf:e7:6c:78:9e:5e:44:80: 44:5a:e5:08:47:b1:09:41:08:ab:d6:82:27:fd:fa: df:10:f3:26:c4:b4:5c:0a:77:e2:04:1f:81:a9:7e: 3d:8c:e5:2c:73:a5:89:7a:cd:d7:ab:01:d3:c2:b9: 39:63:39:3c:37:b6:f4:d3:bc:2b:00:14:f1:15:cc: ba:4d:53:59:57:0b:d1:a2:bd:5d:ab:01:4f:31:26: 7f:ca:64:44:11:de:03:0e:ec:54:29:a0:f6:b5:7f: 3b:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:FC:85:A6:A3:BC:A3:79:B2:C8:72:F9:D3:22:F6:33:EC:AD:0D:ED X509v3 Authority Key Identifier: keyid:9B:29:67:3E:D4:A3:91:1F:73:D4:B7:BD:E1:B1:E7:3F:B9:78:35:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mylnPtSjkR9z1Le94bHnP7l4Nak.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/3a9cbe-496d-45fa-9b6f-bf93303ac41c/1/mylnPtSjkR9z1Le94bHnP7l4Nak.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/43/3a9cbe-496d-45fa-9b6f-bf93303ac41c/1/mylnPtSjkR9z1Le94bHnP7l4Nak.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:f0:07:80:5e:85:c4:72:03:a1:e0:7c:04:e1:bc:b7:b8:d8: a6:d5:a3:85:44:91:4b:40:83:2e:d4:b9:fe:86:50:c4:8e:77: b1:36:f1:8d:c1:0d:6d:50:09:44:66:20:c5:fb:60:97:c8:39: 06:9d:d0:f7:cd:1a:ea:3a:63:f5:38:04:6e:11:20:71:00:2e: c7:e9:d8:a2:0c:7c:07:cd:4e:ed:17:fc:15:3c:95:44:0a:7b: d4:92:9c:20:c2:71:0b:8a:82:b6:f1:59:5a:f8:ff:e1:9d:78: 20:64:91:49:f9:31:04:32:03:64:14:b0:bb:5f:76:aa:0f:70: ce:89:29:ad:8f:d1:13:3b:32:31:dd:72:89:85:1d:92:5e:9f: b3:91:30:50:42:22:00:c4:f4:57:be:bd:5e:38:b7:06:cf:d8: c3:97:eb:03:fc:2b:e7:cb:d4:c1:3d:df:61:71:69:ad:43:b1: b1:ee:72:5d:f8:da:51:0a:67:a4:e2:9c:32:5f:98:8a:84:b8: 12:14:24:8d:3e:4d:78:86:06:26:db:89:83:c0:62:db:21:ef: 43:3d:f3:cf:80:64:26:bc:9a:72:ca:0a:0c:74:f3:d4:3a:71: b2:40:f0:5a:58:54:07:b6:f2:20:c3:38:22:e5:03:02:ad:2b: 94:ab:eb:de -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmy1blNBOtPk6bynWlcHmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDliMjk2NzNlZDRhMzkxMWY3M2Q0YjdiZGUxYjFlNzNmYjk3 ODM1YTkwHhcNMjUxMjA2MDMwMTA5WhcNMjUxMjA3MDMwMTA5WjAzMTEwLwYDVQQD EyhiZGZjODVhNmEzYmNhMzc5YjJjODcyZjlkMzIyZjYzM2VjYWQwZGVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsHESqVeDSaJ710I1OpAGz2mdFAjS 0EmJDZoVj1foLSDZYRVa7rY3Ri6u1FoB5WNKxXe3HgWeQ/uTieAFDZd/BqZlrgjt 7nLmL9YeG9jRgYrQ0HJN9J2y904RgJYcFtWIqqC6EdNSNy8nSHCXM2lFuVdtBzWo EEWTmjg2U8mXdjbhJ5SN3EE0HAtYlaWR7lVf1B5/2/fYKRk+ELj2z+dseJ5eRIBE WuUIR7EJQQir1oIn/frfEPMmxLRcCnfiBB+BqX49jOUsc6WJes3XqwHTwrk5Yzk8 N7b007wrABTxFcy6TVNZVwvRor1dqwFPMSZ/ymREEd4DDuxUKaD2tX87lwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL38haajvKN5sshy+dMi9jPsrQ3tMB8GA1UdIwQY MBaAFJspZz7Uo5Efc9S3veGx5z+5eDWpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbXlsblB0U2prUjl6MUxlOTRiSG5QN2w0TmFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My8zYTljYmUtNDk2ZC00NWZhLTliNmYt YmY5MzMwM2FjNDFjLzEvbXlsblB0U2prUjl6MUxlOTRiSG5QN2w0TmFrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80My8zYTljYmUtNDk2ZC00NWZhLTliNmYtYmY5MzMwM2FjNDFj LzEvbXlsblB0U2prUjl6MUxlOTRiSG5QN2w0TmFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdfAHgF6F xHIDoeB8BOG8t7jYptWjhUSRS0CDLtS5/oZQxI53sTbxjcENbVAJRGYgxftgl8g5 Bp3Q980a6jpj9TgEbhEgcQAux+nYogx8B81O7Rf8FTyVRAp71JKcIMJxC4qCtvFZ Wvj/4Z14IGSRSfkxBDIDZBSwu192qg9wzokprY/REzsyMd1yiYUdkl6fs5EwUEIi AMT0V769Xji3Bs/Yw5frA/wr58vUwT3fYXFprUOxse5yXfjaUQpnpOKcMl+YioS4 EhQkjT5NeIYGJtuJg8Bi2yHvQz3zz4BkJryacsoKDHTz1DpxskDwWlhUB7byIMM4 IuUDAq0rlKvr3g== -----END CERTIFICATE-----Generated at Sat Dec 6 10:15:46 2025 by rpki-client