This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/54ff92-221e-4a16-8aef-194e0c651d73/1/mfCyyNezyhPFnFM3LyXiAsharcU.mft File: mfCyyNezyhPFnFM3LyXiAsharcU.mft (raw, json) Hash identifier: 5rnpydZ7w4QAE0qLJfuXz+ZyRsqI20zcYjfMzJBma2E= Subject key identifier: 90:99:69:52:F2:F9:6B:93:AD:0F:EF:30:9E:8A:3A:2E:12:37:36:3C Authority key identifier: 99:F0:B2:C8:D7:B3:CA:13:C5:9C:53:37:2F:25:E2:02:C8:5A:AD:C5 Certificate issuer: /CN=99f0b2c8d7b3ca13c59c53372f25e202c85aadc5 Certificate serial: 019AF31BA964A601AF500862831A895D0A7A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mfCyyNezyhPFnFM3LyXiAsharcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/54ff92-221e-4a16-8aef-194e0c651d73/1/mfCyyNezyhPFnFM3LyXiAsharcU.mft Manifest number: 0A67 Signing time: Sat 06 Dec 2025 10:01:07 +0000 Manifest this update: Sat 06 Dec 2025 10:01:07 +0000 Manifest next update: Sun 07 Dec 2025 10:01:07 +0000 Files and hashes: 1: mfCyyNezyhPFnFM3LyXiAsharcU.crl (hash: 3v51Sgw3oRaf4omMgFgjPWB7dpq6+Ugq/eqg1DuVTbs=) 2: oVf5pbd8qfOWaMtymVg3zBpo1aI.roa (hash: /JkkHPoUwL9WPqaL9lMZRl9hvH2fpXEuWKNlqu6l9cI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/54ff92-221e-4a16-8aef-194e0c651d73/1/mfCyyNezyhPFnFM3LyXiAsharcU.crl rsync://rpki.ripe.net/repository/DEFAULT/69/54ff92-221e-4a16-8aef-194e0c651d73/1/mfCyyNezyhPFnFM3LyXiAsharcU.mft rsync://rpki.ripe.net/repository/DEFAULT/mfCyyNezyhPFnFM3LyXiAsharcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:a9:64:a6:01:af:50:08:62:83:1a:89:5d:0a:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99f0b2c8d7b3ca13c59c53372f25e202c85aadc5 Validity Not Before: Dec 6 10:01:07 2025 GMT Not After : Dec 7 10:01:07 2025 GMT Subject: CN=90996952f2f96b93ad0fef309e8a3a2e1237363c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:3a:f3:79:57:c1:46:e1:b5:01:51:e7:16:ed: c9:69:66:32:fd:66:3a:43:b4:0c:d7:d8:87:de:64: 2a:2e:c3:4b:c1:93:19:f6:81:6a:4b:99:83:88:ec: b3:8d:a7:18:04:7d:03:43:ca:cb:55:e5:c7:a6:4e: 83:65:a7:0c:8b:4a:b1:45:e6:da:5f:bf:98:83:ca: 2c:ea:93:03:46:d5:10:a0:62:3c:46:6a:ab:91:de: 8f:42:21:08:37:d0:80:4e:68:fe:cb:cb:60:eb:1b: 2a:bd:65:c5:af:8d:ac:7d:b0:2b:7b:52:1a:b4:0e: 7a:af:b3:a4:8b:83:e0:ac:1b:b1:5f:f2:e8:0c:7c: f2:e4:a9:2e:84:4c:63:4f:0a:48:38:9d:b7:c0:d7: b3:de:f0:ce:08:3d:05:72:e4:6c:58:f0:cc:91:4c: 10:da:46:b4:27:07:5f:1e:e6:b8:53:ae:2b:05:c2: 5d:43:18:6d:5c:32:e8:cc:e5:2c:bf:0a:92:b3:42: 28:f8:91:cb:b5:d0:0b:b6:b3:08:ac:6d:29:b1:60: 67:ca:42:47:b8:a8:08:87:17:57:81:dc:1e:13:33: 7e:ab:e1:23:29:a6:3e:05:fc:63:28:3e:4a:86:bf: 21:e3:b8:20:51:10:ce:95:8a:8b:f1:5c:ac:ac:48: 16:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:99:69:52:F2:F9:6B:93:AD:0F:EF:30:9E:8A:3A:2E:12:37:36:3C X509v3 Authority Key Identifier: keyid:99:F0:B2:C8:D7:B3:CA:13:C5:9C:53:37:2F:25:E2:02:C8:5A:AD:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mfCyyNezyhPFnFM3LyXiAsharcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/54ff92-221e-4a16-8aef-194e0c651d73/1/mfCyyNezyhPFnFM3LyXiAsharcU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/54ff92-221e-4a16-8aef-194e0c651d73/1/mfCyyNezyhPFnFM3LyXiAsharcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:aa:ef:a0:0b:d8:15:61:86:06:d5:77:63:7c:a8:68:59:6e: af:3a:76:c5:c7:49:c4:96:bd:a8:b1:da:ed:23:54:a0:f5:e7: 85:a6:ad:e5:0f:cc:cd:30:da:3b:24:1e:0d:10:5b:31:94:f5: d7:65:8c:11:b4:7b:ac:a6:b2:ec:f9:b2:44:f4:e7:65:af:3c: 64:65:6a:15:b2:a7:e6:0c:a1:52:ca:2f:94:02:79:95:67:ff: 9b:7a:55:11:96:b3:09:4c:f6:24:78:ef:76:93:e3:b7:c7:9d: aa:28:38:0b:e1:8a:eb:b4:46:8d:cc:2f:11:d4:40:1e:05:9c: 33:f4:7f:b2:6f:18:c0:12:c7:92:6e:83:90:30:05:c0:f3:2e: 9d:c4:7c:cf:a2:2c:fd:59:3f:e8:38:6c:58:94:77:16:07:fa: d3:b4:07:a0:26:8a:36:14:ba:67:1b:56:82:05:ee:df:97:92: 91:79:dc:60:e2:2a:e1:17:c9:ee:eb:26:3c:68:c3:8d:dd:78: cd:8e:32:b8:f1:7b:fc:47:47:d9:57:21:e2:fa:63:95:1c:e9: 7d:1b:9a:87:77:16:d6:1d:55:24:0a:38:4e:a9:78:55:cd:4d: 99:9c:2c:c5:3a:13:a9:64:01:5f:64:05:bc:f7:ca:58:42:b2: a2:6b:2b:b7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG6lkpgGvUAhigxqJXQp6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk5ZjBiMmM4ZDdiM2NhMTNjNTljNTMzNzJmMjVlMjAyYzg1 YWFkYzUwHhcNMjUxMjA2MTAwMTA3WhcNMjUxMjA3MTAwMTA3WjAzMTEwLwYDVQQD Eyg5MDk5Njk1MmYyZjk2YjkzYWQwZmVmMzA5ZThhM2EyZTEyMzczNjNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtjrzeVfBRuG1AVHnFu3JaWYy/WY6 Q7QM19iH3mQqLsNLwZMZ9oFqS5mDiOyzjacYBH0DQ8rLVeXHpk6DZacMi0qxReba X7+Yg8os6pMDRtUQoGI8Rmqrkd6PQiEIN9CATmj+y8tg6xsqvWXFr42sfbAre1Ia tA56r7Oki4PgrBuxX/LoDHzy5KkuhExjTwpIOJ23wNez3vDOCD0FcuRsWPDMkUwQ 2ka0JwdfHua4U64rBcJdQxhtXDLozOUsvwqSs0Io+JHLtdALtrMIrG0psWBnykJH uKgIhxdXgdweEzN+q+EjKaY+BfxjKD5Khr8h47ggURDOlYqL8VysrEgWBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJCZaVLy+WuTrQ/vMJ6KOi4SNzY8MB8GA1UdIwQY MBaAFJnwssjXs8oTxZxTNy8l4gLIWq3FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbWZDeXlOZXp5aFBGbkZNM0x5WGlBc2hhcmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS81NGZmOTItMjIxZS00YTE2LThhZWYt MTk0ZTBjNjUxZDczLzEvbWZDeXlOZXp5aFBGbkZNM0x5WGlBc2hhcmNVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS81NGZmOTItMjIxZS00YTE2LThhZWYtMTk0ZTBjNjUxZDcz LzEvbWZDeXlOZXp5aFBGbkZNM0x5WGlBc2hhcmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARarvoAvY FWGGBtV3Y3yoaFlurzp2xcdJxJa9qLHa7SNUoPXnhaat5Q/MzTDaOyQeDRBbMZT1 12WMEbR7rKay7PmyRPTnZa88ZGVqFbKn5gyhUsovlAJ5lWf/m3pVEZazCUz2JHjv dpPjt8edqig4C+GK67RGjcwvEdRAHgWcM/R/sm8YwBLHkm6DkDAFwPMuncR8z6Is /Vk/6DhsWJR3Fgf607QHoCaKNhS6ZxtWggXu35eSkXncYOIq4RfJ7usmPGjDjd14 zY4yuPF7/EdH2Vch4vpjlRzpfRuah3cW1h1VJAo4Tql4Vc1NmZwsxToTqWQBX2QF vPfKWEKyomsrtw== -----END CERTIFICATE-----Generated at Sat Dec 6 20:01:04 2025 by rpki-client