This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/98c304-6532-4ac6-a162-c0a25b10902a/1/cnPNrMHijwIT37KPPf2LnL3Txi4.mft File: cnPNrMHijwIT37KPPf2LnL3Txi4.mft (raw, json) Hash identifier: GysT/llkWZHHyRdQ8UPbo+yHDGwGsBg+4FrThEPL58s= Subject key identifier: B4:BC:7F:98:2D:D8:0B:5B:8C:3A:F3:52:5E:33:E7:6D:94:43:1B:A6 Authority key identifier: 72:73:CD:AC:C1:E2:8F:02:13:DF:B2:8F:3D:FD:8B:9C:BD:D3:C6:2E Certificate issuer: /CN=7273cdacc1e28f0213dfb28f3dfd8b9cbdd3c62e Certificate serial: 019AF1D1DA9D856F8129F8D58D6F6070FC98 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cnPNrMHijwIT37KPPf2LnL3Txi4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/98c304-6532-4ac6-a162-c0a25b10902a/1/cnPNrMHijwIT37KPPf2LnL3Txi4.mft Manifest number: 06BD Signing time: Sat 06 Dec 2025 04:00:53 +0000 Manifest this update: Sat 06 Dec 2025 04:00:53 +0000 Manifest next update: Sun 07 Dec 2025 04:00:53 +0000 Files and hashes: 1: cnPNrMHijwIT37KPPf2LnL3Txi4.crl (hash: yu5uMMvEL7JqmhZnT58BVGFT6MbaKKB4/9JGnhNY7v4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/98c304-6532-4ac6-a162-c0a25b10902a/1/cnPNrMHijwIT37KPPf2LnL3Txi4.crl rsync://rpki.ripe.net/repository/DEFAULT/85/98c304-6532-4ac6-a162-c0a25b10902a/1/cnPNrMHijwIT37KPPf2LnL3Txi4.mft rsync://rpki.ripe.net/repository/DEFAULT/cnPNrMHijwIT37KPPf2LnL3Txi4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:da:9d:85:6f:81:29:f8:d5:8d:6f:60:70:fc:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7273cdacc1e28f0213dfb28f3dfd8b9cbdd3c62e Validity Not Before: Dec 6 04:00:53 2025 GMT Not After : Dec 7 04:00:53 2025 GMT Subject: CN=b4bc7f982dd80b5b8c3af3525e33e76d94431ba6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:83:c8:af:d0:9e:43:55:3d:b4:7a:ad:e0:ef: 48:21:51:37:7c:37:50:20:2a:2e:87:d8:ab:49:2a: 2f:bf:14:ac:89:3e:53:e1:3d:77:6e:2b:ed:ad:b9: 04:74:9c:ba:b1:81:99:d6:3b:f2:8c:9c:22:97:3d: dd:53:70:18:07:d7:7a:39:e0:a7:2c:eb:44:c6:d4: 46:9c:f6:60:78:94:17:1f:24:0d:7d:4f:51:89:b8: 0a:88:51:0c:78:4e:bb:b5:bd:e6:b6:c1:76:13:3e: a7:76:c9:90:b7:be:b4:95:8b:e5:37:55:4c:4f:bc: c5:21:08:a9:ba:a7:83:0d:b1:ab:c2:90:eb:bf:f7: 8a:5a:fc:71:ec:44:aa:10:5d:1e:09:40:de:f9:27: 04:a0:61:78:99:46:a3:a5:f1:ec:05:e0:5e:26:b4: 70:a4:9a:ce:6f:0d:0d:59:17:48:42:25:78:fb:b9: ff:71:71:b5:3f:e0:73:3c:b4:14:08:90:da:6a:c8: 7e:3c:b6:c6:e6:39:02:fd:d1:4c:f5:db:c7:ce:a8: c6:c9:ea:4d:90:5f:3f:2e:36:62:a2:05:86:9a:ce: 35:00:5c:e7:a4:f4:87:27:0b:7b:6c:14:e9:c2:05: 59:c7:0b:c5:f0:e4:99:53:69:5b:4a:21:5d:87:42: 78:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:BC:7F:98:2D:D8:0B:5B:8C:3A:F3:52:5E:33:E7:6D:94:43:1B:A6 X509v3 Authority Key Identifier: keyid:72:73:CD:AC:C1:E2:8F:02:13:DF:B2:8F:3D:FD:8B:9C:BD:D3:C6:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cnPNrMHijwIT37KPPf2LnL3Txi4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/98c304-6532-4ac6-a162-c0a25b10902a/1/cnPNrMHijwIT37KPPf2LnL3Txi4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/85/98c304-6532-4ac6-a162-c0a25b10902a/1/cnPNrMHijwIT37KPPf2LnL3Txi4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:89:a9:8f:5e:49:bb:d9:1f:6f:d9:29:ca:0d:69:a7:0b:05: 80:6c:d5:65:53:62:96:e0:be:70:a1:3c:40:a2:08:57:c1:9f: 0d:2c:54:09:3e:76:89:89:16:b8:6a:a6:1e:3b:4a:e9:4c:c5: 8c:51:44:df:a3:89:d7:df:ac:12:b9:ea:50:a0:28:05:30:a7: 15:77:eb:6d:a9:b6:f8:12:2d:f0:ee:f5:dd:f7:0f:81:94:00: 38:4f:bb:42:51:66:87:e8:b7:6d:eb:6f:79:a1:84:4a:6f:a4: 32:75:c4:cc:a1:db:f5:eb:12:37:d9:51:d8:d5:3f:5d:25:fa: 68:6d:67:d1:eb:43:81:85:03:f7:d0:39:63:77:64:73:b7:5a: 7d:a1:44:cb:81:38:5d:74:04:14:ab:cb:64:ea:d4:e6:39:9d: 89:83:d1:bb:ad:ac:d3:3e:97:8a:16:e1:5d:d3:fb:b7:76:88: e3:9b:72:51:58:08:54:e4:bd:ca:94:42:b4:6d:65:d4:55:e8: 5d:f2:0f:85:81:14:07:f4:56:51:55:43:49:cc:5b:08:cc:73: eb:e0:0c:6a:99:3c:2b:1f:73:36:42:6c:ff:e1:98:fa:c2:84: 83:95:3c:0c:45:29:3a:c1:25:8f:88:94:9d:3e:90:6e:e4:5a: 2e:3e:1b:d8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0dqdhW+BKfjVjW9gcPyYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyNzNjZGFjYzFlMjhmMDIxM2RmYjI4ZjNkZmQ4YjljYmRk M2M2MmUwHhcNMjUxMjA2MDQwMDUzWhcNMjUxMjA3MDQwMDUzWjAzMTEwLwYDVQQD EyhiNGJjN2Y5ODJkZDgwYjViOGMzYWYzNTI1ZTMzZTc2ZDk0NDMxYmE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxIPIr9CeQ1U9tHqt4O9IIVE3fDdQ ICouh9irSSovvxSsiT5T4T13bivtrbkEdJy6sYGZ1jvyjJwilz3dU3AYB9d6OeCn LOtExtRGnPZgeJQXHyQNfU9RibgKiFEMeE67tb3mtsF2Ez6ndsmQt760lYvlN1VM T7zFIQipuqeDDbGrwpDrv/eKWvxx7ESqEF0eCUDe+ScEoGF4mUajpfHsBeBeJrRw pJrObw0NWRdIQiV4+7n/cXG1P+BzPLQUCJDaash+PLbG5jkC/dFM9dvHzqjGyepN kF8/LjZiogWGms41AFznpPSHJwt7bBTpwgVZxwvF8OSZU2lbSiFdh0J4swIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLS8f5gt2AtbjDrzUl4z522UQxumMB8GA1UdIwQY MBaAFHJzzazB4o8CE9+yjz39i5y908YuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY25QTnJNSGlqd0lUMzdLUFBmMkxuTDNUeGk0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS85OGMzMDQtNjUzMi00YWM2LWExNjIt YzBhMjViMTA5MDJhLzEvY25QTnJNSGlqd0lUMzdLUFBmMkxuTDNUeGk0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NS85OGMzMDQtNjUzMi00YWM2LWExNjItYzBhMjViMTA5MDJh LzEvY25QTnJNSGlqd0lUMzdLUFBmMkxuTDNUeGk0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYYmpj15J u9kfb9kpyg1ppwsFgGzVZVNiluC+cKE8QKIIV8GfDSxUCT52iYkWuGqmHjtK6UzF jFFE36OJ19+sErnqUKAoBTCnFXfrbam2+BIt8O713fcPgZQAOE+7QlFmh+i3betv eaGESm+kMnXEzKHb9esSN9lR2NU/XSX6aG1n0etDgYUD99A5Y3dkc7dafaFEy4E4 XXQEFKvLZOrU5jmdiYPRu62s0z6XihbhXdP7t3aI45tyUVgIVOS9ypRCtG1l1FXo XfIPhYEUB/RWUVVDScxbCMxz6+AMapk8Kx9zNkJs/+GY+sKEg5U8DEUpOsElj4iU nT6QbuRaLj4b2A== -----END CERTIFICATE-----Generated at Sat Dec 6 08:11:51 2025 by rpki-client