This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/f8dd98-81b6-4df8-9154-07def10a118b/1/MyKb1oL-CjQQaYvdTCYtyZzAJ5c.mft File: MyKb1oL-CjQQaYvdTCYtyZzAJ5c.mft (raw, json) Hash identifier: /zvnw2Kl3c1S0vaOc+Scga6JI0TCrUzCIaHUdravYkM= Subject key identifier: 29:97:DC:EA:FF:66:88:1E:52:31:31:7F:4E:D4:F1:A7:4D:EA:D7:43 Authority key identifier: 33:22:9B:D6:82:FE:0A:34:10:69:8B:DD:4C:26:2D:C9:9C:C0:27:97 Certificate issuer: /CN=33229bd682fe0a3410698bdd4c262dc99cc02797 Certificate serial: 019AF19AD7428E77AD553C42E469660CC72A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MyKb1oL-CjQQaYvdTCYtyZzAJ5c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/f8dd98-81b6-4df8-9154-07def10a118b/1/MyKb1oL-CjQQaYvdTCYtyZzAJ5c.mft Manifest number: 0ABD Signing time: Sat 06 Dec 2025 03:00:47 +0000 Manifest this update: Sat 06 Dec 2025 03:00:47 +0000 Manifest next update: Sun 07 Dec 2025 03:00:47 +0000 Files and hashes: 1: MyKb1oL-CjQQaYvdTCYtyZzAJ5c.crl (hash: 89EZXscACcmrV0/xe1+9Y3k9fUkp7uXCsRJyCJ/9xqw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/f8dd98-81b6-4df8-9154-07def10a118b/1/MyKb1oL-CjQQaYvdTCYtyZzAJ5c.crl rsync://rpki.ripe.net/repository/DEFAULT/94/f8dd98-81b6-4df8-9154-07def10a118b/1/MyKb1oL-CjQQaYvdTCYtyZzAJ5c.mft rsync://rpki.ripe.net/repository/DEFAULT/MyKb1oL-CjQQaYvdTCYtyZzAJ5c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:d7:42:8e:77:ad:55:3c:42:e4:69:66:0c:c7:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33229bd682fe0a3410698bdd4c262dc99cc02797 Validity Not Before: Dec 6 03:00:47 2025 GMT Not After : Dec 7 03:00:47 2025 GMT Subject: CN=2997dceaff66881e5231317f4ed4f1a74dead743 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:7c:8f:cf:14:aa:f2:9d:ad:2a:29:77:63:06: 00:5e:6a:a6:52:52:65:b3:e3:9d:18:f0:85:ae:bf: 8c:7b:88:bd:39:ba:21:94:3f:0d:be:b1:e1:cd:6c: 11:38:bb:64:68:29:ca:68:64:84:93:31:33:c1:ce: 4c:fc:a5:bc:fa:80:cf:0b:5d:64:bc:1b:c7:2d:0c: b3:e9:c9:78:be:59:27:98:8a:43:64:22:dd:c7:09: 54:fa:c5:d5:f7:cb:b6:d9:f4:16:a8:d2:05:6b:19: ee:94:15:a7:6d:6d:b6:2e:7d:24:e5:be:34:dc:16: 3b:c5:5f:85:82:b6:b1:bd:5f:e1:a9:05:dd:3d:87: fd:9f:89:5d:6f:aa:88:b7:b9:8b:a8:d0:8f:31:58: 41:dc:02:97:b6:fd:53:9a:fd:15:44:61:4c:bd:ad: cd:2d:51:34:3d:63:b7:1e:ee:ba:ab:83:06:78:ce: 8a:55:8d:cd:20:b0:a8:b9:7e:ef:33:bd:25:00:6c: 24:fd:c5:19:bc:55:49:6b:34:64:8b:c6:20:ba:81: 58:07:50:50:35:25:0d:7a:e3:f1:2e:28:8e:15:93: 40:46:08:33:f4:e5:45:25:d5:41:33:f5:42:50:a6: 2e:83:3a:91:c8:6f:48:ed:3f:57:a4:07:ef:52:3a: 47:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:97:DC:EA:FF:66:88:1E:52:31:31:7F:4E:D4:F1:A7:4D:EA:D7:43 X509v3 Authority Key Identifier: keyid:33:22:9B:D6:82:FE:0A:34:10:69:8B:DD:4C:26:2D:C9:9C:C0:27:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MyKb1oL-CjQQaYvdTCYtyZzAJ5c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/f8dd98-81b6-4df8-9154-07def10a118b/1/MyKb1oL-CjQQaYvdTCYtyZzAJ5c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/94/f8dd98-81b6-4df8-9154-07def10a118b/1/MyKb1oL-CjQQaYvdTCYtyZzAJ5c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:9b:b7:73:3f:8d:f5:8a:ee:6b:08:4b:c3:a4:5b:fb:7b:92: 7c:b3:ee:f9:0c:44:d6:a0:ae:a1:fc:cd:e6:94:92:53:cc:6c: d5:a7:00:b7:fc:30:38:f5:fa:d4:2e:52:44:45:ae:86:3a:c4: 4b:eb:bb:fa:fd:79:ce:8e:29:c2:17:96:e6:7a:a9:be:15:ce: 01:4b:ad:60:66:7b:0a:aa:2a:5d:15:d5:0d:4b:1b:41:db:f6: bc:a3:04:61:91:8c:f4:1d:b0:72:b6:1c:1f:7a:12:16:6d:e5: c9:ee:e0:21:ec:3d:9e:81:54:3a:59:b9:16:c7:83:b1:22:c0: 26:45:50:59:bc:ba:b1:34:96:8b:80:51:a4:88:00:e5:fa:ad: aa:de:b7:c5:58:fa:b3:2e:4c:9c:9f:79:65:d9:3f:8a:95:88: 2f:8f:d4:8f:d8:a4:8b:f5:1d:44:d8:aa:96:63:e4:c8:2d:48: 6d:20:f0:4b:59:5e:34:34:3a:64:fe:db:4f:39:e9:41:8d:33: 96:7b:63:2e:ae:70:93:83:2b:9d:a6:47:9b:ef:75:ed:5d:53: 74:13:8f:34:ae:50:72:43:7a:1d:5c:eb:54:dd:7f:99:0c:58: 11:6e:11:87:8a:39:17:f7:68:2b:ba:4d:9c:34:71:bf:29:d0: d8:92:d5:2b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmtdCjnetVTxC5GlmDMcqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMzMjI5YmQ2ODJmZTBhMzQxMDY5OGJkZDRjMjYyZGM5OWNj MDI3OTcwHhcNMjUxMjA2MDMwMDQ3WhcNMjUxMjA3MDMwMDQ3WjAzMTEwLwYDVQQD EygyOTk3ZGNlYWZmNjY4ODFlNTIzMTMxN2Y0ZWQ0ZjFhNzRkZWFkNzQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl3yPzxSq8p2tKil3YwYAXmqmUlJl s+OdGPCFrr+Me4i9ObohlD8NvrHhzWwROLtkaCnKaGSEkzEzwc5M/KW8+oDPC11k vBvHLQyz6cl4vlknmIpDZCLdxwlU+sXV98u22fQWqNIFaxnulBWnbW22Ln0k5b40 3BY7xV+FgraxvV/hqQXdPYf9n4ldb6qIt7mLqNCPMVhB3AKXtv1Tmv0VRGFMva3N LVE0PWO3Hu66q4MGeM6KVY3NILCouX7vM70lAGwk/cUZvFVJazRki8YguoFYB1BQ NSUNeuPxLiiOFZNARggz9OVFJdVBM/VCUKYugzqRyG9I7T9XpAfvUjpHgwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCmX3Or/ZogeUjExf07U8adN6tdDMB8GA1UdIwQY MBaAFDMim9aC/go0EGmL3UwmLcmcwCeXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTXlLYjFvTC1DalFRYVl2ZFRDWXR5WnpBSjVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC9mOGRkOTgtODFiNi00ZGY4LTkxNTQt MDdkZWYxMGExMThiLzEvTXlLYjFvTC1DalFRYVl2ZFRDWXR5WnpBSjVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NC9mOGRkOTgtODFiNi00ZGY4LTkxNTQtMDdkZWYxMGExMThi LzEvTXlLYjFvTC1DalFRYVl2ZFRDWXR5WnpBSjVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQZu3cz+N 9YruawhLw6Rb+3uSfLPu+QxE1qCuofzN5pSSU8xs1acAt/wwOPX61C5SREWuhjrE S+u7+v15zo4pwheW5nqpvhXOAUutYGZ7CqoqXRXVDUsbQdv2vKMEYZGM9B2wcrYc H3oSFm3lye7gIew9noFUOlm5FseDsSLAJkVQWby6sTSWi4BRpIgA5fqtqt63xVj6 sy5MnJ95Zdk/ipWIL4/Uj9iki/UdRNiqlmPkyC1IbSDwS1leNDQ6ZP7bTznpQY0z lntjLq5wk4MrnaZHm+917V1TdBOPNK5QckN6HVzrVN1/mQxYEW4Rh4o5F/doK7pN nDRxvynQ2JLVKw== -----END CERTIFICATE-----Generated at Sat Dec 6 12:13:09 2025 by rpki-client