This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/05910b-25d8-413d-ac58-824c77f891c9/1/cNbQfLZOoOgZ46Cyngk_5Bljspo.mft File: cNbQfLZOoOgZ46Cyngk_5Bljspo.mft (raw, json) Hash identifier: O99hcZsHM+YbzN5giKd2HEDXOJvVtkB2TBl9HWhg0Qk= Subject key identifier: 98:98:AC:F2:9C:14:B6:17:19:54:2F:55:2B:5E:7E:93:69:CD:D6:FD Authority key identifier: 70:D6:D0:7C:B6:4E:A0:E8:19:E3:A0:B2:9E:09:3F:E4:19:63:B2:9A Certificate issuer: /CN=70d6d07cb64ea0e819e3a0b29e093fe41963b29a Certificate serial: 019AF1D20CDF384DAFF77768082FA6B023DE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cNbQfLZOoOgZ46Cyngk_5Bljspo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/05910b-25d8-413d-ac58-824c77f891c9/1/cNbQfLZOoOgZ46Cyngk_5Bljspo.mft Manifest number: 175E Signing time: Sat 06 Dec 2025 04:01:06 +0000 Manifest this update: Sat 06 Dec 2025 04:01:06 +0000 Manifest next update: Sun 07 Dec 2025 04:01:06 +0000 Files and hashes: 1: cNbQfLZOoOgZ46Cyngk_5Bljspo.crl (hash: Chqz04sGf5YJ7pleF5mlpY6XOc8ksQy/s9YERJYJHwA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/05910b-25d8-413d-ac58-824c77f891c9/1/cNbQfLZOoOgZ46Cyngk_5Bljspo.crl rsync://rpki.ripe.net/repository/DEFAULT/96/05910b-25d8-413d-ac58-824c77f891c9/1/cNbQfLZOoOgZ46Cyngk_5Bljspo.mft rsync://rpki.ripe.net/repository/DEFAULT/cNbQfLZOoOgZ46Cyngk_5Bljspo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:0c:df:38:4d:af:f7:77:68:08:2f:a6:b0:23:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70d6d07cb64ea0e819e3a0b29e093fe41963b29a Validity Not Before: Dec 6 04:01:06 2025 GMT Not After : Dec 7 04:01:06 2025 GMT Subject: CN=9898acf29c14b61719542f552b5e7e9369cdd6fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:5b:c8:da:c1:b8:d1:a8:d4:71:f5:01:f2:39: 3c:45:7b:e3:7f:2f:7f:05:7e:29:62:2e:5f:ab:58: d1:03:3b:6b:6e:27:ff:3b:2f:ad:11:1d:fc:91:24: 7d:33:26:be:6d:6d:7a:46:29:ee:53:88:a8:2a:c4: 29:3a:ff:96:ce:d6:0d:51:dd:62:81:d4:2b:da:c9: 20:7a:4e:ff:17:1c:02:ab:ba:19:e5:8a:0e:cb:bc: f3:04:20:94:3f:e2:6e:1a:f7:b1:92:32:34:ec:e0: 96:e0:0c:08:76:f9:87:f9:6a:7c:57:e3:a6:d9:40: 85:09:c7:97:25:29:e9:c1:b6:e1:f7:bc:e3:04:e0: e6:61:83:84:93:f7:8d:6c:0d:45:2e:28:61:5d:9e: d1:6d:48:9e:fe:1a:01:7c:c0:96:1c:a4:ac:de:dc: 23:30:21:5d:1d:60:0d:07:40:73:88:ac:ec:37:3d: 47:b6:a6:c7:0e:bb:2d:2f:ea:66:5a:c6:60:16:b6: ca:9e:79:9d:32:6e:cf:e8:01:7b:66:9a:cc:0f:2a: 3f:96:77:97:93:2c:2b:f2:8d:6b:a7:59:20:3b:96: 03:b6:ff:48:64:ce:41:42:18:b6:13:1c:0b:b5:8d: bc:7f:b2:c5:e7:1c:43:42:c1:33:87:85:a8:2a:db: cd:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:98:AC:F2:9C:14:B6:17:19:54:2F:55:2B:5E:7E:93:69:CD:D6:FD X509v3 Authority Key Identifier: keyid:70:D6:D0:7C:B6:4E:A0:E8:19:E3:A0:B2:9E:09:3F:E4:19:63:B2:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cNbQfLZOoOgZ46Cyngk_5Bljspo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/05910b-25d8-413d-ac58-824c77f891c9/1/cNbQfLZOoOgZ46Cyngk_5Bljspo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/96/05910b-25d8-413d-ac58-824c77f891c9/1/cNbQfLZOoOgZ46Cyngk_5Bljspo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:17:17:ba:4d:ba:f3:67:a1:4c:81:cb:b3:16:70:fc:d0:51: ad:0f:b9:9d:68:c3:7b:c2:c3:ec:bd:fc:06:fc:5a:4e:c8:34: 71:31:4a:f7:2d:e5:c8:d4:ed:1c:a0:d4:be:ed:c4:98:81:4b: 9f:27:02:ad:09:aa:8f:09:45:26:69:c7:3b:f1:5c:3f:fb:21: 51:a7:91:98:d1:c8:58:77:77:4a:2a:eb:7a:df:0a:8e:d8:80: da:41:d5:4c:94:5f:25:66:0f:41:13:43:b1:b9:38:a0:5f:87: b2:41:c2:72:b7:ce:56:0f:ac:b8:59:bc:ec:46:07:91:0c:0b: 95:fa:2c:00:ea:69:2a:06:90:f5:2b:d6:79:48:1d:5c:9a:e1: 32:6e:44:4c:d6:91:38:9b:40:0b:ad:89:58:44:77:56:e1:76: cc:85:b3:ef:05:f4:fe:bc:5f:f2:d3:5f:0e:ce:06:b4:f1:84: 7f:ab:24:4c:fb:a5:0f:6d:ac:1d:94:5d:ab:ed:be:45:b4:ab: 78:17:c1:fb:37:03:58:81:24:2e:ae:75:90:e8:67:04:80:87: 28:8e:f3:37:c1:64:57:db:1c:81:49:8b:29:8a:ab:31:d6:ad: ab:8e:6e:f2:34:ca:0a:49:79:69:b6:76:68:00:0e:81:64:ef: 42:ca:79:3b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0gzfOE2v93doCC+msCPeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwZDZkMDdjYjY0ZWEwZTgxOWUzYTBiMjllMDkzZmU0MTk2 M2IyOWEwHhcNMjUxMjA2MDQwMTA2WhcNMjUxMjA3MDQwMTA2WjAzMTEwLwYDVQQD Eyg5ODk4YWNmMjljMTRiNjE3MTk1NDJmNTUyYjVlN2U5MzY5Y2RkNmZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnlvI2sG40ajUcfUB8jk8RXvjfy9/ BX4pYi5fq1jRAztrbif/Oy+tER38kSR9Mya+bW16RinuU4ioKsQpOv+WztYNUd1i gdQr2skgek7/FxwCq7oZ5YoOy7zzBCCUP+JuGvexkjI07OCW4AwIdvmH+Wp8V+Om 2UCFCceXJSnpwbbh97zjBODmYYOEk/eNbA1FLihhXZ7RbUie/hoBfMCWHKSs3twj MCFdHWANB0BziKzsNz1HtqbHDrstL+pmWsZgFrbKnnmdMm7P6AF7ZprMDyo/lneX kywr8o1rp1kgO5YDtv9IZM5BQhi2ExwLtY28f7LF5xxDQsEzh4WoKtvNpwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJiYrPKcFLYXGVQvVStefpNpzdb9MB8GA1UdIwQY MBaAFHDW0Hy2TqDoGeOgsp4JP+QZY7KaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY05iUWZMWk9vT2daNDZDeW5na181Qmxqc3BvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni8wNTkxMGItMjVkOC00MTNkLWFjNTgt ODI0Yzc3Zjg5MWM5LzEvY05iUWZMWk9vT2daNDZDeW5na181Qmxqc3BvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ni8wNTkxMGItMjVkOC00MTNkLWFjNTgtODI0Yzc3Zjg5MWM5 LzEvY05iUWZMWk9vT2daNDZDeW5na181Qmxqc3BvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVhcXuk26 82ehTIHLsxZw/NBRrQ+5nWjDe8LD7L38BvxaTsg0cTFK9y3lyNTtHKDUvu3EmIFL nycCrQmqjwlFJmnHO/FcP/shUaeRmNHIWHd3Sirret8KjtiA2kHVTJRfJWYPQRND sbk4oF+HskHCcrfOVg+suFm87EYHkQwLlfosAOppKgaQ9SvWeUgdXJrhMm5ETNaR OJtAC62JWER3VuF2zIWz7wX0/rxf8tNfDs4GtPGEf6skTPulD22sHZRdq+2+RbSr eBfB+zcDWIEkLq51kOhnBICHKI7zN8FkV9scgUmLKYqrMdatq45u8jTKCkl5abZ2 aAAOgWTvQsp5Ow== -----END CERTIFICATE-----Generated at Sat Dec 6 09:03:55 2025 by rpki-client