This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/68b353-cc2b-42e0-80af-b73686427942/1/CYYD8NRKkgRDOKLK3xiegQHDv18.mft File: CYYD8NRKkgRDOKLK3xiegQHDv18.mft (raw, json) Hash identifier: TFIDsjU3JnAfz6hyqidel57NAPwCh4klKwCHeUfyJEk= Subject key identifier: 55:17:46:1F:E7:39:AF:7A:48:01:98:AC:33:FB:AD:E9:1D:99:88:62 Authority key identifier: 09:86:03:F0:D4:4A:92:04:43:38:A2:CA:DF:18:9E:81:01:C3:BF:5F Certificate issuer: /CN=098603f0d44a92044338a2cadf189e8101c3bf5f Certificate serial: 019AF12DA6135FA59E7631C13CF008432D52 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CYYD8NRKkgRDOKLK3xiegQHDv18.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/68b353-cc2b-42e0-80af-b73686427942/1/CYYD8NRKkgRDOKLK3xiegQHDv18.mft Manifest number: 0E2C Signing time: Sat 06 Dec 2025 01:01:31 +0000 Manifest this update: Sat 06 Dec 2025 01:01:31 +0000 Manifest next update: Sun 07 Dec 2025 01:01:31 +0000 Files and hashes: 1: CYYD8NRKkgRDOKLK3xiegQHDv18.crl (hash: mYApMaC1epI+mhoiQsUYTAtGH2W7eCfnvOcLKqdETzI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/68b353-cc2b-42e0-80af-b73686427942/1/CYYD8NRKkgRDOKLK3xiegQHDv18.crl rsync://rpki.ripe.net/repository/DEFAULT/9d/68b353-cc2b-42e0-80af-b73686427942/1/CYYD8NRKkgRDOKLK3xiegQHDv18.mft rsync://rpki.ripe.net/repository/DEFAULT/CYYD8NRKkgRDOKLK3xiegQHDv18.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:a6:13:5f:a5:9e:76:31:c1:3c:f0:08:43:2d:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=098603f0d44a92044338a2cadf189e8101c3bf5f Validity Not Before: Dec 6 01:01:31 2025 GMT Not After : Dec 7 01:01:31 2025 GMT Subject: CN=5517461fe739af7a480198ac33fbade91d998862 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:c0:aa:4f:77:81:23:b8:f1:2b:8d:a5:66:62: 16:e5:e6:26:c9:f7:61:a4:eb:1f:86:8b:98:06:c4: 67:c5:bd:ca:30:b5:b9:fc:06:33:ce:24:ee:18:83: e8:bd:14:e1:0c:65:05:76:ee:bc:51:67:08:26:7e: 8d:cf:b0:71:7b:5e:fb:d6:05:b8:d7:2e:e7:32:4f: 13:32:5d:6d:c2:dc:b2:98:4c:96:c0:9a:a0:0f:8e: 20:db:fa:d7:49:ad:5a:39:b7:dc:cb:b2:2f:e3:5d: 9a:16:80:70:91:8b:fb:b3:12:7c:eb:3d:be:3b:d4: 96:58:9d:42:83:6d:18:91:70:f6:63:78:d1:54:56: 5f:e6:f0:71:46:b6:95:30:a7:26:c0:b1:aa:55:af: c3:cf:b7:55:41:00:86:fc:39:d1:fd:e2:ad:01:fe: ed:b9:68:17:1b:77:fa:53:ec:2a:78:c2:95:69:a6: 34:a0:0b:bb:ee:2e:eb:d1:84:b3:2a:76:5e:fb:43: 6f:31:0a:0d:16:39:21:e4:69:cf:25:92:a9:f8:18: 3c:d6:67:3e:f5:65:c4:c8:e2:91:a2:5c:60:b9:b5: 1f:be:3c:94:e8:ad:9a:bc:56:09:83:08:9c:5c:20: ed:6f:23:7e:fa:81:1f:d7:57:57:b6:5f:53:5e:64: 86:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:17:46:1F:E7:39:AF:7A:48:01:98:AC:33:FB:AD:E9:1D:99:88:62 X509v3 Authority Key Identifier: keyid:09:86:03:F0:D4:4A:92:04:43:38:A2:CA:DF:18:9E:81:01:C3:BF:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CYYD8NRKkgRDOKLK3xiegQHDv18.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/68b353-cc2b-42e0-80af-b73686427942/1/CYYD8NRKkgRDOKLK3xiegQHDv18.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/68b353-cc2b-42e0-80af-b73686427942/1/CYYD8NRKkgRDOKLK3xiegQHDv18.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:08:a7:68:a1:81:59:fa:ab:03:83:d2:d6:0c:7e:fb:e9:49: 58:29:d3:62:f5:c7:97:a7:1d:e7:ad:21:6f:8e:8f:db:50:c8: aa:b7:14:24:e2:91:a7:79:31:75:cd:ce:7e:22:65:fb:cf:61: 8a:f8:f6:4b:b0:33:b2:47:23:1f:b5:a4:3a:f6:f9:eb:62:40: 63:f8:ee:d1:84:5e:b0:09:c9:48:ed:3b:d0:fa:d4:c8:04:2e: af:30:7d:ec:95:12:3d:8f:7c:bf:70:33:ce:9f:a2:ff:36:ff: cb:be:a5:95:1a:fa:b0:69:26:c4:6c:14:54:e5:50:0b:33:ff: 5d:fb:19:9f:52:97:e4:79:28:a6:41:4e:48:dd:3b:3e:da:3b: 3d:7e:92:3d:a9:3b:b5:89:d8:1e:bd:29:aa:07:bf:e9:2f:c3: 86:bf:50:96:82:cf:95:44:c5:58:18:3a:66:4c:14:88:3b:e6: dc:1b:51:7c:38:17:0d:e6:92:78:ca:65:f7:b8:8d:69:70:42: 36:04:6c:d1:0f:b0:8f:b9:2c:27:7b:80:e9:69:f8:0e:84:28: 75:00:d2:0f:e9:20:1c:92:57:91:e8:84:5f:3a:97:a5:39:54: 73:ea:ad:a4:69:5b:6d:16:10:28:84:13:dc:ec:51:f6:88:ff: 2b:a6:4f:1d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLaYTX6WedjHBPPAIQy1SMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5ODYwM2YwZDQ0YTkyMDQ0MzM4YTJjYWRmMTg5ZTgxMDFj M2JmNWYwHhcNMjUxMjA2MDEwMTMxWhcNMjUxMjA3MDEwMTMxWjAzMTEwLwYDVQQD Eyg1NTE3NDYxZmU3MzlhZjdhNDgwMTk4YWMzM2ZiYWRlOTFkOTk4ODYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8sCqT3eBI7jxK42lZmIW5eYmyfdh pOsfhouYBsRnxb3KMLW5/AYzziTuGIPovRThDGUFdu68UWcIJn6Nz7Bxe1771gW4 1y7nMk8TMl1twtyymEyWwJqgD44g2/rXSa1aObfcy7Iv412aFoBwkYv7sxJ86z2+ O9SWWJ1Cg20YkXD2Y3jRVFZf5vBxRraVMKcmwLGqVa/Dz7dVQQCG/DnR/eKtAf7t uWgXG3f6U+wqeMKVaaY0oAu77i7r0YSzKnZe+0NvMQoNFjkh5GnPJZKp+Bg81mc+ 9WXEyOKRolxgubUfvjyU6K2avFYJgwicXCDtbyN++oEf11dXtl9TXmSGpQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFUXRh/nOa96SAGYrDP7rekdmYhiMB8GA1UdIwQY MBaAFAmGA/DUSpIEQziiyt8YnoEBw79fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1lZRDhOUktrZ1JET0tMSzN4aWVnUUhEdjE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC82OGIzNTMtY2MyYi00MmUwLTgwYWYt YjczNjg2NDI3OTQyLzEvQ1lZRDhOUktrZ1JET0tMSzN4aWVnUUhEdjE4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZC82OGIzNTMtY2MyYi00MmUwLTgwYWYtYjczNjg2NDI3OTQy LzEvQ1lZRDhOUktrZ1JET0tMSzN4aWVnUUhEdjE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkAinaKGB WfqrA4PS1gx+++lJWCnTYvXHl6cd560hb46P21DIqrcUJOKRp3kxdc3OfiJl+89h ivj2S7AzskcjH7WkOvb562JAY/ju0YResAnJSO070PrUyAQurzB97JUSPY98v3Az zp+i/zb/y76llRr6sGkmxGwUVOVQCzP/XfsZn1KX5HkopkFOSN07Pto7PX6SPak7 tYnYHr0pqge/6S/Dhr9QloLPlUTFWBg6ZkwUiDvm3BtRfDgXDeaSeMpl97iNaXBC NgRs0Q+wj7ksJ3uA6Wn4DoQodQDSD+kgHJJXkeiEXzqXpTlUc+qtpGlbbRYQKIQT 3OxR9oj/K6ZPHQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:24:58 2025 by rpki-client