This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/d94fce-547e-4242-b72c-b7ab686c076e/1/CBymDgSEe9L3xFyGh-X1qtH-6Ps.mft File: CBymDgSEe9L3xFyGh-X1qtH-6Ps.mft (raw, json) Hash identifier: C9HTRHYSs/ERt5Ph6v1arov0eHzTV4c4wm6LbGkIt9g= Subject key identifier: 81:51:CD:C9:9D:DE:49:9E:03:E1:F1:DB:79:1B:6C:17:77:53:0C:DE Authority key identifier: 08:1C:A6:0E:04:84:7B:D2:F7:C4:5C:86:87:E5:F5:AA:D1:FE:E8:FB Certificate issuer: /CN=081ca60e04847bd2f7c45c8687e5f5aad1fee8fb Certificate serial: 019AF19B4E80089C2E40CB31288C17130033 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CBymDgSEe9L3xFyGh-X1qtH-6Ps.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/d94fce-547e-4242-b72c-b7ab686c076e/1/CBymDgSEe9L3xFyGh-X1qtH-6Ps.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 03:01:18 +0000 Manifest this update: Sat 06 Dec 2025 03:01:18 +0000 Manifest next update: Sun 07 Dec 2025 03:01:18 +0000 Files and hashes: 1: CBymDgSEe9L3xFyGh-X1qtH-6Ps.crl (hash: HaiB4ZVZ22ikZutu1uCsRX45O5Zz9k7mFuRE1nG9p/I=) 2: ZnV_8X8pYoAVKjZWPYlTDet39Po.roa (hash: AQ2CtHZNHtcjULxTw0rAIotVl7Ai3G/vKLwZOUyWiLY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/d94fce-547e-4242-b72c-b7ab686c076e/1/CBymDgSEe9L3xFyGh-X1qtH-6Ps.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/d94fce-547e-4242-b72c-b7ab686c076e/1/CBymDgSEe9L3xFyGh-X1qtH-6Ps.mft rsync://rpki.ripe.net/repository/DEFAULT/CBymDgSEe9L3xFyGh-X1qtH-6Ps.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:4e:80:08:9c:2e:40:cb:31:28:8c:17:13:00:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=081ca60e04847bd2f7c45c8687e5f5aad1fee8fb Validity Not Before: Dec 6 03:01:18 2025 GMT Not After : Dec 7 03:01:18 2025 GMT Subject: CN=8151cdc99dde499e03e1f1db791b6c1777530cde Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:e2:93:62:20:31:60:35:93:ba:2c:17:0a:20: 22:ec:99:97:f9:56:d0:38:63:4a:bb:9b:f0:6d:c8: 56:af:c9:14:62:e9:28:97:34:e2:2a:bb:a8:14:64: 48:f0:cf:a8:c7:6b:11:b2:06:57:4d:8b:ea:97:58: 02:a1:ab:6c:fd:69:17:b1:58:07:41:73:01:eb:19: 57:d1:17:19:dd:bc:c7:d8:a5:0e:31:e8:ad:7e:ea: 09:50:a7:a6:16:c6:df:5b:46:4b:5c:62:6b:ec:88: 69:12:00:e9:b2:8f:5b:da:e0:1a:c8:9a:a1:1c:ef: ad:40:df:08:b7:13:78:0f:1f:06:bf:00:45:9e:91: 3d:08:e8:da:68:38:b8:cf:a0:32:14:59:22:c6:2a: 86:f9:6f:06:ef:f6:5e:d4:e0:e3:23:a9:1f:dc:14: 0f:0d:e5:67:20:06:02:0f:84:18:eb:1d:a6:46:21: ac:91:45:32:da:74:ec:0f:9d:80:df:b5:7c:f8:fd: 71:af:fb:3d:ad:39:b9:f6:81:f6:c7:58:31:b5:06: 11:dd:23:21:18:cd:de:2e:a0:33:e8:3f:f6:18:0a: fa:5b:bd:11:b2:c4:08:37:cd:02:54:e2:cc:e6:e3: fc:3d:3e:6b:2f:62:91:83:9a:2a:8f:c2:cd:25:da: 16:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:51:CD:C9:9D:DE:49:9E:03:E1:F1:DB:79:1B:6C:17:77:53:0C:DE X509v3 Authority Key Identifier: keyid:08:1C:A6:0E:04:84:7B:D2:F7:C4:5C:86:87:E5:F5:AA:D1:FE:E8:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CBymDgSEe9L3xFyGh-X1qtH-6Ps.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/d94fce-547e-4242-b72c-b7ab686c076e/1/CBymDgSEe9L3xFyGh-X1qtH-6Ps.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/d94fce-547e-4242-b72c-b7ab686c076e/1/CBymDgSEe9L3xFyGh-X1qtH-6Ps.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:57:7c:59:51:b7:e7:28:94:4f:3b:0c:27:de:df:75:82:81: a7:61:19:e1:54:d1:be:88:0e:c9:7c:d7:44:ce:95:71:0b:10: ab:ac:19:55:5a:3f:77:22:04:16:cd:5c:32:ad:b0:e0:4f:5f: 7a:58:81:f7:a6:c7:06:83:11:1e:2f:63:63:29:71:0d:b2:c4: a6:9d:84:14:25:c3:ce:73:bf:1a:08:21:b7:6e:0e:1a:1a:36: 5a:a8:34:ea:88:92:1a:2d:d3:0b:4f:65:6b:f5:eb:34:7f:88: 4f:7d:8a:7e:03:76:e7:df:b1:3e:7d:1d:2b:4a:c6:d3:4a:30: 49:a7:b9:3e:ba:54:74:d0:4a:f3:81:58:58:76:a8:02:fa:ff: b6:42:c8:21:61:1d:b9:54:46:fa:e8:5d:a7:8f:c3:67:30:1e: 45:ad:19:a8:0e:1c:6a:9e:67:6f:79:e5:41:71:47:2c:c1:34: 3f:fa:dd:34:96:bd:5f:6b:b2:af:b4:78:69:ac:68:20:12:91: b4:ee:61:fc:76:b5:19:9b:e2:a9:c2:87:e4:01:3d:b0:fe:d1: a3:9c:dc:da:8f:9e:f7:a9:d6:4b:8e:11:d5:5b:ce:82:f1:36: dd:f9:28:58:9d:72:8b:4a:54:d8:1a:d7:82:89:93:49:10:d7: d5:84:23:81 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm06ACJwuQMsxKIwXEwAzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4MWNhNjBlMDQ4NDdiZDJmN2M0NWM4Njg3ZTVmNWFhZDFm ZWU4ZmIwHhcNMjUxMjA2MDMwMTE4WhcNMjUxMjA3MDMwMTE4WjAzMTEwLwYDVQQD Eyg4MTUxY2RjOTlkZGU0OTllMDNlMWYxZGI3OTFiNmMxNzc3NTMwY2RlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAneKTYiAxYDWTuiwXCiAi7JmX+VbQ OGNKu5vwbchWr8kUYukolzTiKruoFGRI8M+ox2sRsgZXTYvql1gCoats/WkXsVgH QXMB6xlX0RcZ3bzH2KUOMeitfuoJUKemFsbfW0ZLXGJr7IhpEgDpso9b2uAayJqh HO+tQN8ItxN4Dx8GvwBFnpE9COjaaDi4z6AyFFkixiqG+W8G7/Ze1ODjI6kf3BQP DeVnIAYCD4QY6x2mRiGskUUy2nTsD52A37V8+P1xr/s9rTm59oH2x1gxtQYR3SMh GM3eLqAz6D/2GAr6W70RssQIN80CVOLM5uP8PT5rL2KRg5oqj8LNJdoWlQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIFRzcmd3kmeA+Hx23kbbBd3UwzeMB8GA1UdIwQY MBaAFAgcpg4EhHvS98Rchofl9arR/uj7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0J5bURnU0VlOUwzeEZ5R2gtWDFxdEgtNlBzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9kOTRmY2UtNTQ3ZS00MjQyLWI3MmMt YjdhYjY4NmMwNzZlLzEvQ0J5bURnU0VlOUwzeEZ5R2gtWDFxdEgtNlBzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC9kOTRmY2UtNTQ3ZS00MjQyLWI3MmMtYjdhYjY4NmMwNzZl LzEvQ0J5bURnU0VlOUwzeEZ5R2gtWDFxdEgtNlBzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUFd8WVG3 5yiUTzsMJ97fdYKBp2EZ4VTRvogOyXzXRM6VcQsQq6wZVVo/dyIEFs1cMq2w4E9f eliB96bHBoMRHi9jYylxDbLEpp2EFCXDznO/Ggght24OGho2Wqg06oiSGi3TC09l a/XrNH+IT32KfgN259+xPn0dK0rG00owSae5PrpUdNBK84FYWHaoAvr/tkLIIWEd uVRG+uhdp4/DZzAeRa0ZqA4cap5nb3nlQXFHLME0P/rdNJa9X2uyr7R4aaxoIBKR tO5h/Ha1GZviqcKH5AE9sP7Ro5zc2o+e96nWS44R1VvOgvE23fkoWJ1yi0pU2BrX gomTSRDX1YQjgQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:27:58 2025 by rpki-client