This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/88a580-5dc1-4c86-92c5-5eebb1259dc9/1/cNySeAi5pn58uhunTvtb9sEsiVs.mft File: cNySeAi5pn58uhunTvtb9sEsiVs.mft (raw, json) Hash identifier: UWxNM1xWTVk1pWVy4irTS5+uVK41Iate4EKkzt0eSfc= Subject key identifier: 32:5B:FB:93:A5:29:49:71:80:C2:5E:3E:FC:DD:89:B3:BE:40:85:78 Authority key identifier: 70:DC:92:78:08:B9:A6:7E:7C:BA:1B:A7:4E:FB:5B:F6:C1:2C:89:5B Certificate issuer: /CN=70dc927808b9a67e7cba1ba74efb5bf6c12c895b Certificate serial: 019AF653A0A291747CFE98848007414A6BA8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cNySeAi5pn58uhunTvtb9sEsiVs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/88a580-5dc1-4c86-92c5-5eebb1259dc9/1/cNySeAi5pn58uhunTvtb9sEsiVs.mft Manifest number: 1760 Signing time: Sun 07 Dec 2025 01:01:06 +0000 Manifest this update: Sun 07 Dec 2025 01:01:06 +0000 Manifest next update: Mon 08 Dec 2025 01:01:06 +0000 Files and hashes: 1: BAJtDqJxaWUqQAfiueye7uuRaiw.roa (hash: xliJwPehY40wkTea7xdHZ3Ii3nZae+NEE66sFETvyTA=) 2: cNySeAi5pn58uhunTvtb9sEsiVs.crl (hash: UvDxXtooO4hP29SXzGGYcRb3ocZZVpB4U6EZgCEYVB4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/88a580-5dc1-4c86-92c5-5eebb1259dc9/1/cNySeAi5pn58uhunTvtb9sEsiVs.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/88a580-5dc1-4c86-92c5-5eebb1259dc9/1/cNySeAi5pn58uhunTvtb9sEsiVs.mft rsync://rpki.ripe.net/repository/DEFAULT/cNySeAi5pn58uhunTvtb9sEsiVs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:53:a0:a2:91:74:7c:fe:98:84:80:07:41:4a:6b:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70dc927808b9a67e7cba1ba74efb5bf6c12c895b Validity Not Before: Dec 7 01:01:06 2025 GMT Not After : Dec 8 01:01:06 2025 GMT Subject: CN=325bfb93a529497180c25e3efcdd89b3be408578 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:78:97:5a:cd:3a:bb:ad:b4:bd:71:c7:3d:dc: 28:2c:8b:b5:42:a5:fd:a8:ec:d0:93:61:12:80:2d: 60:08:17:1d:bc:a5:99:5f:1c:e1:3b:84:de:0e:98: 1d:d8:44:e1:bd:bf:89:b4:d4:55:68:1b:2f:39:d2: 4b:e6:aa:7c:85:40:5f:b7:90:ac:fb:0e:07:c9:de: 7b:e8:8a:a6:da:2e:51:6c:73:49:e8:28:78:77:fb: 29:0b:f3:b4:29:17:91:d1:01:2b:a0:f8:9f:e3:25: 6f:71:b1:95:47:b3:85:b8:f8:cd:15:07:c1:34:bc: 11:8a:25:dc:e4:3a:f8:2b:8b:95:a9:f6:29:16:02: 4c:06:d3:09:87:52:9d:f9:29:db:2c:d5:d0:f5:be: 3f:b8:f6:56:dc:6d:1a:34:f9:70:37:02:c5:fa:04: 3f:48:23:79:c3:9c:62:d5:d4:39:17:7b:5c:4f:c6: ca:cd:89:20:04:ec:f9:28:85:f8:bd:06:45:8e:f8: 89:07:01:c2:99:1b:33:c5:2a:85:2b:3c:be:44:4d: 04:de:a7:cb:86:90:5a:56:a8:ef:18:10:db:c8:6c: 44:b2:6c:3e:95:34:f4:83:ed:76:81:69:55:12:07: 7f:0e:c5:61:43:d7:8c:69:23:d4:da:da:c4:b2:b1: 03:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:5B:FB:93:A5:29:49:71:80:C2:5E:3E:FC:DD:89:B3:BE:40:85:78 X509v3 Authority Key Identifier: keyid:70:DC:92:78:08:B9:A6:7E:7C:BA:1B:A7:4E:FB:5B:F6:C1:2C:89:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cNySeAi5pn58uhunTvtb9sEsiVs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/88a580-5dc1-4c86-92c5-5eebb1259dc9/1/cNySeAi5pn58uhunTvtb9sEsiVs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/88a580-5dc1-4c86-92c5-5eebb1259dc9/1/cNySeAi5pn58uhunTvtb9sEsiVs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:00:94:58:ac:d7:86:74:f6:28:52:dd:a0:b3:cf:5c:4a:42: de:c9:8a:33:2a:87:2d:6a:83:cd:52:ef:aa:55:17:61:c9:29: 00:94:b9:40:b4:6d:0f:a0:90:e6:9f:91:6d:1e:fa:7d:79:27: e4:6b:30:a1:92:0c:92:2a:6b:1b:4b:f1:f6:ab:5f:16:98:8f: e3:c9:5b:41:34:83:ea:b7:5b:6b:71:1f:fc:ad:37:6e:e6:3b: fe:81:e6:7f:08:82:04:e7:67:6f:b5:d5:c3:00:7d:47:66:05: 50:82:c2:06:b3:0a:f0:59:f0:d6:20:9f:0f:45:0e:12:0d:5c: 09:ba:01:ad:c0:32:82:f1:21:d6:0f:82:0b:5d:6d:8d:2c:a3: 39:c1:a1:c6:12:53:96:7c:fb:cc:df:99:1d:e1:1e:17:55:99: 56:83:1e:92:74:87:be:d4:cd:d3:11:7e:6e:d8:65:c0:c5:cb: 42:aa:ab:de:ae:60:a4:67:4d:51:61:13:4c:f0:88:3f:87:21: 0c:5c:87:8d:40:df:a2:a4:65:3d:d4:19:17:61:4e:f0:bd:00: b6:03:a0:61:18:7a:bf:c4:28:ab:28:5c:51:fb:e0:87:9d:78: 41:61:ed:01:0a:ea:8c:34:ec:c0:44:0d:eb:c3:6b:8a:9b:27: ac:ea:da:43 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2U6CikXR8/piEgAdBSmuoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwZGM5Mjc4MDhiOWE2N2U3Y2JhMWJhNzRlZmI1YmY2YzEy Yzg5NWIwHhcNMjUxMjA3MDEwMTA2WhcNMjUxMjA4MDEwMTA2WjAzMTEwLwYDVQQD EygzMjViZmI5M2E1Mjk0OTcxODBjMjVlM2VmY2RkODliM2JlNDA4NTc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs3iXWs06u620vXHHPdwoLIu1QqX9 qOzQk2ESgC1gCBcdvKWZXxzhO4TeDpgd2EThvb+JtNRVaBsvOdJL5qp8hUBft5Cs +w4Hyd576Iqm2i5RbHNJ6Ch4d/spC/O0KReR0QEroPif4yVvcbGVR7OFuPjNFQfB NLwRiiXc5Dr4K4uVqfYpFgJMBtMJh1Kd+SnbLNXQ9b4/uPZW3G0aNPlwNwLF+gQ/ SCN5w5xi1dQ5F3tcT8bKzYkgBOz5KIX4vQZFjviJBwHCmRszxSqFKzy+RE0E3qfL hpBaVqjvGBDbyGxEsmw+lTT0g+12gWlVEgd/DsVhQ9eMaSPU2trEsrED9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDJb+5OlKUlxgMJePvzdibO+QIV4MB8GA1UdIwQY MBaAFHDckngIuaZ+fLobp077W/bBLIlbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY055U2VBaTVwbjU4dWh1blR2dGI5c0VzaVZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy84OGE1ODAtNWRjMS00Yzg2LTkyYzUt NWVlYmIxMjU5ZGM5LzEvY055U2VBaTVwbjU4dWh1blR2dGI5c0VzaVZzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy84OGE1ODAtNWRjMS00Yzg2LTkyYzUtNWVlYmIxMjU5ZGM5 LzEvY055U2VBaTVwbjU4dWh1blR2dGI5c0VzaVZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJACUWKzX hnT2KFLdoLPPXEpC3smKMyqHLWqDzVLvqlUXYckpAJS5QLRtD6CQ5p+RbR76fXkn 5GswoZIMkiprG0vx9qtfFpiP48lbQTSD6rdba3Ef/K03buY7/oHmfwiCBOdnb7XV wwB9R2YFUILCBrMK8Fnw1iCfD0UOEg1cCboBrcAygvEh1g+CC11tjSyjOcGhxhJT lnz7zN+ZHeEeF1WZVoMeknSHvtTN0xF+bthlwMXLQqqr3q5gpGdNUWETTPCIP4ch DFyHjUDfoqRlPdQZF2FO8L0AtgOgYRh6v8QoqyhcUfvgh514QWHtAQrqjDTswEQN 68NripsnrOraQw== -----END CERTIFICATE-----Generated at Sun Dec 7 05:50:09 2025 by rpki-client