This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/766240-2403-4cd1-9943-b5bb005a6a06/1/c0YEYfnEnrkXwZEVgLoORDLBJVc.mft File: c0YEYfnEnrkXwZEVgLoORDLBJVc.mft (raw, json) Hash identifier: aUH1GARWELDyztdMLFp6GV2XDov+1zJ0L3sS7TCpwwU= Subject key identifier: E3:66:9C:66:46:9C:56:75:EB:5F:85:2C:89:78:AF:EB:45:82:31:87 Authority key identifier: 73:46:04:61:F9:C4:9E:B9:17:C1:91:15:80:BA:0E:44:32:C1:25:57 Certificate issuer: /CN=73460461f9c49eb917c1911580ba0e4432c12557 Certificate serial: 019AF12E3013DE5A01D7EDCBE0781FAB9B27 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c0YEYfnEnrkXwZEVgLoORDLBJVc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/766240-2403-4cd1-9943-b5bb005a6a06/1/c0YEYfnEnrkXwZEVgLoORDLBJVc.mft Manifest number: 07FF Signing time: Sat 06 Dec 2025 01:02:07 +0000 Manifest this update: Sat 06 Dec 2025 01:02:07 +0000 Manifest next update: Sun 07 Dec 2025 01:02:07 +0000 Files and hashes: 1: c0YEYfnEnrkXwZEVgLoORDLBJVc.crl (hash: Bb/lK6zdCwx48dmCmJrMZdTrxmuXqQWHFERdOU9pboA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/766240-2403-4cd1-9943-b5bb005a6a06/1/c0YEYfnEnrkXwZEVgLoORDLBJVc.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/766240-2403-4cd1-9943-b5bb005a6a06/1/c0YEYfnEnrkXwZEVgLoORDLBJVc.mft rsync://rpki.ripe.net/repository/DEFAULT/c0YEYfnEnrkXwZEVgLoORDLBJVc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:30:13:de:5a:01:d7:ed:cb:e0:78:1f:ab:9b:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73460461f9c49eb917c1911580ba0e4432c12557 Validity Not Before: Dec 6 01:02:07 2025 GMT Not After : Dec 7 01:02:07 2025 GMT Subject: CN=e3669c66469c5675eb5f852c8978afeb45823187 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:2d:55:bf:d1:0c:14:c2:88:3f:8f:5b:14:87: cf:ec:1f:94:a0:d2:ee:b9:de:ae:4b:50:4f:38:c5: ab:4b:20:46:89:42:5b:96:30:9e:ed:e8:1d:41:41: 55:0d:b1:7c:d1:5e:f9:66:78:72:31:da:dc:4b:68: d9:e2:fc:8d:63:b2:72:c6:98:61:7b:9b:18:83:2c: 7b:03:4a:29:74:d3:55:2d:16:4a:09:8c:2f:d8:90: 7d:09:3b:2f:75:15:ee:a0:f4:29:69:5e:15:13:38: 54:be:d9:d9:5d:df:ad:d5:0a:c8:47:a3:ff:a5:92: d4:6c:25:43:d3:3d:3c:df:54:2e:7d:99:7f:69:b7: 5f:1e:87:0f:9e:dc:83:e6:5d:6f:bc:ce:c0:ae:ef: b3:b6:9f:3a:ac:21:97:1e:30:50:58:ea:4b:66:9b: 53:ee:5b:dc:5c:80:2f:62:ad:17:7b:0f:80:2e:bd: 76:75:ae:f3:79:65:5c:c9:af:24:2a:61:34:5f:08: 90:3d:4f:cc:d2:b8:0d:6f:80:50:4b:24:0a:82:e5: 3b:7d:b3:b7:f6:4d:c4:5e:e0:70:46:cb:a6:86:f2: c7:97:86:05:90:cc:ae:d0:cd:8a:cf:b3:f0:b6:30: 2c:cb:96:47:81:da:39:96:25:a0:f4:25:36:8f:48: 19:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:66:9C:66:46:9C:56:75:EB:5F:85:2C:89:78:AF:EB:45:82:31:87 X509v3 Authority Key Identifier: keyid:73:46:04:61:F9:C4:9E:B9:17:C1:91:15:80:BA:0E:44:32:C1:25:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0YEYfnEnrkXwZEVgLoORDLBJVc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/766240-2403-4cd1-9943-b5bb005a6a06/1/c0YEYfnEnrkXwZEVgLoORDLBJVc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/766240-2403-4cd1-9943-b5bb005a6a06/1/c0YEYfnEnrkXwZEVgLoORDLBJVc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:29:c7:c3:4b:5c:d9:1c:54:20:8a:d8:b2:30:13:31:94:67: c2:0b:e5:26:86:ca:a0:09:2b:6f:be:3b:07:aa:da:ad:52:34: 02:3e:95:ea:80:86:2d:c5:71:32:7d:b7:d7:be:e4:a5:55:bd: 31:73:0e:ea:b7:54:c2:08:32:01:50:f2:6c:f1:32:f0:fa:0d: 7c:e8:95:dd:91:c9:50:4a:dd:88:f5:c1:af:05:2e:7e:0d:8e: 5d:76:40:b6:1c:15:19:96:e7:9b:77:19:fc:0f:b7:a7:d3:af: 29:7c:a0:ac:5d:2c:ab:b3:26:43:6f:d7:f4:13:7b:69:5c:43: 10:e1:c8:ed:ba:15:89:63:72:d8:7e:ac:17:d2:e0:1e:80:91: 5d:00:dd:1e:a4:2a:18:a4:93:a1:fe:bd:76:05:6a:91:e6:69: 67:4f:1f:14:01:7c:75:22:70:63:94:ce:6f:2a:6e:12:dd:08: 20:2e:76:c6:7e:28:9d:5d:0a:1b:0a:69:e8:a9:6e:8b:4d:06: 10:84:38:72:83:3d:6b:1b:a9:3e:29:0d:73:c7:be:bb:a5:b3: 12:f3:41:1d:7f:07:3a:ee:25:5d:07:d2:b0:3e:a9:58:85:37: ad:a0:4e:71:a2:8b:c7:8c:16:17:50:6f:1f:c4:70:e7:6a:98: 92:63:b5:90 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLjAT3loB1+3L4Hgfq5snMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDczNDYwNDYxZjljNDllYjkxN2MxOTExNTgwYmEwZTQ0MzJj MTI1NTcwHhcNMjUxMjA2MDEwMjA3WhcNMjUxMjA3MDEwMjA3WjAzMTEwLwYDVQQD EyhlMzY2OWM2NjQ2OWM1Njc1ZWI1Zjg1MmM4OTc4YWZlYjQ1ODIzMTg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyi1Vv9EMFMKIP49bFIfP7B+UoNLu ud6uS1BPOMWrSyBGiUJbljCe7egdQUFVDbF80V75ZnhyMdrcS2jZ4vyNY7Jyxphh e5sYgyx7A0opdNNVLRZKCYwv2JB9CTsvdRXuoPQpaV4VEzhUvtnZXd+t1QrIR6P/ pZLUbCVD0z0831QufZl/abdfHocPntyD5l1vvM7Aru+ztp86rCGXHjBQWOpLZptT 7lvcXIAvYq0Xew+ALr12da7zeWVcya8kKmE0XwiQPU/M0rgNb4BQSyQKguU7fbO3 9k3EXuBwRsumhvLHl4YFkMyu0M2Kz7PwtjAsy5ZHgdo5liWg9CU2j0gZNwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFONmnGZGnFZ161+FLIl4r+tFgjGHMB8GA1UdIwQY MBaAFHNGBGH5xJ65F8GRFYC6DkQywSVXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYzBZRVlmbkVucmtYd1pFVmdMb09SRExCSlZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS83NjYyNDAtMjQwMy00Y2QxLTk5NDMt YjViYjAwNWE2YTA2LzEvYzBZRVlmbkVucmtYd1pFVmdMb09SRExCSlZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS83NjYyNDAtMjQwMy00Y2QxLTk5NDMtYjViYjAwNWE2YTA2 LzEvYzBZRVlmbkVucmtYd1pFVmdMb09SRExCSlZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACinHw0tc 2RxUIIrYsjATMZRnwgvlJobKoAkrb747B6rarVI0Aj6V6oCGLcVxMn23177kpVW9 MXMO6rdUwggyAVDybPEy8PoNfOiV3ZHJUErdiPXBrwUufg2OXXZAthwVGZbnm3cZ /A+3p9OvKXygrF0sq7MmQ2/X9BN7aVxDEOHI7boViWNy2H6sF9LgHoCRXQDdHqQq GKSTof69dgVqkeZpZ08fFAF8dSJwY5TObypuEt0IIC52xn4onV0KGwpp6Klui00G EIQ4coM9axupPikNc8e+u6WzEvNBHX8HOu4lXQfSsD6pWIU3raBOcaKLx4wWF1Bv H8Rw52qYkmO1kA== -----END CERTIFICATE-----Generated at Sat Dec 6 11:13:20 2025 by rpki-client