This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/93faf8-862e-4d97-b2b5-676db4cd3540/1/mytwoo9kNGxDgfJr-ZPS8WNbBO0.mft File: mytwoo9kNGxDgfJr-ZPS8WNbBO0.mft (raw, json) Hash identifier: 10X4wpBMrPEht1YIrXyAfYK/PykRjnac+QXcT6lpbzg= Subject key identifier: 5E:8F:48:B4:45:04:14:2A:E0:9B:42:73:07:6B:18:DF:90:FF:AF:E6 Authority key identifier: 9B:2B:70:A2:8F:64:34:6C:43:81:F2:6B:F9:93:D2:F1:63:5B:04:ED Certificate issuer: /CN=9b2b70a28f64346c4381f26bf993d2f1635b04ed Certificate serial: 019AF164281F04337895AC86E5E6CDBBE38A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mytwoo9kNGxDgfJr-ZPS8WNbBO0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/93faf8-862e-4d97-b2b5-676db4cd3540/1/mytwoo9kNGxDgfJr-ZPS8WNbBO0.mft Manifest number: 28 Signing time: Sat 06 Dec 2025 02:01:04 +0000 Manifest this update: Sat 06 Dec 2025 02:01:04 +0000 Manifest next update: Sun 07 Dec 2025 02:01:04 +0000 Files and hashes: 1: mytwoo9kNGxDgfJr-ZPS8WNbBO0.crl (hash: Lx9Camnw8IBaRubjHWVxy2rDtkGxKbPEZ+1E1e539Z4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/93faf8-862e-4d97-b2b5-676db4cd3540/1/mytwoo9kNGxDgfJr-ZPS8WNbBO0.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/93faf8-862e-4d97-b2b5-676db4cd3540/1/mytwoo9kNGxDgfJr-ZPS8WNbBO0.mft rsync://rpki.ripe.net/repository/DEFAULT/mytwoo9kNGxDgfJr-ZPS8WNbBO0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:28:1f:04:33:78:95:ac:86:e5:e6:cd:bb:e3:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9b2b70a28f64346c4381f26bf993d2f1635b04ed Validity Not Before: Dec 6 02:01:04 2025 GMT Not After : Dec 7 02:01:04 2025 GMT Subject: CN=5e8f48b44504142ae09b4273076b18df90ffafe6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:fb:53:72:52:4b:6e:81:79:1e:78:d0:bd:37: dc:ef:33:76:e5:34:3d:2b:02:39:56:6a:37:35:69: 7d:22:19:88:dc:a6:a4:e6:eb:78:10:f0:1e:64:b5: c6:fe:8a:9a:86:f2:49:60:2a:3b:1b:81:cd:33:c8: d6:56:6f:23:4e:0b:71:d3:26:2e:c2:1e:42:f8:06: 01:df:fc:39:b4:d0:fb:fe:87:56:c8:f1:1c:09:c3: b2:8e:df:57:6c:65:30:57:80:cb:00:53:ee:2b:ff: a5:f2:77:c3:bc:e1:6f:bb:47:02:6e:5a:95:ff:22: 1c:51:17:2f:9f:83:d9:73:27:6a:98:4c:35:47:dd: b6:16:c2:e2:c6:b6:bd:ee:32:d9:16:29:86:d9:30: e6:e5:fd:d7:eb:58:d5:1a:fd:d6:50:0f:c6:5e:e5: dd:a2:9d:7b:b0:7f:25:1b:5a:0b:26:75:6d:95:76: 6b:c7:dd:a0:9d:b2:91:30:53:a3:77:48:4c:0c:81: c2:ae:ef:b9:e5:90:e9:3e:8d:5b:ce:71:61:84:76: 2f:9f:b7:37:3c:2a:d6:f3:c6:ad:71:28:3a:a6:a4: a2:a1:44:1a:3d:e2:65:3b:57:76:76:82:c3:c0:22: 9f:88:2e:f6:93:62:9e:f0:a6:82:e3:66:cf:a2:53: 31:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:8F:48:B4:45:04:14:2A:E0:9B:42:73:07:6B:18:DF:90:FF:AF:E6 X509v3 Authority Key Identifier: keyid:9B:2B:70:A2:8F:64:34:6C:43:81:F2:6B:F9:93:D2:F1:63:5B:04:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mytwoo9kNGxDgfJr-ZPS8WNbBO0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/93faf8-862e-4d97-b2b5-676db4cd3540/1/mytwoo9kNGxDgfJr-ZPS8WNbBO0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/93faf8-862e-4d97-b2b5-676db4cd3540/1/mytwoo9kNGxDgfJr-ZPS8WNbBO0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:47:e5:a8:2c:c1:d3:d3:0e:ab:d7:c2:16:08:1b:72:b6:c7: dc:6b:cd:79:06:9e:7e:af:94:10:23:24:84:02:d2:0a:bb:6c: cc:39:ca:31:09:52:c5:76:07:23:b0:d7:9e:78:5a:c7:7c:55: 42:25:78:41:98:32:a1:af:8e:0f:c5:c8:0a:43:b2:42:06:47: 2b:dc:6d:17:26:0c:10:d5:95:a4:9e:82:79:db:2a:1e:cf:50: da:8f:7d:b9:42:05:04:20:76:3f:40:62:c5:c8:9e:c7:34:bf: 3f:bd:93:10:28:23:96:01:2d:89:6b:60:43:93:c8:ea:29:6c: 8e:5e:cb:06:f3:43:26:7e:63:7d:7a:9d:04:99:55:11:73:64: 87:3f:3f:a1:41:34:4b:40:69:08:a0:09:d8:f3:92:5a:6d:6e: 0a:b6:d1:bb:6b:05:d7:36:10:d1:a5:31:24:33:cc:82:68:36: 20:88:e6:a9:b9:6b:50:d5:f4:ae:ef:a6:c9:be:10:ae:c4:79: 3e:de:b8:5b:f0:96:1d:0c:15:ab:5a:56:97:08:d5:30:05:e3: 94:a3:21:b6:2c:fe:e7:f3:e0:60:55:6f:ec:fc:bc:c2:8d:48: d0:cf:17:ee:68:83:f2:b3:20:70:59:57:1a:c4:64:c2:99:d4: 88:87:80:0d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZCgfBDN4layG5ebNu+OKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDliMmI3MGEyOGY2NDM0NmM0MzgxZjI2YmY5OTNkMmYxNjM1 YjA0ZWQwHhcNMjUxMjA2MDIwMTA0WhcNMjUxMjA3MDIwMTA0WjAzMTEwLwYDVQQD Eyg1ZThmNDhiNDQ1MDQxNDJhZTA5YjQyNzMwNzZiMThkZjkwZmZhZmU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqftTclJLboF5HnjQvTfc7zN25TQ9 KwI5Vmo3NWl9IhmI3Kak5ut4EPAeZLXG/oqahvJJYCo7G4HNM8jWVm8jTgtx0yYu wh5C+AYB3/w5tND7/odWyPEcCcOyjt9XbGUwV4DLAFPuK/+l8nfDvOFvu0cCblqV /yIcURcvn4PZcydqmEw1R922FsLixra97jLZFimG2TDm5f3X61jVGv3WUA/GXuXd op17sH8lG1oLJnVtlXZrx92gnbKRMFOjd0hMDIHCru+55ZDpPo1bznFhhHYvn7c3 PCrW88atcSg6pqSioUQaPeJlO1d2doLDwCKfiC72k2Ke8KaC42bPolMxNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF6PSLRFBBQq4JtCcwdrGN+Q/6/mMB8GA1UdIwQY MBaAFJsrcKKPZDRsQ4Hya/mT0vFjWwTtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbXl0d29vOWtOR3hEZ2ZKci1aUFM4V05iQk8wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC85M2ZhZjgtODYyZS00ZDk3LWIyYjUt Njc2ZGI0Y2QzNTQwLzEvbXl0d29vOWtOR3hEZ2ZKci1aUFM4V05iQk8wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC85M2ZhZjgtODYyZS00ZDk3LWIyYjUtNjc2ZGI0Y2QzNTQw LzEvbXl0d29vOWtOR3hEZ2ZKci1aUFM4V05iQk8wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk0flqCzB 09MOq9fCFggbcrbH3GvNeQaefq+UECMkhALSCrtszDnKMQlSxXYHI7DXnnhax3xV QiV4QZgyoa+OD8XICkOyQgZHK9xtFyYMENWVpJ6CedsqHs9Q2o99uUIFBCB2P0Bi xciexzS/P72TECgjlgEtiWtgQ5PI6ilsjl7LBvNDJn5jfXqdBJlVEXNkhz8/oUE0 S0BpCKAJ2POSWm1uCrbRu2sF1zYQ0aUxJDPMgmg2IIjmqblrUNX0ru+myb4QrsR5 Pt64W/CWHQwVq1pWlwjVMAXjlKMhtiz+5/PgYFVv7Py8wo1I0M8X7miD8rMgcFlX GsRkwpnUiIeADQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:03:01 2025 by rpki-client