This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/37d93e-f5da-4ecf-a7a8-908e8b278552/1/y8jAZG62y_Jpi7CnYFA7zbkfGlw.mft File: y8jAZG62y_Jpi7CnYFA7zbkfGlw.mft (raw, json) Hash identifier: ++YKSgtmdlRmK2Rs/ToHge9BiEUIYp5FSzaf51oe1J8= Subject key identifier: 85:92:BE:12:36:D7:02:98:68:BA:73:4F:BF:A7:30:29:D3:6D:30:A3 Authority key identifier: CB:C8:C0:64:6E:B6:CB:F2:69:8B:B0:A7:60:50:3B:CD:B9:1F:1A:5C Certificate issuer: /CN=cbc8c0646eb6cbf2698bb0a760503bcdb91f1a5c Certificate serial: 019AF38905AA4ED6CD94D3AE6BA7609ADE94 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y8jAZG62y_Jpi7CnYFA7zbkfGlw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/37d93e-f5da-4ecf-a7a8-908e8b278552/1/y8jAZG62y_Jpi7CnYFA7zbkfGlw.mft Manifest number: FC Signing time: Sat 06 Dec 2025 12:00:34 +0000 Manifest this update: Sat 06 Dec 2025 12:00:34 +0000 Manifest next update: Sun 07 Dec 2025 12:00:34 +0000 Files and hashes: 1: y8jAZG62y_Jpi7CnYFA7zbkfGlw.crl (hash: O5maxfiUKuj9HDYzzrec23vmfwJCrzwAVVZ7Oyt68nk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/37d93e-f5da-4ecf-a7a8-908e8b278552/1/y8jAZG62y_Jpi7CnYFA7zbkfGlw.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/37d93e-f5da-4ecf-a7a8-908e8b278552/1/y8jAZG62y_Jpi7CnYFA7zbkfGlw.mft rsync://rpki.ripe.net/repository/DEFAULT/y8jAZG62y_Jpi7CnYFA7zbkfGlw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:05:aa:4e:d6:cd:94:d3:ae:6b:a7:60:9a:de:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cbc8c0646eb6cbf2698bb0a760503bcdb91f1a5c Validity Not Before: Dec 6 12:00:34 2025 GMT Not After : Dec 7 12:00:34 2025 GMT Subject: CN=8592be1236d7029868ba734fbfa73029d36d30a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:04:07:84:94:b4:19:0b:5f:3f:b5:cf:ae:1c: 6c:b2:05:a4:b6:5d:19:d7:f5:56:06:4a:17:69:91: cb:e1:db:0d:e7:07:ca:25:0c:56:0a:82:c2:cc:1d: 35:bb:4c:5a:6a:22:ae:34:b8:33:e6:75:31:58:00: 9b:28:69:00:cd:2a:ab:8a:bd:66:9b:d0:bc:68:32: 33:f9:80:c8:17:aa:21:61:cb:42:ba:5f:e1:ec:40: 42:99:a2:17:f9:da:c0:1d:33:15:27:3e:3a:1f:9e: a3:f7:74:28:fb:6b:97:67:73:31:be:42:fa:fc:49: 4b:ee:8c:e8:89:77:24:51:6d:38:4b:08:78:a0:6a: 8f:2b:17:5c:5a:34:85:47:29:20:0d:41:81:ad:e5: 22:e4:4f:bd:13:d9:e0:2b:9b:c0:c8:4f:7e:82:41: 8b:44:93:31:1e:2b:04:d3:d3:a9:5f:79:6c:fa:97: d4:78:a6:58:82:1e:b8:76:d4:67:b1:f9:20:9a:26: 41:e4:a2:3b:4c:ad:cb:23:42:cb:0f:9a:22:43:1e: 78:a0:62:c2:66:7c:2a:ba:61:81:ca:10:60:cd:54: 1e:08:13:57:f7:0c:d5:db:7d:3e:82:3d:b8:0f:7f: cf:a1:34:9f:10:ee:32:46:ef:e4:70:3f:85:48:70: 8f:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:92:BE:12:36:D7:02:98:68:BA:73:4F:BF:A7:30:29:D3:6D:30:A3 X509v3 Authority Key Identifier: keyid:CB:C8:C0:64:6E:B6:CB:F2:69:8B:B0:A7:60:50:3B:CD:B9:1F:1A:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y8jAZG62y_Jpi7CnYFA7zbkfGlw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/37d93e-f5da-4ecf-a7a8-908e8b278552/1/y8jAZG62y_Jpi7CnYFA7zbkfGlw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/37d93e-f5da-4ecf-a7a8-908e8b278552/1/y8jAZG62y_Jpi7CnYFA7zbkfGlw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:b2:d6:f7:78:54:3c:42:4d:c5:1e:33:3c:d8:e7:af:ad:4a: 6d:14:60:05:28:ee:89:fe:64:65:17:54:34:ec:12:e1:07:1d: 92:cf:b5:4e:9f:4f:66:b5:b2:c3:1c:a3:53:d4:f0:59:dd:ab: b3:86:1c:ef:59:cc:b6:8c:b6:2f:33:db:07:80:6d:27:45:9b: b1:18:e6:49:97:05:e3:1c:e7:94:d3:ae:38:f7:e7:cf:1e:ea: 7b:38:c3:c5:d6:b3:ec:30:3c:95:18:94:b1:11:e6:5e:a7:b9: 71:b3:55:ce:a8:08:04:78:c4:28:68:d0:04:03:1d:06:28:a5: e0:3f:d2:a8:fe:cd:c4:66:8a:e3:18:d3:b0:63:75:95:e0:29: 08:12:77:dc:f5:a8:b1:90:58:19:88:14:df:87:a7:31:95:06: cd:23:ab:16:73:fa:e1:ee:14:0c:d3:d8:17:fc:8d:04:bb:49: 70:ab:d9:5d:b1:a7:28:f9:f3:15:78:c8:98:e6:ab:49:67:04: 9f:97:7d:c9:28:c8:3b:6c:a4:4a:70:5d:aa:bc:bb:b6:c9:28: e6:ee:8e:df:70:23:b3:b8:c8:07:1f:b6:b7:48:03:46:a0:7c: 71:7e:0a:b9:ec:c9:52:5c:98:09:1b:ea:e6:16:a9:38:f4:43: 25:70:05:ea -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrziQWqTtbNlNOua6dgmt6UMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiYzhjMDY0NmViNmNiZjI2OThiYjBhNzYwNTAzYmNkYjkx ZjFhNWMwHhcNMjUxMjA2MTIwMDM0WhcNMjUxMjA3MTIwMDM0WjAzMTEwLwYDVQQD Eyg4NTkyYmUxMjM2ZDcwMjk4NjhiYTczNGZiZmE3MzAyOWQzNmQzMGEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyAQHhJS0GQtfP7XPrhxssgWktl0Z 1/VWBkoXaZHL4dsN5wfKJQxWCoLCzB01u0xaaiKuNLgz5nUxWACbKGkAzSqrir1m m9C8aDIz+YDIF6ohYctCul/h7EBCmaIX+drAHTMVJz46H56j93Qo+2uXZ3MxvkL6 /ElL7ozoiXckUW04Swh4oGqPKxdcWjSFRykgDUGBreUi5E+9E9ngK5vAyE9+gkGL RJMxHisE09OpX3ls+pfUeKZYgh64dtRnsfkgmiZB5KI7TK3LI0LLD5oiQx54oGLC ZnwqumGByhBgzVQeCBNX9wzV230+gj24D3/PoTSfEO4yRu/kcD+FSHCPpQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIWSvhI21wKYaLpzT7+nMCnTbTCjMB8GA1UdIwQY MBaAFMvIwGRutsvyaYuwp2BQO825HxpcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveThqQVpHNjJ5X0pwaTdDbllGQTd6YmtmR2x3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi8zN2Q5M2UtZjVkYS00ZWNmLWE3YTgt OTA4ZThiMjc4NTUyLzEveThqQVpHNjJ5X0pwaTdDbllGQTd6YmtmR2x3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi8zN2Q5M2UtZjVkYS00ZWNmLWE3YTgtOTA4ZThiMjc4NTUy LzEveThqQVpHNjJ5X0pwaTdDbllGQTd6YmtmR2x3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMrLW93hU PEJNxR4zPNjnr61KbRRgBSjuif5kZRdUNOwS4Qcdks+1Tp9PZrWywxyjU9TwWd2r s4Yc71nMtoy2LzPbB4BtJ0WbsRjmSZcF4xznlNOuOPfnzx7qezjDxdaz7DA8lRiU sRHmXqe5cbNVzqgIBHjEKGjQBAMdBiil4D/SqP7NxGaK4xjTsGN1leApCBJ33PWo sZBYGYgU34enMZUGzSOrFnP64e4UDNPYF/yNBLtJcKvZXbGnKPnzFXjImOarSWcE n5d9ySjIO2ykSnBdqry7tsko5u6O33Ajs7jIBx+2t0gDRqB8cX4KuezJUlyYCRvq 5hapOPRDJXAF6g== -----END CERTIFICATE-----Generated at Sat Dec 6 17:27:10 2025 by rpki-client