This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/7c11b7-7c2c-4f05-9017-86c016d7a73c/1/B8YQsqBtsYMYVLZybDMJAzYodBU.mft File: B8YQsqBtsYMYVLZybDMJAzYodBU.mft (raw, json) Hash identifier: Py6d1ZRcJ06OWXGUQCouaq1zd7Y8T/wTB5uaocju4Bc= Subject key identifier: 2D:CB:62:29:74:5D:06:7B:77:99:E4:F8:31:BF:BF:82:35:93:D9:91 Authority key identifier: 07:C6:10:B2:A0:6D:B1:83:18:54:B6:72:6C:33:09:03:36:28:74:15 Certificate issuer: /CN=07c610b2a06db1831854b6726c33090336287415 Certificate serial: 019AF50B2E6827CEAF556810C1287B98CBF2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B8YQsqBtsYMYVLZybDMJAzYodBU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/7c11b7-7c2c-4f05-9017-86c016d7a73c/1/B8YQsqBtsYMYVLZybDMJAzYodBU.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 19:02:21 +0000 Manifest this update: Sat 06 Dec 2025 19:02:21 +0000 Manifest next update: Sun 07 Dec 2025 19:02:21 +0000 Files and hashes: 1: B8YQsqBtsYMYVLZybDMJAzYodBU.crl (hash: kSq3rRhaIDvjrxQg3HXPxo/CJcytCuRaqvd5Bdcnj0E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/7c11b7-7c2c-4f05-9017-86c016d7a73c/1/B8YQsqBtsYMYVLZybDMJAzYodBU.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/7c11b7-7c2c-4f05-9017-86c016d7a73c/1/B8YQsqBtsYMYVLZybDMJAzYodBU.mft rsync://rpki.ripe.net/repository/DEFAULT/B8YQsqBtsYMYVLZybDMJAzYodBU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0b:2e:68:27:ce:af:55:68:10:c1:28:7b:98:cb:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=07c610b2a06db1831854b6726c33090336287415 Validity Not Before: Dec 6 19:02:21 2025 GMT Not After : Dec 7 19:02:21 2025 GMT Subject: CN=2dcb6229745d067b7799e4f831bfbf823593d991 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:a5:7f:55:f0:e6:ea:62:b9:dd:a5:89:ce:de: 05:8c:78:1c:6c:ef:41:e5:46:44:1b:61:51:9b:5e: 88:76:c0:60:c0:36:5a:00:39:99:46:49:94:2a:b5: 18:b0:1b:00:1c:02:9f:8a:82:e8:6f:6f:86:0e:92: 62:ee:1c:99:e1:96:0c:1a:92:59:91:89:fb:ff:7e: ea:05:3a:e4:00:f7:61:0d:d7:ab:51:e4:71:a2:cb: 53:95:fd:2b:46:83:d2:d2:f8:2e:ee:60:91:fc:da: 19:50:27:21:cb:20:1f:0b:a1:37:93:ad:04:fa:9b: 19:04:42:eb:d2:b5:d8:87:ec:8a:3f:e3:ef:e9:e9: 90:a5:21:d2:20:c1:41:2f:12:8d:b9:74:78:b7:bc: 6d:3d:ec:4c:69:8b:ca:39:fa:51:8a:fd:d1:e2:4e: d0:d7:23:89:a0:7a:65:19:bd:b8:6e:f8:ca:00:99: 02:ff:b6:8a:ab:26:6b:ca:3c:8d:6b:95:0d:9e:c6: 2f:cb:42:89:31:59:de:fa:cc:0e:57:2f:1e:cf:93: e7:b6:d1:23:ec:35:f9:a1:86:8c:67:91:d7:84:30: c4:b0:69:d6:ea:81:8a:38:57:d6:5d:e3:e8:2f:6e: 04:c0:9e:31:07:c0:f5:ae:46:46:88:9f:9d:0a:3e: 8d:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:CB:62:29:74:5D:06:7B:77:99:E4:F8:31:BF:BF:82:35:93:D9:91 X509v3 Authority Key Identifier: keyid:07:C6:10:B2:A0:6D:B1:83:18:54:B6:72:6C:33:09:03:36:28:74:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B8YQsqBtsYMYVLZybDMJAzYodBU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/7c11b7-7c2c-4f05-9017-86c016d7a73c/1/B8YQsqBtsYMYVLZybDMJAzYodBU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/7c11b7-7c2c-4f05-9017-86c016d7a73c/1/B8YQsqBtsYMYVLZybDMJAzYodBU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:dd:e9:0c:c8:2e:fe:c7:37:1d:7b:32:78:3f:ca:26:10:6a: c8:0a:0c:e0:f3:be:56:66:77:e1:08:c0:72:6b:ee:29:1a:36: bb:6a:14:5b:a3:79:7c:ab:de:1c:5a:8d:8f:b0:28:71:d8:69: 5c:5b:58:90:ae:a5:89:c9:63:ec:d5:96:19:85:5f:f8:11:44: 31:ca:d5:88:1b:ce:d9:a3:02:3b:42:75:51:c4:e4:20:b0:3a: f4:e9:81:da:a6:ec:32:79:45:f9:a0:1e:dc:7e:c1:16:53:d5: cd:c7:56:f2:33:24:da:97:0b:2b:01:63:99:d8:e7:2e:92:54: e5:ec:25:07:1f:66:34:7b:df:c0:7d:c2:c9:eb:c4:86:49:e2: 1a:2a:ce:e8:d6:c4:3f:0a:69:2b:d5:76:24:be:58:58:db:08: dd:5e:5f:e7:d2:6d:fe:3f:95:06:68:b3:7a:9f:8c:72:fe:cf: cb:69:6b:0d:64:fd:f3:f1:1d:43:58:87:95:12:55:56:32:8e: 68:d6:63:21:06:92:08:dd:c4:fb:ea:8b:5e:15:12:06:0e:06: 8c:94:3d:a7:4e:fa:2e:94:7a:a3:e6:14:0b:01:c6:00:05:de: 7c:e0:0a:6b:f0:a3:80:ce:11:ad:3e:0b:ce:08:e4:99:ee:34: d2:74:99:aa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1Cy5oJ86vVWgQwSh7mMvyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3YzYxMGIyYTA2ZGIxODMxODU0YjY3MjZjMzMwOTAzMzYy ODc0MTUwHhcNMjUxMjA2MTkwMjIxWhcNMjUxMjA3MTkwMjIxWjAzMTEwLwYDVQQD EygyZGNiNjIyOTc0NWQwNjdiNzc5OWU0ZjgzMWJmYmY4MjM1OTNkOTkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvKV/VfDm6mK53aWJzt4FjHgcbO9B 5UZEG2FRm16IdsBgwDZaADmZRkmUKrUYsBsAHAKfioLob2+GDpJi7hyZ4ZYMGpJZ kYn7/37qBTrkAPdhDderUeRxostTlf0rRoPS0vgu7mCR/NoZUCchyyAfC6E3k60E +psZBELr0rXYh+yKP+Pv6emQpSHSIMFBLxKNuXR4t7xtPexMaYvKOfpRiv3R4k7Q 1yOJoHplGb24bvjKAJkC/7aKqyZryjyNa5UNnsYvy0KJMVne+swOVy8ez5PnttEj 7DX5oYaMZ5HXhDDEsGnW6oGKOFfWXePoL24EwJ4xB8D1rkZGiJ+dCj6NnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC3LYil0XQZ7d5nk+DG/v4I1k9mRMB8GA1UdIwQY MBaAFAfGELKgbbGDGFS2cmwzCQM2KHQVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQjhZUXNxQnRzWU1ZVkxaeWJETUpBellvZEJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi83YzExYjctN2MyYy00ZjA1LTkwMTct ODZjMDE2ZDdhNzNjLzEvQjhZUXNxQnRzWU1ZVkxaeWJETUpBellvZEJVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi83YzExYjctN2MyYy00ZjA1LTkwMTctODZjMDE2ZDdhNzNj LzEvQjhZUXNxQnRzWU1ZVkxaeWJETUpBellvZEJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnt3pDMgu /sc3HXsyeD/KJhBqyAoM4PO+VmZ34QjAcmvuKRo2u2oUW6N5fKveHFqNj7Aocdhp XFtYkK6liclj7NWWGYVf+BFEMcrViBvO2aMCO0J1UcTkILA69OmB2qbsMnlF+aAe 3H7BFlPVzcdW8jMk2pcLKwFjmdjnLpJU5ewlBx9mNHvfwH3CyevEhkniGirO6NbE PwppK9V2JL5YWNsI3V5f59Jt/j+VBmizep+Mcv7Py2lrDWT98/EdQ1iHlRJVVjKO aNZjIQaSCN3E++qLXhUSBg4GjJQ9p076LpR6o+YUCwHGAAXefOAKa/CjgM4RrT4L zgjkme400nSZqg== -----END CERTIFICATE-----Generated at Sat Dec 6 22:37:14 2025 by rpki-client