This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/760d51-3ee2-444d-b186-214c952bf114/1/mYPpTy-XpSTD8cv0hjBY07ZRBhY.mft File: mYPpTy-XpSTD8cv0hjBY07ZRBhY.mft (raw, json) Hash identifier: us86QJKHlNcxPRXkH6L5OJY927B6zP3O6qp9sPMpcnw= Subject key identifier: 39:9B:BE:61:D3:76:60:CE:BD:8A:B9:01:95:09:56:C7:C3:67:06:DA Authority key identifier: 99:83:E9:4F:2F:97:A5:24:C3:F1:CB:F4:86:30:58:D3:B6:51:06:16 Certificate issuer: /CN=9983e94f2f97a524c3f1cbf4863058d3b6510616 Certificate serial: 019AF163EDB1B3DFD8BC90BD4785194D1427 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mYPpTy-XpSTD8cv0hjBY07ZRBhY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/760d51-3ee2-444d-b186-214c952bf114/1/mYPpTy-XpSTD8cv0hjBY07ZRBhY.mft Manifest number: 57 Signing time: Sat 06 Dec 2025 02:00:49 +0000 Manifest this update: Sat 06 Dec 2025 02:00:49 +0000 Manifest next update: Sun 07 Dec 2025 02:00:49 +0000 Files and hashes: 1: mYPpTy-XpSTD8cv0hjBY07ZRBhY.crl (hash: D1wsBt4y5o/AHa7ru3wFwhVPudDHy+akX7hW4+um6/c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/760d51-3ee2-444d-b186-214c952bf114/1/mYPpTy-XpSTD8cv0hjBY07ZRBhY.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/760d51-3ee2-444d-b186-214c952bf114/1/mYPpTy-XpSTD8cv0hjBY07ZRBhY.mft rsync://rpki.ripe.net/repository/DEFAULT/mYPpTy-XpSTD8cv0hjBY07ZRBhY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:63:ed:b1:b3:df:d8:bc:90:bd:47:85:19:4d:14:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9983e94f2f97a524c3f1cbf4863058d3b6510616 Validity Not Before: Dec 6 02:00:49 2025 GMT Not After : Dec 7 02:00:49 2025 GMT Subject: CN=399bbe61d37660cebd8ab901950956c7c36706da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:0c:e4:91:ab:e1:9d:16:46:0e:1b:18:0f:b8: 7c:17:98:ca:3b:36:8c:33:cd:e3:bc:84:03:51:bf: 5e:55:19:f0:13:e6:63:5a:53:60:d4:fc:4f:a6:60: 8c:a6:0d:11:7e:ca:24:d7:ec:67:1b:0c:6f:d3:7c: be:77:50:b6:64:8f:00:ce:ca:a3:ef:26:56:3e:9a: a5:fe:b3:07:4a:fe:7e:97:aa:88:3f:59:0e:dc:df: 73:f9:10:54:1a:59:fe:0a:31:2d:6f:de:a2:96:15: b5:5f:37:ba:9f:c0:0c:3b:0b:f5:89:ee:b9:91:2b: e6:ab:f5:f9:e9:dd:09:48:32:41:85:e6:ea:c8:1b: ae:3f:4a:85:49:48:5a:72:2d:b6:17:29:52:5c:96: d0:7c:6e:2e:4e:2e:49:b7:aa:8d:d9:bc:d4:55:5c: ae:0a:84:b7:d2:c3:55:0f:64:27:77:cb:fc:00:4c: f0:14:c6:5d:e3:6e:12:7b:73:d9:37:5f:82:87:7e: d7:37:47:43:ee:66:53:a3:99:0e:88:bf:3a:74:df: 92:0a:1e:95:31:55:ed:8b:00:eb:6b:2a:fe:88:48: 5b:84:da:d9:3b:14:80:09:73:b2:29:13:4c:13:43: 1b:60:e8:44:86:f1:40:9d:cb:75:c4:76:ff:fc:f6: 25:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:9B:BE:61:D3:76:60:CE:BD:8A:B9:01:95:09:56:C7:C3:67:06:DA X509v3 Authority Key Identifier: keyid:99:83:E9:4F:2F:97:A5:24:C3:F1:CB:F4:86:30:58:D3:B6:51:06:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mYPpTy-XpSTD8cv0hjBY07ZRBhY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/760d51-3ee2-444d-b186-214c952bf114/1/mYPpTy-XpSTD8cv0hjBY07ZRBhY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/760d51-3ee2-444d-b186-214c952bf114/1/mYPpTy-XpSTD8cv0hjBY07ZRBhY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:0b:ad:0d:01:42:2d:d4:53:24:77:75:36:f9:df:7c:39:b0: ab:04:05:99:58:30:96:ce:a1:71:8d:7f:d8:1c:b6:00:a3:70: 12:18:0e:9b:a0:d9:ca:b3:47:2e:cd:bb:dd:64:09:fc:47:54: 0c:dc:7a:a9:56:b7:ff:07:cd:2e:be:5f:c9:2a:55:38:cc:6a: c2:d3:7c:61:db:ec:d7:c7:12:4a:75:0e:a7:f5:07:83:1b:d8: 7d:9f:cf:11:73:d8:5a:6c:78:5b:60:a6:f6:fb:8d:fe:71:e8: 70:dd:1b:18:b2:3c:5a:93:45:2e:76:32:66:b0:31:e0:a4:81: a7:1f:42:8a:b8:cc:11:5e:7e:9d:a2:f1:16:f2:35:95:c3:25: 7b:f5:31:96:44:c9:6b:da:1b:04:3c:56:20:a3:7e:8b:dd:a9: ab:fe:50:71:af:57:fd:45:03:3e:67:73:96:80:20:89:50:54: 21:43:ac:aa:d5:f2:fa:60:64:6c:d8:2e:ce:c0:70:d1:f8:89: b8:79:cb:e9:08:78:a1:77:9a:d1:47:a4:c7:62:8a:9b:73:92: 16:ab:a4:36:b9:86:49:de:85:ad:23:bd:46:f9:a8:96:d8:e2: 63:9b:92:76:42:a7:a2:aa:51:e0:2d:59:5a:9c:c9:fb:f9:0c: 34:5a:8b:70 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxY+2xs9/YvJC9R4UZTRQnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk5ODNlOTRmMmY5N2E1MjRjM2YxY2JmNDg2MzA1OGQzYjY1 MTA2MTYwHhcNMjUxMjA2MDIwMDQ5WhcNMjUxMjA3MDIwMDQ5WjAzMTEwLwYDVQQD EygzOTliYmU2MWQzNzY2MGNlYmQ4YWI5MDE5NTA5NTZjN2MzNjcwNmRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkAzkkavhnRZGDhsYD7h8F5jKOzaM M83jvIQDUb9eVRnwE+ZjWlNg1PxPpmCMpg0Rfsok1+xnGwxv03y+d1C2ZI8Azsqj 7yZWPpql/rMHSv5+l6qIP1kO3N9z+RBUGln+CjEtb96ilhW1Xze6n8AMOwv1ie65 kSvmq/X56d0JSDJBhebqyBuuP0qFSUhaci22FylSXJbQfG4uTi5Jt6qN2bzUVVyu CoS30sNVD2Qnd8v8AEzwFMZd424Se3PZN1+Ch37XN0dD7mZTo5kOiL86dN+SCh6V MVXtiwDrayr+iEhbhNrZOxSACXOyKRNME0MbYOhEhvFAnct1xHb//PYl+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDmbvmHTdmDOvYq5AZUJVsfDZwbaMB8GA1UdIwQY MBaAFJmD6U8vl6Ukw/HL9IYwWNO2UQYWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbVlQcFR5LVhwU1REOGN2MGhqQlkwN1pSQmhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS83NjBkNTEtM2VlMi00NDRkLWIxODYt MjE0Yzk1MmJmMTE0LzEvbVlQcFR5LVhwU1REOGN2MGhqQlkwN1pSQmhZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS83NjBkNTEtM2VlMi00NDRkLWIxODYtMjE0Yzk1MmJmMTE0 LzEvbVlQcFR5LVhwU1REOGN2MGhqQlkwN1pSQmhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkgutDQFC LdRTJHd1NvnffDmwqwQFmVgwls6hcY1/2By2AKNwEhgOm6DZyrNHLs273WQJ/EdU DNx6qVa3/wfNLr5fySpVOMxqwtN8Ydvs18cSSnUOp/UHgxvYfZ/PEXPYWmx4W2Cm 9vuN/nHocN0bGLI8WpNFLnYyZrAx4KSBpx9CirjMEV5+naLxFvI1lcMle/UxlkTJ a9obBDxWIKN+i92pq/5Qca9X/UUDPmdzloAgiVBUIUOsqtXy+mBkbNguzsBw0fiJ uHnL6Qh4oXea0Uekx2KKm3OSFqukNrmGSd6FrSO9RvmoltjiY5uSdkKnoqpR4C1Z WpzJ+/kMNFqLcA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:42:21 2025 by rpki-client