This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/3c604e-e6a8-4e4e-b769-5a07e26fb822/1/cnOYybFuqY0iKkwpyvey68mE8oI.mft File: cnOYybFuqY0iKkwpyvey68mE8oI.mft (raw, json) Hash identifier: Ip+4wKbpDjuV2GW1YF8qA9sqOdjWgrbsww3r2gKd5Y8= Subject key identifier: 99:CF:FE:65:8C:B4:4D:FD:AB:C0:A6:DA:D2:B9:E7:9D:04:AC:62:5A Authority key identifier: 72:73:98:C9:B1:6E:A9:8D:22:2A:4C:29:CA:F7:B2:EB:C9:84:F2:82 Certificate issuer: /CN=727398c9b16ea98d222a4c29caf7b2ebc984f282 Certificate serial: 019AF12CB4BFFA72A6EAD7F678AD2FA9B0D1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cnOYybFuqY0iKkwpyvey68mE8oI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/3c604e-e6a8-4e4e-b769-5a07e26fb822/1/cnOYybFuqY0iKkwpyvey68mE8oI.mft Manifest number: 02F9 Signing time: Sat 06 Dec 2025 01:00:30 +0000 Manifest this update: Sat 06 Dec 2025 01:00:30 +0000 Manifest next update: Sun 07 Dec 2025 01:00:30 +0000 Files and hashes: 1: cnOYybFuqY0iKkwpyvey68mE8oI.crl (hash: EwwRPXWmzKvzZLx2EnXkZOvX702nn9UZsV1uNtTRx8A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/3c604e-e6a8-4e4e-b769-5a07e26fb822/1/cnOYybFuqY0iKkwpyvey68mE8oI.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/3c604e-e6a8-4e4e-b769-5a07e26fb822/1/cnOYybFuqY0iKkwpyvey68mE8oI.mft rsync://rpki.ripe.net/repository/DEFAULT/cnOYybFuqY0iKkwpyvey68mE8oI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2c:b4:bf:fa:72:a6:ea:d7:f6:78:ad:2f:a9:b0:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=727398c9b16ea98d222a4c29caf7b2ebc984f282 Validity Not Before: Dec 6 01:00:30 2025 GMT Not After : Dec 7 01:00:30 2025 GMT Subject: CN=99cffe658cb44dfdabc0a6dad2b9e79d04ac625a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:19:6b:94:d4:bf:d4:14:97:6f:ae:ff:33:5d: 41:3a:b6:d7:e1:42:f0:ac:cf:3c:5c:3a:53:1d:a8: fe:c0:69:88:ef:d0:e6:1f:5d:8f:f5:ed:6e:1a:14: d0:44:4f:2b:6d:05:90:62:89:75:10:3c:92:7f:ee: ac:71:87:29:81:ca:b6:a9:cf:20:0c:a4:74:d4:fd: a9:0e:e9:9e:d1:20:51:0d:21:84:d3:67:17:42:ec: 81:7d:b2:1c:22:f4:84:c6:7a:7d:28:8e:b7:23:3f: fe:ad:d9:61:80:75:ab:f9:fe:03:0f:c5:5a:09:d8: e1:74:f2:62:de:ed:03:c2:c0:85:eb:60:f2:f0:1c: fd:15:31:b6:f2:2e:7c:ee:fc:94:51:bf:89:12:f9: 1c:ca:14:c8:6c:8b:00:81:26:24:34:2a:0a:21:fe: d3:a5:1d:7d:42:5e:73:cf:35:38:36:f3:19:36:11: b8:55:33:7c:78:36:4d:b0:b9:ea:c5:1c:8d:21:30: 5f:09:c7:3d:3b:7b:7b:d9:89:65:bf:2b:1d:4d:5d: 2e:89:a7:38:f0:3e:e2:9a:3c:7e:eb:db:5a:af:6e: 76:db:33:fb:a2:15:48:9e:79:13:a5:28:3f:31:77: 9b:dd:57:a5:6e:1d:da:44:2e:44:cd:2b:c0:2d:ef: 35:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:CF:FE:65:8C:B4:4D:FD:AB:C0:A6:DA:D2:B9:E7:9D:04:AC:62:5A X509v3 Authority Key Identifier: keyid:72:73:98:C9:B1:6E:A9:8D:22:2A:4C:29:CA:F7:B2:EB:C9:84:F2:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cnOYybFuqY0iKkwpyvey68mE8oI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/3c604e-e6a8-4e4e-b769-5a07e26fb822/1/cnOYybFuqY0iKkwpyvey68mE8oI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/3c604e-e6a8-4e4e-b769-5a07e26fb822/1/cnOYybFuqY0iKkwpyvey68mE8oI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:f5:fd:ea:91:0d:a9:a7:5d:63:ad:45:a7:54:50:a9:f0:1c: ae:e6:9f:2e:ee:72:df:93:2a:69:94:d1:54:99:fb:9d:9a:8c: 2f:eb:b5:ac:1b:77:8a:b5:91:83:9c:d0:eb:ad:06:22:a9:a7: 8f:4e:39:01:0c:16:21:b3:50:20:b9:a9:0b:4f:6d:c0:2f:d5: 8d:89:51:b6:19:12:9c:48:b9:a1:79:8f:b7:ce:eb:7b:3f:86: f5:66:a6:bf:95:09:1d:d8:ed:7c:6c:b3:ab:00:dc:54:10:72: 2d:83:21:50:0a:33:a9:d3:20:b0:5f:51:64:fa:2f:86:45:4e: f0:d4:81:c4:a5:2e:84:b3:2c:c1:f8:7f:a8:96:ce:0f:2e:85: 5a:eb:a2:91:43:2b:74:47:2d:7a:25:fc:0e:7d:49:c6:e6:d0: 1c:fb:1e:b8:db:88:d4:93:0c:4d:4d:91:71:62:1b:93:5e:f7: dc:7d:bc:e1:e5:ef:5e:cf:1e:f5:75:42:02:f2:57:f0:db:97: 94:aa:9b:c5:f2:bb:49:01:38:d5:46:3f:65:34:05:b7:11:00: d2:42:1b:a8:3a:c7:01:4b:8f:e1:dc:90:34:a1:d7:8f:32:ed: 1a:aa:e5:0c:5a:c6:aa:08:01:d4:30:7f:0e:7c:cf:4d:86:30: fe:92:4c:32 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLLS/+nKm6tf2eK0vqbDRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyNzM5OGM5YjE2ZWE5OGQyMjJhNGMyOWNhZjdiMmViYzk4 NGYyODIwHhcNMjUxMjA2MDEwMDMwWhcNMjUxMjA3MDEwMDMwWjAzMTEwLwYDVQQD Eyg5OWNmZmU2NThjYjQ0ZGZkYWJjMGE2ZGFkMmI5ZTc5ZDA0YWM2MjVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApBlrlNS/1BSXb67/M11BOrbX4ULw rM88XDpTHaj+wGmI79DmH12P9e1uGhTQRE8rbQWQYol1EDySf+6scYcpgcq2qc8g DKR01P2pDume0SBRDSGE02cXQuyBfbIcIvSExnp9KI63Iz/+rdlhgHWr+f4DD8Va CdjhdPJi3u0DwsCF62Dy8Bz9FTG28i587vyUUb+JEvkcyhTIbIsAgSYkNCoKIf7T pR19Ql5zzzU4NvMZNhG4VTN8eDZNsLnqxRyNITBfCcc9O3t72YllvysdTV0uiac4 8D7imjx+69tar2522zP7ohVInnkTpSg/MXeb3Velbh3aRC5EzSvALe814QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJnP/mWMtE39q8Cm2tK5550ErGJaMB8GA1UdIwQY MBaAFHJzmMmxbqmNIipMKcr3suvJhPKCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY25PWXliRnVxWTBpS2t3cHl2ZXk2OG1FOG9JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC8zYzYwNGUtZTZhOC00ZTRlLWI3Njkt NWEwN2UyNmZiODIyLzEvY25PWXliRnVxWTBpS2t3cHl2ZXk2OG1FOG9JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC8zYzYwNGUtZTZhOC00ZTRlLWI3NjktNWEwN2UyNmZiODIy LzEvY25PWXliRnVxWTBpS2t3cHl2ZXk2OG1FOG9JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlPX96pEN qaddY61Fp1RQqfAcruafLu5y35MqaZTRVJn7nZqML+u1rBt3irWRg5zQ660GIqmn j045AQwWIbNQILmpC09twC/VjYlRthkSnEi5oXmPt87rez+G9Wamv5UJHdjtfGyz qwDcVBByLYMhUAozqdMgsF9RZPovhkVO8NSBxKUuhLMswfh/qJbODy6FWuuikUMr dEcteiX8Dn1JxubQHPseuNuI1JMMTU2RcWIbk1733H284eXvXs8e9XVCAvJX8NuX lKqbxfK7SQE41UY/ZTQFtxEA0kIbqDrHAUuP4dyQNKHXjzLtGqrlDFrGqggB1DB/ DnzPTYYw/pJMMg== -----END CERTIFICATE-----Generated at Sat Dec 6 11:08:02 2025 by rpki-client