This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/6ef832-d4a3-4614-83eb-ba177c197965/1/cMySQTZlvWsN3lGpprVl5ywyHlI.mft File: cMySQTZlvWsN3lGpprVl5ywyHlI.mft (raw, json) Hash identifier: 92FQEr+UGMLjUETAoRe1gzpauB4rJSXzWomRXi/eO5g= Subject key identifier: 59:F5:96:E4:24:27:49:D8:00:45:7E:09:91:FF:98:39:53:0A:59:A5 Authority key identifier: 70:CC:92:41:36:65:BD:6B:0D:DE:51:A9:A6:B5:65:E7:2C:32:1E:52 Certificate issuer: /CN=70cc92413665bd6b0dde51a9a6b565e72c321e52 Certificate serial: 019B4BF173A47915D91C818BACA964CE0FC6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cMySQTZlvWsN3lGpprVl5ywyHlI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/6ef832-d4a3-4614-83eb-ba177c197965/1/cMySQTZlvWsN3lGpprVl5ywyHlI.mft Manifest number: 086C Signing time: Tue 23 Dec 2025 16:01:13 +0000 Manifest this update: Tue 23 Dec 2025 16:01:13 +0000 Manifest next update: Wed 24 Dec 2025 16:01:13 +0000 Files and hashes: 1: cMySQTZlvWsN3lGpprVl5ywyHlI.crl (hash: K1uYqYUF0PK4s2I4Lh3NGqe6C4Gnp8MzCSWBXNVwx/Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/6ef832-d4a3-4614-83eb-ba177c197965/1/cMySQTZlvWsN3lGpprVl5ywyHlI.crl rsync://rpki.ripe.net/repository/DEFAULT/40/6ef832-d4a3-4614-83eb-ba177c197965/1/cMySQTZlvWsN3lGpprVl5ywyHlI.mft rsync://rpki.ripe.net/repository/DEFAULT/cMySQTZlvWsN3lGpprVl5ywyHlI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 15:46:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4b:f1:73:a4:79:15:d9:1c:81:8b:ac:a9:64:ce:0f:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70cc92413665bd6b0dde51a9a6b565e72c321e52 Validity Not Before: Dec 23 16:01:13 2025 GMT Not After : Dec 24 16:01:13 2025 GMT Subject: CN=59f596e4242749d800457e0991ff9839530a59a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:9d:08:32:a9:81:8f:de:9f:98:c1:f4:17:87: 38:cb:58:7b:98:a7:65:a6:d2:97:c5:72:5b:78:4a: e5:df:07:a4:62:ee:84:2e:5e:29:80:38:0d:cf:92: 6a:53:5d:3e:43:bb:9f:9c:24:de:7f:cf:73:25:c8: f5:a4:b3:ee:53:a6:69:30:0a:f5:17:a5:d1:d5:93: 21:27:ff:6c:01:09:ea:f2:22:80:33:5b:9b:a8:bc: 5c:9a:80:13:db:e2:e2:32:e8:fe:45:52:01:5a:61: 1a:ba:e5:bf:4f:8f:cc:3b:f0:5c:ef:15:b9:60:71: e3:cd:f7:ab:ca:5c:95:e6:aa:1f:a6:39:62:98:53: 49:2d:40:e7:bb:46:e4:25:ac:4d:88:35:73:47:c3: 73:f1:98:5e:79:43:3b:81:4e:d8:50:d0:d7:91:07: 36:00:1f:fc:43:e8:8b:46:26:6b:52:0a:dd:8e:ae: 72:d0:15:95:91:bf:11:29:a4:7c:b4:b2:d1:8e:dd: 5d:10:6c:c6:5c:ce:e8:dc:7d:84:c5:8c:c8:69:b9: 52:ba:c2:e4:70:32:e3:6a:e8:a6:86:0a:ee:79:8e: 11:45:23:74:06:4f:db:f6:99:50:95:a1:2d:cc:5d: de:e7:c6:a2:06:e3:e1:1b:01:7e:2b:84:4d:6c:d7: 34:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:F5:96:E4:24:27:49:D8:00:45:7E:09:91:FF:98:39:53:0A:59:A5 X509v3 Authority Key Identifier: keyid:70:CC:92:41:36:65:BD:6B:0D:DE:51:A9:A6:B5:65:E7:2C:32:1E:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMySQTZlvWsN3lGpprVl5ywyHlI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/6ef832-d4a3-4614-83eb-ba177c197965/1/cMySQTZlvWsN3lGpprVl5ywyHlI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/6ef832-d4a3-4614-83eb-ba177c197965/1/cMySQTZlvWsN3lGpprVl5ywyHlI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:78:6c:14:ff:bb:45:f1:84:df:dc:7c:00:7a:0f:50:99:8f: 2f:07:48:82:b5:74:4e:72:b7:4e:92:b4:36:38:3a:29:fb:df: 0e:0b:55:20:b9:a5:61:a3:47:e9:e6:6e:83:e0:8d:c1:ef:9b: 22:32:50:0d:22:49:c4:ec:0b:73:b5:14:e2:0c:b2:bc:cf:1f: c7:2b:6d:8b:91:bf:46:9c:86:c4:ed:43:11:11:5c:a0:ed:97: b0:b0:98:68:ca:70:92:16:76:39:e4:d6:2e:8e:67:ad:d9:5f: ff:94:37:b7:48:71:67:5b:96:e1:af:54:f9:b0:b5:ca:5e:2e: 1e:5a:51:a5:0f:29:12:83:78:7c:4b:2d:17:13:31:c6:bd:ac: e3:81:21:5e:94:31:b7:a2:3f:ce:2a:1e:13:af:e1:94:85:ef: 21:a1:1f:7f:be:d3:ee:0f:a6:4d:f4:53:cb:e8:45:c4:d7:8a: 86:0e:d7:62:6c:e4:ff:0f:20:d1:c6:c7:2e:3e:2c:75:70:1e: fa:8b:f6:2b:0d:9e:ae:d8:3a:a8:8b:f9:c9:90:2d:9e:d2:1b: 4e:88:c4:c4:fd:4c:05:ab:92:7c:27:02:34:ea:f6:4e:eb:fd: 5a:bf:39:5a:e6:08:09:9e:79:36:da:3b:66:a1:0a:48:52:3a: 55:3f:82:6b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtL8XOkeRXZHIGLrKlkzg/GMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwY2M5MjQxMzY2NWJkNmIwZGRlNTFhOWE2YjU2NWU3MmMz MjFlNTIwHhcNMjUxMjIzMTYwMTEzWhcNMjUxMjI0MTYwMTEzWjAzMTEwLwYDVQQD Eyg1OWY1OTZlNDI0Mjc0OWQ4MDA0NTdlMDk5MWZmOTgzOTUzMGE1OWE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApp0IMqmBj96fmMH0F4c4y1h7mKdl ptKXxXJbeErl3wekYu6ELl4pgDgNz5JqU10+Q7ufnCTef89zJcj1pLPuU6ZpMAr1 F6XR1ZMhJ/9sAQnq8iKAM1ubqLxcmoAT2+LiMuj+RVIBWmEauuW/T4/MO/Bc7xW5 YHHjzferylyV5qofpjlimFNJLUDnu0bkJaxNiDVzR8Nz8ZheeUM7gU7YUNDXkQc2 AB/8Q+iLRiZrUgrdjq5y0BWVkb8RKaR8tLLRjt1dEGzGXM7o3H2ExYzIablSusLk cDLjauimhgrueY4RRSN0Bk/b9plQlaEtzF3e58aiBuPhGwF+K4RNbNc0RwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFn1luQkJ0nYAEV+CZH/mDlTClmlMB8GA1UdIwQY MBaAFHDMkkE2Zb1rDd5Rqaa1ZecsMh5SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY015U1FUWmx2V3NOM2xHcHByVmw1eXd5SGxJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC82ZWY4MzItZDRhMy00NjE0LTgzZWIt YmExNzdjMTk3OTY1LzEvY015U1FUWmx2V3NOM2xHcHByVmw1eXd5SGxJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC82ZWY4MzItZDRhMy00NjE0LTgzZWItYmExNzdjMTk3OTY1 LzEvY015U1FUWmx2V3NOM2xHcHByVmw1eXd5SGxJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsXhsFP+7 RfGE39x8AHoPUJmPLwdIgrV0TnK3TpK0Njg6KfvfDgtVILmlYaNH6eZug+CNwe+b IjJQDSJJxOwLc7UU4gyyvM8fxytti5G/RpyGxO1DERFcoO2XsLCYaMpwkhZ2OeTW Lo5nrdlf/5Q3t0hxZ1uW4a9U+bC1yl4uHlpRpQ8pEoN4fEstFxMxxr2s44EhXpQx t6I/zioeE6/hlIXvIaEff77T7g+mTfRTy+hFxNeKhg7XYmzk/w8g0cbHLj4sdXAe +ov2Kw2ertg6qIv5yZAtntIbTojExP1MBauSfCcCNOr2Tuv9Wr85WuYICZ55Nto7 ZqEKSFI6VT+Caw== -----END CERTIFICATE-----Generated at Tue Dec 23 18:56:59 2025 by rpki-client