This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/05910b-25d8-413d-ac58-824c77f891c9/1/cNbQfLZOoOgZ46Cyngk_5Bljspo.mft File: cNbQfLZOoOgZ46Cyngk_5Bljspo.mft (raw, json) Hash identifier: Vj7kQBSG3PgiVqeF8KZB5YxQuXgm8IErOmyuLJOPdrA= Subject key identifier: 77:62:81:3F:D5:1D:EF:8F:87:B9:54:8B:9A:7C:7F:96:F8:B3:C2:AF Authority key identifier: 70:D6:D0:7C:B6:4E:A0:E8:19:E3:A0:B2:9E:09:3F:E4:19:63:B2:9A Certificate issuer: /CN=70d6d07cb64ea0e819e3a0b29e093fe41963b29a Certificate serial: 019B0EC97ABCADA4D8D84DAEEF253BE7610D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cNbQfLZOoOgZ46Cyngk_5Bljspo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/05910b-25d8-413d-ac58-824c77f891c9/1/cNbQfLZOoOgZ46Cyngk_5Bljspo.mft Manifest number: 176D Signing time: Thu 11 Dec 2025 19:00:43 +0000 Manifest this update: Thu 11 Dec 2025 19:00:43 +0000 Manifest next update: Fri 12 Dec 2025 19:00:43 +0000 Files and hashes: 1: cNbQfLZOoOgZ46Cyngk_5Bljspo.crl (hash: QdMsEwpfnY8rkyqSYdpDTNnaetjjRVQA4JlsuF5XacY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/05910b-25d8-413d-ac58-824c77f891c9/1/cNbQfLZOoOgZ46Cyngk_5Bljspo.crl rsync://rpki.ripe.net/repository/DEFAULT/96/05910b-25d8-413d-ac58-824c77f891c9/1/cNbQfLZOoOgZ46Cyngk_5Bljspo.mft rsync://rpki.ripe.net/repository/DEFAULT/cNbQfLZOoOgZ46Cyngk_5Bljspo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:c9:7a:bc:ad:a4:d8:d8:4d:ae:ef:25:3b:e7:61:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70d6d07cb64ea0e819e3a0b29e093fe41963b29a Validity Not Before: Dec 11 19:00:43 2025 GMT Not After : Dec 12 19:00:43 2025 GMT Subject: CN=7762813fd51def8f87b9548b9a7c7f96f8b3c2af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:26:74:c9:22:65:ca:f9:f8:b2:55:31:ba:a9: ee:48:4f:91:13:42:31:78:63:04:92:c1:8d:3f:e9: ea:46:24:4a:bb:ef:ad:17:b8:0a:a8:67:43:a0:b0: 0f:63:de:54:54:1c:7d:7d:7c:f2:0c:88:1b:fe:15: eb:0a:51:12:a1:31:81:80:67:64:93:bf:74:78:a1: e7:31:7a:b1:fc:8f:12:b0:56:9c:ef:2c:a6:cf:3b: 61:ac:8b:33:e4:73:ba:3e:bd:10:91:02:de:d4:8b: b1:dd:c4:ef:e6:7c:11:61:c8:f3:08:1b:66:d8:29: e2:55:0f:63:e0:e7:17:f3:06:ce:71:9f:37:07:5c: e9:d5:88:ba:b2:15:b6:b0:36:c3:f1:13:6c:97:03: 6a:21:b5:e0:0a:43:dd:e0:53:9d:e0:98:96:7b:16: 0a:20:59:5f:da:e2:70:47:b7:36:f7:94:d1:07:f6: 36:88:9c:83:30:8e:34:c2:92:13:c7:f1:14:9c:bd: bd:18:3d:f4:a0:f8:88:58:11:dc:2e:f2:7e:21:ed: d9:45:41:ef:78:30:6b:5c:ba:84:e5:7d:af:b9:9a: ba:22:d0:17:44:16:a3:64:e4:cd:33:2e:21:1e:28: a9:8d:29:3a:84:c9:ca:ba:1c:d1:ae:c0:8c:6c:e6: fd:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:62:81:3F:D5:1D:EF:8F:87:B9:54:8B:9A:7C:7F:96:F8:B3:C2:AF X509v3 Authority Key Identifier: keyid:70:D6:D0:7C:B6:4E:A0:E8:19:E3:A0:B2:9E:09:3F:E4:19:63:B2:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cNbQfLZOoOgZ46Cyngk_5Bljspo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/05910b-25d8-413d-ac58-824c77f891c9/1/cNbQfLZOoOgZ46Cyngk_5Bljspo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/96/05910b-25d8-413d-ac58-824c77f891c9/1/cNbQfLZOoOgZ46Cyngk_5Bljspo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:04:cb:8d:9b:38:9d:13:32:7d:0e:31:5c:ea:ea:a9:c7:68: 96:fe:2e:9e:05:4d:d4:2b:ef:21:21:7b:b0:9f:32:a6:aa:6f: 7c:b5:60:2b:7f:c9:2c:6d:10:00:f1:94:26:fc:a4:e7:7f:3f: e9:32:49:15:dd:ee:33:74:7f:27:6a:0f:88:63:3e:c4:b1:75: 60:37:f4:de:c6:4b:bc:d9:45:40:a4:60:79:d0:e2:b8:38:c7: 78:b8:5e:e1:9a:d7:1c:b9:1a:27:c6:75:85:e4:04:b7:e0:95: 9f:8d:b8:1b:c9:0c:53:26:f3:b8:b6:0b:0f:77:e7:82:4f:14: 7a:0c:41:8a:3e:46:ba:ab:3b:14:c7:e5:de:93:af:10:71:ea: f5:56:68:a5:71:24:8b:18:6b:f6:3c:3b:ee:03:11:81:a7:ce: d5:12:1b:54:3d:2b:ec:98:35:84:8f:ea:75:9b:79:4f:ca:d1: 0f:27:dc:e2:56:0a:7a:56:65:a2:35:f8:9c:73:5a:47:0c:19: df:86:d6:eb:54:93:d3:a8:db:fc:46:d3:e4:0a:4a:13:3a:8c: 50:b7:ae:fa:c2:a7:44:33:12:19:4f:c2:de:df:ac:e4:6c:ed: 0e:65:3c:1c:0b:49:6b:76:85:af:60:ca:ff:1c:42:ae:a1:60: cb:52:33:62 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOyXq8raTY2E2u7yU752ENMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwZDZkMDdjYjY0ZWEwZTgxOWUzYTBiMjllMDkzZmU0MTk2 M2IyOWEwHhcNMjUxMjExMTkwMDQzWhcNMjUxMjEyMTkwMDQzWjAzMTEwLwYDVQQD Eyg3NzYyODEzZmQ1MWRlZjhmODdiOTU0OGI5YTdjN2Y5NmY4YjNjMmFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxSZ0ySJlyvn4slUxuqnuSE+RE0Ix eGMEksGNP+nqRiRKu++tF7gKqGdDoLAPY95UVBx9fXzyDIgb/hXrClESoTGBgGdk k790eKHnMXqx/I8SsFac7yymzzthrIsz5HO6Pr0QkQLe1Iux3cTv5nwRYcjzCBtm 2CniVQ9j4OcX8wbOcZ83B1zp1Yi6shW2sDbD8RNslwNqIbXgCkPd4FOd4JiWexYK IFlf2uJwR7c295TRB/Y2iJyDMI40wpITx/EUnL29GD30oPiIWBHcLvJ+Ie3ZRUHv eDBrXLqE5X2vuZq6ItAXRBajZOTNMy4hHiipjSk6hMnKuhzRrsCMbOb9mwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHdigT/VHe+Ph7lUi5p8f5b4s8KvMB8GA1UdIwQY MBaAFHDW0Hy2TqDoGeOgsp4JP+QZY7KaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY05iUWZMWk9vT2daNDZDeW5na181Qmxqc3BvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni8wNTkxMGItMjVkOC00MTNkLWFjNTgt ODI0Yzc3Zjg5MWM5LzEvY05iUWZMWk9vT2daNDZDeW5na181Qmxqc3BvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ni8wNTkxMGItMjVkOC00MTNkLWFjNTgtODI0Yzc3Zjg5MWM5 LzEvY05iUWZMWk9vT2daNDZDeW5na181Qmxqc3BvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATATLjZs4 nRMyfQ4xXOrqqcdolv4ungVN1CvvISF7sJ8ypqpvfLVgK3/JLG0QAPGUJvyk538/ 6TJJFd3uM3R/J2oPiGM+xLF1YDf03sZLvNlFQKRgedDiuDjHeLhe4ZrXHLkaJ8Z1 heQEt+CVn424G8kMUybzuLYLD3fngk8UegxBij5Guqs7FMfl3pOvEHHq9VZopXEk ixhr9jw77gMRgafO1RIbVD0r7Jg1hI/qdZt5T8rRDyfc4lYKelZlojX4nHNaRwwZ 34bW61ST06jb/EbT5ApKEzqMULeu+sKnRDMSGU/C3t+s5GztDmU8HAtJa3aFr2DK /xxCrqFgy1IzYg== -----END CERTIFICATE-----Generated at Fri Dec 12 02:51:37 2025 by rpki-client