This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/f57571-980f-4c57-a4cf-6cb4849cfd71/1/y92Il7O48S4yaeHZHBXqtLNHkHA.mft File: y92Il7O48S4yaeHZHBXqtLNHkHA.mft (raw, json) Hash identifier: oB7sgBtjV3ZncobdfR8wDLLJcRP6Bum3sgsEqq2m0KM= Subject key identifier: 70:C4:2B:04:3D:79:02:3F:91:DD:53:C5:3A:53:2F:B3:3D:23:13:ED Authority key identifier: CB:DD:88:97:B3:B8:F1:2E:32:69:E1:D9:1C:15:EA:B4:B3:47:90:70 Certificate issuer: /CN=cbdd8897b3b8f12e3269e1d91c15eab4b3479070 Certificate serial: 019B405BFFB19CD695B41ECB883952DA6215 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y92Il7O48S4yaeHZHBXqtLNHkHA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/f57571-980f-4c57-a4cf-6cb4849cfd71/1/y92Il7O48S4yaeHZHBXqtLNHkHA.mft Manifest number: 0E8F Signing time: Sun 21 Dec 2025 10:02:09 +0000 Manifest this update: Sun 21 Dec 2025 10:02:09 +0000 Manifest next update: Mon 22 Dec 2025 10:02:09 +0000 Files and hashes: 1: y92Il7O48S4yaeHZHBXqtLNHkHA.crl (hash: qYI7OCVOjWVfl/PGixZVpFdnwHqIuIiXPcZ6H8kHamg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/f57571-980f-4c57-a4cf-6cb4849cfd71/1/y92Il7O48S4yaeHZHBXqtLNHkHA.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/f57571-980f-4c57-a4cf-6cb4849cfd71/1/y92Il7O48S4yaeHZHBXqtLNHkHA.mft rsync://rpki.ripe.net/repository/DEFAULT/y92Il7O48S4yaeHZHBXqtLNHkHA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 10:02:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:5b:ff:b1:9c:d6:95:b4:1e:cb:88:39:52:da:62:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cbdd8897b3b8f12e3269e1d91c15eab4b3479070 Validity Not Before: Dec 21 10:02:09 2025 GMT Not After : Dec 22 10:02:09 2025 GMT Subject: CN=70c42b043d79023f91dd53c53a532fb33d2313ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:0e:7b:a8:2c:cf:6e:6e:a4:b7:42:4c:be:db: c6:0f:63:d0:81:10:c9:de:03:e7:f1:09:81:f2:bf: dc:50:68:11:da:f2:8e:50:9d:99:1b:82:cf:6c:66: 61:2d:95:58:3c:89:7b:59:a5:d8:8e:bc:fb:c1:5d: 93:e9:f5:cb:92:1f:73:db:43:04:3b:5c:ac:1f:ee: 00:c5:a4:b9:43:e5:18:43:88:d1:0a:f6:ad:1a:1d: 5e:d8:6c:6a:85:b6:56:4f:4c:5e:68:2e:b6:7e:65: fb:2c:0b:cc:ed:c2:9a:85:47:41:c1:b0:c1:5e:99: 4c:1e:a5:98:f3:82:a0:f2:f7:ba:5a:a5:f9:bd:f9: c7:81:98:d3:fe:0e:dd:d1:a8:67:68:b2:32:12:86: 5e:b2:9e:81:0d:b2:62:49:5b:ff:9b:6d:fc:fa:13: 6c:ed:18:0e:7e:e1:7d:ca:a2:6e:9a:ba:e4:aa:bd: 62:a8:05:b2:3d:6e:0f:1f:3f:24:8d:36:d2:0e:6e: 71:22:b6:03:46:26:45:0a:24:15:aa:79:b7:a5:f1: e9:6d:b1:16:ab:97:e1:1c:b2:f4:7f:12:dd:59:7a: 72:a2:d4:fc:63:1b:f5:d4:9d:52:65:9c:4c:68:5d: 92:cc:47:5f:1b:73:6f:45:8f:5f:12:4d:aa:d9:a0: 8c:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:C4:2B:04:3D:79:02:3F:91:DD:53:C5:3A:53:2F:B3:3D:23:13:ED X509v3 Authority Key Identifier: keyid:CB:DD:88:97:B3:B8:F1:2E:32:69:E1:D9:1C:15:EA:B4:B3:47:90:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y92Il7O48S4yaeHZHBXqtLNHkHA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/f57571-980f-4c57-a4cf-6cb4849cfd71/1/y92Il7O48S4yaeHZHBXqtLNHkHA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/f57571-980f-4c57-a4cf-6cb4849cfd71/1/y92Il7O48S4yaeHZHBXqtLNHkHA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:56:3a:42:e8:09:27:9f:ca:e3:97:3a:8c:21:73:7b:0c:c4: 06:67:a3:73:62:12:7a:23:e7:5b:04:79:f0:58:19:46:33:c0: 4d:d5:95:e8:0e:41:fd:a1:b4:c4:e8:8c:69:28:db:c3:06:3f: 03:21:c9:7c:77:03:2b:6c:f9:a9:94:8c:64:6a:45:a9:cb:3b: e0:4a:8e:f8:11:ad:21:e7:fa:18:53:4d:94:08:58:47:d1:69: cf:ad:5f:02:c9:5e:32:01:60:48:59:6b:2f:a5:92:5f:e4:5a: 05:5e:4c:63:45:40:6c:f7:c6:ca:55:b9:35:70:39:95:75:eb: 3f:db:ef:f4:dd:bb:7f:5b:b8:71:a1:28:7f:90:2c:c0:a8:92: a0:c3:96:73:cf:96:bf:c5:e2:97:e1:af:2f:f6:37:2b:82:d8: 54:1f:df:f8:4a:02:e0:e2:1c:ea:76:a0:5c:35:24:16:59:39: a2:c1:12:df:60:26:df:da:35:6d:38:68:96:2d:09:a0:8c:79: 7f:d0:e9:20:d5:0b:35:42:40:38:49:ea:20:9b:9e:d4:7f:e1: 04:b1:2d:44:62:97:5c:66:76:f8:7f:b7:73:a4:98:f8:60:90: 6e:d1:46:9d:93:77:33:61:6f:64:59:17:96:43:63:0d:f3:97: 32:a3:97:fa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAW/+xnNaVtB7LiDlS2mIVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiZGQ4ODk3YjNiOGYxMmUzMjY5ZTFkOTFjMTVlYWI0YjM0 NzkwNzAwHhcNMjUxMjIxMTAwMjA5WhcNMjUxMjIyMTAwMjA5WjAzMTEwLwYDVQQD Eyg3MGM0MmIwNDNkNzkwMjNmOTFkZDUzYzUzYTUzMmZiMzNkMjMxM2VkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzQ57qCzPbm6kt0JMvtvGD2PQgRDJ 3gPn8QmB8r/cUGgR2vKOUJ2ZG4LPbGZhLZVYPIl7WaXYjrz7wV2T6fXLkh9z20ME O1ysH+4AxaS5Q+UYQ4jRCvatGh1e2GxqhbZWT0xeaC62fmX7LAvM7cKahUdBwbDB XplMHqWY84Kg8ve6WqX5vfnHgZjT/g7d0ahnaLIyEoZesp6BDbJiSVv/m238+hNs 7RgOfuF9yqJumrrkqr1iqAWyPW4PHz8kjTbSDm5xIrYDRiZFCiQVqnm3pfHpbbEW q5fhHLL0fxLdWXpyotT8Yxv11J1SZZxMaF2SzEdfG3NvRY9fEk2q2aCM7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHDEKwQ9eQI/kd1TxTpTL7M9IxPtMB8GA1UdIwQY MBaAFMvdiJezuPEuMmnh2RwV6rSzR5BwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveTkySWw3TzQ4UzR5YWVIWkhCWHF0TE5Ia0hBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi9mNTc1NzEtOTgwZi00YzU3LWE0Y2Yt NmNiNDg0OWNmZDcxLzEveTkySWw3TzQ4UzR5YWVIWkhCWHF0TE5Ia0hBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi9mNTc1NzEtOTgwZi00YzU3LWE0Y2YtNmNiNDg0OWNmZDcx LzEveTkySWw3TzQ4UzR5YWVIWkhCWHF0TE5Ia0hBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABlY6QugJ J5/K45c6jCFzewzEBmejc2ISeiPnWwR58FgZRjPATdWV6A5B/aG0xOiMaSjbwwY/ AyHJfHcDK2z5qZSMZGpFqcs74EqO+BGtIef6GFNNlAhYR9Fpz61fAsleMgFgSFlr L6WSX+RaBV5MY0VAbPfGylW5NXA5lXXrP9vv9N27f1u4caEof5AswKiSoMOWc8+W v8Xil+GvL/Y3K4LYVB/f+EoC4OIc6nagXDUkFlk5osES32Am39o1bTholi0JoIx5 f9DpINULNUJAOEnqIJue1H/hBLEtRGKXXGZ2+H+3c6SY+GCQbtFGnZN3M2FvZFkX lkNjDfOXMqOX+g== -----END CERTIFICATE-----Generated at Sun Dec 21 15:37:46 2025 by rpki-client