This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/726a52-5c73-4905-a19d-9f72f8dec468/1/cYTIBdTlPCoTLHOcTjdSr8Na6ZU.mft File: cYTIBdTlPCoTLHOcTjdSr8Na6ZU.mft (raw, json) Hash identifier: Hp1UVWeB1/WQXGU7MJ2BByT2Ktw26nVvXHupyTZ6Dxg= Subject key identifier: 3C:F3:30:01:28:D0:21:B6:68:49:10:13:2F:C1:EE:A5:39:F2:1A:2D Authority key identifier: 71:84:C8:05:D4:E5:3C:2A:13:2C:73:9C:4E:37:52:AF:C3:5A:E9:95 Certificate issuer: /CN=7184c805d4e53c2a132c739c4e3752afc35ae995 Certificate serial: 019B563E41E46635AB0C82D52D4F61E14F38 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cYTIBdTlPCoTLHOcTjdSr8Na6ZU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/726a52-5c73-4905-a19d-9f72f8dec468/1/cYTIBdTlPCoTLHOcTjdSr8Na6ZU.mft Manifest number: 0A60 Signing time: Thu 25 Dec 2025 16:01:19 +0000 Manifest this update: Thu 25 Dec 2025 16:01:19 +0000 Manifest next update: Fri 26 Dec 2025 16:01:19 +0000 Files and hashes: 1: cYTIBdTlPCoTLHOcTjdSr8Na6ZU.crl (hash: aNPLTXURXNjApPvf61Wrc+Rt0D8QeifmiFlx3BJZtmo=) 2: hyeaa7WHUt2Rcq_9qyU3ynO8FJA.roa (hash: 1lxOMkF/m/0MqdFiTX81zywF3SRcX+JuIQEJSNJChMU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/726a52-5c73-4905-a19d-9f72f8dec468/1/cYTIBdTlPCoTLHOcTjdSr8Na6ZU.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/726a52-5c73-4905-a19d-9f72f8dec468/1/cYTIBdTlPCoTLHOcTjdSr8Na6ZU.mft rsync://rpki.ripe.net/repository/DEFAULT/cYTIBdTlPCoTLHOcTjdSr8Na6ZU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 10:17:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:56:3e:41:e4:66:35:ab:0c:82:d5:2d:4f:61:e1:4f:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7184c805d4e53c2a132c739c4e3752afc35ae995 Validity Not Before: Dec 25 16:01:19 2025 GMT Not After : Dec 26 16:01:19 2025 GMT Subject: CN=3cf3300128d021b6684910132fc1eea539f21a2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:18:91:f0:ce:41:6e:60:04:42:f6:75:63:17: 1a:6b:1f:23:c9:af:fc:12:06:f7:ca:ee:20:aa:25: d3:ea:f1:24:0c:38:10:73:0d:d9:1e:78:56:e5:71: a9:6f:41:9f:57:d0:ce:00:b5:a9:8d:7b:06:85:c1: fa:39:89:0c:97:f5:ff:b1:0f:7c:6b:1d:7b:b4:a9: 99:91:12:03:ba:4e:ed:37:36:00:34:48:1e:d1:dd: 1c:f9:7d:68:ef:f3:d6:5d:fd:49:fa:85:bf:bc:e3: d9:fa:76:82:9d:07:88:87:6c:a9:7b:81:d9:9d:94: 50:cd:fb:d1:39:26:47:45:4e:53:f2:2f:36:d1:fd: 7b:30:e8:4f:6f:fa:bd:d3:6c:f9:62:b1:97:75:91: 55:36:a2:0a:56:51:56:5b:9a:b8:21:34:e2:b4:27: 73:fc:40:cd:a7:b0:db:df:38:e3:b1:b1:f9:9d:d0: 5e:a4:d5:cf:b6:ba:89:ae:bd:27:ea:78:69:00:32: 60:4b:ce:b8:81:08:8a:a6:3e:e4:e7:24:c7:3e:f6: 0a:9e:76:3d:60:e0:3d:e6:99:43:22:d5:62:bd:ee: 7f:33:46:bc:35:7a:a8:7b:6d:61:a5:59:07:de:53: 82:ff:7f:8b:77:2e:c4:13:cc:e0:87:25:4a:34:68: 21:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:F3:30:01:28:D0:21:B6:68:49:10:13:2F:C1:EE:A5:39:F2:1A:2D X509v3 Authority Key Identifier: keyid:71:84:C8:05:D4:E5:3C:2A:13:2C:73:9C:4E:37:52:AF:C3:5A:E9:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cYTIBdTlPCoTLHOcTjdSr8Na6ZU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/726a52-5c73-4905-a19d-9f72f8dec468/1/cYTIBdTlPCoTLHOcTjdSr8Na6ZU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/726a52-5c73-4905-a19d-9f72f8dec468/1/cYTIBdTlPCoTLHOcTjdSr8Na6ZU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:00:c5:7b:92:e4:e5:bc:ad:7d:06:05:0a:1e:40:1a:8e:e2: 78:a3:15:5e:76:95:2e:8b:89:90:ec:2c:72:cf:94:9a:3b:cb: fc:48:10:2e:b1:1d:07:9b:bd:cc:a1:c8:cc:e3:80:f3:86:23: bb:86:db:26:d4:a9:52:df:12:dd:61:1f:14:c0:6a:0c:ae:0a: 98:27:56:28:51:f6:08:33:5a:14:ef:19:a9:90:a9:ef:b7:fa: 68:ea:5c:f1:3a:c3:92:5d:47:69:d5:a1:c1:89:c9:a5:e8:96: 7e:79:37:7f:cd:59:f4:d3:4a:e0:bc:27:84:f9:c8:4d:84:cd: 8a:8f:f3:1a:47:26:9c:bc:b0:bc:4e:81:b7:70:38:72:c5:20: 1e:5a:f6:c4:aa:03:66:64:de:89:2d:b2:bc:b6:03:76:87:15: 6d:14:5b:e2:1c:27:24:e0:6d:35:98:ab:8c:59:14:10:81:9f: 0a:c2:ab:66:47:e9:f1:ec:be:01:13:ec:a9:1b:26:d4:af:04: a8:cf:ef:a4:c2:26:2e:83:dc:ef:57:76:40:84:ea:ef:1c:13: 17:94:42:e1:ba:7a:95:e0:71:44:f2:e0:da:78:04:b9:03:0a: a3:21:9e:3e:10:e2:c7:e1:23:da:fd:c1:d7:12:e1:d9:c3:00: 1c:88:21:22 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtWPkHkZjWrDILVLU9h4U84MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcxODRjODA1ZDRlNTNjMmExMzJjNzM5YzRlMzc1MmFmYzM1 YWU5OTUwHhcNMjUxMjI1MTYwMTE5WhcNMjUxMjI2MTYwMTE5WjAzMTEwLwYDVQQD EygzY2YzMzAwMTI4ZDAyMWI2Njg0OTEwMTMyZmMxZWVhNTM5ZjIxYTJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxxiR8M5BbmAEQvZ1Yxcaax8jya/8 Egb3yu4gqiXT6vEkDDgQcw3ZHnhW5XGpb0GfV9DOALWpjXsGhcH6OYkMl/X/sQ98 ax17tKmZkRIDuk7tNzYANEge0d0c+X1o7/PWXf1J+oW/vOPZ+naCnQeIh2ype4HZ nZRQzfvROSZHRU5T8i820f17MOhPb/q902z5YrGXdZFVNqIKVlFWW5q4ITTitCdz /EDNp7Db3zjjsbH5ndBepNXPtrqJrr0n6nhpADJgS864gQiKpj7k5yTHPvYKnnY9 YOA95plDItVive5/M0a8NXqoe21hpVkH3lOC/3+Ldy7EE8zghyVKNGghJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDzzMAEo0CG2aEkQEy/B7qU58hotMB8GA1UdIwQY MBaAFHGEyAXU5TwqEyxznE43Uq/DWumVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY1lUSUJkVGxQQ29UTEhPY1RqZFNyOE5hNlpVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC83MjZhNTItNWM3My00OTA1LWExOWQt OWY3MmY4ZGVjNDY4LzEvY1lUSUJkVGxQQ29UTEhPY1RqZFNyOE5hNlpVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC83MjZhNTItNWM3My00OTA1LWExOWQtOWY3MmY4ZGVjNDY4 LzEvY1lUSUJkVGxQQ29UTEhPY1RqZFNyOE5hNlpVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASgDFe5Lk 5bytfQYFCh5AGo7ieKMVXnaVLouJkOwscs+UmjvL/EgQLrEdB5u9zKHIzOOA84Yj u4bbJtSpUt8S3WEfFMBqDK4KmCdWKFH2CDNaFO8ZqZCp77f6aOpc8TrDkl1HadWh wYnJpeiWfnk3f81Z9NNK4LwnhPnITYTNio/zGkcmnLywvE6Bt3A4csUgHlr2xKoD ZmTeiS2yvLYDdocVbRRb4hwnJOBtNZirjFkUEIGfCsKrZkfp8ey+ARPsqRsm1K8E qM/vpMImLoPc71d2QITq7xwTF5RC4bp6leBxRPLg2ngEuQMKoyGePhDix+Ej2v3B 1xLh2cMAHIghIg== -----END CERTIFICATE-----Generated at Thu Dec 25 17:44:16 2025 by rpki-client