This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/44f874-446c-4646-8db0-d99f66ef606c/1/MY2rcPRKfrixz8E3Qz_NTXigOwU.mft File: MY2rcPRKfrixz8E3Qz_NTXigOwU.mft (raw, json) Hash identifier: mGUu3NvKlGLOaoYKYWXdkxp0UcIQfM3SHeii7vbzuKA= Subject key identifier: 20:B7:25:CD:D9:30:B7:73:5C:2C:45:B2:3E:EE:D5:09:89:21:5D:1E Authority key identifier: 31:8D:AB:70:F4:4A:7E:B8:B1:CF:C1:37:43:3F:CD:4D:78:A0:3B:05 Certificate issuer: /CN=318dab70f44a7eb8b1cfc137433fcd4d78a03b05 Certificate serial: 019B597642E90EC4EA1C79B5EC40095F861E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MY2rcPRKfrixz8E3Qz_NTXigOwU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/44f874-446c-4646-8db0-d99f66ef606c/1/MY2rcPRKfrixz8E3Qz_NTXigOwU.mft Manifest number: 0296 Signing time: Fri 26 Dec 2025 07:01:21 +0000 Manifest this update: Fri 26 Dec 2025 07:01:21 +0000 Manifest next update: Sat 27 Dec 2025 07:01:21 +0000 Files and hashes: 1: 7IBTUseRk7zv94Dnpevsji-MPak.roa (hash: OI9qfsQPi4f7OJOO0DKYF4KRnwctmOowvulRpTfATm8=) 2: HJdicrhK0X58hHeVpTRveQPzgSA.asa (hash: GnsE5zVVUGgOlqc4oqkgxYqYyAJUdLN6bxMsAfebi24=) 3: MY2rcPRKfrixz8E3Qz_NTXigOwU.crl (hash: KzLrssxmLJ44r1WVdgxqmfUbv5GHiE+qVhZtRjPpaJ4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/44f874-446c-4646-8db0-d99f66ef606c/1/MY2rcPRKfrixz8E3Qz_NTXigOwU.crl rsync://rpki.ripe.net/repository/DEFAULT/39/44f874-446c-4646-8db0-d99f66ef606c/1/MY2rcPRKfrixz8E3Qz_NTXigOwU.mft rsync://rpki.ripe.net/repository/DEFAULT/MY2rcPRKfrixz8E3Qz_NTXigOwU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:76:42:e9:0e:c4:ea:1c:79:b5:ec:40:09:5f:86:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=318dab70f44a7eb8b1cfc137433fcd4d78a03b05 Validity Not Before: Dec 26 07:01:21 2025 GMT Not After : Dec 27 07:01:21 2025 GMT Subject: CN=20b725cdd930b7735c2c45b23eeed50989215d1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:ee:76:20:7d:8b:c8:a3:19:d7:60:03:e4:3e: dc:43:f2:b7:1f:ed:52:69:63:6a:f3:72:e7:30:82: be:f2:ec:14:29:bb:75:dc:da:7b:ce:fc:bd:05:83: 30:74:cf:05:36:e1:e2:14:29:84:70:2c:3c:36:e7: 60:33:bd:b3:f9:c9:49:1d:fb:ce:07:9b:0e:cc:f7: fb:3f:f4:b5:12:e9:1c:1b:53:38:d7:d9:50:00:54: 52:1b:03:72:96:e4:84:ae:36:24:3d:1c:03:c1:d3: c1:ab:b9:94:a9:af:19:23:65:81:41:2a:a6:9c:01: b2:50:fb:03:e8:c2:98:d2:02:33:e6:f4:f1:fe:78: dc:96:42:4f:76:9a:0b:bd:3d:f4:4a:1d:5e:12:93: 95:29:eb:17:51:a7:37:23:a9:49:d8:f0:f4:de:d8: 49:4a:e0:97:ff:f1:d5:28:47:78:40:90:82:74:b4: 54:9f:e8:af:f8:c1:44:f8:4a:36:76:ad:38:90:1c: 28:01:0f:7f:03:84:37:00:57:b6:48:58:5c:43:46: b8:b6:b4:58:d1:9e:73:08:21:28:13:47:1a:b9:a8: 75:da:81:d3:cc:8a:eb:b5:f9:bd:09:01:a6:97:e2: c7:88:c2:a0:8a:27:87:44:51:2d:79:b8:72:bf:66: ed:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:B7:25:CD:D9:30:B7:73:5C:2C:45:B2:3E:EE:D5:09:89:21:5D:1E X509v3 Authority Key Identifier: keyid:31:8D:AB:70:F4:4A:7E:B8:B1:CF:C1:37:43:3F:CD:4D:78:A0:3B:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MY2rcPRKfrixz8E3Qz_NTXigOwU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/44f874-446c-4646-8db0-d99f66ef606c/1/MY2rcPRKfrixz8E3Qz_NTXigOwU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/39/44f874-446c-4646-8db0-d99f66ef606c/1/MY2rcPRKfrixz8E3Qz_NTXigOwU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:a0:00:e6:46:d6:06:53:03:b3:7b:d4:69:86:87:1d:d0:d6: 4c:b5:9b:88:5b:06:16:94:b6:29:7f:fa:fc:b1:3b:6c:6d:67: 51:48:fd:dc:a1:a3:95:4e:be:2d:6e:a3:6e:b7:2f:b6:81:79: ef:7c:cc:61:20:7c:76:e2:c4:eb:1f:0a:c8:44:1d:9e:6f:86: 96:a3:a9:a2:8c:cc:a4:d2:a1:0e:5a:9e:87:75:6c:1d:4c:90: f4:96:e7:73:3a:79:ca:a3:ee:4f:58:6d:e6:a9:a4:85:57:73: d6:52:24:4a:b0:5e:04:c2:cb:96:1e:1b:71:5c:f4:2b:36:0d: c4:cf:ce:2c:17:68:57:7c:ef:b3:dd:15:f1:e0:e2:48:3a:d0: f6:60:1e:0b:2d:17:1f:ab:4e:35:84:ee:a7:4f:e9:0d:a6:55: 5c:f6:05:b6:bd:99:c7:e5:40:d5:1f:2b:00:ff:83:de:ab:c9: 89:da:32:cb:15:1e:4d:b1:8a:2c:47:8f:ac:e1:16:c1:91:5a: 48:1e:6c:11:7d:84:bc:d4:47:23:47:6a:01:89:15:8e:be:ca: e2:07:b3:45:df:09:1c:9c:f9:b2:0c:15:fc:e5:5f:c5:09:16: da:26:d1:05:ec:6c:10:47:c7:ca:25:50:64:90:8b:a5:5f:83: 9b:90:15:99 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZdkLpDsTqHHm17EAJX4YeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxOGRhYjcwZjQ0YTdlYjhiMWNmYzEzNzQzM2ZjZDRkNzhh MDNiMDUwHhcNMjUxMjI2MDcwMTIxWhcNMjUxMjI3MDcwMTIxWjAzMTEwLwYDVQQD EygyMGI3MjVjZGQ5MzBiNzczNWMyYzQ1YjIzZWVlZDUwOTg5MjE1ZDFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAke52IH2LyKMZ12AD5D7cQ/K3H+1S aWNq83LnMIK+8uwUKbt13Np7zvy9BYMwdM8FNuHiFCmEcCw8NudgM72z+clJHfvO B5sOzPf7P/S1EukcG1M419lQAFRSGwNyluSErjYkPRwDwdPBq7mUqa8ZI2WBQSqm nAGyUPsD6MKY0gIz5vTx/njclkJPdpoLvT30Sh1eEpOVKesXUac3I6lJ2PD03thJ SuCX//HVKEd4QJCCdLRUn+iv+MFE+Eo2dq04kBwoAQ9/A4Q3AFe2SFhcQ0a4trRY 0Z5zCCEoE0cauah12oHTzIrrtfm9CQGml+LHiMKgiieHRFEtebhyv2btIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCC3Jc3ZMLdzXCxFsj7u1QmJIV0eMB8GA1UdIwQY MBaAFDGNq3D0Sn64sc/BN0M/zU14oDsFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTVkycmNQUktmcml4ejhFM1F6X05UWGlnT3dVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS80NGY4NzQtNDQ2Yy00NjQ2LThkYjAt ZDk5ZjY2ZWY2MDZjLzEvTVkycmNQUktmcml4ejhFM1F6X05UWGlnT3dVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOS80NGY4NzQtNDQ2Yy00NjQ2LThkYjAtZDk5ZjY2ZWY2MDZj LzEvTVkycmNQUktmcml4ejhFM1F6X05UWGlnT3dVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL6AA5kbW BlMDs3vUaYaHHdDWTLWbiFsGFpS2KX/6/LE7bG1nUUj93KGjlU6+LW6jbrcvtoF5 73zMYSB8duLE6x8KyEQdnm+GlqOpoozMpNKhDlqeh3VsHUyQ9Jbnczp5yqPuT1ht 5qmkhVdz1lIkSrBeBMLLlh4bcVz0KzYNxM/OLBdoV3zvs90V8eDiSDrQ9mAeCy0X H6tONYTup0/pDaZVXPYFtr2Zx+VA1R8rAP+D3qvJidoyyxUeTbGKLEePrOEWwZFa SB5sEX2EvNRHI0dqAYkVjr7K4gezRd8JHJz5sgwV/OVfxQkW2ibRBexsEEfHyiVQ ZJCLpV+Dm5AVmQ== -----END CERTIFICATE-----Generated at Fri Dec 26 14:07:22 2025 by rpki-client