This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/b9c1d7-2aed-4696-80a7-d5abf5031d21/1/mYS56xIiNxEcH4yldwfscwcpHug.mft File: mYS56xIiNxEcH4yldwfscwcpHug.mft (raw, json) Hash identifier: 9m6akJ5rywVSK8Gh3xz/RmWMoRHT9SqGqRfhXD7WLhA= Subject key identifier: 85:45:00:0C:23:FF:62:CD:08:05:B3:24:9E:FD:1F:60:FD:33:18:08 Authority key identifier: 99:84:B9:EB:12:22:37:11:1C:1F:8C:A5:77:07:EC:73:07:29:1E:E8 Certificate issuer: /CN=9984b9eb122237111c1f8ca57707ec7307291ee8 Certificate serial: 019B0E25A5DB9146DA2D488AFFCB3AA4E87C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mYS56xIiNxEcH4yldwfscwcpHug.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/b9c1d7-2aed-4696-80a7-d5abf5031d21/1/mYS56xIiNxEcH4yldwfscwcpHug.mft Manifest number: 1775 Signing time: Thu 11 Dec 2025 16:01:46 +0000 Manifest this update: Thu 11 Dec 2025 16:01:46 +0000 Manifest next update: Fri 12 Dec 2025 16:01:46 +0000 Files and hashes: 1: 6xQaOng6ybJiigzf2XvWmzrMXU4.roa (hash: VWLbjjUJx9s0aleI0gYr1/W1oVoltzBATX0SfpaTSw8=) 2: XEpy5lCOl0Tmub4xGBtkQEupj7o.roa (hash: VFCRN96ZupXuhJWonAUO0kRSMoyUuFboGTCKurSs1xw=) 3: mYS56xIiNxEcH4yldwfscwcpHug.crl (hash: Q1yc8+LgZzIZtZ4vaaZCT+VTCv5gWVJNeUFLNs3Wro4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/b9c1d7-2aed-4696-80a7-d5abf5031d21/1/mYS56xIiNxEcH4yldwfscwcpHug.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/b9c1d7-2aed-4696-80a7-d5abf5031d21/1/mYS56xIiNxEcH4yldwfscwcpHug.mft rsync://rpki.ripe.net/repository/DEFAULT/mYS56xIiNxEcH4yldwfscwcpHug.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:25:a5:db:91:46:da:2d:48:8a:ff:cb:3a:a4:e8:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9984b9eb122237111c1f8ca57707ec7307291ee8 Validity Not Before: Dec 11 16:01:46 2025 GMT Not After : Dec 12 16:01:46 2025 GMT Subject: CN=8545000c23ff62cd0805b3249efd1f60fd331808 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:a4:6d:4d:cc:25:07:5f:41:4f:85:43:78:ed: 70:ee:c9:e9:3c:6c:80:7f:ec:eb:69:bf:dd:4f:99: 3e:91:bd:14:9d:d3:4f:d7:7c:fc:40:b0:07:03:03: 22:2b:74:bc:09:4b:21:15:30:cb:13:56:6d:c6:e4: 65:b4:22:81:db:f7:6d:0b:ec:b9:11:da:55:0d:d7: ed:b3:7c:4e:e5:8e:81:53:fe:46:78:c9:09:ba:6f: 83:c2:9f:8c:ec:de:ca:8e:38:57:91:45:3f:c4:2d: 01:8a:87:1c:ae:6c:4f:2f:95:4b:2f:28:e4:11:6b: fd:89:ca:3e:09:47:b5:c6:6a:f4:69:cc:7a:8e:a2: 81:69:bc:e4:55:fe:4b:a7:88:8d:65:2e:14:07:4a: c9:2c:07:23:ae:a1:05:ef:40:bb:c5:ae:26:5d:08: 46:1d:d6:be:bf:03:c8:c9:cd:28:e5:f0:e4:08:0e: 5e:bd:ff:94:4c:6a:2a:49:63:66:8f:8e:b7:69:fc: 35:1d:da:8f:61:a3:45:31:74:88:0a:af:95:27:86: c1:02:57:3e:2c:d3:df:ac:d0:b1:dd:06:00:41:aa: ae:14:34:6f:26:d0:f9:26:e4:4d:41:07:04:44:b2: 1e:0f:22:94:d7:47:92:48:07:47:f2:78:96:ce:e5: e7:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:45:00:0C:23:FF:62:CD:08:05:B3:24:9E:FD:1F:60:FD:33:18:08 X509v3 Authority Key Identifier: keyid:99:84:B9:EB:12:22:37:11:1C:1F:8C:A5:77:07:EC:73:07:29:1E:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mYS56xIiNxEcH4yldwfscwcpHug.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/b9c1d7-2aed-4696-80a7-d5abf5031d21/1/mYS56xIiNxEcH4yldwfscwcpHug.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/b9c1d7-2aed-4696-80a7-d5abf5031d21/1/mYS56xIiNxEcH4yldwfscwcpHug.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:2a:84:af:91:da:27:2b:6f:f8:14:f2:f6:bd:cc:25:2c:61: d1:ef:9e:b8:5b:b6:8d:d6:ca:2e:24:93:3f:66:49:f8:72:03: 5b:7c:89:5b:70:14:82:ef:ba:0c:62:e3:9b:93:83:de:78:b8: 5e:1d:4c:a0:fb:0f:66:9d:67:40:71:b2:08:27:e5:98:87:79: 2f:41:a0:64:d3:ce:0f:2f:ba:43:e3:53:b9:5a:19:4a:70:7d: 85:dc:3e:cd:7b:ec:41:65:1c:10:42:03:e2:e7:35:51:59:28: 55:bf:18:c5:3f:9c:0a:18:d1:3f:85:f5:64:b7:f4:62:9d:78: 3d:0d:e1:00:dd:39:3c:53:4a:02:d7:7d:59:4d:18:ad:2d:27: 97:89:35:e6:29:51:f4:b0:57:16:71:a3:94:1d:9e:0a:2a:a1: f1:fc:0e:2e:e0:63:3d:5c:67:77:bf:61:43:d4:15:51:f9:6a: 98:f3:c6:f5:2b:33:5a:bf:90:e4:04:34:39:bd:e9:9e:8c:d8: a7:c4:79:75:7a:d8:e3:d1:46:7e:28:5b:39:e8:da:08:05:31: 5d:d3:cc:88:f5:46:cb:88:bf:6c:ac:24:f6:5e:6f:c3:db:6a: 76:14:66:76:a0:2b:bd:83:94:a0:cf:c6:a1:f0:9e:c2:8e:0c: f6:ae:d4:20 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOJaXbkUbaLUiK/8s6pOh8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk5ODRiOWViMTIyMjM3MTExYzFmOGNhNTc3MDdlYzczMDcy OTFlZTgwHhcNMjUxMjExMTYwMTQ2WhcNMjUxMjEyMTYwMTQ2WjAzMTEwLwYDVQQD Eyg4NTQ1MDAwYzIzZmY2MmNkMDgwNWIzMjQ5ZWZkMWY2MGZkMzMxODA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkKRtTcwlB19BT4VDeO1w7snpPGyA f+zrab/dT5k+kb0UndNP13z8QLAHAwMiK3S8CUshFTDLE1ZtxuRltCKB2/dtC+y5 EdpVDdfts3xO5Y6BU/5GeMkJum+Dwp+M7N7KjjhXkUU/xC0BioccrmxPL5VLLyjk EWv9ico+CUe1xmr0acx6jqKBabzkVf5Lp4iNZS4UB0rJLAcjrqEF70C7xa4mXQhG Hda+vwPIyc0o5fDkCA5evf+UTGoqSWNmj463afw1HdqPYaNFMXSICq+VJ4bBAlc+ LNPfrNCx3QYAQaquFDRvJtD5JuRNQQcERLIeDyKU10eSSAdH8niWzuXnwQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIVFAAwj/2LNCAWzJJ79H2D9MxgIMB8GA1UdIwQY MBaAFJmEuesSIjcRHB+MpXcH7HMHKR7oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbVlTNTZ4SWlOeEVjSDR5bGR3ZnNjd2NwSHVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC9iOWMxZDctMmFlZC00Njk2LTgwYTct ZDVhYmY1MDMxZDIxLzEvbVlTNTZ4SWlOeEVjSDR5bGR3ZnNjd2NwSHVnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC9iOWMxZDctMmFlZC00Njk2LTgwYTctZDVhYmY1MDMxZDIx LzEvbVlTNTZ4SWlOeEVjSDR5bGR3ZnNjd2NwSHVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjCqEr5Ha Jytv+BTy9r3MJSxh0e+euFu2jdbKLiSTP2ZJ+HIDW3yJW3AUgu+6DGLjm5OD3ni4 Xh1MoPsPZp1nQHGyCCflmId5L0GgZNPODy+6Q+NTuVoZSnB9hdw+zXvsQWUcEEID 4uc1UVkoVb8YxT+cChjRP4X1ZLf0Yp14PQ3hAN05PFNKAtd9WU0YrS0nl4k15ilR 9LBXFnGjlB2eCiqh8fwOLuBjPVxnd79hQ9QVUflqmPPG9SszWr+Q5AQ0Ob3pnozY p8R5dXrY49FGfihbOejaCAUxXdPMiPVGy4i/bKwk9l5vw9tqdhRmdqArvYOUoM/G ofCewo4M9q7UIA== -----END CERTIFICATE-----Generated at Thu Dec 11 23:54:40 2025 by rpki-client