This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/bf3230-eda5-4055-870b-9ea80255c592/1/mYkvB5PMiUvypMdIda8Iqi0dHJk.mft File: mYkvB5PMiUvypMdIda8Iqi0dHJk.mft (raw, json) Hash identifier: sPeDf3JyQ4oxakFawmjGj7ljB20Y9pM/jfP8xOcHPSE= Subject key identifier: D8:04:3A:17:20:CE:4F:75:BF:C5:18:75:91:7F:23:19:16:18:AF:2A Authority key identifier: 99:89:2F:07:93:CC:89:4B:F2:A4:C7:48:75:AF:08:AA:2D:1D:1C:99 Certificate issuer: /CN=99892f0793cc894bf2a4c74875af08aa2d1d1c99 Certificate serial: 019B337B997A879D5825BBB3DF38A65D8AA0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mYkvB5PMiUvypMdIda8Iqi0dHJk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/bf3230-eda5-4055-870b-9ea80255c592/1/mYkvB5PMiUvypMdIda8Iqi0dHJk.mft Manifest number: 0F27 Signing time: Thu 18 Dec 2025 22:01:36 +0000 Manifest this update: Thu 18 Dec 2025 22:01:36 +0000 Manifest next update: Fri 19 Dec 2025 22:01:36 +0000 Files and hashes: 1: 8d01Xvs_aaIVSfahCINvVoz5qZs.asa (hash: hdcUHQVv+Z/OXdZkuAsmuPgKWFluiU3e3EejuVlqoak=) 2: mYkvB5PMiUvypMdIda8Iqi0dHJk.crl (hash: OhHmGcLAYwyMB7+FK6zgfoI31bDbyOBJ1GvnGnWTjwc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/bf3230-eda5-4055-870b-9ea80255c592/1/mYkvB5PMiUvypMdIda8Iqi0dHJk.crl rsync://rpki.ripe.net/repository/DEFAULT/68/bf3230-eda5-4055-870b-9ea80255c592/1/mYkvB5PMiUvypMdIda8Iqi0dHJk.mft rsync://rpki.ripe.net/repository/DEFAULT/mYkvB5PMiUvypMdIda8Iqi0dHJk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:7b:99:7a:87:9d:58:25:bb:b3:df:38:a6:5d:8a:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99892f0793cc894bf2a4c74875af08aa2d1d1c99 Validity Not Before: Dec 18 22:01:36 2025 GMT Not After : Dec 19 22:01:36 2025 GMT Subject: CN=d8043a1720ce4f75bfc51875917f23191618af2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:b2:91:b1:94:de:7a:58:25:5a:0e:9b:14:98: fd:ae:d2:fb:f0:02:cd:a2:67:95:e1:2c:0f:52:fa: 30:c0:18:26:3a:71:5b:ce:1c:34:ed:cf:07:68:79: 33:27:b7:fb:97:1f:dc:24:38:6b:df:70:be:47:de: d0:09:d7:dc:31:83:fa:f5:c2:12:db:03:af:ee:84: 25:46:82:d8:c0:b3:4c:eb:98:9d:32:07:fc:c2:4e: dc:90:51:99:53:65:91:5a:e6:7b:db:43:af:ec:d1: de:b9:28:f0:b4:67:b6:12:e1:60:f9:68:0c:91:4f: 5c:f7:10:3d:ef:ea:ad:dd:48:73:7f:86:f5:a2:d5: 8e:b8:b3:91:7e:20:ce:b2:4f:71:67:b2:c8:bd:86: f7:69:94:b8:6b:6b:4d:6f:bc:e1:3c:72:ce:0e:5d: 27:d6:3b:69:33:04:19:0c:15:11:02:37:ec:97:e9: 9d:c8:a4:f9:a1:71:3c:fc:9c:5d:f7:f1:75:53:ef: db:37:96:54:5a:6b:85:e8:af:80:19:d8:54:2e:3a: d2:26:a3:95:b3:eb:a2:92:67:64:cf:27:a4:b1:7a: d7:d7:63:a4:dd:ff:db:49:03:6f:aa:a6:65:b2:fa: a5:9a:0d:3f:e0:30:c7:fc:9a:02:43:f4:fd:73:a2: 71:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:04:3A:17:20:CE:4F:75:BF:C5:18:75:91:7F:23:19:16:18:AF:2A X509v3 Authority Key Identifier: keyid:99:89:2F:07:93:CC:89:4B:F2:A4:C7:48:75:AF:08:AA:2D:1D:1C:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mYkvB5PMiUvypMdIda8Iqi0dHJk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/bf3230-eda5-4055-870b-9ea80255c592/1/mYkvB5PMiUvypMdIda8Iqi0dHJk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/68/bf3230-eda5-4055-870b-9ea80255c592/1/mYkvB5PMiUvypMdIda8Iqi0dHJk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:28:a4:b0:e5:24:33:23:01:48:0c:56:86:71:fe:a9:71:b4: 4a:55:ab:ea:f1:ae:60:6b:67:02:1c:c9:45:5a:71:a1:33:34: e0:4c:45:49:56:2f:29:60:0c:9d:dd:b8:4f:9a:e9:6c:ec:a3: b3:ab:6c:bc:88:f6:0d:8f:5c:02:b5:f7:94:f7:56:b8:ff:b2: f7:e4:81:51:b5:70:1a:43:5e:bd:60:e3:54:8e:ed:02:99:76: 80:b4:ab:14:04:ce:84:a7:a5:dc:f9:59:0a:e3:c3:ef:e8:fe: 03:d5:ae:e2:c8:ce:dd:fa:1a:22:58:dd:3b:53:3a:fc:ee:9c: 63:18:f4:27:44:e4:80:ba:74:ec:35:95:61:c4:61:86:5a:f1: 11:dc:53:21:cc:06:e9:ba:8c:98:cf:e7:5a:d0:23:1e:96:66: 33:c9:23:76:ab:63:db:ac:4c:12:08:16:bb:cd:60:e6:fa:ea: c8:41:85:a4:fe:a1:14:7c:01:b1:c8:a0:c4:d0:b5:5b:5e:d4: ff:5d:e0:67:b2:01:e5:23:f8:d9:a0:62:de:0d:2c:42:af:39: 0c:83:50:3d:3e:c8:5f:f3:a9:e4:8c:fe:11:1f:a9:b8:1f:a8: c6:4c:10:d9:ca:61:27:e0:32:8f:f6:a1:49:0e:8c:cc:39:ce: a5:da:3f:ef -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsze5l6h51YJbuz3zimXYqgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk5ODkyZjA3OTNjYzg5NGJmMmE0Yzc0ODc1YWYwOGFhMmQx ZDFjOTkwHhcNMjUxMjE4MjIwMTM2WhcNMjUxMjE5MjIwMTM2WjAzMTEwLwYDVQQD EyhkODA0M2ExNzIwY2U0Zjc1YmZjNTE4NzU5MTdmMjMxOTE2MThhZjJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtrKRsZTeelglWg6bFJj9rtL78ALN omeV4SwPUvowwBgmOnFbzhw07c8HaHkzJ7f7lx/cJDhr33C+R97QCdfcMYP69cIS 2wOv7oQlRoLYwLNM65idMgf8wk7ckFGZU2WRWuZ720Ov7NHeuSjwtGe2EuFg+WgM kU9c9xA97+qt3Uhzf4b1otWOuLORfiDOsk9xZ7LIvYb3aZS4a2tNb7zhPHLODl0n 1jtpMwQZDBURAjfsl+mdyKT5oXE8/Jxd9/F1U+/bN5ZUWmuF6K+AGdhULjrSJqOV s+uikmdkzyeksXrX12Ok3f/bSQNvqqZlsvqlmg0/4DDH/JoCQ/T9c6JxuwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNgEOhcgzk91v8UYdZF/IxkWGK8qMB8GA1UdIwQY MBaAFJmJLweTzIlL8qTHSHWvCKotHRyZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbVlrdkI1UE1pVXZ5cE1kSWRhOElxaTBkSEprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC9iZjMyMzAtZWRhNS00MDU1LTg3MGIt OWVhODAyNTVjNTkyLzEvbVlrdkI1UE1pVXZ5cE1kSWRhOElxaTBkSEprLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OC9iZjMyMzAtZWRhNS00MDU1LTg3MGItOWVhODAyNTVjNTky LzEvbVlrdkI1UE1pVXZ5cE1kSWRhOElxaTBkSEprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAASiksOUk MyMBSAxWhnH+qXG0SlWr6vGuYGtnAhzJRVpxoTM04ExFSVYvKWAMnd24T5rpbOyj s6tsvIj2DY9cArX3lPdWuP+y9+SBUbVwGkNevWDjVI7tApl2gLSrFATOhKel3PlZ CuPD7+j+A9Wu4sjO3foaIljdO1M6/O6cYxj0J0TkgLp07DWVYcRhhlrxEdxTIcwG 6bqMmM/nWtAjHpZmM8kjdqtj26xMEggWu81g5vrqyEGFpP6hFHwBscigxNC1W17U /13gZ7IB5SP42aBi3g0sQq85DINQPT7IX/Op5Iz+ER+puB+oxkwQ2cphJ+Ayj/ah SQ6MzDnOpdo/7w== -----END CERTIFICATE-----Generated at Fri Dec 19 07:53:37 2025 by rpki-client