This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/d2e43d-1faa-40b3-b012-ee64c6e71bfb/1/_MymLL50MyhVVIOoV-Uhhj-VO0E.mft File: _MymLL50MyhVVIOoV-Uhhj-VO0E.mft (raw, json) Hash identifier: zE2QxYXJySl4kB8BAK3jlwBhFWZWZgjT9gqqWfTS/qs= Subject key identifier: B4:A0:3C:BE:A0:2B:0D:FA:87:EE:0B:F8:65:1D:A0:DF:2F:4E:12:29 Authority key identifier: FC:CC:A6:2C:BE:74:33:28:55:54:83:A8:57:E5:21:86:3F:95:3B:41 Certificate issuer: /CN=fccca62cbe743328555483a857e521863f953b41 Certificate serial: 019B2250E5D765B2D1C25858E9DB3063CFEC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_MymLL50MyhVVIOoV-Uhhj-VO0E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/d2e43d-1faa-40b3-b012-ee64c6e71bfb/1/_MymLL50MyhVVIOoV-Uhhj-VO0E.mft Manifest number: 1780 Signing time: Mon 15 Dec 2025 14:01:25 +0000 Manifest this update: Mon 15 Dec 2025 14:01:25 +0000 Manifest next update: Tue 16 Dec 2025 14:01:25 +0000 Files and hashes: 1: SQnsB4pgBnmpIi4TRKO7zpVO0eA.roa (hash: WWdVpcd3MWSz2a/cTGWg0pR5ff1Hobu49xdGhZEZSxE=) 2: _MymLL50MyhVVIOoV-Uhhj-VO0E.crl (hash: LDdT7W4t8OF+X/spJcIAZPxKcaDNZt84TIlynu9DapI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/d2e43d-1faa-40b3-b012-ee64c6e71bfb/1/_MymLL50MyhVVIOoV-Uhhj-VO0E.crl rsync://rpki.ripe.net/repository/DEFAULT/90/d2e43d-1faa-40b3-b012-ee64c6e71bfb/1/_MymLL50MyhVVIOoV-Uhhj-VO0E.mft rsync://rpki.ripe.net/repository/DEFAULT/_MymLL50MyhVVIOoV-Uhhj-VO0E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 14:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:22:50:e5:d7:65:b2:d1:c2:58:58:e9:db:30:63:cf:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fccca62cbe743328555483a857e521863f953b41 Validity Not Before: Dec 15 14:01:25 2025 GMT Not After : Dec 16 14:01:25 2025 GMT Subject: CN=b4a03cbea02b0dfa87ee0bf8651da0df2f4e1229 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:91:39:74:17:04:1f:bd:56:d6:c4:29:c5:55: f5:71:85:b8:1f:bb:95:c9:1a:94:3d:e8:f7:65:ef: d9:6c:57:ef:39:74:a8:31:50:95:85:18:de:6a:ae: d2:b5:97:59:65:96:30:4f:70:e0:d0:5a:cd:1c:19: 04:e9:37:b3:2b:f0:5d:d7:1f:92:03:4f:56:d3:be: 1e:8b:43:5e:03:a5:2e:22:d7:01:15:02:66:c9:2c: fa:89:2b:dd:8e:83:c5:b3:82:c7:2e:dc:60:fc:22: fb:5a:60:1e:ac:21:27:24:eb:fa:a5:ec:9a:d2:ac: bd:52:f5:c8:80:cf:db:5a:d5:86:75:32:92:06:10: 43:e3:6d:6f:e5:0f:2f:25:6a:b6:00:25:7b:84:1e: 27:d5:2a:a4:98:f6:b7:d2:69:7c:37:da:c2:66:8e: f0:9d:54:10:14:db:73:f6:e9:7e:dc:99:fb:4b:15: 8e:3a:59:fc:2b:89:94:44:fb:01:a9:a7:88:46:8d: c0:a0:14:4e:e7:69:bd:cb:ef:d1:25:00:d1:a0:b3: 76:57:66:85:c3:6f:cd:48:a2:10:6d:d8:ba:74:5f: 9f:6c:53:f1:e2:25:55:1c:5b:c0:d3:c1:8a:3d:e2: 60:66:e6:4a:ef:55:8a:8f:5b:ff:04:21:4b:15:53: 2e:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:A0:3C:BE:A0:2B:0D:FA:87:EE:0B:F8:65:1D:A0:DF:2F:4E:12:29 X509v3 Authority Key Identifier: keyid:FC:CC:A6:2C:BE:74:33:28:55:54:83:A8:57:E5:21:86:3F:95:3B:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_MymLL50MyhVVIOoV-Uhhj-VO0E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/d2e43d-1faa-40b3-b012-ee64c6e71bfb/1/_MymLL50MyhVVIOoV-Uhhj-VO0E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/d2e43d-1faa-40b3-b012-ee64c6e71bfb/1/_MymLL50MyhVVIOoV-Uhhj-VO0E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:a2:44:0a:cb:3c:6a:ee:30:82:52:ef:4a:7d:64:70:65:36: 8a:28:27:c6:84:f0:ac:81:e0:fe:13:27:cc:22:15:14:a8:71: dd:84:e1:9b:e3:54:04:3d:1f:5c:dd:aa:b7:d8:0e:84:3c:0b: e5:bf:b9:a1:6c:58:2e:5d:6e:27:bc:f3:72:3f:a7:e5:6b:a1: a0:b9:7b:3c:69:06:a0:58:29:d6:18:c2:4f:93:56:33:e0:53: d0:17:70:3c:28:a4:15:5e:25:94:6d:6d:12:6f:2b:19:71:3d: 12:1c:ba:1d:6b:8b:8d:cb:20:95:69:c7:af:88:1b:e6:0d:31: 5a:1b:1b:92:7e:03:9c:60:50:04:ef:a7:07:e8:a0:0f:ac:74: 57:01:b1:47:8b:a8:3b:25:8a:e9:fa:ab:08:97:68:bc:87:59: a0:61:27:d4:49:d4:da:08:e3:8e:0f:4f:b4:89:fc:44:4e:d6: b4:57:79:28:ea:2e:90:1c:76:71:49:2f:10:21:70:29:b6:18: 9d:e4:7c:66:bf:be:a1:ae:81:44:a4:92:d8:72:64:8b:05:6f: 85:f5:5c:86:5c:46:73:76:ed:e4:22:25:52:a5:61:be:8a:23: b2:ec:51:d0:e0:ae:a5:fd:1a:5c:87:53:12:fe:4e:9b:c1:87: ec:7f:f6:ef -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsiUOXXZbLRwlhY6dswY8/sMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZjY2NhNjJjYmU3NDMzMjg1NTU0ODNhODU3ZTUyMTg2M2Y5 NTNiNDEwHhcNMjUxMjE1MTQwMTI1WhcNMjUxMjE2MTQwMTI1WjAzMTEwLwYDVQQD EyhiNGEwM2NiZWEwMmIwZGZhODdlZTBiZjg2NTFkYTBkZjJmNGUxMjI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuJE5dBcEH71W1sQpxVX1cYW4H7uV yRqUPej3Ze/ZbFfvOXSoMVCVhRjeaq7StZdZZZYwT3Dg0FrNHBkE6TezK/Bd1x+S A09W074ei0NeA6UuItcBFQJmySz6iSvdjoPFs4LHLtxg/CL7WmAerCEnJOv6peya 0qy9UvXIgM/bWtWGdTKSBhBD421v5Q8vJWq2ACV7hB4n1SqkmPa30ml8N9rCZo7w nVQQFNtz9ul+3Jn7SxWOOln8K4mURPsBqaeIRo3AoBRO52m9y+/RJQDRoLN2V2aF w2/NSKIQbdi6dF+fbFPx4iVVHFvA08GKPeJgZuZK71WKj1v/BCFLFVMuuwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLSgPL6gKw36h+4L+GUdoN8vThIpMB8GA1UdIwQY MBaAFPzMpiy+dDMoVVSDqFflIYY/lTtBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX015bUxMNTBNeWhWVklPb1YtVWhoai1WTzBFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC9kMmU0M2QtMWZhYS00MGIzLWIwMTIt ZWU2NGM2ZTcxYmZiLzEvX015bUxMNTBNeWhWVklPb1YtVWhoai1WTzBFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC9kMmU0M2QtMWZhYS00MGIzLWIwMTItZWU2NGM2ZTcxYmZi LzEvX015bUxMNTBNeWhWVklPb1YtVWhoai1WTzBFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoKJECss8 au4wglLvSn1kcGU2iignxoTwrIHg/hMnzCIVFKhx3YThm+NUBD0fXN2qt9gOhDwL 5b+5oWxYLl1uJ7zzcj+n5WuhoLl7PGkGoFgp1hjCT5NWM+BT0BdwPCikFV4llG1t Em8rGXE9Ehy6HWuLjcsglWnHr4gb5g0xWhsbkn4DnGBQBO+nB+igD6x0VwGxR4uo OyWK6fqrCJdovIdZoGEn1EnU2gjjjg9PtIn8RE7WtFd5KOoukBx2cUkvECFwKbYY neR8Zr++oa6BRKSS2HJkiwVvhfVchlxGc3bt5CIlUqVhvoojsuxR0OCupf0aXIdT Ev5Om8GH7H/27w== -----END CERTIFICATE-----Generated at Mon Dec 15 19:27:02 2025 by rpki-client