This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/feece0-3226-41d6-9461-edefbc24c822/1/mYZ0Jj_M0H9oTh4ZkwLu7-eD-z0.mft File: mYZ0Jj_M0H9oTh4ZkwLu7-eD-z0.mft (raw, json) Hash identifier: VFnop+wVyNyjbW7TC3lrGiVjtJJaH9P5AFh36Y12kQ0= Subject key identifier: 58:4C:35:ED:FC:1D:EA:E5:45:F1:69:86:1A:CE:D8:E4:87:AC:68:67 Authority key identifier: 99:86:74:26:3F:CC:D0:7F:68:4E:1E:19:93:02:EE:EF:E7:83:FB:3D Certificate issuer: /CN=998674263fccd07f684e1e199302eeefe783fb3d Certificate serial: 019B3532E4AC1A2739100713F07E1E7BFF82 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mYZ0Jj_M0H9oTh4ZkwLu7-eD-z0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/feece0-3226-41d6-9461-edefbc24c822/1/mYZ0Jj_M0H9oTh4ZkwLu7-eD-z0.mft Manifest number: 0CB5 Signing time: Fri 19 Dec 2025 06:01:26 +0000 Manifest this update: Fri 19 Dec 2025 06:01:26 +0000 Manifest next update: Sat 20 Dec 2025 06:01:26 +0000 Files and hashes: 1: LB9yxSJR9ouxobcPst7y075Gi24.roa (hash: 9cHQrj6vkKZZg+caaJv03RON5UELRQ6rlqWUQeFM15Y=) 2: mYZ0Jj_M0H9oTh4ZkwLu7-eD-z0.crl (hash: SeRt+6KV/sxb6e6zGCg+325EN3U9tpgqwV7rz5lkLGU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/feece0-3226-41d6-9461-edefbc24c822/1/mYZ0Jj_M0H9oTh4ZkwLu7-eD-z0.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/feece0-3226-41d6-9461-edefbc24c822/1/mYZ0Jj_M0H9oTh4ZkwLu7-eD-z0.mft rsync://rpki.ripe.net/repository/DEFAULT/mYZ0Jj_M0H9oTh4ZkwLu7-eD-z0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 06:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:32:e4:ac:1a:27:39:10:07:13:f0:7e:1e:7b:ff:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=998674263fccd07f684e1e199302eeefe783fb3d Validity Not Before: Dec 19 06:01:26 2025 GMT Not After : Dec 20 06:01:26 2025 GMT Subject: CN=584c35edfc1deae545f169861aced8e487ac6867 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:62:db:d1:22:e4:0a:b7:3a:f8:18:07:18:ac: 70:90:6b:e6:aa:b3:2d:58:e5:8a:68:6b:ee:d8:dc: 23:63:9f:59:2f:48:c0:14:a7:2b:50:f3:a2:5f:b5: 01:0b:6b:bc:42:25:8b:8c:c6:23:96:cc:24:7c:f0: f8:4a:31:15:b4:f0:a0:c4:6a:8d:c8:c4:4f:5f:41: 8d:39:12:9d:4f:42:40:7c:e5:9b:ea:d1:50:04:2d: b9:1a:98:c6:0e:8c:ed:a4:bc:06:4e:16:db:b8:90: 45:f0:0f:da:01:2d:9d:1c:44:a7:84:4b:4a:61:76: 70:35:58:27:9b:eb:6b:58:12:c7:3a:67:8a:29:e1: f1:16:bb:b9:8d:cd:6f:30:da:11:32:4d:df:a1:73: c9:b0:ae:08:e6:cb:6d:d4:d7:fb:7e:5c:e3:e9:f4: ca:21:c8:3a:96:c0:2b:77:ca:ab:8f:0d:d8:c3:f6: 4c:ed:56:9e:55:3a:01:7d:e6:c4:3e:2a:a9:94:9b: d7:bd:fe:8b:31:e1:4d:3c:3c:d4:8f:2e:e3:f6:ac: af:d7:8a:51:04:9a:60:ca:0d:c3:d6:d5:52:0d:60: 7b:75:0c:c4:c4:65:d4:18:31:df:24:c4:55:70:04: b7:84:53:f5:8b:4e:7b:c9:ba:dd:8b:ae:50:5c:41: f5:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:4C:35:ED:FC:1D:EA:E5:45:F1:69:86:1A:CE:D8:E4:87:AC:68:67 X509v3 Authority Key Identifier: keyid:99:86:74:26:3F:CC:D0:7F:68:4E:1E:19:93:02:EE:EF:E7:83:FB:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mYZ0Jj_M0H9oTh4ZkwLu7-eD-z0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/feece0-3226-41d6-9461-edefbc24c822/1/mYZ0Jj_M0H9oTh4ZkwLu7-eD-z0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/feece0-3226-41d6-9461-edefbc24c822/1/mYZ0Jj_M0H9oTh4ZkwLu7-eD-z0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:78:62:05:e6:8b:48:78:32:e2:c6:92:fc:49:b7:15:d1:2d: 4c:e5:6a:d0:62:88:9b:23:04:41:de:2e:48:e3:cb:95:78:bc: f1:b6:a6:2d:47:dc:08:9c:7b:a7:f0:58:f7:47:fa:62:ad:ac: 23:67:16:c8:a0:d3:fd:2d:48:76:1c:08:63:73:27:11:18:b5: b2:84:c8:7b:d4:35:02:77:c6:31:d6:06:78:45:00:fd:4e:f5: 46:c0:af:aa:cf:5c:4b:c1:30:4e:40:96:f3:a6:f0:93:af:b9: a6:81:11:15:ef:19:d2:bf:ba:88:3e:cc:e9:c3:ac:b8:9d:a8: 4e:fb:b4:65:6f:87:04:6e:aa:84:94:de:88:5f:7e:3b:38:d3: 37:41:fc:89:32:9c:08:45:ae:48:73:be:1e:34:e4:48:4e:75: 38:1f:15:d6:1f:6c:70:b7:84:f3:a9:b8:d0:20:21:90:c8:4e: e1:5c:09:42:10:9f:ee:1b:b2:c4:06:11:91:9b:58:90:a0:a8: c7:2d:a6:f5:95:74:ec:f1:39:aa:d6:b8:48:3c:48:43:df:ae: 86:0f:74:d8:40:86:91:0b:9e:2f:6c:be:fe:14:00:86:a9:e5: 04:c7:37:39:db:de:5b:51:bc:42:17:9b:ef:9a:86:b9:29:8f: 76:ad:ff:0a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1MuSsGic5EAcT8H4ee/+CMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk5ODY3NDI2M2ZjY2QwN2Y2ODRlMWUxOTkzMDJlZWVmZTc4 M2ZiM2QwHhcNMjUxMjE5MDYwMTI2WhcNMjUxMjIwMDYwMTI2WjAzMTEwLwYDVQQD Eyg1ODRjMzVlZGZjMWRlYWU1NDVmMTY5ODYxYWNlZDhlNDg3YWM2ODY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmWLb0SLkCrc6+BgHGKxwkGvmqrMt WOWKaGvu2NwjY59ZL0jAFKcrUPOiX7UBC2u8QiWLjMYjlswkfPD4SjEVtPCgxGqN yMRPX0GNORKdT0JAfOWb6tFQBC25GpjGDoztpLwGThbbuJBF8A/aAS2dHESnhEtK YXZwNVgnm+trWBLHOmeKKeHxFru5jc1vMNoRMk3foXPJsK4I5stt1Nf7flzj6fTK Icg6lsArd8qrjw3Yw/ZM7VaeVToBfebEPiqplJvXvf6LMeFNPDzUjy7j9qyv14pR BJpgyg3D1tVSDWB7dQzExGXUGDHfJMRVcAS3hFP1i057ybrdi65QXEH1CwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFhMNe38HerlRfFphhrO2OSHrGhnMB8GA1UdIwQY MBaAFJmGdCY/zNB/aE4eGZMC7u/ng/s9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbVlaMEpqX00wSDlvVGg0Wmt3THU3LWVELXowLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy9mZWVjZTAtMzIyNi00MWQ2LTk0NjEt ZWRlZmJjMjRjODIyLzEvbVlaMEpqX00wSDlvVGg0Wmt3THU3LWVELXowLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy9mZWVjZTAtMzIyNi00MWQ2LTk0NjEtZWRlZmJjMjRjODIy LzEvbVlaMEpqX00wSDlvVGg0Wmt3THU3LWVELXowLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASXhiBeaL SHgy4saS/Em3FdEtTOVq0GKImyMEQd4uSOPLlXi88bamLUfcCJx7p/BY90f6Yq2s I2cWyKDT/S1IdhwIY3MnERi1soTIe9Q1AnfGMdYGeEUA/U71RsCvqs9cS8EwTkCW 86bwk6+5poERFe8Z0r+6iD7M6cOsuJ2oTvu0ZW+HBG6qhJTeiF9+OzjTN0H8iTKc CEWuSHO+HjTkSE51OB8V1h9scLeE86m40CAhkMhO4VwJQhCf7huyxAYRkZtYkKCo xy2m9ZV07PE5qta4SDxIQ9+uhg902ECGkQueL2y+/hQAhqnlBMc3OdveW1G8Qheb 75qGuSmPdq3/Cg== -----END CERTIFICATE-----Generated at Fri Dec 19 14:35:36 2025 by rpki-client