This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/de171b-5b3c-4b76-b065-20d34e18e270/1/mY3mCoZ7SdsppifG99IjomajIqk.mft File: mY3mCoZ7SdsppifG99IjomajIqk.mft (raw, json) Hash identifier: 620SvZP6IT+uoK7uU7duatNuTcG5pKP/gYm0jcpqBkE= Subject key identifier: 77:EE:24:F8:C8:FB:0B:88:A5:85:EE:6B:DC:AA:F2:BB:E0:5B:8B:CB Authority key identifier: 99:8D:E6:0A:86:7B:49:DB:29:A6:27:C6:F7:D2:23:A2:66:A3:22:A9 Certificate issuer: /CN=998de60a867b49db29a627c6f7d223a266a322a9 Certificate serial: 019AE671CF9D20E638783A109ADDE89D1AEB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mY3mCoZ7SdsppifG99IjomajIqk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/de171b-5b3c-4b76-b065-20d34e18e270/1/mY3mCoZ7SdsppifG99IjomajIqk.mft Manifest number: 15 Signing time: Wed 03 Dec 2025 23:00:09 +0000 Manifest this update: Wed 03 Dec 2025 23:00:09 +0000 Manifest next update: Thu 04 Dec 2025 23:00:09 +0000 Files and hashes: 1: 7yzx2Vou8DokUymMEJ2gEGzbZWY.roa (hash: LGKQizHBh7IVFdmQglMkoUVSWIWG/s6M78Z60SVxtgg=) 2: mY3mCoZ7SdsppifG99IjomajIqk.crl (hash: 443MmUglWt5igFcoatBPi33XKjqdKKebUzcQZiKeaeA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/de171b-5b3c-4b76-b065-20d34e18e270/1/mY3mCoZ7SdsppifG99IjomajIqk.crl rsync://rpki.ripe.net/repository/DEFAULT/db/de171b-5b3c-4b76-b065-20d34e18e270/1/mY3mCoZ7SdsppifG99IjomajIqk.mft rsync://rpki.ripe.net/repository/DEFAULT/mY3mCoZ7SdsppifG99IjomajIqk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 04 Dec 2025 23:00:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e6:71:cf:9d:20:e6:38:78:3a:10:9a:dd:e8:9d:1a:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=998de60a867b49db29a627c6f7d223a266a322a9 Validity Not Before: Dec 3 23:00:09 2025 GMT Not After : Dec 4 23:00:09 2025 GMT Subject: CN=77ee24f8c8fb0b88a585ee6bdcaaf2bbe05b8bcb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:1b:2a:04:e9:68:55:96:e6:8a:7e:9a:b3:af: 13:4e:2c:86:89:69:ee:7f:75:65:65:e3:0c:c2:a9: 9f:e0:e4:b1:ec:86:cf:e0:e8:3f:dd:1d:8c:a4:66: 23:0d:4a:e7:9e:b7:fe:77:3e:a2:85:26:8f:2c:86: 69:7c:46:1f:2a:ac:b6:2a:66:2e:6b:71:72:44:e0: ef:38:98:12:39:72:44:d4:30:50:83:a8:42:3e:7f: ce:a1:38:e3:bd:a3:4c:e5:8b:84:fb:a8:3a:43:80: 1a:bf:b2:0f:c1:8c:98:2d:bd:2a:d3:d0:04:5f:16: 2a:75:c4:c0:e6:8d:7f:9d:18:d1:63:4b:b3:2e:64: f7:fd:1c:80:fb:1c:dd:ea:1d:5a:74:96:d2:23:a3: 8a:d8:43:3d:6e:40:41:a5:11:6b:f1:7d:25:52:67: 4b:4b:9b:44:18:95:91:f2:ee:65:ec:59:40:15:92: bf:af:aa:56:4f:8c:31:c3:32:bc:c6:db:c4:2e:42: d4:b5:3a:4b:dd:d9:93:12:02:a3:53:b3:da:ec:ef: 66:70:db:95:70:d5:50:13:d9:95:5e:71:eb:62:4b: f6:13:5e:82:2e:1e:eb:15:da:e2:d8:41:97:d2:b9: 17:f8:76:fa:75:f7:8e:5d:c0:43:31:d2:e0:b3:b6: 54:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:EE:24:F8:C8:FB:0B:88:A5:85:EE:6B:DC:AA:F2:BB:E0:5B:8B:CB X509v3 Authority Key Identifier: keyid:99:8D:E6:0A:86:7B:49:DB:29:A6:27:C6:F7:D2:23:A2:66:A3:22:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mY3mCoZ7SdsppifG99IjomajIqk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/de171b-5b3c-4b76-b065-20d34e18e270/1/mY3mCoZ7SdsppifG99IjomajIqk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/de171b-5b3c-4b76-b065-20d34e18e270/1/mY3mCoZ7SdsppifG99IjomajIqk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:a1:92:29:88:41:2b:79:4b:75:63:0c:74:26:f1:37:08:41: 73:e4:46:f8:e4:ba:77:2a:da:45:a7:11:14:74:e6:8d:2f:f5: aa:04:02:dd:4b:32:27:ae:f1:ae:ed:3f:d0:69:ff:13:5e:aa: fc:e9:6a:06:c7:24:72:d7:d8:55:02:10:e6:e2:23:43:fe:0d: 8c:28:8d:fd:dc:a6:76:93:05:89:e2:e0:9d:d5:bc:cd:d0:25: 12:fa:e6:99:71:2e:a5:81:1d:90:41:c6:8d:de:cc:aa:55:6c: 6c:b8:6f:7e:49:3a:61:af:44:c6:b5:c2:6e:5c:55:bf:6e:04: 24:7c:4b:31:d5:01:bd:fd:8a:28:0a:c5:e4:f3:50:31:17:33: cf:82:47:7d:0b:41:0c:53:a8:a0:2a:97:a4:be:21:65:45:06: e8:5d:f3:2a:b3:02:63:00:89:08:08:cd:aa:97:02:2e:dd:fb: a6:c8:f0:ce:f4:0c:c1:62:5f:cd:71:3c:d6:5c:e5:e4:b6:72: c3:4f:0c:a7:23:dc:e0:d7:d8:c3:1a:de:46:54:6d:53:91:c2: c0:dc:11:9a:4a:7d:fd:22:bd:21:ac:b7:36:79:02:16:f0:96: c9:69:75:42:b3:89:41:34:a0:7a:ec:04:13:ea:79:c1:a8:d6: a6:f2:ec:e3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrmcc+dIOY4eDoQmt3onRrrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk5OGRlNjBhODY3YjQ5ZGIyOWE2MjdjNmY3ZDIyM2EyNjZh MzIyYTkwHhcNMjUxMjAzMjMwMDA5WhcNMjUxMjA0MjMwMDA5WjAzMTEwLwYDVQQD Eyg3N2VlMjRmOGM4ZmIwYjg4YTU4NWVlNmJkY2FhZjJiYmUwNWI4YmNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0BsqBOloVZbmin6as68TTiyGiWnu f3VlZeMMwqmf4OSx7IbP4Og/3R2MpGYjDUrnnrf+dz6ihSaPLIZpfEYfKqy2KmYu a3FyRODvOJgSOXJE1DBQg6hCPn/OoTjjvaNM5YuE+6g6Q4Aav7IPwYyYLb0q09AE XxYqdcTA5o1/nRjRY0uzLmT3/RyA+xzd6h1adJbSI6OK2EM9bkBBpRFr8X0lUmdL S5tEGJWR8u5l7FlAFZK/r6pWT4wxwzK8xtvELkLUtTpL3dmTEgKjU7Pa7O9mcNuV cNVQE9mVXnHrYkv2E16CLh7rFdri2EGX0rkX+Hb6dfeOXcBDMdLgs7ZU3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHfuJPjI+wuIpYXua9yq8rvgW4vLMB8GA1UdIwQY MBaAFJmN5gqGe0nbKaYnxvfSI6JmoyKpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbVkzbUNvWjdTZHNwcGlmRzk5SWpvbWFqSXFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9kZTE3MWItNWIzYy00Yjc2LWIwNjUt MjBkMzRlMThlMjcwLzEvbVkzbUNvWjdTZHNwcGlmRzk5SWpvbWFqSXFrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi9kZTE3MWItNWIzYy00Yjc2LWIwNjUtMjBkMzRlMThlMjcw LzEvbVkzbUNvWjdTZHNwcGlmRzk5SWpvbWFqSXFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKKGSKYhB K3lLdWMMdCbxNwhBc+RG+OS6dyraRacRFHTmjS/1qgQC3UsyJ67xru0/0Gn/E16q /OlqBsckctfYVQIQ5uIjQ/4NjCiN/dymdpMFieLgndW8zdAlEvrmmXEupYEdkEHG jd7MqlVsbLhvfkk6Ya9ExrXCblxVv24EJHxLMdUBvf2KKArF5PNQMRczz4JHfQtB DFOooCqXpL4hZUUG6F3zKrMCYwCJCAjNqpcCLt37psjwzvQMwWJfzXE81lzl5LZy w08MpyPc4NfYwxreRlRtU5HCwNwRmkp9/SK9Iay3NnkCFvCWyWl1QrOJQTSgeuwE E+p5wajWpvLs4w== -----END CERTIFICATE-----Generated at Thu Dec 4 08:27:58 2025 by rpki-client