This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/6cba1a-5f4d-4308-bf46-eb37a85a82c5/1/MYKMmdNcuS4tU9rxKOSX6EG2OrA.mft File: MYKMmdNcuS4tU9rxKOSX6EG2OrA.mft (raw, json) Hash identifier: 0mt8kwBlfRbeUDRN32n6Rz3fYg5tUO8TgKPd3L1iOU0= Subject key identifier: 95:E6:3B:DF:5A:67:91:52:26:F2:6A:ED:F4:88:55:B2:44:5F:D1:E8 Authority key identifier: 31:82:8C:99:D3:5C:B9:2E:2D:53:DA:F1:28:E4:97:E8:41:B6:3A:B0 Certificate issuer: /CN=31828c99d35cb92e2d53daf128e497e841b63ab0 Certificate serial: 019B5A51C4A59842BADFF86C6A742C0A2FBE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYKMmdNcuS4tU9rxKOSX6EG2OrA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/6cba1a-5f4d-4308-bf46-eb37a85a82c5/1/MYKMmdNcuS4tU9rxKOSX6EG2OrA.mft Manifest number: 0E3B Signing time: Fri 26 Dec 2025 11:01:06 +0000 Manifest this update: Fri 26 Dec 2025 11:01:06 +0000 Manifest next update: Sat 27 Dec 2025 11:01:06 +0000 Files and hashes: 1: 8epfI_mMakP3Lc2UTESKvosKkSQ.roa (hash: TdgdgIhwNAm+SCbAnoUIw15ZVzHOK/dqP386QKWeMpw=) 2: MYKMmdNcuS4tU9rxKOSX6EG2OrA.crl (hash: bGcijs7XVFpzKDyNHNK4WTai821g2EF40ZGrQu/5+/c=) 3: QGmT3Sq2OPr697a4jgYrgI5vyvo.roa (hash: cuVDNdIzZEyCh+DXAd1wDhu2rpRcNesepLeBXruUFrc=) 4: wrK5q_yhp6CSYsOOeb2tBzjXlME.roa (hash: GpJJNVkvPjxKFXFwN00ofjrbHt5+9rV8i+MDqv4Rs8s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/6cba1a-5f4d-4308-bf46-eb37a85a82c5/1/MYKMmdNcuS4tU9rxKOSX6EG2OrA.crl rsync://rpki.ripe.net/repository/DEFAULT/de/6cba1a-5f4d-4308-bf46-eb37a85a82c5/1/MYKMmdNcuS4tU9rxKOSX6EG2OrA.mft rsync://rpki.ripe.net/repository/DEFAULT/MYKMmdNcuS4tU9rxKOSX6EG2OrA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:51:c4:a5:98:42:ba:df:f8:6c:6a:74:2c:0a:2f:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31828c99d35cb92e2d53daf128e497e841b63ab0 Validity Not Before: Dec 26 11:01:06 2025 GMT Not After : Dec 27 11:01:06 2025 GMT Subject: CN=95e63bdf5a67915226f26aedf48855b2445fd1e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:f0:0c:5d:ad:40:24:d7:73:ab:03:c3:7c:f2: f0:72:4f:30:5d:cb:ab:b6:80:83:84:12:c8:58:83: c9:16:50:3e:32:5f:73:e4:77:9a:a6:97:62:b1:24: 08:8c:6b:cf:48:fd:c0:0a:9b:6c:e2:fb:71:11:e0: b9:f1:c1:dc:47:eb:66:e0:5f:3e:0f:a2:64:b3:97: ba:45:f8:95:14:ac:fd:9b:83:26:40:41:aa:bd:6a: dc:60:18:17:c6:32:f3:2d:3f:d8:21:d2:c2:59:39: 35:80:6d:6f:f4:54:7f:d6:24:61:c9:4e:52:9d:3d: 09:2b:ad:2d:df:33:9f:46:da:b7:21:a5:ca:58:1a: d6:76:3d:5e:9d:b3:cb:dd:6b:bb:6f:eb:a7:df:f8: 7b:22:a6:6a:e1:ac:62:bf:61:39:aa:e2:b3:18:3a: fe:31:54:0c:ed:25:0a:04:cf:bf:d3:08:63:0a:cb: 50:7f:d7:bb:0d:a9:7a:c4:fe:6d:28:e3:d9:8b:04: be:bf:68:22:24:a9:f1:c8:f2:60:9e:ea:32:8c:67: 0e:4d:fa:90:42:a8:de:99:15:7e:05:1e:97:95:fc: 2f:a6:0b:48:84:b4:ee:b1:49:ca:e7:3f:11:46:61: 21:85:ec:77:ca:86:57:c5:46:f6:5a:cc:c9:15:0e: 6a:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:E6:3B:DF:5A:67:91:52:26:F2:6A:ED:F4:88:55:B2:44:5F:D1:E8 X509v3 Authority Key Identifier: keyid:31:82:8C:99:D3:5C:B9:2E:2D:53:DA:F1:28:E4:97:E8:41:B6:3A:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYKMmdNcuS4tU9rxKOSX6EG2OrA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/6cba1a-5f4d-4308-bf46-eb37a85a82c5/1/MYKMmdNcuS4tU9rxKOSX6EG2OrA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/de/6cba1a-5f4d-4308-bf46-eb37a85a82c5/1/MYKMmdNcuS4tU9rxKOSX6EG2OrA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:fe:17:2f:31:75:6e:87:83:3e:f3:17:f1:f2:2c:41:07:96: 8d:74:75:cb:e1:99:da:f3:27:f8:a3:6d:70:44:45:f0:d8:cb: ce:f7:52:45:5f:20:3d:60:4e:dd:04:af:dc:59:bc:ad:8d:59: 20:65:82:ab:91:96:fb:01:de:35:88:10:d4:8e:a3:31:cb:7f: e6:e2:21:8a:91:2f:11:3f:d7:6c:1e:f1:0d:39:43:4b:6b:12: e1:da:71:c1:b8:7d:7c:79:81:3e:bc:c5:46:ab:eb:7b:77:d0: c3:94:c0:7f:8a:bb:48:38:f1:9c:82:d4:c5:01:22:ce:ad:fd: f4:7d:68:69:5d:48:1f:7c:2f:22:e6:9c:f3:0a:b3:7c:b1:c0: 75:27:fa:b2:28:69:fb:f8:8d:be:9e:37:65:5f:c1:e0:e8:b6: 35:40:5b:1f:d5:5a:0f:2e:2b:41:0b:ec:12:f6:93:96:b0:bc: 1a:66:ce:06:88:c0:1d:75:d6:6a:3b:d1:b4:21:92:d6:73:98: 40:e7:a0:2e:43:0b:2c:97:5b:68:19:ca:fc:1e:d5:2d:fd:a3: 37:b8:12:05:ce:42:87:d2:6a:1e:12:3f:0a:eb:d9:56:0a:ee: fe:75:53:8f:0d:62:55:6b:d0:80:7a:82:47:2a:1b:49:aa:29: e6:8d:48:8e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaUcSlmEK63/hsanQsCi++MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxODI4Yzk5ZDM1Y2I5MmUyZDUzZGFmMTI4ZTQ5N2U4NDFi NjNhYjAwHhcNMjUxMjI2MTEwMTA2WhcNMjUxMjI3MTEwMTA2WjAzMTEwLwYDVQQD Eyg5NWU2M2JkZjVhNjc5MTUyMjZmMjZhZWRmNDg4NTViMjQ0NWZkMWU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzfAMXa1AJNdzqwPDfPLwck8wXcur toCDhBLIWIPJFlA+Ml9z5HeappdisSQIjGvPSP3ACpts4vtxEeC58cHcR+tm4F8+ D6Jks5e6RfiVFKz9m4MmQEGqvWrcYBgXxjLzLT/YIdLCWTk1gG1v9FR/1iRhyU5S nT0JK60t3zOfRtq3IaXKWBrWdj1enbPL3Wu7b+un3/h7IqZq4axiv2E5quKzGDr+ MVQM7SUKBM+/0whjCstQf9e7Dal6xP5tKOPZiwS+v2giJKnxyPJgnuoyjGcOTfqQ QqjemRV+BR6XlfwvpgtIhLTusUnK5z8RRmEhhex3yoZXxUb2WszJFQ5qxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJXmO99aZ5FSJvJq7fSIVbJEX9HoMB8GA1UdIwQY MBaAFDGCjJnTXLkuLVPa8Sjkl+hBtjqwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTVlLTW1kTmN1UzR0VTlyeEtPU1g2RUcyT3JBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS82Y2JhMWEtNWY0ZC00MzA4LWJmNDYt ZWIzN2E4NWE4MmM1LzEvTVlLTW1kTmN1UzR0VTlyeEtPU1g2RUcyT3JBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZS82Y2JhMWEtNWY0ZC00MzA4LWJmNDYtZWIzN2E4NWE4MmM1 LzEvTVlLTW1kTmN1UzR0VTlyeEtPU1g2RUcyT3JBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkv4XLzF1 boeDPvMX8fIsQQeWjXR1y+GZ2vMn+KNtcERF8NjLzvdSRV8gPWBO3QSv3Fm8rY1Z IGWCq5GW+wHeNYgQ1I6jMct/5uIhipEvET/XbB7xDTlDS2sS4dpxwbh9fHmBPrzF Rqvre3fQw5TAf4q7SDjxnILUxQEizq399H1oaV1IH3wvIuac8wqzfLHAdSf6sihp +/iNvp43ZV/B4Oi2NUBbH9VaDy4rQQvsEvaTlrC8GmbOBojAHXXWajvRtCGS1nOY QOegLkMLLJdbaBnK/B7VLf2jN7gSBc5Ch9JqHhI/CuvZVgru/nVTjw1iVWvQgHqC RyobSaop5o1Ijg== -----END CERTIFICATE-----Generated at Fri Dec 26 14:06:26 2025 by rpki-client