This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/3c9f4a-4456-4581-b287-52d6b3e4789f/1/mY6csn89GrzEzGHDwbv9xyYo5Xs.mft File: mY6csn89GrzEzGHDwbv9xyYo5Xs.mft (raw, json) Hash identifier: mgDafnFYfh72X5PQVjEN+SxzxcnWVvhb6J/cWUFlF90= Subject key identifier: 0A:1F:74:90:E4:C8:C5:3A:87:6F:EA:66:3A:FF:98:95:F3:05:CD:60 Authority key identifier: 99:8E:9C:B2:7F:3D:1A:BC:C4:CC:61:C3:C1:BB:FD:C7:26:28:E5:7B Certificate issuer: /CN=998e9cb27f3d1abcc4cc61c3c1bbfdc72628e57b Certificate serial: 019B30E9068AC4930C76ADC5C6A3F2A0DEBC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mY6csn89GrzEzGHDwbv9xyYo5Xs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/3c9f4a-4456-4581-b287-52d6b3e4789f/1/mY6csn89GrzEzGHDwbv9xyYo5Xs.mft Manifest number: 1780 Signing time: Thu 18 Dec 2025 10:02:16 +0000 Manifest this update: Thu 18 Dec 2025 10:02:16 +0000 Manifest next update: Fri 19 Dec 2025 10:02:16 +0000 Files and hashes: 1: UCapjxyaJi5z5guHcEyumiBs9Pg.roa (hash: LIHlX4VN2XaFL14w/XwFEPN4bxUvck7ZLxdQY/Md6OU=) 2: mY6csn89GrzEzGHDwbv9xyYo5Xs.crl (hash: lRxpYq6RrytFosxqYUXZmYx8+d99jjHAZV81V+Ks32U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/3c9f4a-4456-4581-b287-52d6b3e4789f/1/mY6csn89GrzEzGHDwbv9xyYo5Xs.crl rsync://rpki.ripe.net/repository/DEFAULT/03/3c9f4a-4456-4581-b287-52d6b3e4789f/1/mY6csn89GrzEzGHDwbv9xyYo5Xs.mft rsync://rpki.ripe.net/repository/DEFAULT/mY6csn89GrzEzGHDwbv9xyYo5Xs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 10:02:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:30:e9:06:8a:c4:93:0c:76:ad:c5:c6:a3:f2:a0:de:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=998e9cb27f3d1abcc4cc61c3c1bbfdc72628e57b Validity Not Before: Dec 18 10:02:16 2025 GMT Not After : Dec 19 10:02:16 2025 GMT Subject: CN=0a1f7490e4c8c53a876fea663aff9895f305cd60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:7f:4e:7f:4c:88:e8:1a:24:6f:92:65:99:61: 89:27:b8:55:28:78:20:62:14:ee:fd:81:6b:4e:e4: 6a:fd:04:7f:ac:92:8b:87:a1:c5:5d:f7:a9:96:13: ab:74:dd:2d:9d:ba:1d:ee:91:02:00:f3:20:72:f8: 17:89:d9:ad:3a:8e:21:91:fb:c7:d7:03:65:be:ce: 02:db:d5:54:95:b8:28:5a:e2:9c:2b:c9:98:03:e7: 19:89:3a:d6:e7:44:78:6b:8f:ea:6f:98:17:70:db: 0a:a5:d6:ac:02:f1:e6:45:8f:9c:d5:bf:e8:b0:e3: fa:20:9c:be:4e:a4:e5:5a:d5:c2:30:b5:8d:db:3a: 62:27:70:ae:0e:0c:cf:07:13:1b:52:9a:e4:59:3a: 1f:96:3d:9c:73:cd:da:0d:52:f2:d1:f5:3e:e7:4f: 26:68:47:32:ed:5f:af:bc:93:b2:c6:e9:c1:28:40: 30:99:c2:b8:f6:eb:68:5f:88:c6:c4:30:56:a6:e3: 69:5b:62:a6:ab:69:d5:77:f5:03:eb:40:17:89:b9: 2e:90:79:3f:64:ea:44:5d:19:d0:8d:a9:b9:82:8e: f3:a9:6b:12:1f:86:a3:c6:00:48:43:c0:10:31:1a: 72:f3:ab:d7:f7:11:cd:35:36:64:2d:5a:e4:dc:02: 5e:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:1F:74:90:E4:C8:C5:3A:87:6F:EA:66:3A:FF:98:95:F3:05:CD:60 X509v3 Authority Key Identifier: keyid:99:8E:9C:B2:7F:3D:1A:BC:C4:CC:61:C3:C1:BB:FD:C7:26:28:E5:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mY6csn89GrzEzGHDwbv9xyYo5Xs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/3c9f4a-4456-4581-b287-52d6b3e4789f/1/mY6csn89GrzEzGHDwbv9xyYo5Xs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/3c9f4a-4456-4581-b287-52d6b3e4789f/1/mY6csn89GrzEzGHDwbv9xyYo5Xs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:d8:fe:bf:ff:2b:6f:49:42:40:f4:5b:58:8d:0a:58:d9:e3: 64:37:e0:1d:83:d8:b8:d9:fa:27:16:7f:3c:75:dd:f4:4f:4f: 63:5b:d6:d2:b8:33:21:e3:4b:cc:cf:fb:33:fe:8a:4f:b7:70: 1e:66:6c:bd:fd:46:c5:0a:bb:92:b2:9f:a0:4f:72:f5:41:d0: 70:f0:0e:8c:59:6d:38:2f:a9:13:a4:bf:2a:ca:c8:f7:23:4c: 15:47:1d:44:af:7e:0b:32:42:fa:62:81:df:7f:8f:17:2c:dd: 2a:4d:30:3e:92:3d:e6:b0:58:36:4f:ef:89:91:46:9b:55:ac: 0a:cb:fc:73:28:f0:9c:78:32:1e:a2:cc:fe:71:9b:11:5f:c3: 2e:31:bc:d1:16:35:86:c9:ff:30:39:ea:be:40:05:27:b0:b2: 18:3a:8f:93:e0:cb:b5:1c:b0:b4:01:3a:51:fe:4e:8f:5a:94: 85:81:1a:6e:54:74:43:65:50:01:a5:6c:59:0d:54:d9:a7:b5: ce:32:cf:4a:2b:04:85:ba:e3:4e:e9:43:e0:94:fd:36:70:45: 7a:16:76:ff:70:f0:75:40:74:e8:60:61:ce:f4:8e:ac:32:13: 82:69:5a:3d:10:96:42:39:cd:df:3c:14:28:2d:df:f2:6f:84: e9:7a:ca:08 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsw6QaKxJMMdq3FxqPyoN68MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk5OGU5Y2IyN2YzZDFhYmNjNGNjNjFjM2MxYmJmZGM3MjYy OGU1N2IwHhcNMjUxMjE4MTAwMjE2WhcNMjUxMjE5MTAwMjE2WjAzMTEwLwYDVQQD EygwYTFmNzQ5MGU0YzhjNTNhODc2ZmVhNjYzYWZmOTg5NWYzMDVjZDYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn39Of0yI6Bokb5JlmWGJJ7hVKHgg YhTu/YFrTuRq/QR/rJKLh6HFXfeplhOrdN0tnbod7pECAPMgcvgXidmtOo4hkfvH 1wNlvs4C29VUlbgoWuKcK8mYA+cZiTrW50R4a4/qb5gXcNsKpdasAvHmRY+c1b/o sOP6IJy+TqTlWtXCMLWN2zpiJ3CuDgzPBxMbUprkWToflj2cc83aDVLy0fU+508m aEcy7V+vvJOyxunBKEAwmcK49utoX4jGxDBWpuNpW2Kmq2nVd/UD60AXibkukHk/ ZOpEXRnQjam5go7zqWsSH4ajxgBIQ8AQMRpy86vX9xHNNTZkLVrk3AJeOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAofdJDkyMU6h2/qZjr/mJXzBc1gMB8GA1UdIwQY MBaAFJmOnLJ/PRq8xMxhw8G7/ccmKOV7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbVk2Y3NuODlHcnpFekdIRHdidjl4eVlvNVhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy8zYzlmNGEtNDQ1Ni00NTgxLWIyODct NTJkNmIzZTQ3ODlmLzEvbVk2Y3NuODlHcnpFekdIRHdidjl4eVlvNVhzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy8zYzlmNGEtNDQ1Ni00NTgxLWIyODctNTJkNmIzZTQ3ODlm LzEvbVk2Y3NuODlHcnpFekdIRHdidjl4eVlvNVhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKNj+v/8r b0lCQPRbWI0KWNnjZDfgHYPYuNn6JxZ/PHXd9E9PY1vW0rgzIeNLzM/7M/6KT7dw HmZsvf1GxQq7krKfoE9y9UHQcPAOjFltOC+pE6S/KsrI9yNMFUcdRK9+CzJC+mKB 33+PFyzdKk0wPpI95rBYNk/viZFGm1WsCsv8cyjwnHgyHqLM/nGbEV/DLjG80RY1 hsn/MDnqvkAFJ7CyGDqPk+DLtRywtAE6Uf5Oj1qUhYEablR0Q2VQAaVsWQ1U2ae1 zjLPSisEhbrjTulD4JT9NnBFehZ2/3DwdUB06GBhzvSOrDITgmlaPRCWQjnN3zwU KC3f8m+E6XrKCA== -----END CERTIFICATE-----Generated at Thu Dec 18 18:35:11 2025 by rpki-client