This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/d0a3f9-997a-42a8-aa47-4bb71e274a5c/1/MYy__80hEn3jYoaXWY2wwtnhE1E.mft File: MYy__80hEn3jYoaXWY2wwtnhE1E.mft (raw, json) Hash identifier: X0VLWbRy0WTWLV1Bwgofjbodwcfv4hKeoQwcXPRS1iU= Subject key identifier: 06:75:C4:BB:EB:E2:2A:69:51:09:52:BC:34:FB:73:19:C1:87:F9:58 Authority key identifier: 31:8C:BF:FF:CD:21:12:7D:E3:62:86:97:59:8D:B0:C2:D9:E1:13:51 Certificate issuer: /CN=318cbfffcd21127de3628697598db0c2d9e11351 Certificate serial: 019B3FB5C37B873FCA8D1CC0933CE2C90E25 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYy__80hEn3jYoaXWY2wwtnhE1E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/d0a3f9-997a-42a8-aa47-4bb71e274a5c/1/MYy__80hEn3jYoaXWY2wwtnhE1E.mft Manifest number: 10BC Signing time: Sun 21 Dec 2025 07:00:35 +0000 Manifest this update: Sun 21 Dec 2025 07:00:35 +0000 Manifest next update: Mon 22 Dec 2025 07:00:35 +0000 Files and hashes: 1: MYy__80hEn3jYoaXWY2wwtnhE1E.crl (hash: 0P20PRoTl7VnQ4AdvWTNyEKp4GvmYwIm2UzJGk8lBVw=) 2: ygWfHOj23VJgj35j5q6wo1fH7i4.roa (hash: Fn0E1OEA7wrBSTSTMjLK8G+ESh9SLPnfGckk+sIOOeI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/d0a3f9-997a-42a8-aa47-4bb71e274a5c/1/MYy__80hEn3jYoaXWY2wwtnhE1E.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/d0a3f9-997a-42a8-aa47-4bb71e274a5c/1/MYy__80hEn3jYoaXWY2wwtnhE1E.mft rsync://rpki.ripe.net/repository/DEFAULT/MYy__80hEn3jYoaXWY2wwtnhE1E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:b5:c3:7b:87:3f:ca:8d:1c:c0:93:3c:e2:c9:0e:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=318cbfffcd21127de3628697598db0c2d9e11351 Validity Not Before: Dec 21 07:00:35 2025 GMT Not After : Dec 22 07:00:35 2025 GMT Subject: CN=0675c4bbebe22a69510952bc34fb7319c187f958 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:a0:57:5a:46:49:72:af:54:da:24:88:d4:12: cc:39:48:f2:62:6a:33:79:30:52:a5:6a:b9:29:f5: 4d:c6:6e:95:88:e8:78:de:0b:bc:e6:8a:ae:0d:b4: a1:16:ff:02:44:1f:7d:e3:cb:e7:d0:a1:f6:96:04: 68:a1:90:58:b6:69:37:c3:9e:ee:54:eb:42:d5:4d: 94:fc:3b:fd:cb:53:72:e4:0c:6a:26:4a:f2:33:2c: 64:78:3d:ac:f3:5f:83:8a:d4:8c:0d:05:71:fe:33: 58:6e:16:bb:0b:43:91:dd:1b:12:7e:5e:bc:2e:cf: 7c:75:0a:5e:88:c3:e5:50:d4:ff:84:c2:fe:3c:6e: 8e:d3:ee:fb:30:40:10:f3:e9:8a:21:4e:35:09:bf: 85:d0:40:59:31:d3:c2:66:be:92:03:f0:9b:47:35: d3:99:ff:44:cc:53:79:3f:c2:7e:da:60:57:6b:ac: 31:12:90:ae:ea:78:6e:c4:a3:1b:1f:71:54:98:81: d7:ea:ea:37:10:ce:c4:a8:12:c2:6b:14:64:28:2f: 21:88:96:1f:45:9b:78:29:92:b2:c6:65:3e:82:71: bf:30:8a:5b:94:0d:b0:8c:ee:4d:ad:3f:5f:e6:e8: 1f:94:43:8c:a4:59:71:b3:d6:75:54:55:10:aa:9a: 88:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:75:C4:BB:EB:E2:2A:69:51:09:52:BC:34:FB:73:19:C1:87:F9:58 X509v3 Authority Key Identifier: keyid:31:8C:BF:FF:CD:21:12:7D:E3:62:86:97:59:8D:B0:C2:D9:E1:13:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYy__80hEn3jYoaXWY2wwtnhE1E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d0a3f9-997a-42a8-aa47-4bb71e274a5c/1/MYy__80hEn3jYoaXWY2wwtnhE1E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d0a3f9-997a-42a8-aa47-4bb71e274a5c/1/MYy__80hEn3jYoaXWY2wwtnhE1E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:cf:47:28:8b:7a:e4:72:a9:92:7a:8e:53:22:0d:77:16:5a: d8:cb:6f:ec:b4:76:c5:4f:75:60:81:de:ce:ff:19:b5:6c:b7: 2b:dd:2e:87:df:e0:5d:82:a8:35:ef:9a:7f:e6:9c:00:bf:5a: b9:05:3c:2a:10:80:c3:c6:d6:cc:4b:4b:fe:23:69:0c:9a:77: 9a:d5:71:2e:0c:b8:8a:1e:b1:71:af:1c:40:7c:ef:db:8c:d4: 01:11:1d:55:2a:26:4f:f4:ee:f4:54:82:54:91:19:a2:03:b4: 99:ab:58:71:bb:13:d4:22:31:8d:48:8c:7b:e4:f0:5f:5f:55: 90:c0:8b:1f:d4:f3:b0:94:77:95:2b:27:b5:2e:3f:fc:80:4f: 43:9c:09:38:00:ae:22:f0:c9:49:5f:25:d8:83:e3:ba:d1:0a: 2c:69:b2:20:7f:a0:63:5a:76:bd:9c:74:6f:02:b7:90:5c:ee: 06:5e:42:b8:8f:77:c0:e8:a7:b9:63:4d:74:f2:e6:fb:db:a8: 82:e6:db:7a:54:48:8c:33:fd:38:df:63:3d:f6:73:57:20:33: 52:a9:90:e1:cb:0b:12:ab:e3:df:2f:6e:eb:de:be:8c:52:e8: 87:49:63:29:25:77:a0:26:dd:b2:92:a7:aa:de:1e:43:04:ba: 15:79:79:1c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/tcN7hz/KjRzAkzziyQ4lMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxOGNiZmZmY2QyMTEyN2RlMzYyODY5NzU5OGRiMGMyZDll MTEzNTEwHhcNMjUxMjIxMDcwMDM1WhcNMjUxMjIyMDcwMDM1WjAzMTEwLwYDVQQD EygwNjc1YzRiYmViZTIyYTY5NTEwOTUyYmMzNGZiNzMxOWMxODdmOTU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlKBXWkZJcq9U2iSI1BLMOUjyYmoz eTBSpWq5KfVNxm6ViOh43gu85oquDbShFv8CRB9948vn0KH2lgRooZBYtmk3w57u VOtC1U2U/Dv9y1Ny5AxqJkryMyxkeD2s81+DitSMDQVx/jNYbha7C0OR3RsSfl68 Ls98dQpeiMPlUNT/hML+PG6O0+77MEAQ8+mKIU41Cb+F0EBZMdPCZr6SA/CbRzXT mf9EzFN5P8J+2mBXa6wxEpCu6nhuxKMbH3FUmIHX6uo3EM7EqBLCaxRkKC8hiJYf RZt4KZKyxmU+gnG/MIpblA2wjO5NrT9f5ugflEOMpFlxs9Z1VFUQqpqIhwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAZ1xLvr4ippUQlSvDT7cxnBh/lYMB8GA1UdIwQY MBaAFDGMv//NIRJ942KGl1mNsMLZ4RNRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTVl5X184MGhFbjNqWW9hWFdZMnd3dG5oRTFFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9kMGEzZjktOTk3YS00MmE4LWFhNDct NGJiNzFlMjc0YTVjLzEvTVl5X184MGhFbjNqWW9hWFdZMnd3dG5oRTFFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi9kMGEzZjktOTk3YS00MmE4LWFhNDctNGJiNzFlMjc0YTVj LzEvTVl5X184MGhFbjNqWW9hWFdZMnd3dG5oRTFFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXc9HKIt6 5HKpknqOUyINdxZa2Mtv7LR2xU91YIHezv8ZtWy3K90uh9/gXYKoNe+af+acAL9a uQU8KhCAw8bWzEtL/iNpDJp3mtVxLgy4ih6xca8cQHzv24zUAREdVSomT/Tu9FSC VJEZogO0matYcbsT1CIxjUiMe+TwX19VkMCLH9TzsJR3lSsntS4//IBPQ5wJOACu IvDJSV8l2IPjutEKLGmyIH+gY1p2vZx0bwK3kFzuBl5CuI93wOinuWNNdPLm+9uo gubbelRIjDP9ON9jPfZzVyAzUqmQ4csLEqvj3y9u696+jFLoh0ljKSV3oCbdspKn qt4eQwS6FXl5HA== -----END CERTIFICATE-----Generated at Sun Dec 21 13:08:50 2025 by rpki-client