This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/357492-07ab-4138-8426-b1674a37153b/1/mYf1lRU_EX4prIkHh2ZWpLin7GI.mft File: mYf1lRU_EX4prIkHh2ZWpLin7GI.mft (raw, json) Hash identifier: z6fnXPjfl4EZdlIKLEck3DlNJcLuMxhaINIZwRBmbRo= Subject key identifier: 3B:D1:26:F1:C6:4C:C5:20:3A:FC:9B:66:75:5B:2E:24:7F:B2:7D:81 Authority key identifier: 99:87:F5:95:15:3F:11:7E:29:AC:89:07:87:66:56:A4:B8:A7:EC:62 Certificate issuer: /CN=9987f595153f117e29ac8907876656a4b8a7ec62 Certificate serial: 019B39EAFDF7DD2A0BD295FBBBE78942A95A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mYf1lRU_EX4prIkHh2ZWpLin7GI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/357492-07ab-4138-8426-b1674a37153b/1/mYf1lRU_EX4prIkHh2ZWpLin7GI.mft Manifest number: 126E Signing time: Sat 20 Dec 2025 04:01:00 +0000 Manifest this update: Sat 20 Dec 2025 04:01:00 +0000 Manifest next update: Sun 21 Dec 2025 04:01:00 +0000 Files and hashes: 1: mYf1lRU_EX4prIkHh2ZWpLin7GI.crl (hash: PLw6SWyraeBpvNtiaripkikO3SqQQLlgCNZWj+EB+y8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/357492-07ab-4138-8426-b1674a37153b/1/mYf1lRU_EX4prIkHh2ZWpLin7GI.crl rsync://rpki.ripe.net/repository/DEFAULT/10/357492-07ab-4138-8426-b1674a37153b/1/mYf1lRU_EX4prIkHh2ZWpLin7GI.mft rsync://rpki.ripe.net/repository/DEFAULT/mYf1lRU_EX4prIkHh2ZWpLin7GI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:ea:fd:f7:dd:2a:0b:d2:95:fb:bb:e7:89:42:a9:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9987f595153f117e29ac8907876656a4b8a7ec62 Validity Not Before: Dec 20 04:01:00 2025 GMT Not After : Dec 21 04:01:00 2025 GMT Subject: CN=3bd126f1c64cc5203afc9b66755b2e247fb27d81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:56:31:6c:ed:37:e6:88:e4:f5:09:db:21:45: 80:ee:d4:fd:b1:7c:bc:ed:83:95:ff:d7:8b:e6:89: 4c:ea:32:81:c8:fa:df:47:9d:a9:bb:29:47:dd:9b: c6:a3:59:cc:8b:b1:57:33:3e:ac:99:06:27:92:9f: 58:87:26:8f:a9:f6:11:83:01:92:54:61:36:18:72: 9c:ab:ed:ec:f0:11:1d:24:91:e7:04:e2:47:64:a3: 63:33:88:b0:c0:00:11:7d:e4:e9:d6:1d:34:85:41: 2b:15:ed:2a:ab:46:7f:c1:c0:f0:16:1d:d9:34:4f: d6:a2:3e:79:42:0e:6c:d9:66:48:f2:8c:3b:c3:c6: 98:81:c9:bb:bd:6d:21:24:56:63:95:4d:fe:78:45: b5:b2:11:97:4a:ab:56:5a:94:b6:06:a6:56:04:2a: 7c:7d:7b:ca:70:99:e3:a9:6f:cd:d2:d1:ab:5f:47: 8c:a8:7b:02:64:ea:8b:4d:fa:e3:f8:aa:78:97:fa: e3:af:d8:1d:80:f8:e4:d5:2f:61:c1:48:bb:cd:06: 1d:43:e9:40:ab:98:3b:df:9c:da:3a:41:d7:8a:1b: 0f:25:46:cb:ca:fe:63:af:62:8c:f9:62:89:4d:23: 1d:0c:63:1d:fd:ca:17:aa:85:e1:89:de:a3:af:00: df:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:D1:26:F1:C6:4C:C5:20:3A:FC:9B:66:75:5B:2E:24:7F:B2:7D:81 X509v3 Authority Key Identifier: keyid:99:87:F5:95:15:3F:11:7E:29:AC:89:07:87:66:56:A4:B8:A7:EC:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mYf1lRU_EX4prIkHh2ZWpLin7GI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/357492-07ab-4138-8426-b1674a37153b/1/mYf1lRU_EX4prIkHh2ZWpLin7GI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/357492-07ab-4138-8426-b1674a37153b/1/mYf1lRU_EX4prIkHh2ZWpLin7GI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:0f:ad:57:47:c9:a0:40:b9:b6:73:9c:2f:d1:cb:43:1e:89: 27:74:3e:3b:c9:45:c4:f4:4b:e9:3f:2c:2b:b4:03:e6:f8:45: 12:da:76:38:b8:61:9b:74:b6:2c:92:ce:8c:ef:6b:90:af:41: 31:ec:da:9c:97:96:a4:72:8b:49:4f:4d:ee:c2:bb:5a:a3:c2: 2e:31:44:80:56:f8:f8:9e:52:75:97:9f:72:ae:e7:c2:2a:e8: d9:3a:0e:4f:de:dd:fd:c8:fd:a8:b0:59:8c:5a:0c:2b:12:27: 09:33:17:96:c3:0a:2e:3a:43:fe:66:6b:dd:f3:92:20:f6:24: 2e:81:a8:ab:87:bf:0d:45:09:f0:ca:1e:c0:56:4f:ac:66:94: 95:92:c3:70:2c:40:5f:e3:06:d7:4b:02:b2:8f:b4:81:bc:8a: 23:a3:52:7c:09:eb:a2:02:94:f8:af:5c:e6:ff:da:28:12:73: 18:82:da:d0:62:e1:02:f9:80:3c:ff:0d:78:78:cc:0b:82:da: bb:4e:37:3c:c5:d4:d6:a0:ca:46:e9:5d:38:87:aa:0a:ac:d2: 81:61:b5:25:74:b4:e5:06:84:0d:63:88:0d:ea:f6:2d:86:c1: b2:22:ff:22:5e:ad:97:d2:73:54:2a:d4:02:6d:9b:9f:ba:f8: 9d:c7:02:cc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs56v333SoL0pX7u+eJQqlaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk5ODdmNTk1MTUzZjExN2UyOWFjODkwNzg3NjY1NmE0Yjhh N2VjNjIwHhcNMjUxMjIwMDQwMTAwWhcNMjUxMjIxMDQwMTAwWjAzMTEwLwYDVQQD EygzYmQxMjZmMWM2NGNjNTIwM2FmYzliNjY3NTViMmUyNDdmYjI3ZDgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsVYxbO035ojk9QnbIUWA7tT9sXy8 7YOV/9eL5olM6jKByPrfR52puylH3ZvGo1nMi7FXMz6smQYnkp9YhyaPqfYRgwGS VGE2GHKcq+3s8BEdJJHnBOJHZKNjM4iwwAARfeTp1h00hUErFe0qq0Z/wcDwFh3Z NE/Woj55Qg5s2WZI8ow7w8aYgcm7vW0hJFZjlU3+eEW1shGXSqtWWpS2BqZWBCp8 fXvKcJnjqW/N0tGrX0eMqHsCZOqLTfrj+Kp4l/rjr9gdgPjk1S9hwUi7zQYdQ+lA q5g735zaOkHXihsPJUbLyv5jr2KM+WKJTSMdDGMd/coXqoXhid6jrwDfFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDvRJvHGTMUgOvybZnVbLiR/sn2BMB8GA1UdIwQY MBaAFJmH9ZUVPxF+KayJB4dmVqS4p+xiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbVlmMWxSVV9FWDRwcklrSGgyWldwTGluN0dJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC8zNTc0OTItMDdhYi00MTM4LTg0MjYt YjE2NzRhMzcxNTNiLzEvbVlmMWxSVV9FWDRwcklrSGgyWldwTGluN0dJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC8zNTc0OTItMDdhYi00MTM4LTg0MjYtYjE2NzRhMzcxNTNi LzEvbVlmMWxSVV9FWDRwcklrSGgyWldwTGluN0dJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhQ+tV0fJ oEC5tnOcL9HLQx6JJ3Q+O8lFxPRL6T8sK7QD5vhFEtp2OLhhm3S2LJLOjO9rkK9B MezanJeWpHKLSU9N7sK7WqPCLjFEgFb4+J5SdZefcq7nwiro2ToOT97d/cj9qLBZ jFoMKxInCTMXlsMKLjpD/mZr3fOSIPYkLoGoq4e/DUUJ8MoewFZPrGaUlZLDcCxA X+MG10sCso+0gbyKI6NSfAnrogKU+K9c5v/aKBJzGILa0GLhAvmAPP8NeHjMC4La u043PMXU1qDKRuldOIeqCqzSgWG1JXS05QaEDWOIDer2LYbBsiL/Il6tl9JzVCrU Am2bn7r4nccCzA== -----END CERTIFICATE-----Generated at Sat Dec 20 10:46:18 2025 by rpki-client