This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/ea29f2-c340-4d61-b5bb-b853dff8765c/1/MYj64-u7PXT-7dz1B_g-Z9uIUKI.mft File: MYj64-u7PXT-7dz1B_g-Z9uIUKI.mft (raw, json) Hash identifier: 57ElrFDZrkYxRXk3xu457QbHy28wZV094/0OOjlN+Sk= Subject key identifier: 8A:B5:9E:EA:35:92:46:06:8C:E8:CD:D0:EC:65:48:A3:53:91:EC:0E Authority key identifier: 31:88:FA:E3:EB:BB:3D:74:FE:ED:DC:F5:07:F8:3E:67:DB:88:50:A2 Certificate issuer: /CN=3188fae3ebbb3d74feeddcf507f83e67db8850a2 Certificate serial: 019B3DC763AA29AA4B262530442DD231D99A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYj64-u7PXT-7dz1B_g-Z9uIUKI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/ea29f2-c340-4d61-b5bb-b853dff8765c/1/MYj64-u7PXT-7dz1B_g-Z9uIUKI.mft Manifest number: 12A1 Signing time: Sat 20 Dec 2025 22:00:35 +0000 Manifest this update: Sat 20 Dec 2025 22:00:35 +0000 Manifest next update: Sun 21 Dec 2025 22:00:35 +0000 Files and hashes: 1: K7ic-zhbgHQLwKvBl_huVj85IK0.roa (hash: qx1tt36I8aNDXu23dLTLfip5Qoh5WTo9OBCgqtsC1fQ=) 2: MYj64-u7PXT-7dz1B_g-Z9uIUKI.crl (hash: cZrZTKZrZtNxZK35s3JWBzD3t2qBu4HxJx7wHv2XyH4=) 3: pckV3Ny46TaKVnOLD2SsKXbY_nE.roa (hash: wXkkeRI/oAjuXh/YFmny+LydKMS24wNW7vGV6jYr8h8=) 4: vnaSuYqevyYX0jC0-a-c741qDGY.roa (hash: ouDVM8iN649mQg6JJDDBfAW8iLgGBCXHlMPjyI9VGpw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/ea29f2-c340-4d61-b5bb-b853dff8765c/1/MYj64-u7PXT-7dz1B_g-Z9uIUKI.crl rsync://rpki.ripe.net/repository/DEFAULT/2e/ea29f2-c340-4d61-b5bb-b853dff8765c/1/MYj64-u7PXT-7dz1B_g-Z9uIUKI.mft rsync://rpki.ripe.net/repository/DEFAULT/MYj64-u7PXT-7dz1B_g-Z9uIUKI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:c7:63:aa:29:aa:4b:26:25:30:44:2d:d2:31:d9:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3188fae3ebbb3d74feeddcf507f83e67db8850a2 Validity Not Before: Dec 20 22:00:35 2025 GMT Not After : Dec 21 22:00:35 2025 GMT Subject: CN=8ab59eea359246068ce8cdd0ec6548a35391ec0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:19:2a:dd:da:73:42:03:29:2d:14:40:8d:e1: c1:04:18:63:ee:ef:b3:81:dc:d3:4e:ea:79:51:84: 75:68:61:6c:a5:d4:e0:16:20:44:34:a1:59:02:4a: 30:c1:91:61:74:b9:81:7e:ff:cd:84:a5:58:9c:0e: 45:d0:81:29:f7:b0:38:5d:87:2f:78:f1:9f:60:50: 38:24:05:f3:a8:fb:63:c9:33:a8:7c:e1:bc:c4:39: 17:3d:8b:33:53:5f:1c:c4:87:2e:c1:5d:56:3f:a1: d4:30:c2:84:1b:c0:5a:c6:c8:70:d9:f1:55:14:8b: 2b:39:14:12:69:1d:c5:04:71:93:97:0a:15:6f:c4: 38:c4:25:6b:65:43:0d:ee:ee:74:d0:2e:4c:64:1d: 45:ee:61:26:d4:cb:b7:72:63:5c:7f:0a:fe:a0:22: 71:7a:2c:44:ba:93:14:df:0f:db:56:8e:52:38:83: 3a:30:9a:f2:36:6a:93:17:f5:56:05:d1:12:7c:ad: 6c:ab:87:9a:da:3e:91:4e:27:35:8e:f0:f5:1e:6d: 68:19:13:41:22:ed:12:67:16:1a:cc:7d:02:3e:f4: 7f:88:6e:7a:f3:39:5e:d0:8f:4a:ec:d0:7c:b0:b5: 38:e0:24:ea:f5:a7:a6:6f:b0:83:5a:d9:29:a8:73: c0:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:B5:9E:EA:35:92:46:06:8C:E8:CD:D0:EC:65:48:A3:53:91:EC:0E X509v3 Authority Key Identifier: keyid:31:88:FA:E3:EB:BB:3D:74:FE:ED:DC:F5:07:F8:3E:67:DB:88:50:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYj64-u7PXT-7dz1B_g-Z9uIUKI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/ea29f2-c340-4d61-b5bb-b853dff8765c/1/MYj64-u7PXT-7dz1B_g-Z9uIUKI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/ea29f2-c340-4d61-b5bb-b853dff8765c/1/MYj64-u7PXT-7dz1B_g-Z9uIUKI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:66:33:9f:a8:9b:01:b0:61:06:d0:6f:e7:87:04:fc:ce:b2: 6f:61:3c:d3:31:0a:53:e6:2e:90:85:04:b8:6c:e5:15:03:92: 96:01:30:f4:3c:32:47:55:e1:70:c2:9a:7a:07:00:8a:5f:fa: 71:9a:a7:97:b0:b3:e1:2e:76:cc:41:a0:44:11:94:2e:bd:98: 69:85:41:2c:f7:60:4b:34:75:e7:1f:bc:59:6f:1e:e5:37:84: c0:f2:62:b9:eb:69:ca:50:45:78:3c:92:83:aa:4e:3d:ee:bb: 6f:90:2a:37:17:2c:f6:40:42:d6:18:91:5d:28:66:83:9e:23: a2:05:92:10:99:97:24:e9:4e:80:93:84:ae:e1:ba:52:a7:ae: 8e:39:6b:34:06:a6:46:18:40:87:4c:5b:ad:bf:6c:c5:83:f6: 0c:99:b0:0c:b0:fb:7f:c9:dd:ac:f8:37:c8:a5:41:d3:2b:50: d1:10:5e:13:3f:9f:f8:7d:81:99:d0:b2:de:ae:f1:2e:58:18: 88:9c:50:43:94:1d:3a:8a:8e:50:14:87:ea:40:12:75:be:45: 1d:2e:7a:4b:63:40:f5:39:2a:7b:fa:a0:01:03:a4:34:4d:82: 86:98:51:79:43:a6:f4:2f:7b:c4:41:5c:76:bd:5a:74:40:82: 14:a9:fb:8e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9x2OqKapLJiUwRC3SMdmaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxODhmYWUzZWJiYjNkNzRmZWVkZGNmNTA3ZjgzZTY3ZGI4 ODUwYTIwHhcNMjUxMjIwMjIwMDM1WhcNMjUxMjIxMjIwMDM1WjAzMTEwLwYDVQQD Eyg4YWI1OWVlYTM1OTI0NjA2OGNlOGNkZDBlYzY1NDhhMzUzOTFlYzBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxxkq3dpzQgMpLRRAjeHBBBhj7u+z gdzTTup5UYR1aGFspdTgFiBENKFZAkowwZFhdLmBfv/NhKVYnA5F0IEp97A4XYcv ePGfYFA4JAXzqPtjyTOofOG8xDkXPYszU18cxIcuwV1WP6HUMMKEG8Baxshw2fFV FIsrORQSaR3FBHGTlwoVb8Q4xCVrZUMN7u500C5MZB1F7mEm1Mu3cmNcfwr+oCJx eixEupMU3w/bVo5SOIM6MJryNmqTF/VWBdESfK1sq4ea2j6RTic1jvD1Hm1oGRNB Iu0SZxYazH0CPvR/iG568zle0I9K7NB8sLU44CTq9aemb7CDWtkpqHPANwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIq1nuo1kkYGjOjN0OxlSKNTkewOMB8GA1UdIwQY MBaAFDGI+uPruz10/u3c9Qf4PmfbiFCiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTVlqNjQtdTdQWFQtN2R6MUJfZy1aOXVJVUtJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS9lYTI5ZjItYzM0MC00ZDYxLWI1YmIt Yjg1M2RmZjg3NjVjLzEvTVlqNjQtdTdQWFQtN2R6MUJfZy1aOXVJVUtJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZS9lYTI5ZjItYzM0MC00ZDYxLWI1YmItYjg1M2RmZjg3NjVj LzEvTVlqNjQtdTdQWFQtN2R6MUJfZy1aOXVJVUtJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWGYzn6ib AbBhBtBv54cE/M6yb2E80zEKU+YukIUEuGzlFQOSlgEw9DwyR1XhcMKaegcAil/6 cZqnl7Cz4S52zEGgRBGULr2YaYVBLPdgSzR15x+8WW8e5TeEwPJiuetpylBFeDyS g6pOPe67b5AqNxcs9kBC1hiRXShmg54jogWSEJmXJOlOgJOEruG6UqeujjlrNAam RhhAh0xbrb9sxYP2DJmwDLD7f8ndrPg3yKVB0ytQ0RBeEz+f+H2BmdCy3q7xLlgY iJxQQ5QdOoqOUBSH6kASdb5FHS56S2NA9Tkqe/qgAQOkNE2ChphReUOm9C97xEFc dr1adECCFKn7jg== -----END CERTIFICATE-----Generated at Sun Dec 21 03:30:17 2025 by rpki-client