This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/44f874-446c-4646-8db0-d99f66ef606c/1/MY2rcPRKfrixz8E3Qz_NTXigOwU.mft File: MY2rcPRKfrixz8E3Qz_NTXigOwU.mft (raw, json) Hash identifier: QUB3gyQwcQvIXAq7fhRQYL2ZSBEHIBnjOg/up8B+KI4= Subject key identifier: E7:60:BB:30:9A:64:5E:C2:78:25:72:46:AF:A0:9B:7D:17:79:92:32 Authority key identifier: 31:8D:AB:70:F4:4A:7E:B8:B1:CF:C1:37:43:3F:CD:4D:78:A0:3B:05 Certificate issuer: /CN=318dab70f44a7eb8b1cfc137433fcd4d78a03b05 Certificate serial: 019B650BD409062D4242B7325D10A6EFC2E1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MY2rcPRKfrixz8E3Qz_NTXigOwU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/44f874-446c-4646-8db0-d99f66ef606c/1/MY2rcPRKfrixz8E3Qz_NTXigOwU.mft Manifest number: 029C Signing time: Sun 28 Dec 2025 13:00:32 +0000 Manifest this update: Sun 28 Dec 2025 13:00:32 +0000 Manifest next update: Mon 29 Dec 2025 13:00:32 +0000 Files and hashes: 1: 7IBTUseRk7zv94Dnpevsji-MPak.roa (hash: OI9qfsQPi4f7OJOO0DKYF4KRnwctmOowvulRpTfATm8=) 2: HJdicrhK0X58hHeVpTRveQPzgSA.asa (hash: GnsE5zVVUGgOlqc4oqkgxYqYyAJUdLN6bxMsAfebi24=) 3: MY2rcPRKfrixz8E3Qz_NTXigOwU.crl (hash: nrM5LofPxqvYoLMIomM8f6wlhVOhyyQ7jv/TFIRxZXs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/44f874-446c-4646-8db0-d99f66ef606c/1/MY2rcPRKfrixz8E3Qz_NTXigOwU.crl rsync://rpki.ripe.net/repository/DEFAULT/39/44f874-446c-4646-8db0-d99f66ef606c/1/MY2rcPRKfrixz8E3Qz_NTXigOwU.mft rsync://rpki.ripe.net/repository/DEFAULT/MY2rcPRKfrixz8E3Qz_NTXigOwU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 13:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:65:0b:d4:09:06:2d:42:42:b7:32:5d:10:a6:ef:c2:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=318dab70f44a7eb8b1cfc137433fcd4d78a03b05 Validity Not Before: Dec 28 13:00:32 2025 GMT Not After : Dec 29 13:00:32 2025 GMT Subject: CN=e760bb309a645ec278257246afa09b7d17799232 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:9f:be:12:c1:3d:a5:84:a3:c6:08:39:c1:a0: c3:ac:1e:36:96:56:a4:39:04:3f:54:27:b9:20:92: f6:2c:63:80:40:19:9e:4a:b6:63:df:31:5a:6c:73: 07:cb:76:dd:f2:0e:73:3c:96:a0:06:24:62:3b:33: 41:a2:62:b0:de:27:de:3e:9e:07:9e:c2:97:c0:51: b8:b1:ab:04:3a:5b:84:03:2f:ba:29:74:b5:dd:76: d6:06:df:59:46:14:b5:de:57:2e:21:e5:7f:23:5d: 33:88:b7:b1:f9:cb:87:d3:a8:78:40:04:1e:64:99: 42:a0:1c:45:7e:a2:b4:83:e3:a0:fb:0e:38:00:68: 68:de:9e:93:3b:c4:af:8e:94:e0:1b:5a:1e:b9:1c: c7:d6:2d:0a:f1:16:7a:e9:e8:a0:32:a5:7e:51:5d: 46:ef:3c:f3:2d:64:52:1c:2d:51:ca:75:54:0c:75: 62:a5:7e:ff:62:b3:d6:59:cc:12:23:8f:be:52:d9: 6b:83:88:f4:85:2a:63:14:46:b4:85:db:7a:b9:fb: a5:ff:ed:5d:0a:06:b0:fa:da:67:00:3d:9c:ef:11: aa:c2:8d:61:6c:38:19:68:56:2f:8f:d5:6c:6d:d3: 2b:df:09:4e:56:e5:35:5c:3f:8f:b5:45:71:27:db: 59:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:60:BB:30:9A:64:5E:C2:78:25:72:46:AF:A0:9B:7D:17:79:92:32 X509v3 Authority Key Identifier: keyid:31:8D:AB:70:F4:4A:7E:B8:B1:CF:C1:37:43:3F:CD:4D:78:A0:3B:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MY2rcPRKfrixz8E3Qz_NTXigOwU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/44f874-446c-4646-8db0-d99f66ef606c/1/MY2rcPRKfrixz8E3Qz_NTXigOwU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/39/44f874-446c-4646-8db0-d99f66ef606c/1/MY2rcPRKfrixz8E3Qz_NTXigOwU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:e5:5d:19:3c:36:6b:18:bd:29:1d:f8:59:64:c1:00:c4:ca: 27:e8:fe:16:c6:aa:05:61:97:ed:66:51:63:a7:3a:6b:28:91: e2:e1:f0:c2:d5:23:ac:6a:e6:ef:f2:2b:8e:8a:b4:fe:ae:56: e2:72:a9:e7:83:2b:7d:31:58:68:84:75:4a:70:86:75:27:64: 32:56:63:b6:b3:9c:97:b0:9c:70:8d:a7:85:39:14:55:2e:76: b1:d4:72:80:22:51:9a:77:ff:98:09:38:a2:05:52:bc:b6:85: 5c:64:16:3a:90:b4:d3:4e:5a:d8:71:32:f5:c3:d3:1b:f6:50: 84:cf:31:d8:9d:f9:8e:8e:a5:94:7a:bf:f7:c9:74:be:ab:6c: f8:d7:7e:19:a8:00:4e:18:75:0a:cc:87:c4:20:9c:61:23:0c: 2d:f8:47:9f:d8:7f:e6:e8:a0:a2:9b:f3:60:46:06:fe:f8:6b: 88:f4:23:a3:86:ad:4f:49:1f:06:f5:6d:5a:bd:c8:0d:8f:9f: f1:96:f1:4f:d2:17:68:5c:e8:e7:5b:cb:0d:85:c1:ba:43:8b: 23:b2:9a:c3:d9:e8:04:27:41:72:f0:8a:dc:f6:1b:89:06:1c: b8:93:22:f8:fe:7f:c9:14:c8:5e:9b:b0:f5:c4:6a:9a:54:97: 66:ca:31:ed -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtlC9QJBi1CQrcyXRCm78LhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxOGRhYjcwZjQ0YTdlYjhiMWNmYzEzNzQzM2ZjZDRkNzhh MDNiMDUwHhcNMjUxMjI4MTMwMDMyWhcNMjUxMjI5MTMwMDMyWjAzMTEwLwYDVQQD EyhlNzYwYmIzMDlhNjQ1ZWMyNzgyNTcyNDZhZmEwOWI3ZDE3Nzk5MjMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2p++EsE9pYSjxgg5waDDrB42llak OQQ/VCe5IJL2LGOAQBmeSrZj3zFabHMHy3bd8g5zPJagBiRiOzNBomKw3ifePp4H nsKXwFG4sasEOluEAy+6KXS13XbWBt9ZRhS13lcuIeV/I10ziLex+cuH06h4QAQe ZJlCoBxFfqK0g+Og+w44AGho3p6TO8SvjpTgG1oeuRzH1i0K8RZ66eigMqV+UV1G 7zzzLWRSHC1RynVUDHVipX7/YrPWWcwSI4++Utlrg4j0hSpjFEa0hdt6uful/+1d Cgaw+tpnAD2c7xGqwo1hbDgZaFYvj9VsbdMr3wlOVuU1XD+PtUVxJ9tZKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOdguzCaZF7CeCVyRq+gm30XeZIyMB8GA1UdIwQY MBaAFDGNq3D0Sn64sc/BN0M/zU14oDsFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTVkycmNQUktmcml4ejhFM1F6X05UWGlnT3dVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS80NGY4NzQtNDQ2Yy00NjQ2LThkYjAt ZDk5ZjY2ZWY2MDZjLzEvTVkycmNQUktmcml4ejhFM1F6X05UWGlnT3dVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOS80NGY4NzQtNDQ2Yy00NjQ2LThkYjAtZDk5ZjY2ZWY2MDZj LzEvTVkycmNQUktmcml4ejhFM1F6X05UWGlnT3dVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAauVdGTw2 axi9KR34WWTBAMTKJ+j+FsaqBWGX7WZRY6c6ayiR4uHwwtUjrGrm7/Irjoq0/q5W 4nKp54MrfTFYaIR1SnCGdSdkMlZjtrOcl7CccI2nhTkUVS52sdRygCJRmnf/mAk4 ogVSvLaFXGQWOpC0005a2HEy9cPTG/ZQhM8x2J35jo6llHq/98l0vqts+Nd+GagA Thh1CsyHxCCcYSMMLfhHn9h/5uigopvzYEYG/vhriPQjo4atT0kfBvVtWr3IDY+f 8ZbxT9IXaFzo51vLDYXBukOLI7Kaw9noBCdBcvCK3PYbiQYcuJMi+P5/yRTIXpuw 9cRqmlSXZsox7Q== -----END CERTIFICATE-----Generated at Sun Dec 28 23:22:02 2025 by rpki-client