This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/b9c1d7-2aed-4696-80a7-d5abf5031d21/1/mYS56xIiNxEcH4yldwfscwcpHug.mft File: mYS56xIiNxEcH4yldwfscwcpHug.mft (raw, json) Hash identifier: eAVuh8K3HZWKVAxkfEutm8+EHCRkLHNkBWpzpGfDKes= Subject key identifier: 51:89:EC:76:FC:64:A1:2C:B7:FD:AD:E8:7D:A2:06:48:60:C0:FB:B2 Authority key identifier: 99:84:B9:EB:12:22:37:11:1C:1F:8C:A5:77:07:EC:73:07:29:1E:E8 Certificate issuer: /CN=9984b9eb122237111c1f8ca57707ec7307291ee8 Certificate serial: 019B62426BA36A8FC1A3B7737507DCEFB550 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mYS56xIiNxEcH4yldwfscwcpHug.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/b9c1d7-2aed-4696-80a7-d5abf5031d21/1/mYS56xIiNxEcH4yldwfscwcpHug.mft Manifest number: 17A1 Signing time: Sun 28 Dec 2025 00:01:18 +0000 Manifest this update: Sun 28 Dec 2025 00:01:18 +0000 Manifest next update: Mon 29 Dec 2025 00:01:18 +0000 Files and hashes: 1: 6xQaOng6ybJiigzf2XvWmzrMXU4.roa (hash: VWLbjjUJx9s0aleI0gYr1/W1oVoltzBATX0SfpaTSw8=) 2: 8xwaS60LVGP0-okttlRwMxeXtAs.asa (hash: eEQj5lWgE4ntot+6zad5rM7H1/i9Quj9OILVi+LsDxQ=) 3: XEpy5lCOl0Tmub4xGBtkQEupj7o.roa (hash: VFCRN96ZupXuhJWonAUO0kRSMoyUuFboGTCKurSs1xw=) 4: mYS56xIiNxEcH4yldwfscwcpHug.crl (hash: +LWO9gvhKFuMXxGjCiDnl7BeM1xiCeDZ+y41VXb3ioY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/b9c1d7-2aed-4696-80a7-d5abf5031d21/1/mYS56xIiNxEcH4yldwfscwcpHug.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/b9c1d7-2aed-4696-80a7-d5abf5031d21/1/mYS56xIiNxEcH4yldwfscwcpHug.mft rsync://rpki.ripe.net/repository/DEFAULT/mYS56xIiNxEcH4yldwfscwcpHug.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:62:42:6b:a3:6a:8f:c1:a3:b7:73:75:07:dc:ef:b5:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9984b9eb122237111c1f8ca57707ec7307291ee8 Validity Not Before: Dec 28 00:01:18 2025 GMT Not After : Dec 29 00:01:18 2025 GMT Subject: CN=5189ec76fc64a12cb7fdade87da2064860c0fbb2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:e6:b7:81:4c:bf:07:68:b0:cc:39:96:45:78: a1:db:7b:aa:e1:f0:26:93:99:18:96:0d:62:07:80: 3a:39:b1:59:95:e0:a2:68:33:ac:63:dd:2d:5f:d1: f5:ba:bf:46:3d:bf:e5:b4:20:3a:d6:25:b4:da:e3: 63:b2:78:3b:d9:ed:94:6c:58:c1:53:00:b7:19:c3: e4:22:08:70:b6:a7:63:c9:10:35:17:b7:ec:6f:96: 34:a4:4d:be:ff:f6:96:f7:0c:c6:b4:6c:d4:a9:66: ae:89:78:1c:ce:39:5a:51:1f:85:2e:a8:4a:a3:b2: ca:8b:52:a2:6a:61:bd:05:78:79:37:93:87:eb:b0: 22:cb:a1:66:74:5e:71:6f:6f:bd:c3:64:78:a4:16: 1b:b5:e7:91:cb:a1:fc:24:3c:ec:4d:cb:e0:99:29: d2:40:9e:3a:6c:1b:ed:87:f7:18:ce:e3:ff:df:5f: 01:27:17:55:cd:88:d1:51:7f:b0:8f:e7:f1:e7:0c: aa:43:8f:0d:5b:e5:19:8e:a0:bb:7e:ae:92:1e:c3: 53:8d:28:cf:55:cf:d3:bb:75:bd:05:2b:68:c9:dd: ab:b1:ac:9c:bf:46:6b:71:2b:99:2f:c9:00:dd:73: a2:38:37:dc:cc:6a:b3:8c:bc:08:ac:c4:ff:ab:c5: 9c:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:89:EC:76:FC:64:A1:2C:B7:FD:AD:E8:7D:A2:06:48:60:C0:FB:B2 X509v3 Authority Key Identifier: keyid:99:84:B9:EB:12:22:37:11:1C:1F:8C:A5:77:07:EC:73:07:29:1E:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mYS56xIiNxEcH4yldwfscwcpHug.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/b9c1d7-2aed-4696-80a7-d5abf5031d21/1/mYS56xIiNxEcH4yldwfscwcpHug.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/b9c1d7-2aed-4696-80a7-d5abf5031d21/1/mYS56xIiNxEcH4yldwfscwcpHug.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:79:1a:ce:6a:a7:a5:4d:ba:7a:e1:82:00:7e:fe:85:4f:ce: 7f:35:58:ac:b6:43:6f:2c:a2:cf:f4:ab:ae:4d:a8:98:cf:de: d6:76:89:a4:8c:54:56:80:0a:60:d5:2c:f6:59:66:f6:ca:d8: ab:48:b7:98:fd:50:80:57:d6:ff:fd:9f:a8:ad:4c:ca:cb:64: 58:a0:f2:90:0a:e5:dd:94:44:87:d2:57:70:b8:e8:57:c2:c6: 09:ae:9a:87:f4:ab:df:fe:1b:cb:68:65:92:a4:ae:33:eb:26: f0:c0:a0:87:5b:7a:73:64:39:42:90:41:68:01:2f:cb:f3:d4: 1a:30:eb:1b:b4:93:43:cb:e8:19:d5:46:97:02:1f:52:06:ba: 87:3e:56:b1:86:c5:55:b3:d1:a1:7f:a9:51:25:f3:67:d5:6d: 4c:87:97:5c:79:fd:59:5b:0b:32:91:61:8d:88:e4:b3:80:ec: a1:67:d7:b2:3b:51:37:77:68:83:ae:5d:0c:da:cd:6d:23:e7: a8:0d:4a:82:c9:63:6b:c1:fd:33:01:76:e0:71:e0:55:80:ce: 40:4a:94:fe:66:7d:11:cf:3f:68:5a:42:aa:c6:a5:4e:42:f9: 43:ba:2f:e4:c5:e2:e4:09:d1:2b:3c:81:85:8f:a0:d1:e5:df: cb:bd:08:87 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtiQmujao/Bo7dzdQfc77VQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk5ODRiOWViMTIyMjM3MTExYzFmOGNhNTc3MDdlYzczMDcy OTFlZTgwHhcNMjUxMjI4MDAwMTE4WhcNMjUxMjI5MDAwMTE4WjAzMTEwLwYDVQQD Eyg1MTg5ZWM3NmZjNjRhMTJjYjdmZGFkZTg3ZGEyMDY0ODYwYzBmYmIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApea3gUy/B2iwzDmWRXih23uq4fAm k5kYlg1iB4A6ObFZleCiaDOsY90tX9H1ur9GPb/ltCA61iW02uNjsng72e2UbFjB UwC3GcPkIghwtqdjyRA1F7fsb5Y0pE2+//aW9wzGtGzUqWauiXgczjlaUR+FLqhK o7LKi1KiamG9BXh5N5OH67Aiy6FmdF5xb2+9w2R4pBYbteeRy6H8JDzsTcvgmSnS QJ46bBvth/cYzuP/318BJxdVzYjRUX+wj+fx5wyqQ48NW+UZjqC7fq6SHsNTjSjP Vc/Tu3W9BStoyd2rsaycv0ZrcSuZL8kA3XOiODfczGqzjLwIrMT/q8Wc5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFGJ7Hb8ZKEst/2t6H2iBkhgwPuyMB8GA1UdIwQY MBaAFJmEuesSIjcRHB+MpXcH7HMHKR7oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbVlTNTZ4SWlOeEVjSDR5bGR3ZnNjd2NwSHVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC9iOWMxZDctMmFlZC00Njk2LTgwYTct ZDVhYmY1MDMxZDIxLzEvbVlTNTZ4SWlOeEVjSDR5bGR3ZnNjd2NwSHVnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC9iOWMxZDctMmFlZC00Njk2LTgwYTctZDVhYmY1MDMxZDIx LzEvbVlTNTZ4SWlOeEVjSDR5bGR3ZnNjd2NwSHVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABnkazmqn pU26euGCAH7+hU/OfzVYrLZDbyyiz/Srrk2omM/e1naJpIxUVoAKYNUs9llm9srY q0i3mP1QgFfW//2fqK1MystkWKDykArl3ZREh9JXcLjoV8LGCa6ah/Sr3/4by2hl kqSuM+sm8MCgh1t6c2Q5QpBBaAEvy/PUGjDrG7STQ8voGdVGlwIfUga6hz5WsYbF VbPRoX+pUSXzZ9VtTIeXXHn9WVsLMpFhjYjks4DsoWfXsjtRN3dog65dDNrNbSPn qA1Kgslja8H9MwF24HHgVYDOQEqU/mZ9Ec8/aFpCqsalTkL5Q7ov5MXi5AnRKzyB hY+g0eXfy70Ihw== -----END CERTIFICATE-----Generated at Sun Dec 28 06:22:09 2025 by rpki-client