This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/bf3230-eda5-4055-870b-9ea80255c592/1/mYkvB5PMiUvypMdIda8Iqi0dHJk.mft File: mYkvB5PMiUvypMdIda8Iqi0dHJk.mft (raw, json) Hash identifier: 31npjyzULv8iEnOpZOX0tdKvAj7lowSxIpPLbytwnbM= Subject key identifier: F5:B4:1F:33:89:86:5A:10:28:EF:54:AC:36:C5:A3:96:7C:98:EE:2A Authority key identifier: 99:89:2F:07:93:CC:89:4B:F2:A4:C7:48:75:AF:08:AA:2D:1D:1C:99 Certificate issuer: /CN=99892f0793cc894bf2a4c74875af08aa2d1d1c99 Certificate serial: 019B4AA7ADE6E12B24F437A52352F600A58D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mYkvB5PMiUvypMdIda8Iqi0dHJk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/bf3230-eda5-4055-870b-9ea80255c592/1/mYkvB5PMiUvypMdIda8Iqi0dHJk.mft Manifest number: 0F33 Signing time: Tue 23 Dec 2025 10:01:01 +0000 Manifest this update: Tue 23 Dec 2025 10:01:01 +0000 Manifest next update: Wed 24 Dec 2025 10:01:01 +0000 Files and hashes: 1: 8d01Xvs_aaIVSfahCINvVoz5qZs.asa (hash: hdcUHQVv+Z/OXdZkuAsmuPgKWFluiU3e3EejuVlqoak=) 2: mYkvB5PMiUvypMdIda8Iqi0dHJk.crl (hash: Uynb4vAct4w5bCyswXZ0+2Gk+UJVKS8wGBePnsdvhkE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/bf3230-eda5-4055-870b-9ea80255c592/1/mYkvB5PMiUvypMdIda8Iqi0dHJk.crl rsync://rpki.ripe.net/repository/DEFAULT/68/bf3230-eda5-4055-870b-9ea80255c592/1/mYkvB5PMiUvypMdIda8Iqi0dHJk.mft rsync://rpki.ripe.net/repository/DEFAULT/mYkvB5PMiUvypMdIda8Iqi0dHJk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 09:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4a:a7:ad:e6:e1:2b:24:f4:37:a5:23:52:f6:00:a5:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99892f0793cc894bf2a4c74875af08aa2d1d1c99 Validity Not Before: Dec 23 10:01:01 2025 GMT Not After : Dec 24 10:01:01 2025 GMT Subject: CN=f5b41f3389865a1028ef54ac36c5a3967c98ee2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:65:ad:9b:2a:69:b5:35:69:f3:a5:cd:ae:b1: 1d:59:9a:78:d9:93:7c:b1:4a:39:9f:23:dd:f9:01: 13:4f:68:b4:d4:6e:7a:d4:f3:09:9b:4f:ae:9d:41: 43:49:e1:43:cc:c5:87:71:1a:97:77:bd:12:e7:03: 7b:c4:f4:40:0b:ce:f7:b4:ed:d3:dc:80:9e:19:d7: 3a:a2:5a:d4:80:11:10:ef:6d:6c:07:d2:1f:e4:76: b7:7c:13:f7:93:5c:e0:23:5b:b2:ec:ea:1b:00:f5: fb:54:4a:2d:fb:b3:2b:95:44:c4:e8:ff:29:9e:9e: 20:17:f1:76:e1:27:5c:2b:3d:1e:05:15:50:df:9f: e8:71:3c:0e:fa:4d:cb:51:dd:e0:b3:4a:a8:98:59: 61:5b:a0:37:5b:a2:f8:84:c3:6d:c4:ba:bc:fa:ab: fa:75:ce:1e:c2:fd:28:e5:cb:33:a7:ac:c9:6b:f3: d9:e0:1e:65:a5:43:1a:46:bf:bf:6b:dc:ca:51:51: 55:19:88:67:8c:d1:00:f3:00:0b:b3:08:7a:38:30: 9f:e9:07:84:f0:49:b7:3e:a8:58:3d:77:68:1f:8e: de:75:dc:17:30:14:01:c2:73:e8:bf:6d:40:c2:fa: 34:3c:bc:db:f9:b4:3c:75:9c:a5:2a:a8:bc:eb:0a: fe:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:B4:1F:33:89:86:5A:10:28:EF:54:AC:36:C5:A3:96:7C:98:EE:2A X509v3 Authority Key Identifier: keyid:99:89:2F:07:93:CC:89:4B:F2:A4:C7:48:75:AF:08:AA:2D:1D:1C:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mYkvB5PMiUvypMdIda8Iqi0dHJk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/bf3230-eda5-4055-870b-9ea80255c592/1/mYkvB5PMiUvypMdIda8Iqi0dHJk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/68/bf3230-eda5-4055-870b-9ea80255c592/1/mYkvB5PMiUvypMdIda8Iqi0dHJk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:9d:7e:83:ef:71:3f:28:95:b0:29:66:4f:01:68:7e:96:80: 88:3f:ad:cc:dc:3f:16:13:9f:4e:6f:9f:d1:95:18:d9:a2:a0: 63:fa:56:89:38:7c:b3:7e:b6:50:79:f1:02:ee:1c:00:de:5b: b1:c9:c8:5a:5b:e8:c1:ee:59:4a:16:d9:cb:9b:f2:83:bd:93: 08:d1:78:cd:a8:68:55:b1:b9:86:82:5b:4f:b8:bd:60:6e:5c: 0f:cb:5c:09:c7:7f:ae:41:ef:ac:2a:2e:95:e4:1d:b9:1c:98: 49:49:b0:45:b5:1c:1b:29:87:d3:8e:ed:5b:27:94:59:dc:9c: 30:3c:ab:fa:58:ca:6b:0c:2d:ed:fb:61:dd:ac:65:15:2d:d6: f6:b2:f6:c1:ee:64:94:8d:2e:1a:af:cc:71:56:cc:0c:43:30: 62:00:37:c6:3f:ab:a6:0d:64:6e:72:f9:4a:ce:41:61:85:10: 10:39:2a:4e:d5:90:9c:13:d4:e2:66:28:e2:1d:a9:2f:1a:a5: d5:0c:cc:f6:3c:21:24:38:c1:7a:7b:ab:54:9f:51:33:1b:2c: 26:a1:be:d8:65:8e:43:d3:b1:be:68:1d:72:42:19:b6:95:b2: 3c:fd:da:56:af:62:40:80:49:82:93:14:09:9f:a7:e9:74:b5: db:5c:4c:42 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtKp63m4Ssk9DelI1L2AKWNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk5ODkyZjA3OTNjYzg5NGJmMmE0Yzc0ODc1YWYwOGFhMmQx ZDFjOTkwHhcNMjUxMjIzMTAwMTAxWhcNMjUxMjI0MTAwMTAxWjAzMTEwLwYDVQQD EyhmNWI0MWYzMzg5ODY1YTEwMjhlZjU0YWMzNmM1YTM5NjdjOThlZTJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvmWtmypptTVp86XNrrEdWZp42ZN8 sUo5nyPd+QETT2i01G561PMJm0+unUFDSeFDzMWHcRqXd70S5wN7xPRAC873tO3T 3ICeGdc6olrUgBEQ721sB9If5Ha3fBP3k1zgI1uy7OobAPX7VEot+7MrlUTE6P8p np4gF/F24SdcKz0eBRVQ35/ocTwO+k3LUd3gs0qomFlhW6A3W6L4hMNtxLq8+qv6 dc4ewv0o5cszp6zJa/PZ4B5lpUMaRr+/a9zKUVFVGYhnjNEA8wALswh6ODCf6QeE 8Em3PqhYPXdoH47eddwXMBQBwnPov21Awvo0PLzb+bQ8dZylKqi86wr+HQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPW0HzOJhloQKO9UrDbFo5Z8mO4qMB8GA1UdIwQY MBaAFJmJLweTzIlL8qTHSHWvCKotHRyZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbVlrdkI1UE1pVXZ5cE1kSWRhOElxaTBkSEprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC9iZjMyMzAtZWRhNS00MDU1LTg3MGIt OWVhODAyNTVjNTkyLzEvbVlrdkI1UE1pVXZ5cE1kSWRhOElxaTBkSEprLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OC9iZjMyMzAtZWRhNS00MDU1LTg3MGItOWVhODAyNTVjNTky LzEvbVlrdkI1UE1pVXZ5cE1kSWRhOElxaTBkSEprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL51+g+9x PyiVsClmTwFofpaAiD+tzNw/FhOfTm+f0ZUY2aKgY/pWiTh8s362UHnxAu4cAN5b scnIWlvowe5ZShbZy5vyg72TCNF4zahoVbG5hoJbT7i9YG5cD8tcCcd/rkHvrCou leQduRyYSUmwRbUcGymH047tWyeUWdycMDyr+ljKawwt7fth3axlFS3W9rL2we5k lI0uGq/McVbMDEMwYgA3xj+rpg1kbnL5Ss5BYYUQEDkqTtWQnBPU4mYo4h2pLxql 1QzM9jwhJDjBenurVJ9RMxssJqG+2GWOQ9OxvmgdckIZtpWyPP3aVq9iQIBJgpMU CZ+n6XS121xMQg== -----END CERTIFICATE-----Generated at Tue Dec 23 12:22:30 2025 by rpki-client