This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/54ff92-221e-4a16-8aef-194e0c651d73/1/mfCyyNezyhPFnFM3LyXiAsharcU.mft File: mfCyyNezyhPFnFM3LyXiAsharcU.mft (raw, json) Hash identifier: ROkrA5kkUDp2qAoDaJAVre2CnsW+4JIxq11PlS7RWuU= Subject key identifier: 04:3D:B6:EE:3D:E9:E1:50:9D:35:A2:30:2B:E6:2A:F7:0B:67:2B:C8 Authority key identifier: 99:F0:B2:C8:D7:B3:CA:13:C5:9C:53:37:2F:25:E2:02:C8:5A:AD:C5 Certificate issuer: /CN=99f0b2c8d7b3ca13c59c53372f25e202c85aadc5 Certificate serial: 019B5B65CB065B4D0865ECA35006E2082250 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mfCyyNezyhPFnFM3LyXiAsharcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/54ff92-221e-4a16-8aef-194e0c651d73/1/mfCyyNezyhPFnFM3LyXiAsharcU.mft Manifest number: 0A9D Signing time: Fri 26 Dec 2025 16:02:36 +0000 Manifest this update: Fri 26 Dec 2025 16:02:36 +0000 Manifest next update: Sat 27 Dec 2025 16:02:36 +0000 Files and hashes: 1: mfCyyNezyhPFnFM3LyXiAsharcU.crl (hash: rcz7CZN6xz17RF7QoYy3u8CD5WfY1yq9P3PeV93Tb5Q=) 2: oVf5pbd8qfOWaMtymVg3zBpo1aI.roa (hash: /JkkHPoUwL9WPqaL9lMZRl9hvH2fpXEuWKNlqu6l9cI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/54ff92-221e-4a16-8aef-194e0c651d73/1/mfCyyNezyhPFnFM3LyXiAsharcU.crl rsync://rpki.ripe.net/repository/DEFAULT/69/54ff92-221e-4a16-8aef-194e0c651d73/1/mfCyyNezyhPFnFM3LyXiAsharcU.mft rsync://rpki.ripe.net/repository/DEFAULT/mfCyyNezyhPFnFM3LyXiAsharcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 15:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5b:65:cb:06:5b:4d:08:65:ec:a3:50:06:e2:08:22:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99f0b2c8d7b3ca13c59c53372f25e202c85aadc5 Validity Not Before: Dec 26 16:02:36 2025 GMT Not After : Dec 27 16:02:36 2025 GMT Subject: CN=043db6ee3de9e1509d35a2302be62af70b672bc8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:d5:a8:29:e0:45:6d:5b:f3:2d:8a:c7:eb:9d: 69:8c:f1:eb:bb:a8:70:43:7b:d1:d4:27:cb:4e:cd: b2:82:b3:80:1e:c8:74:41:88:16:26:b7:b2:5b:55: e5:86:93:51:77:9d:19:c4:4a:62:8c:1d:1a:73:87: 5c:13:10:36:21:a2:d0:9f:b5:58:d9:1c:32:4c:ae: ea:4b:97:2d:0c:1f:1f:0c:8a:64:09:94:49:6f:19: ea:b2:24:4c:91:f0:ec:52:17:26:1b:42:3a:ad:5d: 94:2f:b5:6f:ed:9d:55:35:a2:cf:4c:d9:03:4c:26: 1b:e6:d0:9a:7c:6b:d6:ee:a0:d6:14:4b:ee:3b:50: 9f:58:01:02:b5:4c:fc:8a:da:58:4f:4b:19:30:6b: 0b:61:97:c3:03:db:bc:ec:58:a6:f5:e9:19:80:0a: 07:45:de:2b:30:3a:3b:ef:12:d4:76:82:96:a1:4f: c0:44:10:4b:91:1f:35:72:4a:3a:95:70:72:c3:fd: 3b:22:4f:4b:44:7e:be:9a:5f:5a:df:8d:da:bf:17: c1:a6:bb:77:dc:bb:16:ad:6a:1c:a4:56:3a:85:8b: 05:e7:18:97:05:72:68:18:99:59:c2:ef:a8:09:6d: c0:e3:f7:6f:4f:63:76:0c:a9:f0:8e:c8:11:c5:cf: 0d:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:3D:B6:EE:3D:E9:E1:50:9D:35:A2:30:2B:E6:2A:F7:0B:67:2B:C8 X509v3 Authority Key Identifier: keyid:99:F0:B2:C8:D7:B3:CA:13:C5:9C:53:37:2F:25:E2:02:C8:5A:AD:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mfCyyNezyhPFnFM3LyXiAsharcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/54ff92-221e-4a16-8aef-194e0c651d73/1/mfCyyNezyhPFnFM3LyXiAsharcU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/54ff92-221e-4a16-8aef-194e0c651d73/1/mfCyyNezyhPFnFM3LyXiAsharcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:16:fb:21:31:e5:1a:af:56:0c:57:66:52:01:e4:ea:39:8f: 0a:aa:ac:14:90:95:dd:63:05:9a:a2:80:0a:93:c2:32:72:e8: c8:d2:d8:a6:31:73:c1:3a:d2:42:35:d5:d3:94:eb:66:96:6b: ed:f4:0d:9e:6b:cf:93:94:38:37:ba:d6:c2:e9:f8:1a:47:cc: a9:9e:e0:33:05:ff:45:cc:a8:ce:67:cc:95:a5:a8:39:52:ed: 7d:27:20:80:6f:30:71:23:01:eb:43:21:b9:52:fc:45:5b:d4: f9:01:1b:22:85:7a:05:a1:6d:c6:59:f8:e5:51:62:67:1d:2a: fe:34:5b:8e:8d:e5:8e:53:46:ff:7e:71:21:73:00:63:83:8e: 2d:7c:c0:89:87:aa:eb:cd:a3:d7:e9:d4:e7:35:14:49:51:e9: b2:d1:f2:53:bc:64:84:e7:58:35:6b:63:de:8e:8e:62:15:c7: 16:04:7a:7d:2f:c6:c8:93:7b:fc:ca:e0:10:75:a3:f1:66:20: 33:46:27:34:75:b5:22:30:dd:b2:9d:01:07:11:d9:71:37:a9: 41:4a:d8:8e:e9:49:41:d8:62:d7:53:c2:b2:db:b5:a5:48:1f: d3:97:f0:2d:86:2a:fd:73:92:a8:ff:e6:af:17:64:ce:d5:9a: 41:5f:dd:e7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtbZcsGW00IZeyjUAbiCCJQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk5ZjBiMmM4ZDdiM2NhMTNjNTljNTMzNzJmMjVlMjAyYzg1 YWFkYzUwHhcNMjUxMjI2MTYwMjM2WhcNMjUxMjI3MTYwMjM2WjAzMTEwLwYDVQQD EygwNDNkYjZlZTNkZTllMTUwOWQzNWEyMzAyYmU2MmFmNzBiNjcyYmM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiNWoKeBFbVvzLYrH651pjPHru6hw Q3vR1CfLTs2ygrOAHsh0QYgWJreyW1XlhpNRd50ZxEpijB0ac4dcExA2IaLQn7VY 2RwyTK7qS5ctDB8fDIpkCZRJbxnqsiRMkfDsUhcmG0I6rV2UL7Vv7Z1VNaLPTNkD TCYb5tCafGvW7qDWFEvuO1CfWAECtUz8itpYT0sZMGsLYZfDA9u87Fim9ekZgAoH Rd4rMDo77xLUdoKWoU/ARBBLkR81cko6lXByw/07Ik9LRH6+ml9a343avxfBprt3 3LsWrWocpFY6hYsF5xiXBXJoGJlZwu+oCW3A4/dvT2N2DKnwjsgRxc8N4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAQ9tu496eFQnTWiMCvmKvcLZyvIMB8GA1UdIwQY MBaAFJnwssjXs8oTxZxTNy8l4gLIWq3FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbWZDeXlOZXp5aFBGbkZNM0x5WGlBc2hhcmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS81NGZmOTItMjIxZS00YTE2LThhZWYt MTk0ZTBjNjUxZDczLzEvbWZDeXlOZXp5aFBGbkZNM0x5WGlBc2hhcmNVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS81NGZmOTItMjIxZS00YTE2LThhZWYtMTk0ZTBjNjUxZDcz LzEvbWZDeXlOZXp5aFBGbkZNM0x5WGlBc2hhcmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMhb7ITHl Gq9WDFdmUgHk6jmPCqqsFJCV3WMFmqKACpPCMnLoyNLYpjFzwTrSQjXV05TrZpZr 7fQNnmvPk5Q4N7rWwun4GkfMqZ7gMwX/RcyozmfMlaWoOVLtfScggG8wcSMB60Mh uVL8RVvU+QEbIoV6BaFtxln45VFiZx0q/jRbjo3ljlNG/35xIXMAY4OOLXzAiYeq 682j1+nU5zUUSVHpstHyU7xkhOdYNWtj3o6OYhXHFgR6fS/GyJN7/MrgEHWj8WYg M0YnNHW1IjDdsp0BBxHZcTepQUrYjulJQdhi11PCstu1pUgf05fwLYYq/XOSqP/m rxdkztWaQV/d5w== -----END CERTIFICATE-----Generated at Sat Dec 27 01:04:10 2025 by rpki-client