This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/feece0-3226-41d6-9461-edefbc24c822/1/mYZ0Jj_M0H9oTh4ZkwLu7-eD-z0.mft File: mYZ0Jj_M0H9oTh4ZkwLu7-eD-z0.mft (raw, json) Hash identifier: 8etBjNKU6HkS1K6W07L/0kBnvI0r4FSGezCNw/da0Hc= Subject key identifier: 83:92:AD:D0:D9:B5:2F:A6:BA:99:25:73:1A:5B:3D:91:23:00:9A:4D Authority key identifier: 99:86:74:26:3F:CC:D0:7F:68:4E:1E:19:93:02:EE:EF:E7:83:FB:3D Certificate issuer: /CN=998674263fccd07f684e1e199302eeefe783fb3d Certificate serial: 019B3EDA675CA7A3A019A73DAC1E6BA3774D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mYZ0Jj_M0H9oTh4ZkwLu7-eD-z0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/feece0-3226-41d6-9461-edefbc24c822/1/mYZ0Jj_M0H9oTh4ZkwLu7-eD-z0.mft Manifest number: 0CBA Signing time: Sun 21 Dec 2025 03:00:59 +0000 Manifest this update: Sun 21 Dec 2025 03:00:59 +0000 Manifest next update: Mon 22 Dec 2025 03:00:59 +0000 Files and hashes: 1: LB9yxSJR9ouxobcPst7y075Gi24.roa (hash: 9cHQrj6vkKZZg+caaJv03RON5UELRQ6rlqWUQeFM15Y=) 2: mYZ0Jj_M0H9oTh4ZkwLu7-eD-z0.crl (hash: xp0wyUK4AgVIlBIFp9k8V+eMHCG8jrlnLhF241NvAUQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/feece0-3226-41d6-9461-edefbc24c822/1/mYZ0Jj_M0H9oTh4ZkwLu7-eD-z0.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/feece0-3226-41d6-9461-edefbc24c822/1/mYZ0Jj_M0H9oTh4ZkwLu7-eD-z0.mft rsync://rpki.ripe.net/repository/DEFAULT/mYZ0Jj_M0H9oTh4ZkwLu7-eD-z0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:da:67:5c:a7:a3:a0:19:a7:3d:ac:1e:6b:a3:77:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=998674263fccd07f684e1e199302eeefe783fb3d Validity Not Before: Dec 21 03:00:59 2025 GMT Not After : Dec 22 03:00:59 2025 GMT Subject: CN=8392add0d9b52fa6ba9925731a5b3d9123009a4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:32:7e:70:91:81:95:5e:7a:4d:a0:77:b2:6f: 7b:3b:14:08:bf:44:14:c5:ad:54:16:4d:3a:46:85: 11:ab:91:e6:15:2e:4f:de:21:ad:f7:27:38:c5:36: b7:78:15:ac:32:bc:c7:2a:84:1f:c8:78:02:95:b9: ce:82:a7:29:42:de:7c:09:e5:2f:49:16:3a:72:6a: 71:84:a9:6e:98:4a:57:79:19:66:98:08:66:2b:32: 38:e0:9b:d7:0a:4c:d9:ac:0b:92:59:05:78:9a:ab: c6:13:7c:b9:45:57:15:cd:fe:8a:da:98:bb:df:b4: e1:1e:38:4b:f1:b3:6c:8d:2c:bb:2a:c3:b2:0f:09: e5:ba:ce:cd:cb:0e:1f:e9:a9:e7:ec:62:c2:79:c4: d1:c6:49:da:8f:1e:45:95:51:36:8e:a1:48:ac:73: b3:0a:9c:6f:b9:8c:e4:96:59:7e:3e:5d:c7:70:0b: 86:88:35:3f:75:64:17:27:7d:20:5c:b2:3b:05:32: ca:b2:3c:19:63:69:2b:9b:f8:95:fc:ca:23:c3:77: 20:45:99:99:f7:6d:e3:e9:a9:9b:0a:2e:5f:43:d5: b0:1e:0a:46:2b:d4:02:9c:00:38:74:cf:48:3c:2b: 72:23:e7:28:04:e7:60:18:1f:7b:a5:00:4b:30:ec: 56:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:92:AD:D0:D9:B5:2F:A6:BA:99:25:73:1A:5B:3D:91:23:00:9A:4D X509v3 Authority Key Identifier: keyid:99:86:74:26:3F:CC:D0:7F:68:4E:1E:19:93:02:EE:EF:E7:83:FB:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mYZ0Jj_M0H9oTh4ZkwLu7-eD-z0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/feece0-3226-41d6-9461-edefbc24c822/1/mYZ0Jj_M0H9oTh4ZkwLu7-eD-z0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/feece0-3226-41d6-9461-edefbc24c822/1/mYZ0Jj_M0H9oTh4ZkwLu7-eD-z0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c5:27:1d:79:ec:44:35:dc:13:3b:2d:4b:b3:36:1e:e9:71:8c: 44:4a:16:bb:7f:96:f7:8b:ad:e6:e8:d6:a9:a7:c9:94:03:c3: 81:33:af:88:85:5e:1c:d9:04:fc:5f:e9:3d:42:9a:05:e0:96: 38:e2:26:76:03:97:75:38:e2:be:4b:15:7d:e2:44:9f:36:6a: b6:bb:e7:4b:30:be:93:61:9a:54:9a:26:87:26:db:60:56:f4: 75:77:1d:d6:9f:45:04:7c:57:13:70:73:6b:a9:4f:a7:72:ba: 23:86:49:c0:7a:ef:fd:db:c5:92:bc:df:83:01:ab:ae:56:63: ae:66:f2:ae:a0:15:83:55:c1:25:da:07:31:a2:6b:65:6a:1c: 06:2c:e2:4f:48:b3:fe:d5:97:6f:62:25:b5:f1:33:6e:92:e7: 2b:5a:a6:ea:0b:ed:ed:27:c7:54:bf:85:87:6b:48:5f:90:64: 78:2d:fe:44:49:20:04:d8:4c:40:21:a1:2f:d3:2e:cb:13:87: e2:c5:81:c7:5f:81:75:dc:e9:05:29:8c:49:f6:12:87:5a:e5: fe:39:d7:30:bb:55:45:4e:76:54:15:80:38:55:b5:a1:0d:28: b9:4f:3a:31:e6:aa:26:df:56:e3:2b:52:59:63:05:70:d1:f8: ac:74:83:88 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+2mdcp6OgGac9rB5ro3dNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk5ODY3NDI2M2ZjY2QwN2Y2ODRlMWUxOTkzMDJlZWVmZTc4 M2ZiM2QwHhcNMjUxMjIxMDMwMDU5WhcNMjUxMjIyMDMwMDU5WjAzMTEwLwYDVQQD Eyg4MzkyYWRkMGQ5YjUyZmE2YmE5OTI1NzMxYTViM2Q5MTIzMDA5YTRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtjJ+cJGBlV56TaB3sm97OxQIv0QU xa1UFk06RoURq5HmFS5P3iGt9yc4xTa3eBWsMrzHKoQfyHgClbnOgqcpQt58CeUv SRY6cmpxhKlumEpXeRlmmAhmKzI44JvXCkzZrAuSWQV4mqvGE3y5RVcVzf6K2pi7 37ThHjhL8bNsjSy7KsOyDwnlus7Nyw4f6ann7GLCecTRxknajx5FlVE2jqFIrHOz CpxvuYzklll+Pl3HcAuGiDU/dWQXJ30gXLI7BTLKsjwZY2krm/iV/Mojw3cgRZmZ 923j6ambCi5fQ9WwHgpGK9QCnAA4dM9IPCtyI+coBOdgGB97pQBLMOxWhQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIOSrdDZtS+mupklcxpbPZEjAJpNMB8GA1UdIwQY MBaAFJmGdCY/zNB/aE4eGZMC7u/ng/s9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbVlaMEpqX00wSDlvVGg0Wmt3THU3LWVELXowLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy9mZWVjZTAtMzIyNi00MWQ2LTk0NjEt ZWRlZmJjMjRjODIyLzEvbVlaMEpqX00wSDlvVGg0Wmt3THU3LWVELXowLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy9mZWVjZTAtMzIyNi00MWQ2LTk0NjEtZWRlZmJjMjRjODIy LzEvbVlaMEpqX00wSDlvVGg0Wmt3THU3LWVELXowLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxScdeexE NdwTOy1LszYe6XGMREoWu3+W94ut5ujWqafJlAPDgTOviIVeHNkE/F/pPUKaBeCW OOImdgOXdTjivksVfeJEnzZqtrvnSzC+k2GaVJomhybbYFb0dXcd1p9FBHxXE3Bz a6lPp3K6I4ZJwHrv/dvFkrzfgwGrrlZjrmbyrqAVg1XBJdoHMaJrZWocBiziT0iz /tWXb2IltfEzbpLnK1qm6gvt7SfHVL+Fh2tIX5BkeC3+REkgBNhMQCGhL9MuyxOH 4sWBx1+BddzpBSmMSfYSh1rl/jnXMLtVRU52VBWAOFW1oQ0ouU86MeaqJt9W4ytS WWMFcNH4rHSDiA== -----END CERTIFICATE-----Generated at Sun Dec 21 09:15:13 2025 by rpki-client