This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/42ec68-d433-4000-906c-c3eae6b0fb9c/1/mYDHD3bwtfXIRXoDN61dYxIs9-Y.mft File: mYDHD3bwtfXIRXoDN61dYxIs9-Y.mft (raw, json) Hash identifier: 3YvObNHdRssUGD5xMqYI8WIMZttiYX5HszfioCCB8go= Subject key identifier: C5:F5:BC:9E:B9:E8:45:28:84:14:EB:07:9C:E9:59:8F:9E:40:26:F6 Authority key identifier: 99:80:C7:0F:76:F0:B5:F5:C8:45:7A:03:37:AD:5D:63:12:2C:F7:E6 Certificate issuer: /CN=9980c70f76f0b5f5c8457a0337ad5d63122cf7e6 Certificate serial: 019B2FD4BE64824366C243BFBE2574966312 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mYDHD3bwtfXIRXoDN61dYxIs9-Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/42ec68-d433-4000-906c-c3eae6b0fb9c/1/mYDHD3bwtfXIRXoDN61dYxIs9-Y.mft Manifest number: 0E63 Signing time: Thu 18 Dec 2025 05:00:30 +0000 Manifest this update: Thu 18 Dec 2025 05:00:30 +0000 Manifest next update: Fri 19 Dec 2025 05:00:30 +0000 Files and hashes: 1: YErVt-7gu1jQqcup8-GVaaYjMj4.roa (hash: nT1lcrWfw1dtZ1xk/0YupjRA64MYT4KdIF9Y0byNnSM=) 2: mYDHD3bwtfXIRXoDN61dYxIs9-Y.crl (hash: RJ588QjKitOygKiH9pxhbj0tt30bPMDs+F3zCafeDuI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/42ec68-d433-4000-906c-c3eae6b0fb9c/1/mYDHD3bwtfXIRXoDN61dYxIs9-Y.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/42ec68-d433-4000-906c-c3eae6b0fb9c/1/mYDHD3bwtfXIRXoDN61dYxIs9-Y.mft rsync://rpki.ripe.net/repository/DEFAULT/mYDHD3bwtfXIRXoDN61dYxIs9-Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:d4:be:64:82:43:66:c2:43:bf:be:25:74:96:63:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9980c70f76f0b5f5c8457a0337ad5d63122cf7e6 Validity Not Before: Dec 18 05:00:30 2025 GMT Not After : Dec 19 05:00:30 2025 GMT Subject: CN=c5f5bc9eb9e845288414eb079ce9598f9e4026f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:fc:e5:b1:e8:75:17:fd:a8:32:b1:67:f2:c3: ed:3e:87:52:c2:0e:58:f9:9d:90:17:5f:f5:39:a2: 98:45:95:26:d0:6c:6c:5e:04:b0:94:cb:ce:9d:92: d4:2e:24:db:71:78:a1:0a:cb:51:40:cf:f2:b1:96: 21:4d:e8:e5:1b:f4:73:26:57:7f:59:3b:cb:19:72: 88:b8:ff:45:af:01:15:ce:0f:a8:ff:1c:0a:b8:9b: 58:c7:ce:f3:82:9a:93:70:bf:b0:e5:9c:24:f9:fc: f9:3f:61:a7:40:42:75:20:ee:c3:5c:a9:5a:37:f7: 39:02:7f:24:fe:c5:0c:0f:78:02:25:e8:30:95:48: e0:c8:1e:d2:72:b7:90:3f:98:9c:c2:cc:5b:43:28: ce:eb:85:be:c3:d1:99:c2:8a:47:0d:6c:10:04:d8: 78:28:56:fe:f6:c6:af:04:1a:58:37:e5:50:79:4b: a9:b8:f8:a1:35:c7:72:2b:28:d7:4b:6f:98:38:82: e2:64:11:8d:3d:f1:96:7e:f9:3c:7f:29:0c:57:48: c1:06:64:22:36:83:3d:03:07:c4:cc:42:69:8d:f3: 6b:c9:74:c1:c4:21:aa:41:5a:11:af:c8:50:be:8a: 05:9a:61:ee:3c:67:e8:14:91:5f:03:56:bf:64:4c: 26:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:F5:BC:9E:B9:E8:45:28:84:14:EB:07:9C:E9:59:8F:9E:40:26:F6 X509v3 Authority Key Identifier: keyid:99:80:C7:0F:76:F0:B5:F5:C8:45:7A:03:37:AD:5D:63:12:2C:F7:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mYDHD3bwtfXIRXoDN61dYxIs9-Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/42ec68-d433-4000-906c-c3eae6b0fb9c/1/mYDHD3bwtfXIRXoDN61dYxIs9-Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/42ec68-d433-4000-906c-c3eae6b0fb9c/1/mYDHD3bwtfXIRXoDN61dYxIs9-Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:8f:42:8d:d5:ac:3f:10:ba:f6:9c:92:f5:00:e7:44:f0:80: 01:56:6f:ae:e1:67:bd:9d:9c:b6:79:90:df:1f:a9:bc:05:4a: e1:a8:9d:63:81:87:b0:ae:8b:1a:f0:53:8c:67:8b:2a:e4:0a: 49:fb:f6:f9:93:9f:75:59:19:21:f1:ee:39:ab:12:62:2d:cd: 95:b8:40:e3:8f:39:c3:00:63:16:91:92:27:9d:fd:57:df:17: 60:0c:31:fd:62:e4:2d:7d:40:66:0a:01:d8:88:4c:66:c7:eb: ce:8a:c3:83:bd:49:b0:7f:6c:aa:84:a0:8e:73:7d:38:b7:1c: b4:31:32:58:bb:a2:6e:b3:95:f8:1e:15:a0:7a:05:49:21:8a: a5:28:ef:4d:55:8d:92:69:a4:4e:73:a4:48:2b:21:23:09:2f: c9:6a:aa:2f:2f:2e:33:4f:00:c9:ff:71:b5:86:2f:b6:98:08: 4a:43:9f:be:15:a7:7d:5c:ad:eb:21:37:ae:32:ac:e6:b0:9c: d8:02:84:ed:a9:bf:44:ea:e6:b1:d4:13:e9:2e:e3:0f:ec:91: 49:4a:56:5c:78:a5:c6:4e:02:83:f6:94:80:ad:8c:18:2c:d9: a3:de:f2:38:12:11:78:1e:b8:ad:b9:09:43:fc:9d:c9:06:00: b5:37:76:a4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsv1L5kgkNmwkO/viV0lmMSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk5ODBjNzBmNzZmMGI1ZjVjODQ1N2EwMzM3YWQ1ZDYzMTIy Y2Y3ZTYwHhcNMjUxMjE4MDUwMDMwWhcNMjUxMjE5MDUwMDMwWjAzMTEwLwYDVQQD EyhjNWY1YmM5ZWI5ZTg0NTI4ODQxNGViMDc5Y2U5NTk4ZjllNDAyNmY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Pzlseh1F/2oMrFn8sPtPodSwg5Y +Z2QF1/1OaKYRZUm0GxsXgSwlMvOnZLULiTbcXihCstRQM/ysZYhTejlG/RzJld/ WTvLGXKIuP9FrwEVzg+o/xwKuJtYx87zgpqTcL+w5Zwk+fz5P2GnQEJ1IO7DXKla N/c5An8k/sUMD3gCJegwlUjgyB7ScreQP5icwsxbQyjO64W+w9GZwopHDWwQBNh4 KFb+9savBBpYN+VQeUupuPihNcdyKyjXS2+YOILiZBGNPfGWfvk8fykMV0jBBmQi NoM9AwfEzEJpjfNryXTBxCGqQVoRr8hQvooFmmHuPGfoFJFfA1a/ZEwmlwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMX1vJ656EUohBTrB5zpWY+eQCb2MB8GA1UdIwQY MBaAFJmAxw928LX1yEV6AzetXWMSLPfmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbVlESEQzYnd0ZlhJUlhvRE42MWRZeElzOS1ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC80MmVjNjgtZDQzMy00MDAwLTkwNmMt YzNlYWU2YjBmYjljLzEvbVlESEQzYnd0ZlhJUlhvRE42MWRZeElzOS1ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC80MmVjNjgtZDQzMy00MDAwLTkwNmMtYzNlYWU2YjBmYjlj LzEvbVlESEQzYnd0ZlhJUlhvRE42MWRZeElzOS1ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ49CjdWs PxC69pyS9QDnRPCAAVZvruFnvZ2ctnmQ3x+pvAVK4aidY4GHsK6LGvBTjGeLKuQK Sfv2+ZOfdVkZIfHuOasSYi3NlbhA4485wwBjFpGSJ539V98XYAwx/WLkLX1AZgoB 2IhMZsfrzorDg71JsH9sqoSgjnN9OLcctDEyWLuibrOV+B4VoHoFSSGKpSjvTVWN kmmkTnOkSCshIwkvyWqqLy8uM08Ayf9xtYYvtpgISkOfvhWnfVyt6yE3rjKs5rCc 2AKE7am/ROrmsdQT6S7jD+yRSUpWXHilxk4Cg/aUgK2MGCzZo97yOBIReB64rbkJ Q/ydyQYAtTd2pA== -----END CERTIFICATE-----Generated at Thu Dec 18 11:13:27 2025 by rpki-client