This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/28b730-f5bb-4606-8365-08e10638225e/1/Mya5UKRaLGusFQX80E2UDMCWj5Y.mft File: Mya5UKRaLGusFQX80E2UDMCWj5Y.mft (raw, json) Hash identifier: 443nB1W/GuhKtG3jkVOoI0b8vTT+bzYguwFOV63gqUg= Subject key identifier: CD:F1:6E:9A:D4:98:E1:DD:59:EF:8F:10:B0:CA:80:52:9A:DF:DB:EA Authority key identifier: 33:26:B9:50:A4:5A:2C:6B:AC:15:05:FC:D0:4D:94:0C:C0:96:8F:96 Certificate issuer: /CN=3326b950a45a2c6bac1505fcd04d940cc0968f96 Certificate serial: 019AF19B0922D434D48E57EBC979DDA7D035 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mya5UKRaLGusFQX80E2UDMCWj5Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/28b730-f5bb-4606-8365-08e10638225e/1/Mya5UKRaLGusFQX80E2UDMCWj5Y.mft Manifest number: 064A Signing time: Sat 06 Dec 2025 03:01:00 +0000 Manifest this update: Sat 06 Dec 2025 03:01:00 +0000 Manifest next update: Sun 07 Dec 2025 03:01:00 +0000 Files and hashes: 1: Mya5UKRaLGusFQX80E2UDMCWj5Y.crl (hash: dvl+bME+6rMa8RdXpEpCMzubXGfvrgfXrKXWRbPCelQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/28b730-f5bb-4606-8365-08e10638225e/1/Mya5UKRaLGusFQX80E2UDMCWj5Y.crl rsync://rpki.ripe.net/repository/DEFAULT/0a/28b730-f5bb-4606-8365-08e10638225e/1/Mya5UKRaLGusFQX80E2UDMCWj5Y.mft rsync://rpki.ripe.net/repository/DEFAULT/Mya5UKRaLGusFQX80E2UDMCWj5Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:09:22:d4:34:d4:8e:57:eb:c9:79:dd:a7:d0:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3326b950a45a2c6bac1505fcd04d940cc0968f96 Validity Not Before: Dec 6 03:01:00 2025 GMT Not After : Dec 7 03:01:00 2025 GMT Subject: CN=cdf16e9ad498e1dd59ef8f10b0ca80529adfdbea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:b7:c0:a3:02:7a:aa:11:ac:26:b9:11:06:87: e4:17:fe:81:e9:04:14:43:2e:38:b4:eb:44:53:7a: 5e:47:fb:b5:ea:db:69:e1:4c:ef:c9:0d:fb:cf:93: 9b:b7:4e:57:e4:34:77:a3:96:58:d7:30:31:41:07: 47:1d:7c:c1:94:5d:93:c3:9b:26:a9:34:1f:3c:27: c9:5f:1b:59:f6:9a:74:37:77:fa:10:cf:21:cb:08: c7:ac:3e:c9:b0:b5:18:2c:da:96:df:29:a5:71:ff: 30:01:ac:a5:78:30:46:67:47:38:70:c4:e5:13:fa: d8:5c:82:8f:19:bb:7e:40:8a:d9:41:09:67:17:84: 2c:5b:c9:7c:fd:30:08:44:9b:0b:cd:c7:01:5f:46: 3d:68:11:92:87:66:ad:51:00:e6:97:db:64:0d:0c: 12:a8:99:3b:e3:fd:52:d0:cc:2e:e9:88:7c:92:05: ce:8d:49:17:f8:83:26:23:1b:2c:e6:cf:11:60:d7: 2c:ba:54:ec:da:38:f4:da:86:0d:9a:b2:9c:c1:1b: 26:6f:29:dd:51:77:26:ad:e3:2e:6a:3e:f1:37:48: 1a:54:e3:af:87:8a:a0:9a:29:ec:fe:5b:ff:23:86: 74:96:bb:a9:18:5e:ae:37:7b:ea:83:ee:41:b7:23: 54:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:F1:6E:9A:D4:98:E1:DD:59:EF:8F:10:B0:CA:80:52:9A:DF:DB:EA X509v3 Authority Key Identifier: keyid:33:26:B9:50:A4:5A:2C:6B:AC:15:05:FC:D0:4D:94:0C:C0:96:8F:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mya5UKRaLGusFQX80E2UDMCWj5Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/28b730-f5bb-4606-8365-08e10638225e/1/Mya5UKRaLGusFQX80E2UDMCWj5Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/28b730-f5bb-4606-8365-08e10638225e/1/Mya5UKRaLGusFQX80E2UDMCWj5Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:b8:22:19:eb:c2:a7:14:94:84:78:b8:53:ee:cb:98:62:31: ca:e2:d7:69:79:73:1e:59:f1:b7:f9:3d:c5:55:11:3b:89:a6: e4:e3:ed:7f:86:bd:3a:8c:ef:23:2a:5c:a5:86:0f:43:af:b2: ff:b8:2c:ce:ac:c3:23:97:05:17:19:77:49:b2:4a:63:65:c8: 22:cb:ba:d5:e3:ea:e4:d5:d0:9c:aa:92:b4:0f:85:68:56:88: 15:d1:1e:d5:d6:0d:52:93:f8:33:95:c1:65:19:97:79:b4:8b: 55:f9:eb:99:b6:04:3e:51:d5:a1:58:12:8b:f5:87:8f:8c:f8: 69:c6:9f:50:a3:ee:da:80:d2:98:da:de:cc:42:0c:41:b9:77: 92:77:41:84:78:b9:66:09:a0:61:9d:8a:69:98:fb:21:8c:2f: 75:6c:20:33:d6:7d:72:3d:5c:8a:96:30:b3:98:6c:18:49:4b: 33:08:ac:82:34:f4:f0:d6:96:ed:9a:73:10:4e:15:1b:30:d8: 87:ca:bf:2e:35:65:f9:8e:ad:d4:9a:9f:97:6c:7b:91:cb:ae: 21:e3:5a:09:f4:af:8c:f9:96:e3:ed:61:71:a8:05:31:0d:67: 1e:46:2d:09:7d:1e:b5:87:ee:1e:bf:85:3d:1c:57:ef:38:ee: 75:d4:9e:ef -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmwki1DTUjlfryXndp9A1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMzMjZiOTUwYTQ1YTJjNmJhYzE1MDVmY2QwNGQ5NDBjYzA5 NjhmOTYwHhcNMjUxMjA2MDMwMTAwWhcNMjUxMjA3MDMwMTAwWjAzMTEwLwYDVQQD EyhjZGYxNmU5YWQ0OThlMWRkNTllZjhmMTBiMGNhODA1MjlhZGZkYmVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAurfAowJ6qhGsJrkRBofkF/6B6QQU Qy44tOtEU3peR/u16ttp4UzvyQ37z5Obt05X5DR3o5ZY1zAxQQdHHXzBlF2Tw5sm qTQfPCfJXxtZ9pp0N3f6EM8hywjHrD7JsLUYLNqW3ymlcf8wAayleDBGZ0c4cMTl E/rYXIKPGbt+QIrZQQlnF4QsW8l8/TAIRJsLzccBX0Y9aBGSh2atUQDml9tkDQwS qJk74/1S0Mwu6Yh8kgXOjUkX+IMmIxss5s8RYNcsulTs2jj02oYNmrKcwRsmbynd UXcmreMuaj7xN0gaVOOvh4qgmins/lv/I4Z0lrupGF6uN3vqg+5BtyNUXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM3xbprUmOHdWe+PELDKgFKa39vqMB8GA1UdIwQY MBaAFDMmuVCkWixrrBUF/NBNlAzAlo+WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTXlhNVVLUmFMR3VzRlFYODBFMlVETUNXajVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS8yOGI3MzAtZjViYi00NjA2LTgzNjUt MDhlMTA2MzgyMjVlLzEvTXlhNVVLUmFMR3VzRlFYODBFMlVETUNXajVZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYS8yOGI3MzAtZjViYi00NjA2LTgzNjUtMDhlMTA2MzgyMjVl LzEvTXlhNVVLUmFMR3VzRlFYODBFMlVETUNXajVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlbgiGevC pxSUhHi4U+7LmGIxyuLXaXlzHlnxt/k9xVURO4mm5OPtf4a9OozvIypcpYYPQ6+y /7gszqzDI5cFFxl3SbJKY2XIIsu61ePq5NXQnKqStA+FaFaIFdEe1dYNUpP4M5XB ZRmXebSLVfnrmbYEPlHVoVgSi/WHj4z4acafUKPu2oDSmNrezEIMQbl3kndBhHi5 ZgmgYZ2KaZj7IYwvdWwgM9Z9cj1cipYws5hsGElLMwisgjT08NaW7ZpzEE4VGzDY h8q/LjVl+Y6t1Jqfl2x7kcuuIeNaCfSvjPmW4+1hcagFMQ1nHkYtCX0etYfuHr+F PRxX7zjuddSe7w== -----END CERTIFICATE-----Generated at Sat Dec 6 08:11:17 2025 by rpki-client