This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/37253d-02a1-46df-9413-580068df0fd1/1/mMyxhNEoOE5Pdn2FJY4N6nPxjkM.mft File: mMyxhNEoOE5Pdn2FJY4N6nPxjkM.mft (raw, json) Hash identifier: BTcNDuLkMMGb7z4TGsLWiTvTZa0zIhiYr7zFn3o70eg= Subject key identifier: 95:61:A1:A3:98:0B:EB:91:32:28:57:74:0C:09:82:91:49:17:99:21 Authority key identifier: 98:CC:B1:84:D1:28:38:4E:4F:76:7D:85:25:8E:0D:EA:73:F1:8E:43 Certificate issuer: /CN=98ccb184d128384e4f767d85258e0dea73f18e43 Certificate serial: 019AF31D4E5E544FAA0131DB0EAA8DBB0216 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mMyxhNEoOE5Pdn2FJY4N6nPxjkM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/37253d-02a1-46df-9413-580068df0fd1/1/mMyxhNEoOE5Pdn2FJY4N6nPxjkM.mft Manifest number: 0E72 Signing time: Sat 06 Dec 2025 10:02:55 +0000 Manifest this update: Sat 06 Dec 2025 10:02:55 +0000 Manifest next update: Sun 07 Dec 2025 10:02:55 +0000 Files and hashes: 1: XmG_f-d3gNbPjbSDpmMbIo-fVYM.roa (hash: Fqg1Y9uWeIH+04MjOxb6IraF8tekNjl9/R9LcKgfLEw=) 2: mMyxhNEoOE5Pdn2FJY4N6nPxjkM.crl (hash: rGbtBrf3GcK+7ukNlSvRdErXREGE7iAqiZWaKJURdGQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/37253d-02a1-46df-9413-580068df0fd1/1/mMyxhNEoOE5Pdn2FJY4N6nPxjkM.crl rsync://rpki.ripe.net/repository/DEFAULT/99/37253d-02a1-46df-9413-580068df0fd1/1/mMyxhNEoOE5Pdn2FJY4N6nPxjkM.mft rsync://rpki.ripe.net/repository/DEFAULT/mMyxhNEoOE5Pdn2FJY4N6nPxjkM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1d:4e:5e:54:4f:aa:01:31:db:0e:aa:8d:bb:02:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98ccb184d128384e4f767d85258e0dea73f18e43 Validity Not Before: Dec 6 10:02:55 2025 GMT Not After : Dec 7 10:02:55 2025 GMT Subject: CN=9561a1a3980beb91322857740c09829149179921 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:9b:55:1a:ae:ef:89:43:7a:0c:74:14:de:93: e2:5b:c7:8a:db:5d:89:f3:ac:54:89:50:50:6f:7a: 2a:fd:0f:0b:ba:b4:a9:31:44:12:d5:9a:66:b2:80: 21:71:55:0d:3c:2a:5c:6b:0c:ce:e4:10:d7:00:14: 1d:e1:ef:69:2b:0c:a6:e8:f2:4a:1b:c4:b3:bd:48: 70:89:30:c3:d3:bd:c9:b1:a6:7e:e2:ee:a8:15:81: 04:d6:53:ff:73:ad:5b:d4:3c:2c:74:4d:ac:1e:24: 5d:fb:40:87:e0:9d:eb:6f:fa:81:6e:7b:ad:aa:10: c2:5f:91:b3:4f:3f:72:09:06:9d:96:6c:72:ca:e2: 9c:35:ba:e6:dd:77:22:b3:79:f6:59:18:40:0a:87: 30:b3:2e:3f:90:07:7e:6b:a2:55:b5:ae:5f:55:e2: 94:c7:91:1f:14:1c:e6:4a:a0:1f:1d:7d:22:e2:38: e4:e4:cd:b1:b8:15:48:1d:5a:90:4a:f1:65:50:58: ea:29:3f:e8:01:5c:5e:17:81:e4:5e:32:ea:f9:c9: f7:fa:df:f1:29:df:e0:8c:35:c5:6f:36:95:61:cb: 63:bf:62:61:65:6b:ba:da:75:64:33:0f:59:2e:2c: 71:12:a7:37:3c:a6:0e:de:71:2f:43:da:cf:d9:7a: a5:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:61:A1:A3:98:0B:EB:91:32:28:57:74:0C:09:82:91:49:17:99:21 X509v3 Authority Key Identifier: keyid:98:CC:B1:84:D1:28:38:4E:4F:76:7D:85:25:8E:0D:EA:73:F1:8E:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mMyxhNEoOE5Pdn2FJY4N6nPxjkM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/37253d-02a1-46df-9413-580068df0fd1/1/mMyxhNEoOE5Pdn2FJY4N6nPxjkM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/99/37253d-02a1-46df-9413-580068df0fd1/1/mMyxhNEoOE5Pdn2FJY4N6nPxjkM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:b7:37:01:02:5f:14:dd:1a:76:ad:a1:96:e1:cc:90:9c:63: 68:86:8e:c4:d4:be:6f:52:d2:47:d6:3a:ef:29:01:fb:b7:d4: 4a:1f:15:20:3b:bd:e6:95:d4:c9:c0:1a:3d:07:1c:2b:0a:60: cc:2b:cb:bc:3d:92:9c:65:8b:20:f7:28:93:41:8f:a5:b3:ac: 21:5f:4a:e9:fc:cf:d8:87:e9:fa:db:96:47:39:8f:df:7e:f7: a4:3d:3b:7b:2e:71:b1:3f:6c:63:64:04:f3:f1:43:7c:93:35: d1:88:08:14:5f:7a:36:f3:4f:d4:58:1e:92:98:f5:f1:4e:2e: 66:24:94:91:9f:9b:99:c3:5b:c6:4e:c1:1c:64:46:c3:3b:5f: 4a:e2:26:d2:73:76:ab:02:5d:7b:72:cf:a1:84:d6:2c:38:e4: 1e:53:e7:cd:45:c4:2f:93:51:67:db:ee:06:6b:e5:30:8d:4e: 53:35:56:54:77:c7:31:4a:2d:61:bf:53:c9:20:b0:73:d0:2a: d8:c9:ed:ed:d7:c6:fc:06:8b:45:99:aa:92:ef:50:01:d9:aa: 84:cc:7f:50:82:d3:20:58:e7:b2:29:d7:fe:92:81:72:f8:8a: 9c:a7:67:e8:21:0d:d8:3c:00:73:9c:41:c2:0e:a0:fa:5b:0b: fd:15:4b:ea -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHU5eVE+qATHbDqqNuwIWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk4Y2NiMTg0ZDEyODM4NGU0Zjc2N2Q4NTI1OGUwZGVhNzNm MThlNDMwHhcNMjUxMjA2MTAwMjU1WhcNMjUxMjA3MTAwMjU1WjAzMTEwLwYDVQQD Eyg5NTYxYTFhMzk4MGJlYjkxMzIyODU3NzQwYzA5ODI5MTQ5MTc5OTIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArZtVGq7viUN6DHQU3pPiW8eK212J 86xUiVBQb3oq/Q8LurSpMUQS1ZpmsoAhcVUNPCpcawzO5BDXABQd4e9pKwym6PJK G8SzvUhwiTDD073JsaZ+4u6oFYEE1lP/c61b1DwsdE2sHiRd+0CH4J3rb/qBbnut qhDCX5GzTz9yCQadlmxyyuKcNbrm3Xcis3n2WRhACocwsy4/kAd+a6JVta5fVeKU x5EfFBzmSqAfHX0i4jjk5M2xuBVIHVqQSvFlUFjqKT/oAVxeF4HkXjLq+cn3+t/x Kd/gjDXFbzaVYctjv2JhZWu62nVkMw9ZLixxEqc3PKYO3nEvQ9rP2XqlkwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJVhoaOYC+uRMihXdAwJgpFJF5khMB8GA1UdIwQY MBaAFJjMsYTRKDhOT3Z9hSWODepz8Y5DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbU15eGhORW9PRTVQZG4yRkpZNE42blB4amtNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS8zNzI1M2QtMDJhMS00NmRmLTk0MTMt NTgwMDY4ZGYwZmQxLzEvbU15eGhORW9PRTVQZG4yRkpZNE42blB4amtNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OS8zNzI1M2QtMDJhMS00NmRmLTk0MTMtNTgwMDY4ZGYwZmQx LzEvbU15eGhORW9PRTVQZG4yRkpZNE42blB4amtNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdLc3AQJf FN0adq2hluHMkJxjaIaOxNS+b1LSR9Y67ykB+7fUSh8VIDu95pXUycAaPQccKwpg zCvLvD2SnGWLIPcok0GPpbOsIV9K6fzP2Ifp+tuWRzmP3373pD07ey5xsT9sY2QE 8/FDfJM10YgIFF96NvNP1Fgekpj18U4uZiSUkZ+bmcNbxk7BHGRGwztfSuIm0nN2 qwJde3LPoYTWLDjkHlPnzUXEL5NRZ9vuBmvlMI1OUzVWVHfHMUotYb9TySCwc9Aq 2Mnt7dfG/AaLRZmqku9QAdmqhMx/UILTIFjnsinX/pKBcviKnKdn6CEN2DwAc5xB wg6g+lsL/RVL6g== -----END CERTIFICATE-----Generated at Sat Dec 6 13:56:19 2025 by rpki-client