This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/42ec68-d433-4000-906c-c3eae6b0fb9c/1/mYDHD3bwtfXIRXoDN61dYxIs9-Y.mft File: mYDHD3bwtfXIRXoDN61dYxIs9-Y.mft (raw, json) Hash identifier: aDXjlLKKVjgG7DFl6D9nDaUoUnaA6UQf0oJQ4dC4UF8= Subject key identifier: 44:76:E4:38:8A:56:34:1A:FC:14:F3:5B:53:B4:C5:62:38:C7:06:57 Authority key identifier: 99:80:C7:0F:76:F0:B5:F5:C8:45:7A:03:37:AD:5D:63:12:2C:F7:E6 Certificate issuer: /CN=9980c70f76f0b5f5c8457a0337ad5d63122cf7e6 Certificate serial: 019AF3F764DC7BD3D7C7B138ADDA416F6185 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mYDHD3bwtfXIRXoDN61dYxIs9-Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/42ec68-d433-4000-906c-c3eae6b0fb9c/1/mYDHD3bwtfXIRXoDN61dYxIs9-Y.mft Manifest number: 0E44 Signing time: Sat 06 Dec 2025 14:01:07 +0000 Manifest this update: Sat 06 Dec 2025 14:01:07 +0000 Manifest next update: Sun 07 Dec 2025 14:01:07 +0000 Files and hashes: 1: YErVt-7gu1jQqcup8-GVaaYjMj4.roa (hash: nT1lcrWfw1dtZ1xk/0YupjRA64MYT4KdIF9Y0byNnSM=) 2: mYDHD3bwtfXIRXoDN61dYxIs9-Y.crl (hash: PxyzUf1lWup6fn1qyIn19106G+JdzzbwxVXbqGOWaDk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/42ec68-d433-4000-906c-c3eae6b0fb9c/1/mYDHD3bwtfXIRXoDN61dYxIs9-Y.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/42ec68-d433-4000-906c-c3eae6b0fb9c/1/mYDHD3bwtfXIRXoDN61dYxIs9-Y.mft rsync://rpki.ripe.net/repository/DEFAULT/mYDHD3bwtfXIRXoDN61dYxIs9-Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f7:64:dc:7b:d3:d7:c7:b1:38:ad:da:41:6f:61:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9980c70f76f0b5f5c8457a0337ad5d63122cf7e6 Validity Not Before: Dec 6 14:01:07 2025 GMT Not After : Dec 7 14:01:07 2025 GMT Subject: CN=4476e4388a56341afc14f35b53b4c56238c70657 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:f0:07:dc:77:09:13:6c:7c:74:2b:5a:03:25: 7d:10:23:c4:f2:26:6a:90:8a:97:8a:2f:71:30:25: d4:2f:80:44:4f:29:de:98:f9:ec:20:c0:66:06:25: 99:7e:f9:f2:e9:35:a4:28:4b:5b:7d:77:3b:49:2c: 95:57:ea:25:8a:82:4d:cb:04:7c:e4:95:e8:bc:d6: b0:62:98:59:bd:36:16:a4:d0:6a:78:47:22:2b:19: af:99:08:b0:ba:b5:a2:6e:ba:77:57:3f:e6:bf:a3: 4b:d1:59:ed:40:5c:cf:1e:13:c4:85:86:e9:bc:8a: 64:f2:c8:8b:28:83:cd:e4:7a:65:c1:22:ab:01:4f: 33:ed:92:da:68:b1:05:e1:9e:8e:c6:d4:28:b3:7a: 83:ea:35:4b:2b:3c:00:98:2b:dc:8f:d6:49:8e:e4: 48:07:01:7e:5a:e5:63:f4:90:db:f5:0d:1a:a4:db: 4c:86:1d:ec:1c:98:71:59:38:5e:c4:b5:ad:fe:bf: 9a:cc:de:79:02:04:49:25:1c:33:2e:b8:ca:d5:d3: 8b:51:52:ea:52:36:c7:4f:52:93:3f:d2:0d:5a:09: fa:d8:ea:0c:cc:81:67:ea:17:79:01:1d:25:87:32: 7a:87:a7:64:06:8d:03:bb:1f:82:db:0f:c4:15:32: 0a:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:76:E4:38:8A:56:34:1A:FC:14:F3:5B:53:B4:C5:62:38:C7:06:57 X509v3 Authority Key Identifier: keyid:99:80:C7:0F:76:F0:B5:F5:C8:45:7A:03:37:AD:5D:63:12:2C:F7:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mYDHD3bwtfXIRXoDN61dYxIs9-Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/42ec68-d433-4000-906c-c3eae6b0fb9c/1/mYDHD3bwtfXIRXoDN61dYxIs9-Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/42ec68-d433-4000-906c-c3eae6b0fb9c/1/mYDHD3bwtfXIRXoDN61dYxIs9-Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:d3:b1:35:94:2f:48:1f:cd:85:4a:90:e9:b9:8d:13:01:56: 03:5c:e3:ed:ed:1e:e4:78:92:1a:04:46:3a:79:ba:99:f2:f9: e2:f7:88:da:10:1b:f4:06:9f:b7:a5:95:1e:1d:54:cc:40:71: 94:a8:74:83:ca:be:c5:f5:3d:9f:02:50:56:4e:82:63:4b:56: 1e:e7:ba:ab:2b:94:1f:fc:6d:24:47:0a:72:a9:44:7f:60:1c: 3f:5b:1a:c5:52:29:76:21:b9:aa:54:c1:b1:a6:22:46:b1:be: 95:bf:d7:9f:5c:6e:0f:6b:73:b5:02:78:67:7a:80:c1:18:b5: 6e:39:49:38:be:5f:81:9c:3f:42:ea:c8:53:5f:18:79:df:c0: 35:af:e1:eb:3e:70:59:28:a0:3d:05:4c:fb:1a:dd:87:60:21: a4:b1:44:6a:02:50:5c:80:d3:68:57:16:60:26:d8:7b:e2:60: 80:71:2e:87:17:da:8f:77:a9:9a:fb:73:9c:f1:0e:02:3d:ee: 8b:eb:25:fa:68:b9:e8:be:90:15:85:d1:55:8e:02:58:b4:1d: 9e:a3:a8:f5:98:db:47:ae:b1:4c:01:1a:45:de:17:53:8b:e6: 69:68:db:98:65:3c:ad:c5:f5:07:08:3b:d2:20:25:c6:ca:7c: ee:3c:0d:e1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz92Tce9PXx7E4rdpBb2GFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk5ODBjNzBmNzZmMGI1ZjVjODQ1N2EwMzM3YWQ1ZDYzMTIy Y2Y3ZTYwHhcNMjUxMjA2MTQwMTA3WhcNMjUxMjA3MTQwMTA3WjAzMTEwLwYDVQQD Eyg0NDc2ZTQzODhhNTYzNDFhZmMxNGYzNWI1M2I0YzU2MjM4YzcwNjU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnPAH3HcJE2x8dCtaAyV9ECPE8iZq kIqXii9xMCXUL4BETynemPnsIMBmBiWZfvny6TWkKEtbfXc7SSyVV+olioJNywR8 5JXovNawYphZvTYWpNBqeEciKxmvmQiwurWibrp3Vz/mv6NL0VntQFzPHhPEhYbp vIpk8siLKIPN5HplwSKrAU8z7ZLaaLEF4Z6OxtQos3qD6jVLKzwAmCvcj9ZJjuRI BwF+WuVj9JDb9Q0apNtMhh3sHJhxWThexLWt/r+azN55AgRJJRwzLrjK1dOLUVLq UjbHT1KTP9INWgn62OoMzIFn6hd5AR0lhzJ6h6dkBo0Dux+C2w/EFTIKSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFER25DiKVjQa/BTzW1O0xWI4xwZXMB8GA1UdIwQY MBaAFJmAxw928LX1yEV6AzetXWMSLPfmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbVlESEQzYnd0ZlhJUlhvRE42MWRZeElzOS1ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC80MmVjNjgtZDQzMy00MDAwLTkwNmMt YzNlYWU2YjBmYjljLzEvbVlESEQzYnd0ZlhJUlhvRE42MWRZeElzOS1ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC80MmVjNjgtZDQzMy00MDAwLTkwNmMtYzNlYWU2YjBmYjlj LzEvbVlESEQzYnd0ZlhJUlhvRE42MWRZeElzOS1ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPdOxNZQv SB/NhUqQ6bmNEwFWA1zj7e0e5HiSGgRGOnm6mfL54veI2hAb9Aaft6WVHh1UzEBx lKh0g8q+xfU9nwJQVk6CY0tWHue6qyuUH/xtJEcKcqlEf2AcP1saxVIpdiG5qlTB saYiRrG+lb/Xn1xuD2tztQJ4Z3qAwRi1bjlJOL5fgZw/QurIU18Yed/ANa/h6z5w WSigPQVM+xrdh2AhpLFEagJQXIDTaFcWYCbYe+JggHEuhxfaj3epmvtznPEOAj3u i+sl+mi56L6QFYXRVY4CWLQdnqOo9ZjbR66xTAEaRd4XU4vmaWjbmGU8rcX1Bwg7 0iAlxsp87jwN4Q== -----END CERTIFICATE-----Generated at Sat Dec 6 18:37:37 2025 by rpki-client