This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/15ecde-4038-4b46-893c-84cad7a6e5cb/1/mQRCuMDNHdU1vq5yuU3TX5JyA40.mft File: mQRCuMDNHdU1vq5yuU3TX5JyA40.mft (raw, json) Hash identifier: 8XN3RSJbWZrS6AA+xe21TpoSZ8UeRcY7QPZrSV3UoLU= Subject key identifier: C5:ED:3A:85:33:11:56:F9:31:01:C9:CB:F1:B7:EC:91:A9:4C:0B:39 Authority key identifier: 99:04:42:B8:C0:CD:1D:D5:35:BE:AE:72:B9:4D:D3:5F:92:72:03:8D Certificate issuer: /CN=990442b8c0cd1dd535beae72b94dd35f9272038d Certificate serial: 019B19BBBC42E6D594FC49B3F218AE823C8A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mQRCuMDNHdU1vq5yuU3TX5JyA40.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/15ecde-4038-4b46-893c-84cad7a6e5cb/1/mQRCuMDNHdU1vq5yuU3TX5JyA40.mft Manifest number: 084A Signing time: Sat 13 Dec 2025 22:01:32 +0000 Manifest this update: Sat 13 Dec 2025 22:01:32 +0000 Manifest next update: Sun 14 Dec 2025 22:01:32 +0000 Files and hashes: 1: mQRCuMDNHdU1vq5yuU3TX5JyA40.crl (hash: aERYlXXAQ8jKIQkPdiBr/+FxKQmv43+RDiGPmW95mBs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/15ecde-4038-4b46-893c-84cad7a6e5cb/1/mQRCuMDNHdU1vq5yuU3TX5JyA40.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/15ecde-4038-4b46-893c-84cad7a6e5cb/1/mQRCuMDNHdU1vq5yuU3TX5JyA40.mft rsync://rpki.ripe.net/repository/DEFAULT/mQRCuMDNHdU1vq5yuU3TX5JyA40.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 22:01:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:19:bb:bc:42:e6:d5:94:fc:49:b3:f2:18:ae:82:3c:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=990442b8c0cd1dd535beae72b94dd35f9272038d Validity Not Before: Dec 13 22:01:32 2025 GMT Not After : Dec 14 22:01:32 2025 GMT Subject: CN=c5ed3a85331156f93101c9cbf1b7ec91a94c0b39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:c5:87:cd:55:fe:ff:fa:dc:bc:4c:fe:65:6d: b1:eb:45:82:dd:12:b2:19:33:56:83:d1:24:25:59: 02:06:af:26:16:b6:d7:10:7e:9a:7e:2a:3b:ec:cf: 7a:50:62:b8:a1:ae:7e:6f:ca:f5:d4:9a:8b:5d:71: c8:b4:75:e5:1c:ce:b2:31:4b:47:47:91:43:6b:ee: 54:13:e6:5d:00:68:0d:73:87:f5:0f:b7:72:d9:07: 48:ce:9e:c9:91:90:e3:dc:eb:f7:56:f1:42:d9:c8: 05:70:a4:5d:c6:05:61:68:f8:5a:85:aa:b6:c5:b4: ff:c7:7d:4f:ee:dc:11:17:08:e3:a8:c7:42:ca:6f: 49:a6:21:cb:73:8d:8b:01:9a:05:04:08:0f:ea:e1: 62:c0:fa:12:9e:fa:06:83:85:77:0a:e1:c8:24:d2: d5:4a:84:6d:ca:de:f7:c7:bb:9e:c2:0f:03:11:10: 64:12:8e:c1:1f:47:f2:3b:3c:6f:f6:54:82:fa:04: 63:de:73:d8:7d:71:74:b9:17:bc:63:48:f1:40:33: 3e:df:95:35:59:04:0b:e6:ef:bf:46:d7:6e:77:27: 14:1b:87:77:68:20:0e:46:99:2d:e4:29:0f:5d:78: 71:27:4a:29:4e:19:b6:bc:6d:34:17:e4:6c:b3:71: b9:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:ED:3A:85:33:11:56:F9:31:01:C9:CB:F1:B7:EC:91:A9:4C:0B:39 X509v3 Authority Key Identifier: keyid:99:04:42:B8:C0:CD:1D:D5:35:BE:AE:72:B9:4D:D3:5F:92:72:03:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mQRCuMDNHdU1vq5yuU3TX5JyA40.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/15ecde-4038-4b46-893c-84cad7a6e5cb/1/mQRCuMDNHdU1vq5yuU3TX5JyA40.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/15ecde-4038-4b46-893c-84cad7a6e5cb/1/mQRCuMDNHdU1vq5yuU3TX5JyA40.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:37:26:8c:3d:5e:81:52:9b:f8:9e:54:e5:18:d9:72:54:b3: 00:86:a4:8c:45:d2:23:bb:99:96:e7:dd:14:54:78:b0:51:52: eb:33:cf:ad:9f:3b:f6:f3:03:45:7e:56:ba:30:89:48:b8:f6: fe:cc:b9:1b:8e:b3:8d:9e:e9:87:be:73:36:2d:d0:bf:d1:ea: dc:8a:75:4f:b5:a7:88:27:e9:67:3b:7a:2d:05:e4:13:c2:2c: d3:70:ec:e5:fb:ef:39:be:f4:17:68:de:35:51:ca:88:1b:38: b4:5a:10:29:86:b0:fa:98:67:6c:5f:23:aa:42:96:3f:ef:39: 01:51:40:93:d9:9f:2c:0e:73:33:fc:0e:d3:ef:77:ff:7d:d8: 8d:1e:6e:4e:f5:b8:c1:c1:2e:5c:cb:34:1f:48:ca:b6:60:e8: 1c:77:d5:af:a0:72:31:9b:05:f5:f1:29:78:0f:2e:b7:cb:2c: 3b:9b:fb:cf:bc:a0:da:01:d9:d7:7a:b1:4c:81:af:7c:7b:e4: 42:25:c6:4d:1f:34:2c:74:d5:43:db:40:94:1d:09:80:6b:d7: 1b:e3:dc:8b:64:48:54:16:75:d9:97:62:05:0b:f4:48:1b:79: 08:33:7d:87:a7:e9:9c:0c:fe:85:39:42:96:fd:57:00:e7:c2: f6:ab:f5:f2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsZu7xC5tWU/Emz8hiugjyKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk5MDQ0MmI4YzBjZDFkZDUzNWJlYWU3MmI5NGRkMzVmOTI3 MjAzOGQwHhcNMjUxMjEzMjIwMTMyWhcNMjUxMjE0MjIwMTMyWjAzMTEwLwYDVQQD EyhjNWVkM2E4NTMzMTE1NmY5MzEwMWM5Y2JmMWI3ZWM5MWE5NGMwYjM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA58WHzVX+//rcvEz+ZW2x60WC3RKy GTNWg9EkJVkCBq8mFrbXEH6afio77M96UGK4oa5+b8r11JqLXXHItHXlHM6yMUtH R5FDa+5UE+ZdAGgNc4f1D7dy2QdIzp7JkZDj3Ov3VvFC2cgFcKRdxgVhaPhahaq2 xbT/x31P7twRFwjjqMdCym9JpiHLc42LAZoFBAgP6uFiwPoSnvoGg4V3CuHIJNLV SoRtyt73x7uewg8DERBkEo7BH0fyOzxv9lSC+gRj3nPYfXF0uRe8Y0jxQDM+35U1 WQQL5u+/RtdudycUG4d3aCAORpkt5CkPXXhxJ0opThm2vG00F+Rss3G5LQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMXtOoUzEVb5MQHJy/G37JGpTAs5MB8GA1UdIwQY MBaAFJkEQrjAzR3VNb6ucrlN01+ScgONMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbVFSQ3VNRE5IZFUxdnE1eXVVM1RYNUp5QTQwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS8xNWVjZGUtNDAzOC00YjQ2LTg5M2Mt ODRjYWQ3YTZlNWNiLzEvbVFSQ3VNRE5IZFUxdnE1eXVVM1RYNUp5QTQwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS8xNWVjZGUtNDAzOC00YjQ2LTg5M2MtODRjYWQ3YTZlNWNi LzEvbVFSQ3VNRE5IZFUxdnE1eXVVM1RYNUp5QTQwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhjcmjD1e gVKb+J5U5RjZclSzAIakjEXSI7uZlufdFFR4sFFS6zPPrZ879vMDRX5WujCJSLj2 /sy5G46zjZ7ph75zNi3Qv9Hq3Ip1T7WniCfpZzt6LQXkE8Is03Ds5fvvOb70F2je NVHKiBs4tFoQKYaw+phnbF8jqkKWP+85AVFAk9mfLA5zM/wO0+93/33YjR5uTvW4 wcEuXMs0H0jKtmDoHHfVr6ByMZsF9fEpeA8ut8ssO5v7z7yg2gHZ13qxTIGvfHvk QiXGTR80LHTVQ9tAlB0JgGvXG+Pci2RIVBZ12ZdiBQv0SBt5CDN9h6fpnAz+hTlC lv1XAOfC9qv18g== -----END CERTIFICATE-----Generated at Sun Dec 14 07:49:21 2025 by rpki-client