This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/3f7463-4d4f-41a6-8d72-3951378aa766/1/mBPi9jUdO00eYapAFvGyz6YtfN8.mft File: mBPi9jUdO00eYapAFvGyz6YtfN8.mft (raw, json) Hash identifier: dCebtn53G5bOS4G8OQscbw2aCBa0ovoTQgVwU1JoFAU= Subject key identifier: 48:27:A5:82:2B:63:69:EF:83:D7:D0:86:EC:6E:1A:62:5D:F2:8B:2E Authority key identifier: 98:13:E2:F6:35:1D:3B:4D:1E:61:AA:40:16:F1:B2:CF:A6:2D:7C:DF Certificate issuer: /CN=9813e2f6351d3b4d1e61aa4016f1b2cfa62d7cdf Certificate serial: 019B49CBA1E511B1F942D0D13F600083876D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mBPi9jUdO00eYapAFvGyz6YtfN8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/3f7463-4d4f-41a6-8d72-3951378aa766/1/mBPi9jUdO00eYapAFvGyz6YtfN8.mft Manifest number: 0451 Signing time: Tue 23 Dec 2025 06:00:40 +0000 Manifest this update: Tue 23 Dec 2025 06:00:40 +0000 Manifest next update: Wed 24 Dec 2025 06:00:40 +0000 Files and hashes: 1: 4qXSv4pSAqpnU74tHbocpsl5apY.roa (hash: AmCyfHs+gOS/K/S8kxUjs3Z1ZbZQQlEbS6Fv8dAMrpE=) 2: N0qByPu3emMo9XfORXwQEiEDLX4.roa (hash: WDWKjOtvs4aBJ9ngAGga+267IwwKrgiGUR6VHAFxV3g=) 3: dXZ-6UVHqdia25OyDn-Duexa4bY.roa (hash: 0T5UCEoUYDMxK/4Yih5THGiZdvmX2Rir43/xhLtG52s=) 4: ffVCJAudGRklTh6J2p53gbRPIvk.roa (hash: DvmrtTZ+4GX+XZD2/G6E6Uk/XxFpGuY4Z0oM1q4ZEeI=) 5: gkNUdTJYKI-HrI5siVhEhSliy48.roa (hash: ABXVZgoh60JAitHXcWT+7NbO1hc9hcd5tRCQ91UiLVQ=) 6: mBPi9jUdO00eYapAFvGyz6YtfN8.crl (hash: c54OAaWdud22Z2zLH1dHCeVkZKaNZZ9/4rVghaV4zCo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/3f7463-4d4f-41a6-8d72-3951378aa766/1/mBPi9jUdO00eYapAFvGyz6YtfN8.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/3f7463-4d4f-41a6-8d72-3951378aa766/1/mBPi9jUdO00eYapAFvGyz6YtfN8.mft rsync://rpki.ripe.net/repository/DEFAULT/mBPi9jUdO00eYapAFvGyz6YtfN8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 23:03:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:49:cb:a1:e5:11:b1:f9:42:d0:d1:3f:60:00:83:87:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9813e2f6351d3b4d1e61aa4016f1b2cfa62d7cdf Validity Not Before: Dec 23 06:00:40 2025 GMT Not After : Dec 24 06:00:40 2025 GMT Subject: CN=4827a5822b6369ef83d7d086ec6e1a625df28b2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:0a:00:af:c4:37:9c:f4:9a:b6:5b:bf:61:d5: f4:30:75:9c:53:87:c7:f8:ed:bf:7d:b8:6c:f4:21: 08:bc:52:d1:6a:9e:14:f5:24:ac:b2:5b:0a:a7:9d: b0:db:76:79:7b:03:3d:ec:1c:23:a2:5a:f1:74:80: 4e:93:0d:b8:30:44:38:ed:d2:37:e2:43:f2:71:4d: 44:dc:35:be:70:c7:9a:6b:f2:5f:a0:6a:ab:c5:a2: 01:c6:25:98:95:0f:48:0d:05:35:c9:c5:ac:eb:dc: 26:13:be:33:9a:5a:2b:a0:5f:ca:90:b6:8b:d0:f9: 3c:cc:9d:49:fc:32:71:6d:4e:75:b6:77:4d:03:8e: f2:0f:40:aa:34:c5:4e:97:1e:39:95:4a:02:59:a3: e0:c5:96:d3:72:8b:06:46:ef:2c:eb:d6:04:66:7b: 26:e7:14:e0:7f:93:47:3d:3e:b2:cb:0e:17:de:d2: 50:0d:2d:a8:3d:44:79:04:b2:0d:c8:36:19:c6:20: 52:e4:f7:02:e8:d7:25:dd:b2:89:de:0a:e3:a8:6c: a2:be:97:8f:b4:3f:5c:26:52:6f:26:9f:22:95:fe: 3d:b7:be:d9:5d:45:d3:b3:51:fd:6f:72:a6:cd:ae: eb:56:7e:f3:bb:e7:c7:54:66:fa:b7:f0:3c:1f:43: 38:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:27:A5:82:2B:63:69:EF:83:D7:D0:86:EC:6E:1A:62:5D:F2:8B:2E X509v3 Authority Key Identifier: keyid:98:13:E2:F6:35:1D:3B:4D:1E:61:AA:40:16:F1:B2:CF:A6:2D:7C:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mBPi9jUdO00eYapAFvGyz6YtfN8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/3f7463-4d4f-41a6-8d72-3951378aa766/1/mBPi9jUdO00eYapAFvGyz6YtfN8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/3f7463-4d4f-41a6-8d72-3951378aa766/1/mBPi9jUdO00eYapAFvGyz6YtfN8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:7c:d4:cd:a4:5c:0c:36:7f:e0:63:ce:94:17:d0:91:16:93: 66:b3:20:df:12:11:75:54:3a:56:e6:71:e1:45:4a:45:35:9e: 07:5b:c3:a7:36:1a:bb:c6:90:97:51:14:fd:96:fe:a9:06:39: ba:e0:b9:17:82:74:c3:e4:dc:30:4c:99:35:28:88:2b:f5:8b: 3c:b7:c3:3b:a7:8f:e7:c9:54:e6:ff:71:99:35:38:53:f8:8a: 06:cd:86:17:bc:2e:15:d2:27:e3:be:fa:e0:c8:ce:55:f5:66: 38:50:11:e8:1d:6d:23:e0:fb:1d:82:19:da:46:94:c5:6f:44: 13:19:8b:1f:a8:cf:1b:03:28:6d:2d:21:5d:ec:f5:3e:bd:e2: b5:95:2f:15:59:ce:81:47:28:82:fe:a5:6c:90:44:21:a5:6a: 8d:ae:6e:5b:79:6d:8a:24:4f:37:0c:2e:94:8b:bb:da:80:f7: bb:3b:9f:06:1b:46:f8:4f:82:93:22:6e:25:84:eb:a6:2e:13: 42:6f:4f:7c:af:f4:87:5b:cc:6a:b6:01:44:82:4c:c9:42:64: 0c:03:a4:7a:9c:df:63:da:21:3f:63:0f:d1:bb:fc:c6:dc:53: bd:29:68:21:e8:1f:54:59:ba:1d:42:c7:78:b3:19:28:7a:fc: a8:b9:fb:bf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtJy6HlEbH5QtDRP2AAg4dtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk4MTNlMmY2MzUxZDNiNGQxZTYxYWE0MDE2ZjFiMmNmYTYy ZDdjZGYwHhcNMjUxMjIzMDYwMDQwWhcNMjUxMjI0MDYwMDQwWjAzMTEwLwYDVQQD Eyg0ODI3YTU4MjJiNjM2OWVmODNkN2QwODZlYzZlMWE2MjVkZjI4YjJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxQoAr8Q3nPSatlu/YdX0MHWcU4fH +O2/fbhs9CEIvFLRap4U9SSsslsKp52w23Z5ewM97BwjolrxdIBOkw24MEQ47dI3 4kPycU1E3DW+cMeaa/JfoGqrxaIBxiWYlQ9IDQU1ycWs69wmE74zmloroF/KkLaL 0Pk8zJ1J/DJxbU51tndNA47yD0CqNMVOlx45lUoCWaPgxZbTcosGRu8s69YEZnsm 5xTgf5NHPT6yyw4X3tJQDS2oPUR5BLINyDYZxiBS5PcC6Ncl3bKJ3grjqGyivpeP tD9cJlJvJp8ilf49t77ZXUXTs1H9b3Kmza7rVn7zu+fHVGb6t/A8H0M4BQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEgnpYIrY2nvg9fQhuxuGmJd8osuMB8GA1UdIwQY MBaAFJgT4vY1HTtNHmGqQBbxss+mLXzfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbUJQaTlqVWRPMDBlWWFwQUZ2R3l6Nll0Zk44LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi8zZjc0NjMtNGQ0Zi00MWE2LThkNzIt Mzk1MTM3OGFhNzY2LzEvbUJQaTlqVWRPMDBlWWFwQUZ2R3l6Nll0Zk44Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi8zZjc0NjMtNGQ0Zi00MWE2LThkNzItMzk1MTM3OGFhNzY2 LzEvbUJQaTlqVWRPMDBlWWFwQUZ2R3l6Nll0Zk44LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN3zUzaRc DDZ/4GPOlBfQkRaTZrMg3xIRdVQ6VuZx4UVKRTWeB1vDpzYau8aQl1EU/Zb+qQY5 uuC5F4J0w+TcMEyZNSiIK/WLPLfDO6eP58lU5v9xmTU4U/iKBs2GF7wuFdIn4776 4MjOVfVmOFAR6B1tI+D7HYIZ2kaUxW9EExmLH6jPGwMobS0hXez1Pr3itZUvFVnO gUcogv6lbJBEIaVqja5uW3ltiiRPNwwulIu72oD3uzufBhtG+E+CkyJuJYTrpi4T Qm9PfK/0h1vMarYBRIJMyUJkDAOkepzfY9ohP2MP0bv8xtxTvSloIegfVFm6HULH eLMZKHr8qLn7vw== -----END CERTIFICATE-----Generated at Tue Dec 23 07:42:02 2025 by rpki-client