This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/b9cf3b-9572-4992-b247-01208d86ddcc/1/mCpUHVrI_3uwQIx0NKwQEu_3PLU.mft File: mCpUHVrI_3uwQIx0NKwQEu_3PLU.mft (raw, json) Hash identifier: HgT7y3WPuPvMKZJgvplkfgyyHKhGAm7ivsjJr/lHxrE= Subject key identifier: 4A:2F:72:AE:96:C8:13:AD:84:90:13:D8:42:24:40:5F:E8:1A:04:DE Authority key identifier: 98:2A:54:1D:5A:C8:FF:7B:B0:40:8C:74:34:AC:10:12:EF:F7:3C:B5 Certificate issuer: /CN=982a541d5ac8ff7bb0408c7434ac1012eff73cb5 Certificate serial: 019B4882DD311D364BC718B9A600AA4B6A7F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCpUHVrI_3uwQIx0NKwQEu_3PLU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/b9cf3b-9572-4992-b247-01208d86ddcc/1/mCpUHVrI_3uwQIx0NKwQEu_3PLU.mft Manifest number: 1723 Signing time: Tue 23 Dec 2025 00:01:34 +0000 Manifest this update: Tue 23 Dec 2025 00:01:34 +0000 Manifest next update: Wed 24 Dec 2025 00:01:34 +0000 Files and hashes: 1: V-MtEFAl-wCRS2pESKzV6P6YTGg.roa (hash: eJVKgFjZ3+wJXzgqDKuQr6XkPa6E31J6OO87/ztXlAY=) 2: mCpUHVrI_3uwQIx0NKwQEu_3PLU.crl (hash: oNxBQbfbJgul1RPWioOeDC+EboElbS0FfjVpmpHVNFQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/b9cf3b-9572-4992-b247-01208d86ddcc/1/mCpUHVrI_3uwQIx0NKwQEu_3PLU.crl rsync://rpki.ripe.net/repository/DEFAULT/08/b9cf3b-9572-4992-b247-01208d86ddcc/1/mCpUHVrI_3uwQIx0NKwQEu_3PLU.mft rsync://rpki.ripe.net/repository/DEFAULT/mCpUHVrI_3uwQIx0NKwQEu_3PLU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 23:03:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:48:82:dd:31:1d:36:4b:c7:18:b9:a6:00:aa:4b:6a:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=982a541d5ac8ff7bb0408c7434ac1012eff73cb5 Validity Not Before: Dec 23 00:01:34 2025 GMT Not After : Dec 24 00:01:34 2025 GMT Subject: CN=4a2f72ae96c813ad849013d84224405fe81a04de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:5a:45:4a:b5:a0:84:0a:94:b7:de:72:8e:b5: 63:bb:28:f3:68:b7:de:4b:43:61:c2:2e:02:cc:5a: 88:ed:04:79:fb:5e:1b:89:44:d9:84:1c:0d:57:65: 03:d8:88:fe:93:a4:e2:7b:5f:6c:8d:bd:a5:fe:2f: 0d:40:d3:b6:15:f0:a0:6c:6e:8b:97:28:a9:06:d7: 38:03:19:97:58:b0:aa:d0:f4:60:30:e2:21:58:93: 1d:6c:12:9c:14:83:25:30:bb:3f:ab:d0:ed:33:a9: 78:29:8d:eb:df:50:d8:11:bf:1f:3e:83:6e:be:57: dc:51:3e:13:35:ba:2d:bb:e7:b8:e2:75:4c:63:4a: d7:bf:26:4e:1b:6a:f1:b2:c8:32:ee:39:ce:f2:46: b1:67:58:fa:ce:7f:a1:ac:fa:07:8a:ec:87:7d:ce: a4:8c:fb:28:ce:54:2a:82:d7:0a:84:2f:97:97:4e: cd:c5:1e:a0:45:45:11:40:57:3f:9d:bb:e5:eb:b2: f3:1b:6a:68:fa:19:3d:e8:48:cb:d8:fd:b8:39:5c: cb:d9:d3:e4:40:22:bf:68:5f:a2:4b:d2:0c:7a:33: 72:b9:e3:41:43:c1:28:fa:ba:cc:67:cc:e6:69:3d: 1f:1c:d4:e2:68:58:f6:c3:35:ce:49:29:8a:10:78: 5b:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:2F:72:AE:96:C8:13:AD:84:90:13:D8:42:24:40:5F:E8:1A:04:DE X509v3 Authority Key Identifier: keyid:98:2A:54:1D:5A:C8:FF:7B:B0:40:8C:74:34:AC:10:12:EF:F7:3C:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCpUHVrI_3uwQIx0NKwQEu_3PLU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/b9cf3b-9572-4992-b247-01208d86ddcc/1/mCpUHVrI_3uwQIx0NKwQEu_3PLU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/b9cf3b-9572-4992-b247-01208d86ddcc/1/mCpUHVrI_3uwQIx0NKwQEu_3PLU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:55:86:fe:c4:1c:c2:9f:95:a6:d2:c5:fb:42:f9:0e:9a:89: 7a:ac:6d:3d:9e:18:d4:2b:96:ff:4b:4f:0a:7f:ea:3a:62:51: c4:da:64:db:f1:35:33:7d:70:59:0c:2e:ba:5f:29:47:4a:63: a9:26:57:72:09:4f:80:1e:ea:fe:66:02:99:18:5f:67:c0:3f: 3c:41:43:14:c3:b8:ad:a6:0e:bd:95:a6:2c:e7:14:be:78:d4: c2:0a:1f:89:72:d3:30:f6:90:09:64:95:5b:28:ea:0c:a0:b2: 0a:76:35:e7:66:86:67:14:56:df:99:25:2a:cf:a8:4d:ab:90: 50:68:e6:52:4f:33:0f:36:c9:8a:6d:44:f1:6b:ab:85:c0:7f: f8:b4:c0:2b:03:1f:6d:1e:e5:4a:fb:fe:e0:5f:f5:f4:74:37: ae:0d:f9:82:27:da:69:ca:b2:a3:60:55:37:48:71:93:27:ea: 60:5a:67:d1:5c:1c:4e:35:bb:7f:0a:e5:e9:b7:b4:10:1b:77: b7:79:97:67:0a:8a:b4:0c:a3:6a:84:01:dc:c3:b4:1b:c6:c4: 6d:e0:d4:fd:f1:fb:08:00:56:73:7d:86:84:fe:75:bd:8d:28: 53:d6:ce:b8:c4:3d:97:8a:93:1d:13:d3:18:db:84:b7:2e:8d: 1c:75:5a:1d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtIgt0xHTZLxxi5pgCqS2p/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk4MmE1NDFkNWFjOGZmN2JiMDQwOGM3NDM0YWMxMDEyZWZm NzNjYjUwHhcNMjUxMjIzMDAwMTM0WhcNMjUxMjI0MDAwMTM0WjAzMTEwLwYDVQQD Eyg0YTJmNzJhZTk2YzgxM2FkODQ5MDEzZDg0MjI0NDA1ZmU4MWEwNGRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6FpFSrWghAqUt95yjrVjuyjzaLfe S0Nhwi4CzFqI7QR5+14biUTZhBwNV2UD2Ij+k6Tie19sjb2l/i8NQNO2FfCgbG6L lyipBtc4AxmXWLCq0PRgMOIhWJMdbBKcFIMlMLs/q9DtM6l4KY3r31DYEb8fPoNu vlfcUT4TNbotu+e44nVMY0rXvyZOG2rxssgy7jnO8kaxZ1j6zn+hrPoHiuyHfc6k jPsozlQqgtcKhC+Xl07NxR6gRUURQFc/nbvl67LzG2po+hk96EjL2P24OVzL2dPk QCK/aF+iS9IMejNyueNBQ8Eo+rrMZ8zmaT0fHNTiaFj2wzXOSSmKEHhb0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEovcq6WyBOthJAT2EIkQF/oGgTeMB8GA1UdIwQY MBaAFJgqVB1ayP97sECMdDSsEBLv9zy1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbUNwVUhWcklfM3V3UUl4ME5Ld1FFdV8zUExVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9iOWNmM2ItOTU3Mi00OTkyLWIyNDct MDEyMDhkODZkZGNjLzEvbUNwVUhWcklfM3V3UUl4ME5Ld1FFdV8zUExVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC9iOWNmM2ItOTU3Mi00OTkyLWIyNDctMDEyMDhkODZkZGNj LzEvbUNwVUhWcklfM3V3UUl4ME5Ld1FFdV8zUExVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYVWG/sQc wp+VptLF+0L5DpqJeqxtPZ4Y1CuW/0tPCn/qOmJRxNpk2/E1M31wWQwuul8pR0pj qSZXcglPgB7q/mYCmRhfZ8A/PEFDFMO4raYOvZWmLOcUvnjUwgofiXLTMPaQCWSV WyjqDKCyCnY152aGZxRW35klKs+oTauQUGjmUk8zDzbJim1E8WurhcB/+LTAKwMf bR7lSvv+4F/19HQ3rg35gifaacqyo2BVN0hxkyfqYFpn0VwcTjW7fwrl6be0EBt3 t3mXZwqKtAyjaoQB3MO0G8bEbeDU/fH7CABWc32GhP51vY0oU9bOuMQ9l4qTHRPT GNuEty6NHHVaHQ== -----END CERTIFICATE-----Generated at Tue Dec 23 07:40:57 2025 by rpki-client