This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/2ed10c-04b0-4866-9b82-c522b74ddcfd/1/mFS9ioY6MYlcxsuSLzAIs_CKra4.mft File: mFS9ioY6MYlcxsuSLzAIs_CKra4.mft (raw, json) Hash identifier: aJbbroBiSCuF6Q93ot8TDgkYL1B+Km6rMbfzkSd062k= Subject key identifier: 62:6A:20:05:55:3E:09:22:BF:A7:AB:C0:A0:64:AF:09:3F:69:F9:D3 Authority key identifier: 98:54:BD:8A:86:3A:31:89:5C:C6:CB:92:2F:30:08:B3:F0:8A:AD:AE Certificate issuer: /CN=9854bd8a863a31895cc6cb922f3008b3f08aadae Certificate serial: 019B5C09699FAC9395DBBE140EE49142333C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mFS9ioY6MYlcxsuSLzAIs_CKra4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/2ed10c-04b0-4866-9b82-c522b74ddcfd/1/mFS9ioY6MYlcxsuSLzAIs_CKra4.mft Manifest number: 172B Signing time: Fri 26 Dec 2025 19:01:19 +0000 Manifest this update: Fri 26 Dec 2025 19:01:19 +0000 Manifest next update: Sat 27 Dec 2025 19:01:19 +0000 Files and hashes: 1: 0vdRQP6oDKbrt2AMFylSvIwqIyg.roa (hash: pxwOPSpkw+fKuyNlbzf40gyqoMu+x6ekO7hHtNoYIH4=) 2: eehHZCCtBF4ofvtvmkP_R--u6i0.roa (hash: Qv+/+I4mInj8ZQpbVci07W/0Cj+7zt+KBmz4hdMjJLU=) 3: mFS9ioY6MYlcxsuSLzAIs_CKra4.crl (hash: EOICrbZz1Z3u3S3xOYe6PPQNOUhFuxrmnqQAd5zpxMk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/2ed10c-04b0-4866-9b82-c522b74ddcfd/1/mFS9ioY6MYlcxsuSLzAIs_CKra4.crl rsync://rpki.ripe.net/repository/DEFAULT/1d/2ed10c-04b0-4866-9b82-c522b74ddcfd/1/mFS9ioY6MYlcxsuSLzAIs_CKra4.mft rsync://rpki.ripe.net/repository/DEFAULT/mFS9ioY6MYlcxsuSLzAIs_CKra4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 15:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5c:09:69:9f:ac:93:95:db:be:14:0e:e4:91:42:33:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9854bd8a863a31895cc6cb922f3008b3f08aadae Validity Not Before: Dec 26 19:01:19 2025 GMT Not After : Dec 27 19:01:19 2025 GMT Subject: CN=626a2005553e0922bfa7abc0a064af093f69f9d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:64:e0:ba:ef:21:10:e8:21:27:60:bf:bf:89: bc:ec:dc:13:60:c0:79:71:08:d5:7c:86:6a:89:66: 39:7e:1c:73:18:22:7a:cc:33:51:d9:9e:0a:97:f6: 1a:8b:9c:1b:33:91:d0:97:ef:3a:ce:cd:78:89:70: ff:4a:03:7c:3b:eb:ea:c4:a9:08:11:f3:38:ac:0e: a1:f6:2d:39:36:29:5b:dc:d8:27:b0:1d:65:43:0b: b2:4d:2d:33:fd:b6:48:6f:82:24:0e:15:51:6b:f9: 65:c2:e2:02:62:f2:7b:b9:62:c4:1b:57:63:c8:20: 96:1a:3d:c1:25:f7:1c:02:b8:1c:df:64:0d:8b:d3: a9:1a:97:12:e6:e5:6f:3e:78:6f:ac:e3:13:3f:73: a3:1b:21:c1:55:7f:c1:32:0f:57:52:ae:00:ac:62: 60:d9:ea:e6:8f:26:e2:ee:64:6d:9b:cf:f8:42:b6: 3f:9b:c8:c9:48:b5:32:53:49:2d:c3:dc:52:4a:a4: c3:b0:dc:35:82:c7:f4:a9:8e:b7:61:97:d8:a8:c0: 08:cc:7e:a1:21:6d:3f:77:9a:2b:74:33:c5:92:b4: 68:ee:28:20:bb:69:fd:38:14:01:43:d5:f9:bf:51: 78:0c:bd:0b:53:59:59:8e:d5:8e:9b:6c:34:e7:8f: b0:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:6A:20:05:55:3E:09:22:BF:A7:AB:C0:A0:64:AF:09:3F:69:F9:D3 X509v3 Authority Key Identifier: keyid:98:54:BD:8A:86:3A:31:89:5C:C6:CB:92:2F:30:08:B3:F0:8A:AD:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mFS9ioY6MYlcxsuSLzAIs_CKra4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/2ed10c-04b0-4866-9b82-c522b74ddcfd/1/mFS9ioY6MYlcxsuSLzAIs_CKra4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/2ed10c-04b0-4866-9b82-c522b74ddcfd/1/mFS9ioY6MYlcxsuSLzAIs_CKra4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d2:ba:ef:e8:01:f5:09:98:5d:b0:2c:e7:10:82:7a:7a:7d:d5: 07:98:7a:e9:db:34:1c:ca:aa:02:df:82:a5:b3:8d:66:ee:ca: f1:80:5f:5d:78:40:ac:d2:9a:7b:61:d0:f0:89:3b:61:d4:19: 3c:53:a5:ac:72:66:4c:c7:4f:54:f1:2a:ab:23:3f:42:0e:a7: d0:66:eb:28:d0:9e:19:c7:ad:b2:82:61:04:03:89:5c:3b:40: ff:d2:8e:a9:79:2d:cd:12:5d:c2:a1:7e:ef:c6:48:d6:2b:3c: 74:62:ef:ee:bc:73:6a:98:a0:5b:af:ff:ee:e7:16:e4:0b:ae: 39:33:35:82:dd:e1:92:e4:33:c2:57:fc:37:80:12:6b:95:46: 37:ac:e6:8a:3c:26:ee:86:ac:b4:d3:88:cd:6f:61:80:1f:a8: 92:91:3d:8f:c2:6b:26:1a:84:af:71:bb:d3:d4:86:2f:37:1b: 30:db:a7:bf:3b:a7:71:e5:51:66:b3:e3:cf:fd:c0:b9:65:18: e2:be:e9:55:ee:36:6e:44:80:e3:44:65:51:34:dc:a4:88:57: fb:a7:85:82:b1:5d:c3:f2:9c:65:cf:a9:c4:84:3e:40:f6:ae: 83:62:8c:6b:bd:f8:c9:fd:cc:c3:32:43:5d:9b:4f:f1:c1:7a: c8:c6:74:6b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtcCWmfrJOV274UDuSRQjM8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk4NTRiZDhhODYzYTMxODk1Y2M2Y2I5MjJmMzAwOGIzZjA4 YWFkYWUwHhcNMjUxMjI2MTkwMTE5WhcNMjUxMjI3MTkwMTE5WjAzMTEwLwYDVQQD Eyg2MjZhMjAwNTU1M2UwOTIyYmZhN2FiYzBhMDY0YWYwOTNmNjlmOWQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy2Tguu8hEOghJ2C/v4m87NwTYMB5 cQjVfIZqiWY5fhxzGCJ6zDNR2Z4Kl/Yai5wbM5HQl+86zs14iXD/SgN8O+vqxKkI EfM4rA6h9i05Nilb3NgnsB1lQwuyTS0z/bZIb4IkDhVRa/llwuICYvJ7uWLEG1dj yCCWGj3BJfccArgc32QNi9OpGpcS5uVvPnhvrOMTP3OjGyHBVX/BMg9XUq4ArGJg 2ermjybi7mRtm8/4QrY/m8jJSLUyU0ktw9xSSqTDsNw1gsf0qY63YZfYqMAIzH6h IW0/d5ordDPFkrRo7iggu2n9OBQBQ9X5v1F4DL0LU1lZjtWOm2w054+wyQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGJqIAVVPgkiv6erwKBkrwk/afnTMB8GA1UdIwQY MBaAFJhUvYqGOjGJXMbLki8wCLPwiq2uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbUZTOWlvWTZNWWxjeHN1U0x6QUlzX0NLcmE0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC8yZWQxMGMtMDRiMC00ODY2LTliODIt YzUyMmI3NGRkY2ZkLzEvbUZTOWlvWTZNWWxjeHN1U0x6QUlzX0NLcmE0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZC8yZWQxMGMtMDRiMC00ODY2LTliODItYzUyMmI3NGRkY2Zk LzEvbUZTOWlvWTZNWWxjeHN1U0x6QUlzX0NLcmE0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0rrv6AH1 CZhdsCznEIJ6en3VB5h66ds0HMqqAt+CpbONZu7K8YBfXXhArNKae2HQ8Ik7YdQZ PFOlrHJmTMdPVPEqqyM/Qg6n0GbrKNCeGcetsoJhBAOJXDtA/9KOqXktzRJdwqF+ 78ZI1is8dGLv7rxzapigW6//7ucW5AuuOTM1gt3hkuQzwlf8N4ASa5VGN6zmijwm 7oastNOIzW9hgB+okpE9j8JrJhqEr3G709SGLzcbMNunvzunceVRZrPjz/3AuWUY 4r7pVe42bkSA40RlUTTcpIhX+6eFgrFdw/KcZc+pxIQ+QPaug2KMa734yf3MwzJD XZtP8cF6yMZ0aw== -----END CERTIFICATE-----Generated at Fri Dec 26 21:24:26 2025 by rpki-client