This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/5811c0-6dae-4dd4-987c-d46ffc501f36/1/mRtUIs1VeNRxXr5MUJcgJSPdVlg.mft File: mRtUIs1VeNRxXr5MUJcgJSPdVlg.mft (raw, json) Hash identifier: ZlNu7Ofi5ouSAYJIHnqTUpyLTa7r0VgLb0wtWjaly3E= Subject key identifier: 59:65:1D:26:0C:4F:91:9F:F2:07:C5:4E:31:73:9B:35:A5:B5:4A:17 Authority key identifier: 99:1B:54:22:CD:55:78:D4:71:5E:BE:4C:50:97:20:25:23:DD:56:58 Certificate issuer: /CN=991b5422cd5578d4715ebe4c5097202523dd5658 Certificate serial: 019B00A1EF81BB92BD6E04524968E069B499 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mRtUIs1VeNRxXr5MUJcgJSPdVlg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/5811c0-6dae-4dd4-987c-d46ffc501f36/1/mRtUIs1VeNRxXr5MUJcgJSPdVlg.mft Manifest number: 15F1 Signing time: Tue 09 Dec 2025 01:02:51 +0000 Manifest this update: Tue 09 Dec 2025 01:02:51 +0000 Manifest next update: Wed 10 Dec 2025 01:02:51 +0000 Files and hashes: 1: dUzHcv1qzeux_y2IL7xdvYNLLOQ.roa (hash: nSNOUC9fK3tMm0ddVALi9dbfVwMcfIB34jQG6rm/2t0=) 2: mRtUIs1VeNRxXr5MUJcgJSPdVlg.crl (hash: Yt4k+DGxar0yWw1Qz2atDbsb3hDaiu2A3R5T2D9n5ks=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/5811c0-6dae-4dd4-987c-d46ffc501f36/1/mRtUIs1VeNRxXr5MUJcgJSPdVlg.crl rsync://rpki.ripe.net/repository/DEFAULT/23/5811c0-6dae-4dd4-987c-d46ffc501f36/1/mRtUIs1VeNRxXr5MUJcgJSPdVlg.mft rsync://rpki.ripe.net/repository/DEFAULT/mRtUIs1VeNRxXr5MUJcgJSPdVlg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 10 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:00:a1:ef:81:bb:92:bd:6e:04:52:49:68:e0:69:b4:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=991b5422cd5578d4715ebe4c5097202523dd5658 Validity Not Before: Dec 9 01:02:51 2025 GMT Not After : Dec 10 01:02:51 2025 GMT Subject: CN=59651d260c4f919ff207c54e31739b35a5b54a17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:25:d4:84:f4:2d:d3:73:15:78:a0:6d:70:42: 78:cb:9a:90:81:33:63:e6:7d:35:8a:64:2b:e3:fe: aa:99:24:28:c9:d6:1d:73:94:53:d2:72:29:33:27: 27:f2:90:23:1a:40:08:5c:9b:06:ce:fe:09:f5:bd: 9f:60:b1:15:8b:18:a7:40:3f:c2:98:86:25:a6:14: 2b:44:d9:0e:ac:27:ba:49:d1:65:9d:28:bb:14:64: 13:6a:8e:3a:99:ae:9f:2f:28:0e:47:6c:51:ad:c2: 66:49:3a:c8:78:3c:26:cc:16:4a:1e:1c:81:51:26: 66:b7:70:4c:e1:c1:4b:95:f8:c8:a7:c9:9a:1d:fb: 88:b9:f5:04:1f:fe:d7:cc:62:8b:57:80:84:0c:da: ca:b2:41:c8:18:93:df:e3:cd:42:01:c1:05:c1:ba: 83:45:94:7c:fd:be:d6:59:a4:46:b4:ee:00:52:f6: be:34:0b:a8:4c:45:d3:7e:44:50:cb:b1:36:a9:65: 12:7f:9d:25:c8:bf:85:a9:8d:2d:b3:e8:06:e7:88: 83:b6:2b:5d:b6:e6:ae:64:10:66:d5:48:e0:81:b1: 57:22:6e:f4:b2:9d:ea:a5:99:bc:cd:53:72:ea:67: b5:99:a9:67:d3:49:7a:48:92:3e:16:31:ad:e8:d8: a1:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:65:1D:26:0C:4F:91:9F:F2:07:C5:4E:31:73:9B:35:A5:B5:4A:17 X509v3 Authority Key Identifier: keyid:99:1B:54:22:CD:55:78:D4:71:5E:BE:4C:50:97:20:25:23:DD:56:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mRtUIs1VeNRxXr5MUJcgJSPdVlg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/5811c0-6dae-4dd4-987c-d46ffc501f36/1/mRtUIs1VeNRxXr5MUJcgJSPdVlg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/5811c0-6dae-4dd4-987c-d46ffc501f36/1/mRtUIs1VeNRxXr5MUJcgJSPdVlg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c3:5e:4f:8d:82:68:31:8c:67:b3:35:70:e7:fc:9c:34:c8:10: b9:f8:26:14:57:12:a8:6f:6d:ff:8c:8b:c4:47:5d:df:57:0d: 05:f8:6a:8f:f8:f4:56:21:d3:8d:93:03:3a:17:1c:44:f2:6d: 9a:49:ed:52:e9:da:8c:01:68:ac:02:3c:3c:11:79:fb:fe:23: 35:eb:27:88:2f:39:6a:c1:30:63:e0:26:c5:21:0e:81:cf:c1: cf:88:43:8f:9e:07:b5:69:31:4a:f3:8c:90:db:6f:dc:dd:54: 9e:fa:c3:69:48:37:b5:17:50:19:65:23:a6:6c:87:75:f0:02: 71:ba:61:8e:e3:71:71:17:54:8e:42:cf:dc:84:28:3a:b1:c5: 32:82:29:82:df:0a:85:b1:88:2b:80:2b:14:49:dd:d6:eb:e7: 2b:b9:75:f2:84:4f:57:89:b4:0e:fa:85:b6:bb:41:e4:7a:7d: 6e:eb:0d:f4:a8:33:69:20:9f:07:68:6a:02:78:89:11:8a:25: 41:a9:41:95:2c:74:62:0a:95:da:12:22:c2:95:74:ea:0b:b0: e2:5b:2f:53:70:41:9f:1f:20:d1:a7:62:ec:98:f9:44:d5:31: 88:82:52:b7:61:04:64:d1:8f:02:b8:47:31:f4:13:34:d7:3e: af:0f:98:88 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsAoe+Bu5K9bgRSSWjgabSZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk5MWI1NDIyY2Q1NTc4ZDQ3MTVlYmU0YzUwOTcyMDI1MjNk ZDU2NTgwHhcNMjUxMjA5MDEwMjUxWhcNMjUxMjEwMDEwMjUxWjAzMTEwLwYDVQQD Eyg1OTY1MWQyNjBjNGY5MTlmZjIwN2M1NGUzMTczOWIzNWE1YjU0YTE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0SXUhPQt03MVeKBtcEJ4y5qQgTNj 5n01imQr4/6qmSQoydYdc5RT0nIpMycn8pAjGkAIXJsGzv4J9b2fYLEVixinQD/C mIYlphQrRNkOrCe6SdFlnSi7FGQTao46ma6fLygOR2xRrcJmSTrIeDwmzBZKHhyB USZmt3BM4cFLlfjIp8maHfuIufUEH/7XzGKLV4CEDNrKskHIGJPf481CAcEFwbqD RZR8/b7WWaRGtO4AUva+NAuoTEXTfkRQy7E2qWUSf50lyL+FqY0ts+gG54iDtitd tuauZBBm1UjggbFXIm70sp3qpZm8zVNy6me1maln00l6SJI+FjGt6NihzQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFllHSYMT5Gf8gfFTjFzmzWltUoXMB8GA1UdIwQY MBaAFJkbVCLNVXjUcV6+TFCXICUj3VZYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbVJ0VUlzMVZlTlJ4WHI1TVVKY2dKU1BkVmxnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy81ODExYzAtNmRhZS00ZGQ0LTk4N2Mt ZDQ2ZmZjNTAxZjM2LzEvbVJ0VUlzMVZlTlJ4WHI1TVVKY2dKU1BkVmxnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMy81ODExYzAtNmRhZS00ZGQ0LTk4N2MtZDQ2ZmZjNTAxZjM2 LzEvbVJ0VUlzMVZlTlJ4WHI1TVVKY2dKU1BkVmxnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAw15PjYJo MYxnszVw5/ycNMgQufgmFFcSqG9t/4yLxEdd31cNBfhqj/j0ViHTjZMDOhccRPJt mkntUunajAForAI8PBF5+/4jNesniC85asEwY+AmxSEOgc/Bz4hDj54HtWkxSvOM kNtv3N1UnvrDaUg3tRdQGWUjpmyHdfACcbphjuNxcRdUjkLP3IQoOrHFMoIpgt8K hbGIK4ArFEnd1uvnK7l18oRPV4m0DvqFtrtB5Hp9busN9KgzaSCfB2hqAniJEYol QalBlSx0YgqV2hIiwpV06guw4lsvU3BBnx8g0adi7Jj5RNUxiIJSt2EEZNGPArhH MfQTNNc+rw+YiA== -----END CERTIFICATE-----Generated at Tue Dec 9 09:28:03 2025 by rpki-client