This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/188d75-2bf2-48f1-91f7-c48ca27a9c01/1/mPngwgrNyPqnRBoIQ_-KAfPZ28U.mft File: mPngwgrNyPqnRBoIQ_-KAfPZ28U.mft (raw, json) Hash identifier: FUYjGM+zPbutFYtztpbF/bhU5/+mIqt2itUXOh2/Yoc= Subject key identifier: 84:98:0E:55:8A:68:56:22:74:5F:4F:76:12:8B:B3:86:F8:B9:0E:6B Authority key identifier: 98:F9:E0:C2:0A:CD:C8:FA:A7:44:1A:08:43:FF:8A:01:F3:D9:DB:C5 Certificate issuer: /CN=98f9e0c20acdc8faa7441a0843ff8a01f3d9dbc5 Certificate serial: 019B21E28454C2F405C6DA4F7C430A991B78 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mPngwgrNyPqnRBoIQ_-KAfPZ28U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/188d75-2bf2-48f1-91f7-c48ca27a9c01/1/mPngwgrNyPqnRBoIQ_-KAfPZ28U.mft Manifest number: 177B Signing time: Mon 15 Dec 2025 12:00:51 +0000 Manifest this update: Mon 15 Dec 2025 12:00:51 +0000 Manifest next update: Tue 16 Dec 2025 12:00:51 +0000 Files and hashes: 1: 6VEj8hFX83dP4cTfcpFmDeB3WK4.roa (hash: 9iNEtr8XsCFGn75dg2M+2IpdUdlrA9H+OLDn6Iw/O78=) 2: mPngwgrNyPqnRBoIQ_-KAfPZ28U.crl (hash: OOL0zxKaaBNI61rgzXQDDViHj+9x7LVbP1YdxFMzrIk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/188d75-2bf2-48f1-91f7-c48ca27a9c01/1/mPngwgrNyPqnRBoIQ_-KAfPZ28U.crl rsync://rpki.ripe.net/repository/DEFAULT/24/188d75-2bf2-48f1-91f7-c48ca27a9c01/1/mPngwgrNyPqnRBoIQ_-KAfPZ28U.mft rsync://rpki.ripe.net/repository/DEFAULT/mPngwgrNyPqnRBoIQ_-KAfPZ28U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 08:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:21:e2:84:54:c2:f4:05:c6:da:4f:7c:43:0a:99:1b:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98f9e0c20acdc8faa7441a0843ff8a01f3d9dbc5 Validity Not Before: Dec 15 12:00:51 2025 GMT Not After : Dec 16 12:00:51 2025 GMT Subject: CN=84980e558a685622745f4f76128bb386f8b90e6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:19:f9:ff:7d:61:13:9f:5e:74:1f:1b:37:8b: 70:5b:bd:5e:f1:95:52:d7:a6:f5:30:94:ed:68:f9: 6a:b7:2f:35:90:d0:10:55:25:ab:61:36:e5:2d:df: 4a:90:4a:ad:a6:2d:32:19:bf:44:05:f6:21:b4:79: 5a:dc:c6:b8:ca:ca:6c:73:fa:39:1c:19:e3:9f:fe: da:ce:df:ef:e0:db:4a:08:34:0b:a9:cf:19:7b:38: 38:e2:27:69:2c:4f:a2:4a:44:8b:86:ba:b3:1f:35: 96:ec:a7:63:56:46:ad:f5:58:6a:9d:e6:6e:f1:7d: 21:b8:0f:b0:d0:e3:6f:a4:5c:d4:69:6f:eb:09:b1: 12:32:d7:31:0c:ff:7f:c5:7a:23:75:c4:42:1c:c2: cb:8c:d4:4b:a9:b1:eb:01:9d:60:16:bf:3c:f5:48: 09:09:a1:07:57:3e:d5:d1:59:29:27:0e:d1:1d:4e: 6d:78:db:26:cb:33:85:25:dd:ba:5d:2b:04:fa:88: d2:18:1e:56:a4:3e:93:f4:c9:60:5c:70:4c:fb:f9: 12:de:94:03:29:7f:e4:ae:0c:4a:80:2b:a9:f7:74: 9b:7d:3e:33:bc:ac:0c:cb:d2:80:31:9b:a9:b9:6f: 3b:8a:d9:62:65:03:db:15:cc:1c:c7:1d:d0:28:52: bb:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:98:0E:55:8A:68:56:22:74:5F:4F:76:12:8B:B3:86:F8:B9:0E:6B X509v3 Authority Key Identifier: keyid:98:F9:E0:C2:0A:CD:C8:FA:A7:44:1A:08:43:FF:8A:01:F3:D9:DB:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mPngwgrNyPqnRBoIQ_-KAfPZ28U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/188d75-2bf2-48f1-91f7-c48ca27a9c01/1/mPngwgrNyPqnRBoIQ_-KAfPZ28U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/188d75-2bf2-48f1-91f7-c48ca27a9c01/1/mPngwgrNyPqnRBoIQ_-KAfPZ28U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:ff:a2:b7:cc:ee:2f:09:30:91:79:af:88:57:2e:63:12:6e: 3f:97:29:66:df:81:be:51:3b:32:2b:c7:c0:f8:89:9b:f2:74: ca:20:b1:1d:0c:e1:6b:95:a3:9e:29:f4:65:97:a6:65:f8:fc: da:4f:01:d1:09:e7:4d:a1:0a:32:3b:24:83:ee:3b:49:d4:5f: 9f:f6:7c:52:00:42:29:89:46:19:9f:0e:b0:2c:11:55:be:17: b2:3f:df:b9:0b:cc:ba:ff:2b:2d:de:50:a7:a9:db:81:a4:53: 4f:7c:ac:b5:69:fd:ee:80:1d:00:f7:7f:60:5b:87:ed:a3:63: 42:63:53:4e:99:08:a3:5a:f4:51:08:03:8b:ef:13:73:30:51: 07:3a:3d:47:ed:de:2b:54:0f:38:db:cb:d5:ac:de:e1:af:07: 72:98:ef:fa:ac:e5:bf:2a:3c:d1:1b:3b:ae:e7:16:9a:63:4d: b1:ae:c7:30:98:c4:81:ac:8b:3e:dd:00:b3:00:1d:db:fa:07: ad:cf:83:04:08:2a:3c:2a:1a:db:76:a0:f5:18:c1:1e:90:39: 70:8a:25:be:93:c1:d9:f4:b4:7f:25:c6:b2:24:91:26:2a:a6: e4:e2:ee:aa:bd:b1:8a:62:d6:ff:ac:bd:33:7d:29:a6:ed:85: 6f:2e:e9:73 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsh4oRUwvQFxtpPfEMKmRt4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk4ZjllMGMyMGFjZGM4ZmFhNzQ0MWEwODQzZmY4YTAxZjNk OWRiYzUwHhcNMjUxMjE1MTIwMDUxWhcNMjUxMjE2MTIwMDUxWjAzMTEwLwYDVQQD Eyg4NDk4MGU1NThhNjg1NjIyNzQ1ZjRmNzYxMjhiYjM4NmY4YjkwZTZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0hn5/31hE59edB8bN4twW71e8ZVS 16b1MJTtaPlqty81kNAQVSWrYTblLd9KkEqtpi0yGb9EBfYhtHla3Ma4yspsc/o5 HBnjn/7azt/v4NtKCDQLqc8Zezg44idpLE+iSkSLhrqzHzWW7KdjVkat9VhqneZu 8X0huA+w0ONvpFzUaW/rCbESMtcxDP9/xXojdcRCHMLLjNRLqbHrAZ1gFr889UgJ CaEHVz7V0VkpJw7RHU5teNsmyzOFJd26XSsE+ojSGB5WpD6T9MlgXHBM+/kS3pQD KX/krgxKgCup93SbfT4zvKwMy9KAMZupuW87itliZQPbFcwcxx3QKFK78wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFISYDlWKaFYidF9PdhKLs4b4uQ5rMB8GA1UdIwQY MBaAFJj54MIKzcj6p0QaCEP/igHz2dvFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbVBuZ3dnck55UHFuUkJvSVFfLUtBZlBaMjhVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC8xODhkNzUtMmJmMi00OGYxLTkxZjct YzQ4Y2EyN2E5YzAxLzEvbVBuZ3dnck55UHFuUkJvSVFfLUtBZlBaMjhVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC8xODhkNzUtMmJmMi00OGYxLTkxZjctYzQ4Y2EyN2E5YzAx LzEvbVBuZ3dnck55UHFuUkJvSVFfLUtBZlBaMjhVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ/+it8zu LwkwkXmviFcuYxJuP5cpZt+BvlE7MivHwPiJm/J0yiCxHQzha5Wjnin0ZZemZfj8 2k8B0QnnTaEKMjskg+47SdRfn/Z8UgBCKYlGGZ8OsCwRVb4Xsj/fuQvMuv8rLd5Q p6nbgaRTT3ystWn97oAdAPd/YFuH7aNjQmNTTpkIo1r0UQgDi+8TczBRBzo9R+3e K1QPONvL1aze4a8Hcpjv+qzlvyo80Rs7rucWmmNNsa7HMJjEgayLPt0AswAd2/oH rc+DBAgqPCoa23ag9RjBHpA5cIolvpPB2fS0fyXGsiSRJiqm5OLuqr2ximLW/6y9 M30ppu2Fby7pcw== -----END CERTIFICATE-----Generated at Mon Dec 15 14:41:05 2025 by rpki-client