This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/0dd4cb-1f72-40ed-a657-1c22eff72818/1/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.mft File: mf7ny9jnjR8UpFOgS5FvfBWB0gQ.mft (raw, json) Hash identifier: 2VYr4x1SkUNh2YN2L/c/BYtva8Pg+buh0eQvgmrdE/Y= Subject key identifier: AB:73:13:A0:71:D1:B2:E3:4F:68:D4:BB:53:FB:D2:C9:84:43:74:74 Authority key identifier: 99:FE:E7:CB:D8:E7:8D:1F:14:A4:53:A0:4B:91:6F:7C:15:81:D2:04 Certificate issuer: /CN=99fee7cbd8e78d1f14a453a04b916f7c1581d204 Certificate serial: 019B0FA5E46DFD73C88BEDBDBA96506D4E52 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/0dd4cb-1f72-40ed-a657-1c22eff72818/1/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.mft Manifest number: 1162 Signing time: Thu 11 Dec 2025 23:01:28 +0000 Manifest this update: Thu 11 Dec 2025 23:01:28 +0000 Manifest next update: Fri 12 Dec 2025 23:01:28 +0000 Files and hashes: 1: LghvM2HkoxwkfnMrVuGOmbXEEys.roa (hash: 1OZRBAIe8Cgw+ndoc+DfU+Xu6V9sRaXB9Lxh1AlcmzI=) 2: OalAb_NOtnnw1Uf7t2E7JPJ6VoY.roa (hash: /2DSINFIyLLAuWT+NSN2AERglHoq5WMezjiuaEAGBLc=) 3: UMwJfotBVzQ9ei8MWZTF-MMyZ9s.roa (hash: 7E8VN4G/FyL9Hwi63NY6rXsJXVoge0Qr5gQg0WbzGjo=) 4: YLlE5pxTdS6tg_rMJZiHRJCBtz0.roa (hash: Bw/ViWsgEqyxUU4QLJ0NfAmaEK6jP82CD1tF0xNBYgI=) 5: i0UQOeJ6YNtAxZECZiMmxjiaF3I.roa (hash: Tq5saoxoAZ2SR0wF+u5fAsszTDxNlUp7BPSS54+/SOc=) 6: mf7ny9jnjR8UpFOgS5FvfBWB0gQ.crl (hash: z4vk1XcQ09T7jmdWxATWrjLhHw+8sBISBQMNXIP0V0M=) 7: qOY7wbeKs3nIQqhImhSE17lPdCk.roa (hash: jaqajIIr+ngeFDOwuzVR6399SRRk8jyurbScXxLtxAE=) 8: qpRtX4nTQAXf7W0iXup_p_c22k0.roa (hash: oaoByfuIIELfDuNhi1s5K/79IREcQBqmDkYcHlpZHyI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/0dd4cb-1f72-40ed-a657-1c22eff72818/1/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.crl rsync://rpki.ripe.net/repository/DEFAULT/29/0dd4cb-1f72-40ed-a657-1c22eff72818/1/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.mft rsync://rpki.ripe.net/repository/DEFAULT/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:a5:e4:6d:fd:73:c8:8b:ed:bd:ba:96:50:6d:4e:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99fee7cbd8e78d1f14a453a04b916f7c1581d204 Validity Not Before: Dec 11 23:01:28 2025 GMT Not After : Dec 12 23:01:28 2025 GMT Subject: CN=ab7313a071d1b2e34f68d4bb53fbd2c984437474 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:a6:5a:57:62:46:ab:c2:cf:b3:9e:d4:ce:f3: 07:5f:d2:17:78:13:14:f9:af:8e:3b:f4:5b:b8:c5: 79:7e:dc:52:f2:b7:b8:f0:dc:20:00:35:73:ae:dd: dc:bd:46:c4:15:be:f6:1d:ff:25:ac:9f:56:87:b9: 5b:c9:36:bf:da:d2:1a:cf:16:eb:02:66:54:55:b1: 43:8d:e7:8a:52:c2:7c:91:26:71:3b:02:02:60:ce: 3a:0d:4b:63:e2:a6:67:1d:ea:d0:e1:12:10:7f:dc: 09:13:3a:2b:1d:fc:5c:a9:ef:f9:8f:1f:3e:06:7d: 99:db:47:7e:7b:20:62:4b:6c:a9:c2:3a:f5:31:1e: c0:ee:a1:6f:a5:a4:eb:69:26:e7:f9:2b:05:aa:25: 9e:1f:45:6b:2e:79:f2:b2:98:87:93:b2:6b:4e:18: 72:f0:eb:d6:f2:92:dc:8d:2e:89:d8:69:f7:35:55: 66:6f:02:75:bb:ea:2a:41:c0:d4:de:12:6b:67:db: 1d:80:eb:e7:f2:fd:95:f2:d0:7d:bf:2d:4a:97:9e: 1d:29:59:f6:a5:df:f0:40:b0:88:62:b9:43:ab:1c: 18:fd:b3:b1:a4:74:0b:77:17:32:2f:aa:5c:d8:59: ae:91:26:0c:4f:0c:43:0c:d4:d4:38:75:a5:e7:e9: 44:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:73:13:A0:71:D1:B2:E3:4F:68:D4:BB:53:FB:D2:C9:84:43:74:74 X509v3 Authority Key Identifier: keyid:99:FE:E7:CB:D8:E7:8D:1F:14:A4:53:A0:4B:91:6F:7C:15:81:D2:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/0dd4cb-1f72-40ed-a657-1c22eff72818/1/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/0dd4cb-1f72-40ed-a657-1c22eff72818/1/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:a5:af:0c:e6:a2:f1:3d:71:eb:db:9e:2f:1d:58:ad:bd:a4: 5c:6e:ce:2f:ce:29:96:c8:4c:4b:56:c9:9e:e3:35:5d:f9:f1: 2f:39:52:82:eb:8e:98:50:b1:77:42:de:40:e0:fe:b8:12:82: 89:8c:33:d3:65:7c:b2:60:ad:5f:b0:0f:61:c0:f1:be:8e:06: 7a:2f:82:10:7f:74:b0:66:e5:54:bb:c3:de:76:7b:88:09:f3: b6:c4:35:c8:d6:5c:ab:dc:8a:0c:96:78:eb:75:18:28:40:e3: 97:dd:7e:8e:c3:42:96:6b:7c:a5:1c:e0:45:83:74:f2:6d:3c: 07:49:4b:47:43:59:bf:3d:f3:c5:f5:c6:98:a5:87:ab:93:6d: 4a:66:21:91:ad:13:d3:ba:bc:cd:44:9f:43:4e:55:b2:de:ec: 89:54:75:36:a0:1a:90:bc:de:bd:f3:3a:62:5f:b6:a6:40:7a: c9:24:13:aa:a1:e1:e5:88:7f:60:de:1a:75:a6:38:25:c5:70: 26:e3:9d:6b:cd:7b:75:fd:8d:4f:42:77:84:73:55:a6:e1:9f: 8d:25:44:81:60:4f:0f:ed:19:66:68:d2:1e:b2:a9:c6:b0:25: 48:b8:7f:8b:70:5b:82:2b:f6:54:cf:2b:76:1c:92:64:4a:fd: bd:de:60:a3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPpeRt/XPIi+29upZQbU5SMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk5ZmVlN2NiZDhlNzhkMWYxNGE0NTNhMDRiOTE2ZjdjMTU4 MWQyMDQwHhcNMjUxMjExMjMwMTI4WhcNMjUxMjEyMjMwMTI4WjAzMTEwLwYDVQQD EyhhYjczMTNhMDcxZDFiMmUzNGY2OGQ0YmI1M2ZiZDJjOTg0NDM3NDc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv6ZaV2JGq8LPs57UzvMHX9IXeBMU +a+OO/RbuMV5ftxS8re48NwgADVzrt3cvUbEFb72Hf8lrJ9Wh7lbyTa/2tIazxbr AmZUVbFDjeeKUsJ8kSZxOwICYM46DUtj4qZnHerQ4RIQf9wJEzorHfxcqe/5jx8+ Bn2Z20d+eyBiS2ypwjr1MR7A7qFvpaTraSbn+SsFqiWeH0VrLnnyspiHk7JrThhy 8OvW8pLcjS6J2Gn3NVVmbwJ1u+oqQcDU3hJrZ9sdgOvn8v2V8tB9vy1Kl54dKVn2 pd/wQLCIYrlDqxwY/bOxpHQLdxcyL6pc2FmukSYMTwxDDNTUOHWl5+lE1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKtzE6Bx0bLjT2jUu1P70smEQ3R0MB8GA1UdIwQY MBaAFJn+58vY540fFKRToEuRb3wVgdIEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbWY3bnk5am5qUjhVcEZPZ1M1RnZmQldCMGdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8wZGQ0Y2ItMWY3Mi00MGVkLWE2NTct MWMyMmVmZjcyODE4LzEvbWY3bnk5am5qUjhVcEZPZ1M1RnZmQldCMGdRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS8wZGQ0Y2ItMWY3Mi00MGVkLWE2NTctMWMyMmVmZjcyODE4 LzEvbWY3bnk5am5qUjhVcEZPZ1M1RnZmQldCMGdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeqWvDOai 8T1x69ueLx1Yrb2kXG7OL84plshMS1bJnuM1XfnxLzlSguuOmFCxd0LeQOD+uBKC iYwz02V8smCtX7APYcDxvo4Gei+CEH90sGblVLvD3nZ7iAnztsQ1yNZcq9yKDJZ4 63UYKEDjl91+jsNClmt8pRzgRYN08m08B0lLR0NZvz3zxfXGmKWHq5NtSmYhka0T 07q8zUSfQ05Vst7siVR1NqAakLzevfM6Yl+2pkB6ySQTqqHh5Yh/YN4adaY4JcVw JuOda817df2NT0J3hHNVpuGfjSVEgWBPD+0ZZmjSHrKpxrAlSLh/i3Bbgiv2VM8r dhySZEr9vd5gow== -----END CERTIFICATE-----Generated at Fri Dec 12 04:03:44 2025 by rpki-client