This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/f760d0-2f67-4307-9f0c-3993b50b2064/1/mIKWxQ2Uu-0iXyhnIx-lCT3r6pE.mft File: mIKWxQ2Uu-0iXyhnIx-lCT3r6pE.mft (raw, json) Hash identifier: hmt2WfTUVVTxScj065o/BDADehFw5vzRF42w66hoJRk= Subject key identifier: 99:5D:17:15:82:28:5E:4A:95:D6:18:ED:9D:7B:BB:89:28:16:60:0C Authority key identifier: 98:82:96:C5:0D:94:BB:ED:22:5F:28:67:23:1F:A5:09:3D:EB:EA:91 Certificate issuer: /CN=988296c50d94bbed225f2867231fa5093debea91 Certificate serial: 019B1C8559B8FC60D4C26B6EA3995459E12F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mIKWxQ2Uu-0iXyhnIx-lCT3r6pE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/f760d0-2f67-4307-9f0c-3993b50b2064/1/mIKWxQ2Uu-0iXyhnIx-lCT3r6pE.mft Manifest number: 13BC Signing time: Sun 14 Dec 2025 11:00:59 +0000 Manifest this update: Sun 14 Dec 2025 11:00:59 +0000 Manifest next update: Mon 15 Dec 2025 11:00:59 +0000 Files and hashes: 1: UjP5WMZKRBsvIlHnzhDHFBUyi78.roa (hash: pQ6/nnpLIpK2rwKH9JMJUyXoOlk8zghaFAetdmitLfY=) 2: mIKWxQ2Uu-0iXyhnIx-lCT3r6pE.crl (hash: IQNJuuuzy0+9oMoUWWYZ4YOxv1PzEw+TgTlll/Ghd5A=) 3: oFqjjYPuOysZm8IvX2HFnZ2yMN8.roa (hash: xodF+0GY/o0dnV+Pf3SoupYGcpVAvzY6q/h09Jx9Nzo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/f760d0-2f67-4307-9f0c-3993b50b2064/1/mIKWxQ2Uu-0iXyhnIx-lCT3r6pE.crl rsync://rpki.ripe.net/repository/DEFAULT/29/f760d0-2f67-4307-9f0c-3993b50b2064/1/mIKWxQ2Uu-0iXyhnIx-lCT3r6pE.mft rsync://rpki.ripe.net/repository/DEFAULT/mIKWxQ2Uu-0iXyhnIx-lCT3r6pE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1c:85:59:b8:fc:60:d4:c2:6b:6e:a3:99:54:59:e1:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=988296c50d94bbed225f2867231fa5093debea91 Validity Not Before: Dec 14 11:00:59 2025 GMT Not After : Dec 15 11:00:59 2025 GMT Subject: CN=995d171582285e4a95d618ed9d7bbb892816600c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:96:de:7a:a9:b7:1e:00:5a:65:d9:df:ac:4c: 97:11:f0:e2:4a:fd:9e:65:b3:60:7c:75:14:d9:1f: a9:e7:ae:76:eb:e3:52:a0:5e:06:56:ed:8c:ac:a3: 65:00:b7:dc:7d:4b:59:d6:39:0a:70:a5:f9:db:f1: 97:2c:c4:bd:56:31:49:79:6a:41:b9:bc:70:15:87: f8:6d:dd:9b:ba:27:69:cc:59:25:2d:3b:82:09:02: 8f:2a:fc:45:58:50:61:51:b3:79:b1:bc:7c:02:b5: 1b:75:d1:80:bb:60:dd:41:ad:bc:2b:38:b3:95:b3: b6:2e:d6:f6:ae:4a:ac:0d:62:aa:07:1d:22:e8:76: 15:cb:5e:68:ec:19:b3:7e:99:df:5e:d0:7f:11:f3: 3b:c6:63:ea:7e:3c:ab:bd:c6:31:06:74:43:24:ca: 41:f1:9e:59:79:7e:9c:a0:55:c1:90:3b:a8:cb:36: f4:98:37:59:3f:1f:5b:76:5a:08:4f:b3:95:13:4c: bc:82:08:4e:91:84:aa:8d:a3:44:71:9f:33:7c:ff: 13:fe:51:28:b1:cc:63:18:25:4e:c9:f7:52:b0:0b: 61:97:8d:25:d1:33:6d:8c:d0:c0:a1:fd:41:46:3a: e6:07:aa:81:33:f8:fb:e5:66:c4:95:01:6b:77:7c: 3e:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:5D:17:15:82:28:5E:4A:95:D6:18:ED:9D:7B:BB:89:28:16:60:0C X509v3 Authority Key Identifier: keyid:98:82:96:C5:0D:94:BB:ED:22:5F:28:67:23:1F:A5:09:3D:EB:EA:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mIKWxQ2Uu-0iXyhnIx-lCT3r6pE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/f760d0-2f67-4307-9f0c-3993b50b2064/1/mIKWxQ2Uu-0iXyhnIx-lCT3r6pE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/f760d0-2f67-4307-9f0c-3993b50b2064/1/mIKWxQ2Uu-0iXyhnIx-lCT3r6pE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:79:06:bb:58:6b:46:7b:ff:b2:ed:b7:41:f4:a4:3b:3f:37: 00:d0:9f:5c:92:04:da:7d:35:5d:52:89:df:2b:5a:d7:da:c5: f0:8d:6d:ea:78:c8:63:24:6d:82:c0:1c:25:cc:d8:6a:ef:7f: cf:e3:98:bc:01:b5:be:3d:9b:00:c1:f6:1b:5e:bb:25:9e:19: 02:f1:7b:d7:06:4c:b1:ab:bc:d9:77:6c:38:df:10:af:af:60: 43:37:59:3a:85:d3:0a:66:74:22:29:a7:3d:8c:13:51:bf:9d: 21:0b:3a:04:42:6a:08:8b:ad:04:2d:83:8f:05:eb:29:c0:25: 80:3d:62:17:7e:44:7a:3a:db:5d:5a:14:5e:b1:15:29:37:2c: d6:7e:62:b9:aa:70:db:61:d2:de:c2:48:59:bf:0e:fc:00:14: f8:76:fa:e3:e2:c9:50:e1:06:cf:6b:ca:31:78:1e:52:d1:05: 5a:dd:74:c7:d7:76:d7:ea:62:cf:d4:c9:0a:06:0f:02:87:88: 7c:c8:fb:1b:6f:dc:84:b1:a4:3c:30:40:64:5b:71:51:e9:c9: 95:9d:c3:59:59:e0:b5:d7:94:f4:e3:b6:32:22:b9:e5:ed:6e: 4e:73:e5:92:66:82:72:be:8a:bc:41:ea:e5:88:63:2f:81:51: ca:87:ee:1d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZschVm4/GDUwmtuo5lUWeEvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk4ODI5NmM1MGQ5NGJiZWQyMjVmMjg2NzIzMWZhNTA5M2Rl YmVhOTEwHhcNMjUxMjE0MTEwMDU5WhcNMjUxMjE1MTEwMDU5WjAzMTEwLwYDVQQD Eyg5OTVkMTcxNTgyMjg1ZTRhOTVkNjE4ZWQ5ZDdiYmI4OTI4MTY2MDBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuZbeeqm3HgBaZdnfrEyXEfDiSv2e ZbNgfHUU2R+p56526+NSoF4GVu2MrKNlALfcfUtZ1jkKcKX52/GXLMS9VjFJeWpB ubxwFYf4bd2buidpzFklLTuCCQKPKvxFWFBhUbN5sbx8ArUbddGAu2DdQa28Kziz lbO2Ltb2rkqsDWKqBx0i6HYVy15o7BmzfpnfXtB/EfM7xmPqfjyrvcYxBnRDJMpB 8Z5ZeX6coFXBkDuoyzb0mDdZPx9bdloIT7OVE0y8gghOkYSqjaNEcZ8zfP8T/lEo scxjGCVOyfdSsAthl40l0TNtjNDAof1BRjrmB6qBM/j75WbElQFrd3w+MwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJldFxWCKF5KldYY7Z17u4koFmAMMB8GA1UdIwQY MBaAFJiClsUNlLvtIl8oZyMfpQk96+qRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbUlLV3hRMlV1LTBpWHlobkl4LWxDVDNyNnBFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9mNzYwZDAtMmY2Ny00MzA3LTlmMGMt Mzk5M2I1MGIyMDY0LzEvbUlLV3hRMlV1LTBpWHlobkl4LWxDVDNyNnBFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS9mNzYwZDAtMmY2Ny00MzA3LTlmMGMtMzk5M2I1MGIyMDY0 LzEvbUlLV3hRMlV1LTBpWHlobkl4LWxDVDNyNnBFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEnkGu1hr Rnv/su23QfSkOz83ANCfXJIE2n01XVKJ3yta19rF8I1t6njIYyRtgsAcJczYau9/ z+OYvAG1vj2bAMH2G167JZ4ZAvF71wZMsau82XdsON8Qr69gQzdZOoXTCmZ0Iimn PYwTUb+dIQs6BEJqCIutBC2DjwXrKcAlgD1iF35EejrbXVoUXrEVKTcs1n5iuapw 22HS3sJIWb8O/AAU+Hb64+LJUOEGz2vKMXgeUtEFWt10x9d21+piz9TJCgYPAoeI fMj7G2/chLGkPDBAZFtxUenJlZ3DWVngtdeU9OO2MiK55e1uTnPlkmaCcr6KvEHq 5YhjL4FRyofuHQ== -----END CERTIFICATE-----Generated at Sun Dec 14 15:20:10 2025 by rpki-client