This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/853849-be2e-432f-87a6-a64dad67b735/1/mCbZDesQFiidwO-MRLU06fsnG1s.mft File: mCbZDesQFiidwO-MRLU06fsnG1s.mft (raw, json) Hash identifier: rzD0HXVVKNRSVgooKy9wM6F++lB12aWIbrLN+A5qaww= Subject key identifier: 76:77:FC:5A:CA:89:C2:67:5F:40:99:4D:64:B7:9D:C5:2C:85:92:31 Authority key identifier: 98:26:D9:0D:EB:10:16:28:9D:C0:EF:8C:44:B5:34:E9:FB:27:1B:5B Certificate issuer: /CN=9826d90deb1016289dc0ef8c44b534e9fb271b5b Certificate serial: 019B59E3FC67DD3E7A8C5A534DB8E350D09C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCbZDesQFiidwO-MRLU06fsnG1s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/853849-be2e-432f-87a6-a64dad67b735/1/mCbZDesQFiidwO-MRLU06fsnG1s.mft Manifest number: 14D2 Signing time: Fri 26 Dec 2025 09:01:11 +0000 Manifest this update: Fri 26 Dec 2025 09:01:11 +0000 Manifest next update: Sat 27 Dec 2025 09:01:11 +0000 Files and hashes: 1: FbTSJ7mjm5cq99L1AIerA5b7n7U.roa (hash: wyC2uEbA5IXzXYZMj5wku9Zxs7BB1RHGpysgY+TRxt4=) 2: mCbZDesQFiidwO-MRLU06fsnG1s.crl (hash: eWpP6HqdeC50zH5I9GN00zsWBPmp4vEq0XNJ2CkzOYI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/853849-be2e-432f-87a6-a64dad67b735/1/mCbZDesQFiidwO-MRLU06fsnG1s.crl rsync://rpki.ripe.net/repository/DEFAULT/33/853849-be2e-432f-87a6-a64dad67b735/1/mCbZDesQFiidwO-MRLU06fsnG1s.mft rsync://rpki.ripe.net/repository/DEFAULT/mCbZDesQFiidwO-MRLU06fsnG1s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:e3:fc:67:dd:3e:7a:8c:5a:53:4d:b8:e3:50:d0:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9826d90deb1016289dc0ef8c44b534e9fb271b5b Validity Not Before: Dec 26 09:01:11 2025 GMT Not After : Dec 27 09:01:11 2025 GMT Subject: CN=7677fc5aca89c2675f40994d64b79dc52c859231 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:3e:bc:7b:2c:04:5a:3c:79:09:25:b6:f2:01: ce:56:4d:27:b7:68:12:ec:ee:a2:48:b9:e9:a7:03: 0b:f3:93:e7:ea:c8:3e:a0:56:b0:26:b3:e0:db:2a: 1b:9a:10:04:6c:73:61:38:84:e2:18:1d:e9:86:d4: ed:5e:c8:5d:6e:9a:57:9d:f2:4b:96:f0:88:8c:b7: 9b:14:e4:ff:31:55:5f:58:9b:41:ef:71:1f:b5:e9: af:ed:a3:ba:4a:92:81:1c:de:12:a6:6f:5c:76:f4: 59:64:57:0a:24:5c:c7:41:a7:5c:d3:fa:8c:ab:46: 70:35:6d:df:d0:db:54:a2:0d:60:99:98:5a:e9:06: ae:ad:36:6c:ce:2d:c5:d6:04:3e:44:4e:4e:32:6b: ed:2d:60:3a:3f:1f:20:d1:09:32:25:3c:98:94:7c: 0a:75:88:2d:0b:65:e6:87:44:3d:1f:28:81:3b:02: 17:b3:a7:0f:04:1b:8d:fc:cf:bd:b8:3a:46:41:50: a0:f1:1c:1d:fb:2b:8d:1b:9b:45:7a:06:d7:da:a4: 1c:c6:ce:30:4c:fa:53:3c:04:b4:33:24:00:fb:9b: f1:91:9f:1e:5d:63:22:37:55:23:69:9b:39:2d:2c: 5b:2f:85:8d:30:d3:50:a7:d7:04:d0:fd:70:af:8e: 3e:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:77:FC:5A:CA:89:C2:67:5F:40:99:4D:64:B7:9D:C5:2C:85:92:31 X509v3 Authority Key Identifier: keyid:98:26:D9:0D:EB:10:16:28:9D:C0:EF:8C:44:B5:34:E9:FB:27:1B:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCbZDesQFiidwO-MRLU06fsnG1s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/853849-be2e-432f-87a6-a64dad67b735/1/mCbZDesQFiidwO-MRLU06fsnG1s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/853849-be2e-432f-87a6-a64dad67b735/1/mCbZDesQFiidwO-MRLU06fsnG1s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:2e:ca:10:74:91:8a:ed:59:c1:98:6b:3a:1a:a4:b4:b7:91: 3c:42:8b:f1:7d:e9:12:5a:82:94:aa:3a:51:89:4a:11:ac:c3: a9:7d:8f:ce:4e:27:97:ca:9a:80:9b:36:f5:19:c6:55:0b:f4: ee:48:5c:f4:b3:3a:6f:75:9a:d0:1c:55:7b:b9:0b:03:78:3c: bb:97:b5:6f:3a:28:3d:69:2b:f9:d4:ac:cc:83:b5:ca:cf:b8: 37:93:28:1b:24:38:0b:88:e5:40:e8:d4:43:c9:c6:23:f9:46: c4:eb:57:e4:da:71:48:15:68:e0:06:e6:ce:67:3e:6b:52:9f: 4c:d8:2b:79:41:18:49:41:b1:02:31:e7:bc:6b:9a:b6:0d:9f: 9f:09:84:6e:b6:22:c1:41:57:27:53:43:63:88:1c:3b:3c:3e: c7:d8:07:39:11:a5:40:27:bb:b3:8a:02:42:34:4a:1b:f6:82: 1c:6c:7e:38:75:cb:2d:2a:3a:14:c8:14:f1:e5:97:48:c3:6b: 38:65:8a:c3:d1:c3:97:5f:26:2c:c4:d4:fa:4c:af:33:f9:51: 47:92:dc:5e:c6:18:f3:c6:bb:e3:b9:7b:da:07:75:99:5e:6a: 1f:d3:f5:2a:37:ff:1a:72:72:d0:ca:87:b9:2f:0c:f0:4f:9a: 3a:9f:06:e6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZ4/xn3T56jFpTTbjjUNCcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk4MjZkOTBkZWIxMDE2Mjg5ZGMwZWY4YzQ0YjUzNGU5ZmIy NzFiNWIwHhcNMjUxMjI2MDkwMTExWhcNMjUxMjI3MDkwMTExWjAzMTEwLwYDVQQD Eyg3Njc3ZmM1YWNhODljMjY3NWY0MDk5NGQ2NGI3OWRjNTJjODU5MjMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3D68eywEWjx5CSW28gHOVk0nt2gS 7O6iSLnppwML85Pn6sg+oFawJrPg2yobmhAEbHNhOITiGB3phtTtXshdbppXnfJL lvCIjLebFOT/MVVfWJtB73Eftemv7aO6SpKBHN4Spm9cdvRZZFcKJFzHQadc0/qM q0ZwNW3f0NtUog1gmZha6QaurTZszi3F1gQ+RE5OMmvtLWA6Px8g0QkyJTyYlHwK dYgtC2Xmh0Q9HyiBOwIXs6cPBBuN/M+9uDpGQVCg8Rwd+yuNG5tFegbX2qQcxs4w TPpTPAS0MyQA+5vxkZ8eXWMiN1UjaZs5LSxbL4WNMNNQp9cE0P1wr44+iwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHZ3/FrKicJnX0CZTWS3ncUshZIxMB8GA1UdIwQY MBaAFJgm2Q3rEBYoncDvjES1NOn7JxtbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbUNiWkRlc1FGaWlkd08tTVJMVTA2ZnNuRzFzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy84NTM4NDktYmUyZS00MzJmLTg3YTYt YTY0ZGFkNjdiNzM1LzEvbUNiWkRlc1FGaWlkd08tTVJMVTA2ZnNuRzFzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy84NTM4NDktYmUyZS00MzJmLTg3YTYtYTY0ZGFkNjdiNzM1 LzEvbUNiWkRlc1FGaWlkd08tTVJMVTA2ZnNuRzFzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjS7KEHSR iu1ZwZhrOhqktLeRPEKL8X3pElqClKo6UYlKEazDqX2Pzk4nl8qagJs29RnGVQv0 7khc9LM6b3Wa0BxVe7kLA3g8u5e1bzooPWkr+dSszIO1ys+4N5MoGyQ4C4jlQOjU Q8nGI/lGxOtX5NpxSBVo4Abmzmc+a1KfTNgreUEYSUGxAjHnvGuatg2fnwmEbrYi wUFXJ1NDY4gcOzw+x9gHORGlQCe7s4oCQjRKG/aCHGx+OHXLLSo6FMgU8eWXSMNr OGWKw9HDl18mLMTU+kyvM/lRR5LcXsYY88a747l72gd1mV5qH9P1Kjf/GnJy0MqH uS8M8E+aOp8G5g== -----END CERTIFICATE-----Generated at Fri Dec 26 14:17:20 2025 by rpki-client