This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/8ea9b9-3b6e-4fdf-b5d1-f04fdcc09e51/1/mSuGCVzlWNLpYYcopEIoonvpCY8.mft File: mSuGCVzlWNLpYYcopEIoonvpCY8.mft (raw, json) Hash identifier: XJ1wsxc2wVH8CNg2qx4e64I8h/+or4/muFvOwCrsIIM= Subject key identifier: DD:A7:9B:6B:26:7E:F5:CE:11:40:D3:30:67:C9:4B:A6:3E:5B:D1:97 Authority key identifier: 99:2B:86:09:5C:E5:58:D2:E9:61:87:28:A4:42:28:A2:7B:E9:09:8F Certificate issuer: /CN=992b86095ce558d2e9618728a44228a27be9098f Certificate serial: 019B5A1AD6DE6BEB842F4DD43A5D3D77050A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mSuGCVzlWNLpYYcopEIoonvpCY8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/8ea9b9-3b6e-4fdf-b5d1-f04fdcc09e51/1/mSuGCVzlWNLpYYcopEIoonvpCY8.mft Manifest number: 17BF Signing time: Fri 26 Dec 2025 10:01:06 +0000 Manifest this update: Fri 26 Dec 2025 10:01:06 +0000 Manifest next update: Sat 27 Dec 2025 10:01:06 +0000 Files and hashes: 1: BlYJMM4ls15zJ30iXM_Rv84I-d4.roa (hash: MRyw1DsxxSYF8y5F3ROkLuVWefJpMb00uWwfBxmnsGk=) 2: e2BcAV15shqdiU98OktC9_gXkUU.roa (hash: rZS4+9XjUiv9YzxM45CHUYZIhLrSaA9eZkuie33ePcg=) 3: mSuGCVzlWNLpYYcopEIoonvpCY8.crl (hash: v+YEJwsthiRAZFSlUGjdgcdvDjUgdNzMr/Nv9jFRQco=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/8ea9b9-3b6e-4fdf-b5d1-f04fdcc09e51/1/mSuGCVzlWNLpYYcopEIoonvpCY8.crl rsync://rpki.ripe.net/repository/DEFAULT/39/8ea9b9-3b6e-4fdf-b5d1-f04fdcc09e51/1/mSuGCVzlWNLpYYcopEIoonvpCY8.mft rsync://rpki.ripe.net/repository/DEFAULT/mSuGCVzlWNLpYYcopEIoonvpCY8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:1a:d6:de:6b:eb:84:2f:4d:d4:3a:5d:3d:77:05:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=992b86095ce558d2e9618728a44228a27be9098f Validity Not Before: Dec 26 10:01:06 2025 GMT Not After : Dec 27 10:01:06 2025 GMT Subject: CN=dda79b6b267ef5ce1140d33067c94ba63e5bd197 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:06:30:49:ea:37:21:33:7e:d1:80:2a:80:b0: 99:9d:5e:cc:4d:eb:4c:e9:31:e5:03:b9:f7:7f:a5: 7e:ad:c9:65:dd:d2:d7:68:85:28:bd:01:ee:bb:2c: cb:e6:af:82:21:b4:16:4f:fe:1c:b6:de:5e:73:0d: 49:e0:d5:34:e5:b2:35:e6:c2:d2:47:97:d7:5b:1f: 3e:6c:3d:69:88:6e:77:09:36:13:18:0f:7e:dd:2f: 7d:57:75:4c:dd:49:76:d3:f6:cc:fe:08:96:c7:43: 66:a3:d9:35:6d:d6:45:b2:45:cd:92:03:ee:b3:40: 6a:25:11:7f:f2:4a:06:9d:b1:ca:5e:a2:85:a6:cb: bb:dd:62:75:a7:d3:b5:15:89:64:27:55:d2:a1:09: 12:44:1c:38:30:18:f1:63:6a:58:25:d9:1a:4f:6b: ec:22:91:37:d6:00:4d:72:99:a9:5a:48:e2:13:c6: 98:2f:5c:ba:28:a2:91:c4:53:fa:ea:25:85:98:6a: 1e:d0:bf:a6:54:cd:d5:d7:02:54:fa:22:36:5e:7b: 3e:ab:4c:b4:5b:c1:a9:2f:3c:17:a4:60:4b:75:e1: ac:21:02:f2:b0:8d:64:a6:a5:2c:bc:f9:82:2d:08: f7:f2:41:83:d8:ae:04:08:86:46:39:67:ad:97:f1: 72:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:A7:9B:6B:26:7E:F5:CE:11:40:D3:30:67:C9:4B:A6:3E:5B:D1:97 X509v3 Authority Key Identifier: keyid:99:2B:86:09:5C:E5:58:D2:E9:61:87:28:A4:42:28:A2:7B:E9:09:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mSuGCVzlWNLpYYcopEIoonvpCY8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/8ea9b9-3b6e-4fdf-b5d1-f04fdcc09e51/1/mSuGCVzlWNLpYYcopEIoonvpCY8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/39/8ea9b9-3b6e-4fdf-b5d1-f04fdcc09e51/1/mSuGCVzlWNLpYYcopEIoonvpCY8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:1e:c4:00:82:36:8b:00:98:d5:88:b4:11:dc:1c:52:58:5d: b1:df:9a:71:46:87:cf:dc:3e:bd:9b:ac:9e:b3:01:cc:57:0b: 76:de:cb:d4:31:41:cb:1a:0d:df:32:56:67:b6:30:c7:f7:cc: a9:57:06:32:4b:51:7a:89:26:72:2a:a4:2c:44:ed:56:bb:99: f8:5a:db:a9:9f:76:66:b2:26:e3:c3:da:fe:59:eb:27:2a:1a: b4:19:1f:fb:1c:7f:f1:d7:a2:e0:73:60:94:5e:d5:1d:a3:eb: bb:54:be:f8:a9:11:5d:d5:ce:cf:64:64:57:ff:50:31:38:6f: d2:9b:7d:61:88:32:1e:a3:95:ce:ad:bc:f9:22:83:06:92:02: 29:47:62:0f:f3:3e:71:24:2b:7e:c8:f4:e4:4d:45:b7:a3:bf: 92:b3:eb:b4:f8:7b:2e:76:1e:a3:46:f6:8a:29:54:6c:43:e6: c0:e8:df:da:d6:46:9f:96:05:85:af:98:d4:eb:2b:3a:bc:45: 07:1a:0e:65:d1:10:29:13:c7:9e:02:db:f5:1b:3d:b7:1a:7a: 47:4a:c7:5a:87:15:2e:53:ed:35:83:e8:00:94:63:02:85:23: 39:f7:4a:22:c4:e6:88:1b:d8:4b:f5:ad:8f:0c:4e:4c:a1:07: aa:45:47:aa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaGtbea+uEL03UOl09dwUKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk5MmI4NjA5NWNlNTU4ZDJlOTYxODcyOGE0NDIyOGEyN2Jl OTA5OGYwHhcNMjUxMjI2MTAwMTA2WhcNMjUxMjI3MTAwMTA2WjAzMTEwLwYDVQQD EyhkZGE3OWI2YjI2N2VmNWNlMTE0MGQzMzA2N2M5NGJhNjNlNWJkMTk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArwYwSeo3ITN+0YAqgLCZnV7MTetM 6THlA7n3f6V+rcll3dLXaIUovQHuuyzL5q+CIbQWT/4ctt5ecw1J4NU05bI15sLS R5fXWx8+bD1piG53CTYTGA9+3S99V3VM3Ul20/bM/giWx0Nmo9k1bdZFskXNkgPu s0BqJRF/8koGnbHKXqKFpsu73WJ1p9O1FYlkJ1XSoQkSRBw4MBjxY2pYJdkaT2vs IpE31gBNcpmpWkjiE8aYL1y6KKKRxFP66iWFmGoe0L+mVM3V1wJU+iI2Xns+q0y0 W8GpLzwXpGBLdeGsIQLysI1kpqUsvPmCLQj38kGD2K4ECIZGOWetl/FylwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN2nm2smfvXOEUDTMGfJS6Y+W9GXMB8GA1UdIwQY MBaAFJkrhglc5VjS6WGHKKRCKKJ76QmPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbVN1R0NWemxXTkxwWVljb3BFSW9vbnZwQ1k4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS84ZWE5YjktM2I2ZS00ZmRmLWI1ZDEt ZjA0ZmRjYzA5ZTUxLzEvbVN1R0NWemxXTkxwWVljb3BFSW9vbnZwQ1k4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOS84ZWE5YjktM2I2ZS00ZmRmLWI1ZDEtZjA0ZmRjYzA5ZTUx LzEvbVN1R0NWemxXTkxwWVljb3BFSW9vbnZwQ1k4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGR7EAII2 iwCY1Yi0EdwcUlhdsd+acUaHz9w+vZusnrMBzFcLdt7L1DFByxoN3zJWZ7Ywx/fM qVcGMktReokmciqkLETtVruZ+FrbqZ92ZrIm48Pa/lnrJyoatBkf+xx/8dei4HNg lF7VHaPru1S++KkRXdXOz2RkV/9QMThv0pt9YYgyHqOVzq28+SKDBpICKUdiD/M+ cSQrfsj05E1Ft6O/krPrtPh7LnYeo0b2iilUbEPmwOjf2tZGn5YFha+Y1OsrOrxF BxoOZdEQKRPHngLb9Rs9txp6R0rHWocVLlPtNYPoAJRjAoUjOfdKIsTmiBvYS/Wt jwxOTKEHqkVHqg== -----END CERTIFICATE-----Generated at Fri Dec 26 16:00:34 2025 by rpki-client