This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/0e7ed3-48cb-4afe-8d15-dffe17f3db54/1/mBLkkaqmVbYyTbzAz_AKjWMZEHY.mft File: mBLkkaqmVbYyTbzAz_AKjWMZEHY.mft (raw, json) Hash identifier: /6clyOVydgvurgo5l1sl2v1c388eNL0sOPJ6VYSCTak= Subject key identifier: 81:D8:A5:27:59:F6:91:E7:02:6E:1C:99:33:03:17:CC:83:F1:0E:49 Authority key identifier: 98:12:E4:91:AA:A6:55:B6:32:4D:BC:C0:CF:F0:0A:8D:63:19:10:76 Certificate issuer: /CN=9812e491aaa655b6324dbcc0cff00a8d63191076 Certificate serial: 019B0A7F3210B4517A5C1117B2F7591CF754 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mBLkkaqmVbYyTbzAz_AKjWMZEHY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/0e7ed3-48cb-4afe-8d15-dffe17f3db54/1/mBLkkaqmVbYyTbzAz_AKjWMZEHY.mft Manifest number: 14CD Signing time: Wed 10 Dec 2025 23:01:06 +0000 Manifest this update: Wed 10 Dec 2025 23:01:06 +0000 Manifest next update: Thu 11 Dec 2025 23:01:06 +0000 Files and hashes: 1: H3YMBp1HWn_yJUmsVDSZTkgIRZk.roa (hash: dsjF1p38BaFKD263jEWfJjaYNNkjDPWbd8s7iYfLKf0=) 2: JcHfeJjlV--266gVunBono2FBL8.roa (hash: 2aTzeGR10hHIdC8F6ToLHNpA36FVSTfHDmf74LWIj/E=) 3: cDHrUcS9iBRAhgzIa-0oojwM6x8.roa (hash: a6MRkFy47YCdZj55gPSM8dAPHE9bL49pr9pcP+5WZCo=) 4: gQFR0ws8EpADtXwJYL1_rKqtUCU.roa (hash: O/ujjDYhXza5+3b/lt0kt/wL12KlNYtlZgn4DDp272Q=) 5: ipnQ83UpKa8sWrTXie04nVeOWrE.roa (hash: LCyjANuJcWqupF1L+w0MaO/qngWjk1y0gHyBxfWyWgs=) 6: mBLkkaqmVbYyTbzAz_AKjWMZEHY.crl (hash: 2JJno3UHPNDURCIOFmb+RYnB9m6YHtEI/yeFJ95l3wY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/0e7ed3-48cb-4afe-8d15-dffe17f3db54/1/mBLkkaqmVbYyTbzAz_AKjWMZEHY.crl rsync://rpki.ripe.net/repository/DEFAULT/56/0e7ed3-48cb-4afe-8d15-dffe17f3db54/1/mBLkkaqmVbYyTbzAz_AKjWMZEHY.mft rsync://rpki.ripe.net/repository/DEFAULT/mBLkkaqmVbYyTbzAz_AKjWMZEHY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0a:7f:32:10:b4:51:7a:5c:11:17:b2:f7:59:1c:f7:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9812e491aaa655b6324dbcc0cff00a8d63191076 Validity Not Before: Dec 10 23:01:06 2025 GMT Not After : Dec 11 23:01:06 2025 GMT Subject: CN=81d8a52759f691e7026e1c99330317cc83f10e49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:5f:39:bf:2c:6c:f7:06:3b:3a:58:00:2a:7e: 67:7f:19:b9:f1:7c:5e:ac:7e:47:af:02:8a:09:7d: f3:38:ac:c7:26:b2:96:f0:e5:fd:cc:50:85:d6:75: 66:94:29:27:5e:3e:f2:78:32:6f:5f:1a:82:c5:d8: e6:da:2c:48:63:ad:b8:7e:a7:ec:77:89:2e:56:67: ec:fa:d6:33:73:2f:ce:3a:18:e5:98:28:32:94:09: 72:22:ab:23:4f:a9:bb:d7:b0:27:2d:b2:29:6c:f3: 89:b9:2b:21:92:3b:4c:18:45:77:5c:f8:6f:0b:5d: 9f:75:9b:3f:2d:c7:7d:b2:13:b2:63:54:6a:73:dd: 71:cf:83:74:4b:85:a0:c8:1a:69:f7:45:60:09:2a: bd:85:9c:2d:9d:98:06:3e:53:dc:eb:3c:d3:78:a6: 7e:8a:1e:b9:7c:0e:16:7e:31:b0:a0:8b:42:35:99: f3:a1:96:6a:4d:16:d4:e4:7f:45:cb:a7:f0:c1:25: 31:12:04:34:b9:89:04:ce:7b:c8:33:3a:87:c0:ba: 9e:e0:58:41:c4:7b:ec:fa:f1:f6:43:0b:81:bb:2b: 5e:fe:de:81:1f:20:cb:5c:3a:b5:d1:99:4f:0e:0d: 98:8d:d5:8f:5a:e1:8b:cd:6f:0d:ee:22:2e:87:65: 6a:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:D8:A5:27:59:F6:91:E7:02:6E:1C:99:33:03:17:CC:83:F1:0E:49 X509v3 Authority Key Identifier: keyid:98:12:E4:91:AA:A6:55:B6:32:4D:BC:C0:CF:F0:0A:8D:63:19:10:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mBLkkaqmVbYyTbzAz_AKjWMZEHY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/0e7ed3-48cb-4afe-8d15-dffe17f3db54/1/mBLkkaqmVbYyTbzAz_AKjWMZEHY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/0e7ed3-48cb-4afe-8d15-dffe17f3db54/1/mBLkkaqmVbYyTbzAz_AKjWMZEHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ca:3c:a2:5e:80:2d:98:bf:87:37:26:15:21:64:66:9f:7d:50: 0e:ca:f8:e1:26:9c:5a:46:a9:c6:9e:cc:48:23:24:36:28:ba: 54:1c:24:ed:c5:47:03:ed:07:9a:35:72:29:df:40:a0:a7:ef: 0d:d7:8c:f9:70:c9:c4:2d:e7:4f:b7:75:7e:4d:91:ca:c1:29: 13:2f:5f:5e:90:35:34:ab:9c:dc:de:c8:35:ec:56:73:ea:8d: b9:22:6b:8f:17:90:ae:7b:75:4e:45:2a:c7:0c:e7:5e:c5:d3: 5e:34:f0:82:2f:af:62:d1:fe:77:2e:de:c9:06:11:27:d6:f7: 66:89:00:09:3b:1f:27:36:2d:46:39:55:01:2d:f0:85:09:6b: f2:fc:db:b1:14:0d:26:ef:06:f2:8b:e4:99:9d:68:f3:04:51: 48:ad:b8:32:1c:b2:e1:39:fb:f8:60:b2:0c:88:c1:21:a8:cd: f1:2c:4a:8f:10:c0:69:24:c1:5b:55:10:c7:a1:23:9b:f4:2c: 7f:f9:ff:41:8b:16:84:c9:c3:87:12:0e:ba:89:cf:c2:29:1b: 54:bd:c3:cc:1c:4f:f3:e4:6a:a2:6c:cd:21:53:ac:78:d3:1f: 43:0f:29:1c:c9:9d:3a:bb:4d:7d:19:34:ce:52:b6:a7:04:79: e2:5e:96:22 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsKfzIQtFF6XBEXsvdZHPdUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk4MTJlNDkxYWFhNjU1YjYzMjRkYmNjMGNmZjAwYThkNjMx OTEwNzYwHhcNMjUxMjEwMjMwMTA2WhcNMjUxMjExMjMwMTA2WjAzMTEwLwYDVQQD Eyg4MWQ4YTUyNzU5ZjY5MWU3MDI2ZTFjOTkzMzAzMTdjYzgzZjEwZTQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4185vyxs9wY7OlgAKn5nfxm58Xxe rH5HrwKKCX3zOKzHJrKW8OX9zFCF1nVmlCknXj7yeDJvXxqCxdjm2ixIY624fqfs d4kuVmfs+tYzcy/OOhjlmCgylAlyIqsjT6m717AnLbIpbPOJuSshkjtMGEV3XPhv C12fdZs/Lcd9shOyY1Rqc91xz4N0S4WgyBpp90VgCSq9hZwtnZgGPlPc6zzTeKZ+ ih65fA4WfjGwoItCNZnzoZZqTRbU5H9Fy6fwwSUxEgQ0uYkEznvIMzqHwLqe4FhB xHvs+vH2QwuBuyte/t6BHyDLXDq10ZlPDg2YjdWPWuGLzW8N7iIuh2VqUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIHYpSdZ9pHnAm4cmTMDF8yD8Q5JMB8GA1UdIwQY MBaAFJgS5JGqplW2Mk28wM/wCo1jGRB2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbUJMa2thcW1WYll5VGJ6QXpfQUtqV01aRUhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni8wZTdlZDMtNDhjYi00YWZlLThkMTUt ZGZmZTE3ZjNkYjU0LzEvbUJMa2thcW1WYll5VGJ6QXpfQUtqV01aRUhZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni8wZTdlZDMtNDhjYi00YWZlLThkMTUtZGZmZTE3ZjNkYjU0 LzEvbUJMa2thcW1WYll5VGJ6QXpfQUtqV01aRUhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyjyiXoAt mL+HNyYVIWRmn31QDsr44SacWkapxp7MSCMkNii6VBwk7cVHA+0HmjVyKd9AoKfv DdeM+XDJxC3nT7d1fk2RysEpEy9fXpA1NKuc3N7INexWc+qNuSJrjxeQrnt1TkUq xwznXsXTXjTwgi+vYtH+dy7eyQYRJ9b3ZokACTsfJzYtRjlVAS3whQlr8vzbsRQN Ju8G8ovkmZ1o8wRRSK24Mhyy4Tn7+GCyDIjBIajN8SxKjxDAaSTBW1UQx6Ejm/Qs f/n/QYsWhMnDhxIOuonPwikbVL3DzBxP8+RqomzNIVOseNMfQw8pHMmdOrtNfRk0 zlK2pwR54l6WIg== -----END CERTIFICATE-----Generated at Thu Dec 11 04:58:26 2025 by rpki-client