This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/382597-0d50-400d-a71b-676e80dc1de6/1/mFTaUYIyMZ9noy_YrUwGU2xB1b8.mft File: mFTaUYIyMZ9noy_YrUwGU2xB1b8.mft (raw, json) Hash identifier: LpiRs+XnpF1B8VaC7S0tkh05uhaJHhIWnflFn7H9ux4= Subject key identifier: 5A:84:9E:1A:81:86:4D:A3:3C:2C:78:21:02:6C:2F:3A:6E:8A:1E:41 Authority key identifier: 98:54:DA:51:82:32:31:9F:67:A3:2F:D8:AD:4C:06:53:6C:41:D5:BF Certificate issuer: /CN=9854da518232319f67a32fd8ad4c06536c41d5bf Certificate serial: 019B4693BC64677C9C463129F2E1325B8718 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mFTaUYIyMZ9noy_YrUwGU2xB1b8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/382597-0d50-400d-a71b-676e80dc1de6/1/mFTaUYIyMZ9noy_YrUwGU2xB1b8.mft Manifest number: 178D Signing time: Mon 22 Dec 2025 15:00:45 +0000 Manifest this update: Mon 22 Dec 2025 15:00:45 +0000 Manifest next update: Tue 23 Dec 2025 15:00:45 +0000 Files and hashes: 1: BFbItzgMXh2yCZ227Kwfzi1k3ME.roa (hash: 3p3Z55QLOu2JV1kUetHwILYBWmwCeLPU+vcoZy0JMPg=) 2: mFTaUYIyMZ9noy_YrUwGU2xB1b8.crl (hash: UCplFneauSiD67AI4GsfL5SsxaC93wEp2lIXnVGOGjM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/382597-0d50-400d-a71b-676e80dc1de6/1/mFTaUYIyMZ9noy_YrUwGU2xB1b8.crl rsync://rpki.ripe.net/repository/DEFAULT/61/382597-0d50-400d-a71b-676e80dc1de6/1/mFTaUYIyMZ9noy_YrUwGU2xB1b8.mft rsync://rpki.ripe.net/repository/DEFAULT/mFTaUYIyMZ9noy_YrUwGU2xB1b8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 15:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:46:93:bc:64:67:7c:9c:46:31:29:f2:e1:32:5b:87:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9854da518232319f67a32fd8ad4c06536c41d5bf Validity Not Before: Dec 22 15:00:45 2025 GMT Not After : Dec 23 15:00:45 2025 GMT Subject: CN=5a849e1a81864da33c2c7821026c2f3a6e8a1e41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:51:25:3e:90:76:e7:74:b2:e5:fb:1e:1b:8c: 5a:4a:b5:b2:2b:a2:87:ef:63:9a:ba:5b:57:d0:c7: cc:8d:29:b3:2f:44:35:84:cd:7f:f8:89:a9:a2:ab: 44:2a:e7:73:ae:ea:c3:03:0a:fa:0b:8e:15:74:28: d8:89:50:3b:ef:e3:43:e9:19:e9:a3:ae:80:e4:ab: 7c:37:47:3b:9b:c1:61:31:ec:fe:0e:c8:21:37:ee: 83:eb:4c:cd:00:9a:30:7c:a4:ee:73:d5:c6:27:6f: 09:fa:1f:dd:75:6c:2d:66:66:7d:76:1a:bc:62:5d: f2:ae:4b:a5:06:94:65:db:26:01:84:f7:17:82:8f: 00:42:3a:42:75:92:46:13:da:90:96:ad:18:1b:b5: eb:d2:c1:c3:67:74:a7:77:55:09:24:e0:f6:c2:03: 39:b0:15:2c:96:1c:62:5b:d3:ff:e5:14:d4:78:67: 87:0b:e4:9c:6b:c6:9c:b5:40:06:87:5c:9a:4b:40: 67:dd:76:0c:be:41:23:5f:fe:ca:bf:18:04:de:c1: e2:ac:36:3c:f2:41:96:97:70:0c:4c:47:db:69:7c: 1e:8a:c8:26:65:e5:df:c4:ac:21:a8:96:57:b4:b5: e6:d6:fe:43:3c:dc:0d:3d:70:cd:cf:96:0f:1b:c4: 01:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:84:9E:1A:81:86:4D:A3:3C:2C:78:21:02:6C:2F:3A:6E:8A:1E:41 X509v3 Authority Key Identifier: keyid:98:54:DA:51:82:32:31:9F:67:A3:2F:D8:AD:4C:06:53:6C:41:D5:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mFTaUYIyMZ9noy_YrUwGU2xB1b8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/382597-0d50-400d-a71b-676e80dc1de6/1/mFTaUYIyMZ9noy_YrUwGU2xB1b8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/382597-0d50-400d-a71b-676e80dc1de6/1/mFTaUYIyMZ9noy_YrUwGU2xB1b8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:62:15:15:89:36:78:d2:01:11:e1:54:38:f7:36:a1:38:ec: c9:d0:7d:9c:37:e9:33:5a:a3:d4:bd:90:c2:59:74:d4:79:96: 40:5d:8a:2d:7f:2a:3f:6f:77:14:c8:68:f0:ba:3b:45:41:6e: 18:c1:3e:b2:09:26:fb:e2:8a:4d:1d:a4:60:b5:eb:c6:0f:99: af:de:99:2e:4f:e1:05:46:b1:e1:4d:43:4d:06:19:e4:09:60: fb:15:90:31:3e:57:ba:a9:08:23:bf:bf:63:25:4c:16:d3:32: dd:7a:f4:0d:4a:66:5b:fd:32:3d:6b:f5:94:16:94:5d:43:3f: 31:68:07:3a:b1:3b:fe:3c:cd:54:6e:37:f8:83:32:cf:46:20: 3e:ff:af:6f:6b:26:84:fa:24:94:ac:f9:69:d9:a8:6e:37:25: ff:5d:09:cb:91:11:9b:51:d1:8f:dd:73:98:bf:cf:d9:12:dd: 58:90:2d:ae:c4:9b:33:5e:72:29:ac:16:94:2e:7b:c5:2a:1b: 76:85:2f:a0:70:ba:7c:df:5c:58:af:75:15:13:13:9d:af:7e: 0a:d2:b1:45:3d:83:a2:86:cf:5b:08:33:38:45:e1:5c:2a:00: ce:9d:23:06:b6:35:b3:97:6a:67:b8:2d:5c:64:46:6c:e6:47: 21:a3:e6:32 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtGk7xkZ3ycRjEp8uEyW4cYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk4NTRkYTUxODIzMjMxOWY2N2EzMmZkOGFkNGMwNjUzNmM0 MWQ1YmYwHhcNMjUxMjIyMTUwMDQ1WhcNMjUxMjIzMTUwMDQ1WjAzMTEwLwYDVQQD Eyg1YTg0OWUxYTgxODY0ZGEzM2MyYzc4MjEwMjZjMmYzYTZlOGExZTQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAslElPpB253Sy5fseG4xaSrWyK6KH 72OaultX0MfMjSmzL0Q1hM1/+ImpoqtEKudzrurDAwr6C44VdCjYiVA77+ND6Rnp o66A5Kt8N0c7m8FhMez+DsghN+6D60zNAJowfKTuc9XGJ28J+h/ddWwtZmZ9dhq8 Yl3yrkulBpRl2yYBhPcXgo8AQjpCdZJGE9qQlq0YG7Xr0sHDZ3Snd1UJJOD2wgM5 sBUslhxiW9P/5RTUeGeHC+Sca8actUAGh1yaS0Bn3XYMvkEjX/7KvxgE3sHirDY8 8kGWl3AMTEfbaXweisgmZeXfxKwhqJZXtLXm1v5DPNwNPXDNz5YPG8QB0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFqEnhqBhk2jPCx4IQJsLzpuih5BMB8GA1UdIwQY MBaAFJhU2lGCMjGfZ6Mv2K1MBlNsQdW/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbUZUYVVZSXlNWjlub3lfWXJVd0dVMnhCMWI4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS8zODI1OTctMGQ1MC00MDBkLWE3MWIt Njc2ZTgwZGMxZGU2LzEvbUZUYVVZSXlNWjlub3lfWXJVd0dVMnhCMWI4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS8zODI1OTctMGQ1MC00MDBkLWE3MWItNjc2ZTgwZGMxZGU2 LzEvbUZUYVVZSXlNWjlub3lfWXJVd0dVMnhCMWI4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQmIVFYk2 eNIBEeFUOPc2oTjsydB9nDfpM1qj1L2Qwll01HmWQF2KLX8qP293FMho8Lo7RUFu GME+sgkm++KKTR2kYLXrxg+Zr96ZLk/hBUax4U1DTQYZ5Alg+xWQMT5XuqkII7+/ YyVMFtMy3Xr0DUpmW/0yPWv1lBaUXUM/MWgHOrE7/jzNVG43+IMyz0YgPv+vb2sm hPoklKz5admobjcl/10Jy5ERm1HRj91zmL/P2RLdWJAtrsSbM15yKawWlC57xSob doUvoHC6fN9cWK91FRMTna9+CtKxRT2DoobPWwgzOEXhXCoAzp0jBrY1s5dqZ7gt XGRGbOZHIaPmMg== -----END CERTIFICATE-----Generated at Mon Dec 22 22:24:39 2025 by rpki-client