This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/f08716-4d2a-46ed-bded-af3e7d42968d/1/mUqt73Cb43uczULMK4xzLDlxUPo.mft File: mUqt73Cb43uczULMK4xzLDlxUPo.mft (raw, json) Hash identifier: V3KjouPyVBc5/JfJvh9jeJqnXqtzh59e7res/Hl+mzM= Subject key identifier: 8D:09:DD:08:22:DF:0B:91:16:73:83:44:FF:BA:3D:89:5C:DD:AD:1A Authority key identifier: 99:4A:AD:EF:70:9B:E3:7B:9C:CD:42:CC:2B:8C:73:2C:39:71:50:FA Certificate issuer: /CN=994aadef709be37b9ccd42cc2b8c732c397150fa Certificate serial: 019B5ABFC63F7FDFB7514C28FE0970B86842 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mUqt73Cb43uczULMK4xzLDlxUPo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/f08716-4d2a-46ed-bded-af3e7d42968d/1/mUqt73Cb43uczULMK4xzLDlxUPo.mft Manifest number: 177B Signing time: Fri 26 Dec 2025 13:01:15 +0000 Manifest this update: Fri 26 Dec 2025 13:01:15 +0000 Manifest next update: Sat 27 Dec 2025 13:01:15 +0000 Files and hashes: 1: mUqt73Cb43uczULMK4xzLDlxUPo.crl (hash: 9PXFX9AJsdcElpPw7kvcsPkWAXoxDzK5h+5aOj1FkUM=) 2: rCQFs6YvGWUAxg9vVWInZlNxQI4.roa (hash: +0NX89cMUvPysuXc7Y1nf0CYHUBQMqz9BTCGNPE3tAA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/f08716-4d2a-46ed-bded-af3e7d42968d/1/mUqt73Cb43uczULMK4xzLDlxUPo.crl rsync://rpki.ripe.net/repository/DEFAULT/65/f08716-4d2a-46ed-bded-af3e7d42968d/1/mUqt73Cb43uczULMK4xzLDlxUPo.mft rsync://rpki.ripe.net/repository/DEFAULT/mUqt73Cb43uczULMK4xzLDlxUPo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 13:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:bf:c6:3f:7f:df:b7:51:4c:28:fe:09:70:b8:68:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=994aadef709be37b9ccd42cc2b8c732c397150fa Validity Not Before: Dec 26 13:01:15 2025 GMT Not After : Dec 27 13:01:15 2025 GMT Subject: CN=8d09dd0822df0b9116738344ffba3d895cddad1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:bd:28:7f:10:a8:a1:91:07:07:2a:c3:94:11: 40:ba:f2:0f:6d:44:2c:0f:5f:0d:2d:a4:45:01:e8: 69:53:2e:90:dc:d0:77:48:2d:d5:97:5e:3c:ea:7c: 1c:66:5b:0a:39:29:23:a2:5d:70:d9:62:8e:28:56: eb:2a:20:49:c8:76:99:e9:d2:2d:c6:a3:67:88:57: e6:bb:ae:f7:25:fb:c7:f3:53:b5:a1:46:b0:42:51: 82:bc:d2:88:e6:4d:73:eb:b0:b8:7e:b0:00:4e:de: 58:99:c9:62:8c:58:48:15:d4:2d:ff:fa:45:03:d0: bb:5f:d1:f6:64:e3:04:45:2f:67:1e:81:49:c5:72: 82:db:ae:c5:2e:ea:83:b0:69:64:f9:b3:3d:71:41: 9f:3d:50:85:c9:90:3e:29:5c:99:39:03:e0:1a:57: 28:b7:7f:f8:b6:ca:28:38:f9:cf:18:b9:19:be:da: ff:87:9c:bf:af:50:b4:2a:8d:66:c9:81:c2:ff:db: fe:99:08:01:9a:ea:61:0c:b2:ac:39:36:c8:45:15: b6:94:d2:ed:85:bb:1f:44:a6:68:ad:03:74:20:26: a3:16:ce:6d:8f:9c:7f:a0:83:a6:be:3b:5b:42:e5: 8b:a8:b5:ef:ef:60:ff:60:af:0b:c1:5f:d7:a0:9e: 66:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:09:DD:08:22:DF:0B:91:16:73:83:44:FF:BA:3D:89:5C:DD:AD:1A X509v3 Authority Key Identifier: keyid:99:4A:AD:EF:70:9B:E3:7B:9C:CD:42:CC:2B:8C:73:2C:39:71:50:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mUqt73Cb43uczULMK4xzLDlxUPo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/f08716-4d2a-46ed-bded-af3e7d42968d/1/mUqt73Cb43uczULMK4xzLDlxUPo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/f08716-4d2a-46ed-bded-af3e7d42968d/1/mUqt73Cb43uczULMK4xzLDlxUPo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:65:c1:e8:4b:62:90:22:16:60:c1:e3:9f:c5:71:2c:ac:2b: 73:39:4e:07:a6:92:48:f5:db:9b:4a:9d:64:8e:9e:a3:b2:01: 61:a7:2f:b1:e9:44:1d:65:6b:98:6f:b7:52:dd:e3:bd:21:2d: 7d:36:64:96:ee:b1:c7:b6:8d:e6:67:dc:e9:e7:dc:78:f3:dd: 32:bd:b0:46:d1:ed:5d:df:79:92:2f:50:3c:2d:48:7b:d0:b6: 47:8b:0c:61:85:1e:e3:1a:c5:04:bb:fb:ec:b6:33:9c:0f:13: 2a:14:af:77:60:1c:ff:57:b7:97:64:80:83:35:17:58:0a:11: 9d:d3:13:26:a4:07:7b:97:1a:05:db:66:46:07:8c:a7:fa:3e: bd:a6:27:d5:8e:6e:ed:65:ed:89:14:8e:1f:4f:c1:5d:f5:81: 57:00:67:18:15:3c:cb:66:cf:24:a5:3a:5a:8d:18:59:61:c2: eb:64:21:61:5c:fc:69:49:7d:cb:1b:2f:29:18:43:92:90:7d: bf:76:63:75:87:33:3b:ed:b5:4f:31:89:0c:5b:be:20:7a:6c: 52:b0:ca:c1:b5:88:08:5f:b9:a1:78:4a:19:93:b8:d6:9a:bc: d3:bf:1d:2d:33:ab:f8:24:31:3a:9f:10:1f:e0:da:a9:a8:15: 6a:2a:4a:2f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtav8Y/f9+3UUwo/glwuGhCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk5NGFhZGVmNzA5YmUzN2I5Y2NkNDJjYzJiOGM3MzJjMzk3 MTUwZmEwHhcNMjUxMjI2MTMwMTE1WhcNMjUxMjI3MTMwMTE1WjAzMTEwLwYDVQQD Eyg4ZDA5ZGQwODIyZGYwYjkxMTY3MzgzNDRmZmJhM2Q4OTVjZGRhZDFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArr0ofxCooZEHByrDlBFAuvIPbUQs D18NLaRFAehpUy6Q3NB3SC3Vl1486nwcZlsKOSkjol1w2WKOKFbrKiBJyHaZ6dIt xqNniFfmu673JfvH81O1oUawQlGCvNKI5k1z67C4frAATt5YmclijFhIFdQt//pF A9C7X9H2ZOMERS9nHoFJxXKC267FLuqDsGlk+bM9cUGfPVCFyZA+KVyZOQPgGlco t3/4tsooOPnPGLkZvtr/h5y/r1C0Ko1myYHC/9v+mQgBmuphDLKsOTbIRRW2lNLt hbsfRKZorQN0ICajFs5tj5x/oIOmvjtbQuWLqLXv72D/YK8LwV/XoJ5mxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI0J3Qgi3wuRFnODRP+6PYlc3a0aMB8GA1UdIwQY MBaAFJlKre9wm+N7nM1CzCuMcyw5cVD6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbVVxdDczQ2I0M3VjelVMTUs0eHpMRGx4VVBvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS9mMDg3MTYtNGQyYS00NmVkLWJkZWQt YWYzZTdkNDI5NjhkLzEvbVVxdDczQ2I0M3VjelVMTUs0eHpMRGx4VVBvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS9mMDg3MTYtNGQyYS00NmVkLWJkZWQtYWYzZTdkNDI5Njhk LzEvbVVxdDczQ2I0M3VjelVMTUs0eHpMRGx4VVBvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP2XB6Eti kCIWYMHjn8VxLKwrczlOB6aSSPXbm0qdZI6eo7IBYacvselEHWVrmG+3Ut3jvSEt fTZklu6xx7aN5mfc6efcePPdMr2wRtHtXd95ki9QPC1Ie9C2R4sMYYUe4xrFBLv7 7LYznA8TKhSvd2Ac/1e3l2SAgzUXWAoRndMTJqQHe5caBdtmRgeMp/o+vaYn1Y5u 7WXtiRSOH0/BXfWBVwBnGBU8y2bPJKU6Wo0YWWHC62QhYVz8aUl9yxsvKRhDkpB9 v3ZjdYczO+21TzGJDFu+IHpsUrDKwbWICF+5oXhKGZO41pq8078dLTOr+CQxOp8Q H+DaqagVaipKLw== -----END CERTIFICATE-----Generated at Fri Dec 26 23:01:16 2025 by rpki-client