This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/8ab976-e53a-4c43-a8e8-2014fe0a1611/1/Mj4wCntjrU_vuuZx9Rq8JPEShxk.mft File: Mj4wCntjrU_vuuZx9Rq8JPEShxk.mft (raw, json) Hash identifier: 6fAEvUHHSZiTXYNNCXIJ/fwqfwlOrkXE6NAaDUbA6Pk= Subject key identifier: F8:4A:24:A0:D4:44:6D:1A:22:0A:D3:A3:7C:F7:D7:7E:98:54:7C:54 Authority key identifier: 32:3E:30:0A:7B:63:AD:4F:EF:BA:E6:71:F5:1A:BC:24:F1:12:87:19 Certificate issuer: /CN=323e300a7b63ad4fefbae671f51abc24f1128719 Certificate serial: 019B3AFDBA65B82361C0FC129E21E5F820C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mj4wCntjrU_vuuZx9Rq8JPEShxk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/8ab976-e53a-4c43-a8e8-2014fe0a1611/1/Mj4wCntjrU_vuuZx9Rq8JPEShxk.mft Manifest number: 1787 Signing time: Sat 20 Dec 2025 09:01:05 +0000 Manifest this update: Sat 20 Dec 2025 09:01:05 +0000 Manifest next update: Sun 21 Dec 2025 09:01:05 +0000 Files and hashes: 1: Mj4wCntjrU_vuuZx9Rq8JPEShxk.crl (hash: UfJI3+toNpyWBRB3xcDRcHDzyKA1K/sPd5GvoHC3MdM=) 2: nG0u5JVbsOz2NWyBPT2f0id55qg.roa (hash: rcOcuJUXRrdjca7vuzAqSL0w9cdWcN3PeqOknKKlStg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/8ab976-e53a-4c43-a8e8-2014fe0a1611/1/Mj4wCntjrU_vuuZx9Rq8JPEShxk.crl rsync://rpki.ripe.net/repository/DEFAULT/70/8ab976-e53a-4c43-a8e8-2014fe0a1611/1/Mj4wCntjrU_vuuZx9Rq8JPEShxk.mft rsync://rpki.ripe.net/repository/DEFAULT/Mj4wCntjrU_vuuZx9Rq8JPEShxk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:fd:ba:65:b8:23:61:c0:fc:12:9e:21:e5:f8:20:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=323e300a7b63ad4fefbae671f51abc24f1128719 Validity Not Before: Dec 20 09:01:05 2025 GMT Not After : Dec 21 09:01:05 2025 GMT Subject: CN=f84a24a0d4446d1a220ad3a37cf7d77e98547c54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:76:78:51:47:f3:5e:e9:f4:c7:d0:e4:58:88: 19:cc:d4:14:f2:9b:5d:53:d2:13:fe:ee:31:4b:94: de:d4:0d:67:d3:22:d6:3e:c8:95:7c:67:92:92:bb: a3:bc:52:cd:1f:e0:94:5e:bc:44:81:81:10:27:15: ab:41:b2:5b:de:df:fd:d5:f6:01:e9:63:40:4a:0a: bc:aa:1d:84:4b:26:f8:ed:3c:bc:2f:46:d8:3c:cb: 12:9e:70:6c:9e:83:15:b6:49:1c:da:7f:72:56:c5: 8b:9d:9c:71:8e:3f:71:09:32:b9:52:12:07:25:bf: b2:7f:3a:a7:88:8c:cf:77:73:4e:fe:7e:41:0e:1a: f3:f4:78:44:cb:6a:66:0d:16:e2:d2:0b:25:80:80: f5:6b:38:9d:76:ee:88:9e:93:b0:cf:00:15:56:12: 0a:16:13:3b:cd:e8:33:62:9f:1e:c6:f1:92:14:4f: 6f:da:9c:08:27:54:2c:55:a4:fb:09:43:6e:c3:8a: d3:29:8b:78:46:53:cc:31:7d:75:c4:46:45:f1:de: 16:80:29:24:f1:38:5f:9f:eb:25:35:70:d7:43:62: 92:55:cf:3e:24:04:19:c1:55:2a:55:6a:77:ff:6f: 2f:56:41:dc:f7:b4:85:ae:ad:18:21:11:20:04:2a: db:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:4A:24:A0:D4:44:6D:1A:22:0A:D3:A3:7C:F7:D7:7E:98:54:7C:54 X509v3 Authority Key Identifier: keyid:32:3E:30:0A:7B:63:AD:4F:EF:BA:E6:71:F5:1A:BC:24:F1:12:87:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mj4wCntjrU_vuuZx9Rq8JPEShxk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/8ab976-e53a-4c43-a8e8-2014fe0a1611/1/Mj4wCntjrU_vuuZx9Rq8JPEShxk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/8ab976-e53a-4c43-a8e8-2014fe0a1611/1/Mj4wCntjrU_vuuZx9Rq8JPEShxk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:3a:c1:63:10:9d:55:0f:b3:c7:b4:65:e8:d9:4d:60:aa:d5: 12:d7:6a:45:4e:c6:e5:1d:84:58:a4:84:70:ea:12:b5:12:d1: 3c:bd:b1:b4:ca:ae:63:c1:56:9a:d3:dc:3c:aa:4b:31:46:37: 6d:14:89:de:51:db:39:a5:61:c1:ca:4f:1e:c1:89:83:64:80: 70:3a:3b:47:33:b8:6d:ca:11:50:37:18:49:8c:78:ac:c7:5a: c8:31:0c:64:16:84:81:4e:70:6c:ce:ce:79:23:b3:2f:9b:85: 77:77:a6:d7:cc:33:1f:72:80:78:04:60:de:c2:4d:1c:61:8c: 8e:0e:cd:65:f1:97:87:c2:6e:c6:7d:44:e9:da:d1:7c:55:ce: 3b:98:41:bd:23:88:48:fb:e6:4a:c4:21:97:0f:a9:ff:65:19: 38:ad:35:30:59:b5:af:c1:f8:05:1b:3f:f8:a5:38:a6:18:e8: 2b:6e:d7:56:96:8f:d2:22:00:a5:54:4f:6d:aa:c3:23:b8:9b: dd:9c:5b:90:a5:e0:5f:e7:32:d3:69:4f:74:f6:c6:67:9c:06: d5:d6:c2:a5:67:90:f8:6a:69:02:39:3c:ce:7f:fd:c4:70:bf: d6:5e:b6:f2:04:fd:4c:5f:2a:12:e1:e3:ff:53:75:e6:d1:e9: 60:68:f0:05 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6/bpluCNhwPwSniHl+CDAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyM2UzMDBhN2I2M2FkNGZlZmJhZTY3MWY1MWFiYzI0ZjEx Mjg3MTkwHhcNMjUxMjIwMDkwMTA1WhcNMjUxMjIxMDkwMTA1WjAzMTEwLwYDVQQD EyhmODRhMjRhMGQ0NDQ2ZDFhMjIwYWQzYTM3Y2Y3ZDc3ZTk4NTQ3YzU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm3Z4UUfzXun0x9DkWIgZzNQU8ptd U9IT/u4xS5Te1A1n0yLWPsiVfGeSkrujvFLNH+CUXrxEgYEQJxWrQbJb3t/91fYB 6WNASgq8qh2ESyb47Ty8L0bYPMsSnnBsnoMVtkkc2n9yVsWLnZxxjj9xCTK5UhIH Jb+yfzqniIzPd3NO/n5BDhrz9HhEy2pmDRbi0gslgID1aziddu6InpOwzwAVVhIK FhM7zegzYp8exvGSFE9v2pwIJ1QsVaT7CUNuw4rTKYt4RlPMMX11xEZF8d4WgCkk 8Thfn+slNXDXQ2KSVc8+JAQZwVUqVWp3/28vVkHc97SFrq0YIREgBCrbDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPhKJKDURG0aIgrTo3z3136YVHxUMB8GA1UdIwQY MBaAFDI+MAp7Y61P77rmcfUavCTxEocZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTWo0d0NudGpyVV92dXVaeDlScThKUEVTaHhrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC84YWI5NzYtZTUzYS00YzQzLWE4ZTgt MjAxNGZlMGExNjExLzEvTWo0d0NudGpyVV92dXVaeDlScThKUEVTaHhrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC84YWI5NzYtZTUzYS00YzQzLWE4ZTgtMjAxNGZlMGExNjEx LzEvTWo0d0NudGpyVV92dXVaeDlScThKUEVTaHhrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEjrBYxCd VQ+zx7Rl6NlNYKrVEtdqRU7G5R2EWKSEcOoStRLRPL2xtMquY8FWmtPcPKpLMUY3 bRSJ3lHbOaVhwcpPHsGJg2SAcDo7RzO4bcoRUDcYSYx4rMdayDEMZBaEgU5wbM7O eSOzL5uFd3em18wzH3KAeARg3sJNHGGMjg7NZfGXh8Juxn1E6drRfFXOO5hBvSOI SPvmSsQhlw+p/2UZOK01MFm1r8H4BRs/+KU4phjoK27XVpaP0iIApVRPbarDI7ib 3ZxbkKXgX+cy02lPdPbGZ5wG1dbCpWeQ+GppAjk8zn/9xHC/1l628gT9TF8qEuHj /1N15tHpYGjwBQ== -----END CERTIFICATE-----Generated at Sat Dec 20 14:12:46 2025 by rpki-client