This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/5205b8-98cf-4042-a0ce-e4c6741c802c/1/mfyNwqfBufMroZV_9JLcC6TyYP8.mft File: mfyNwqfBufMroZV_9JLcC6TyYP8.mft (raw, json) Hash identifier: 9VSu4OKAzs1Mkr8CUNizRjck/MS63FzXRaqq9fTputA= Subject key identifier: B8:1C:E8:2D:64:47:EA:B0:F8:83:9D:85:E2:D0:22:D8:5F:68:68:58 Authority key identifier: 99:FC:8D:C2:A7:C1:B9:F3:2B:A1:95:7F:F4:92:DC:0B:A4:F2:60:FF Certificate issuer: /CN=99fc8dc2a7c1b9f32ba1957ff492dc0ba4f260ff Certificate serial: 019B05C6E564447039DF7646F3CC8DE27EC3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mfyNwqfBufMroZV_9JLcC6TyYP8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/5205b8-98cf-4042-a0ce-e4c6741c802c/1/mfyNwqfBufMroZV_9JLcC6TyYP8.mft Manifest number: 01D4 Signing time: Wed 10 Dec 2025 01:01:19 +0000 Manifest this update: Wed 10 Dec 2025 01:01:19 +0000 Manifest next update: Thu 11 Dec 2025 01:01:19 +0000 Files and hashes: 1: bwcXy3FYmHBMxUWqGbTAjvoGjVE.roa (hash: i13BZ7NJZZP7VgcQkDsp+e+5aBIM+z4sday3aP/ehUI=) 2: mfyNwqfBufMroZV_9JLcC6TyYP8.crl (hash: zjnSTUXmZ7Tw3N1Db5r9iR5t5zPPAz+LRx1zdYB3jQk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/5205b8-98cf-4042-a0ce-e4c6741c802c/1/mfyNwqfBufMroZV_9JLcC6TyYP8.crl rsync://rpki.ripe.net/repository/DEFAULT/85/5205b8-98cf-4042-a0ce-e4c6741c802c/1/mfyNwqfBufMroZV_9JLcC6TyYP8.mft rsync://rpki.ripe.net/repository/DEFAULT/mfyNwqfBufMroZV_9JLcC6TyYP8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:05:c6:e5:64:44:70:39:df:76:46:f3:cc:8d:e2:7e:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99fc8dc2a7c1b9f32ba1957ff492dc0ba4f260ff Validity Not Before: Dec 10 01:01:19 2025 GMT Not After : Dec 11 01:01:19 2025 GMT Subject: CN=b81ce82d6447eab0f8839d85e2d022d85f686858 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:83:bc:9f:c6:31:9e:d9:10:cc:c4:5f:d4:a4: be:b5:4b:cf:c3:48:48:ff:d2:48:67:e2:48:e4:7c: 8d:8c:af:76:d6:31:58:a9:77:d8:3f:02:80:17:7e: dd:66:83:bd:12:67:35:26:d5:d7:f1:ef:fc:d8:5b: ec:cf:96:fd:47:44:21:14:e0:a7:96:b1:a8:63:2c: 28:c3:4e:68:a4:8a:3c:45:b0:32:09:f9:60:64:f7: 0a:22:dc:c8:58:90:e6:57:4f:a1:c4:6c:69:ee:93: 1e:31:00:b6:8e:cc:37:9a:a9:b1:f4:78:81:9b:a5: d0:82:c0:bb:a2:bd:b7:7e:1b:6e:f7:ce:6c:4c:2a: 82:61:ce:97:df:60:bf:d2:88:be:75:24:b9:ee:28: 21:2d:98:1d:a6:c6:0a:9c:16:2a:ac:a9:bd:96:00: f2:d7:76:b3:f0:94:3d:3f:be:7f:90:1d:08:b6:ba: af:af:4f:19:b7:49:8a:f3:de:2e:8b:a8:ac:b3:9a: 05:43:5d:c5:41:d4:84:49:0e:6c:a1:d2:3d:43:80: 68:89:82:61:5d:30:04:26:1c:58:25:d2:7b:04:a1: 4a:d3:ab:71:fd:cd:5a:91:2b:83:4e:c4:57:3d:24: 3d:13:cf:6f:a4:04:54:e7:8f:d0:8a:e4:6c:82:11: df:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:1C:E8:2D:64:47:EA:B0:F8:83:9D:85:E2:D0:22:D8:5F:68:68:58 X509v3 Authority Key Identifier: keyid:99:FC:8D:C2:A7:C1:B9:F3:2B:A1:95:7F:F4:92:DC:0B:A4:F2:60:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mfyNwqfBufMroZV_9JLcC6TyYP8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/5205b8-98cf-4042-a0ce-e4c6741c802c/1/mfyNwqfBufMroZV_9JLcC6TyYP8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/85/5205b8-98cf-4042-a0ce-e4c6741c802c/1/mfyNwqfBufMroZV_9JLcC6TyYP8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:a9:c7:ec:a7:2b:8a:bc:54:9e:9f:48:05:ac:5d:0c:9e:5b: 9a:c9:62:d6:3d:69:e6:35:eb:95:58:ce:2e:a6:76:a4:7b:3b: 0f:ea:c0:b1:8d:7c:fc:6a:74:6c:2a:56:49:f0:24:0a:d6:a9: 54:42:cd:13:8a:d1:9a:ec:cb:38:d9:f5:ff:1d:08:cf:6a:91: 1e:76:a7:07:4d:4e:07:6c:5c:62:5b:d6:2e:e9:42:3b:1b:d2: e9:95:4b:e6:47:45:f7:e9:cb:72:0a:e5:93:bc:06:f2:f5:6b: bb:37:5f:b5:3e:2d:a1:4c:31:1e:09:e3:ec:26:2b:87:12:47: 64:1b:1f:c1:1f:43:8d:be:08:fe:55:a2:40:f8:f0:e8:db:fa: 42:a9:5e:9a:91:c3:d6:f0:86:6f:10:a3:04:e1:5d:d7:fa:43: 73:9d:8a:cb:00:42:9c:da:da:53:e9:ec:22:15:93:81:9d:96: 60:00:70:52:12:d9:44:f4:5d:01:13:53:6b:a9:5f:54:de:1a: 58:98:8d:85:fd:73:23:19:d3:f2:86:4b:43:a3:d6:a6:3b:d8: bc:58:9a:ff:88:cd:34:18:32:02:f2:4d:9e:8a:8d:92:56:8a: 5b:7b:63:11:b7:d9:80:e7:b4:17:b7:56:96:4e:33:b9:bb:e2: d6:0b:80:5e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsFxuVkRHA533ZG88yN4n7DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk5ZmM4ZGMyYTdjMWI5ZjMyYmExOTU3ZmY0OTJkYzBiYTRm MjYwZmYwHhcNMjUxMjEwMDEwMTE5WhcNMjUxMjExMDEwMTE5WjAzMTEwLwYDVQQD EyhiODFjZTgyZDY0NDdlYWIwZjg4MzlkODVlMmQwMjJkODVmNjg2ODU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmoO8n8YxntkQzMRf1KS+tUvPw0hI /9JIZ+JI5HyNjK921jFYqXfYPwKAF37dZoO9Emc1JtXX8e/82Fvsz5b9R0QhFOCn lrGoYywow05opIo8RbAyCflgZPcKItzIWJDmV0+hxGxp7pMeMQC2jsw3mqmx9HiB m6XQgsC7or23fhtu985sTCqCYc6X32C/0oi+dSS57ighLZgdpsYKnBYqrKm9lgDy 13az8JQ9P75/kB0Itrqvr08Zt0mK894ui6iss5oFQ13FQdSESQ5sodI9Q4BoiYJh XTAEJhxYJdJ7BKFK06tx/c1akSuDTsRXPSQ9E89vpARU54/QiuRsghHfOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLgc6C1kR+qw+IOdheLQIthfaGhYMB8GA1UdIwQY MBaAFJn8jcKnwbnzK6GVf/SS3Auk8mD/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbWZ5TndxZkJ1Zk1yb1pWXzlKTGNDNlR5WVA4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS81MjA1YjgtOThjZi00MDQyLWEwY2Ut ZTRjNjc0MWM4MDJjLzEvbWZ5TndxZkJ1Zk1yb1pWXzlKTGNDNlR5WVA4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NS81MjA1YjgtOThjZi00MDQyLWEwY2UtZTRjNjc0MWM4MDJj LzEvbWZ5TndxZkJ1Zk1yb1pWXzlKTGNDNlR5WVA4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJqnH7Kcr irxUnp9IBaxdDJ5bmsli1j1p5jXrlVjOLqZ2pHs7D+rAsY18/Gp0bCpWSfAkCtap VELNE4rRmuzLONn1/x0Iz2qRHnanB01OB2xcYlvWLulCOxvS6ZVL5kdF9+nLcgrl k7wG8vVruzdftT4toUwxHgnj7CYrhxJHZBsfwR9Djb4I/lWiQPjw6Nv6QqlempHD 1vCGbxCjBOFd1/pDc52KywBCnNraU+nsIhWTgZ2WYABwUhLZRPRdARNTa6lfVN4a WJiNhf1zIxnT8oZLQ6PWpjvYvFia/4jNNBgyAvJNnoqNklaKW3tjEbfZgOe0F7dW lk4zubvi1guAXg== -----END CERTIFICATE-----Generated at Wed Dec 10 09:05:03 2025 by rpki-client