This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/fa110d-e6e5-4bf9-84fe-bf26a7faa603/1/mRXw1qlhquvGsLUInaApObMQpRw.mft File: mRXw1qlhquvGsLUInaApObMQpRw.mft (raw, json) Hash identifier: UnZRrl7IQ3UdYXjviZBDICPtS2v7/S6mDUSbr1Jx0oQ= Subject key identifier: 4B:8B:B6:89:7B:D5:23:68:0E:68:84:A7:B0:74:1F:2E:E1:63:6D:AC Authority key identifier: 99:15:F0:D6:A9:61:AA:EB:C6:B0:B5:08:9D:A0:29:39:B3:10:A5:1C Certificate issuer: /CN=9915f0d6a961aaebc6b0b5089da02939b310a51c Certificate serial: 019B19F27814473A92D5F7FD5261038B0823 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mRXw1qlhquvGsLUInaApObMQpRw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/fa110d-e6e5-4bf9-84fe-bf26a7faa603/1/mRXw1qlhquvGsLUInaApObMQpRw.mft Manifest number: 1708 Signing time: Sat 13 Dec 2025 23:01:19 +0000 Manifest this update: Sat 13 Dec 2025 23:01:19 +0000 Manifest next update: Sun 14 Dec 2025 23:01:19 +0000 Files and hashes: 1: 3EoDXcpFiHwKQL3NphGsn39OCs8.roa (hash: ComC0hDOhJ69SVTLkm+pHNkS7oN++Uq45Amm8PB7U5o=) 2: mRXw1qlhquvGsLUInaApObMQpRw.crl (hash: 6aw7V3hCFtNl2aKtdCkvTq0DLDxalz8Qgn5BuVUH+wk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/fa110d-e6e5-4bf9-84fe-bf26a7faa603/1/mRXw1qlhquvGsLUInaApObMQpRw.crl rsync://rpki.ripe.net/repository/DEFAULT/8b/fa110d-e6e5-4bf9-84fe-bf26a7faa603/1/mRXw1qlhquvGsLUInaApObMQpRw.mft rsync://rpki.ripe.net/repository/DEFAULT/mRXw1qlhquvGsLUInaApObMQpRw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 23:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:19:f2:78:14:47:3a:92:d5:f7:fd:52:61:03:8b:08:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9915f0d6a961aaebc6b0b5089da02939b310a51c Validity Not Before: Dec 13 23:01:19 2025 GMT Not After : Dec 14 23:01:19 2025 GMT Subject: CN=4b8bb6897bd523680e6884a7b0741f2ee1636dac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:81:46:a1:8e:d1:0a:20:b2:ce:09:46:f6:4d: 9a:5a:62:7f:c7:8f:a3:8e:38:d0:6e:e1:1e:e5:ea: 5d:dc:4a:82:9d:cc:84:7e:73:5c:50:7e:3e:45:c2: db:55:64:6e:03:f3:39:13:8f:38:da:65:fb:e4:42: 43:4b:da:d9:49:4d:bd:3f:2e:42:c8:89:35:7e:5f: e7:e7:8a:40:79:d6:6c:23:56:5b:66:af:08:1b:61: ed:0c:fe:06:92:a4:c2:21:ee:27:9a:24:ee:6b:6b: f8:90:5b:f1:67:c6:e3:7c:f3:22:dd:fc:0c:c6:13: 44:13:71:65:84:b4:f5:cb:e2:10:68:da:4d:d9:98: 88:57:09:ad:00:33:9f:0c:3a:9e:ec:ab:62:8f:3c: a4:95:2d:b6:a2:ae:d2:44:b2:a9:d9:eb:3f:9b:28: c1:0d:1b:5a:db:f7:1d:3a:ed:40:d6:be:41:3d:71: 5a:c7:a7:77:78:cd:f3:f1:5d:f8:06:72:86:05:46: 82:73:15:fe:d7:f4:be:aa:37:db:4d:81:62:08:f6: 30:d1:dc:b9:fb:33:d5:88:36:20:d7:a6:57:6a:6c: af:2a:57:10:6e:50:5a:b1:5d:e7:0c:d6:fb:a4:f2: ad:1e:13:39:fe:e6:16:ec:69:c7:45:81:11:47:24: c9:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:8B:B6:89:7B:D5:23:68:0E:68:84:A7:B0:74:1F:2E:E1:63:6D:AC X509v3 Authority Key Identifier: keyid:99:15:F0:D6:A9:61:AA:EB:C6:B0:B5:08:9D:A0:29:39:B3:10:A5:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mRXw1qlhquvGsLUInaApObMQpRw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/fa110d-e6e5-4bf9-84fe-bf26a7faa603/1/mRXw1qlhquvGsLUInaApObMQpRw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/fa110d-e6e5-4bf9-84fe-bf26a7faa603/1/mRXw1qlhquvGsLUInaApObMQpRw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:9e:72:08:65:71:9d:57:6f:ee:90:bd:2e:7d:76:f5:a9:0b: aa:46:63:f6:56:0c:a7:2c:0c:29:c0:d7:c2:3a:ff:38:35:89: c5:0a:ae:80:c4:6e:4c:c6:65:fc:d2:fb:a4:fe:19:0a:90:bb: 51:7a:14:b1:cb:f6:9c:be:25:49:50:39:55:94:f3:1c:55:3a: a1:32:a1:be:e8:3c:84:d3:fe:e3:7f:3d:50:ad:db:a9:f2:6d: 97:73:e4:69:39:d9:bd:d4:e4:a3:15:ea:7f:3f:da:32:d7:28: 59:29:14:4d:b8:2d:0d:1d:a1:8a:a6:a4:04:50:56:91:03:93: 7e:b5:71:b4:1f:de:12:12:df:82:c7:6a:7f:36:f2:46:ea:cd: 87:9a:71:8a:50:85:7e:1b:e6:30:19:04:52:fa:0a:49:d8:bd: 96:13:d9:9e:86:5e:68:19:a0:82:b5:da:7a:42:83:15:80:56: b2:54:87:36:b5:71:a2:ea:d7:66:26:d7:43:2c:82:14:6a:08: 14:b5:db:62:00:52:94:d9:27:00:4a:cd:9e:1e:9b:5d:6d:09: 12:b8:1a:08:c0:cf:1f:b9:86:85:ff:ec:26:4b:c3:f9:9c:c7: 73:c7:f8:c2:9a:6b:04:22:0e:48:ee:b7:49:8e:44:4e:36:07: c8:88:02:11 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsZ8ngURzqS1ff9UmEDiwgjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk5MTVmMGQ2YTk2MWFhZWJjNmIwYjUwODlkYTAyOTM5YjMx MGE1MWMwHhcNMjUxMjEzMjMwMTE5WhcNMjUxMjE0MjMwMTE5WjAzMTEwLwYDVQQD Eyg0YjhiYjY4OTdiZDUyMzY4MGU2ODg0YTdiMDc0MWYyZWUxNjM2ZGFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlIFGoY7RCiCyzglG9k2aWmJ/x4+j jjjQbuEe5epd3EqCncyEfnNcUH4+RcLbVWRuA/M5E4842mX75EJDS9rZSU29Py5C yIk1fl/n54pAedZsI1ZbZq8IG2HtDP4GkqTCIe4nmiTua2v4kFvxZ8bjfPMi3fwM xhNEE3FlhLT1y+IQaNpN2ZiIVwmtADOfDDqe7KtijzyklS22oq7SRLKp2es/myjB DRta2/cdOu1A1r5BPXFax6d3eM3z8V34BnKGBUaCcxX+1/S+qjfbTYFiCPYw0dy5 +zPViDYg16ZXamyvKlcQblBasV3nDNb7pPKtHhM5/uYW7GnHRYERRyTJRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEuLtol71SNoDmiEp7B0Hy7hY22sMB8GA1UdIwQY MBaAFJkV8NapYarrxrC1CJ2gKTmzEKUcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbVJYdzFxbGhxdXZHc0xVSW5hQXBPYk1RcFJ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9mYTExMGQtZTZlNS00YmY5LTg0ZmUt YmYyNmE3ZmFhNjAzLzEvbVJYdzFxbGhxdXZHc0xVSW5hQXBPYk1RcFJ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yi9mYTExMGQtZTZlNS00YmY5LTg0ZmUtYmYyNmE3ZmFhNjAz LzEvbVJYdzFxbGhxdXZHc0xVSW5hQXBPYk1RcFJ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkp5yCGVx nVdv7pC9Ln129akLqkZj9lYMpywMKcDXwjr/ODWJxQqugMRuTMZl/NL7pP4ZCpC7 UXoUscv2nL4lSVA5VZTzHFU6oTKhvug8hNP+4389UK3bqfJtl3PkaTnZvdTkoxXq fz/aMtcoWSkUTbgtDR2hiqakBFBWkQOTfrVxtB/eEhLfgsdqfzbyRurNh5pxilCF fhvmMBkEUvoKSdi9lhPZnoZeaBmggrXaekKDFYBWslSHNrVxourXZibXQyyCFGoI FLXbYgBSlNknAErNnh6bXW0JErgaCMDPH7mGhf/sJkvD+ZzHc8f4wpprBCIOSO63 SY5ETjYHyIgCEQ== -----END CERTIFICATE-----Generated at Sun Dec 14 07:48:17 2025 by rpki-client