This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/34e91f-a8a9-4937-9fb5-7a01bddd6560/1/mdNWGe0hC-CsKdFwortc10VWk7w.mft File: mdNWGe0hC-CsKdFwortc10VWk7w.mft (raw, json) Hash identifier: iMwkH0hc0x7VYlD8Z/9DybrifkdoaKMm4MtxozLFTVI= Subject key identifier: 56:EF:D7:4A:02:26:1D:36:6B:9D:29:7C:4A:FA:C5:67:F8:FF:81:89 Authority key identifier: 99:D3:56:19:ED:21:0B:E0:AC:29:D1:70:A2:BB:5C:D7:45:56:93:BC Certificate issuer: /CN=99d35619ed210be0ac29d170a2bb5cd7455693bc Certificate serial: 019B0E25BEAF55F4302D39139C4356FDE866 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mdNWGe0hC-CsKdFwortc10VWk7w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/34e91f-a8a9-4937-9fb5-7a01bddd6560/1/mdNWGe0hC-CsKdFwortc10VWk7w.mft Manifest number: 169E Signing time: Thu 11 Dec 2025 16:01:53 +0000 Manifest this update: Thu 11 Dec 2025 16:01:53 +0000 Manifest next update: Fri 12 Dec 2025 16:01:53 +0000 Files and hashes: 1: eUC78a5iIDA3NnkTRgfvxwNqxjg.roa (hash: gOCTr9qoGQ7aucr1ozDn80KAKdoZpLb4iX/BnNIbZIY=) 2: mdNWGe0hC-CsKdFwortc10VWk7w.crl (hash: EIelxTWWk0eJWfCFIkyl8ofLbR8b2MEAjXm7bv5hoJk=) 3: qtSiJdqBkG0uo9WVYHWv-Gpf4SI.roa (hash: tDTpVD4J8FxzW7VK20T8qWOQjmWt3jizwnkYWluPqRY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/34e91f-a8a9-4937-9fb5-7a01bddd6560/1/mdNWGe0hC-CsKdFwortc10VWk7w.crl rsync://rpki.ripe.net/repository/DEFAULT/97/34e91f-a8a9-4937-9fb5-7a01bddd6560/1/mdNWGe0hC-CsKdFwortc10VWk7w.mft rsync://rpki.ripe.net/repository/DEFAULT/mdNWGe0hC-CsKdFwortc10VWk7w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:25:be:af:55:f4:30:2d:39:13:9c:43:56:fd:e8:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99d35619ed210be0ac29d170a2bb5cd7455693bc Validity Not Before: Dec 11 16:01:53 2025 GMT Not After : Dec 12 16:01:53 2025 GMT Subject: CN=56efd74a02261d366b9d297c4afac567f8ff8189 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:3f:a9:5d:5b:2b:28:13:b9:8a:b3:eb:92:2f: a8:28:3d:5b:e5:a5:6b:2a:35:39:5c:d2:99:ea:f6: f8:88:65:6d:7e:08:8d:33:63:49:8e:2a:9a:58:bb: 89:3f:d5:f7:0a:34:b5:b4:26:ed:60:5e:d5:31:e9: 8b:5e:31:b2:da:af:a9:11:2b:7b:41:5a:c4:df:c3: 9c:f6:78:cb:18:7e:04:5e:83:af:c0:f5:89:03:99: cb:3a:76:40:32:ae:6e:4f:5b:3a:79:14:ae:87:30: e6:49:80:b9:ee:40:5e:7a:1b:3f:70:88:be:45:ca: a9:58:b7:cb:28:30:b5:4d:68:b8:46:31:d7:6a:51: d8:d1:f1:53:a1:09:a4:f0:2b:79:44:aa:a3:63:07: f7:17:df:f1:a2:5b:c4:e9:f3:15:49:a2:f8:b4:b1: 84:c8:f0:e9:84:b4:cc:a4:e0:81:b0:dd:05:7a:37: 36:2d:29:86:68:41:dc:c3:ca:42:6f:aa:00:8b:89: b8:41:2e:aa:68:07:e4:e8:68:92:32:54:33:d2:30: a0:20:b9:0a:56:d0:df:a2:85:66:4b:8c:fc:2c:10: 4e:80:5e:3d:d1:3e:37:07:c1:bc:a1:aa:da:de:b4: ea:8c:d0:ea:07:19:91:65:2a:fa:dd:b7:5f:c6:b5: 94:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:EF:D7:4A:02:26:1D:36:6B:9D:29:7C:4A:FA:C5:67:F8:FF:81:89 X509v3 Authority Key Identifier: keyid:99:D3:56:19:ED:21:0B:E0:AC:29:D1:70:A2:BB:5C:D7:45:56:93:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mdNWGe0hC-CsKdFwortc10VWk7w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/34e91f-a8a9-4937-9fb5-7a01bddd6560/1/mdNWGe0hC-CsKdFwortc10VWk7w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/97/34e91f-a8a9-4937-9fb5-7a01bddd6560/1/mdNWGe0hC-CsKdFwortc10VWk7w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b7:e3:b6:b7:b0:56:db:ce:c7:94:57:25:da:3c:21:7a:ff:23: aa:76:be:f4:51:5e:a3:2b:89:9c:4a:04:08:b8:fa:5c:66:aa: 64:50:71:3a:8f:b0:ad:1a:aa:40:cf:85:63:5e:2e:e8:ef:02: 7b:b2:13:49:e3:65:4a:e5:f3:b8:6e:0f:4f:7d:74:72:58:ed: 65:81:5d:e9:df:6d:95:5c:ca:24:a2:fb:6c:8f:ec:2f:cb:ad: f0:0e:58:12:52:e7:bf:90:e6:14:c3:15:c3:b9:05:17:d8:0a: d7:8a:29:74:fd:82:b3:d5:eb:20:96:c9:4e:67:c4:9c:41:4f: 5b:f9:98:00:35:70:3b:be:11:79:96:23:37:84:af:94:dd:8c: 9c:51:01:87:ec:a1:17:16:a4:25:88:5b:0d:2b:03:9f:31:9e: 98:c2:69:4b:e0:32:70:dc:3c:e6:e3:b9:b7:11:8f:6e:44:7d: ae:5a:28:19:6a:7e:35:8e:37:e6:fa:69:d6:e6:e3:c6:09:df: 3e:bc:09:aa:47:01:a0:3d:1e:47:8b:28:e8:7a:ab:54:1c:7e: f7:4e:1b:51:54:cd:0f:10:28:6d:a0:90:be:8e:21:8c:a2:87: 79:27:76:c2:82:ff:64:0b:78:00:e9:e4:8a:b5:9f:a5:5a:7f: 1b:d0:60:96 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOJb6vVfQwLTkTnENW/ehmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk5ZDM1NjE5ZWQyMTBiZTBhYzI5ZDE3MGEyYmI1Y2Q3NDU1 NjkzYmMwHhcNMjUxMjExMTYwMTUzWhcNMjUxMjEyMTYwMTUzWjAzMTEwLwYDVQQD Eyg1NmVmZDc0YTAyMjYxZDM2NmI5ZDI5N2M0YWZhYzU2N2Y4ZmY4MTg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjz+pXVsrKBO5irPrki+oKD1b5aVr KjU5XNKZ6vb4iGVtfgiNM2NJjiqaWLuJP9X3CjS1tCbtYF7VMemLXjGy2q+pESt7 QVrE38Oc9njLGH4EXoOvwPWJA5nLOnZAMq5uT1s6eRSuhzDmSYC57kBeehs/cIi+ RcqpWLfLKDC1TWi4RjHXalHY0fFToQmk8Ct5RKqjYwf3F9/xolvE6fMVSaL4tLGE yPDphLTMpOCBsN0Fejc2LSmGaEHcw8pCb6oAi4m4QS6qaAfk6GiSMlQz0jCgILkK VtDfooVmS4z8LBBOgF490T43B8G8oara3rTqjNDqBxmRZSr63bdfxrWUPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFbv10oCJh02a50pfEr6xWf4/4GJMB8GA1UdIwQY MBaAFJnTVhntIQvgrCnRcKK7XNdFVpO8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbWROV0dlMGhDLUNzS2RGd29ydGMxMFZXazd3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny8zNGU5MWYtYThhOS00OTM3LTlmYjUt N2EwMWJkZGQ2NTYwLzEvbWROV0dlMGhDLUNzS2RGd29ydGMxMFZXazd3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ny8zNGU5MWYtYThhOS00OTM3LTlmYjUtN2EwMWJkZGQ2NTYw LzEvbWROV0dlMGhDLUNzS2RGd29ydGMxMFZXazd3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAt+O2t7BW 287HlFcl2jwhev8jqna+9FFeoyuJnEoECLj6XGaqZFBxOo+wrRqqQM+FY14u6O8C e7ITSeNlSuXzuG4PT310cljtZYFd6d9tlVzKJKL7bI/sL8ut8A5YElLnv5DmFMMV w7kFF9gK14opdP2Cs9XrIJbJTmfEnEFPW/mYADVwO74ReZYjN4SvlN2MnFEBh+yh FxakJYhbDSsDnzGemMJpS+AycNw85uO5txGPbkR9rlooGWp+NY435vpp1ubjxgnf PrwJqkcBoD0eR4so6HqrVBx+904bUVTNDxAobaCQvo4hjKKHeSd2woL/ZAt4AOnk irWfpVp/G9Bglg== -----END CERTIFICATE-----Generated at Thu Dec 11 23:27:00 2025 by rpki-client