This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/3c6cb5-a72c-4701-ae6c-306c5651343e/1/mUT4EqDgAsOOhOR2KL26A4WYCQs.mft File: mUT4EqDgAsOOhOR2KL26A4WYCQs.mft (raw, json) Hash identifier: DJyAqqNg/AQfkm1gR1NK3JhTV2pWMC8JxLkSn19Igb8= Subject key identifier: A1:7E:6A:89:DE:2A:0B:FB:03:2A:D8:D7:0B:F3:40:DA:C1:B4:3D:EF Authority key identifier: 99:44:F8:12:A0:E0:02:C3:8E:84:E4:76:28:BD:BA:03:85:98:09:0B Certificate issuer: /CN=9944f812a0e002c38e84e47628bdba038598090b Certificate serial: 019B59E3638E86DD705B5F7541E03F00571F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mUT4EqDgAsOOhOR2KL26A4WYCQs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/3c6cb5-a72c-4701-ae6c-306c5651343e/1/mUT4EqDgAsOOhOR2KL26A4WYCQs.mft Manifest number: 0D24 Signing time: Fri 26 Dec 2025 09:00:32 +0000 Manifest this update: Fri 26 Dec 2025 09:00:32 +0000 Manifest next update: Sat 27 Dec 2025 09:00:32 +0000 Files and hashes: 1: 8bKL0IbQOSgAyNHMsOTwdqXxmBA.roa (hash: SiMZDaqzDjVBWVjWC+CfQKEVMp/aAzgNg3WOueNrYnY=) 2: TOZ32S2cTtEqOAugUTe4Diokmjc.roa (hash: ZfLvnSZb+3P/Lwkuj8mzNGrvWl0G71GHwv4eE3pKqaY=) 3: aWPrtGmH1Yyr9JygOmf8I8XXZSE.roa (hash: rxPNfyseh9mYpYa5sMESZMtb8GzaNyszUYWBRocITXE=) 4: mUT4EqDgAsOOhOR2KL26A4WYCQs.crl (hash: DNAyaX4V098qixE1Mgipz3K/uQkAbEq35XADuNJaAhg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/3c6cb5-a72c-4701-ae6c-306c5651343e/1/mUT4EqDgAsOOhOR2KL26A4WYCQs.crl rsync://rpki.ripe.net/repository/DEFAULT/97/3c6cb5-a72c-4701-ae6c-306c5651343e/1/mUT4EqDgAsOOhOR2KL26A4WYCQs.mft rsync://rpki.ripe.net/repository/DEFAULT/mUT4EqDgAsOOhOR2KL26A4WYCQs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:e3:63:8e:86:dd:70:5b:5f:75:41:e0:3f:00:57:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9944f812a0e002c38e84e47628bdba038598090b Validity Not Before: Dec 26 09:00:32 2025 GMT Not After : Dec 27 09:00:32 2025 GMT Subject: CN=a17e6a89de2a0bfb032ad8d70bf340dac1b43def Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:ab:65:50:ee:19:7b:04:3d:0e:fe:d5:83:ed: d6:1e:9d:fc:0f:89:1d:70:77:8c:94:83:26:cb:0c: 72:b6:cd:75:f1:3b:66:93:71:31:8f:53:7d:2f:37: a4:b9:5a:7c:bc:03:90:2f:8f:e4:85:ed:46:60:28: 9e:73:8d:17:ac:96:0a:13:1f:da:cf:48:db:70:b4: 57:d9:c6:9e:75:ad:3a:c2:84:95:a7:dc:ed:db:3e: 5f:d6:09:f6:09:a6:21:9a:e0:de:b3:ac:b8:af:e4: 0e:08:e2:37:95:32:ef:fd:f5:26:05:7b:38:79:82: 75:5a:23:fb:b9:9b:bc:aa:e6:cf:af:f0:1a:35:e6: 1c:45:c3:13:81:c9:74:a5:c9:e8:a4:6f:2f:52:f1: 51:de:ce:1d:ef:08:5e:5e:60:de:36:e5:ce:09:ce: 08:0e:fb:26:c0:12:93:71:4a:e9:ac:3a:3d:c8:9e: 13:9f:a9:42:b3:ea:8b:b8:c8:47:c2:cd:26:fe:e0: 63:b2:9f:27:dc:36:f4:a9:7d:fe:e2:ce:0a:8a:7b: 24:ef:ce:34:0f:66:1b:6c:2f:44:32:b7:06:85:06: 7a:4c:82:a8:eb:c2:f7:7f:87:32:0a:39:99:8e:86: 1a:1f:86:c9:ee:1e:6d:48:90:3c:68:84:a5:dd:c4: f7:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:7E:6A:89:DE:2A:0B:FB:03:2A:D8:D7:0B:F3:40:DA:C1:B4:3D:EF X509v3 Authority Key Identifier: keyid:99:44:F8:12:A0:E0:02:C3:8E:84:E4:76:28:BD:BA:03:85:98:09:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mUT4EqDgAsOOhOR2KL26A4WYCQs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/3c6cb5-a72c-4701-ae6c-306c5651343e/1/mUT4EqDgAsOOhOR2KL26A4WYCQs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/97/3c6cb5-a72c-4701-ae6c-306c5651343e/1/mUT4EqDgAsOOhOR2KL26A4WYCQs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:c4:f6:b1:c3:ee:98:00:96:6e:c4:43:28:0f:24:86:ab:3f: 81:2d:71:bd:23:13:25:45:fc:f7:2f:b2:9b:29:b6:e0:e5:a7: f7:e5:6e:c2:d5:e8:80:1c:37:cc:5a:5a:81:a4:ef:6d:3c:70: bd:78:42:7d:59:4c:6e:1d:e2:a9:c8:86:70:3d:39:9e:27:a2: b9:ce:7d:25:50:43:29:87:25:ae:86:12:13:b2:9c:04:96:9b: b8:98:78:4b:7f:24:63:17:aa:dd:9d:41:01:8b:84:fd:93:a3: a6:fb:5b:95:28:b6:3a:ae:0c:80:fd:dd:4f:c1:a9:0e:1b:f0: 2b:59:02:29:1b:be:be:02:3b:f5:04:96:60:20:dd:ee:d0:a1: 3a:6c:c7:9d:34:24:82:9d:47:ce:8b:59:34:1a:93:ac:12:7f: 8c:c9:02:71:8d:d1:00:ef:c4:6e:9b:7b:00:85:7b:bb:97:e1: e7:07:39:67:a3:9a:ff:cc:96:3d:8c:57:95:63:73:01:8a:a7: 20:43:1d:bf:cf:d4:5d:a7:e2:d2:e1:6f:4b:d5:48:a6:76:18: b0:20:70:5f:46:1d:b6:39:57:30:ae:dd:e8:d0:2d:b2:f5:66: 8c:75:e2:23:70:88:07:d0:e3:1e:e7:e9:ca:b8:ac:fa:9d:b8: c7:1a:c8:27 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZ42OOht1wW191QeA/AFcfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk5NDRmODEyYTBlMDAyYzM4ZTg0ZTQ3NjI4YmRiYTAzODU5 ODA5MGIwHhcNMjUxMjI2MDkwMDMyWhcNMjUxMjI3MDkwMDMyWjAzMTEwLwYDVQQD EyhhMTdlNmE4OWRlMmEwYmZiMDMyYWQ4ZDcwYmYzNDBkYWMxYjQzZGVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3KtlUO4ZewQ9Dv7Vg+3WHp38D4kd cHeMlIMmywxyts118Ttmk3Exj1N9LzekuVp8vAOQL4/khe1GYCiec40XrJYKEx/a z0jbcLRX2caeda06woSVp9zt2z5f1gn2CaYhmuDes6y4r+QOCOI3lTLv/fUmBXs4 eYJ1WiP7uZu8qubPr/AaNeYcRcMTgcl0pcnopG8vUvFR3s4d7wheXmDeNuXOCc4I DvsmwBKTcUrprDo9yJ4Tn6lCs+qLuMhHws0m/uBjsp8n3Db0qX3+4s4Kinsk7840 D2YbbC9EMrcGhQZ6TIKo68L3f4cyCjmZjoYaH4bJ7h5tSJA8aISl3cT3OQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKF+aoneKgv7AyrY1wvzQNrBtD3vMB8GA1UdIwQY MBaAFJlE+BKg4ALDjoTkdii9ugOFmAkLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbVVUNEVxRGdBc09PaE9SMktMMjZBNFdZQ1FzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny8zYzZjYjUtYTcyYy00NzAxLWFlNmMt MzA2YzU2NTEzNDNlLzEvbVVUNEVxRGdBc09PaE9SMktMMjZBNFdZQ1FzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ny8zYzZjYjUtYTcyYy00NzAxLWFlNmMtMzA2YzU2NTEzNDNl LzEvbVVUNEVxRGdBc09PaE9SMktMMjZBNFdZQ1FzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACMT2scPu mACWbsRDKA8khqs/gS1xvSMTJUX89y+ymym24OWn9+VuwtXogBw3zFpagaTvbTxw vXhCfVlMbh3iqciGcD05nieiuc59JVBDKYclroYSE7KcBJabuJh4S38kYxeq3Z1B AYuE/ZOjpvtblSi2Oq4MgP3dT8GpDhvwK1kCKRu+vgI79QSWYCDd7tChOmzHnTQk gp1HzotZNBqTrBJ/jMkCcY3RAO/Ebpt7AIV7u5fh5wc5Z6Oa/8yWPYxXlWNzAYqn IEMdv8/UXafi0uFvS9VIpnYYsCBwX0YdtjlXMK7d6NAtsvVmjHXiI3CIB9DjHufp yris+p24xxrIJw== -----END CERTIFICATE-----Generated at Fri Dec 26 14:17:20 2025 by rpki-client