This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/3e3b17-84c9-4472-bd33-12674e661e13/1/mJB4Bt2stIQwvdAlSJgBnkE6K94.mft File: mJB4Bt2stIQwvdAlSJgBnkE6K94.mft (raw, json) Hash identifier: ylrVu8F4jFWfujwek6H9MdBv/j0tfKDn39aJ6uJ2FGU= Subject key identifier: 46:77:AF:14:27:DB:0D:92:96:89:E1:EB:E8:BA:F4:E3:10:F5:CC:71 Authority key identifier: 98:90:78:06:DD:AC:B4:84:30:BD:D0:25:48:98:01:9E:41:3A:2B:DE Certificate issuer: /CN=98907806ddacb48430bdd0254898019e413a2bde Certificate serial: 019B0E24DFB30D9DB75277E9AF325D7D96B7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mJB4Bt2stIQwvdAlSJgBnkE6K94.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/3e3b17-84c9-4472-bd33-12674e661e13/1/mJB4Bt2stIQwvdAlSJgBnkE6K94.mft Manifest number: 0E56 Signing time: Thu 11 Dec 2025 16:00:56 +0000 Manifest this update: Thu 11 Dec 2025 16:00:56 +0000 Manifest next update: Fri 12 Dec 2025 16:00:56 +0000 Files and hashes: 1: acpHH_CaNcRdqw7JD1HuBSlb_jE.roa (hash: Wxjj/iVVVmCvZCfA0I7IDXleX19TKp07yCUTpeGLxQk=) 2: mJB4Bt2stIQwvdAlSJgBnkE6K94.crl (hash: ingbP91Ski1fCoBg2r+DvmJDOP+tUkEwIo2Lb8dHQgY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/3e3b17-84c9-4472-bd33-12674e661e13/1/mJB4Bt2stIQwvdAlSJgBnkE6K94.crl rsync://rpki.ripe.net/repository/DEFAULT/98/3e3b17-84c9-4472-bd33-12674e661e13/1/mJB4Bt2stIQwvdAlSJgBnkE6K94.mft rsync://rpki.ripe.net/repository/DEFAULT/mJB4Bt2stIQwvdAlSJgBnkE6K94.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:24:df:b3:0d:9d:b7:52:77:e9:af:32:5d:7d:96:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98907806ddacb48430bdd0254898019e413a2bde Validity Not Before: Dec 11 16:00:56 2025 GMT Not After : Dec 12 16:00:56 2025 GMT Subject: CN=4677af1427db0d929689e1ebe8baf4e310f5cc71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:18:ab:9e:f9:46:cc:0d:ba:21:49:a1:b1:d8: a9:d9:9b:6b:cf:ef:a0:34:2b:e8:4e:28:3d:6d:26: 16:8b:f7:ac:b0:ad:68:f1:eb:3e:07:ca:0c:24:20: 40:21:72:03:01:77:84:1c:b9:bf:cd:ac:b9:e9:5a: 6d:4e:03:b6:bc:db:61:1e:61:f0:5a:f7:fc:0f:4f: 3b:d9:2d:e5:02:dd:6a:32:f3:a7:5d:fb:3b:df:d5: 8d:a5:1f:67:2a:a7:be:2c:6c:ef:52:02:fa:5b:97: d3:d4:0d:24:c2:f7:24:c4:3d:2a:e3:6c:b3:78:a5: 61:6f:60:c7:8c:81:99:dc:33:82:0c:63:ae:d3:62: e9:fa:59:cf:d4:31:10:e1:10:03:9d:bd:3f:32:a4: 68:b4:05:04:61:0f:d5:ca:2a:be:91:1e:83:f0:3c: e7:d7:7b:52:73:f4:49:0f:75:9a:d4:f9:1c:6a:14: 1e:c6:fc:9a:e9:a7:a2:75:6b:61:98:d1:88:b3:9e: 24:69:95:a3:64:55:00:77:2f:1f:a2:ce:65:0d:67: 6e:32:fc:c2:a8:70:f4:82:e9:d2:e3:ee:c7:aa:d6: 0c:ac:2c:1a:07:e3:49:be:ed:42:53:66:a6:63:9e: b2:61:ef:13:ef:d0:31:7d:5c:4d:bb:6b:f9:4c:9b: 1e:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:77:AF:14:27:DB:0D:92:96:89:E1:EB:E8:BA:F4:E3:10:F5:CC:71 X509v3 Authority Key Identifier: keyid:98:90:78:06:DD:AC:B4:84:30:BD:D0:25:48:98:01:9E:41:3A:2B:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mJB4Bt2stIQwvdAlSJgBnkE6K94.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/3e3b17-84c9-4472-bd33-12674e661e13/1/mJB4Bt2stIQwvdAlSJgBnkE6K94.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/98/3e3b17-84c9-4472-bd33-12674e661e13/1/mJB4Bt2stIQwvdAlSJgBnkE6K94.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:01:72:eb:59:f6:ef:71:80:4c:ce:c5:32:23:65:ff:c6:eb: d0:02:7e:be:92:5a:c0:6c:23:74:c4:c4:86:3b:45:02:9e:86: 64:28:d4:9c:db:df:08:90:32:9f:48:d1:8a:60:5b:be:55:26: 51:e1:10:36:43:df:96:88:ce:b9:5e:01:cc:32:dc:90:5f:fa: 74:54:97:6d:27:c1:9a:f4:b3:12:7e:33:31:37:3d:1b:18:0b: 98:3a:c3:2e:b7:d9:7c:f4:c3:bd:96:28:6c:e6:a0:19:2f:86: 8b:45:8c:19:c9:84:79:2b:6e:62:03:0c:82:6a:c2:3d:b0:be: 75:31:3d:af:f7:0e:b5:64:bf:66:3e:44:c2:e6:41:38:86:ff: 7d:10:10:6f:9f:66:89:df:73:69:2f:7b:1a:5d:04:ba:1d:2b: 59:a4:f2:52:22:f0:e1:c6:04:ca:63:5f:a5:ef:1f:a8:33:d5: 36:04:86:34:7d:b7:c6:a1:30:ce:c2:5f:54:12:1b:1a:0b:68: f8:50:be:a8:a1:3b:87:a8:58:48:e6:7a:65:4d:eb:0d:f0:00: 11:70:49:7a:b6:24:a7:33:e6:d1:99:eb:0c:11:4a:29:49:1f: a0:68:1f:01:c6:13:35:86:4f:d2:f2:d0:e1:f3:af:ca:a5:8e: 7c:eb:bf:db -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOJN+zDZ23UnfprzJdfZa3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk4OTA3ODA2ZGRhY2I0ODQzMGJkZDAyNTQ4OTgwMTllNDEz YTJiZGUwHhcNMjUxMjExMTYwMDU2WhcNMjUxMjEyMTYwMDU2WjAzMTEwLwYDVQQD Eyg0Njc3YWYxNDI3ZGIwZDkyOTY4OWUxZWJlOGJhZjRlMzEwZjVjYzcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArxirnvlGzA26IUmhsdip2Ztrz++g NCvoTig9bSYWi/essK1o8es+B8oMJCBAIXIDAXeEHLm/zay56VptTgO2vNthHmHw Wvf8D0872S3lAt1qMvOnXfs739WNpR9nKqe+LGzvUgL6W5fT1A0kwvckxD0q42yz eKVhb2DHjIGZ3DOCDGOu02Lp+lnP1DEQ4RADnb0/MqRotAUEYQ/Vyiq+kR6D8Dzn 13tSc/RJD3Wa1PkcahQexvya6aeidWthmNGIs54kaZWjZFUAdy8fos5lDWduMvzC qHD0gunS4+7HqtYMrCwaB+NJvu1CU2amY56yYe8T79AxfVxNu2v5TJseewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEZ3rxQn2w2Slonh6+i69OMQ9cxxMB8GA1UdIwQY MBaAFJiQeAbdrLSEML3QJUiYAZ5BOiveMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbUpCNEJ0MnN0SVF3dmRBbFNKZ0Jua0U2Szk0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC8zZTNiMTctODRjOS00NDcyLWJkMzMt MTI2NzRlNjYxZTEzLzEvbUpCNEJ0MnN0SVF3dmRBbFNKZ0Jua0U2Szk0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OC8zZTNiMTctODRjOS00NDcyLWJkMzMtMTI2NzRlNjYxZTEz LzEvbUpCNEJ0MnN0SVF3dmRBbFNKZ0Jua0U2Szk0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhQFy61n2 73GATM7FMiNl/8br0AJ+vpJawGwjdMTEhjtFAp6GZCjUnNvfCJAyn0jRimBbvlUm UeEQNkPflojOuV4BzDLckF/6dFSXbSfBmvSzEn4zMTc9GxgLmDrDLrfZfPTDvZYo bOagGS+Gi0WMGcmEeStuYgMMgmrCPbC+dTE9r/cOtWS/Zj5EwuZBOIb/fRAQb59m id9zaS97Gl0Euh0rWaTyUiLw4cYEymNfpe8fqDPVNgSGNH23xqEwzsJfVBIbGgto +FC+qKE7h6hYSOZ6ZU3rDfAAEXBJerYkpzPm0ZnrDBFKKUkfoGgfAcYTNYZP0vLQ 4fOvyqWOfOu/2w== -----END CERTIFICATE-----Generated at Fri Dec 12 00:36:49 2025 by rpki-client