This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/4f8c2d-ec40-4d3c-8426-b75ef563720c/1/mTfH9VuM8OdKXeCQMprZtyjGrXc.mft File: mTfH9VuM8OdKXeCQMprZtyjGrXc.mft (raw, json) Hash identifier: IxfjUywAmkWFbz1Wk46hhlQrNJI3tYyFBdk/slTmfoM= Subject key identifier: 6F:C3:4C:07:39:A7:02:83:A6:39:22:83:78:C5:42:C0:0B:ED:F3:BC Authority key identifier: 99:37:C7:F5:5B:8C:F0:E7:4A:5D:E0:90:32:9A:D9:B7:28:C6:AD:77 Certificate issuer: /CN=9937c7f55b8cf0e74a5de090329ad9b728c6ad77 Certificate serial: 019B34C634B51F8E6964E67BA3BACB8FF422 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mTfH9VuM8OdKXeCQMprZtyjGrXc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/4f8c2d-ec40-4d3c-8426-b75ef563720c/1/mTfH9VuM8OdKXeCQMprZtyjGrXc.mft Manifest number: 1786 Signing time: Fri 19 Dec 2025 04:02:43 +0000 Manifest this update: Fri 19 Dec 2025 04:02:43 +0000 Manifest next update: Sat 20 Dec 2025 04:02:43 +0000 Files and hashes: 1: QDRodL1Ij0kvPV6RatQCpAs4M7Q.roa (hash: 8yQMKLh2R6BvydYUR3v0EXrX6Bu8MKleBRx4SEEyIAM=) 2: mTfH9VuM8OdKXeCQMprZtyjGrXc.crl (hash: 2VS7jdZsz8Ffr03f4BpUvBccinmoSm8OxbyPhW2ZMvw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/4f8c2d-ec40-4d3c-8426-b75ef563720c/1/mTfH9VuM8OdKXeCQMprZtyjGrXc.crl rsync://rpki.ripe.net/repository/DEFAULT/99/4f8c2d-ec40-4d3c-8426-b75ef563720c/1/mTfH9VuM8OdKXeCQMprZtyjGrXc.mft rsync://rpki.ripe.net/repository/DEFAULT/mTfH9VuM8OdKXeCQMprZtyjGrXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 04:02:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:c6:34:b5:1f:8e:69:64:e6:7b:a3:ba:cb:8f:f4:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9937c7f55b8cf0e74a5de090329ad9b728c6ad77 Validity Not Before: Dec 19 04:02:43 2025 GMT Not After : Dec 20 04:02:43 2025 GMT Subject: CN=6fc34c0739a70283a639228378c542c00bedf3bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:83:fa:3d:5c:0e:53:26:f9:de:6e:40:ec:e9: 90:f2:64:69:24:cc:14:8a:3f:63:6a:62:cd:3f:e0: 26:4b:18:93:e0:a1:0a:13:b1:6f:58:82:a2:c7:4c: da:3a:e6:81:81:d1:22:60:5f:53:74:8a:4e:1d:f8: 1d:ea:05:63:29:8f:68:ef:92:40:a5:28:30:1e:93: 9c:58:9b:22:24:30:75:c5:40:ca:cb:22:a8:e5:68: a1:40:f2:1b:c9:32:50:5f:cd:9e:17:0b:12:68:41: b9:97:2b:ed:3b:60:1a:6a:c3:8a:11:ef:fe:57:57: 8b:a5:f6:4d:b7:e3:cd:6c:39:94:b4:28:44:52:c2: 25:bf:e1:0e:b7:a1:ad:9e:2f:b5:88:f8:46:9b:42: 97:6e:c4:d7:89:94:ad:4f:3d:5b:88:f9:03:bb:34: 45:fc:fc:8a:c8:25:85:c1:2d:8f:3c:31:9e:94:5a: f0:f3:ce:5f:2e:52:67:7f:bb:2a:5e:c6:b5:56:99: 38:57:c7:0f:93:fd:cd:c6:8c:58:d7:41:bb:82:c2: 7b:36:c9:51:d2:23:19:5a:b3:20:0b:a7:69:42:63: 56:98:c8:13:e4:25:7d:81:09:94:d7:35:d7:53:9c: 70:ca:19:a8:f9:26:06:b1:dd:af:f3:2b:88:78:9d: 92:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:C3:4C:07:39:A7:02:83:A6:39:22:83:78:C5:42:C0:0B:ED:F3:BC X509v3 Authority Key Identifier: keyid:99:37:C7:F5:5B:8C:F0:E7:4A:5D:E0:90:32:9A:D9:B7:28:C6:AD:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mTfH9VuM8OdKXeCQMprZtyjGrXc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/4f8c2d-ec40-4d3c-8426-b75ef563720c/1/mTfH9VuM8OdKXeCQMprZtyjGrXc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/99/4f8c2d-ec40-4d3c-8426-b75ef563720c/1/mTfH9VuM8OdKXeCQMprZtyjGrXc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:67:2a:a4:c9:67:f7:a2:3c:23:14:a0:4e:c2:f9:65:d4:f9: d5:db:14:7a:fb:7e:3c:6c:bd:8e:a6:5f:79:0a:7b:77:c4:c1: 2c:50:58:c7:57:62:28:8e:cc:91:e6:de:e4:36:d0:aa:e4:f9: d1:58:9e:a7:06:c2:2b:a8:72:5a:3d:cc:41:60:6f:51:38:16: b5:d1:26:a6:dc:37:fc:aa:a4:a3:64:dd:ba:af:88:da:79:a3: 81:0b:74:16:9a:d4:ca:b9:11:d8:fe:df:20:87:92:f5:39:ce: d8:7b:6d:f9:4b:40:ef:64:bf:2a:1a:0a:4f:bf:33:e0:b3:52: 3c:66:1d:97:6d:b1:e9:0b:02:07:73:e1:3e:c1:04:75:51:ca: 14:19:56:38:c7:f2:57:12:1e:3b:83:01:0b:0a:aa:50:15:99: 04:3b:9a:c8:7a:f8:0b:c7:e1:4b:24:4c:f2:cb:5d:1a:68:fe: 6d:ca:7b:b1:81:a1:08:09:1e:dd:9b:ee:df:f9:41:7d:0a:dd: 5b:16:df:5c:5a:c2:0b:d5:b1:53:58:43:2a:23:b7:21:dc:93: 73:a2:38:04:57:45:72:97:8b:1a:7f:e8:33:7b:c2:6f:47:77: d2:5f:c1:72:3b:02:c6:07:00:43:a5:26:0c:73:cf:73:f1:bb: ea:89:e7:3c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0xjS1H45pZOZ7o7rLj/QiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk5MzdjN2Y1NWI4Y2YwZTc0YTVkZTA5MDMyOWFkOWI3Mjhj NmFkNzcwHhcNMjUxMjE5MDQwMjQzWhcNMjUxMjIwMDQwMjQzWjAzMTEwLwYDVQQD Eyg2ZmMzNGMwNzM5YTcwMjgzYTYzOTIyODM3OGM1NDJjMDBiZWRmM2JjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqIP6PVwOUyb53m5A7OmQ8mRpJMwU ij9jamLNP+AmSxiT4KEKE7FvWIKix0zaOuaBgdEiYF9TdIpOHfgd6gVjKY9o75JA pSgwHpOcWJsiJDB1xUDKyyKo5WihQPIbyTJQX82eFwsSaEG5lyvtO2AaasOKEe/+ V1eLpfZNt+PNbDmUtChEUsIlv+EOt6Gtni+1iPhGm0KXbsTXiZStTz1biPkDuzRF /PyKyCWFwS2PPDGelFrw885fLlJnf7sqXsa1Vpk4V8cPk/3NxoxY10G7gsJ7NslR 0iMZWrMgC6dpQmNWmMgT5CV9gQmU1zXXU5xwyhmo+SYGsd2v8yuIeJ2SfQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG/DTAc5pwKDpjkig3jFQsAL7fO8MB8GA1UdIwQY MBaAFJk3x/VbjPDnSl3gkDKa2bcoxq13MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbVRmSDlWdU04T2RLWGVDUU1wclp0eWpHclhjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS80ZjhjMmQtZWM0MC00ZDNjLTg0MjYt Yjc1ZWY1NjM3MjBjLzEvbVRmSDlWdU04T2RLWGVDUU1wclp0eWpHclhjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OS80ZjhjMmQtZWM0MC00ZDNjLTg0MjYtYjc1ZWY1NjM3MjBj LzEvbVRmSDlWdU04T2RLWGVDUU1wclp0eWpHclhjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkmcqpMln 96I8IxSgTsL5ZdT51dsUevt+PGy9jqZfeQp7d8TBLFBYx1diKI7Mkebe5DbQquT5 0ViepwbCK6hyWj3MQWBvUTgWtdEmptw3/Kqko2Tduq+I2nmjgQt0FprUyrkR2P7f IIeS9TnO2Htt+UtA72S/KhoKT78z4LNSPGYdl22x6QsCB3PhPsEEdVHKFBlWOMfy VxIeO4MBCwqqUBWZBDuayHr4C8fhSyRM8stdGmj+bcp7sYGhCAke3Zvu3/lBfQrd WxbfXFrCC9WxU1hDKiO3IdyTc6I4BFdFcpeLGn/oM3vCb0d30l/BcjsCxgcAQ6Um DHPPc/G76onnPA== -----END CERTIFICATE-----Generated at Fri Dec 19 10:53:51 2025 by rpki-client