This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/269363-b35f-422c-b076-93f486b8b961/1/mpGNfRgPNudlEqQWEaCyiotAxS4.mft File: mpGNfRgPNudlEqQWEaCyiotAxS4.mft (raw, json) Hash identifier: flrvJrESUO/ygUpO5LflGVpE2CY8LHf60LUBiQpX5AU= Subject key identifier: 61:6C:42:B3:30:AC:C8:F0:0F:76:65:32:33:29:6A:1E:F1:2F:EF:81 Authority key identifier: 9A:91:8D:7D:18:0F:36:E7:65:12:A4:16:11:A0:B2:8A:8B:40:C5:2E Certificate issuer: /CN=9a918d7d180f36e76512a41611a0b28a8b40c52e Certificate serial: 019B2174CE45865F80CDA0A0E2B12DD7680B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mpGNfRgPNudlEqQWEaCyiotAxS4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/269363-b35f-422c-b076-93f486b8b961/1/mpGNfRgPNudlEqQWEaCyiotAxS4.mft Manifest number: 1175 Signing time: Mon 15 Dec 2025 10:01:01 +0000 Manifest this update: Mon 15 Dec 2025 10:01:01 +0000 Manifest next update: Tue 16 Dec 2025 10:01:01 +0000 Files and hashes: 1: NEqj8BvBPOtkH45qzmLazZkmCpA.roa (hash: 1CSuBVjeUix6GCeWhV3QFu5H8gx07d5za8DUe8nOaxY=) 2: mpGNfRgPNudlEqQWEaCyiotAxS4.crl (hash: ddeIukr008QgKLp5My1q7tG7/bLfoVOKWQQ67BDtGhs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/269363-b35f-422c-b076-93f486b8b961/1/mpGNfRgPNudlEqQWEaCyiotAxS4.crl rsync://rpki.ripe.net/repository/DEFAULT/9e/269363-b35f-422c-b076-93f486b8b961/1/mpGNfRgPNudlEqQWEaCyiotAxS4.mft rsync://rpki.ripe.net/repository/DEFAULT/mpGNfRgPNudlEqQWEaCyiotAxS4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 08:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:21:74:ce:45:86:5f:80:cd:a0:a0:e2:b1:2d:d7:68:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a918d7d180f36e76512a41611a0b28a8b40c52e Validity Not Before: Dec 15 10:01:01 2025 GMT Not After : Dec 16 10:01:01 2025 GMT Subject: CN=616c42b330acc8f00f76653233296a1ef12fef81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:3e:1c:11:f9:af:3d:86:ba:30:cf:75:84:ab: 0a:0b:c5:de:0c:99:7a:94:dc:23:90:28:94:b2:49: 3f:63:e2:88:81:c4:75:fc:b5:f7:11:35:6b:d1:9e: 2f:e8:41:3b:04:93:ac:63:71:e6:b6:45:18:80:00: bc:03:73:8b:fb:b6:f7:7e:c1:91:7c:6d:e1:be:f6: c7:79:57:db:79:43:8a:e7:fe:0f:88:f2:89:f8:8b: ef:bf:e7:41:0d:7d:b9:8d:e6:c5:34:1e:b1:6a:f6: b7:b0:06:6c:89:17:56:4e:7c:a0:f2:3a:fc:e0:6a: 35:20:00:71:18:e1:89:0c:7a:51:32:ca:ae:d2:7b: aa:7e:ac:75:76:06:66:1e:a7:e2:9c:db:64:5c:b1: 8c:93:c2:23:a5:05:44:9d:f4:8b:9c:02:77:c5:91: 6e:fa:28:2c:67:bf:e2:f6:d5:51:03:7c:31:64:69: 17:a6:8d:78:9c:dd:e5:2f:72:9a:23:b0:2c:4d:56: b1:7c:c3:6d:54:9b:aa:43:ba:1a:81:44:7d:91:99: bb:9e:5f:51:b1:03:50:a5:2c:d2:25:d5:b1:15:0d: e3:fb:89:ec:d2:cf:bb:15:88:4a:5a:97:a3:20:c0: 34:8e:a9:f1:88:3a:d8:dd:b9:f6:f5:da:76:60:26: a7:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:6C:42:B3:30:AC:C8:F0:0F:76:65:32:33:29:6A:1E:F1:2F:EF:81 X509v3 Authority Key Identifier: keyid:9A:91:8D:7D:18:0F:36:E7:65:12:A4:16:11:A0:B2:8A:8B:40:C5:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mpGNfRgPNudlEqQWEaCyiotAxS4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/269363-b35f-422c-b076-93f486b8b961/1/mpGNfRgPNudlEqQWEaCyiotAxS4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/269363-b35f-422c-b076-93f486b8b961/1/mpGNfRgPNudlEqQWEaCyiotAxS4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:e8:87:17:0c:2e:9a:54:81:c3:9c:10:d8:37:fa:93:25:65: d3:08:f4:7a:26:31:fa:a7:dc:ba:79:05:71:9d:4a:5b:5a:23: 33:6d:43:00:7d:be:5e:f1:9d:71:5b:eb:ea:3f:81:66:41:00: 8d:fe:a4:e3:dd:43:64:ec:99:12:3e:0f:7c:0b:39:23:bb:e1: bf:6b:8c:1e:6a:5f:f9:a3:95:ac:67:cd:6c:80:d0:a9:56:af: 35:57:65:24:44:3f:ee:2d:b6:96:f2:2e:cf:95:12:18:4f:c7: 20:88:2b:f6:3b:fb:9c:23:15:5e:44:24:7f:97:e9:50:2e:63: d4:26:fc:c0:19:7d:2b:89:75:91:14:a0:96:7c:a3:30:4d:57: 93:15:6b:49:a0:ea:c0:3e:95:8a:4e:46:c5:bd:7a:a1:98:53: 70:77:7c:c0:64:b1:23:0a:9e:67:aa:a8:fd:04:e7:8d:f1:76: 2e:3a:f1:91:46:84:28:46:2b:df:00:de:61:fb:9a:1c:48:d3: f0:4e:63:64:ea:22:0a:61:88:aa:61:93:25:bd:54:d6:93:49: 85:87:8c:0e:e2:67:9f:d4:fe:a6:a1:50:f7:51:4d:d5:a0:13: 02:99:b6:ee:b8:d2:5f:b8:9f:86:35:4c:88:15:ab:24:0a:bc: ed:1b:7a:9f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZshdM5Fhl+AzaCg4rEt12gLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhOTE4ZDdkMTgwZjM2ZTc2NTEyYTQxNjExYTBiMjhhOGI0 MGM1MmUwHhcNMjUxMjE1MTAwMTAxWhcNMjUxMjE2MTAwMTAxWjAzMTEwLwYDVQQD Eyg2MTZjNDJiMzMwYWNjOGYwMGY3NjY1MzIzMzI5NmExZWYxMmZlZjgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApz4cEfmvPYa6MM91hKsKC8XeDJl6 lNwjkCiUskk/Y+KIgcR1/LX3ETVr0Z4v6EE7BJOsY3HmtkUYgAC8A3OL+7b3fsGR fG3hvvbHeVfbeUOK5/4PiPKJ+Ivvv+dBDX25jebFNB6xava3sAZsiRdWTnyg8jr8 4Go1IABxGOGJDHpRMsqu0nuqfqx1dgZmHqfinNtkXLGMk8IjpQVEnfSLnAJ3xZFu +igsZ7/i9tVRA3wxZGkXpo14nN3lL3KaI7AsTVaxfMNtVJuqQ7oagUR9kZm7nl9R sQNQpSzSJdWxFQ3j+4ns0s+7FYhKWpejIMA0jqnxiDrY3bn29dp2YCanLwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGFsQrMwrMjwD3ZlMjMpah7xL++BMB8GA1UdIwQY MBaAFJqRjX0YDzbnZRKkFhGgsoqLQMUuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbXBHTmZSZ1BOdWRsRXFRV0VhQ3lpb3RBeFM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS8yNjkzNjMtYjM1Zi00MjJjLWIwNzYt OTNmNDg2YjhiOTYxLzEvbXBHTmZSZ1BOdWRsRXFRV0VhQ3lpb3RBeFM0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZS8yNjkzNjMtYjM1Zi00MjJjLWIwNzYtOTNmNDg2YjhiOTYx LzEvbXBHTmZSZ1BOdWRsRXFRV0VhQ3lpb3RBeFM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAieiHFwwu mlSBw5wQ2Df6kyVl0wj0eiYx+qfcunkFcZ1KW1ojM21DAH2+XvGdcVvr6j+BZkEA jf6k491DZOyZEj4PfAs5I7vhv2uMHmpf+aOVrGfNbIDQqVavNVdlJEQ/7i22lvIu z5USGE/HIIgr9jv7nCMVXkQkf5fpUC5j1Cb8wBl9K4l1kRSglnyjME1XkxVrSaDq wD6Vik5Gxb16oZhTcHd8wGSxIwqeZ6qo/QTnjfF2LjrxkUaEKEYr3wDeYfuaHEjT 8E5jZOoiCmGIqmGTJb1U1pNJhYeMDuJnn9T+pqFQ91FN1aATApm27rjSX7ifhjVM iBWrJAq87Rt6nw== -----END CERTIFICATE-----Generated at Mon Dec 15 14:40:22 2025 by rpki-client