This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/5908a9-0c0f-40ab-bfd6-69af0a6e989b/1/mBGGh_3W_4D7CYqe7vBt43f4XW4.mft File: mBGGh_3W_4D7CYqe7vBt43f4XW4.mft (raw, json) Hash identifier: ICAyxF9OT8wiYJqcQnAoDICiciqVCDWXX1wqVeLbgps= Subject key identifier: B8:FF:15:36:B9:D8:4A:B8:82:0E:CF:4B:AB:8B:6F:5C:FB:7F:18:08 Authority key identifier: 98:11:86:87:FD:D6:FF:80:FB:09:8A:9E:EE:F0:6D:E3:77:F8:5D:6E Certificate issuer: /CN=98118687fdd6ff80fb098a9eeef06de377f85d6e Certificate serial: 019B342025D01C22A00070DBC151E98FEF83 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mBGGh_3W_4D7CYqe7vBt43f4XW4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/5908a9-0c0f-40ab-bfd6-69af0a6e989b/1/mBGGh_3W_4D7CYqe7vBt43f4XW4.mft Manifest number: 0CDE Signing time: Fri 19 Dec 2025 01:01:20 +0000 Manifest this update: Fri 19 Dec 2025 01:01:20 +0000 Manifest next update: Sat 20 Dec 2025 01:01:20 +0000 Files and hashes: 1: 1lsllJIGemqZ89xHiZQkdlO1fKw.roa (hash: z+LS30vNnG/3Pd/eJpUiR3agQpnmviOChE1etXIcdSc=) 2: 3lXi1_g77NKzjT3HhPoXoOvjf4w.roa (hash: Ay8Ub8kwHojvnn8g9zm4+05FafWEgsI4HELIX5EKY7A=) 3: mBGGh_3W_4D7CYqe7vBt43f4XW4.crl (hash: vLXjz7sym/85b9Npj8ePZ6oHFQBPa5KRaj1UleDXbJQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/5908a9-0c0f-40ab-bfd6-69af0a6e989b/1/mBGGh_3W_4D7CYqe7vBt43f4XW4.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/5908a9-0c0f-40ab-bfd6-69af0a6e989b/1/mBGGh_3W_4D7CYqe7vBt43f4XW4.mft rsync://rpki.ripe.net/repository/DEFAULT/mBGGh_3W_4D7CYqe7vBt43f4XW4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 01:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:20:25:d0:1c:22:a0:00:70:db:c1:51:e9:8f:ef:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98118687fdd6ff80fb098a9eeef06de377f85d6e Validity Not Before: Dec 19 01:01:20 2025 GMT Not After : Dec 20 01:01:20 2025 GMT Subject: CN=b8ff1536b9d84ab8820ecf4bab8b6f5cfb7f1808 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:97:fb:c4:cd:81:f9:9f:0d:c1:cf:7e:f9:dd: ab:f7:0a:1e:64:4f:f3:8a:93:4d:c2:ae:4a:98:6d: e7:aa:ca:fc:82:cd:2d:0b:5d:ef:3f:47:45:0b:7e: 7d:99:34:f6:48:55:f4:c7:82:84:b0:1e:72:60:96: 94:39:04:b4:cc:64:f3:9b:8a:b9:56:95:b2:bb:82: 69:59:d4:9d:04:05:08:99:83:32:58:6b:ac:f1:09: 46:07:85:32:bd:78:6e:6d:c0:3c:4a:67:3e:b3:14: ee:79:6c:a9:86:d6:4e:48:bc:13:1f:ba:22:14:ef: c6:01:2b:ed:de:30:39:38:c5:c2:9c:b9:d7:3b:e5: 15:6b:aa:49:09:49:d7:9b:86:c6:c7:38:2f:3e:d4: 1b:c8:e8:0c:97:fa:4f:91:95:3d:64:f0:93:76:bc: e8:4a:d0:a5:a2:f2:47:35:34:de:5c:78:64:92:a1: 6c:18:f9:1c:b4:c0:1b:eb:45:ef:b6:b8:f0:dc:e3: 99:59:ee:49:85:c2:8a:b8:d3:44:4f:5b:0e:9c:93: cc:c6:51:55:52:de:d2:d0:1e:1e:f9:20:cc:4d:5d: a1:5e:0a:6a:a2:6c:c3:11:5c:92:c4:64:1c:d2:24: e8:8a:28:18:41:56:92:38:05:1f:cb:e5:fc:ac:48: 7c:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:FF:15:36:B9:D8:4A:B8:82:0E:CF:4B:AB:8B:6F:5C:FB:7F:18:08 X509v3 Authority Key Identifier: keyid:98:11:86:87:FD:D6:FF:80:FB:09:8A:9E:EE:F0:6D:E3:77:F8:5D:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mBGGh_3W_4D7CYqe7vBt43f4XW4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/5908a9-0c0f-40ab-bfd6-69af0a6e989b/1/mBGGh_3W_4D7CYqe7vBt43f4XW4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/5908a9-0c0f-40ab-bfd6-69af0a6e989b/1/mBGGh_3W_4D7CYqe7vBt43f4XW4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:5e:57:20:ac:b5:c3:e5:6b:d3:ce:7b:82:cb:2d:1a:a5:46: a5:38:8f:fa:4a:76:46:5f:83:fc:3a:17:2c:b4:48:01:fe:91: 89:19:b6:18:68:65:20:3b:ef:8f:15:d0:18:7d:f3:4e:b5:b2: 8f:b6:1b:02:63:40:48:91:46:5f:83:d4:57:fb:fe:d3:8a:00: ff:ff:be:b5:d9:52:1a:d8:97:16:c0:60:0c:b3:f6:4f:6a:ee: 18:93:46:9c:5c:25:53:08:71:9c:72:2d:db:ee:1e:78:ee:0e: 60:2d:9e:10:24:d0:30:13:ef:09:68:fc:9f:7c:cc:d7:d0:27: 63:87:65:1e:ac:5e:e6:8f:95:f2:06:0c:c2:e4:b1:e3:b3:a0: ca:5a:f7:39:54:fc:d7:c0:e2:14:cf:df:4c:12:40:ad:8d:06: 57:ec:a5:32:36:30:96:81:d9:4d:e4:75:95:ab:ba:87:ea:c0: ec:ee:d6:ab:e5:45:44:1d:5b:0b:7e:f4:51:da:17:c4:31:1f: 7a:8a:b1:bc:0b:89:99:07:68:dd:6e:08:19:e9:31:9f:d9:d8: 82:00:c8:0d:a4:30:ed:5f:58:aa:f0:3c:3a:77:2f:fc:56:0e: 44:2e:8b:39:cc:a5:10:85:aa:c1:1a:dc:15:d4:a7:23:f1:01: f4:40:ce:ab -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0ICXQHCKgAHDbwVHpj++DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk4MTE4Njg3ZmRkNmZmODBmYjA5OGE5ZWVlZjA2ZGUzNzdm ODVkNmUwHhcNMjUxMjE5MDEwMTIwWhcNMjUxMjIwMDEwMTIwWjAzMTEwLwYDVQQD EyhiOGZmMTUzNmI5ZDg0YWI4ODIwZWNmNGJhYjhiNmY1Y2ZiN2YxODA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqJf7xM2B+Z8Nwc9++d2r9woeZE/z ipNNwq5KmG3nqsr8gs0tC13vP0dFC359mTT2SFX0x4KEsB5yYJaUOQS0zGTzm4q5 VpWyu4JpWdSdBAUImYMyWGus8QlGB4UyvXhubcA8Smc+sxTueWyphtZOSLwTH7oi FO/GASvt3jA5OMXCnLnXO+UVa6pJCUnXm4bGxzgvPtQbyOgMl/pPkZU9ZPCTdrzo StClovJHNTTeXHhkkqFsGPkctMAb60Xvtrjw3OOZWe5JhcKKuNNET1sOnJPMxlFV Ut7S0B4e+SDMTV2hXgpqomzDEVySxGQc0iToiigYQVaSOAUfy+X8rEh8YwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLj/FTa52Eq4gg7PS6uLb1z7fxgIMB8GA1UdIwQY MBaAFJgRhof91v+A+wmKnu7wbeN3+F1uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbUJHR2hfM1dfNEQ3Q1lxZTd2QnQ0M2Y0WFc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy81OTA4YTktMGMwZi00MGFiLWJmZDYt NjlhZjBhNmU5ODliLzEvbUJHR2hfM1dfNEQ3Q1lxZTd2QnQ0M2Y0WFc0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy81OTA4YTktMGMwZi00MGFiLWJmZDYtNjlhZjBhNmU5ODli LzEvbUJHR2hfM1dfNEQ3Q1lxZTd2QnQ0M2Y0WFc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAl5XIKy1 w+Vr0857gsstGqVGpTiP+kp2Rl+D/DoXLLRIAf6RiRm2GGhlIDvvjxXQGH3zTrWy j7YbAmNASJFGX4PUV/v+04oA//++tdlSGtiXFsBgDLP2T2ruGJNGnFwlUwhxnHIt 2+4eeO4OYC2eECTQMBPvCWj8n3zM19AnY4dlHqxe5o+V8gYMwuSx47Ogylr3OVT8 18DiFM/fTBJArY0GV+ylMjYwloHZTeR1lau6h+rA7O7Wq+VFRB1bC370UdoXxDEf eoqxvAuJmQdo3W4IGekxn9nYggDIDaQw7V9YqvA8Oncv/FYORC6LOcylEIWqwRrc FdSnI/EB9EDOqw== -----END CERTIFICATE-----Generated at Fri Dec 19 08:16:19 2025 by rpki-client