This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/e20c95-0f92-4598-96df-cbc2797c1d0a/1/mJAcfP_Rmk_qePebEASZkmbcwiQ.mft File: mJAcfP_Rmk_qePebEASZkmbcwiQ.mft (raw, json) Hash identifier: LiCk3OuGx4i0r0AZ0SWeWlW7IFl4aTgqXT5GlIF8RVk= Subject key identifier: A2:09:3D:4D:2C:3E:8C:B6:34:16:92:00:1E:84:F3:11:79:CC:DE:10 Authority key identifier: 98:90:1C:7C:FF:D1:9A:4F:EA:78:F7:9B:10:04:99:92:66:DC:C2:24 Certificate issuer: /CN=98901c7cffd19a4fea78f79b1004999266dcc224 Certificate serial: 019B0F3743418AFE7F78BCC8276C79CD1E08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mJAcfP_Rmk_qePebEASZkmbcwiQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/e20c95-0f92-4598-96df-cbc2797c1d0a/1/mJAcfP_Rmk_qePebEASZkmbcwiQ.mft Manifest number: 1773 Signing time: Thu 11 Dec 2025 21:00:38 +0000 Manifest this update: Thu 11 Dec 2025 21:00:38 +0000 Manifest next update: Fri 12 Dec 2025 21:00:38 +0000 Files and hashes: 1: HGWBnpYX08vMWUwwLOMJq_k78S0.roa (hash: yttjunWIbX6dwAiOo7g6fUQGb+c1a+Xf5qmbeU/dnp4=) 2: XmFs6QZFMPRdJzopVIFXmV--Vrs.roa (hash: btfm0oGigPJzbc1bJybbkI9gWRtDv9TpTBsAYkeB30s=) 3: mJAcfP_Rmk_qePebEASZkmbcwiQ.crl (hash: 1BqARC1RsG+lDrGcXk0oQVRu1LwXA1jBXu6CygFoz3k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/e20c95-0f92-4598-96df-cbc2797c1d0a/1/mJAcfP_Rmk_qePebEASZkmbcwiQ.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/e20c95-0f92-4598-96df-cbc2797c1d0a/1/mJAcfP_Rmk_qePebEASZkmbcwiQ.mft rsync://rpki.ripe.net/repository/DEFAULT/mJAcfP_Rmk_qePebEASZkmbcwiQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:37:43:41:8a:fe:7f:78:bc:c8:27:6c:79:cd:1e:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98901c7cffd19a4fea78f79b1004999266dcc224 Validity Not Before: Dec 11 21:00:38 2025 GMT Not After : Dec 12 21:00:38 2025 GMT Subject: CN=a2093d4d2c3e8cb6341692001e84f31179ccde10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:ec:f0:63:b5:3a:ce:8a:d0:be:e2:83:b1:cf: 64:5b:d2:e8:e1:c2:71:b5:49:13:2f:71:9c:3a:c9: 54:72:01:da:e2:be:5d:9c:52:b3:54:bc:6e:36:5a: 50:0a:d9:20:31:4d:79:8c:3e:4e:36:a5:5a:67:7a: 30:a5:01:d6:49:ac:36:ba:94:b1:92:1b:07:b7:71: 95:38:be:c4:3c:c0:55:d1:03:0a:df:9f:6f:3e:00: ad:89:42:2a:dd:b2:d5:cd:fd:60:9b:af:73:a6:ae: d3:bc:e0:3e:91:94:0c:cf:17:c1:54:b4:49:6f:9b: a4:2f:5c:04:20:35:e2:28:57:83:72:8c:19:4d:e6: 7c:77:20:ee:67:da:2d:29:4b:4a:99:74:4c:3b:2d: 55:df:5a:3b:cb:3b:60:c9:20:99:31:2a:14:4a:38: a2:be:b5:da:5d:fc:36:ae:65:fc:43:a5:61:af:b0: 9e:01:c7:47:f2:ce:fb:b4:36:fa:05:4c:40:82:b8: 58:de:44:8e:51:ea:3f:73:05:d4:18:eb:f6:07:a1: ce:20:b6:43:a2:a7:27:60:72:97:2c:91:dd:68:0e: 62:da:a1:11:ae:eb:82:c9:2d:f0:a1:3c:55:63:2f: 6a:2e:60:68:0a:e7:e9:58:44:26:50:fe:81:59:fb: 80:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:09:3D:4D:2C:3E:8C:B6:34:16:92:00:1E:84:F3:11:79:CC:DE:10 X509v3 Authority Key Identifier: keyid:98:90:1C:7C:FF:D1:9A:4F:EA:78:F7:9B:10:04:99:92:66:DC:C2:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mJAcfP_Rmk_qePebEASZkmbcwiQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/e20c95-0f92-4598-96df-cbc2797c1d0a/1/mJAcfP_Rmk_qePebEASZkmbcwiQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/e20c95-0f92-4598-96df-cbc2797c1d0a/1/mJAcfP_Rmk_qePebEASZkmbcwiQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:00:ac:5a:24:a1:36:e7:72:f8:32:ff:97:dd:44:3a:8f:15: 13:88:50:c9:7d:f9:c7:d4:58:b4:31:0c:79:7e:8c:67:04:12: 91:7f:9c:af:46:1e:38:30:ea:5d:6e:ce:11:be:3b:25:0b:f7: 4f:65:22:7f:09:6e:39:34:8c:83:ed:22:64:55:3f:0c:88:3b: 40:32:25:c4:10:25:a6:01:53:35:17:fd:4e:a8:13:d4:4f:3b: e8:e1:41:2a:f9:48:8d:69:5d:81:63:5b:f6:7a:32:34:18:a9: bf:93:0d:96:fb:38:fa:2d:c1:a5:89:14:f6:6f:5f:47:43:ca: 0e:ff:f7:96:5b:8b:4d:b3:5a:ba:22:5d:5f:36:49:09:8b:71: bd:ab:c2:11:06:d0:93:79:ac:91:ae:f0:1b:a2:08:59:26:ae: 39:3c:47:a6:c0:49:9c:90:4c:59:5a:25:04:43:37:5c:bf:18: 2f:b2:94:a7:62:a7:e7:56:57:71:47:2c:bc:fd:c6:0e:7b:9a: 84:c5:7a:99:44:7e:cd:e1:55:cd:c8:9b:9b:e2:ef:67:26:66: 07:82:cf:34:6d:4f:7f:69:2c:52:5a:5d:70:81:61:a9:0a:52: 8c:13:55:59:ad:54:66:4d:fb:06:47:d0:d3:0e:8f:de:2d:87: c8:7e:dd:27 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPN0NBiv5/eLzIJ2x5zR4IMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk4OTAxYzdjZmZkMTlhNGZlYTc4Zjc5YjEwMDQ5OTkyNjZk Y2MyMjQwHhcNMjUxMjExMjEwMDM4WhcNMjUxMjEyMjEwMDM4WjAzMTEwLwYDVQQD EyhhMjA5M2Q0ZDJjM2U4Y2I2MzQxNjkyMDAxZTg0ZjMxMTc5Y2NkZTEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3uzwY7U6zorQvuKDsc9kW9Lo4cJx tUkTL3GcOslUcgHa4r5dnFKzVLxuNlpQCtkgMU15jD5ONqVaZ3owpQHWSaw2upSx khsHt3GVOL7EPMBV0QMK359vPgCtiUIq3bLVzf1gm69zpq7TvOA+kZQMzxfBVLRJ b5ukL1wEIDXiKFeDcowZTeZ8dyDuZ9otKUtKmXRMOy1V31o7yztgySCZMSoUSjii vrXaXfw2rmX8Q6Vhr7CeAcdH8s77tDb6BUxAgrhY3kSOUeo/cwXUGOv2B6HOILZD oqcnYHKXLJHdaA5i2qERruuCyS3woTxVYy9qLmBoCufpWEQmUP6BWfuAywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKIJPU0sPoy2NBaSAB6E8xF5zN4QMB8GA1UdIwQY MBaAFJiQHHz/0ZpP6nj3mxAEmZJm3MIkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbUpBY2ZQX1Jta19xZVBlYkVBU1prbWJjd2lRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9lMjBjOTUtMGY5Mi00NTk4LTk2ZGYt Y2JjMjc5N2MxZDBhLzEvbUpBY2ZQX1Jta19xZVBlYkVBU1prbWJjd2lRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC9lMjBjOTUtMGY5Mi00NTk4LTk2ZGYtY2JjMjc5N2MxZDBh LzEvbUpBY2ZQX1Jta19xZVBlYkVBU1prbWJjd2lRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiQCsWiSh Nudy+DL/l91EOo8VE4hQyX35x9RYtDEMeX6MZwQSkX+cr0YeODDqXW7OEb47JQv3 T2UifwluOTSMg+0iZFU/DIg7QDIlxBAlpgFTNRf9TqgT1E876OFBKvlIjWldgWNb 9noyNBipv5MNlvs4+i3BpYkU9m9fR0PKDv/3lluLTbNauiJdXzZJCYtxvavCEQbQ k3mska7wG6IIWSauOTxHpsBJnJBMWVolBEM3XL8YL7KUp2Kn51ZXcUcsvP3GDnua hMV6mUR+zeFVzcibm+LvZyZmB4LPNG1Pf2ksUlpdcIFhqQpSjBNVWa1UZk37BkfQ 0w6P3i2HyH7dJw== -----END CERTIFICATE-----Generated at Fri Dec 12 02:30:31 2025 by rpki-client