This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/9fd20e-34d7-4949-a307-9087e0ff3d36/1/bMI2cPl4nALYO6fC5-TG6e3lL3o.mft File: bMI2cPl4nALYO6fC5-TG6e3lL3o.mft (raw, json) Hash identifier: FrVLOiHL0ggYdwWwPOI3Y9joJTNBQFRAAHTRITje15c= Subject key identifier: 97:24:CE:A9:1C:40:85:DF:76:02:14:F1:1A:86:DF:2C:C2:7D:9F:62 Authority key identifier: 6C:C2:36:70:F9:78:9C:02:D8:3B:A7:C2:E7:E4:C6:E9:ED:E5:2F:7A Certificate issuer: /CN=6cc23670f9789c02d83ba7c2e7e4c6e9ede52f7a Certificate serial: 019B19BC2329EF10EE92DF9ED1DB3FA04F63 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bMI2cPl4nALYO6fC5-TG6e3lL3o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/9fd20e-34d7-4949-a307-9087e0ff3d36/1/bMI2cPl4nALYO6fC5-TG6e3lL3o.mft Manifest number: 090D Signing time: Sat 13 Dec 2025 22:01:58 +0000 Manifest this update: Sat 13 Dec 2025 22:01:58 +0000 Manifest next update: Sun 14 Dec 2025 22:01:58 +0000 Files and hashes: 1: FN9RGBMyQ31Y_fViha13qkky7DI.roa (hash: gAmFRHmRCLI//ymFZDIrqygKx6kT7sxILKZQSxKuAic=) 2: Nbw4t5MC6gHkh4rPXeeWfUQIVkw.roa (hash: GCKq7nx6vmgGBar49yig7d/ID2EW6TSR2OyxNnCG15Q=) 3: bMI2cPl4nALYO6fC5-TG6e3lL3o.crl (hash: 731jkOMiDG2ZNCZCCSE5JYvf6A6OCgyvKV5nA85Hrbo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/9fd20e-34d7-4949-a307-9087e0ff3d36/1/bMI2cPl4nALYO6fC5-TG6e3lL3o.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/9fd20e-34d7-4949-a307-9087e0ff3d36/1/bMI2cPl4nALYO6fC5-TG6e3lL3o.mft rsync://rpki.ripe.net/repository/DEFAULT/bMI2cPl4nALYO6fC5-TG6e3lL3o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 22:01:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:19:bc:23:29:ef:10:ee:92:df:9e:d1:db:3f:a0:4f:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6cc23670f9789c02d83ba7c2e7e4c6e9ede52f7a Validity Not Before: Dec 13 22:01:58 2025 GMT Not After : Dec 14 22:01:58 2025 GMT Subject: CN=9724cea91c4085df760214f11a86df2cc27d9f62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:7b:0a:e5:55:97:3c:23:f1:5a:28:29:72:0b: d9:58:27:0e:40:7c:6b:c8:54:b1:24:28:94:3d:21: 95:39:4b:7d:4e:6c:f7:43:37:91:73:84:59:ab:98: 95:27:69:d8:de:f7:5e:65:42:24:eb:ac:b1:45:86: 93:a1:dc:d1:90:a4:8a:81:26:d5:7c:c5:c6:08:52: 37:d2:e1:24:52:f4:b9:0d:c8:e2:e4:8a:ff:b3:2a: d8:01:a1:a8:46:bf:0d:cb:e5:aa:e6:89:ad:23:22: f0:9e:5c:c1:dc:1b:10:ae:6b:b7:b6:bd:4b:98:9b: d2:0c:79:70:00:f9:7e:eb:dc:d1:24:eb:1d:b8:d1: 3a:f3:82:81:10:ae:71:01:a6:67:64:3f:34:6c:01: c2:a2:a5:b0:f5:b9:a8:46:ac:3e:fc:1a:79:ee:2c: e8:4f:83:95:b3:9b:02:82:05:73:c3:38:f0:42:04: 0d:61:1b:94:84:51:7a:81:94:50:f1:dc:b7:ad:c6: 93:29:29:62:30:ad:93:96:0b:20:b9:ad:ac:e2:e9: 81:be:c9:f7:21:75:9c:d7:e5:26:c0:28:87:11:77: 98:13:6a:5b:4a:cb:c5:ca:9d:a3:4a:9f:ee:fa:ce: af:22:7d:7e:e0:32:c7:6c:29:78:3d:86:58:73:ed: c7:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:24:CE:A9:1C:40:85:DF:76:02:14:F1:1A:86:DF:2C:C2:7D:9F:62 X509v3 Authority Key Identifier: keyid:6C:C2:36:70:F9:78:9C:02:D8:3B:A7:C2:E7:E4:C6:E9:ED:E5:2F:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bMI2cPl4nALYO6fC5-TG6e3lL3o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/9fd20e-34d7-4949-a307-9087e0ff3d36/1/bMI2cPl4nALYO6fC5-TG6e3lL3o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/9fd20e-34d7-4949-a307-9087e0ff3d36/1/bMI2cPl4nALYO6fC5-TG6e3lL3o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:6b:40:e0:6f:80:4e:8f:0f:ae:54:20:be:30:5e:b8:62:84: 55:01:f2:26:fa:88:e2:3d:ec:30:e1:f4:40:8f:de:e4:11:f4: 1c:bc:78:89:d8:bc:23:ac:60:b2:6d:d7:41:2f:c8:3b:14:1a: 7e:f9:5f:54:23:d4:4a:ba:22:50:f8:df:b4:02:e7:08:b3:a1: aa:09:1e:bc:15:b6:6c:89:3b:8b:79:52:3b:52:d4:86:5f:7d: 4a:a4:94:24:d0:0e:ed:81:28:4c:11:57:32:dd:c2:15:af:e6: ad:8d:41:85:b6:2b:ed:0f:5d:c9:2a:e4:60:40:9b:77:42:af: a9:e2:15:00:ca:28:1d:4c:b9:41:53:57:c9:d4:5a:cd:73:ca: 36:39:61:f2:ed:9c:df:81:89:9d:6e:5f:5c:b7:4d:8f:f1:a0: b4:7e:4b:9d:ef:4f:65:3a:8f:9c:42:ac:82:07:19:c4:42:d5: 38:93:8a:58:90:11:7d:9a:0d:32:80:b7:c1:a0:37:1c:3f:79: 54:be:a4:55:a3:3c:18:ba:37:3a:89:a4:ec:1d:1b:7f:49:b3: 79:ea:16:23:6e:ba:53:01:22:20:c1:4a:ea:48:87:89:88:e6: 31:3f:27:68:63:1d:c2:14:0b:70:5f:9c:a8:f0:c2:d1:77:44: b4:9c:e1:82 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsZvCMp7xDukt+e0ds/oE9jMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjYzIzNjcwZjk3ODljMDJkODNiYTdjMmU3ZTRjNmU5ZWRl NTJmN2EwHhcNMjUxMjEzMjIwMTU4WhcNMjUxMjE0MjIwMTU4WjAzMTEwLwYDVQQD Eyg5NzI0Y2VhOTFjNDA4NWRmNzYwMjE0ZjExYTg2ZGYyY2MyN2Q5ZjYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo3sK5VWXPCPxWigpcgvZWCcOQHxr yFSxJCiUPSGVOUt9Tmz3QzeRc4RZq5iVJ2nY3vdeZUIk66yxRYaTodzRkKSKgSbV fMXGCFI30uEkUvS5Dcji5Ir/syrYAaGoRr8Ny+Wq5omtIyLwnlzB3BsQrmu3tr1L mJvSDHlwAPl+69zRJOsduNE684KBEK5xAaZnZD80bAHCoqWw9bmoRqw+/Bp57izo T4OVs5sCggVzwzjwQgQNYRuUhFF6gZRQ8dy3rcaTKSliMK2Tlgsgua2s4umBvsn3 IXWc1+UmwCiHEXeYE2pbSsvFyp2jSp/u+s6vIn1+4DLHbCl4PYZYc+3HKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJckzqkcQIXfdgIU8RqG3yzCfZ9iMB8GA1UdIwQY MBaAFGzCNnD5eJwC2Dunwufkxunt5S96MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYk1JMmNQbDRuQUxZTzZmQzUtVEc2ZTNsTDNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC85ZmQyMGUtMzRkNy00OTQ5LWEzMDct OTA4N2UwZmYzZDM2LzEvYk1JMmNQbDRuQUxZTzZmQzUtVEc2ZTNsTDNvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC85ZmQyMGUtMzRkNy00OTQ5LWEzMDctOTA4N2UwZmYzZDM2 LzEvYk1JMmNQbDRuQUxZTzZmQzUtVEc2ZTNsTDNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASmtA4G+A To8PrlQgvjBeuGKEVQHyJvqI4j3sMOH0QI/e5BH0HLx4idi8I6xgsm3XQS/IOxQa fvlfVCPUSroiUPjftALnCLOhqgkevBW2bIk7i3lSO1LUhl99SqSUJNAO7YEoTBFX Mt3CFa/mrY1BhbYr7Q9dySrkYECbd0KvqeIVAMooHUy5QVNXydRazXPKNjlh8u2c 34GJnW5fXLdNj/GgtH5Lne9PZTqPnEKsggcZxELVOJOKWJARfZoNMoC3waA3HD95 VL6kVaM8GLo3Oomk7B0bf0mzeeoWI266UwEiIMFK6kiHiYjmMT8naGMdwhQLcF+c qPDC0XdEtJzhgg== -----END CERTIFICATE-----Generated at Sun Dec 14 07:43:01 2025 by rpki-client