This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/bfdda9-2742-4b2f-85b6-ef9c95276932/1/mR5LF54JU7nsxYWtmFmgC-NWgAE.mft File: mR5LF54JU7nsxYWtmFmgC-NWgAE.mft (raw, json) Hash identifier: I5eact+kdn9sUCC2Ml03Tdei5nMyn935NyqY13m+imQ= Subject key identifier: A2:E3:94:DC:C5:92:9F:55:72:36:B3:23:5D:BE:68:AC:6A:DB:84:71 Authority key identifier: 99:1E:4B:17:9E:09:53:B9:EC:C5:85:AD:98:59:A0:0B:E3:56:80:01 Certificate issuer: /CN=991e4b179e0953b9ecc585ad9859a00be3568001 Certificate serial: 019B0E24E5720BA3794466CF3C6F455AA45C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mR5LF54JU7nsxYWtmFmgC-NWgAE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/bfdda9-2742-4b2f-85b6-ef9c95276932/1/mR5LF54JU7nsxYWtmFmgC-NWgAE.mft Manifest number: 1770 Signing time: Thu 11 Dec 2025 16:00:57 +0000 Manifest this update: Thu 11 Dec 2025 16:00:57 +0000 Manifest next update: Fri 12 Dec 2025 16:00:57 +0000 Files and hashes: 1: 963pl4kMqERhlH5zQNINJ9q-oB4.roa (hash: BOAkYmCmSJL+jWIjxEb3nC4tx8Y5C6plreJ8j+irwHk=) 2: 9nSaJxHrbQ3QEW5mfZiYPpI-ugo.roa (hash: wy2LzSvu/dsXfdQ3akCDVPoEcY+5eaESxs8S9jGdusU=) 3: mR5LF54JU7nsxYWtmFmgC-NWgAE.crl (hash: eptZ3JpOWMmThMCh02Bfiewlmh6I2MITzj1vvN8IA2M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/bfdda9-2742-4b2f-85b6-ef9c95276932/1/mR5LF54JU7nsxYWtmFmgC-NWgAE.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/bfdda9-2742-4b2f-85b6-ef9c95276932/1/mR5LF54JU7nsxYWtmFmgC-NWgAE.mft rsync://rpki.ripe.net/repository/DEFAULT/mR5LF54JU7nsxYWtmFmgC-NWgAE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 16:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:24:e5:72:0b:a3:79:44:66:cf:3c:6f:45:5a:a4:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=991e4b179e0953b9ecc585ad9859a00be3568001 Validity Not Before: Dec 11 16:00:57 2025 GMT Not After : Dec 12 16:00:57 2025 GMT Subject: CN=a2e394dcc5929f557236b3235dbe68ac6adb8471 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:c1:1c:42:8c:a5:c3:ea:de:f9:ee:d8:ee:9f: 72:7e:18:97:fb:9f:ed:41:bf:1d:12:29:4b:8a:70: d2:e6:ab:fd:9f:e0:fd:e7:dc:64:55:d1:00:fc:7a: 9b:90:6d:11:6c:43:a8:d3:53:04:cf:3e:44:f5:d7: 1a:79:ed:fd:df:7f:1f:c6:84:80:03:3a:e4:25:04: fb:43:dc:ce:3f:0f:b8:71:5a:0b:10:fa:9c:0c:2c: 8d:71:7c:fb:12:bb:09:ab:33:b7:15:42:cb:d5:87: 0a:cc:b6:91:43:0f:5e:2d:54:b9:ca:e4:c6:13:c9: 66:e4:37:2c:3b:3f:1c:01:2d:b2:4d:12:76:95:aa: ab:bd:b1:c4:58:9c:75:80:76:ed:7c:93:63:68:b9: 9c:a1:a1:70:2f:d1:09:e3:eb:e8:2c:ec:48:de:c4: 90:8f:49:6b:9e:14:47:ab:35:27:cc:05:78:ac:22: 40:67:80:ef:36:c0:bc:5e:fa:2e:ca:ee:6a:5f:e5: 2b:a7:2e:86:1b:96:90:1b:44:66:19:c9:82:84:5f: f5:75:82:69:91:7f:05:e2:51:c8:38:78:31:b2:2b: 18:c1:6a:1f:85:d4:e3:60:e0:d0:39:68:ec:af:bf: 5d:d1:5e:08:dd:6c:08:07:fe:bd:a8:16:02:b8:3e: 07:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:E3:94:DC:C5:92:9F:55:72:36:B3:23:5D:BE:68:AC:6A:DB:84:71 X509v3 Authority Key Identifier: keyid:99:1E:4B:17:9E:09:53:B9:EC:C5:85:AD:98:59:A0:0B:E3:56:80:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mR5LF54JU7nsxYWtmFmgC-NWgAE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/bfdda9-2742-4b2f-85b6-ef9c95276932/1/mR5LF54JU7nsxYWtmFmgC-NWgAE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/bfdda9-2742-4b2f-85b6-ef9c95276932/1/mR5LF54JU7nsxYWtmFmgC-NWgAE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:3f:0d:bc:f7:6c:e9:51:e6:e0:49:19:ba:31:ed:d4:7c:92: d9:44:a3:a9:0c:1b:70:fb:0a:e6:15:a6:fd:cf:b7:87:4a:85: 20:1d:64:87:0e:97:de:b2:dd:4c:9a:19:07:3d:af:48:85:1a: 25:72:1a:6a:53:a4:0e:3b:a0:e9:ff:57:f7:79:38:3d:db:15: 11:24:f8:a1:4b:ef:a0:08:85:a5:8c:3a:99:c1:96:1e:64:a3: f8:1b:ad:2c:69:ed:f1:96:51:83:53:b2:d0:88:96:5e:2c:ac: 0a:0e:73:c3:7c:0b:a8:c4:2f:3d:54:21:65:77:0b:ad:f2:fa: f3:98:ee:d4:b3:04:b9:f8:0c:37:b8:77:b5:f0:e7:33:77:ca: a9:c6:80:3a:43:8f:5b:1b:69:5d:c4:5f:e6:5d:59:7e:be:36: b2:0c:26:b2:fe:97:16:8a:bd:22:7f:45:a4:d6:38:24:18:18: fb:e7:c8:e1:3a:72:ac:be:49:47:80:75:62:0f:ea:4a:be:3d: 77:6d:03:0f:e7:42:5a:11:b5:a9:52:ec:3b:e9:2c:75:3c:7b: c4:c0:ce:f2:f5:12:83:31:6d:d0:7a:d8:6c:9c:cc:87:71:92: 4b:e8:1f:35:42:11:4b:41:e3:fc:2f:45:50:14:8b:b0:52:bb: 61:c0:31:36 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOJOVyC6N5RGbPPG9FWqRcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk5MWU0YjE3OWUwOTUzYjllY2M1ODVhZDk4NTlhMDBiZTM1 NjgwMDEwHhcNMjUxMjExMTYwMDU3WhcNMjUxMjEyMTYwMDU3WjAzMTEwLwYDVQQD EyhhMmUzOTRkY2M1OTI5ZjU1NzIzNmIzMjM1ZGJlNjhhYzZhZGI4NDcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApsEcQoylw+re+e7Y7p9yfhiX+5/t Qb8dEilLinDS5qv9n+D959xkVdEA/HqbkG0RbEOo01MEzz5E9dcaee39338fxoSA AzrkJQT7Q9zOPw+4cVoLEPqcDCyNcXz7ErsJqzO3FULL1YcKzLaRQw9eLVS5yuTG E8lm5DcsOz8cAS2yTRJ2laqrvbHEWJx1gHbtfJNjaLmcoaFwL9EJ4+voLOxI3sSQ j0lrnhRHqzUnzAV4rCJAZ4DvNsC8Xvouyu5qX+Urpy6GG5aQG0RmGcmChF/1dYJp kX8F4lHIOHgxsisYwWofhdTjYODQOWjsr79d0V4I3WwIB/69qBYCuD4HvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKLjlNzFkp9VcjazI12+aKxq24RxMB8GA1UdIwQY MBaAFJkeSxeeCVO57MWFrZhZoAvjVoABMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbVI1TEY1NEpVN25zeFlXdG1GbWdDLU5XZ0FFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9iZmRkYTktMjc0Mi00YjJmLTg1YjYt ZWY5Yzk1Mjc2OTMyLzEvbVI1TEY1NEpVN25zeFlXdG1GbWdDLU5XZ0FFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS9iZmRkYTktMjc0Mi00YjJmLTg1YjYtZWY5Yzk1Mjc2OTMy LzEvbVI1TEY1NEpVN25zeFlXdG1GbWdDLU5XZ0FFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaz8NvPds 6VHm4EkZujHt1HyS2USjqQwbcPsK5hWm/c+3h0qFIB1khw6X3rLdTJoZBz2vSIUa JXIaalOkDjug6f9X93k4PdsVEST4oUvvoAiFpYw6mcGWHmSj+ButLGnt8ZZRg1Oy 0IiWXiysCg5zw3wLqMQvPVQhZXcLrfL685ju1LMEufgMN7h3tfDnM3fKqcaAOkOP WxtpXcRf5l1Zfr42sgwmsv6XFoq9In9FpNY4JBgY++fI4TpyrL5JR4B1Yg/qSr49 d20DD+dCWhG1qVLsO+ksdTx7xMDO8vUSgzFt0HrYbJzMh3GSS+gfNUIRS0Hj/C9F UBSLsFK7YcAxNg== -----END CERTIFICATE-----Generated at Fri Dec 12 00:11:01 2025 by rpki-client