This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/44c42c-1e68-4aab-839d-9593e3a43725/1/mQxLs441zXAyDreRUgxsrTSksnE.mft File: mQxLs441zXAyDreRUgxsrTSksnE.mft (raw, json) Hash identifier: uIHmP+grd/0vuB3XORDVUuWRRSEaGw/5rbqkR6BcqPg= Subject key identifier: 3A:48:5B:FF:C1:7D:94:31:EC:AE:9F:C3:E7:CD:0D:E7:D1:CD:8C:C8 Authority key identifier: 99:0C:4B:B3:8E:35:CD:70:32:0E:B7:91:52:0C:6C:AD:34:A4:B2:71 Certificate issuer: /CN=990c4bb38e35cd70320eb791520c6cad34a4b271 Certificate serial: 019B35A044099A12C1154C618AC9CB19D7AB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mQxLs441zXAyDreRUgxsrTSksnE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/44c42c-1e68-4aab-839d-9593e3a43725/1/mQxLs441zXAyDreRUgxsrTSksnE.mft Manifest number: 1418 Signing time: Fri 19 Dec 2025 08:00:54 +0000 Manifest this update: Fri 19 Dec 2025 08:00:54 +0000 Manifest next update: Sat 20 Dec 2025 08:00:54 +0000 Files and hashes: 1: JtxbWq9ormth5LcKwN5vG4Q3apo.roa (hash: lQXeYw4zv4cIzlRUFSI2nS9Q4llqbkuImnCVCQNKPmM=) 2: mQxLs441zXAyDreRUgxsrTSksnE.crl (hash: NdwZagajX6nqtur5Ib5/l/HtlczgDR5bMQW/E+u/IgI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/44c42c-1e68-4aab-839d-9593e3a43725/1/mQxLs441zXAyDreRUgxsrTSksnE.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/44c42c-1e68-4aab-839d-9593e3a43725/1/mQxLs441zXAyDreRUgxsrTSksnE.mft rsync://rpki.ripe.net/repository/DEFAULT/mQxLs441zXAyDreRUgxsrTSksnE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:a0:44:09:9a:12:c1:15:4c:61:8a:c9:cb:19:d7:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=990c4bb38e35cd70320eb791520c6cad34a4b271 Validity Not Before: Dec 19 08:00:54 2025 GMT Not After : Dec 20 08:00:54 2025 GMT Subject: CN=3a485bffc17d9431ecae9fc3e7cd0de7d1cd8cc8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:a7:cb:a1:96:50:14:50:21:ca:62:2a:6d:b8: 36:ed:c2:da:89:41:8d:11:e7:e2:d8:d3:1c:45:65: 4e:70:fb:9f:9f:75:4d:48:c9:72:1e:04:33:56:7e: 06:18:77:87:2f:d2:bb:6b:12:8e:03:18:5a:bf:86: 7a:fe:10:73:ef:a6:1a:f6:29:de:bd:2c:1b:d4:d1: 04:db:a6:e8:83:00:45:da:6c:25:99:35:3e:bc:fe: 57:36:e4:ec:27:92:b7:21:b6:0e:95:17:17:58:62: 81:cb:7b:24:d3:6b:fe:8f:e0:5b:fe:e4:c1:61:d4: 68:8f:1a:d3:54:36:7d:0b:eb:d3:bb:56:6f:16:72: 8a:31:7d:52:04:e1:89:10:1c:80:95:f6:bf:a4:64: f5:a3:24:69:2d:64:b8:a9:3c:29:4c:68:73:11:e6: dd:0e:2b:e1:cc:fd:fa:a9:7b:6e:dc:56:b2:0a:e1: 60:a8:3f:76:e3:e3:ee:1c:aa:d6:c8:a0:fc:10:34: a9:c2:66:35:c6:13:a0:08:1a:4a:9a:d3:f0:4b:ac: be:3a:bd:c8:55:b9:0b:47:2b:bd:f3:cb:03:45:e9: 23:6d:c6:48:f7:04:5f:b9:13:53:70:7c:9c:ae:43: a6:83:c2:9b:59:f5:97:19:f3:3e:9e:d9:1d:60:2c: ce:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:48:5B:FF:C1:7D:94:31:EC:AE:9F:C3:E7:CD:0D:E7:D1:CD:8C:C8 X509v3 Authority Key Identifier: keyid:99:0C:4B:B3:8E:35:CD:70:32:0E:B7:91:52:0C:6C:AD:34:A4:B2:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mQxLs441zXAyDreRUgxsrTSksnE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/44c42c-1e68-4aab-839d-9593e3a43725/1/mQxLs441zXAyDreRUgxsrTSksnE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/44c42c-1e68-4aab-839d-9593e3a43725/1/mQxLs441zXAyDreRUgxsrTSksnE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:fd:49:60:8d:2c:f6:f6:db:73:73:80:df:d5:b6:f5:fb:fe: 8e:69:e9:32:e5:3b:b9:cd:0e:14:22:64:2e:7d:f3:8b:09:41: ba:94:cf:87:62:28:bf:0e:ee:db:44:6a:64:56:e4:d0:e7:f3: d7:02:f3:c9:07:f9:65:86:7a:6e:dd:73:04:c6:a5:1f:ca:36: 0a:f6:03:cb:d9:d7:05:1e:d5:00:7a:10:db:74:3a:4f:dd:19: bc:bd:bc:0b:5a:7a:17:98:82:04:ba:09:10:fc:50:c2:27:f7: 79:ea:8f:82:05:51:bb:1a:de:83:5f:df:25:ec:64:0e:2b:78: 98:16:dd:df:5f:94:92:74:a1:bd:0c:7d:92:4d:82:2e:fe:22: 68:e7:47:50:e1:e0:c6:5c:a6:e3:e6:bd:d5:95:f6:8e:64:a4: 15:a0:5a:3a:78:52:bf:27:c0:35:58:dd:a4:ba:6d:81:6f:c0: 56:7b:c9:c6:b1:fa:d0:fc:70:84:78:1d:ae:e0:42:d7:5b:fe: 58:0e:b2:08:5e:49:11:2c:2c:2c:aa:36:0c:30:cc:28:c9:cc: 21:b5:ba:66:03:13:5b:c2:82:40:e0:dc:45:4b:9e:3e:98:09: 4c:65:1a:41:1d:a7:d3:a8:e5:ec:be:b2:fe:86:e9:09:e9:df: 5a:a0:ba:57 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1oEQJmhLBFUxhisnLGderMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk5MGM0YmIzOGUzNWNkNzAzMjBlYjc5MTUyMGM2Y2FkMzRh NGIyNzEwHhcNMjUxMjE5MDgwMDU0WhcNMjUxMjIwMDgwMDU0WjAzMTEwLwYDVQQD EygzYTQ4NWJmZmMxN2Q5NDMxZWNhZTlmYzNlN2NkMGRlN2QxY2Q4Y2M4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5KfLoZZQFFAhymIqbbg27cLaiUGN Eefi2NMcRWVOcPufn3VNSMlyHgQzVn4GGHeHL9K7axKOAxhav4Z6/hBz76Ya9ine vSwb1NEE26bogwBF2mwlmTU+vP5XNuTsJ5K3IbYOlRcXWGKBy3sk02v+j+Bb/uTB YdRojxrTVDZ9C+vTu1ZvFnKKMX1SBOGJEByAlfa/pGT1oyRpLWS4qTwpTGhzEebd DivhzP36qXtu3FayCuFgqD924+PuHKrWyKD8EDSpwmY1xhOgCBpKmtPwS6y+Or3I VbkLRyu988sDRekjbcZI9wRfuRNTcHycrkOmg8KbWfWXGfM+ntkdYCzOuwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDpIW//BfZQx7K6fw+fNDefRzYzIMB8GA1UdIwQY MBaAFJkMS7OONc1wMg63kVIMbK00pLJxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbVF4THM0NDF6WEF5RHJlUlVneHNyVFNrc25FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi80NGM0MmMtMWU2OC00YWFiLTgzOWQt OTU5M2UzYTQzNzI1LzEvbVF4THM0NDF6WEF5RHJlUlVneHNyVFNrc25FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi80NGM0MmMtMWU2OC00YWFiLTgzOWQtOTU5M2UzYTQzNzI1 LzEvbVF4THM0NDF6WEF5RHJlUlVneHNyVFNrc25FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApf1JYI0s 9vbbc3OA39W29fv+jmnpMuU7uc0OFCJkLn3ziwlBupTPh2Iovw7u20RqZFbk0Ofz 1wLzyQf5ZYZ6bt1zBMalH8o2CvYDy9nXBR7VAHoQ23Q6T90ZvL28C1p6F5iCBLoJ EPxQwif3eeqPggVRuxreg1/fJexkDit4mBbd31+UknShvQx9kk2CLv4iaOdHUOHg xlym4+a91ZX2jmSkFaBaOnhSvyfANVjdpLptgW/AVnvJxrH60PxwhHgdruBC11v+ WA6yCF5JESwsLKo2DDDMKMnMIbW6ZgMTW8KCQODcRUuePpgJTGUaQR2n06jl7L6y /obpCenfWqC6Vw== -----END CERTIFICATE-----Generated at Fri Dec 19 10:37:14 2025 by rpki-client