This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/3f7463-4d4f-41a6-8d72-3951378aa766/1/mBPi9jUdO00eYapAFvGyz6YtfN8.mft File: mBPi9jUdO00eYapAFvGyz6YtfN8.mft (raw, json) Hash identifier: 0eMDgsGKG986FAfdDqiRrYKCdRR9cgqb586JZQRDevc= Subject key identifier: E3:EF:38:71:61:E8:7F:8C:A1:48:AA:76:D5:94:A3:2D:98:99:E6:89 Authority key identifier: 98:13:E2:F6:35:1D:3B:4D:1E:61:AA:40:16:F1:B2:CF:A6:2D:7C:DF Certificate issuer: /CN=9813e2f6351d3b4d1e61aa4016f1b2cfa62d7cdf Certificate serial: 019B36458007470C8D948A62354249556B87 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mBPi9jUdO00eYapAFvGyz6YtfN8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/3f7463-4d4f-41a6-8d72-3951378aa766/1/mBPi9jUdO00eYapAFvGyz6YtfN8.mft Manifest number: 0446 Signing time: Fri 19 Dec 2025 11:01:22 +0000 Manifest this update: Fri 19 Dec 2025 11:01:22 +0000 Manifest next update: Sat 20 Dec 2025 11:01:22 +0000 Files and hashes: 1: N0qByPu3emMo9XfORXwQEiEDLX4.roa (hash: WDWKjOtvs4aBJ9ngAGga+267IwwKrgiGUR6VHAFxV3g=) 2: RoGqfo5WHnk9aJGToptEEJnYgSQ.roa (hash: L10AuIcaDMRz0t+d0kRw1yKzyj6eu5ePd1bWDs52MY4=) 3: dXZ-6UVHqdia25OyDn-Duexa4bY.roa (hash: 0T5UCEoUYDMxK/4Yih5THGiZdvmX2Rir43/xhLtG52s=) 4: ffVCJAudGRklTh6J2p53gbRPIvk.roa (hash: DvmrtTZ+4GX+XZD2/G6E6Uk/XxFpGuY4Z0oM1q4ZEeI=) 5: gkNUdTJYKI-HrI5siVhEhSliy48.roa (hash: ABXVZgoh60JAitHXcWT+7NbO1hc9hcd5tRCQ91UiLVQ=) 6: mBPi9jUdO00eYapAFvGyz6YtfN8.crl (hash: YL8C9D4zRu1MLJ1EzN1RW3mfuYSNa1AgcImn63mAu3k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/3f7463-4d4f-41a6-8d72-3951378aa766/1/mBPi9jUdO00eYapAFvGyz6YtfN8.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/3f7463-4d4f-41a6-8d72-3951378aa766/1/mBPi9jUdO00eYapAFvGyz6YtfN8.mft rsync://rpki.ripe.net/repository/DEFAULT/mBPi9jUdO00eYapAFvGyz6YtfN8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:45:80:07:47:0c:8d:94:8a:62:35:42:49:55:6b:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9813e2f6351d3b4d1e61aa4016f1b2cfa62d7cdf Validity Not Before: Dec 19 11:01:22 2025 GMT Not After : Dec 20 11:01:22 2025 GMT Subject: CN=e3ef387161e87f8ca148aa76d594a32d9899e689 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:8c:31:05:f7:e3:0f:b9:2c:49:79:6e:f8:c5: 52:f5:8e:8b:6a:80:60:c5:c7:a4:78:17:25:b7:78: 6b:22:11:f4:cf:33:0c:0b:2c:e9:aa:af:fe:3b:ae: 0f:26:ad:bb:e9:ef:c6:2a:a9:84:f7:30:46:d5:d5: 32:28:21:61:51:ea:39:c1:97:b7:9e:51:4a:46:e4: 6d:03:cf:8c:74:96:39:88:c1:df:58:5e:5a:f5:37: 19:d1:a8:de:dd:53:1d:ef:ed:6a:f0:3e:02:5f:b5: 9d:a7:de:3d:e0:b9:59:ce:17:cf:29:f7:ff:8e:58: 03:f6:d0:6c:8e:49:2a:b9:e0:6e:9d:42:d6:e9:d2: 58:90:fc:ce:d8:81:48:cd:08:de:04:fe:6b:17:da: 74:69:b9:6e:14:88:95:36:de:e6:fb:dd:57:fb:dd: dc:31:64:40:d3:21:51:f2:26:66:7f:f3:5e:05:e4: 82:44:8a:da:db:04:7a:6b:f4:cc:db:27:e8:c5:c1: e6:90:bd:12:1f:dc:0b:76:80:ed:47:c7:a3:ea:3a: c7:4d:bf:65:19:82:03:aa:4e:df:53:2d:0c:c7:f6: 4a:9b:45:d3:f0:d6:a9:84:57:ee:26:d8:59:29:44: 51:59:15:92:af:25:3f:21:3a:50:52:60:87:e7:a6: 29:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:EF:38:71:61:E8:7F:8C:A1:48:AA:76:D5:94:A3:2D:98:99:E6:89 X509v3 Authority Key Identifier: keyid:98:13:E2:F6:35:1D:3B:4D:1E:61:AA:40:16:F1:B2:CF:A6:2D:7C:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mBPi9jUdO00eYapAFvGyz6YtfN8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/3f7463-4d4f-41a6-8d72-3951378aa766/1/mBPi9jUdO00eYapAFvGyz6YtfN8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/3f7463-4d4f-41a6-8d72-3951378aa766/1/mBPi9jUdO00eYapAFvGyz6YtfN8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:9b:28:ba:04:72:de:30:59:15:59:d4:7d:1b:9a:7c:fa:34: 11:5a:c5:2b:d2:02:69:6a:c6:a6:36:ab:69:16:05:34:cf:ac: 33:54:93:5b:93:a0:a4:01:0a:4b:90:6e:f3:51:e6:a8:5a:1a: 89:90:9e:ad:20:0d:65:6f:9a:88:ae:cb:c4:be:e5:0b:8d:cd: 3b:de:d9:03:05:f7:a9:78:9e:39:b4:06:61:54:3f:1e:d8:ec: 3f:92:0f:8f:56:6f:ad:43:6f:69:81:93:06:5f:10:eb:ed:27: 2b:da:f2:1b:84:b4:de:96:10:a7:b7:4f:c6:af:f3:f9:cc:ea: c4:38:bf:cd:c7:a4:ed:66:d5:f5:f8:b6:33:16:49:8a:1c:66: b2:a6:2e:7c:83:a3:e8:47:92:1e:cd:d8:d7:a8:56:bd:b4:89: 5c:6f:0d:2a:f9:ef:17:66:03:94:ba:d4:8b:8f:d1:49:48:41: 91:4a:82:4d:fd:d6:0f:88:38:59:b5:ae:44:b4:62:f4:8b:fc: 6e:4b:e3:33:79:af:09:d9:95:54:ec:2c:4c:78:89:9a:20:42: 88:8c:cc:ee:7d:0c:e4:9e:17:70:32:f7:47:e4:0a:ec:18:9c: a2:16:97:1b:d7:55:b1:52:a4:a7:53:94:73:7e:91:d1:4f:28: 73:9b:72:fb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs2RYAHRwyNlIpiNUJJVWuHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk4MTNlMmY2MzUxZDNiNGQxZTYxYWE0MDE2ZjFiMmNmYTYy ZDdjZGYwHhcNMjUxMjE5MTEwMTIyWhcNMjUxMjIwMTEwMTIyWjAzMTEwLwYDVQQD EyhlM2VmMzg3MTYxZTg3ZjhjYTE0OGFhNzZkNTk0YTMyZDk4OTllNjg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw4wxBffjD7ksSXlu+MVS9Y6LaoBg xcekeBclt3hrIhH0zzMMCyzpqq/+O64PJq276e/GKqmE9zBG1dUyKCFhUeo5wZe3 nlFKRuRtA8+MdJY5iMHfWF5a9TcZ0aje3VMd7+1q8D4CX7Wdp9494LlZzhfPKff/ jlgD9tBsjkkqueBunULW6dJYkPzO2IFIzQjeBP5rF9p0abluFIiVNt7m+91X+93c MWRA0yFR8iZmf/NeBeSCRIra2wR6a/TM2yfoxcHmkL0SH9wLdoDtR8ej6jrHTb9l GYIDqk7fUy0Mx/ZKm0XT8NaphFfuJthZKURRWRWSryU/ITpQUmCH56Yp4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOPvOHFh6H+MoUiqdtWUoy2YmeaJMB8GA1UdIwQY MBaAFJgT4vY1HTtNHmGqQBbxss+mLXzfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbUJQaTlqVWRPMDBlWWFwQUZ2R3l6Nll0Zk44LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi8zZjc0NjMtNGQ0Zi00MWE2LThkNzIt Mzk1MTM3OGFhNzY2LzEvbUJQaTlqVWRPMDBlWWFwQUZ2R3l6Nll0Zk44Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi8zZjc0NjMtNGQ0Zi00MWE2LThkNzItMzk1MTM3OGFhNzY2 LzEvbUJQaTlqVWRPMDBlWWFwQUZ2R3l6Nll0Zk44LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADJsougRy 3jBZFVnUfRuafPo0EVrFK9ICaWrGpjaraRYFNM+sM1STW5OgpAEKS5Bu81HmqFoa iZCerSANZW+aiK7LxL7lC43NO97ZAwX3qXieObQGYVQ/HtjsP5IPj1ZvrUNvaYGT Bl8Q6+0nK9ryG4S03pYQp7dPxq/z+czqxDi/zcek7WbV9fi2MxZJihxmsqYufIOj 6EeSHs3Y16hWvbSJXG8NKvnvF2YDlLrUi4/RSUhBkUqCTf3WD4g4WbWuRLRi9Iv8 bkvjM3mvCdmVVOwsTHiJmiBCiIzM7n0M5J4XcDL3R+QK7BicohaXG9dVsVKkp1OU c36R0U8oc5ty+w== -----END CERTIFICATE-----Generated at Fri Dec 19 15:24:41 2025 by rpki-client