This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/b9cf3b-9572-4992-b247-01208d86ddcc/1/mCpUHVrI_3uwQIx0NKwQEu_3PLU.mft File: mCpUHVrI_3uwQIx0NKwQEu_3PLU.mft (raw, json) Hash identifier: Cd7ByLkH477WJ3Ytrhuu4uUiIbkSNPq5jnFiLmvQMJs= Subject key identifier: 14:90:3C:A4:B6:4B:4E:47:AC:7C:D8:73:AB:E7:53:8C:ED:DB:31:18 Authority key identifier: 98:2A:54:1D:5A:C8:FF:7B:B0:40:8C:74:34:AC:10:12:EF:F7:3C:B5 Certificate issuer: /CN=982a541d5ac8ff7bb0408c7434ac1012eff73cb5 Certificate serial: 019B3CEC67643B3DB3F4186FDF776A940653 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCpUHVrI_3uwQIx0NKwQEu_3PLU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/b9cf3b-9572-4992-b247-01208d86ddcc/1/mCpUHVrI_3uwQIx0NKwQEu_3PLU.mft Manifest number: 171D Signing time: Sat 20 Dec 2025 18:01:24 +0000 Manifest this update: Sat 20 Dec 2025 18:01:24 +0000 Manifest next update: Sun 21 Dec 2025 18:01:24 +0000 Files and hashes: 1: V-MtEFAl-wCRS2pESKzV6P6YTGg.roa (hash: eJVKgFjZ3+wJXzgqDKuQr6XkPa6E31J6OO87/ztXlAY=) 2: mCpUHVrI_3uwQIx0NKwQEu_3PLU.crl (hash: vx6ivXfP6t983sa0DTXxPLyC9HYKVQH7XQRWUREvIfs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/b9cf3b-9572-4992-b247-01208d86ddcc/1/mCpUHVrI_3uwQIx0NKwQEu_3PLU.crl rsync://rpki.ripe.net/repository/DEFAULT/08/b9cf3b-9572-4992-b247-01208d86ddcc/1/mCpUHVrI_3uwQIx0NKwQEu_3PLU.mft rsync://rpki.ripe.net/repository/DEFAULT/mCpUHVrI_3uwQIx0NKwQEu_3PLU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:ec:67:64:3b:3d:b3:f4:18:6f:df:77:6a:94:06:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=982a541d5ac8ff7bb0408c7434ac1012eff73cb5 Validity Not Before: Dec 20 18:01:24 2025 GMT Not After : Dec 21 18:01:24 2025 GMT Subject: CN=14903ca4b64b4e47ac7cd873abe7538ceddb3118 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:d1:02:c8:f8:4b:41:45:a1:27:a7:83:b1:56: 31:73:35:dc:01:56:da:39:98:b6:c9:44:cc:12:f8: f5:8e:37:c5:16:24:8c:88:1c:00:ab:6b:5e:07:03: 31:4d:c1:61:4a:b7:da:e4:66:fc:fa:ad:e2:9c:3d: 61:36:86:13:07:f7:1c:6a:e8:ff:21:09:36:e2:d1: c6:5c:04:2c:3b:df:34:21:d8:d1:19:a1:09:4d:a4: 9b:ca:99:38:ee:15:68:cd:38:af:a3:f7:b0:fc:1e: 55:91:a4:2b:ee:f7:48:05:05:16:13:29:49:f7:1a: f5:05:c7:df:00:f0:a5:03:4d:af:3d:0f:7c:bc:3c: 9d:1c:e5:7d:55:d2:69:79:0a:31:e7:23:6d:41:c2: 24:08:40:2e:b1:0b:e7:26:65:43:b8:1e:ef:58:5d: 9c:ad:a8:cf:b3:2d:9e:6f:f7:40:d0:69:70:53:24: 3d:c4:43:e9:01:9d:6c:06:9f:9d:06:22:c3:25:14: 5d:be:b6:a9:61:13:13:83:13:51:0d:6d:d2:2c:98: 30:86:1e:d2:b8:8c:ff:f1:33:54:7f:86:c5:83:77: 79:7f:1a:e5:eb:cc:79:ea:53:d4:71:08:71:e9:fc: e1:3e:0d:2f:b1:f6:7c:2c:2c:24:9c:1f:22:4a:79: 4f:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:90:3C:A4:B6:4B:4E:47:AC:7C:D8:73:AB:E7:53:8C:ED:DB:31:18 X509v3 Authority Key Identifier: keyid:98:2A:54:1D:5A:C8:FF:7B:B0:40:8C:74:34:AC:10:12:EF:F7:3C:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCpUHVrI_3uwQIx0NKwQEu_3PLU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/b9cf3b-9572-4992-b247-01208d86ddcc/1/mCpUHVrI_3uwQIx0NKwQEu_3PLU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/b9cf3b-9572-4992-b247-01208d86ddcc/1/mCpUHVrI_3uwQIx0NKwQEu_3PLU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:ea:46:03:dc:e9:85:86:b6:61:e6:2a:cd:96:59:5e:fd:d2: 27:7d:fa:1b:f8:bd:24:da:27:3f:2c:a6:69:46:dc:4c:24:a8: e9:4c:37:44:1d:b7:2d:ec:97:fe:14:6d:8a:ef:77:49:a9:a0: 28:c6:7e:e9:fe:bd:84:00:54:3b:8c:2f:a4:b1:db:b5:ef:32: 21:50:a3:86:ae:97:e4:58:70:6b:64:0b:ad:b8:68:70:1e:90: 32:c9:67:d0:3a:1c:57:2e:9a:af:81:bd:8a:59:9d:31:02:23: ce:2c:5c:81:a3:42:42:5e:10:99:05:2d:68:f7:15:d5:09:2d: 5f:21:f8:50:75:de:fd:03:aa:48:69:aa:a5:ca:6b:38:e4:44: 26:52:f6:22:3f:42:ed:df:a5:5b:cd:cf:73:02:68:19:68:02: f2:5f:22:1a:a9:cf:42:77:d9:a3:2a:b7:a3:fe:ba:b5:bc:ae: 1d:1e:25:9a:87:ec:e7:75:1c:93:07:3f:fe:e2:c4:b8:9a:38: fc:29:a7:0e:fd:51:46:36:5b:5b:bf:b1:c7:e0:fe:b2:1b:b0: dd:8b:a2:13:b3:cb:fe:9d:cf:81:3f:0a:aa:81:30:5e:82:34: 17:4d:76:ed:a1:3a:7f:28:b1:2c:f1:14:3b:af:b4:12:59:8d: 3e:1d:15:9d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs87GdkOz2z9Bhv33dqlAZTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk4MmE1NDFkNWFjOGZmN2JiMDQwOGM3NDM0YWMxMDEyZWZm NzNjYjUwHhcNMjUxMjIwMTgwMTI0WhcNMjUxMjIxMTgwMTI0WjAzMTEwLwYDVQQD EygxNDkwM2NhNGI2NGI0ZTQ3YWM3Y2Q4NzNhYmU3NTM4Y2VkZGIzMTE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvdECyPhLQUWhJ6eDsVYxczXcAVba OZi2yUTMEvj1jjfFFiSMiBwAq2teBwMxTcFhSrfa5Gb8+q3inD1hNoYTB/ccauj/ IQk24tHGXAQsO980IdjRGaEJTaSbypk47hVozTivo/ew/B5VkaQr7vdIBQUWEylJ 9xr1BcffAPClA02vPQ98vDydHOV9VdJpeQox5yNtQcIkCEAusQvnJmVDuB7vWF2c rajPsy2eb/dA0GlwUyQ9xEPpAZ1sBp+dBiLDJRRdvrapYRMTgxNRDW3SLJgwhh7S uIz/8TNUf4bFg3d5fxrl68x56lPUcQhx6fzhPg0vsfZ8LCwknB8iSnlPBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBSQPKS2S05HrHzYc6vnU4zt2zEYMB8GA1UdIwQY MBaAFJgqVB1ayP97sECMdDSsEBLv9zy1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbUNwVUhWcklfM3V3UUl4ME5Ld1FFdV8zUExVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9iOWNmM2ItOTU3Mi00OTkyLWIyNDct MDEyMDhkODZkZGNjLzEvbUNwVUhWcklfM3V3UUl4ME5Ld1FFdV8zUExVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC9iOWNmM2ItOTU3Mi00OTkyLWIyNDctMDEyMDhkODZkZGNj LzEvbUNwVUhWcklfM3V3UUl4ME5Ld1FFdV8zUExVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbOpGA9zp hYa2YeYqzZZZXv3SJ336G/i9JNonPyymaUbcTCSo6Uw3RB23LeyX/hRtiu93Samg KMZ+6f69hABUO4wvpLHbte8yIVCjhq6X5Fhwa2QLrbhocB6QMsln0DocVy6ar4G9 ilmdMQIjzixcgaNCQl4QmQUtaPcV1QktXyH4UHXe/QOqSGmqpcprOOREJlL2Ij9C 7d+lW83PcwJoGWgC8l8iGqnPQnfZoyq3o/66tbyuHR4lmofs53Uckwc//uLEuJo4 /CmnDv1RRjZbW7+xx+D+shuw3YuiE7PL/p3PgT8KqoEwXoI0F0127aE6fyixLPEU O6+0ElmNPh0VnQ== -----END CERTIFICATE-----Generated at Sat Dec 20 23:10:35 2025 by rpki-client