This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/79ab76-9bf9-47cd-b544-5ee09fead561/1/mRLZRawqSfO02iIhwnuCmq_MsvI.mft File: mRLZRawqSfO02iIhwnuCmq_MsvI.mft (raw, json) Hash identifier: m8Ec1KlLz1Qk4K0kdLNZWxvCCEKM8RIsxlhei0yOoUA= Subject key identifier: 70:B3:69:FA:8E:90:95:8B:D4:60:8B:D3:B9:75:AD:77:EE:C7:D5:6D Authority key identifier: 99:12:D9:45:AC:2A:49:F3:B4:DA:22:21:C2:7B:82:9A:AF:CC:B2:F2 Certificate issuer: /CN=9912d945ac2a49f3b4da2221c27b829aafccb2f2 Certificate serial: 019B3E6CC3CBD58E4BC31981E44BE91B40F4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mRLZRawqSfO02iIhwnuCmq_MsvI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/79ab76-9bf9-47cd-b544-5ee09fead561/1/mRLZRawqSfO02iIhwnuCmq_MsvI.mft Manifest number: 15A5 Signing time: Sun 21 Dec 2025 01:01:13 +0000 Manifest this update: Sun 21 Dec 2025 01:01:13 +0000 Manifest next update: Mon 22 Dec 2025 01:01:13 +0000 Files and hashes: 1: G3bPtDx0TvVdf4ayVJDtbWUroio.roa (hash: 0QDqlFsV7bJD4enXREu7nHOgEbbLdZBSnVYjPXImw60=) 2: mRLZRawqSfO02iIhwnuCmq_MsvI.crl (hash: CpYKb0wNtr6M73ABZTIqJmr9dkr7G0aHHw3y80Hvouk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/79ab76-9bf9-47cd-b544-5ee09fead561/1/mRLZRawqSfO02iIhwnuCmq_MsvI.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/79ab76-9bf9-47cd-b544-5ee09fead561/1/mRLZRawqSfO02iIhwnuCmq_MsvI.mft rsync://rpki.ripe.net/repository/DEFAULT/mRLZRawqSfO02iIhwnuCmq_MsvI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:6c:c3:cb:d5:8e:4b:c3:19:81:e4:4b:e9:1b:40:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9912d945ac2a49f3b4da2221c27b829aafccb2f2 Validity Not Before: Dec 21 01:01:13 2025 GMT Not After : Dec 22 01:01:13 2025 GMT Subject: CN=70b369fa8e90958bd4608bd3b975ad77eec7d56d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:86:cf:1d:29:e1:71:a4:1a:45:9e:b2:7d:eb: 87:3d:5c:4b:2a:a0:a4:ef:56:e7:f2:5d:f2:1f:d0: 09:62:8e:e5:2d:73:99:53:84:24:e9:c0:02:f5:ca: b2:57:5f:32:d0:87:55:08:75:82:9e:cd:5c:aa:03: 85:5c:6b:f8:3a:ee:a9:f0:54:c1:ba:ba:4b:4e:9c: 30:fd:89:66:4c:c7:1a:5d:a4:44:5a:3f:01:58:06: ae:a6:e1:8e:ec:1a:83:58:a0:90:6c:59:d1:21:97: 15:1c:fb:d6:83:31:86:0d:01:58:dd:48:dd:10:d5: 6d:22:82:49:6c:c9:d5:33:ef:c7:32:5f:3e:f6:ca: 87:d2:fc:4c:00:ee:dd:b9:2c:7e:46:e2:5f:99:84: aa:e7:45:03:b3:b5:15:9e:ac:fc:96:9d:23:d2:3a: 20:02:08:5c:6c:89:61:ea:12:76:66:72:fd:81:76: 14:52:87:d7:5f:88:3b:de:a5:e1:f6:be:9b:37:bb: 6d:67:5c:41:1d:2d:c2:5d:a5:8f:ed:63:ce:ad:24: 33:8e:f9:df:5b:ea:8f:ab:06:27:8c:67:1d:fa:fa: 03:8a:df:89:41:cb:1d:f1:bd:f2:ea:33:41:d4:56: 73:e6:9c:a9:19:4d:f0:7e:4c:2d:ad:fe:85:81:97: e9:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:B3:69:FA:8E:90:95:8B:D4:60:8B:D3:B9:75:AD:77:EE:C7:D5:6D X509v3 Authority Key Identifier: keyid:99:12:D9:45:AC:2A:49:F3:B4:DA:22:21:C2:7B:82:9A:AF:CC:B2:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mRLZRawqSfO02iIhwnuCmq_MsvI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/79ab76-9bf9-47cd-b544-5ee09fead561/1/mRLZRawqSfO02iIhwnuCmq_MsvI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/79ab76-9bf9-47cd-b544-5ee09fead561/1/mRLZRawqSfO02iIhwnuCmq_MsvI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:81:a0:d1:c8:5a:c7:a0:51:5e:e1:12:65:f5:bb:45:53:38: ae:79:90:0d:bc:01:3d:00:6d:3d:18:99:ce:b7:aa:3e:02:f8: e7:63:4f:95:82:13:9d:ee:e8:d6:94:d9:10:02:0d:46:aa:40: 46:f8:75:b1:2e:18:3b:40:03:f6:6d:43:44:aa:4c:59:5f:2f: 17:dc:dc:a0:a5:a1:65:07:5a:3d:5a:82:28:21:0d:27:d3:62: c8:e7:ba:1a:87:03:dc:ff:f3:c8:17:7f:68:b9:da:a3:14:5b: b3:27:de:da:b0:e0:1c:3b:5a:2b:b8:51:4f:f3:bb:e9:4c:d4: 2a:3b:01:51:1e:71:3c:4a:71:7e:b2:40:0c:82:1b:b8:18:c3: a7:48:6c:39:8d:32:a6:2a:ce:44:7b:94:f6:99:91:c6:84:13: c5:78:e3:ce:6a:86:0f:d1:0e:b2:6d:97:f8:60:90:63:d9:50: d0:6c:14:82:46:68:4e:7d:39:07:f7:50:32:24:83:50:55:23: 66:5b:74:ca:27:3d:0a:cc:e8:0a:75:2a:bf:69:80:77:c0:1f: 6b:85:80:d9:b8:54:83:88:a0:de:12:bc:29:69:9b:a7:90:46: fd:5b:46:35:6d:44:41:9a:43:78:7f:25:68:a9:be:06:a0:ae: 8d:dc:9d:91 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+bMPL1Y5LwxmB5EvpG0D0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk5MTJkOTQ1YWMyYTQ5ZjNiNGRhMjIyMWMyN2I4MjlhYWZj Y2IyZjIwHhcNMjUxMjIxMDEwMTEzWhcNMjUxMjIyMDEwMTEzWjAzMTEwLwYDVQQD Eyg3MGIzNjlmYThlOTA5NThiZDQ2MDhiZDNiOTc1YWQ3N2VlYzdkNTZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqIbPHSnhcaQaRZ6yfeuHPVxLKqCk 71bn8l3yH9AJYo7lLXOZU4Qk6cAC9cqyV18y0IdVCHWCns1cqgOFXGv4Ou6p8FTB urpLTpww/YlmTMcaXaREWj8BWAaupuGO7BqDWKCQbFnRIZcVHPvWgzGGDQFY3Ujd ENVtIoJJbMnVM+/HMl8+9sqH0vxMAO7duSx+RuJfmYSq50UDs7UVnqz8lp0j0jog AghcbIlh6hJ2ZnL9gXYUUofXX4g73qXh9r6bN7ttZ1xBHS3CXaWP7WPOrSQzjvnf W+qPqwYnjGcd+voDit+JQcsd8b3y6jNB1FZz5pypGU3wfkwtrf6FgZfpbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHCzafqOkJWL1GCL07l1rXfux9VtMB8GA1UdIwQY MBaAFJkS2UWsKknztNoiIcJ7gpqvzLLyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbVJMWlJhd3FTZk8wMmlJaHdudUNtcV9Nc3ZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS83OWFiNzYtOWJmOS00N2NkLWI1NDQt NWVlMDlmZWFkNTYxLzEvbVJMWlJhd3FTZk8wMmlJaHdudUNtcV9Nc3ZJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS83OWFiNzYtOWJmOS00N2NkLWI1NDQtNWVlMDlmZWFkNTYx LzEvbVJMWlJhd3FTZk8wMmlJaHdudUNtcV9Nc3ZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaIGg0cha x6BRXuESZfW7RVM4rnmQDbwBPQBtPRiZzreqPgL452NPlYITne7o1pTZEAINRqpA Rvh1sS4YO0AD9m1DRKpMWV8vF9zcoKWhZQdaPVqCKCENJ9NiyOe6GocD3P/zyBd/ aLnaoxRbsyfe2rDgHDtaK7hRT/O76UzUKjsBUR5xPEpxfrJADIIbuBjDp0hsOY0y pirORHuU9pmRxoQTxXjjzmqGD9EOsm2X+GCQY9lQ0GwUgkZoTn05B/dQMiSDUFUj Zlt0yic9CszoCnUqv2mAd8Afa4WA2bhUg4ig3hK8KWmbp5BG/VtGNW1EQZpDeH8l aKm+BqCujdydkQ== -----END CERTIFICATE-----Generated at Sun Dec 21 04:08:44 2025 by rpki-client