This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/996da3-9f8c-475b-8bf6-c7467da2db60/1/mNtTOItvp7HlovTGhjq3Hxz7VRI.mft File: mNtTOItvp7HlovTGhjq3Hxz7VRI.mft (raw, json) Hash identifier: m4O3ND13Yd9yUuIu22/ZXGTDHjtUhscea2KQCH0DAf4= Subject key identifier: 51:A6:23:A2:A9:B3:FA:A1:D4:F8:6F:15:34:BC:B0:24:85:9E:07:04 Authority key identifier: 98:DB:53:38:8B:6F:A7:B1:E5:A2:F4:C6:86:3A:B7:1F:1C:FB:55:12 Certificate issuer: /CN=98db53388b6fa7b1e5a2f4c6863ab71f1cfb5512 Certificate serial: 019B51BC93DEF6394C759002419638A977C4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mNtTOItvp7HlovTGhjq3Hxz7VRI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/996da3-9f8c-475b-8bf6-c7467da2db60/1/mNtTOItvp7HlovTGhjq3Hxz7VRI.mft Manifest number: 0499 Signing time: Wed 24 Dec 2025 19:01:11 +0000 Manifest this update: Wed 24 Dec 2025 19:01:11 +0000 Manifest next update: Thu 25 Dec 2025 19:01:11 +0000 Files and hashes: 1: mNtTOItvp7HlovTGhjq3Hxz7VRI.crl (hash: E3qEAn9UxfHi4hglL0ldOfTUaJe21KRHDqIS4uayouo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/996da3-9f8c-475b-8bf6-c7467da2db60/1/mNtTOItvp7HlovTGhjq3Hxz7VRI.crl rsync://rpki.ripe.net/repository/DEFAULT/18/996da3-9f8c-475b-8bf6-c7467da2db60/1/mNtTOItvp7HlovTGhjq3Hxz7VRI.mft rsync://rpki.ripe.net/repository/DEFAULT/mNtTOItvp7HlovTGhjq3Hxz7VRI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 14:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:51:bc:93:de:f6:39:4c:75:90:02:41:96:38:a9:77:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98db53388b6fa7b1e5a2f4c6863ab71f1cfb5512 Validity Not Before: Dec 24 19:01:11 2025 GMT Not After : Dec 25 19:01:11 2025 GMT Subject: CN=51a623a2a9b3faa1d4f86f1534bcb024859e0704 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:1b:5b:ee:da:75:45:f7:5a:de:46:2a:c3:94: 41:1d:0c:6a:4b:f4:22:90:e8:a4:58:1d:53:42:76: f9:f1:4f:c2:32:20:08:c0:ea:9b:b9:a1:51:b2:f5: 73:6e:e8:9a:90:37:29:84:67:04:55:9a:ae:e2:37: 45:e2:f7:ee:b9:ca:9e:08:57:e1:ba:7f:2e:2e:ee: 91:c2:26:c1:4b:9a:d7:55:0b:cb:cf:7d:fb:81:83: 6b:5c:1c:69:6f:dc:7a:7d:7a:3d:74:82:41:5f:7b: e3:fb:17:8b:a9:56:fb:83:8b:ae:22:86:45:b8:a9: 95:7e:4c:de:8f:98:39:05:20:07:c9:1e:70:93:df: 61:47:00:c8:aa:1c:94:f3:a6:41:34:d2:de:89:10: 0d:6b:88:da:54:11:95:15:d6:e1:1d:5a:5d:fa:fe: 92:9d:55:38:85:39:bd:03:89:c8:65:2a:84:fd:78: 79:c1:dd:e5:65:2e:a0:dd:92:ab:1d:8c:2e:ef:dc: 67:91:f3:6b:21:0c:4b:a6:cd:5e:15:39:28:6f:c5: 59:23:a0:71:dc:d7:3a:7b:99:92:3b:06:67:47:a0: 38:89:f9:7d:52:f1:e0:04:22:ae:b5:2c:d7:5b:59: 8b:ac:fd:22:af:46:fb:36:9d:88:f1:f8:f0:49:4c: 67:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:A6:23:A2:A9:B3:FA:A1:D4:F8:6F:15:34:BC:B0:24:85:9E:07:04 X509v3 Authority Key Identifier: keyid:98:DB:53:38:8B:6F:A7:B1:E5:A2:F4:C6:86:3A:B7:1F:1C:FB:55:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mNtTOItvp7HlovTGhjq3Hxz7VRI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/996da3-9f8c-475b-8bf6-c7467da2db60/1/mNtTOItvp7HlovTGhjq3Hxz7VRI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/996da3-9f8c-475b-8bf6-c7467da2db60/1/mNtTOItvp7HlovTGhjq3Hxz7VRI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:3e:65:ed:bb:89:c6:26:d7:25:d6:12:b8:c4:22:4f:b5:c5: 43:67:6b:36:20:27:67:15:72:d7:49:ce:e1:d6:f0:66:9f:c6: b7:ec:75:24:0a:dc:8b:7d:03:37:ca:52:f9:f5:bf:e9:84:14: 9e:50:c9:75:a2:99:32:c3:5c:94:e8:8b:7a:2e:78:b6:38:90: cd:7f:a5:7f:c9:74:d6:2e:82:5b:49:19:88:10:88:21:8d:9d: 8e:6f:1e:8e:f2:a8:be:b3:bf:5e:4c:f2:8b:c3:3a:a1:60:e7: 2a:ea:da:fa:36:63:62:53:1c:da:f1:45:02:70:80:f3:91:44: 75:54:64:3f:cb:0c:9f:a2:10:f7:18:a5:31:54:e3:c7:96:76: 07:f1:7e:ab:b8:44:3c:3c:63:32:a0:6f:1d:b9:10:3b:9b:1f: 5a:5a:19:64:71:2e:8e:3c:3c:3a:38:78:5f:4c:aa:20:d2:8d: ce:2d:53:9d:20:ad:c6:7f:4a:9b:ea:53:34:1a:cb:8c:40:6e: f3:c9:5c:c2:64:dc:23:b4:1b:5f:96:46:6c:13:14:f5:a0:a7: 7c:53:5d:ee:8f:ba:71:34:11:4f:ab:49:22:13:dc:6b:eb:24: 3c:38:d9:32:c0:bd:ce:92:74:1b:16:37:9a:61:16:36:49:eb: 9d:a8:9b:be -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtRvJPe9jlMdZACQZY4qXfEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk4ZGI1MzM4OGI2ZmE3YjFlNWEyZjRjNjg2M2FiNzFmMWNm YjU1MTIwHhcNMjUxMjI0MTkwMTExWhcNMjUxMjI1MTkwMTExWjAzMTEwLwYDVQQD Eyg1MWE2MjNhMmE5YjNmYWExZDRmODZmMTUzNGJjYjAyNDg1OWUwNzA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Btb7tp1Rfda3kYqw5RBHQxqS/Qi kOikWB1TQnb58U/CMiAIwOqbuaFRsvVzbuiakDcphGcEVZqu4jdF4vfuucqeCFfh un8uLu6RwibBS5rXVQvLz337gYNrXBxpb9x6fXo9dIJBX3vj+xeLqVb7g4uuIoZF uKmVfkzej5g5BSAHyR5wk99hRwDIqhyU86ZBNNLeiRANa4jaVBGVFdbhHVpd+v6S nVU4hTm9A4nIZSqE/Xh5wd3lZS6g3ZKrHYwu79xnkfNrIQxLps1eFTkob8VZI6Bx 3Nc6e5mSOwZnR6A4ifl9UvHgBCKutSzXW1mLrP0ir0b7Np2I8fjwSUxnQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFGmI6Kps/qh1PhvFTS8sCSFngcEMB8GA1UdIwQY MBaAFJjbUziLb6ex5aL0xoY6tx8c+1USMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbU50VE9JdHZwN0hsb3ZUR2hqcTNIeHo3VlJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC85OTZkYTMtOWY4Yy00NzViLThiZjYt Yzc0NjdkYTJkYjYwLzEvbU50VE9JdHZwN0hsb3ZUR2hqcTNIeHo3VlJJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC85OTZkYTMtOWY4Yy00NzViLThiZjYtYzc0NjdkYTJkYjYw LzEvbU50VE9JdHZwN0hsb3ZUR2hqcTNIeHo3VlJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAz5l7buJ xibXJdYSuMQiT7XFQ2drNiAnZxVy10nO4dbwZp/Gt+x1JArci30DN8pS+fW/6YQU nlDJdaKZMsNclOiLei54tjiQzX+lf8l01i6CW0kZiBCIIY2djm8ejvKovrO/Xkzy i8M6oWDnKura+jZjYlMc2vFFAnCA85FEdVRkP8sMn6IQ9xilMVTjx5Z2B/F+q7hE PDxjMqBvHbkQO5sfWloZZHEujjw8Ojh4X0yqINKNzi1TnSCtxn9Km+pTNBrLjEBu 88lcwmTcI7QbX5ZGbBMU9aCnfFNd7o+6cTQRT6tJIhPca+skPDjZMsC9zpJ0GxY3 mmEWNknrnaibvg== -----END CERTIFICATE-----Generated at Wed Dec 24 21:48:57 2025 by rpki-client