This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/122ff4-c4a7-4698-879f-ecab70ef32da/1/mK9kDIIO61-8kigcYRRPEae9cH4.mft File: mK9kDIIO61-8kigcYRRPEae9cH4.mft (raw, json) Hash identifier: Dh/yNFrXg/MIunkR8+2/t4AP4IW01hKqgeez9mOo4Uo= Subject key identifier: 53:DB:3B:A1:D7:F9:A1:12:98:11:0B:E3:71:79:C3:85:86:53:1B:15 Authority key identifier: 98:AF:64:0C:82:0E:EB:5F:BC:92:28:1C:61:14:4F:11:A7:BD:70:7E Certificate issuer: /CN=98af640c820eeb5fbc92281c61144f11a7bd707e Certificate serial: 019B405A8A1949E6CE52AC8FFD378F1EBC50 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mK9kDIIO61-8kigcYRRPEae9cH4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/122ff4-c4a7-4698-879f-ecab70ef32da/1/mK9kDIIO61-8kigcYRRPEae9cH4.mft Manifest number: 04E1 Signing time: Sun 21 Dec 2025 10:00:33 +0000 Manifest this update: Sun 21 Dec 2025 10:00:33 +0000 Manifest next update: Mon 22 Dec 2025 10:00:33 +0000 Files and hashes: 1: OWXYykmlPDxYaUK6ibOA62-hDng.roa (hash: x4BvE6J+LBS4eTxuz/ILECCYgRYsxbKFwFccG0CtiDI=) 2: mK9kDIIO61-8kigcYRRPEae9cH4.crl (hash: lmt29xpgpgOIUDtnEbzMxscwhHBNm7wH0INvbYwUw7o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/122ff4-c4a7-4698-879f-ecab70ef32da/1/mK9kDIIO61-8kigcYRRPEae9cH4.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/122ff4-c4a7-4698-879f-ecab70ef32da/1/mK9kDIIO61-8kigcYRRPEae9cH4.mft rsync://rpki.ripe.net/repository/DEFAULT/mK9kDIIO61-8kigcYRRPEae9cH4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 10:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:5a:8a:19:49:e6:ce:52:ac:8f:fd:37:8f:1e:bc:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98af640c820eeb5fbc92281c61144f11a7bd707e Validity Not Before: Dec 21 10:00:33 2025 GMT Not After : Dec 22 10:00:33 2025 GMT Subject: CN=53db3ba1d7f9a11298110be37179c38586531b15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:c9:db:30:7c:ec:ea:93:3f:2a:e1:da:c3:84: 2f:3f:ab:69:15:99:ff:ad:51:fc:71:94:28:7b:45: 1e:04:33:ba:ca:cf:74:e6:32:a9:6f:c9:58:3b:37: 41:db:35:60:94:c2:a0:5a:11:c3:cf:b4:3c:52:53: 71:19:47:a1:5d:d3:ef:ed:04:70:6c:db:5b:c5:8a: 9d:e9:21:29:09:26:9f:c0:60:af:49:ee:fe:ee:b4: f1:3e:e7:d3:fc:47:50:9c:3e:3a:65:25:e0:6a:fe: 7f:49:91:08:bb:55:95:eb:7d:e0:12:24:b1:9e:1d: ad:e5:8f:1f:55:31:ab:85:34:d0:02:a7:af:49:df: ee:33:a5:68:8f:28:50:e9:94:9f:0d:8c:f2:96:ea: 69:c4:39:19:8e:26:04:df:79:fe:a4:de:06:5f:48: 6e:93:c7:34:d8:54:38:cb:36:9f:10:fa:df:29:10: 6b:bc:06:42:28:05:96:82:f9:fa:2d:29:30:62:b2: 29:0e:49:26:08:ca:7f:6f:18:6c:ca:46:f4:ba:a0: 44:70:38:a1:01:e8:3e:95:a7:41:95:73:45:ae:37: a4:d8:69:b0:1e:cb:fe:c2:66:08:2b:66:62:cc:7c: c8:34:51:6c:29:fe:6f:92:87:ff:5f:fe:f5:17:76: ac:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:DB:3B:A1:D7:F9:A1:12:98:11:0B:E3:71:79:C3:85:86:53:1B:15 X509v3 Authority Key Identifier: keyid:98:AF:64:0C:82:0E:EB:5F:BC:92:28:1C:61:14:4F:11:A7:BD:70:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mK9kDIIO61-8kigcYRRPEae9cH4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/122ff4-c4a7-4698-879f-ecab70ef32da/1/mK9kDIIO61-8kigcYRRPEae9cH4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/122ff4-c4a7-4698-879f-ecab70ef32da/1/mK9kDIIO61-8kigcYRRPEae9cH4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d0:40:3a:ee:fe:d5:54:db:73:02:ba:6d:72:bb:35:a3:12:78: b3:57:9f:b0:1a:51:ea:b0:1b:8f:b2:35:d2:0a:22:26:e0:6d: 94:50:8d:de:d0:e3:94:a9:cb:6c:3b:8d:03:91:f9:e5:6f:d4: 1b:86:fc:4f:1f:9f:fa:87:5a:8d:8b:4d:d5:59:e4:e2:09:08: 45:b6:1e:9c:59:02:d8:76:18:73:34:c9:91:cf:d9:92:a6:18: 2e:81:d3:cb:91:28:02:a1:b7:89:69:e5:0c:eb:82:ac:f9:a3: 1d:9c:f4:25:3a:9c:cb:cd:0c:b8:60:32:8a:e9:51:df:93:cf: 7f:77:f3:76:0b:99:5e:e9:b3:61:07:87:95:8c:27:ea:4d:4b: ef:cd:01:60:8e:4b:c4:62:c0:ff:84:6d:a6:1b:47:c3:85:6b: 20:60:7b:4a:d3:37:c6:9d:52:d8:12:93:8d:2b:a8:07:92:58: 5b:e3:31:07:33:ae:12:5e:52:a1:29:69:c5:b1:3d:f9:23:f5: f9:09:2c:dd:c6:88:89:8d:a3:01:e4:60:8b:8e:c0:46:77:2a: ea:df:91:a8:08:84:d2:1c:25:d0:0e:82:58:08:06:8c:21:44: ad:3f:2d:9a:9b:26:f3:72:67:f5:49:84:8b:02:c4:c7:1e:c7: e9:1a:cf:74 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAWooZSebOUqyP/TePHrxQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk4YWY2NDBjODIwZWViNWZiYzkyMjgxYzYxMTQ0ZjExYTdi ZDcwN2UwHhcNMjUxMjIxMTAwMDMzWhcNMjUxMjIyMTAwMDMzWjAzMTEwLwYDVQQD Eyg1M2RiM2JhMWQ3ZjlhMTEyOTgxMTBiZTM3MTc5YzM4NTg2NTMxYjE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0cnbMHzs6pM/KuHaw4QvP6tpFZn/ rVH8cZQoe0UeBDO6ys905jKpb8lYOzdB2zVglMKgWhHDz7Q8UlNxGUehXdPv7QRw bNtbxYqd6SEpCSafwGCvSe7+7rTxPufT/EdQnD46ZSXgav5/SZEIu1WV633gEiSx nh2t5Y8fVTGrhTTQAqevSd/uM6VojyhQ6ZSfDYzyluppxDkZjiYE33n+pN4GX0hu k8c02FQ4yzafEPrfKRBrvAZCKAWWgvn6LSkwYrIpDkkmCMp/bxhsykb0uqBEcDih Aeg+ladBlXNFrjek2GmwHsv+wmYIK2ZizHzINFFsKf5vkof/X/71F3asPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFPbO6HX+aESmBEL43F5w4WGUxsVMB8GA1UdIwQY MBaAFJivZAyCDutfvJIoHGEUTxGnvXB+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbUs5a0RJSU82MS04a2lnY1lSUlBFYWU5Y0g0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS8xMjJmZjQtYzRhNy00Njk4LTg3OWYt ZWNhYjcwZWYzMmRhLzEvbUs5a0RJSU82MS04a2lnY1lSUlBFYWU5Y0g0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS8xMjJmZjQtYzRhNy00Njk4LTg3OWYtZWNhYjcwZWYzMmRh LzEvbUs5a0RJSU82MS04a2lnY1lSUlBFYWU5Y0g0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0EA67v7V VNtzArptcrs1oxJ4s1efsBpR6rAbj7I10goiJuBtlFCN3tDjlKnLbDuNA5H55W/U G4b8Tx+f+odajYtN1Vnk4gkIRbYenFkC2HYYczTJkc/ZkqYYLoHTy5EoAqG3iWnl DOuCrPmjHZz0JTqcy80MuGAyiulR35PPf3fzdguZXumzYQeHlYwn6k1L780BYI5L xGLA/4RtphtHw4VrIGB7StM3xp1S2BKTjSuoB5JYW+MxBzOuEl5SoSlpxbE9+SP1 +Qks3caIiY2jAeRgi47ARncq6t+RqAiE0hwl0A6CWAgGjCFErT8tmpsm83Jn9UmE iwLExx7H6RrPdA== -----END CERTIFICATE-----Generated at Sun Dec 21 18:55:29 2025 by rpki-client