This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/3a6bb4-24b8-4086-a29d-ee6c509b6221/1/mFW4DEXftep6qn3R2O2LFPnB3EU.mft File: mFW4DEXftep6qn3R2O2LFPnB3EU.mft (raw, json) Hash identifier: AJMEf7Dg1dqkmITVbxiFjxll8JoeoLFKfAqKRWAxAhY= Subject key identifier: 79:5E:B9:0A:4F:49:8A:DE:64:65:D2:2F:60:FA:FA:46:45:ED:A3:DE Authority key identifier: 98:55:B8:0C:45:DF:B5:EA:7A:AA:7D:D1:D8:ED:8B:14:F9:C1:DC:45 Certificate issuer: /CN=9855b80c45dfb5ea7aaa7dd1d8ed8b14f9c1dc45 Certificate serial: 019B454A9C4A1FBBB9D8724D663784B73999 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mFW4DEXftep6qn3R2O2LFPnB3EU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/3a6bb4-24b8-4086-a29d-ee6c509b6221/1/mFW4DEXftep6qn3R2O2LFPnB3EU.mft Manifest number: 0276 Signing time: Mon 22 Dec 2025 09:01:16 +0000 Manifest this update: Mon 22 Dec 2025 09:01:16 +0000 Manifest next update: Tue 23 Dec 2025 09:01:16 +0000 Files and hashes: 1: NymzbNZBsKNd-Q-QLvAahyZY8zY.roa (hash: 4tm9+O5MAP6uU3Q2HGQCNAKZry1kf/X+Xwuo3WltB+8=) 2: mFW4DEXftep6qn3R2O2LFPnB3EU.crl (hash: 7Q7rY6A5ufNfW/HQrMLFFQyHbEDZOjJWuw2WQH3j/sM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/3a6bb4-24b8-4086-a29d-ee6c509b6221/1/mFW4DEXftep6qn3R2O2LFPnB3EU.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/3a6bb4-24b8-4086-a29d-ee6c509b6221/1/mFW4DEXftep6qn3R2O2LFPnB3EU.mft rsync://rpki.ripe.net/repository/DEFAULT/mFW4DEXftep6qn3R2O2LFPnB3EU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 07:00:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:45:4a:9c:4a:1f:bb:b9:d8:72:4d:66:37:84:b7:39:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9855b80c45dfb5ea7aaa7dd1d8ed8b14f9c1dc45 Validity Not Before: Dec 22 09:01:16 2025 GMT Not After : Dec 23 09:01:16 2025 GMT Subject: CN=795eb90a4f498ade6465d22f60fafa4645eda3de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:22:53:e5:54:19:ae:29:82:2a:4b:1f:1f:ff: e2:9a:98:92:7d:ac:ed:18:8d:78:f5:b7:6f:61:5a: e5:8c:df:be:a7:11:88:44:bc:ac:c0:f9:46:55:32: 04:b2:3d:83:e8:0e:a3:ea:9b:65:fb:16:37:ef:7e: 41:72:26:b8:dc:7f:a4:65:96:47:88:08:7f:76:72: f8:00:cf:bf:d5:0b:af:ed:40:31:16:8e:03:c1:1e: 32:88:53:b1:a8:5d:b1:cf:8b:40:02:2f:6f:2a:9f: 77:b7:30:df:ed:ac:9c:f6:37:d9:f4:82:e8:1d:df: 63:0d:a8:22:26:fc:e7:cd:4c:05:44:aa:69:2b:cd: 35:40:ef:fd:ee:38:88:5e:db:ad:ac:85:5a:15:32: 27:f4:51:b3:cd:0b:49:ef:4d:44:07:2d:87:b1:a8: 73:02:c8:4a:40:90:12:9a:ba:10:3d:6b:29:90:b4: a5:e7:e2:84:77:45:98:a4:ef:54:77:73:65:fa:45: f4:73:69:b3:fe:87:69:c7:79:f2:e8:ab:42:b9:a1: 77:e7:3b:66:ee:9c:6e:24:9a:b2:a8:2f:38:3d:e8: a2:23:b3:d0:81:a6:52:49:d6:a5:fe:62:cf:aa:ca: ca:6a:a2:f7:70:f7:09:6d:b5:af:53:04:86:81:18: 72:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:5E:B9:0A:4F:49:8A:DE:64:65:D2:2F:60:FA:FA:46:45:ED:A3:DE X509v3 Authority Key Identifier: keyid:98:55:B8:0C:45:DF:B5:EA:7A:AA:7D:D1:D8:ED:8B:14:F9:C1:DC:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mFW4DEXftep6qn3R2O2LFPnB3EU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3a6bb4-24b8-4086-a29d-ee6c509b6221/1/mFW4DEXftep6qn3R2O2LFPnB3EU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3a6bb4-24b8-4086-a29d-ee6c509b6221/1/mFW4DEXftep6qn3R2O2LFPnB3EU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:e4:99:0f:b9:37:0a:1d:e7:68:8c:5f:98:c9:5e:9c:fd:e2: 07:54:40:e3:3f:47:0e:b6:61:62:0c:62:2f:a7:0d:bd:dc:ca: b1:52:0c:77:56:c0:32:c2:78:2f:ec:a8:89:4c:da:02:17:60: 54:0c:4d:42:e4:73:66:a1:28:87:b6:53:12:c7:eb:b6:83:16: 4f:f2:0d:61:77:f5:1f:29:30:04:81:94:32:38:f0:dd:0a:41: 9e:c0:2b:12:b1:cf:93:04:8f:db:6b:41:3b:98:88:f4:ff:7b: e5:d4:79:e6:36:2b:62:52:ca:4c:af:40:d7:01:11:fb:b2:fc: c6:a0:a0:85:e3:87:a0:3d:3a:96:46:81:2a:a4:9e:38:41:9b: 5c:be:35:53:73:c7:a5:ff:71:7a:5d:93:b9:1f:c9:2b:5f:69: 81:1e:75:5d:29:b7:6e:46:86:fa:63:cb:bc:6d:1e:3f:78:cc: 0a:b1:08:fd:6e:ea:40:ae:7a:48:41:a4:25:ca:9b:80:cf:ad: 1c:a6:ef:75:c6:7a:ef:a0:ff:4d:66:b8:db:b4:51:88:2d:d6: d8:0b:eb:9a:93:b7:58:45:33:e8:b6:20:c6:27:1d:5b:0a:32: d8:77:21:23:a6:25:b7:1b:cf:b5:d8:99:d0:27:b9:9f:6e:51: 00:f6:7a:40 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtFSpxKH7u52HJNZjeEtzmZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk4NTViODBjNDVkZmI1ZWE3YWFhN2RkMWQ4ZWQ4YjE0Zjlj MWRjNDUwHhcNMjUxMjIyMDkwMTE2WhcNMjUxMjIzMDkwMTE2WjAzMTEwLwYDVQQD Eyg3OTVlYjkwYTRmNDk4YWRlNjQ2NWQyMmY2MGZhZmE0NjQ1ZWRhM2RlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqCJT5VQZrimCKksfH//impiSfazt GI149bdvYVrljN++pxGIRLyswPlGVTIEsj2D6A6j6ptl+xY3735Bcia43H+kZZZH iAh/dnL4AM+/1Quv7UAxFo4DwR4yiFOxqF2xz4tAAi9vKp93tzDf7ayc9jfZ9ILo Hd9jDagiJvznzUwFRKppK801QO/97jiIXtutrIVaFTIn9FGzzQtJ701EBy2Hsahz AshKQJASmroQPWspkLSl5+KEd0WYpO9Ud3Nl+kX0c2mz/odpx3ny6KtCuaF35ztm 7pxuJJqyqC84PeiiI7PQgaZSSdal/mLPqsrKaqL3cPcJbbWvUwSGgRhyqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHleuQpPSYreZGXSL2D6+kZF7aPeMB8GA1UdIwQY MBaAFJhVuAxF37Xqeqp90djtixT5wdxFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbUZXNERFWGZ0ZXA2cW4zUjJPMkxGUG5CM0VVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8zYTZiYjQtMjRiOC00MDg2LWEyOWQt ZWU2YzUwOWI2MjIxLzEvbUZXNERFWGZ0ZXA2cW4zUjJPMkxGUG5CM0VVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy8zYTZiYjQtMjRiOC00MDg2LWEyOWQtZWU2YzUwOWI2MjIx LzEvbUZXNERFWGZ0ZXA2cW4zUjJPMkxGUG5CM0VVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiOSZD7k3 Ch3naIxfmMlenP3iB1RA4z9HDrZhYgxiL6cNvdzKsVIMd1bAMsJ4L+yoiUzaAhdg VAxNQuRzZqEoh7ZTEsfrtoMWT/INYXf1HykwBIGUMjjw3QpBnsArErHPkwSP22tB O5iI9P975dR55jYrYlLKTK9A1wER+7L8xqCgheOHoD06lkaBKqSeOEGbXL41U3PH pf9xel2TuR/JK19pgR51XSm3bkaG+mPLvG0eP3jMCrEI/W7qQK56SEGkJcqbgM+t HKbvdcZ676D/TWa427RRiC3W2AvrmpO3WEUz6LYgxicdWwoy2HchI6YltxvPtdiZ 0Ce5n25RAPZ6QA== -----END CERTIFICATE-----Generated at Mon Dec 22 10:35:16 2025 by rpki-client