This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/2ed10c-04b0-4866-9b82-c522b74ddcfd/1/mFS9ioY6MYlcxsuSLzAIs_CKra4.mft File: mFS9ioY6MYlcxsuSLzAIs_CKra4.mft (raw, json) Hash identifier: 1QAffZlEU5gT2yZbuWQYDSQoRN3KzCNpP+hNP5pmmE0= Subject key identifier: 2D:75:D8:C0:1F:F3:6C:FB:CD:98:B5:26:33:AE:F1:F5:7A:CA:F4:CD Authority key identifier: 98:54:BD:8A:86:3A:31:89:5C:C6:CB:92:2F:30:08:B3:F0:8A:AD:AE Certificate issuer: /CN=9854bd8a863a31895cc6cb922f3008b3f08aadae Certificate serial: 019B27E5002480B1C0365B0608DD362165C2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mFS9ioY6MYlcxsuSLzAIs_CKra4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/2ed10c-04b0-4866-9b82-c522b74ddcfd/1/mFS9ioY6MYlcxsuSLzAIs_CKra4.mft Manifest number: 1710 Signing time: Tue 16 Dec 2025 16:01:17 +0000 Manifest this update: Tue 16 Dec 2025 16:01:17 +0000 Manifest next update: Wed 17 Dec 2025 16:01:17 +0000 Files and hashes: 1: 0vdRQP6oDKbrt2AMFylSvIwqIyg.roa (hash: pxwOPSpkw+fKuyNlbzf40gyqoMu+x6ekO7hHtNoYIH4=) 2: eehHZCCtBF4ofvtvmkP_R--u6i0.roa (hash: Qv+/+I4mInj8ZQpbVci07W/0Cj+7zt+KBmz4hdMjJLU=) 3: mFS9ioY6MYlcxsuSLzAIs_CKra4.crl (hash: 7Uc+ut0qzW4ebHtSF/bvUON8LlPtkNaBq/vkWERgGbI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/2ed10c-04b0-4866-9b82-c522b74ddcfd/1/mFS9ioY6MYlcxsuSLzAIs_CKra4.crl rsync://rpki.ripe.net/repository/DEFAULT/1d/2ed10c-04b0-4866-9b82-c522b74ddcfd/1/mFS9ioY6MYlcxsuSLzAIs_CKra4.mft rsync://rpki.ripe.net/repository/DEFAULT/mFS9ioY6MYlcxsuSLzAIs_CKra4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 14:45:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:27:e5:00:24:80:b1:c0:36:5b:06:08:dd:36:21:65:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9854bd8a863a31895cc6cb922f3008b3f08aadae Validity Not Before: Dec 16 16:01:17 2025 GMT Not After : Dec 17 16:01:17 2025 GMT Subject: CN=2d75d8c01ff36cfbcd98b52633aef1f57acaf4cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:4e:03:6d:cb:cd:8a:36:59:04:68:7f:be:e1: d9:78:fb:cc:c4:24:9e:42:e6:50:4f:65:71:77:a9: b0:1c:e2:90:08:5d:72:36:6b:69:9e:2b:72:ff:17: a1:51:3b:46:34:ae:49:8d:57:0b:9a:cf:bc:47:cc: 3e:a6:47:b6:d7:09:6e:a9:6a:4e:e6:ba:bb:a2:db: 33:8e:2c:f4:e6:78:6f:ba:93:ef:0c:ed:f2:2c:79: 48:2c:f7:53:95:4a:49:9f:d3:9a:02:02:4b:0d:da: 9e:59:de:b9:3b:9b:d1:87:03:2c:e7:53:09:4f:cc: 78:7f:2b:4f:fb:90:3f:bb:b0:e5:88:86:9a:1e:01: 78:5c:e0:8b:4e:64:62:71:51:cc:01:2e:ad:f4:ea: 4d:cd:8d:2d:14:26:15:27:75:f7:61:15:5c:57:62: 93:5b:20:bc:48:a6:60:c7:0b:c5:08:d6:af:66:53: 56:15:87:84:9b:fe:5d:d3:da:40:ed:42:dd:36:d1: 5f:52:34:d1:76:b0:f0:62:8d:23:0f:b3:fb:b0:32: b3:29:00:f3:cc:aa:c0:15:17:24:3c:f4:7c:46:6a: db:6b:d7:f2:69:92:4d:05:e9:06:5d:33:f7:cc:b7: 4a:e9:cf:4b:de:0d:46:fd:80:a2:42:d6:1c:ef:4a: 82:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:75:D8:C0:1F:F3:6C:FB:CD:98:B5:26:33:AE:F1:F5:7A:CA:F4:CD X509v3 Authority Key Identifier: keyid:98:54:BD:8A:86:3A:31:89:5C:C6:CB:92:2F:30:08:B3:F0:8A:AD:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mFS9ioY6MYlcxsuSLzAIs_CKra4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/2ed10c-04b0-4866-9b82-c522b74ddcfd/1/mFS9ioY6MYlcxsuSLzAIs_CKra4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/2ed10c-04b0-4866-9b82-c522b74ddcfd/1/mFS9ioY6MYlcxsuSLzAIs_CKra4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:73:53:29:08:2f:c8:42:45:d4:6a:83:f0:4a:97:58:ec:b5: 19:c2:cd:be:6f:09:9a:49:74:de:3d:96:52:b5:86:7f:08:bb: 36:59:4b:44:2b:96:b0:6d:c0:88:72:cd:0e:15:8c:9d:5d:2a: 23:a5:ec:6d:09:81:73:15:ea:e6:2d:08:45:cc:01:ee:f4:db: 35:e2:2d:8e:a8:36:6d:83:fc:ef:bb:71:78:dd:cc:02:fa:48: 77:8b:5b:7d:be:81:ec:21:46:c9:36:83:c5:c8:98:b7:42:6d: 4b:a4:e7:f7:43:2f:15:2c:43:5b:f1:9b:f2:2c:de:a6:45:07: f2:77:48:88:9a:c2:07:14:b7:52:4e:c5:f2:27:c1:ce:31:2e: 27:55:fb:85:f3:54:0d:f8:bc:38:0d:96:bf:fa:8f:e8:69:bb: 16:91:03:47:4c:46:dc:6e:bf:42:aa:b1:98:d8:2d:16:a8:50: 56:c3:1f:8c:dc:7a:10:b6:68:45:2d:6a:19:94:81:4c:a1:c7: 7a:6d:21:ea:9b:16:b3:f6:3c:1c:4e:f6:0f:a9:da:0d:2c:74: 8b:c4:6e:05:d8:ab:8b:fb:74:ae:61:1e:82:b8:49:3d:1e:db: 27:3d:57:ee:42:ea:75:97:fb:68:df:95:f0:41:ba:02:ed:4b: f7:ad:c0:88 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsn5QAkgLHANlsGCN02IWXCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk4NTRiZDhhODYzYTMxODk1Y2M2Y2I5MjJmMzAwOGIzZjA4 YWFkYWUwHhcNMjUxMjE2MTYwMTE3WhcNMjUxMjE3MTYwMTE3WjAzMTEwLwYDVQQD EygyZDc1ZDhjMDFmZjM2Y2ZiY2Q5OGI1MjYzM2FlZjFmNTdhY2FmNGNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA304DbcvNijZZBGh/vuHZePvMxCSe QuZQT2Vxd6mwHOKQCF1yNmtpnity/xehUTtGNK5JjVcLms+8R8w+pke21wluqWpO 5rq7otszjiz05nhvupPvDO3yLHlILPdTlUpJn9OaAgJLDdqeWd65O5vRhwMs51MJ T8x4fytP+5A/u7DliIaaHgF4XOCLTmRicVHMAS6t9OpNzY0tFCYVJ3X3YRVcV2KT WyC8SKZgxwvFCNavZlNWFYeEm/5d09pA7ULdNtFfUjTRdrDwYo0jD7P7sDKzKQDz zKrAFRckPPR8Rmrba9fyaZJNBekGXTP3zLdK6c9L3g1G/YCiQtYc70qCYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC112MAf82z7zZi1JjOu8fV6yvTNMB8GA1UdIwQY MBaAFJhUvYqGOjGJXMbLki8wCLPwiq2uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbUZTOWlvWTZNWWxjeHN1U0x6QUlzX0NLcmE0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC8yZWQxMGMtMDRiMC00ODY2LTliODIt YzUyMmI3NGRkY2ZkLzEvbUZTOWlvWTZNWWxjeHN1U0x6QUlzX0NLcmE0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZC8yZWQxMGMtMDRiMC00ODY2LTliODItYzUyMmI3NGRkY2Zk LzEvbUZTOWlvWTZNWWxjeHN1U0x6QUlzX0NLcmE0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO3NTKQgv yEJF1GqD8EqXWOy1GcLNvm8Jmkl03j2WUrWGfwi7NllLRCuWsG3AiHLNDhWMnV0q I6XsbQmBcxXq5i0IRcwB7vTbNeItjqg2bYP877txeN3MAvpId4tbfb6B7CFGyTaD xciYt0JtS6Tn90MvFSxDW/Gb8izepkUH8ndIiJrCBxS3Uk7F8ifBzjEuJ1X7hfNU Dfi8OA2Wv/qP6Gm7FpEDR0xG3G6/QqqxmNgtFqhQVsMfjNx6ELZoRS1qGZSBTKHH em0h6psWs/Y8HE72D6naDSx0i8RuBdiri/t0rmEegrhJPR7bJz1X7kLqdZf7aN+V 8EG6Au1L963AiA== -----END CERTIFICATE-----Generated at Tue Dec 16 22:34:51 2025 by rpki-client