This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/5811c0-6dae-4dd4-987c-d46ffc501f36/1/mRtUIs1VeNRxXr5MUJcgJSPdVlg.mft File: mRtUIs1VeNRxXr5MUJcgJSPdVlg.mft (raw, json) Hash identifier: lpEECTyVwNzthNEHjmAHkpGc3jvkBYjL/DC3gzLOdgw= Subject key identifier: 6E:05:04:99:AE:C7:97:25:91:56:57:E1:B2:1A:D0:0E:47:F4:30:2E Authority key identifier: 99:1B:54:22:CD:55:78:D4:71:5E:BE:4C:50:97:20:25:23:DD:56:58 Certificate issuer: /CN=991b5422cd5578d4715ebe4c5097202523dd5658 Certificate serial: 019B631E846E884480AC767EAFC802708863 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mRtUIs1VeNRxXr5MUJcgJSPdVlg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/5811c0-6dae-4dd4-987c-d46ffc501f36/1/mRtUIs1VeNRxXr5MUJcgJSPdVlg.mft Manifest number: 1624 Signing time: Sun 28 Dec 2025 04:01:42 +0000 Manifest this update: Sun 28 Dec 2025 04:01:42 +0000 Manifest next update: Mon 29 Dec 2025 04:01:42 +0000 Files and hashes: 1: dUzHcv1qzeux_y2IL7xdvYNLLOQ.roa (hash: nSNOUC9fK3tMm0ddVALi9dbfVwMcfIB34jQG6rm/2t0=) 2: mRtUIs1VeNRxXr5MUJcgJSPdVlg.crl (hash: 4Ga5hkfGpBDIBDF28wNwKj75H2kBkNglij3EahMb4FQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/5811c0-6dae-4dd4-987c-d46ffc501f36/1/mRtUIs1VeNRxXr5MUJcgJSPdVlg.crl rsync://rpki.ripe.net/repository/DEFAULT/23/5811c0-6dae-4dd4-987c-d46ffc501f36/1/mRtUIs1VeNRxXr5MUJcgJSPdVlg.mft rsync://rpki.ripe.net/repository/DEFAULT/mRtUIs1VeNRxXr5MUJcgJSPdVlg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:63:1e:84:6e:88:44:80:ac:76:7e:af:c8:02:70:88:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=991b5422cd5578d4715ebe4c5097202523dd5658 Validity Not Before: Dec 28 04:01:42 2025 GMT Not After : Dec 29 04:01:42 2025 GMT Subject: CN=6e050499aec79725915657e1b21ad00e47f4302e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:2f:48:24:70:9d:04:20:00:62:d3:65:54:23: 0a:be:39:c6:17:50:54:bd:45:06:00:19:c4:3d:45: fb:d5:11:b2:12:97:37:09:0b:6d:c2:85:62:57:90: b7:24:68:49:aa:df:b2:cd:20:d1:e6:08:08:8e:4b: 69:9c:cb:5d:4a:1b:f6:a1:37:e7:c6:0a:92:f7:93: ab:89:3d:a4:5b:2d:47:17:59:52:0b:07:82:dc:28: e7:3a:30:f9:e3:3c:29:09:62:0e:f0:a0:c2:66:91: da:67:b0:27:db:c3:46:73:d8:d5:bc:ee:b4:26:22: cd:e8:09:82:b4:19:02:e3:65:f7:61:58:79:cb:1c: ed:35:02:cf:40:16:e6:a6:07:69:61:00:b1:21:97: cf:70:63:c5:18:07:62:59:e7:ef:d3:e4:cc:7a:b7: 89:0e:f9:96:ef:8b:b7:11:d3:c1:8b:27:f4:34:b2: 2a:dd:4d:22:88:d5:ce:f9:0c:7d:bc:ae:2f:f4:eb: aa:35:3a:ec:bd:5e:ef:60:ad:a7:5d:25:90:18:08: 0a:c3:3c:e0:c9:a9:61:77:43:35:42:91:27:60:62: ab:ba:85:3d:68:2e:c0:f8:54:eb:3e:28:d5:bd:6a: 6b:fe:df:6a:b6:75:d5:09:bf:3c:86:d2:dc:a6:0f: 0f:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:05:04:99:AE:C7:97:25:91:56:57:E1:B2:1A:D0:0E:47:F4:30:2E X509v3 Authority Key Identifier: keyid:99:1B:54:22:CD:55:78:D4:71:5E:BE:4C:50:97:20:25:23:DD:56:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mRtUIs1VeNRxXr5MUJcgJSPdVlg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/5811c0-6dae-4dd4-987c-d46ffc501f36/1/mRtUIs1VeNRxXr5MUJcgJSPdVlg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/5811c0-6dae-4dd4-987c-d46ffc501f36/1/mRtUIs1VeNRxXr5MUJcgJSPdVlg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:b1:a7:9c:79:fc:1b:03:29:cc:91:52:de:56:b2:c9:ee:43: 98:71:d7:85:2c:a2:e6:f5:a1:a3:b6:6a:a0:69:ea:d2:55:62: 66:4d:29:43:c9:75:47:2c:2e:b6:ee:97:92:2a:32:6f:8f:59: a8:87:8c:7b:8f:2d:6f:87:59:c0:73:6c:78:b2:50:5b:ce:90: a5:d0:e0:c6:b6:32:0e:11:81:3f:16:d0:ec:17:10:25:98:a2: 06:34:79:7e:43:04:73:a9:96:62:7f:1d:81:c6:25:09:f9:1f: a7:f3:73:04:86:76:f7:6c:a3:4a:51:1b:1a:2f:94:56:9a:3b: e4:8d:c1:6c:71:b6:49:22:9f:cf:e8:b8:ee:b2:8f:da:ed:f8: eb:c4:88:01:7a:63:ff:e9:db:7d:18:2d:6a:6f:1d:ca:fe:ac: f0:f5:86:a0:c7:d8:8f:d8:da:fa:c8:10:ca:fa:d7:7a:31:3f: 59:d8:a9:e1:43:f7:68:42:31:cc:af:8a:70:f6:6e:d6:a9:c2: 21:64:67:05:d0:d7:be:61:7f:6c:a5:00:1b:69:ca:6a:30:f5: f4:55:79:a9:59:9a:83:0e:5a:9a:50:28:25:43:03:ff:b4:f8: 2a:c3:9d:52:f8:33:8f:92:8a:f8:1c:9c:80:8d:86:64:0b:3c: 02:0c:3f:66 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtjHoRuiESArHZ+r8gCcIhjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk5MWI1NDIyY2Q1NTc4ZDQ3MTVlYmU0YzUwOTcyMDI1MjNk ZDU2NTgwHhcNMjUxMjI4MDQwMTQyWhcNMjUxMjI5MDQwMTQyWjAzMTEwLwYDVQQD Eyg2ZTA1MDQ5OWFlYzc5NzI1OTE1NjU3ZTFiMjFhZDAwZTQ3ZjQzMDJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvi9IJHCdBCAAYtNlVCMKvjnGF1BU vUUGABnEPUX71RGyEpc3CQttwoViV5C3JGhJqt+yzSDR5ggIjktpnMtdShv2oTfn xgqS95OriT2kWy1HF1lSCweC3CjnOjD54zwpCWIO8KDCZpHaZ7An28NGc9jVvO60 JiLN6AmCtBkC42X3YVh5yxztNQLPQBbmpgdpYQCxIZfPcGPFGAdiWefv0+TMereJ DvmW74u3EdPBiyf0NLIq3U0iiNXO+Qx9vK4v9OuqNTrsvV7vYK2nXSWQGAgKwzzg yalhd0M1QpEnYGKruoU9aC7A+FTrPijVvWpr/t9qtnXVCb88htLcpg8PWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG4FBJmux5clkVZX4bIa0A5H9DAuMB8GA1UdIwQY MBaAFJkbVCLNVXjUcV6+TFCXICUj3VZYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbVJ0VUlzMVZlTlJ4WHI1TVVKY2dKU1BkVmxnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy81ODExYzAtNmRhZS00ZGQ0LTk4N2Mt ZDQ2ZmZjNTAxZjM2LzEvbVJ0VUlzMVZlTlJ4WHI1TVVKY2dKU1BkVmxnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMy81ODExYzAtNmRhZS00ZGQ0LTk4N2MtZDQ2ZmZjNTAxZjM2 LzEvbVJ0VUlzMVZlTlJ4WHI1TVVKY2dKU1BkVmxnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARbGnnHn8 GwMpzJFS3layye5DmHHXhSyi5vWho7ZqoGnq0lViZk0pQ8l1Rywutu6Xkioyb49Z qIeMe48tb4dZwHNseLJQW86QpdDgxrYyDhGBPxbQ7BcQJZiiBjR5fkMEc6mWYn8d gcYlCfkfp/NzBIZ292yjSlEbGi+UVpo75I3BbHG2SSKfz+i47rKP2u3468SIAXpj /+nbfRgtam8dyv6s8PWGoMfYj9ja+sgQyvrXejE/Wdip4UP3aEIxzK+KcPZu1qnC IWRnBdDXvmF/bKUAG2nKajD19FV5qVmagw5amlAoJUMD/7T4KsOdUvgzj5KK+Byc gI2GZAs8Agw/Zg== -----END CERTIFICATE-----Generated at Sun Dec 28 05:04:00 2025 by rpki-client