This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/5811c0-6dae-4dd4-987c-d46ffc501f36/1/mRtUIs1VeNRxXr5MUJcgJSPdVlg.mft File: mRtUIs1VeNRxXr5MUJcgJSPdVlg.mft (raw, json) Hash identifier: SIl1IvZlBxr+tV0QDqlDfcutSZfHyS8T4J/ukF1v4E8= Subject key identifier: A0:34:06:0B:EC:9A:16:04:9C:F3:4D:F1:97:ED:CF:51:09:49:D3:9E Authority key identifier: 99:1B:54:22:CD:55:78:D4:71:5E:BE:4C:50:97:20:25:23:DD:56:58 Certificate issuer: /CN=991b5422cd5578d4715ebe4c5097202523dd5658 Certificate serial: 019B424978FF84DD7E30FC6A1C2A55136FB6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mRtUIs1VeNRxXr5MUJcgJSPdVlg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/5811c0-6dae-4dd4-987c-d46ffc501f36/1/mRtUIs1VeNRxXr5MUJcgJSPdVlg.mft Manifest number: 1613 Signing time: Sun 21 Dec 2025 19:01:09 +0000 Manifest this update: Sun 21 Dec 2025 19:01:09 +0000 Manifest next update: Mon 22 Dec 2025 19:01:09 +0000 Files and hashes: 1: dUzHcv1qzeux_y2IL7xdvYNLLOQ.roa (hash: nSNOUC9fK3tMm0ddVALi9dbfVwMcfIB34jQG6rm/2t0=) 2: mRtUIs1VeNRxXr5MUJcgJSPdVlg.crl (hash: F2Yb+koj6MvciJDd1KVd/HSweU3hjoTCKp0t8e2afUQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/5811c0-6dae-4dd4-987c-d46ffc501f36/1/mRtUIs1VeNRxXr5MUJcgJSPdVlg.crl rsync://rpki.ripe.net/repository/DEFAULT/23/5811c0-6dae-4dd4-987c-d46ffc501f36/1/mRtUIs1VeNRxXr5MUJcgJSPdVlg.mft rsync://rpki.ripe.net/repository/DEFAULT/mRtUIs1VeNRxXr5MUJcgJSPdVlg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 19:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:49:78:ff:84:dd:7e:30:fc:6a:1c:2a:55:13:6f:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=991b5422cd5578d4715ebe4c5097202523dd5658 Validity Not Before: Dec 21 19:01:09 2025 GMT Not After : Dec 22 19:01:09 2025 GMT Subject: CN=a034060bec9a16049cf34df197edcf510949d39e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:d4:68:01:9c:45:33:10:05:c5:ff:ee:d2:98: ad:7e:c9:a3:c1:a6:66:23:d5:9f:4f:2a:63:56:e9: 83:79:3f:0c:d4:aa:7d:df:33:5e:4f:42:ba:a0:f3: 67:6f:c0:2c:fb:44:25:0c:25:46:79:f1:21:25:82: 09:ee:08:40:fa:7b:cc:9a:a4:12:93:ad:d5:24:1b: 13:19:7b:8f:b8:c1:8c:3e:15:5e:f1:d9:71:e2:0f: 64:dd:b0:ff:4a:44:ad:3d:45:b4:bf:40:48:c6:87: 05:79:0b:7f:47:c1:cb:7d:77:1b:12:5e:01:54:91: 2a:62:c0:dd:60:fc:74:6e:21:73:6b:c9:42:17:9e: 79:3a:1b:19:d9:52:5d:d7:ab:60:aa:56:81:e5:7d: ca:60:da:f1:7d:17:6c:0d:8b:6b:d3:80:b7:34:22: 3c:3c:08:54:e7:1b:35:dc:1b:c6:7a:cd:6e:d4:87: 76:01:22:7e:4c:ef:cb:90:67:de:9d:03:17:10:eb: 4b:3f:a0:f8:62:9e:d8:60:0d:44:36:cf:22:12:e9: b1:26:42:4c:e0:ad:2c:75:59:61:39:4a:d7:85:06: ea:87:9b:ba:cc:87:bc:6a:a7:21:80:69:20:5b:3c: 85:c8:b4:0a:87:d9:57:8a:00:db:83:f0:b7:c1:02: c2:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:34:06:0B:EC:9A:16:04:9C:F3:4D:F1:97:ED:CF:51:09:49:D3:9E X509v3 Authority Key Identifier: keyid:99:1B:54:22:CD:55:78:D4:71:5E:BE:4C:50:97:20:25:23:DD:56:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mRtUIs1VeNRxXr5MUJcgJSPdVlg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/5811c0-6dae-4dd4-987c-d46ffc501f36/1/mRtUIs1VeNRxXr5MUJcgJSPdVlg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/5811c0-6dae-4dd4-987c-d46ffc501f36/1/mRtUIs1VeNRxXr5MUJcgJSPdVlg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:b3:7c:3a:68:46:7f:d0:38:a9:61:09:0a:d6:06:94:de:34: 21:85:ce:f1:25:bf:31:6e:0d:04:3b:1f:41:4c:61:56:c1:72: 6d:7c:35:28:8f:95:1f:24:f9:ec:2c:c2:e2:32:7f:dd:79:33: d1:8a:af:32:d1:ca:e4:f7:42:30:75:f1:34:44:df:3c:f6:76: 8e:68:d1:62:e7:68:c5:62:a7:cf:cd:e3:0a:96:54:13:4d:4b: a6:80:c3:8e:7a:3e:64:99:0d:08:5d:d1:8e:f1:31:2e:15:83: 6c:0f:51:64:c3:7c:22:fd:8f:d0:ee:b6:46:29:b9:af:f2:5c: 26:78:d9:13:36:4f:dc:d8:75:e7:42:b8:24:33:d8:58:f0:90: 7f:fe:67:a8:8c:40:1a:59:c6:fb:e2:46:ee:d8:d4:d0:3d:63: 0b:2a:4c:99:50:66:ed:80:85:97:d5:47:a3:54:b5:ad:51:6c: 17:eb:30:2c:b3:c9:55:e2:d4:4d:22:21:f1:11:5d:e1:d5:fa: ef:30:2d:e8:6f:60:8c:d0:c2:43:f9:e5:25:d6:39:e9:36:da: 85:89:a7:af:57:c9:5d:60:1d:8c:63:99:41:d8:ee:a8:6a:04: a5:e0:79:d7:1f:b4:b8:d9:b9:45:33:ed:0a:02:44:87:81:c4: 20:bd:2c:02 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCSXj/hN1+MPxqHCpVE2+2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk5MWI1NDIyY2Q1NTc4ZDQ3MTVlYmU0YzUwOTcyMDI1MjNk ZDU2NTgwHhcNMjUxMjIxMTkwMTA5WhcNMjUxMjIyMTkwMTA5WjAzMTEwLwYDVQQD EyhhMDM0MDYwYmVjOWExNjA0OWNmMzRkZjE5N2VkY2Y1MTA5NDlkMzllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsdRoAZxFMxAFxf/u0pitfsmjwaZm I9WfTypjVumDeT8M1Kp93zNeT0K6oPNnb8As+0QlDCVGefEhJYIJ7ghA+nvMmqQS k63VJBsTGXuPuMGMPhVe8dlx4g9k3bD/SkStPUW0v0BIxocFeQt/R8HLfXcbEl4B VJEqYsDdYPx0biFza8lCF555OhsZ2VJd16tgqlaB5X3KYNrxfRdsDYtr04C3NCI8 PAhU5xs13BvGes1u1Id2ASJ+TO/LkGfenQMXEOtLP6D4Yp7YYA1ENs8iEumxJkJM 4K0sdVlhOUrXhQbqh5u6zIe8aqchgGkgWzyFyLQKh9lXigDbg/C3wQLCJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKA0BgvsmhYEnPNN8Zftz1EJSdOeMB8GA1UdIwQY MBaAFJkbVCLNVXjUcV6+TFCXICUj3VZYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbVJ0VUlzMVZlTlJ4WHI1TVVKY2dKU1BkVmxnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy81ODExYzAtNmRhZS00ZGQ0LTk4N2Mt ZDQ2ZmZjNTAxZjM2LzEvbVJ0VUlzMVZlTlJ4WHI1TVVKY2dKU1BkVmxnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMy81ODExYzAtNmRhZS00ZGQ0LTk4N2MtZDQ2ZmZjNTAxZjM2 LzEvbVJ0VUlzMVZlTlJ4WHI1TVVKY2dKU1BkVmxnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAILN8OmhG f9A4qWEJCtYGlN40IYXO8SW/MW4NBDsfQUxhVsFybXw1KI+VHyT57CzC4jJ/3Xkz 0YqvMtHK5PdCMHXxNETfPPZ2jmjRYudoxWKnz83jCpZUE01LpoDDjno+ZJkNCF3R jvExLhWDbA9RZMN8Iv2P0O62Rim5r/JcJnjZEzZP3Nh150K4JDPYWPCQf/5nqIxA GlnG++JG7tjU0D1jCypMmVBm7YCFl9VHo1S1rVFsF+swLLPJVeLUTSIh8RFd4dX6 7zAt6G9gjNDCQ/nlJdY56TbahYmnr1fJXWAdjGOZQdjuqGoEpeB51x+0uNm5RTPt CgJEh4HEIL0sAg== -----END CERTIFICATE-----Generated at Mon Dec 22 02:16:34 2025 by rpki-client