This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/7c91ca-55f7-43a4-b950-8dc94e89bf03/1/md6y4fhaF9okDPyBbZcsheQR5iQ.mft File: md6y4fhaF9okDPyBbZcsheQR5iQ.mft (raw, json) Hash identifier: 7Koa8NMtnMBHXCu1RSgk+hCpkcKZEIjDVg7OhGdfdRQ= Subject key identifier: 40:29:FF:72:28:47:72:90:C8:71:27:A2:B0:AF:11:69:FA:3B:47:CF Authority key identifier: 99:DE:B2:E1:F8:5A:17:DA:24:0C:FC:81:6D:97:2C:85:E4:11:E6:24 Certificate issuer: /CN=99deb2e1f85a17da240cfc816d972c85e411e624 Certificate serial: 019B50A98AC9FE64A8146A061D2D169B0EB7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/md6y4fhaF9okDPyBbZcsheQR5iQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/7c91ca-55f7-43a4-b950-8dc94e89bf03/1/md6y4fhaF9okDPyBbZcsheQR5iQ.mft Manifest number: 1794 Signing time: Wed 24 Dec 2025 14:00:46 +0000 Manifest this update: Wed 24 Dec 2025 14:00:46 +0000 Manifest next update: Thu 25 Dec 2025 14:00:46 +0000 Files and hashes: 1: G9mF37Fb91r0jC33-YcK9r4IAmk.roa (hash: MaEVR8Nlqavgaakwb2T4C4sUXoGT+mVODKAXw14Vucs=) 2: md6y4fhaF9okDPyBbZcsheQR5iQ.crl (hash: HgmHSxCcnRvA5ot8OlbuCqRDL2DhW4ixPrtA1uKrFtU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/7c91ca-55f7-43a4-b950-8dc94e89bf03/1/md6y4fhaF9okDPyBbZcsheQR5iQ.crl rsync://rpki.ripe.net/repository/DEFAULT/23/7c91ca-55f7-43a4-b950-8dc94e89bf03/1/md6y4fhaF9okDPyBbZcsheQR5iQ.mft rsync://rpki.ripe.net/repository/DEFAULT/md6y4fhaF9okDPyBbZcsheQR5iQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 14:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:50:a9:8a:c9:fe:64:a8:14:6a:06:1d:2d:16:9b:0e:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99deb2e1f85a17da240cfc816d972c85e411e624 Validity Not Before: Dec 24 14:00:46 2025 GMT Not After : Dec 25 14:00:46 2025 GMT Subject: CN=4029ff7228477290c87127a2b0af1169fa3b47cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:b9:67:18:cc:7b:d8:03:16:22:cf:b9:03:f9: ff:5c:46:dd:f7:06:28:30:4a:09:99:47:41:56:34: ab:d4:e8:54:ae:b7:07:c6:6d:d7:f8:75:76:66:4d: 1e:8e:14:38:a0:6f:43:c0:33:80:bc:93:a0:86:e2: 3d:48:83:55:eb:e5:b8:ff:f1:1f:6d:b0:8a:f5:df: 39:a7:37:3f:89:c2:fc:b0:cb:8a:4c:b1:96:a7:3a: 0b:88:b3:f4:61:42:56:e6:e2:83:42:50:88:42:29: 4e:49:08:41:e6:f0:79:4a:2b:43:a3:31:5d:cb:4a: be:36:06:67:aa:2b:97:7d:d8:cf:47:c6:75:e2:17: 2d:9a:cf:c7:18:e7:e1:56:fe:6e:43:e3:c3:00:39: 3c:8e:34:13:4b:91:2a:4a:d2:ec:1f:65:75:87:b1: 7a:7e:a1:48:14:c0:2d:8b:20:f5:86:c4:a6:8d:d7: 23:82:f2:06:ad:98:32:c3:10:f2:30:73:b7:be:ed: 93:e7:e6:35:00:a3:1c:dd:9d:04:15:6f:43:27:1c: 45:fb:a0:0e:7e:24:c1:49:31:76:33:ed:70:a2:e8: be:5a:a6:c5:f5:63:a7:49:11:31:97:f9:2f:d3:8f: 8f:3e:76:2e:c9:62:c4:7b:b2:e1:36:f9:99:de:44: 38:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:29:FF:72:28:47:72:90:C8:71:27:A2:B0:AF:11:69:FA:3B:47:CF X509v3 Authority Key Identifier: keyid:99:DE:B2:E1:F8:5A:17:DA:24:0C:FC:81:6D:97:2C:85:E4:11:E6:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/md6y4fhaF9okDPyBbZcsheQR5iQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/7c91ca-55f7-43a4-b950-8dc94e89bf03/1/md6y4fhaF9okDPyBbZcsheQR5iQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/7c91ca-55f7-43a4-b950-8dc94e89bf03/1/md6y4fhaF9okDPyBbZcsheQR5iQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:fc:c1:c1:02:54:21:df:92:e6:72:3a:bb:cd:37:d3:c5:4e: 3f:01:7e:11:21:f3:f1:6c:86:f0:73:e2:6d:79:01:79:35:cf: ec:b2:12:cb:ff:af:c7:5a:91:f6:30:c0:56:a9:cd:42:f4:f7: aa:c3:61:7a:0d:c3:14:1d:8e:4e:f2:2c:d9:05:f1:1a:43:11: 12:e8:82:43:53:28:0c:f8:56:61:e6:d3:4d:4a:a2:79:69:72: 25:84:ce:33:06:c0:28:b1:64:20:25:bf:94:10:3b:77:28:34: b3:e5:cc:d6:30:cd:64:cb:08:3f:b4:47:46:2f:85:3e:12:70: 66:ab:ba:7c:a7:ac:72:2d:5c:21:26:97:35:99:85:73:83:86: dd:9f:7c:ee:b4:5e:4e:ad:0b:be:45:52:7a:59:05:2e:fc:00: c1:6a:3a:18:74:be:4d:75:fe:6c:ff:5d:11:81:96:0e:19:dd: 6a:f0:c5:f7:06:1e:5a:fc:a8:59:2b:9b:b3:26:53:cd:52:dc: a6:78:33:6e:7c:3a:7b:4c:f5:e9:85:ec:12:d8:e9:79:f1:b8: e8:43:32:e0:9a:79:fb:bb:5f:db:c5:2a:58:e9:a5:90:eb:9b: 72:b6:5a:2c:81:e2:48:fc:59:d6:8d:45:89:6c:d3:de:a1:4c: c7:e4:98:f5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtQqYrJ/mSoFGoGHS0Wmw63MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk5ZGViMmUxZjg1YTE3ZGEyNDBjZmM4MTZkOTcyYzg1ZTQx MWU2MjQwHhcNMjUxMjI0MTQwMDQ2WhcNMjUxMjI1MTQwMDQ2WjAzMTEwLwYDVQQD Eyg0MDI5ZmY3MjI4NDc3MjkwYzg3MTI3YTJiMGFmMTE2OWZhM2I0N2NmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh7lnGMx72AMWIs+5A/n/XEbd9wYo MEoJmUdBVjSr1OhUrrcHxm3X+HV2Zk0ejhQ4oG9DwDOAvJOghuI9SINV6+W4//Ef bbCK9d85pzc/icL8sMuKTLGWpzoLiLP0YUJW5uKDQlCIQilOSQhB5vB5SitDozFd y0q+NgZnqiuXfdjPR8Z14hctms/HGOfhVv5uQ+PDADk8jjQTS5EqStLsH2V1h7F6 fqFIFMAtiyD1hsSmjdcjgvIGrZgywxDyMHO3vu2T5+Y1AKMc3Z0EFW9DJxxF+6AO fiTBSTF2M+1woui+WqbF9WOnSRExl/kv04+PPnYuyWLEe7LhNvmZ3kQ4WQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEAp/3IoR3KQyHEnorCvEWn6O0fPMB8GA1UdIwQY MBaAFJnesuH4WhfaJAz8gW2XLIXkEeYkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbWQ2eTRmaGFGOW9rRFB5QmJaY3NoZVFSNWlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy83YzkxY2EtNTVmNy00M2E0LWI5NTAt OGRjOTRlODliZjAzLzEvbWQ2eTRmaGFGOW9rRFB5QmJaY3NoZVFSNWlRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMy83YzkxY2EtNTVmNy00M2E0LWI5NTAtOGRjOTRlODliZjAz LzEvbWQ2eTRmaGFGOW9rRFB5QmJaY3NoZVFSNWlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATPzBwQJU Id+S5nI6u80308VOPwF+ESHz8WyG8HPibXkBeTXP7LISy/+vx1qR9jDAVqnNQvT3 qsNheg3DFB2OTvIs2QXxGkMREuiCQ1MoDPhWYebTTUqieWlyJYTOMwbAKLFkICW/ lBA7dyg0s+XM1jDNZMsIP7RHRi+FPhJwZqu6fKesci1cISaXNZmFc4OG3Z987rRe Tq0LvkVSelkFLvwAwWo6GHS+TXX+bP9dEYGWDhndavDF9wYeWvyoWSubsyZTzVLc pngzbnw6e0z16YXsEtjpefG46EMy4Jp5+7tf28UqWOmlkOubcrZaLIHiSPxZ1o1F iWzT3qFMx+SY9Q== -----END CERTIFICATE-----Generated at Wed Dec 24 19:59:36 2025 by rpki-client