This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/410d94-af78-4397-adfe-48d738c5947d/1/mdOi1vrWUWeOltJOJNGdcf44BAk.mft File: mdOi1vrWUWeOltJOJNGdcf44BAk.mft (raw, json) Hash identifier: u5nS1gr7G47ED1W/k4sOdpB0qsQZyJpJtdEFielvAz8= Subject key identifier: 83:61:51:DA:E0:65:61:76:AD:48:09:95:69:6C:99:21:37:0B:00:41 Authority key identifier: 99:D3:A2:D6:FA:D6:51:67:8E:96:D2:4E:24:D1:9D:71:FE:38:04:09 Certificate issuer: /CN=99d3a2d6fad651678e96d24e24d19d71fe380409 Certificate serial: 019B2F9E22854E4B4B683A6AC99CD60C872F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mdOi1vrWUWeOltJOJNGdcf44BAk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/410d94-af78-4397-adfe-48d738c5947d/1/mdOi1vrWUWeOltJOJNGdcf44BAk.mft Manifest number: 0FBC Signing time: Thu 18 Dec 2025 04:00:51 +0000 Manifest this update: Thu 18 Dec 2025 04:00:51 +0000 Manifest next update: Fri 19 Dec 2025 04:00:51 +0000 Files and hashes: 1: WVEl02tR4FpSWGE0ahJdvTx1Yno.roa (hash: 5NNyoAtIIwqGJh3NNq7YS6x3xdzErX6ICXLZ0eVA/9g=) 2: Z259DsTig8t3A9cd7HAu8mMPpR0.roa (hash: JRmS+LkkqmTVluxufvzadoY4Pc8kUr0Ok9oaH67NvH8=) 3: _ltzxuGkz6znSaa7SgLi6XMBftU.roa (hash: +kNXhyoqNb3mbEFSERmsDLNGdx3dBqclzBGCcZo07A0=) 4: mdOi1vrWUWeOltJOJNGdcf44BAk.crl (hash: JBUHqKVtc6q/2KGArwiLNuCOqPaUZz4JSXjUBiWPsHA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/410d94-af78-4397-adfe-48d738c5947d/1/mdOi1vrWUWeOltJOJNGdcf44BAk.crl rsync://rpki.ripe.net/repository/DEFAULT/25/410d94-af78-4397-adfe-48d738c5947d/1/mdOi1vrWUWeOltJOJNGdcf44BAk.mft rsync://rpki.ripe.net/repository/DEFAULT/mdOi1vrWUWeOltJOJNGdcf44BAk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:9e:22:85:4e:4b:4b:68:3a:6a:c9:9c:d6:0c:87:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99d3a2d6fad651678e96d24e24d19d71fe380409 Validity Not Before: Dec 18 04:00:51 2025 GMT Not After : Dec 19 04:00:51 2025 GMT Subject: CN=836151dae0656176ad480995696c9921370b0041 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:6c:ba:60:0c:d7:31:06:0e:06:d9:c4:7f:1f: 4f:53:55:46:48:b6:9e:e6:c0:07:02:ec:41:48:87: e5:65:2f:10:78:dc:5b:d3:13:2c:57:23:23:7b:ba: d8:6f:0e:3f:f8:c3:57:81:ca:81:66:88:d1:4b:c2: be:c0:63:f4:f2:ea:a5:90:be:94:6e:37:69:01:a4: 94:d5:3b:75:93:4f:ba:f3:06:c2:87:c2:79:0b:b9: 49:60:ad:23:5e:0c:d1:0d:aa:28:f4:00:1a:a9:6a: 90:99:b3:64:8e:af:df:21:97:82:95:a2:8d:5b:e2: 90:51:60:07:4d:be:27:a0:44:cb:88:45:99:1e:09: 9c:a9:40:2d:cb:8c:dc:64:e8:f3:3b:14:b9:ff:28: a5:01:38:6b:9c:a7:1b:52:fc:12:d8:91:e6:18:76: 86:2f:e8:85:65:ed:d7:18:46:60:fe:ca:02:7a:2f: 07:29:dc:ca:3e:35:ff:c4:59:3e:84:bd:24:83:a5: a6:9e:cf:bc:71:1f:fc:8a:79:3e:88:fe:32:9e:33: 80:d0:a0:31:05:0d:11:36:ed:0a:b0:a4:c0:80:ed: 49:fe:e4:bb:12:35:51:cb:e1:a6:4c:73:2b:64:76: 7d:36:ac:9d:2b:62:a8:0c:71:64:e0:44:72:28:c8: e5:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:61:51:DA:E0:65:61:76:AD:48:09:95:69:6C:99:21:37:0B:00:41 X509v3 Authority Key Identifier: keyid:99:D3:A2:D6:FA:D6:51:67:8E:96:D2:4E:24:D1:9D:71:FE:38:04:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mdOi1vrWUWeOltJOJNGdcf44BAk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/410d94-af78-4397-adfe-48d738c5947d/1/mdOi1vrWUWeOltJOJNGdcf44BAk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/410d94-af78-4397-adfe-48d738c5947d/1/mdOi1vrWUWeOltJOJNGdcf44BAk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c3:d9:93:ec:68:79:74:cc:2b:e7:83:86:45:ec:9f:e5:69:64: d2:46:c8:01:29:04:11:c5:be:23:f5:40:f5:aa:8b:5d:af:f5: a2:aa:20:e4:81:be:43:2d:0e:87:bb:af:0b:a8:09:1a:47:90: 22:2f:83:10:9c:a1:b8:91:49:69:d9:75:bf:8a:59:bf:08:52: 9c:f3:2c:c2:d1:6c:bb:4d:6b:c5:bf:69:a8:44:42:5a:c1:96: 5f:d5:59:7b:7f:a5:d9:4f:44:d3:c5:7b:d0:88:36:39:0d:37: 1e:49:bf:b8:1e:a6:37:d4:bc:ea:ec:f4:c4:63:db:13:c6:51: 36:ac:38:1f:13:bf:59:8e:a0:83:a8:02:ee:e9:c7:31:36:55: 51:a9:60:b7:04:5b:8e:e8:b3:7d:ca:06:0e:a6:68:ce:ab:ba: 24:1a:d9:39:34:a4:fb:d9:6d:98:c2:fb:b1:09:f1:6b:f8:51: a8:8c:50:c4:6a:af:3d:ea:06:de:57:6b:30:90:68:b9:b8:6f: 86:f3:fc:bd:90:50:65:16:86:12:10:b4:5f:0e:5b:33:14:a6: bc:d0:80:7d:4c:b4:bb:bd:d0:39:5b:81:ec:33:72:44:25:37: 20:51:79:2e:0c:37:d7:40:33:af:35:cc:21:3f:75:93:d4:23: 07:ad:31:e1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsvniKFTktLaDpqyZzWDIcvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk5ZDNhMmQ2ZmFkNjUxNjc4ZTk2ZDI0ZTI0ZDE5ZDcxZmUz ODA0MDkwHhcNMjUxMjE4MDQwMDUxWhcNMjUxMjE5MDQwMDUxWjAzMTEwLwYDVQQD Eyg4MzYxNTFkYWUwNjU2MTc2YWQ0ODA5OTU2OTZjOTkyMTM3MGIwMDQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy2y6YAzXMQYOBtnEfx9PU1VGSLae 5sAHAuxBSIflZS8QeNxb0xMsVyMje7rYbw4/+MNXgcqBZojRS8K+wGP08uqlkL6U bjdpAaSU1Tt1k0+68wbCh8J5C7lJYK0jXgzRDaoo9AAaqWqQmbNkjq/fIZeClaKN W+KQUWAHTb4noETLiEWZHgmcqUAty4zcZOjzOxS5/yilAThrnKcbUvwS2JHmGHaG L+iFZe3XGEZg/soCei8HKdzKPjX/xFk+hL0kg6Wmns+8cR/8ink+iP4ynjOA0KAx BQ0RNu0KsKTAgO1J/uS7EjVRy+GmTHMrZHZ9NqydK2KoDHFk4ERyKMjlzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFINhUdrgZWF2rUgJlWlsmSE3CwBBMB8GA1UdIwQY MBaAFJnTotb61lFnjpbSTiTRnXH+OAQJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbWRPaTF2cldVV2VPbHRKT0pOR2RjZjQ0QkFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS80MTBkOTQtYWY3OC00Mzk3LWFkZmUt NDhkNzM4YzU5NDdkLzEvbWRPaTF2cldVV2VPbHRKT0pOR2RjZjQ0QkFrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS80MTBkOTQtYWY3OC00Mzk3LWFkZmUtNDhkNzM4YzU5NDdk LzEvbWRPaTF2cldVV2VPbHRKT0pOR2RjZjQ0QkFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAw9mT7Gh5 dMwr54OGReyf5Wlk0kbIASkEEcW+I/VA9aqLXa/1oqog5IG+Qy0Oh7uvC6gJGkeQ Ii+DEJyhuJFJadl1v4pZvwhSnPMswtFsu01rxb9pqERCWsGWX9VZe3+l2U9E08V7 0Ig2OQ03Hkm/uB6mN9S86uz0xGPbE8ZRNqw4HxO/WY6gg6gC7unHMTZVUalgtwRb juizfcoGDqZozqu6JBrZOTSk+9ltmML7sQnxa/hRqIxQxGqvPeoG3ldrMJBoubhv hvP8vZBQZRaGEhC0Xw5bMxSmvNCAfUy0u73QOVuB7DNyRCU3IFF5Lgw310AzrzXM IT91k9QjB60x4Q== -----END CERTIFICATE-----Generated at Thu Dec 18 09:53:10 2025 by rpki-client