This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/e439ca-519d-432c-b96a-3d2fb810e191/1/mU78TONvxEPcWBYnTqwddpMCkIE.mft File: mU78TONvxEPcWBYnTqwddpMCkIE.mft (raw, json) Hash identifier: Cfyaf6FM2d3pwQlGM1OO5hy7+yNPvWGtKX2jDjjF/rw= Subject key identifier: D5:E3:7A:D7:6E:90:5A:59:A8:45:33:2E:5F:A3:19:2B:D1:7D:BE:0D Authority key identifier: 99:4E:FC:4C:E3:6F:C4:43:DC:58:16:27:4E:AC:1D:76:93:02:90:81 Certificate issuer: /CN=994efc4ce36fc443dc5816274eac1d7693029081 Certificate serial: 019B3A220E729C1BA6729C57CB8E79A7F94B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mU78TONvxEPcWBYnTqwddpMCkIE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/e439ca-519d-432c-b96a-3d2fb810e191/1/mU78TONvxEPcWBYnTqwddpMCkIE.mft Manifest number: 1786 Signing time: Sat 20 Dec 2025 05:01:08 +0000 Manifest this update: Sat 20 Dec 2025 05:01:08 +0000 Manifest next update: Sun 21 Dec 2025 05:01:08 +0000 Files and hashes: 1: MhCfthOppsmBaiAYHVVk_2GAFYE.roa (hash: Prn81nEGvzCuVunt3w8adc4Qe6uMN6AiQAgwWZDR5Uo=) 2: mU78TONvxEPcWBYnTqwddpMCkIE.crl (hash: INjnnwkK42spiuuVCpTHy5YU+0KOMXXJRatx5VLMLRc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/e439ca-519d-432c-b96a-3d2fb810e191/1/mU78TONvxEPcWBYnTqwddpMCkIE.crl rsync://rpki.ripe.net/repository/DEFAULT/28/e439ca-519d-432c-b96a-3d2fb810e191/1/mU78TONvxEPcWBYnTqwddpMCkIE.mft rsync://rpki.ripe.net/repository/DEFAULT/mU78TONvxEPcWBYnTqwddpMCkIE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:22:0e:72:9c:1b:a6:72:9c:57:cb:8e:79:a7:f9:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=994efc4ce36fc443dc5816274eac1d7693029081 Validity Not Before: Dec 20 05:01:08 2025 GMT Not After : Dec 21 05:01:08 2025 GMT Subject: CN=d5e37ad76e905a59a845332e5fa3192bd17dbe0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:19:79:98:79:ec:87:9b:a4:6d:ba:d3:de:bf: a9:79:59:62:69:01:15:78:ff:9e:36:61:78:c3:00: 56:34:54:da:84:a7:30:c6:e2:eb:d5:17:bb:ce:d5: 27:c0:28:11:de:a2:45:b9:05:c1:94:bd:0d:ce:e5: b2:45:38:68:24:a7:a0:b6:77:c1:fe:2f:3a:12:98: 43:80:07:ea:91:45:43:d7:94:7a:b3:66:55:70:6a: 77:fd:78:07:bf:2e:54:db:2b:20:55:1a:be:1c:b5: 73:70:87:85:d3:e8:89:6f:0d:fb:69:f2:9b:ca:01: 6b:00:e7:31:50:97:ff:45:a5:54:de:08:54:79:20: dd:65:1f:91:05:4b:ad:44:eb:77:19:d5:c5:d5:ff: bf:6f:81:d0:13:11:1d:ce:5b:8d:11:25:b9:1d:01: ab:13:ae:7b:47:5f:f8:a4:4c:d1:bc:29:47:d7:ad: 8a:93:08:d2:b0:40:cf:64:75:db:e9:ab:38:33:06: 1d:68:d3:ea:79:47:0f:0d:08:08:7e:71:2c:46:1b: bf:50:42:59:65:e1:fe:60:96:5e:12:f0:6d:cd:42: bd:a1:eb:c0:08:64:49:d7:ff:8f:1d:51:41:fb:33: 28:7e:87:bd:02:fa:3e:d7:d2:ee:93:c4:b0:a7:80: 95:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:E3:7A:D7:6E:90:5A:59:A8:45:33:2E:5F:A3:19:2B:D1:7D:BE:0D X509v3 Authority Key Identifier: keyid:99:4E:FC:4C:E3:6F:C4:43:DC:58:16:27:4E:AC:1D:76:93:02:90:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mU78TONvxEPcWBYnTqwddpMCkIE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/e439ca-519d-432c-b96a-3d2fb810e191/1/mU78TONvxEPcWBYnTqwddpMCkIE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/e439ca-519d-432c-b96a-3d2fb810e191/1/mU78TONvxEPcWBYnTqwddpMCkIE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:c3:5c:01:e5:d9:8e:19:12:6e:04:74:52:a0:17:a6:04:2f: 47:6f:de:45:e3:40:0f:31:04:0f:e0:a4:0a:92:35:f5:7b:18: 10:84:39:2e:c4:45:5e:78:b1:7b:a6:10:ae:0a:01:cf:03:b1: 07:67:11:7a:a1:4d:0a:51:f3:3b:1a:59:26:5c:ab:ee:8d:b4: 86:74:c6:22:02:6f:bf:7c:14:90:2c:43:4d:5c:ac:3c:00:d0: 0a:39:c4:c3:44:d0:97:54:ce:31:1f:94:5d:9e:61:04:a1:66: 28:29:fe:ae:2d:2e:78:d2:34:f5:a1:51:96:34:12:d8:e5:01: 37:0b:bd:2e:c2:18:60:f2:7f:ef:57:b4:09:6d:e6:d0:44:bc: f3:e2:1b:21:6c:79:46:20:c1:da:dd:87:84:e4:1e:ed:f5:1b: 5f:91:90:f5:67:6c:bc:5a:61:63:83:30:72:c2:1e:34:d9:dc: 60:e5:b6:fb:83:c8:c8:d6:ae:0e:41:9d:8e:19:fd:6b:ef:86: fc:ca:f8:4d:02:12:d0:53:e2:f7:dc:63:83:c3:b5:d0:50:8e: 89:7c:d1:10:f0:14:ea:c5:2a:78:b0:33:1c:6d:d2:7f:35:0c: 6b:c9:24:30:3c:30:76:f0:c6:a3:5d:a3:70:e2:7d:f7:12:ab: 00:43:3b:12 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6Ig5ynBumcpxXy455p/lLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk5NGVmYzRjZTM2ZmM0NDNkYzU4MTYyNzRlYWMxZDc2OTMw MjkwODEwHhcNMjUxMjIwMDUwMTA4WhcNMjUxMjIxMDUwMTA4WjAzMTEwLwYDVQQD EyhkNWUzN2FkNzZlOTA1YTU5YTg0NTMzMmU1ZmEzMTkyYmQxN2RiZTBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlhl5mHnsh5ukbbrT3r+peVliaQEV eP+eNmF4wwBWNFTahKcwxuLr1Re7ztUnwCgR3qJFuQXBlL0NzuWyRThoJKegtnfB /i86EphDgAfqkUVD15R6s2ZVcGp3/XgHvy5U2ysgVRq+HLVzcIeF0+iJbw37afKb ygFrAOcxUJf/RaVU3ghUeSDdZR+RBUutROt3GdXF1f+/b4HQExEdzluNESW5HQGr E657R1/4pEzRvClH162KkwjSsEDPZHXb6as4MwYdaNPqeUcPDQgIfnEsRhu/UEJZ ZeH+YJZeEvBtzUK9oevACGRJ1/+PHVFB+zMofoe9Avo+19Luk8Swp4CV5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNXjetdukFpZqEUzLl+jGSvRfb4NMB8GA1UdIwQY MBaAFJlO/Ezjb8RD3FgWJ06sHXaTApCBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbVU3OFRPTnZ4RVBjV0JZblRxd2RkcE1Da0lFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC9lNDM5Y2EtNTE5ZC00MzJjLWI5NmEt M2QyZmI4MTBlMTkxLzEvbVU3OFRPTnZ4RVBjV0JZblRxd2RkcE1Da0lFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC9lNDM5Y2EtNTE5ZC00MzJjLWI5NmEtM2QyZmI4MTBlMTkx LzEvbVU3OFRPTnZ4RVBjV0JZblRxd2RkcE1Da0lFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANMNcAeXZ jhkSbgR0UqAXpgQvR2/eReNADzEED+CkCpI19XsYEIQ5LsRFXnixe6YQrgoBzwOx B2cReqFNClHzOxpZJlyr7o20hnTGIgJvv3wUkCxDTVysPADQCjnEw0TQl1TOMR+U XZ5hBKFmKCn+ri0ueNI09aFRljQS2OUBNwu9LsIYYPJ/71e0CW3m0ES88+IbIWx5 RiDB2t2HhOQe7fUbX5GQ9WdsvFphY4MwcsIeNNncYOW2+4PIyNauDkGdjhn9a++G /Mr4TQIS0FPi99xjg8O10FCOiXzREPAU6sUqeLAzHG3SfzUMa8kkMDwwdvDGo12j cOJ99xKrAEM7Eg== -----END CERTIFICATE-----Generated at Sat Dec 20 08:46:08 2025 by rpki-client