This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/bdbde0-1d97-4126-93e6-8e77173dc4bc/1/_MrtD4HiSNrzMrgIQ9Sino19UeQ.mft File: _MrtD4HiSNrzMrgIQ9Sino19UeQ.mft (raw, json) Hash identifier: O1zVvVHVYgn44wwMcrXcmuxMxPvkVIdHMt/fNri0UO8= Subject key identifier: 5E:F0:3F:1F:03:DA:0A:C5:57:19:94:80:D9:05:85:D9:A3:02:6C:EA Authority key identifier: FC:CA:ED:0F:81:E2:48:DA:F3:32:B8:08:43:D4:A2:9E:8D:7D:51:E4 Certificate issuer: /CN=fccaed0f81e248daf332b80843d4a29e8d7d51e4 Certificate serial: 019B54BDA7AF84C66FAEF173A0FE2665D907 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_MrtD4HiSNrzMrgIQ9Sino19UeQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/bdbde0-1d97-4126-93e6-8e77173dc4bc/1/_MrtD4HiSNrzMrgIQ9Sino19UeQ.mft Manifest number: 14BE Signing time: Thu 25 Dec 2025 09:01:13 +0000 Manifest this update: Thu 25 Dec 2025 09:01:13 +0000 Manifest next update: Fri 26 Dec 2025 09:01:13 +0000 Files and hashes: 1: IYbiKXlQmjVmc2EBeJ1ZyhaFvEg.roa (hash: 4Xy4cTbgeWofaNajn2cgHkph6DzzB6nqlaBQdJk6xLo=) 2: _MrtD4HiSNrzMrgIQ9Sino19UeQ.crl (hash: lQGsrov8Fs/3+aozX55Yqr/5q5sO5mNA08zlfQvQSWs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/bdbde0-1d97-4126-93e6-8e77173dc4bc/1/_MrtD4HiSNrzMrgIQ9Sino19UeQ.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/bdbde0-1d97-4126-93e6-8e77173dc4bc/1/_MrtD4HiSNrzMrgIQ9Sino19UeQ.mft rsync://rpki.ripe.net/repository/DEFAULT/_MrtD4HiSNrzMrgIQ9Sino19UeQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 03:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:54:bd:a7:af:84:c6:6f:ae:f1:73:a0:fe:26:65:d9:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fccaed0f81e248daf332b80843d4a29e8d7d51e4 Validity Not Before: Dec 25 09:01:13 2025 GMT Not After : Dec 26 09:01:13 2025 GMT Subject: CN=5ef03f1f03da0ac557199480d90585d9a3026cea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:22:bb:32:46:0e:b3:43:98:b9:81:5d:71:48: 3a:4a:dd:4d:e3:24:38:75:1e:b9:0f:0b:0e:a4:89: 6b:60:4b:19:b3:3b:98:5b:ba:72:39:c9:81:44:4e: c7:f5:e8:e6:8a:61:21:dc:0c:be:96:4d:e1:a4:4c: d6:f6:b6:2b:f1:10:f4:ae:ec:81:1f:9e:92:49:d5: 24:3e:c6:64:37:13:26:da:8a:1f:56:1a:de:91:ed: 8e:24:36:2a:14:be:be:bd:4b:65:9f:eb:58:79:ec: 70:e9:82:e4:e0:0c:5c:0b:f5:0d:f7:c7:50:27:38: 4d:da:37:e6:92:7d:f5:42:04:46:3f:e7:5b:66:61: 88:6b:52:fb:8a:ff:fd:f5:1a:da:a8:2f:86:a6:2f: 21:e6:f2:56:34:a6:99:d4:cc:75:86:34:22:90:2b: 62:ac:37:ba:ec:6a:45:fd:39:9c:39:f8:80:a3:9f: 8e:41:1f:86:f7:7c:6d:c3:2f:d3:c5:e9:be:39:1c: cf:57:99:f7:49:be:09:67:ee:99:a8:53:5a:49:2e: e0:56:d2:a0:bd:c6:ad:ac:5c:51:d3:8b:98:8a:e4: 50:81:0a:7a:26:d8:30:dc:95:ac:f8:70:28:f3:a5: 85:b6:88:a8:64:cf:7e:a1:f3:18:41:ee:38:35:00: aa:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:F0:3F:1F:03:DA:0A:C5:57:19:94:80:D9:05:85:D9:A3:02:6C:EA X509v3 Authority Key Identifier: keyid:FC:CA:ED:0F:81:E2:48:DA:F3:32:B8:08:43:D4:A2:9E:8D:7D:51:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_MrtD4HiSNrzMrgIQ9Sino19UeQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/bdbde0-1d97-4126-93e6-8e77173dc4bc/1/_MrtD4HiSNrzMrgIQ9Sino19UeQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/bdbde0-1d97-4126-93e6-8e77173dc4bc/1/_MrtD4HiSNrzMrgIQ9Sino19UeQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:48:fc:66:0a:37:49:35:dc:9c:a6:78:8a:6a:31:e9:a1:12: 83:04:5f:52:70:23:68:e5:b3:30:af:1c:b6:0f:f0:7b:95:54: f4:7c:19:5b:52:ee:3f:b4:97:af:fb:e6:cb:91:64:3c:e2:2b: a9:8f:c3:56:06:28:24:0d:cf:25:38:2d:82:d6:3c:99:fd:68: 95:5c:ca:3a:a2:0c:e1:95:a5:e9:71:bc:1b:fd:7d:13:4a:2f: b2:a6:1d:57:cc:c9:93:8c:1b:90:48:3f:1f:0f:77:a4:a1:6f: 0e:53:c4:8c:30:1d:61:93:c8:70:26:8e:f2:71:ca:9c:64:86: e7:10:62:97:d8:14:e4:d3:f6:0e:4f:1f:7d:ba:11:11:9c:0a: 4c:f7:af:20:d5:f5:0f:c3:2f:fa:1b:2b:b2:05:0b:d9:24:83: 9a:03:c4:6f:56:47:84:d9:44:1e:85:71:82:ff:2e:6e:fe:ff: 86:dd:46:88:af:f2:4f:7d:4c:68:81:f7:93:44:d6:bb:29:ab: 94:b7:6c:09:75:ef:3e:bd:bb:b5:f3:09:7e:2e:b4:74:2c:43: f1:10:69:0e:a7:b7:0e:59:22:da:0f:a5:97:75:88:ae:66:73: 42:4c:e8:25:6a:9c:f6:a7:f7:f8:ac:78:0f:2d:14:8b:92:e8: f4:16:c9:97 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtUvaevhMZvrvFzoP4mZdkHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZjY2FlZDBmODFlMjQ4ZGFmMzMyYjgwODQzZDRhMjllOGQ3 ZDUxZTQwHhcNMjUxMjI1MDkwMTEzWhcNMjUxMjI2MDkwMTEzWjAzMTEwLwYDVQQD Eyg1ZWYwM2YxZjAzZGEwYWM1NTcxOTk0ODBkOTA1ODVkOWEzMDI2Y2VhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuSK7MkYOs0OYuYFdcUg6St1N4yQ4 dR65DwsOpIlrYEsZszuYW7pyOcmBRE7H9ejmimEh3Ay+lk3hpEzW9rYr8RD0ruyB H56SSdUkPsZkNxMm2oofVhreke2OJDYqFL6+vUtln+tYeexw6YLk4AxcC/UN98dQ JzhN2jfmkn31QgRGP+dbZmGIa1L7iv/99RraqC+Gpi8h5vJWNKaZ1Mx1hjQikCti rDe67GpF/TmcOfiAo5+OQR+G93xtwy/Txem+ORzPV5n3Sb4JZ+6ZqFNaSS7gVtKg vcatrFxR04uYiuRQgQp6Jtgw3JWs+HAo86WFtoioZM9+ofMYQe44NQCqnwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF7wPx8D2grFVxmUgNkFhdmjAmzqMB8GA1UdIwQY MBaAFPzK7Q+B4kja8zK4CEPUop6NfVHkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX01ydEQ0SGlTTnJ6TXJnSVE5U2lubzE5VWVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC9iZGJkZTAtMWQ5Ny00MTI2LTkzZTYt OGU3NzE3M2RjNGJjLzEvX01ydEQ0SGlTTnJ6TXJnSVE5U2lubzE5VWVRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC9iZGJkZTAtMWQ5Ny00MTI2LTkzZTYtOGU3NzE3M2RjNGJj LzEvX01ydEQ0SGlTTnJ6TXJnSVE5U2lubzE5VWVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQUj8Zgo3 STXcnKZ4imox6aESgwRfUnAjaOWzMK8ctg/we5VU9HwZW1LuP7SXr/vmy5FkPOIr qY/DVgYoJA3PJTgtgtY8mf1olVzKOqIM4ZWl6XG8G/19E0ovsqYdV8zJk4wbkEg/ Hw93pKFvDlPEjDAdYZPIcCaO8nHKnGSG5xBil9gU5NP2Dk8ffboREZwKTPevINX1 D8Mv+hsrsgUL2SSDmgPEb1ZHhNlEHoVxgv8ubv7/ht1GiK/yT31MaIH3k0TWuymr lLdsCXXvPr27tfMJfi60dCxD8RBpDqe3Dlki2g+ll3WIrmZzQkzoJWqc9qf3+Kx4 Dy0Ui5Lo9BbJlw== -----END CERTIFICATE-----Generated at Thu Dec 25 11:15:27 2025 by rpki-client