This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/bdbde0-1d97-4126-93e6-8e77173dc4bc/1/_MrtD4HiSNrzMrgIQ9Sino19UeQ.mft File: _MrtD4HiSNrzMrgIQ9Sino19UeQ.mft (raw, json) Hash identifier: JZsSviNtIIGEeDLBay77WKj9gypa6T+3pTiGtTi/Pl4= Subject key identifier: 20:6A:09:84:B7:10:4D:E4:84:00:07:5B:51:52:45:C0:7E:EB:B2:4C Authority key identifier: FC:CA:ED:0F:81:E2:48:DA:F3:32:B8:08:43:D4:A2:9E:8D:7D:51:E4 Certificate issuer: /CN=fccaed0f81e248daf332b80843d4a29e8d7d51e4 Certificate serial: 019B50E0627B329E182B9926851462D01994 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_MrtD4HiSNrzMrgIQ9Sino19UeQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/bdbde0-1d97-4126-93e6-8e77173dc4bc/1/_MrtD4HiSNrzMrgIQ9Sino19UeQ.mft Manifest number: 14BC Signing time: Wed 24 Dec 2025 15:00:41 +0000 Manifest this update: Wed 24 Dec 2025 15:00:41 +0000 Manifest next update: Thu 25 Dec 2025 15:00:41 +0000 Files and hashes: 1: IYbiKXlQmjVmc2EBeJ1ZyhaFvEg.roa (hash: 4Xy4cTbgeWofaNajn2cgHkph6DzzB6nqlaBQdJk6xLo=) 2: _MrtD4HiSNrzMrgIQ9Sino19UeQ.crl (hash: NiaDnXEXN3nju/5pGFLKdSrA0ZzWNCoODA4zH/NsWVQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/bdbde0-1d97-4126-93e6-8e77173dc4bc/1/_MrtD4HiSNrzMrgIQ9Sino19UeQ.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/bdbde0-1d97-4126-93e6-8e77173dc4bc/1/_MrtD4HiSNrzMrgIQ9Sino19UeQ.mft rsync://rpki.ripe.net/repository/DEFAULT/_MrtD4HiSNrzMrgIQ9Sino19UeQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 14:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:50:e0:62:7b:32:9e:18:2b:99:26:85:14:62:d0:19:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fccaed0f81e248daf332b80843d4a29e8d7d51e4 Validity Not Before: Dec 24 15:00:41 2025 GMT Not After : Dec 25 15:00:41 2025 GMT Subject: CN=206a0984b7104de48400075b515245c07eebb24c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:54:7c:8e:d8:64:9b:df:c7:53:be:39:88:db: c3:00:cc:75:10:3c:dc:c0:3e:53:92:5a:4c:d0:8f: 36:e7:98:1a:c1:92:24:de:db:e5:a1:c5:fe:61:2c: f5:85:c3:3f:50:16:8b:67:df:cc:69:96:b6:cb:38: 14:dc:cd:fc:89:90:a8:79:2a:ec:e6:c7:6b:ab:1e: 17:55:40:98:13:41:1a:58:38:05:b7:cf:70:68:e8: 3d:50:08:99:96:05:49:54:5f:04:88:fd:e3:18:8a: f2:da:ed:5e:87:db:16:1b:09:19:8d:71:a6:64:0a: ea:19:72:06:1e:e1:82:46:fb:bd:2f:22:f4:4c:54: 93:af:a6:a0:77:48:14:31:24:fa:23:7c:6b:07:d8: 92:54:6d:31:0b:c5:eb:2a:8f:7f:13:7e:8d:1c:5e: 0a:8b:b9:34:6b:62:44:9a:c0:79:68:ed:f1:2d:18: 7d:6b:f2:01:4c:c3:aa:eb:ab:03:18:a2:7f:74:a7: a1:d7:da:73:8c:32:e9:9c:40:ed:31:c7:91:ce:f8: 5d:71:50:9e:a4:a7:e6:24:30:67:39:fa:74:e2:6b: d8:e7:3c:b6:df:bf:2d:21:4b:c2:67:e2:71:53:1a: 1d:b4:24:04:64:c8:52:89:aa:ec:f9:85:08:d5:f2: c2:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:6A:09:84:B7:10:4D:E4:84:00:07:5B:51:52:45:C0:7E:EB:B2:4C X509v3 Authority Key Identifier: keyid:FC:CA:ED:0F:81:E2:48:DA:F3:32:B8:08:43:D4:A2:9E:8D:7D:51:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_MrtD4HiSNrzMrgIQ9Sino19UeQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/bdbde0-1d97-4126-93e6-8e77173dc4bc/1/_MrtD4HiSNrzMrgIQ9Sino19UeQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/bdbde0-1d97-4126-93e6-8e77173dc4bc/1/_MrtD4HiSNrzMrgIQ9Sino19UeQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:c4:22:36:ee:c0:55:e7:c2:27:62:fd:17:c8:f0:d4:66:aa: d4:ee:d2:ec:fc:a3:f6:62:c4:81:fe:ad:4f:98:93:94:ef:53: 43:9c:33:b1:a3:fd:b0:47:7a:b8:60:7c:4c:36:e9:c3:68:f8: dd:9a:fd:0d:35:b0:65:cd:b3:a8:cc:2d:61:01:9b:62:2f:0b: 79:4f:0a:9c:fe:aa:0b:79:3b:91:a7:16:33:1c:13:e9:36:77: 88:87:0e:3e:3e:7f:3b:fe:ea:73:16:1f:7f:75:71:84:cd:7e: fc:c6:d2:b6:27:16:c9:bd:46:f0:c6:10:9c:3c:4a:45:8d:52: bb:f1:4f:27:75:74:c1:f0:d1:c8:d1:da:85:7c:67:d4:0f:dd: 67:74:99:2c:95:46:ab:7b:37:d2:6c:59:7b:54:9d:2b:dd:9a: 16:31:cf:84:f5:f4:2a:46:85:5f:de:c9:0e:c0:14:80:a3:8a: 75:8b:ca:89:a1:1f:3e:d8:21:21:b9:ce:ec:68:1c:d8:9e:c3: 0c:33:ed:c6:3c:52:23:a6:cc:6d:3a:c8:b7:0f:47:df:65:cf: f1:12:22:be:3d:45:15:9b:d5:03:8c:66:69:95:cb:42:fe:ac: ab:d8:ba:a3:73:e9:44:8d:e3:26:cf:55:4b:57:b7:f2:2e:8a: 08:99:d3:f8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtQ4GJ7Mp4YK5kmhRRi0BmUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZjY2FlZDBmODFlMjQ4ZGFmMzMyYjgwODQzZDRhMjllOGQ3 ZDUxZTQwHhcNMjUxMjI0MTUwMDQxWhcNMjUxMjI1MTUwMDQxWjAzMTEwLwYDVQQD EygyMDZhMDk4NGI3MTA0ZGU0ODQwMDA3NWI1MTUyNDVjMDdlZWJiMjRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAklR8jthkm9/HU745iNvDAMx1EDzc wD5TklpM0I8255gawZIk3tvlocX+YSz1hcM/UBaLZ9/MaZa2yzgU3M38iZCoeSrs 5sdrqx4XVUCYE0EaWDgFt89waOg9UAiZlgVJVF8EiP3jGIry2u1eh9sWGwkZjXGm ZArqGXIGHuGCRvu9LyL0TFSTr6agd0gUMST6I3xrB9iSVG0xC8XrKo9/E36NHF4K i7k0a2JEmsB5aO3xLRh9a/IBTMOq66sDGKJ/dKeh19pzjDLpnEDtMceRzvhdcVCe pKfmJDBnOfp04mvY5zy2378tIUvCZ+JxUxodtCQEZMhSiars+YUI1fLCAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCBqCYS3EE3khAAHW1FSRcB+67JMMB8GA1UdIwQY MBaAFPzK7Q+B4kja8zK4CEPUop6NfVHkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX01ydEQ0SGlTTnJ6TXJnSVE5U2lubzE5VWVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC9iZGJkZTAtMWQ5Ny00MTI2LTkzZTYt OGU3NzE3M2RjNGJjLzEvX01ydEQ0SGlTTnJ6TXJnSVE5U2lubzE5VWVRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC9iZGJkZTAtMWQ5Ny00MTI2LTkzZTYtOGU3NzE3M2RjNGJj LzEvX01ydEQ0SGlTTnJ6TXJnSVE5U2lubzE5VWVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOsQiNu7A VefCJ2L9F8jw1Gaq1O7S7Pyj9mLEgf6tT5iTlO9TQ5wzsaP9sEd6uGB8TDbpw2j4 3Zr9DTWwZc2zqMwtYQGbYi8LeU8KnP6qC3k7kacWMxwT6TZ3iIcOPj5/O/7qcxYf f3VxhM1+/MbSticWyb1G8MYQnDxKRY1Su/FPJ3V0wfDRyNHahXxn1A/dZ3SZLJVG q3s30mxZe1SdK92aFjHPhPX0KkaFX97JDsAUgKOKdYvKiaEfPtghIbnO7Ggc2J7D DDPtxjxSI6bMbTrItw9H32XP8RIivj1FFZvVA4xmaZXLQv6sq9i6o3PpRI3jJs9V S1e38i6KCJnT+A== -----END CERTIFICATE-----Generated at Wed Dec 24 21:46:51 2025 by rpki-client