This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/4459b4-1838-4231-bd2c-40c0a652450a/1/c0-mGwhlEDj6-B6_El7IRbGWGIM.mft File: c0-mGwhlEDj6-B6_El7IRbGWGIM.mft (raw, json) Hash identifier: +RCOEJIH+/bcxxU12GFbMik+HDQ4M9tG5kjl2S8/E5A= Subject key identifier: 79:E2:82:BC:1F:77:5E:61:A3:EE:9F:8E:A7:DB:4B:3F:B4:6C:5D:1B Authority key identifier: 73:4F:A6:1B:08:65:10:38:FA:F8:1E:BF:12:5E:C8:45:B1:96:18:83 Certificate issuer: /CN=734fa61b08651038faf81ebf125ec845b1961883 Certificate serial: 019B3C7E523539AB2A4A1C4997402A844ABA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c0-mGwhlEDj6-B6_El7IRbGWGIM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/4459b4-1838-4231-bd2c-40c0a652450a/1/c0-mGwhlEDj6-B6_El7IRbGWGIM.mft Manifest number: 0897 Signing time: Sat 20 Dec 2025 16:01:10 +0000 Manifest this update: Sat 20 Dec 2025 16:01:10 +0000 Manifest next update: Sun 21 Dec 2025 16:01:10 +0000 Files and hashes: 1: Ef_L0S4-Bp45a4AhicIQvktRdz4.roa (hash: /8pqkPBMXDiyNztqWEzFfiF8Q4r48DyQf1X0AGe+tXU=) 2: KD8apQsVPJ4S-o7CJiMR0Jx51PQ.roa (hash: 8wRRkrMsyRGit65zp+ividrP3xMpOsDdKqxjsreQ+LE=) 3: c0-mGwhlEDj6-B6_El7IRbGWGIM.crl (hash: nHT2K4KiE+AdaHkQqIgxkiIWfEQJYJ7Nz9JT2LKpSKU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/4459b4-1838-4231-bd2c-40c0a652450a/1/c0-mGwhlEDj6-B6_El7IRbGWGIM.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/4459b4-1838-4231-bd2c-40c0a652450a/1/c0-mGwhlEDj6-B6_El7IRbGWGIM.mft rsync://rpki.ripe.net/repository/DEFAULT/c0-mGwhlEDj6-B6_El7IRbGWGIM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7e:52:35:39:ab:2a:4a:1c:49:97:40:2a:84:4a:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=734fa61b08651038faf81ebf125ec845b1961883 Validity Not Before: Dec 20 16:01:10 2025 GMT Not After : Dec 21 16:01:10 2025 GMT Subject: CN=79e282bc1f775e61a3ee9f8ea7db4b3fb46c5d1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:8f:d6:30:d9:c7:f4:a8:24:18:0f:9b:84:fc: f5:fa:68:0e:8d:e7:d9:79:38:7f:63:9e:ea:4d:38: 16:ac:cc:86:c6:c3:73:b5:30:de:2e:ab:00:c7:88: 2e:f5:fb:04:aa:19:a3:81:74:c0:23:d7:a3:23:5a: 27:e4:48:3e:55:fb:26:9b:4b:76:f6:49:5d:5b:62: da:aa:59:92:d7:00:60:f2:26:17:ea:51:cf:9e:bc: 6c:ca:28:6b:77:f4:29:82:a4:99:eb:24:07:16:56: b8:24:60:e0:04:d8:58:fc:39:ba:02:05:20:9b:e7: f9:04:b7:3f:b8:87:62:78:a4:a2:a9:e0:d5:c0:1b: 8a:9c:ba:fe:bc:f5:25:4f:04:a0:c7:a6:3a:e2:49: bf:59:d8:ab:17:f4:71:0a:c6:2e:9a:be:95:cd:d1: a6:5d:4a:5c:ec:77:0b:84:58:73:ca:b9:b9:30:87: 3d:06:f4:cf:af:5c:3a:19:ef:a9:9c:61:41:a7:14: 96:29:f5:d1:3c:49:03:fc:24:0d:ee:07:95:81:21: 11:fb:76:00:f6:1e:cd:18:b9:dc:b3:d5:1d:66:33: 06:a7:55:4c:97:f7:0a:fd:2a:bd:eb:6a:28:a8:a6: 5d:84:e0:69:c9:dc:a1:af:dc:b6:26:20:0e:31:97: 9b:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:E2:82:BC:1F:77:5E:61:A3:EE:9F:8E:A7:DB:4B:3F:B4:6C:5D:1B X509v3 Authority Key Identifier: keyid:73:4F:A6:1B:08:65:10:38:FA:F8:1E:BF:12:5E:C8:45:B1:96:18:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0-mGwhlEDj6-B6_El7IRbGWGIM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/4459b4-1838-4231-bd2c-40c0a652450a/1/c0-mGwhlEDj6-B6_El7IRbGWGIM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/4459b4-1838-4231-bd2c-40c0a652450a/1/c0-mGwhlEDj6-B6_El7IRbGWGIM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:ec:2c:5c:1a:fa:82:0c:ae:d1:e7:cf:ee:88:2f:24:60:49: 98:42:65:7a:76:ac:87:f6:b4:93:dd:9e:fb:16:37:33:76:36: 68:b8:23:d9:9b:ed:e9:ff:ad:2c:4e:5a:ca:31:de:5b:0b:d8: 65:e1:7b:e7:d0:db:0e:18:c3:c3:3c:f8:ad:57:96:80:44:fa: e6:1a:f7:2d:2e:3b:7b:ba:4b:9a:57:f3:7b:41:e9:5c:24:1d: d8:3e:26:d5:8e:26:ca:a5:e6:c0:9a:a0:e6:f4:16:25:67:4d: 8a:6e:1b:13:b7:76:39:5d:9e:34:a4:8c:06:f3:d5:fd:f8:b4: f3:ca:91:98:d2:a5:93:b5:e9:43:94:1e:3c:23:11:18:3c:ba: 45:26:1b:84:d1:5b:11:54:10:dc:13:af:b1:60:bb:bf:6d:6f: 67:43:d9:88:f7:bb:8e:77:52:1f:fa:95:44:30:06:f2:35:f0: 54:0a:2d:bf:26:e3:6d:0a:50:bd:d3:26:10:89:c5:1f:3e:87: a5:d1:76:a3:7e:a8:8b:57:cf:fd:2c:20:71:c4:f9:bd:1a:ed: 63:f5:13:30:c9:cf:9b:50:0b:84:43:d5:9a:a5:1a:72:ed:d0: 23:f8:d3:75:2a:60:aa:de:01:40:8d:34:4f:ed:c0:48:2a:51: c1:91:e5:5c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8flI1OasqShxJl0AqhEq6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDczNGZhNjFiMDg2NTEwMzhmYWY4MWViZjEyNWVjODQ1YjE5 NjE4ODMwHhcNMjUxMjIwMTYwMTEwWhcNMjUxMjIxMTYwMTEwWjAzMTEwLwYDVQQD Eyg3OWUyODJiYzFmNzc1ZTYxYTNlZTlmOGVhN2RiNGIzZmI0NmM1ZDFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyo/WMNnH9KgkGA+bhPz1+mgOjefZ eTh/Y57qTTgWrMyGxsNztTDeLqsAx4gu9fsEqhmjgXTAI9ejI1on5Eg+Vfsmm0t2 9kldW2LaqlmS1wBg8iYX6lHPnrxsyihrd/QpgqSZ6yQHFla4JGDgBNhY/Dm6AgUg m+f5BLc/uIdieKSiqeDVwBuKnLr+vPUlTwSgx6Y64km/WdirF/RxCsYumr6VzdGm XUpc7HcLhFhzyrm5MIc9BvTPr1w6Ge+pnGFBpxSWKfXRPEkD/CQN7geVgSER+3YA 9h7NGLncs9UdZjMGp1VMl/cK/Sq962ooqKZdhOBpydyhr9y2JiAOMZeb9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHnigrwfd15ho+6fjqfbSz+0bF0bMB8GA1UdIwQY MBaAFHNPphsIZRA4+vgevxJeyEWxlhiDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYzAtbUd3aGxFRGo2LUI2X0VsN0lSYkdXR0lNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi80NDU5YjQtMTgzOC00MjMxLWJkMmMt NDBjMGE2NTI0NTBhLzEvYzAtbUd3aGxFRGo2LUI2X0VsN0lSYkdXR0lNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi80NDU5YjQtMTgzOC00MjMxLWJkMmMtNDBjMGE2NTI0NTBh LzEvYzAtbUd3aGxFRGo2LUI2X0VsN0lSYkdXR0lNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaewsXBr6 ggyu0efP7ogvJGBJmEJlenash/a0k92e+xY3M3Y2aLgj2Zvt6f+tLE5ayjHeWwvY ZeF759DbDhjDwzz4rVeWgET65hr3LS47e7pLmlfze0HpXCQd2D4m1Y4myqXmwJqg 5vQWJWdNim4bE7d2OV2eNKSMBvPV/fi088qRmNKlk7XpQ5QePCMRGDy6RSYbhNFb EVQQ3BOvsWC7v21vZ0PZiPe7jndSH/qVRDAG8jXwVAotvybjbQpQvdMmEInFHz6H pdF2o36oi1fP/SwgccT5vRrtY/UTMMnPm1ALhEPVmqUacu3QI/jTdSpgqt4BQI00 T+3ASCpRwZHlXA== -----END CERTIFICATE-----Generated at Sat Dec 20 17:30:42 2025 by rpki-client