This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/853849-be2e-432f-87a6-a64dad67b735/1/mCbZDesQFiidwO-MRLU06fsnG1s.mft File: mCbZDesQFiidwO-MRLU06fsnG1s.mft (raw, json) Hash identifier: +xR/WJUUDNi2rbtvGV1vTk6C1CSpZl0YhLtfssRS5xg= Subject key identifier: 3C:2E:75:CD:40:69:FE:99:43:70:A8:82:BA:74:02:21:E3:3D:6E:1F Authority key identifier: 98:26:D9:0D:EB:10:16:28:9D:C0:EF:8C:44:B5:34:E9:FB:27:1B:5B Certificate issuer: /CN=9826d90deb1016289dc0ef8c44b534e9fb271b5b Certificate serial: 019B5229E82EE73513538326D0AE87A4BD7B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCbZDesQFiidwO-MRLU06fsnG1s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/853849-be2e-432f-87a6-a64dad67b735/1/mCbZDesQFiidwO-MRLU06fsnG1s.mft Manifest number: 14CE Signing time: Wed 24 Dec 2025 21:00:36 +0000 Manifest this update: Wed 24 Dec 2025 21:00:36 +0000 Manifest next update: Thu 25 Dec 2025 21:00:36 +0000 Files and hashes: 1: FbTSJ7mjm5cq99L1AIerA5b7n7U.roa (hash: wyC2uEbA5IXzXYZMj5wku9Zxs7BB1RHGpysgY+TRxt4=) 2: mCbZDesQFiidwO-MRLU06fsnG1s.crl (hash: Hf5Y7vgwrIFMJjmcb1fZxqZlSgeS9kU3Z+fmiZVTsy8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/853849-be2e-432f-87a6-a64dad67b735/1/mCbZDesQFiidwO-MRLU06fsnG1s.crl rsync://rpki.ripe.net/repository/DEFAULT/33/853849-be2e-432f-87a6-a64dad67b735/1/mCbZDesQFiidwO-MRLU06fsnG1s.mft rsync://rpki.ripe.net/repository/DEFAULT/mCbZDesQFiidwO-MRLU06fsnG1s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 21:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:52:29:e8:2e:e7:35:13:53:83:26:d0:ae:87:a4:bd:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9826d90deb1016289dc0ef8c44b534e9fb271b5b Validity Not Before: Dec 24 21:00:36 2025 GMT Not After : Dec 25 21:00:36 2025 GMT Subject: CN=3c2e75cd4069fe994370a882ba740221e33d6e1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:44:b6:e2:e3:07:0d:78:fc:3a:39:54:df:0d: ab:b4:fd:2a:e9:c0:da:0c:42:5e:3e:6e:71:aa:75: d0:7f:93:a4:3f:ed:12:10:b8:14:85:21:ae:b7:01: 5d:27:dd:3b:1c:47:66:da:45:32:41:c3:45:7b:1c: 1f:e5:18:e6:66:f0:8f:6d:89:ab:67:ed:f1:59:05: bf:d5:f4:cb:03:27:b9:9e:2a:fc:96:95:b0:76:7a: 5a:44:ba:f7:9b:76:1a:ba:0e:17:54:3b:b4:c0:cf: d2:05:48:aa:2f:28:9e:5a:94:1a:8e:ec:a8:f2:32: 02:bd:5f:e9:32:22:43:98:18:be:db:3e:41:5c:2a: a0:db:fe:e8:43:59:2a:27:c6:a0:72:f1:0e:67:cb: 3e:e8:1b:eb:d5:71:70:aa:0f:9f:eb:08:f3:71:1a: 2e:4a:9d:6e:87:e4:0f:eb:5b:e2:0d:a0:4c:20:90: 52:39:20:7e:42:83:04:5d:0d:03:81:53:24:5a:80: 56:7f:0e:85:7b:d7:87:34:f3:d2:3f:ec:b5:a3:1b: 91:7a:01:b2:18:90:8b:cc:c4:62:55:38:c7:71:d4: 77:ec:5c:f4:7e:1f:1a:50:59:ff:04:68:45:90:35: 4f:2c:d2:90:a3:86:e8:38:9d:0b:6e:17:c7:0a:9c: 00:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:2E:75:CD:40:69:FE:99:43:70:A8:82:BA:74:02:21:E3:3D:6E:1F X509v3 Authority Key Identifier: keyid:98:26:D9:0D:EB:10:16:28:9D:C0:EF:8C:44:B5:34:E9:FB:27:1B:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCbZDesQFiidwO-MRLU06fsnG1s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/853849-be2e-432f-87a6-a64dad67b735/1/mCbZDesQFiidwO-MRLU06fsnG1s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/853849-be2e-432f-87a6-a64dad67b735/1/mCbZDesQFiidwO-MRLU06fsnG1s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:33:c7:20:c9:dd:35:19:00:64:cd:37:4d:1c:a1:bd:eb:7b: 69:83:85:7f:c9:1d:90:dd:83:b2:df:f3:94:2f:4e:f9:c9:93: 81:3f:86:db:fc:cf:d0:24:fc:3f:8e:00:a2:1c:22:3e:f3:f1: 47:1b:86:4b:66:22:c3:c0:f5:32:83:93:97:65:91:8b:6e:d1: 50:3e:0d:c4:95:a0:1c:fa:d5:20:61:d3:c3:21:bc:96:fe:8c: cf:ee:4d:69:98:e8:c0:e3:fd:83:82:78:49:04:f0:e3:c9:c6: ec:78:65:26:3e:17:34:c5:9c:90:1f:dc:e4:82:12:97:f4:77: 31:84:28:c3:f7:70:ba:ee:61:4c:bf:72:68:90:ca:d0:fb:e2: ad:1d:dd:6e:84:95:4d:0c:dc:61:99:81:82:b7:82:d1:92:bd: d3:18:32:3b:91:44:93:1f:cd:24:9d:25:da:d8:91:03:6f:04: 20:c8:83:0a:ec:37:2d:99:8e:52:e4:29:53:84:65:3c:46:dd: 22:71:a0:3f:24:82:77:5e:16:cc:38:2f:95:da:ae:a2:3f:31: fe:24:75:63:08:50:ff:d3:a2:61:64:0f:c7:c5:81:5f:53:1e: a9:b6:45:e3:bc:a0:b5:e1:c9:71:cc:68:cf:2a:45:20:11:b6: d6:ce:f0:7e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtSKegu5zUTU4Mm0K6HpL17MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk4MjZkOTBkZWIxMDE2Mjg5ZGMwZWY4YzQ0YjUzNGU5ZmIy NzFiNWIwHhcNMjUxMjI0MjEwMDM2WhcNMjUxMjI1MjEwMDM2WjAzMTEwLwYDVQQD EygzYzJlNzVjZDQwNjlmZTk5NDM3MGE4ODJiYTc0MDIyMWUzM2Q2ZTFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnUS24uMHDXj8OjlU3w2rtP0q6cDa DEJePm5xqnXQf5OkP+0SELgUhSGutwFdJ907HEdm2kUyQcNFexwf5RjmZvCPbYmr Z+3xWQW/1fTLAye5nir8lpWwdnpaRLr3m3Yaug4XVDu0wM/SBUiqLyieWpQajuyo 8jICvV/pMiJDmBi+2z5BXCqg2/7oQ1kqJ8agcvEOZ8s+6Bvr1XFwqg+f6wjzcRou Sp1uh+QP61viDaBMIJBSOSB+QoMEXQ0DgVMkWoBWfw6Fe9eHNPPSP+y1oxuRegGy GJCLzMRiVTjHcdR37Fz0fh8aUFn/BGhFkDVPLNKQo4boOJ0LbhfHCpwA1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDwudc1Aaf6ZQ3Cogrp0AiHjPW4fMB8GA1UdIwQY MBaAFJgm2Q3rEBYoncDvjES1NOn7JxtbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbUNiWkRlc1FGaWlkd08tTVJMVTA2ZnNuRzFzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy84NTM4NDktYmUyZS00MzJmLTg3YTYt YTY0ZGFkNjdiNzM1LzEvbUNiWkRlc1FGaWlkd08tTVJMVTA2ZnNuRzFzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy84NTM4NDktYmUyZS00MzJmLTg3YTYtYTY0ZGFkNjdiNzM1 LzEvbUNiWkRlc1FGaWlkd08tTVJMVTA2ZnNuRzFzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANDPHIMnd NRkAZM03TRyhvet7aYOFf8kdkN2Dst/zlC9O+cmTgT+G2/zP0CT8P44AohwiPvPx RxuGS2Yiw8D1MoOTl2WRi27RUD4NxJWgHPrVIGHTwyG8lv6Mz+5NaZjowOP9g4J4 SQTw48nG7HhlJj4XNMWckB/c5IISl/R3MYQow/dwuu5hTL9yaJDK0PvirR3dboSV TQzcYZmBgreC0ZK90xgyO5FEkx/NJJ0l2tiRA28EIMiDCuw3LZmOUuQpU4RlPEbd InGgPySCd14WzDgvldquoj8x/iR1YwhQ/9OiYWQPx8WBX1MeqbZF47ygteHJccxo zypFIBG21s7wfg== -----END CERTIFICATE-----Generated at Thu Dec 25 04:53:51 2025 by rpki-client