This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/f41051-0810-43ff-b196-cfefdfdfbe6b/1/0mpECeqR9QbWM4ccbDVUDUYDN9E.mft File: 0mpECeqR9QbWM4ccbDVUDUYDN9E.mft (raw, json) Hash identifier: 1VThKNk4fvfJbBMutaG92UE4ebLRRYflwfCi93rWMSg= Subject key identifier: CD:52:6D:41:DF:0A:E2:86:C4:DE:A2:9A:03:07:4D:FE:55:95:CD:67 Authority key identifier: D2:6A:44:09:EA:91:F5:06:D6:33:87:1C:6C:35:54:0D:46:03:37:D1 Certificate issuer: /CN=d26a4409ea91f506d633871c6c35540d460337d1 Certificate serial: 019B533D0595B9744C2D826CB51E184F4405 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0mpECeqR9QbWM4ccbDVUDUYDN9E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/f41051-0810-43ff-b196-cfefdfdfbe6b/1/0mpECeqR9QbWM4ccbDVUDUYDN9E.mft Manifest number: 0F75 Signing time: Thu 25 Dec 2025 02:01:06 +0000 Manifest this update: Thu 25 Dec 2025 02:01:06 +0000 Manifest next update: Fri 26 Dec 2025 02:01:06 +0000 Files and hashes: 1: 0mpECeqR9QbWM4ccbDVUDUYDN9E.crl (hash: IkxpzTIvmnblmHq8/C9TaiyKY3A1VaDAv5XdFGy4Sfo=) 2: EhMRfoZTp-U32lV428WRXV05Tv4.roa (hash: q/xEeC43hnYPZ8R0egzzBxElLR9uRxq4htThdOEU6VU=) 3: v6hAmhwF5zdYx8dEgkzg5dcM3po.roa (hash: WVX44j02BF26OexloZBarRA/wYQhTTWNJB3y+NBHmOM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/f41051-0810-43ff-b196-cfefdfdfbe6b/1/0mpECeqR9QbWM4ccbDVUDUYDN9E.crl rsync://rpki.ripe.net/repository/DEFAULT/36/f41051-0810-43ff-b196-cfefdfdfbe6b/1/0mpECeqR9QbWM4ccbDVUDUYDN9E.mft rsync://rpki.ripe.net/repository/DEFAULT/0mpECeqR9QbWM4ccbDVUDUYDN9E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 01:21:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:53:3d:05:95:b9:74:4c:2d:82:6c:b5:1e:18:4f:44:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d26a4409ea91f506d633871c6c35540d460337d1 Validity Not Before: Dec 25 02:01:06 2025 GMT Not After : Dec 26 02:01:06 2025 GMT Subject: CN=cd526d41df0ae286c4dea29a03074dfe5595cd67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:04:fa:1f:f3:94:a4:0f:2e:bc:50:0a:95:aa: cb:43:b6:e0:da:58:dc:24:be:cb:70:5e:bc:cf:e2: f2:c9:28:d6:2a:6f:f6:32:a7:3a:59:e5:14:0e:f4: 17:7d:c4:fd:f3:27:03:1a:c7:60:3c:8e:af:4b:6e: ee:19:18:d9:a2:d6:37:db:bf:65:70:cb:99:9f:d2: ce:1b:ae:17:71:4d:5f:80:07:41:2b:ea:29:9c:28: 70:25:71:67:df:38:4e:df:ea:03:ff:28:cb:7a:37: 23:d9:92:b7:de:a4:fa:69:a6:71:bb:0a:af:8f:bd: f6:08:ff:62:d6:41:92:28:f2:0e:a5:97:09:66:3c: 52:80:b2:ff:8a:89:0b:ad:dd:62:33:6d:66:31:95: 99:29:b5:3c:cc:a8:58:e3:cb:ee:92:e9:d2:ba:2d: 08:ae:96:6f:11:cc:a6:be:18:b7:ad:37:33:01:e4: 36:da:87:2e:22:3d:2f:a6:54:83:27:51:97:b9:9a: 2d:86:8a:af:b5:a2:64:1d:56:a7:54:a8:40:d8:76: a3:4e:b9:c7:35:36:0d:a8:bd:41:e5:41:4a:8a:14: c6:f3:cc:f8:cb:69:e0:a6:95:4e:17:b8:94:89:2b: 92:90:2c:61:b9:fc:9c:ad:68:87:0c:8d:66:8d:e7: ae:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:52:6D:41:DF:0A:E2:86:C4:DE:A2:9A:03:07:4D:FE:55:95:CD:67 X509v3 Authority Key Identifier: keyid:D2:6A:44:09:EA:91:F5:06:D6:33:87:1C:6C:35:54:0D:46:03:37:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0mpECeqR9QbWM4ccbDVUDUYDN9E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/f41051-0810-43ff-b196-cfefdfdfbe6b/1/0mpECeqR9QbWM4ccbDVUDUYDN9E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/f41051-0810-43ff-b196-cfefdfdfbe6b/1/0mpECeqR9QbWM4ccbDVUDUYDN9E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:1b:c7:2c:bd:8a:e9:89:04:a1:ef:94:06:36:b6:02:9a:eb: 6e:2c:00:74:de:b8:32:50:84:90:d9:27:87:40:ce:64:b2:5d: 94:b9:d6:2e:b9:f6:81:e9:99:2e:64:49:80:57:a1:80:11:ef: 45:68:ea:3f:75:1e:e4:14:33:e8:23:10:4e:33:fd:24:12:53: 6f:07:39:95:74:6d:69:64:aa:1a:e1:eb:05:1c:19:65:ca:9b: ef:3c:ee:54:e2:fd:07:4e:d8:54:5c:85:6e:e9:ce:c8:42:18: 9c:3f:6c:b3:20:fb:ba:4e:35:e8:ff:c8:c8:59:11:0f:20:98: 81:d5:65:9c:cf:ef:f6:09:a7:2a:0b:7a:4a:37:fb:b8:a7:88: 00:cf:47:d1:9a:de:ed:ac:04:2a:48:e4:a6:80:f9:ed:c8:5c: cd:d1:67:ba:af:12:4c:b2:31:95:c0:c3:d2:a1:b7:91:9d:c3: 8d:57:88:83:ed:da:55:16:42:2e:38:a8:e2:6f:eb:3d:06:55: 04:d7:6a:35:a4:b5:a7:d1:95:38:c8:c8:8e:da:a3:d2:a1:04: 76:ba:47:8d:a8:ec:64:b7:f9:2c:06:80:a1:e5:fa:92:9f:9a: 35:01:d6:a6:45:f5:1a:fa:c0:f1:f6:09:b1:44:9f:51:c8:7c: f7:d9:58:d4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtTPQWVuXRMLYJstR4YT0QFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyNmE0NDA5ZWE5MWY1MDZkNjMzODcxYzZjMzU1NDBkNDYw MzM3ZDEwHhcNMjUxMjI1MDIwMTA2WhcNMjUxMjI2MDIwMTA2WjAzMTEwLwYDVQQD EyhjZDUyNmQ0MWRmMGFlMjg2YzRkZWEyOWEwMzA3NGRmZTU1OTVjZDY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwwT6H/OUpA8uvFAKlarLQ7bg2ljc JL7LcF68z+LyySjWKm/2Mqc6WeUUDvQXfcT98ycDGsdgPI6vS27uGRjZotY3279l cMuZn9LOG64XcU1fgAdBK+opnChwJXFn3zhO3+oD/yjLejcj2ZK33qT6aaZxuwqv j732CP9i1kGSKPIOpZcJZjxSgLL/iokLrd1iM21mMZWZKbU8zKhY48vukunSui0I rpZvEcymvhi3rTczAeQ22ocuIj0vplSDJ1GXuZothoqvtaJkHVanVKhA2HajTrnH NTYNqL1B5UFKihTG88z4y2ngppVOF7iUiSuSkCxhufycrWiHDI1mjeeusQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM1SbUHfCuKGxN6imgMHTf5Vlc1nMB8GA1UdIwQY MBaAFNJqRAnqkfUG1jOHHGw1VA1GAzfRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMG1wRUNlcVI5UWJXTTRjY2JEVlVEVVlETjlFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9mNDEwNTEtMDgxMC00M2ZmLWIxOTYt Y2ZlZmRmZGZiZTZiLzEvMG1wRUNlcVI5UWJXTTRjY2JEVlVEVVlETjlFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9mNDEwNTEtMDgxMC00M2ZmLWIxOTYtY2ZlZmRmZGZiZTZi LzEvMG1wRUNlcVI5UWJXTTRjY2JEVlVEVVlETjlFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdBvHLL2K 6YkEoe+UBja2AprrbiwAdN64MlCEkNknh0DOZLJdlLnWLrn2gemZLmRJgFehgBHv RWjqP3Ue5BQz6CMQTjP9JBJTbwc5lXRtaWSqGuHrBRwZZcqb7zzuVOL9B07YVFyF bunOyEIYnD9ssyD7uk416P/IyFkRDyCYgdVlnM/v9gmnKgt6Sjf7uKeIAM9H0Zre 7awEKkjkpoD57chczdFnuq8STLIxlcDD0qG3kZ3DjVeIg+3aVRZCLjio4m/rPQZV BNdqNaS1p9GVOMjIjtqj0qEEdrpHjajsZLf5LAaAoeX6kp+aNQHWpkX1GvrA8fYJ sUSfUch899lY1A== -----END CERTIFICATE-----Generated at Thu Dec 25 07:06:09 2025 by rpki-client