This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/8ea9b9-3b6e-4fdf-b5d1-f04fdcc09e51/1/mSuGCVzlWNLpYYcopEIoonvpCY8.mft File: mSuGCVzlWNLpYYcopEIoonvpCY8.mft (raw, json) Hash identifier: UWpuHy8A+3ZJnMpIipU2pqCn233AplNR0QffUNwZYEY= Subject key identifier: 8C:86:1F:EB:23:98:7D:2D:54:0A:94:44:A7:F6:58:13:ED:FA:91:7C Authority key identifier: 99:2B:86:09:5C:E5:58:D2:E9:61:87:28:A4:42:28:A2:7B:E9:09:8F Certificate issuer: /CN=992b86095ce558d2e9618728a44228a27be9098f Certificate serial: 019B3D237ACCF7E5290A1A0B7970600455C9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mSuGCVzlWNLpYYcopEIoonvpCY8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/8ea9b9-3b6e-4fdf-b5d1-f04fdcc09e51/1/mSuGCVzlWNLpYYcopEIoonvpCY8.mft Manifest number: 17B0 Signing time: Sat 20 Dec 2025 19:01:33 +0000 Manifest this update: Sat 20 Dec 2025 19:01:33 +0000 Manifest next update: Sun 21 Dec 2025 19:01:33 +0000 Files and hashes: 1: BlYJMM4ls15zJ30iXM_Rv84I-d4.roa (hash: MRyw1DsxxSYF8y5F3ROkLuVWefJpMb00uWwfBxmnsGk=) 2: e2BcAV15shqdiU98OktC9_gXkUU.roa (hash: rZS4+9XjUiv9YzxM45CHUYZIhLrSaA9eZkuie33ePcg=) 3: mSuGCVzlWNLpYYcopEIoonvpCY8.crl (hash: SW76gYwLBbkojcDjjeITwLDuq40Tv5bQ33NEBIIbj1s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/8ea9b9-3b6e-4fdf-b5d1-f04fdcc09e51/1/mSuGCVzlWNLpYYcopEIoonvpCY8.crl rsync://rpki.ripe.net/repository/DEFAULT/39/8ea9b9-3b6e-4fdf-b5d1-f04fdcc09e51/1/mSuGCVzlWNLpYYcopEIoonvpCY8.mft rsync://rpki.ripe.net/repository/DEFAULT/mSuGCVzlWNLpYYcopEIoonvpCY8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:23:7a:cc:f7:e5:29:0a:1a:0b:79:70:60:04:55:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=992b86095ce558d2e9618728a44228a27be9098f Validity Not Before: Dec 20 19:01:33 2025 GMT Not After : Dec 21 19:01:33 2025 GMT Subject: CN=8c861feb23987d2d540a9444a7f65813edfa917c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:45:08:9a:28:92:c9:a6:b3:b6:f2:83:fd:3b: 3b:3a:d8:6a:b5:90:1b:2f:b9:14:83:76:5b:2c:03: 27:db:9f:db:f1:f7:91:e6:05:09:6b:a0:7c:68:7f: ee:2c:5c:da:d6:f8:f3:83:ba:ff:61:80:22:cd:62: 65:5d:dc:a5:c8:1e:5f:32:ae:8c:c0:b2:1b:06:5d: 0f:0f:cf:13:ed:7c:f0:b1:0f:88:3d:f3:c6:88:44: 8b:a7:4f:21:06:85:d8:15:4f:f4:a3:2d:79:48:b4: 6f:60:27:aa:74:d2:15:20:63:ad:42:16:52:25:f8: e4:80:6d:0b:34:ed:50:6b:c0:5b:3d:84:74:78:d4: ce:bc:d5:09:90:21:0b:58:a6:71:60:53:e9:33:e2: 18:b2:76:c3:72:a2:e4:f2:59:2c:ca:d9:ef:b0:cd: f2:9b:5f:00:a0:fd:20:28:0c:7c:6b:16:b2:06:7b: 55:0e:ec:f8:b0:36:44:e3:f1:b2:31:4d:3b:dd:64: de:0e:78:7a:87:76:eb:3c:50:94:d4:08:27:7a:75: 16:34:5e:a4:8b:73:9b:55:f0:1d:eb:db:eb:48:b7: 16:45:96:45:0e:99:c5:21:18:6d:01:d6:81:c2:7c: bd:0d:44:4b:ba:9b:2f:63:1b:c3:01:0f:c1:02:7c: e5:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:86:1F:EB:23:98:7D:2D:54:0A:94:44:A7:F6:58:13:ED:FA:91:7C X509v3 Authority Key Identifier: keyid:99:2B:86:09:5C:E5:58:D2:E9:61:87:28:A4:42:28:A2:7B:E9:09:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mSuGCVzlWNLpYYcopEIoonvpCY8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/8ea9b9-3b6e-4fdf-b5d1-f04fdcc09e51/1/mSuGCVzlWNLpYYcopEIoonvpCY8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/39/8ea9b9-3b6e-4fdf-b5d1-f04fdcc09e51/1/mSuGCVzlWNLpYYcopEIoonvpCY8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:ec:1f:55:86:4e:5f:66:f9:63:97:a0:0f:cb:e3:f1:3c:1a: 20:7d:ae:b6:e6:b0:4c:9d:83:aa:00:df:c5:42:9e:26:15:3e: 70:7b:50:c0:aa:5a:51:a1:4c:94:d3:cf:13:c8:f4:eb:9c:7c: 07:92:cc:e2:c3:03:22:89:a7:18:b0:c9:ed:b9:b4:3a:17:08: 58:cc:40:af:17:96:f2:c2:6f:30:62:ca:9e:77:86:69:12:8b: a2:b8:78:c8:69:b5:02:89:4e:ea:21:e8:31:bc:af:88:f0:06: c1:4a:59:64:b4:56:10:50:bc:f8:da:6d:7c:1d:f5:03:40:d8: 1b:fc:92:63:7d:45:f1:1a:22:69:7b:6f:f3:c8:1d:ec:e5:03: f8:86:82:d2:a5:d9:51:5e:73:ee:ea:ee:cf:0c:60:6c:7f:18: 38:ef:f5:55:d7:80:a8:31:4d:59:a1:04:58:c2:59:61:ad:80: 45:fe:79:c7:89:be:71:73:bd:fe:2a:36:25:e6:e9:6f:26:e5: 60:3e:bb:9c:91:06:03:a9:66:71:a6:6f:0c:82:7c:fd:9f:7b: 5f:e4:bb:28:8c:56:fa:df:58:a8:40:c9:34:4c:4b:2e:05:b8: 83:f8:fc:ac:51:99:ae:23:49:87:16:b0:3f:10:f0:5b:27:5d: 4c:2d:0e:f6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9I3rM9+UpChoLeXBgBFXJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk5MmI4NjA5NWNlNTU4ZDJlOTYxODcyOGE0NDIyOGEyN2Jl OTA5OGYwHhcNMjUxMjIwMTkwMTMzWhcNMjUxMjIxMTkwMTMzWjAzMTEwLwYDVQQD Eyg4Yzg2MWZlYjIzOTg3ZDJkNTQwYTk0NDRhN2Y2NTgxM2VkZmE5MTdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArEUImiiSyaaztvKD/Ts7OthqtZAb L7kUg3ZbLAMn25/b8feR5gUJa6B8aH/uLFza1vjzg7r/YYAizWJlXdylyB5fMq6M wLIbBl0PD88T7XzwsQ+IPfPGiESLp08hBoXYFU/0oy15SLRvYCeqdNIVIGOtQhZS JfjkgG0LNO1Qa8BbPYR0eNTOvNUJkCELWKZxYFPpM+IYsnbDcqLk8lksytnvsM3y m18AoP0gKAx8axayBntVDuz4sDZE4/GyMU073WTeDnh6h3brPFCU1AgnenUWNF6k i3ObVfAd69vrSLcWRZZFDpnFIRhtAdaBwny9DURLupsvYxvDAQ/BAnzlxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIyGH+sjmH0tVAqURKf2WBPt+pF8MB8GA1UdIwQY MBaAFJkrhglc5VjS6WGHKKRCKKJ76QmPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbVN1R0NWemxXTkxwWVljb3BFSW9vbnZwQ1k4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS84ZWE5YjktM2I2ZS00ZmRmLWI1ZDEt ZjA0ZmRjYzA5ZTUxLzEvbVN1R0NWemxXTkxwWVljb3BFSW9vbnZwQ1k4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOS84ZWE5YjktM2I2ZS00ZmRmLWI1ZDEtZjA0ZmRjYzA5ZTUx LzEvbVN1R0NWemxXTkxwWVljb3BFSW9vbnZwQ1k4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU+wfVYZO X2b5Y5egD8vj8TwaIH2utuawTJ2DqgDfxUKeJhU+cHtQwKpaUaFMlNPPE8j065x8 B5LM4sMDIomnGLDJ7bm0OhcIWMxArxeW8sJvMGLKnneGaRKLorh4yGm1AolO6iHo MbyviPAGwUpZZLRWEFC8+NptfB31A0DYG/ySY31F8RoiaXtv88gd7OUD+IaC0qXZ UV5z7uruzwxgbH8YOO/1VdeAqDFNWaEEWMJZYa2ARf55x4m+cXO9/io2Jebpbybl YD67nJEGA6lmcaZvDIJ8/Z97X+S7KIxW+t9YqEDJNExLLgW4g/j8rFGZriNJhxaw PxDwWyddTC0O9g== -----END CERTIFICATE-----Generated at Sat Dec 20 22:35:37 2025 by rpki-client