This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/fa3603-c2ca-4577-b7eb-772f841c4393/1/mIoB4lJuOVBBksMCcvOAs5rj8qY.mft File: mIoB4lJuOVBBksMCcvOAs5rj8qY.mft (raw, json) Hash identifier: AZi9sT/Qm52VMKWImeh2BYcQ1aiKF2EEO9OyorAwcEk= Subject key identifier: D5:6F:6F:94:FC:1F:4A:2A:25:45:FF:42:26:C4:35:7F:D3:44:BB:90 Authority key identifier: 98:8A:01:E2:52:6E:39:50:41:92:C3:02:72:F3:80:B3:9A:E3:F2:A6 Certificate issuer: /CN=988a01e2526e39504192c30272f380b39ae3f2a6 Certificate serial: 019B44A6262CEBB4F2F50B80583615E52315 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mIoB4lJuOVBBksMCcvOAs5rj8qY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/fa3603-c2ca-4577-b7eb-772f841c4393/1/mIoB4lJuOVBBksMCcvOAs5rj8qY.mft Manifest number: 0767 Signing time: Mon 22 Dec 2025 06:01:37 +0000 Manifest this update: Mon 22 Dec 2025 06:01:37 +0000 Manifest next update: Tue 23 Dec 2025 06:01:37 +0000 Files and hashes: 1: 6XCTUSOWxa7WsKwz6cNlndXeK8c.roa (hash: xRjajkiMCGOYK8K3wQjBK4JDfm1qhykgYmXpSadPeMg=) 2: mIoB4lJuOVBBksMCcvOAs5rj8qY.crl (hash: dRu8Lm3X3im6+CRugUd/xgd1wZnQlx/qvhjqOnKc1zE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/fa3603-c2ca-4577-b7eb-772f841c4393/1/mIoB4lJuOVBBksMCcvOAs5rj8qY.crl rsync://rpki.ripe.net/repository/DEFAULT/3b/fa3603-c2ca-4577-b7eb-772f841c4393/1/mIoB4lJuOVBBksMCcvOAs5rj8qY.mft rsync://rpki.ripe.net/repository/DEFAULT/mIoB4lJuOVBBksMCcvOAs5rj8qY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 06:01:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:a6:26:2c:eb:b4:f2:f5:0b:80:58:36:15:e5:23:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=988a01e2526e39504192c30272f380b39ae3f2a6 Validity Not Before: Dec 22 06:01:37 2025 GMT Not After : Dec 23 06:01:37 2025 GMT Subject: CN=d56f6f94fc1f4a2a2545ff4226c4357fd344bb90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:41:6d:ce:54:29:5b:5c:12:00:02:24:e2:92: 46:20:1a:f4:3c:3a:b8:cf:67:a0:12:41:0c:73:e0: 91:c8:08:a3:a5:a6:7c:6c:b4:fa:67:0d:e9:0d:3c: c8:88:a5:e3:0d:e8:9e:bb:ca:a5:3c:4b:4d:17:8d: 45:b2:8d:d4:81:2c:ae:0f:7e:b3:ba:d4:27:6a:d2: 79:9d:2c:09:a9:ce:36:b0:84:8b:86:34:ab:e1:86: 12:db:2c:58:92:74:84:be:fb:f0:f7:ea:42:ef:d4: d6:98:f2:40:89:b7:7f:12:ea:93:56:e1:0e:42:31: 1a:87:90:b4:5f:1a:1a:16:58:fe:c4:e8:d0:fa:8e: f6:a7:c4:c8:d5:1a:1d:81:65:69:94:c7:9a:4a:ce: 94:0e:f8:4a:b9:b0:e6:0d:5e:a2:33:ac:fe:3d:45: 39:bd:44:51:46:28:54:ba:31:f5:26:7d:67:40:e6: 71:94:1e:a7:15:f2:43:d2:9d:8e:3a:33:bf:17:26: 27:6b:37:ae:45:81:dd:fd:3c:3b:22:8e:87:e6:34: 77:9e:f0:72:d8:f0:a5:48:5e:bc:d4:0b:45:90:dd: 4e:b6:3c:d8:29:13:ad:bd:3f:bb:46:1d:fa:37:ca: 1a:3d:b8:4e:b7:3b:fd:e6:44:21:ff:55:07:fe:97: c8:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:6F:6F:94:FC:1F:4A:2A:25:45:FF:42:26:C4:35:7F:D3:44:BB:90 X509v3 Authority Key Identifier: keyid:98:8A:01:E2:52:6E:39:50:41:92:C3:02:72:F3:80:B3:9A:E3:F2:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mIoB4lJuOVBBksMCcvOAs5rj8qY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/fa3603-c2ca-4577-b7eb-772f841c4393/1/mIoB4lJuOVBBksMCcvOAs5rj8qY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/fa3603-c2ca-4577-b7eb-772f841c4393/1/mIoB4lJuOVBBksMCcvOAs5rj8qY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:f9:ad:c9:3e:97:7f:f9:7a:ca:91:3a:25:c9:17:1c:ba:3d: 21:fc:66:f2:88:be:3f:67:6a:79:87:e9:6b:50:ea:90:46:82: ae:0d:b9:89:4d:db:cc:d3:42:78:33:2d:39:9a:8a:21:6f:3c: 8d:61:6c:e5:40:91:79:7c:9c:07:12:24:63:d3:78:b9:a2:35: 5a:65:96:82:09:d0:fb:8e:40:aa:08:f7:86:33:f2:1b:3b:30: ff:e4:66:86:1a:19:5c:8b:d2:01:f6:f2:cc:e7:40:6c:03:c9: 18:82:af:f1:82:91:4b:e8:af:3d:fb:56:36:c2:a5:a8:6e:4e: 8b:98:fe:0a:23:3d:55:99:dc:0c:2c:4d:e7:3a:6c:bb:14:4c: 9c:64:b8:96:11:e7:84:6c:59:0f:e6:b2:00:60:a4:4a:9b:ac: 38:47:99:78:62:0c:a0:e9:08:11:92:bf:1e:2f:3b:a0:5c:e0: 8c:1f:a9:28:0c:fe:c7:75:f2:fb:40:48:7b:94:70:2e:a8:bc: 4b:b7:1d:41:a9:a4:e2:3b:c4:64:fc:11:26:e8:a9:ab:d6:7a: 9c:47:70:f8:20:15:24:e1:fd:14:1c:fe:f4:7e:cb:7f:85:64: 5c:8d:49:e7:b1:dc:ca:1f:03:9b:88:28:6b:74:c2:d8:9b:f2: f9:e1:af:0f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtEpiYs67Ty9QuAWDYV5SMVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk4OGEwMWUyNTI2ZTM5NTA0MTkyYzMwMjcyZjM4MGIzOWFl M2YyYTYwHhcNMjUxMjIyMDYwMTM3WhcNMjUxMjIzMDYwMTM3WjAzMTEwLwYDVQQD EyhkNTZmNmY5NGZjMWY0YTJhMjU0NWZmNDIyNmM0MzU3ZmQzNDRiYjkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn0FtzlQpW1wSAAIk4pJGIBr0PDq4 z2egEkEMc+CRyAijpaZ8bLT6Zw3pDTzIiKXjDeieu8qlPEtNF41Fso3UgSyuD36z utQnatJ5nSwJqc42sISLhjSr4YYS2yxYknSEvvvw9+pC79TWmPJAibd/EuqTVuEO QjEah5C0XxoaFlj+xOjQ+o72p8TI1RodgWVplMeaSs6UDvhKubDmDV6iM6z+PUU5 vURRRihUujH1Jn1nQOZxlB6nFfJD0p2OOjO/FyYnazeuRYHd/Tw7Io6H5jR3nvBy 2PClSF681AtFkN1OtjzYKROtvT+7Rh36N8oaPbhOtzv95kQh/1UH/pfIvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNVvb5T8H0oqJUX/QibENX/TRLuQMB8GA1UdIwQY MBaAFJiKAeJSbjlQQZLDAnLzgLOa4/KmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbUlvQjRsSnVPVkJCa3NNQ2N2T0FzNXJqOHFZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi9mYTM2MDMtYzJjYS00NTc3LWI3ZWIt NzcyZjg0MWM0MzkzLzEvbUlvQjRsSnVPVkJCa3NNQ2N2T0FzNXJqOHFZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYi9mYTM2MDMtYzJjYS00NTc3LWI3ZWItNzcyZjg0MWM0Mzkz LzEvbUlvQjRsSnVPVkJCa3NNQ2N2T0FzNXJqOHFZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAPmtyT6X f/l6ypE6JckXHLo9Ifxm8oi+P2dqeYfpa1DqkEaCrg25iU3bzNNCeDMtOZqKIW88 jWFs5UCReXycBxIkY9N4uaI1WmWWggnQ+45Aqgj3hjPyGzsw/+RmhhoZXIvSAfby zOdAbAPJGIKv8YKRS+ivPftWNsKlqG5Oi5j+CiM9VZncDCxN5zpsuxRMnGS4lhHn hGxZD+ayAGCkSpusOEeZeGIMoOkIEZK/Hi87oFzgjB+pKAz+x3Xy+0BIe5RwLqi8 S7cdQamk4jvEZPwRJuipq9Z6nEdw+CAVJOH9FBz+9H7Lf4VkXI1J57Hcyh8Dm4go a3TC2Jvy+eGvDw== -----END CERTIFICATE-----Generated at Mon Dec 22 16:09:15 2025 by rpki-client