This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/8b906b-9c1d-45d9-86ba-c7fe62227df3/1/mFrmxZw15GA4fa68-4Zvih67NoY.mft File: mFrmxZw15GA4fa68-4Zvih67NoY.mft (raw, json) Hash identifier: qPaF6jyB7O2zyO8sPj80W88NPfPyXGNY4GZ560L0UDM= Subject key identifier: 8B:34:09:02:F5:4C:29:8B:EE:73:A9:FD:65:93:37:C6:41:DE:40:D9 Authority key identifier: 98:5A:E6:C5:9C:35:E4:60:38:7D:AE:BC:FB:86:6F:8A:1E:BB:36:86 Certificate issuer: /CN=985ae6c59c35e460387daebcfb866f8a1ebb3686 Certificate serial: 019B3A911C1DB4BD789F4749D9E75535A0FE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mFrmxZw15GA4fa68-4Zvih67NoY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/8b906b-9c1d-45d9-86ba-c7fe62227df3/1/mFrmxZw15GA4fa68-4Zvih67NoY.mft Manifest number: 1788 Signing time: Sat 20 Dec 2025 07:02:26 +0000 Manifest this update: Sat 20 Dec 2025 07:02:26 +0000 Manifest next update: Sun 21 Dec 2025 07:02:26 +0000 Files and hashes: 1: 5qz81vMuyN5eYJ6zyRRelyT4XK0.roa (hash: 0LizoQ7sooXP56qjV8fYtL2cZDWoYFEUv70QcevbSss=) 2: Oo8Lhh4RlCa7xttIyBwx5LDEUoc.roa (hash: wrOx7qjHfGVS+J5guJXeAV7Who7QhhesA0WvqwwUSt0=) 3: bred8jKnNPms1BCagsD8kMQFkWQ.roa (hash: VvTTWuUY3ocSZzeJdjIHCKMe7BquJDgv+iCTQ7eJzuc=) 4: mFrmxZw15GA4fa68-4Zvih67NoY.crl (hash: Q2Xteg99WyWj6bvaKVnNfm79jFQB1TGavS0WIqK8DZU=) 5: orjkFnmOp2fkt5BOjfHTUe1SFM8.roa (hash: VR0THqWhrxUSaUWx/H66JHdMtnv+5/NgmHEPJq0RqoM=) 6: vHN5MXtzccXdspQhStY4Z57CoPM.roa (hash: 4HXRwfo/a7HGgHSGpok7A4ldu5noCeEQDTLX8aICufE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/8b906b-9c1d-45d9-86ba-c7fe62227df3/1/mFrmxZw15GA4fa68-4Zvih67NoY.crl rsync://rpki.ripe.net/repository/DEFAULT/41/8b906b-9c1d-45d9-86ba-c7fe62227df3/1/mFrmxZw15GA4fa68-4Zvih67NoY.mft rsync://rpki.ripe.net/repository/DEFAULT/mFrmxZw15GA4fa68-4Zvih67NoY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 07:02:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:91:1c:1d:b4:bd:78:9f:47:49:d9:e7:55:35:a0:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=985ae6c59c35e460387daebcfb866f8a1ebb3686 Validity Not Before: Dec 20 07:02:26 2025 GMT Not After : Dec 21 07:02:26 2025 GMT Subject: CN=8b340902f54c298bee73a9fd659337c641de40d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:b3:28:a1:59:fb:f9:d9:52:7c:83:46:2c:8e: d5:50:8f:eb:fc:f5:f3:7e:e6:85:73:75:ea:76:a1: 87:be:53:cf:1f:11:11:27:bc:6d:74:0a:b7:57:25: ec:0e:07:f1:58:a8:35:19:67:fe:4b:f7:56:a0:5d: 3d:51:0c:1f:cc:00:46:9c:4f:10:0f:63:64:9c:db: b6:6b:07:72:9e:de:24:b1:4f:83:cc:98:95:3d:1a: c1:b8:ae:d5:a1:cd:f6:60:63:64:af:a3:db:0e:62: 83:75:4e:27:63:d7:47:76:22:f1:a1:81:c1:f7:1a: 50:26:17:04:50:f3:03:12:de:65:85:7b:4a:88:ec: 30:2c:5d:eb:91:e0:f9:56:87:36:57:2b:c9:34:4e: 5e:fe:10:ca:a5:3c:de:6a:03:97:b3:34:d2:bd:af: 88:04:ba:c7:7d:c4:1f:d3:cf:53:a9:d0:db:95:b3: 7b:5b:b4:4d:72:92:be:ba:e2:57:3e:c9:11:7d:8f: 8f:6b:70:9c:e4:65:d2:98:60:fb:33:8a:91:e5:45: a9:f9:6f:bd:86:c9:43:b7:9a:60:ee:f3:9c:63:ca: 45:97:69:cc:d6:db:0b:6e:30:69:61:7d:4c:17:c1: c8:22:7e:b8:eb:ac:10:6a:54:6e:53:7b:bd:8f:75: 9e:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:34:09:02:F5:4C:29:8B:EE:73:A9:FD:65:93:37:C6:41:DE:40:D9 X509v3 Authority Key Identifier: keyid:98:5A:E6:C5:9C:35:E4:60:38:7D:AE:BC:FB:86:6F:8A:1E:BB:36:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mFrmxZw15GA4fa68-4Zvih67NoY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/8b906b-9c1d-45d9-86ba-c7fe62227df3/1/mFrmxZw15GA4fa68-4Zvih67NoY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/41/8b906b-9c1d-45d9-86ba-c7fe62227df3/1/mFrmxZw15GA4fa68-4Zvih67NoY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:3d:ca:6b:cb:64:54:03:29:56:1f:2f:a2:75:4d:17:d5:0b: 5f:b3:a9:99:44:f1:61:75:3f:7a:6b:1f:d0:67:02:18:57:3e: 99:42:f0:82:da:62:33:52:de:74:1d:ee:35:0e:14:bc:e0:7f: 7e:85:c3:d8:c6:b2:a7:13:df:2f:4d:f0:38:22:0d:88:5b:88: a9:43:3b:a9:72:eb:a5:cd:c8:f0:6f:1b:72:5b:00:1d:e9:a6: 5d:e4:06:eb:b2:63:85:49:9e:bd:3d:6f:52:6f:23:09:5d:1d: 06:14:69:43:b4:af:89:6c:7d:05:c7:a3:79:a0:dd:18:1d:43: de:51:22:56:1c:03:5b:b2:74:a2:e9:f4:81:e0:f8:d4:e5:d3: 02:cd:17:3d:ae:a9:ec:30:00:e5:e4:90:03:d5:7c:35:e7:b4: 06:14:e9:0b:e6:a8:aa:ba:f0:c3:a0:fb:25:cb:d8:90:a2:df: f8:82:06:bf:6a:a2:a2:6f:43:77:c2:d9:a6:56:0f:84:6c:ca: f0:2c:f2:49:b6:6b:0d:f6:78:b7:2f:07:96:4c:43:f6:d6:7d: 1e:8a:05:8b:61:8c:af:6f:42:c1:12:db:93:41:c6:8f:a5:a5: ad:aa:af:f1:25:0a:96:3b:80:cc:a8:89:05:d6:26:60:bf:89: a6:5a:9b:13 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6kRwdtL14n0dJ2edVNaD+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk4NWFlNmM1OWMzNWU0NjAzODdkYWViY2ZiODY2ZjhhMWVi YjM2ODYwHhcNMjUxMjIwMDcwMjI2WhcNMjUxMjIxMDcwMjI2WjAzMTEwLwYDVQQD Eyg4YjM0MDkwMmY1NGMyOThiZWU3M2E5ZmQ2NTkzMzdjNjQxZGU0MGQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsrMooVn7+dlSfINGLI7VUI/r/PXz fuaFc3XqdqGHvlPPHxERJ7xtdAq3VyXsDgfxWKg1GWf+S/dWoF09UQwfzABGnE8Q D2NknNu2awdynt4ksU+DzJiVPRrBuK7Voc32YGNkr6PbDmKDdU4nY9dHdiLxoYHB 9xpQJhcEUPMDEt5lhXtKiOwwLF3rkeD5Voc2VyvJNE5e/hDKpTzeagOXszTSva+I BLrHfcQf089TqdDblbN7W7RNcpK+uuJXPskRfY+Pa3Cc5GXSmGD7M4qR5UWp+W+9 hslDt5pg7vOcY8pFl2nM1tsLbjBpYX1MF8HIIn6466wQalRuU3u9j3WeJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIs0CQL1TCmL7nOp/WWTN8ZB3kDZMB8GA1UdIwQY MBaAFJha5sWcNeRgOH2uvPuGb4oeuzaGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbUZybXhadzE1R0E0ZmE2OC00WnZpaDY3Tm9ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS84YjkwNmItOWMxZC00NWQ5LTg2YmEt YzdmZTYyMjI3ZGYzLzEvbUZybXhadzE1R0E0ZmE2OC00WnZpaDY3Tm9ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MS84YjkwNmItOWMxZC00NWQ5LTg2YmEtYzdmZTYyMjI3ZGYz LzEvbUZybXhadzE1R0E0ZmE2OC00WnZpaDY3Tm9ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADz3Ka8tk VAMpVh8vonVNF9ULX7OpmUTxYXU/emsf0GcCGFc+mULwgtpiM1LedB3uNQ4UvOB/ foXD2MaypxPfL03wOCINiFuIqUM7qXLrpc3I8G8bclsAHemmXeQG67JjhUmevT1v Um8jCV0dBhRpQ7SviWx9BcejeaDdGB1D3lEiVhwDW7J0oun0geD41OXTAs0XPa6p 7DAA5eSQA9V8Nee0BhTpC+aoqrrww6D7JcvYkKLf+IIGv2qiom9Dd8LZplYPhGzK 8CzySbZrDfZ4ty8HlkxD9tZ9HooFi2GMr29CwRLbk0HGj6Wlraqv8SUKljuAzKiJ BdYmYL+JplqbEw== -----END CERTIFICATE-----Generated at Sat Dec 20 12:52:35 2025 by rpki-client