This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/d853d7-7785-4e6d-993c-7c6e4809df59/1/mXrZ9c2mbZYdG87vxGPmKe6Bmlw.mft File: mXrZ9c2mbZYdG87vxGPmKe6Bmlw.mft (raw, json) Hash identifier: W7Qo4go70rJYCZyEB4RJADtngx2Z8cTkgArfjplpLjs= Subject key identifier: 5C:9E:39:5F:26:78:23:14:93:F8:95:96:1F:47:6A:0D:B7:0B:B8:AB Authority key identifier: 99:7A:D9:F5:CD:A6:6D:96:1D:1B:CE:EF:C4:63:E6:29:EE:81:9A:5C Certificate issuer: /CN=997ad9f5cda66d961d1bceefc463e629ee819a5c Certificate serial: 019B4B4C3490B0F3C9E64FD95AAD01B3952F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mXrZ9c2mbZYdG87vxGPmKe6Bmlw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/d853d7-7785-4e6d-993c-7c6e4809df59/1/mXrZ9c2mbZYdG87vxGPmKe6Bmlw.mft Manifest number: 4F Signing time: Tue 23 Dec 2025 13:00:43 +0000 Manifest this update: Tue 23 Dec 2025 13:00:43 +0000 Manifest next update: Wed 24 Dec 2025 13:00:43 +0000 Files and hashes: 1: GNpQl66SlLD7k64oHfoj3L0otEQ.roa (hash: fuge2Ih7rkHNFHBfjSZi6ZhVlTXhFgJG1F6DrgT5vw0=) 2: mXrZ9c2mbZYdG87vxGPmKe6Bmlw.crl (hash: TKmACirbctDW9ohhMbsBK/iBwM80sjZYjq7rLzNlWT8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/d853d7-7785-4e6d-993c-7c6e4809df59/1/mXrZ9c2mbZYdG87vxGPmKe6Bmlw.crl rsync://rpki.ripe.net/repository/DEFAULT/47/d853d7-7785-4e6d-993c-7c6e4809df59/1/mXrZ9c2mbZYdG87vxGPmKe6Bmlw.mft rsync://rpki.ripe.net/repository/DEFAULT/mXrZ9c2mbZYdG87vxGPmKe6Bmlw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 13:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4b:4c:34:90:b0:f3:c9:e6:4f:d9:5a:ad:01:b3:95:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=997ad9f5cda66d961d1bceefc463e629ee819a5c Validity Not Before: Dec 23 13:00:43 2025 GMT Not After : Dec 24 13:00:43 2025 GMT Subject: CN=5c9e395f2678231493f895961f476a0db70bb8ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:86:56:26:1b:d0:ff:a1:df:a3:a0:7e:c8:e7: 1e:a4:9b:ec:bd:18:9e:7e:f1:1b:90:97:74:10:c2: 49:d5:3f:a4:d3:19:2a:81:ea:79:c0:6b:89:cc:2c: 94:79:52:db:e7:a6:9f:ec:54:8b:7a:61:a2:89:5b: 26:8c:78:eb:a8:cc:0b:9a:bd:6d:42:2e:86:13:ab: ea:84:26:af:93:b5:e5:53:70:44:69:60:5b:f5:48: 41:76:80:8b:1e:9f:98:94:c6:7d:8b:b4:80:19:d4: fe:9b:d4:20:32:97:01:4d:34:d4:69:c4:a8:52:b7: 4d:fd:36:1f:07:86:f1:00:c0:52:0a:68:9c:71:ae: 9f:82:08:08:23:ad:00:61:e1:87:4e:ec:c5:76:5b: 61:3b:6c:3f:e9:cb:cd:6e:7d:cb:91:a8:f5:6f:e8: 12:e9:12:a5:60:5b:b1:bb:2f:35:86:d4:5a:dc:d1: b3:38:13:c6:65:40:1c:79:31:71:77:a7:5d:91:14: 4b:95:34:7c:39:01:bb:0c:55:51:2b:99:6d:71:0f: f6:08:a1:c7:63:63:f1:b9:88:c9:96:a6:aa:f9:70: 5b:07:b3:38:a7:68:70:7f:34:96:59:0d:45:85:62: 37:06:d4:8d:86:7e:bc:f7:36:bf:25:fc:2e:f0:e8: b6:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:9E:39:5F:26:78:23:14:93:F8:95:96:1F:47:6A:0D:B7:0B:B8:AB X509v3 Authority Key Identifier: keyid:99:7A:D9:F5:CD:A6:6D:96:1D:1B:CE:EF:C4:63:E6:29:EE:81:9A:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mXrZ9c2mbZYdG87vxGPmKe6Bmlw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/d853d7-7785-4e6d-993c-7c6e4809df59/1/mXrZ9c2mbZYdG87vxGPmKe6Bmlw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/d853d7-7785-4e6d-993c-7c6e4809df59/1/mXrZ9c2mbZYdG87vxGPmKe6Bmlw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:56:ca:35:e7:f3:3f:47:70:d7:56:6d:0c:6d:6e:70:60:34: be:60:93:4d:ae:10:b5:ef:bb:60:e0:28:a6:2f:9f:52:ef:5c: 11:34:20:eb:6f:29:73:f3:40:55:3d:fc:a9:19:6e:b3:97:7a: fa:e2:da:73:78:cc:20:48:c2:e0:4e:cf:bc:ef:a0:33:95:66: c1:e5:57:06:50:44:aa:a0:49:7b:53:02:a2:24:5a:29:a2:8e: 38:33:34:8f:14:ed:b5:a0:63:48:d8:84:d1:ef:0a:2d:c0:4d: e5:01:81:21:bc:8e:c7:88:81:6a:65:53:f8:fb:23:14:04:8f: 98:bd:d1:8f:c1:73:69:fd:98:10:c8:d1:43:9a:75:1d:a3:ae: 63:6e:91:81:36:99:2d:17:6e:9e:27:74:a0:3c:37:24:79:ea: b2:9a:65:e3:63:5b:74:c8:c6:19:24:bb:72:f6:c0:ab:84:b9: 44:3e:87:27:c9:d2:28:75:a3:47:e5:cf:83:f3:29:5f:f2:02: a7:4b:4f:21:cf:8f:6e:da:0d:a8:df:f1:24:35:17:56:74:70: 8a:1b:28:7a:eb:42:45:c0:b6:2f:c9:77:6d:40:0b:93:f8:cc: fd:ae:69:5c:fe:8b:51:c9:17:51:c9:a7:dd:b2:c1:bc:b6:54: 11:1e:bd:6e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtLTDSQsPPJ5k/ZWq0Bs5UvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk5N2FkOWY1Y2RhNjZkOTYxZDFiY2VlZmM0NjNlNjI5ZWU4 MTlhNWMwHhcNMjUxMjIzMTMwMDQzWhcNMjUxMjI0MTMwMDQzWjAzMTEwLwYDVQQD Eyg1YzllMzk1ZjI2NzgyMzE0OTNmODk1OTYxZjQ3NmEwZGI3MGJiOGFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyYZWJhvQ/6Hfo6B+yOcepJvsvRie fvEbkJd0EMJJ1T+k0xkqgep5wGuJzCyUeVLb56af7FSLemGiiVsmjHjrqMwLmr1t Qi6GE6vqhCavk7XlU3BEaWBb9UhBdoCLHp+YlMZ9i7SAGdT+m9QgMpcBTTTUacSo UrdN/TYfB4bxAMBSCmicca6fgggII60AYeGHTuzFdlthO2w/6cvNbn3Lkaj1b+gS 6RKlYFuxuy81htRa3NGzOBPGZUAceTFxd6ddkRRLlTR8OQG7DFVRK5ltcQ/2CKHH Y2PxuYjJlqaq+XBbB7M4p2hwfzSWWQ1FhWI3BtSNhn689za/Jfwu8Oi26QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFyeOV8meCMUk/iVlh9Hag23C7irMB8GA1UdIwQY MBaAFJl62fXNpm2WHRvO78Rj5inugZpcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbVhyWjljMm1iWllkRzg3dnhHUG1LZTZCbWx3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9kODUzZDctNzc4NS00ZTZkLTk5M2Mt N2M2ZTQ4MDlkZjU5LzEvbVhyWjljMm1iWllkRzg3dnhHUG1LZTZCbWx3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny9kODUzZDctNzc4NS00ZTZkLTk5M2MtN2M2ZTQ4MDlkZjU5 LzEvbVhyWjljMm1iWllkRzg3dnhHUG1LZTZCbWx3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZVbKNefz P0dw11ZtDG1ucGA0vmCTTa4Qte+7YOAopi+fUu9cETQg628pc/NAVT38qRlus5d6 +uLac3jMIEjC4E7PvO+gM5VmweVXBlBEqqBJe1MCoiRaKaKOODM0jxTttaBjSNiE 0e8KLcBN5QGBIbyOx4iBamVT+PsjFASPmL3Rj8Fzaf2YEMjRQ5p1HaOuY26RgTaZ LRdunid0oDw3JHnqsppl42NbdMjGGSS7cvbAq4S5RD6HJ8nSKHWjR+XPg/MpX/IC p0tPIc+PbtoNqN/xJDUXVnRwihsoeutCRcC2L8l3bUALk/jM/a5pXP6LUckXUcmn 3bLBvLZUER69bg== -----END CERTIFICATE-----Generated at Tue Dec 23 18:29:18 2025 by rpki-client