This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/f4009f-8275-4716-9971-ba39e7c2f6a1/1/mryiPS4rrR-1eI3bX1pvx6tiyiA.mft File: mryiPS4rrR-1eI3bX1pvx6tiyiA.mft (raw, json) Hash identifier: 37JF605cVpmPkgw+BHTqb7WYQSikiAZG6WCGH8mxygM= Subject key identifier: 79:5A:19:62:FA:49:52:C9:81:CE:D9:C8:7A:90:0F:05:98:66:5F:93 Authority key identifier: 9A:BC:A2:3D:2E:2B:AD:1F:B5:78:8D:DB:5F:5A:6F:C7:AB:62:CA:20 Certificate issuer: /CN=9abca23d2e2bad1fb5788ddb5f5a6fc7ab62ca20 Certificate serial: 019B440052657AC35541F7EBF3734E5347D8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mryiPS4rrR-1eI3bX1pvx6tiyiA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/f4009f-8275-4716-9971-ba39e7c2f6a1/1/mryiPS4rrR-1eI3bX1pvx6tiyiA.mft Manifest number: 015C Signing time: Mon 22 Dec 2025 03:00:30 +0000 Manifest this update: Mon 22 Dec 2025 03:00:30 +0000 Manifest next update: Tue 23 Dec 2025 03:00:30 +0000 Files and hashes: 1: LNE0MuZMavkklT_2pqrHqhF84rY.roa (hash: ZYqhRbVzdQKSF9ZEirdkyB29pkjWB2pzYX8b2N86rj0=) 2: mryiPS4rrR-1eI3bX1pvx6tiyiA.crl (hash: 8vVwxnyl3uLbVMhZnOWv7nxXO7W6Kg3AM5Llu02P7S0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/f4009f-8275-4716-9971-ba39e7c2f6a1/1/mryiPS4rrR-1eI3bX1pvx6tiyiA.crl rsync://rpki.ripe.net/repository/DEFAULT/49/f4009f-8275-4716-9971-ba39e7c2f6a1/1/mryiPS4rrR-1eI3bX1pvx6tiyiA.mft rsync://rpki.ripe.net/repository/DEFAULT/mryiPS4rrR-1eI3bX1pvx6tiyiA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 03:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:00:52:65:7a:c3:55:41:f7:eb:f3:73:4e:53:47:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9abca23d2e2bad1fb5788ddb5f5a6fc7ab62ca20 Validity Not Before: Dec 22 03:00:30 2025 GMT Not After : Dec 23 03:00:30 2025 GMT Subject: CN=795a1962fa4952c981ced9c87a900f0598665f93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:23:40:44:57:1f:be:62:37:36:64:d1:44:f4: 28:ae:0c:bd:f0:2c:d3:40:9e:b9:3f:f8:33:cb:08: 55:33:99:06:5b:36:ad:b5:03:68:6b:aa:ba:80:87: 94:74:9a:51:b1:3c:ff:d8:e9:f4:d1:c3:ce:03:6f: 27:bf:7b:f2:9f:2a:c0:f9:97:54:63:3a:c0:1d:35: 85:d8:b8:9a:ab:03:26:35:ed:c0:68:1e:0b:5a:d4: 37:47:57:cf:47:46:b0:56:bc:59:ff:74:18:bb:59: 00:b4:4d:03:71:c6:ae:1e:e3:1e:3c:a0:ec:71:78: b4:20:ab:40:0c:4d:68:06:f1:2b:e3:14:e3:91:6c: a0:66:a0:3e:f5:8c:6c:66:b9:5b:cc:5a:66:5d:bd: d9:b2:36:6e:53:12:af:04:ff:71:43:c4:b4:2b:5c: 66:6a:85:b1:85:79:84:6a:1d:10:46:29:cc:5a:f2: 75:f6:b8:fe:a3:6b:bd:34:be:48:d4:88:10:49:f1: 0e:e8:8e:9d:11:fa:b2:c1:99:71:8b:f4:ba:5a:c5: 7f:02:bb:e4:f4:c8:a3:3c:ec:7b:95:cb:05:0d:96: e4:5b:84:3f:32:e8:4c:0e:b6:9f:93:8b:d6:89:95: 9d:c8:d4:61:0c:9d:b3:76:03:17:d7:1f:39:88:3e: 28:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:5A:19:62:FA:49:52:C9:81:CE:D9:C8:7A:90:0F:05:98:66:5F:93 X509v3 Authority Key Identifier: keyid:9A:BC:A2:3D:2E:2B:AD:1F:B5:78:8D:DB:5F:5A:6F:C7:AB:62:CA:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mryiPS4rrR-1eI3bX1pvx6tiyiA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/f4009f-8275-4716-9971-ba39e7c2f6a1/1/mryiPS4rrR-1eI3bX1pvx6tiyiA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/49/f4009f-8275-4716-9971-ba39e7c2f6a1/1/mryiPS4rrR-1eI3bX1pvx6tiyiA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:ca:07:c9:92:df:c5:21:42:6e:3e:1b:cd:c2:33:5d:cf:1e: 7e:55:3c:e3:8d:80:cc:57:71:cb:a9:b1:5d:ce:38:33:59:c4: 66:ae:d6:ec:7d:db:e1:50:ee:ea:7a:99:b8:3e:19:aa:95:b8: d6:fc:ac:25:9c:9f:d1:d8:f1:0f:4f:da:48:99:dd:a1:c7:f6: b7:fb:7c:96:4b:47:8f:bd:61:70:c8:49:51:7f:f1:88:c8:28: 97:0c:67:12:76:e6:25:b7:55:e2:a1:58:c8:39:49:5d:64:57: 0e:18:10:a0:6a:e2:85:70:07:00:5b:e1:db:0c:ce:79:5f:5e: 03:d4:16:51:1f:3e:d6:63:00:93:dd:97:81:85:8c:53:b0:c1: b2:6d:0d:85:b2:6b:d8:87:29:ef:cd:0e:33:57:a0:5e:cd:4b: 50:ea:45:75:22:b9:0d:8a:11:4d:4c:6b:7d:b4:71:07:0a:fd: 74:fb:dc:ed:d8:2a:1a:22:12:0d:73:c2:08:b2:24:d8:05:38: c9:83:43:ab:15:59:66:ae:94:f0:10:58:61:f1:84:72:18:d5: b0:6e:fb:c3:2e:1e:d4:50:ee:40:22:f7:4a:d3:ed:64:9e:49: f8:d9:b8:a0:8e:51:63:91:46:94:9d:fe:c5:d0:a7:d0:cc:1a: 76:ce:6b:40 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtEAFJlesNVQffr83NOU0fYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhYmNhMjNkMmUyYmFkMWZiNTc4OGRkYjVmNWE2ZmM3YWI2 MmNhMjAwHhcNMjUxMjIyMDMwMDMwWhcNMjUxMjIzMDMwMDMwWjAzMTEwLwYDVQQD Eyg3OTVhMTk2MmZhNDk1MmM5ODFjZWQ5Yzg3YTkwMGYwNTk4NjY1ZjkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0CNARFcfvmI3NmTRRPQorgy98CzT QJ65P/gzywhVM5kGWzattQNoa6q6gIeUdJpRsTz/2On00cPOA28nv3vynyrA+ZdU YzrAHTWF2LiaqwMmNe3AaB4LWtQ3R1fPR0awVrxZ/3QYu1kAtE0DccauHuMePKDs cXi0IKtADE1oBvEr4xTjkWygZqA+9YxsZrlbzFpmXb3ZsjZuUxKvBP9xQ8S0K1xm aoWxhXmEah0QRinMWvJ19rj+o2u9NL5I1IgQSfEO6I6dEfqywZlxi/S6WsV/Arvk 9MijPOx7lcsFDZbkW4Q/MuhMDrafk4vWiZWdyNRhDJ2zdgMX1x85iD4oVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHlaGWL6SVLJgc7ZyHqQDwWYZl+TMB8GA1UdIwQY MBaAFJq8oj0uK60ftXiN219ab8erYsogMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbXJ5aVBTNHJyUi0xZUkzYlgxcHZ4NnRpeWlBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS9mNDAwOWYtODI3NS00NzE2LTk5NzEt YmEzOWU3YzJmNmExLzEvbXJ5aVBTNHJyUi0xZUkzYlgxcHZ4NnRpeWlBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OS9mNDAwOWYtODI3NS00NzE2LTk5NzEtYmEzOWU3YzJmNmEx LzEvbXJ5aVBTNHJyUi0xZUkzYlgxcHZ4NnRpeWlBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASsoHyZLf xSFCbj4bzcIzXc8eflU8442AzFdxy6mxXc44M1nEZq7W7H3b4VDu6nqZuD4ZqpW4 1vysJZyf0djxD0/aSJndocf2t/t8lktHj71hcMhJUX/xiMgolwxnEnbmJbdV4qFY yDlJXWRXDhgQoGrihXAHAFvh2wzOeV9eA9QWUR8+1mMAk92XgYWMU7DBsm0NhbJr 2Icp780OM1egXs1LUOpFdSK5DYoRTUxrfbRxBwr9dPvc7dgqGiISDXPCCLIk2AU4 yYNDqxVZZq6U8BBYYfGEchjVsG77wy4e1FDuQCL3StPtZJ5J+Nm4oI5RY5FGlJ3+ xdCn0Mwads5rQA== -----END CERTIFICATE-----Generated at Mon Dec 22 11:32:44 2025 by rpki-client