This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/0e7ed3-48cb-4afe-8d15-dffe17f3db54/1/mBLkkaqmVbYyTbzAz_AKjWMZEHY.mft File: mBLkkaqmVbYyTbzAz_AKjWMZEHY.mft (raw, json) Hash identifier: uhuFdDtR3kuTDcwnvO6M84I2n+CjhM9gID2C/7ZtlX4= Subject key identifier: 4C:1F:FB:21:D5:DF:BC:83:C2:F5:E8:62:91:3A:B8:32:6A:C1:5A:13 Authority key identifier: 98:12:E4:91:AA:A6:55:B6:32:4D:BC:C0:CF:F0:0A:8D:63:19:10:76 Certificate issuer: /CN=9812e491aaa655b6324dbcc0cff00a8d63191076 Certificate serial: 019B3AC6B84B2F40A7D16C6B16ADAB6D4524 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mBLkkaqmVbYyTbzAz_AKjWMZEHY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/0e7ed3-48cb-4afe-8d15-dffe17f3db54/1/mBLkkaqmVbYyTbzAz_AKjWMZEHY.mft Manifest number: 14E6 Signing time: Sat 20 Dec 2025 08:01:00 +0000 Manifest this update: Sat 20 Dec 2025 08:01:00 +0000 Manifest next update: Sun 21 Dec 2025 08:01:00 +0000 Files and hashes: 1: H3YMBp1HWn_yJUmsVDSZTkgIRZk.roa (hash: dsjF1p38BaFKD263jEWfJjaYNNkjDPWbd8s7iYfLKf0=) 2: JcHfeJjlV--266gVunBono2FBL8.roa (hash: 2aTzeGR10hHIdC8F6ToLHNpA36FVSTfHDmf74LWIj/E=) 3: cDHrUcS9iBRAhgzIa-0oojwM6x8.roa (hash: a6MRkFy47YCdZj55gPSM8dAPHE9bL49pr9pcP+5WZCo=) 4: gQFR0ws8EpADtXwJYL1_rKqtUCU.roa (hash: O/ujjDYhXza5+3b/lt0kt/wL12KlNYtlZgn4DDp272Q=) 5: ipnQ83UpKa8sWrTXie04nVeOWrE.roa (hash: LCyjANuJcWqupF1L+w0MaO/qngWjk1y0gHyBxfWyWgs=) 6: mBLkkaqmVbYyTbzAz_AKjWMZEHY.crl (hash: /lBa1wXwcZZCxoY7C4t2QFg8g2IRD+0fK0FLUiuWafk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/0e7ed3-48cb-4afe-8d15-dffe17f3db54/1/mBLkkaqmVbYyTbzAz_AKjWMZEHY.crl rsync://rpki.ripe.net/repository/DEFAULT/56/0e7ed3-48cb-4afe-8d15-dffe17f3db54/1/mBLkkaqmVbYyTbzAz_AKjWMZEHY.mft rsync://rpki.ripe.net/repository/DEFAULT/mBLkkaqmVbYyTbzAz_AKjWMZEHY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:c6:b8:4b:2f:40:a7:d1:6c:6b:16:ad:ab:6d:45:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9812e491aaa655b6324dbcc0cff00a8d63191076 Validity Not Before: Dec 20 08:01:00 2025 GMT Not After : Dec 21 08:01:00 2025 GMT Subject: CN=4c1ffb21d5dfbc83c2f5e862913ab8326ac15a13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:05:aa:5f:43:70:ef:90:0f:d4:ad:36:d0:72: c7:2a:df:57:0a:a1:9c:fd:08:9f:db:90:96:7e:e1: be:50:5e:d4:d4:c6:35:64:8a:2f:b7:cb:ac:0f:65: 4d:dd:47:f9:94:b0:fe:12:c6:f7:ea:d7:62:42:87: eb:0f:e0:a4:93:2a:c2:8c:a0:f7:2e:8c:f0:ca:f5: 58:53:ea:4c:e7:c3:ea:26:67:c1:6f:d8:1e:61:ce: ab:1c:ed:9b:1d:07:22:81:6b:a2:bb:71:ca:16:3d: 93:7c:fa:78:6a:c3:a7:0f:98:e2:6f:d8:17:31:b3: fb:67:46:85:99:55:f0:9a:a4:7e:3b:a3:3e:69:97: 51:04:f6:59:c8:48:72:d2:7b:eb:45:5d:24:3e:a9: eb:de:08:4e:c6:73:d1:cb:36:67:97:f9:60:9e:39: fb:90:c9:18:f4:89:8d:0c:1f:60:b0:65:b4:d7:47: c8:e9:85:cb:a1:fa:f0:26:62:01:c0:41:b4:54:ad: c1:42:13:48:58:1e:41:69:f1:4b:35:b9:cc:0d:b1: 01:2c:57:13:95:53:e3:56:a9:2a:f7:9d:32:2c:78: c1:84:33:0d:a2:c7:e9:2d:5b:bf:4d:e3:51:f3:3b: af:4b:2d:41:4a:85:7b:7d:d6:f6:31:5d:4d:b1:b0: 37:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:1F:FB:21:D5:DF:BC:83:C2:F5:E8:62:91:3A:B8:32:6A:C1:5A:13 X509v3 Authority Key Identifier: keyid:98:12:E4:91:AA:A6:55:B6:32:4D:BC:C0:CF:F0:0A:8D:63:19:10:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mBLkkaqmVbYyTbzAz_AKjWMZEHY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/0e7ed3-48cb-4afe-8d15-dffe17f3db54/1/mBLkkaqmVbYyTbzAz_AKjWMZEHY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/0e7ed3-48cb-4afe-8d15-dffe17f3db54/1/mBLkkaqmVbYyTbzAz_AKjWMZEHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:8b:30:e6:1c:03:67:73:96:9b:29:4e:9c:24:ac:1e:b7:89: 7d:13:c4:70:de:55:a8:a8:da:dc:ce:bc:f0:6c:48:76:08:01: 44:90:f3:64:36:fc:94:21:56:95:2d:f3:63:8b:c9:4c:1f:61: da:75:df:c7:c6:cb:78:50:9e:e5:3a:8f:0e:9d:03:36:e1:c9: 3b:4b:eb:a0:11:bb:2a:9b:61:11:45:ff:33:57:a1:4f:6f:d9: 0a:68:54:4c:08:8b:ff:f3:08:08:38:ec:cc:8d:66:ae:8e:cd: d5:1b:e5:0a:e5:63:88:e5:ba:60:73:11:0e:d0:13:ce:81:cb: b4:4a:f8:04:54:6c:cc:69:bc:02:18:d2:e4:36:de:1b:e7:74: 90:b6:8e:88:a2:05:94:78:37:fa:00:ff:fe:53:82:3b:99:1c: 31:6c:e0:a7:28:c7:04:6e:d7:73:0f:60:2b:01:dd:87:d4:85: e2:af:ab:1c:09:8f:e2:e6:1d:f5:59:1f:52:d1:9a:ab:5d:36: fc:5d:f3:8a:3c:cf:a4:a4:fa:6d:e0:3d:39:99:54:f0:91:da: 3b:7d:18:06:ec:22:7e:5d:08:bc:5c:8f:26:ee:c7:bc:fe:3a: 80:61:96:41:3f:1f:33:00:54:78:28:86:f1:55:59:02:ef:17: 2b:ab:a2:54 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6xrhLL0Cn0WxrFq2rbUUkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk4MTJlNDkxYWFhNjU1YjYzMjRkYmNjMGNmZjAwYThkNjMx OTEwNzYwHhcNMjUxMjIwMDgwMTAwWhcNMjUxMjIxMDgwMTAwWjAzMTEwLwYDVQQD Eyg0YzFmZmIyMWQ1ZGZiYzgzYzJmNWU4NjI5MTNhYjgzMjZhYzE1YTEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4gWqX0Nw75AP1K020HLHKt9XCqGc /Qif25CWfuG+UF7U1MY1ZIovt8usD2VN3Uf5lLD+Esb36tdiQofrD+CkkyrCjKD3 LozwyvVYU+pM58PqJmfBb9geYc6rHO2bHQcigWuiu3HKFj2TfPp4asOnD5jib9gX MbP7Z0aFmVXwmqR+O6M+aZdRBPZZyEhy0nvrRV0kPqnr3ghOxnPRyzZnl/lgnjn7 kMkY9ImNDB9gsGW010fI6YXLofrwJmIBwEG0VK3BQhNIWB5BafFLNbnMDbEBLFcT lVPjVqkq950yLHjBhDMNosfpLVu/TeNR8zuvSy1BSoV7fdb2MV1NsbA3jwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEwf+yHV37yDwvXoYpE6uDJqwVoTMB8GA1UdIwQY MBaAFJgS5JGqplW2Mk28wM/wCo1jGRB2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbUJMa2thcW1WYll5VGJ6QXpfQUtqV01aRUhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni8wZTdlZDMtNDhjYi00YWZlLThkMTUt ZGZmZTE3ZjNkYjU0LzEvbUJMa2thcW1WYll5VGJ6QXpfQUtqV01aRUhZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni8wZTdlZDMtNDhjYi00YWZlLThkMTUtZGZmZTE3ZjNkYjU0 LzEvbUJMa2thcW1WYll5VGJ6QXpfQUtqV01aRUhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC4sw5hwD Z3OWmylOnCSsHreJfRPEcN5VqKja3M688GxIdggBRJDzZDb8lCFWlS3zY4vJTB9h 2nXfx8bLeFCe5TqPDp0DNuHJO0vroBG7KpthEUX/M1ehT2/ZCmhUTAiL//MICDjs zI1mro7N1RvlCuVjiOW6YHMRDtATzoHLtEr4BFRszGm8AhjS5DbeG+d0kLaOiKIF lHg3+gD//lOCO5kcMWzgpyjHBG7Xcw9gKwHdh9SF4q+rHAmP4uYd9VkfUtGaq102 /F3zijzPpKT6beA9OZlU8JHaO30YBuwifl0IvFyPJu7HvP46gGGWQT8fMwBUeCiG 8VVZAu8XK6uiVA== -----END CERTIFICATE-----Generated at Sat Dec 20 09:31:41 2025 by rpki-client