This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/07a487-26cb-4b18-bb39-15fe06fff8bc/1/mrL5l1qR5xN52hAOyEvUSgooDZs.mft File: mrL5l1qR5xN52hAOyEvUSgooDZs.mft (raw, json) Hash identifier: aG9KoS6Aiy6/G6zWuV6oDD8oCYgicE02ijdiizF0dPQ= Subject key identifier: AD:7C:C4:B5:00:12:51:2A:8E:81:69:C4:9C:BA:0C:B8:CE:9A:9E:7B Authority key identifier: 9A:B2:F9:97:5A:91:E7:13:79:DA:10:0E:C8:4B:D4:4A:0A:28:0D:9B Certificate issuer: /CN=9ab2f9975a91e71379da100ec84bd44a0a280d9b Certificate serial: 019B4F5FE675733F36EC1B31F1AC5A95A9F2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mrL5l1qR5xN52hAOyEvUSgooDZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/07a487-26cb-4b18-bb39-15fe06fff8bc/1/mrL5l1qR5xN52hAOyEvUSgooDZs.mft Manifest number: 14D6 Signing time: Wed 24 Dec 2025 08:00:43 +0000 Manifest this update: Wed 24 Dec 2025 08:00:43 +0000 Manifest next update: Thu 25 Dec 2025 08:00:43 +0000 Files and hashes: 1: PbBhRej558nP-vCP2i5bq2vF02I.roa (hash: k4y0Lkz3mWSRjZ9l7iXnliVmD502EHJIpmvxtHIQNOU=) 2: mrL5l1qR5xN52hAOyEvUSgooDZs.crl (hash: zVwH+yHX8pXMQp1vL8D0UkYN6SS7V3AmUiutjCoHO2M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/07a487-26cb-4b18-bb39-15fe06fff8bc/1/mrL5l1qR5xN52hAOyEvUSgooDZs.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/07a487-26cb-4b18-bb39-15fe06fff8bc/1/mrL5l1qR5xN52hAOyEvUSgooDZs.mft rsync://rpki.ripe.net/repository/DEFAULT/mrL5l1qR5xN52hAOyEvUSgooDZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 08:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4f:5f:e6:75:73:3f:36:ec:1b:31:f1:ac:5a:95:a9:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab2f9975a91e71379da100ec84bd44a0a280d9b Validity Not Before: Dec 24 08:00:43 2025 GMT Not After : Dec 25 08:00:43 2025 GMT Subject: CN=ad7cc4b50012512a8e8169c49cba0cb8ce9a9e7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:0c:46:e5:aa:ce:3c:54:83:78:60:7e:dd:8d: 61:ac:23:56:a3:b7:93:a8:37:73:bc:59:ad:6e:a6: 31:03:b8:78:27:c5:c4:50:07:e3:39:42:f1:a6:5b: b2:72:70:6c:10:bb:37:1a:6c:d0:43:9a:c7:ff:f2: 90:8e:db:ae:b2:10:fc:c5:f6:e5:47:a6:60:7b:45: 70:7a:e4:ba:c4:eb:6d:43:2e:62:ed:fd:92:dd:58: 66:df:d6:8c:8c:d1:6c:9c:58:00:fd:3a:2f:b6:c8: 86:70:b0:31:e4:84:cb:f2:ac:c9:54:18:a5:56:91: bf:0c:0d:d8:06:cb:c0:dc:f2:dc:11:3d:4c:45:d5: 37:dc:5c:3f:fc:54:1a:e8:11:df:81:03:b5:43:01: 64:52:18:eb:e4:db:27:c1:f3:fd:16:65:d8:22:1f: 49:c1:39:55:39:40:75:a9:ce:94:6a:87:bf:d8:4c: aa:4f:10:40:54:b7:93:ab:10:b2:71:cd:c2:85:54: 2e:24:3c:79:f6:8f:59:2d:da:f0:fe:9c:7c:ac:9a: 93:8f:2d:ce:1c:7e:b7:27:50:a7:2e:31:db:23:84: e9:6e:76:f2:50:e0:af:44:3c:7e:e7:eb:b0:b3:a1: be:df:98:09:05:dd:8e:26:17:0b:3d:91:0f:1b:c4: 98:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:7C:C4:B5:00:12:51:2A:8E:81:69:C4:9C:BA:0C:B8:CE:9A:9E:7B X509v3 Authority Key Identifier: keyid:9A:B2:F9:97:5A:91:E7:13:79:DA:10:0E:C8:4B:D4:4A:0A:28:0D:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mrL5l1qR5xN52hAOyEvUSgooDZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/07a487-26cb-4b18-bb39-15fe06fff8bc/1/mrL5l1qR5xN52hAOyEvUSgooDZs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/07a487-26cb-4b18-bb39-15fe06fff8bc/1/mrL5l1qR5xN52hAOyEvUSgooDZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:6e:6c:d3:87:ac:cd:cf:36:be:56:ff:7b:18:ec:e9:45:9c: 37:67:e2:6e:d4:dd:41:44:02:ad:80:d6:69:30:b4:17:21:f5: 81:2a:42:61:a7:88:9f:5c:7a:0a:69:62:55:93:cb:c3:bf:91: 1a:5f:9e:e0:81:01:18:1e:d9:e0:20:1b:ea:69:44:56:c5:d8: d8:9d:c7:c9:07:5f:53:6c:c8:40:3f:c7:0c:43:78:64:d0:4b: 43:4c:2c:0f:c0:59:a8:79:61:4a:d3:bc:70:2e:2a:cb:df:20: 1d:fb:ca:ef:cf:11:ad:d9:b2:b7:9c:90:52:83:d9:56:07:13: b0:02:c9:9c:d7:2a:c6:d1:9a:8d:5f:66:dd:eb:38:06:e2:8d: 7d:7b:bf:97:ed:bb:97:79:f1:e6:83:0c:28:f5:80:eb:25:c4: b2:0c:35:72:29:63:b3:bc:b9:8b:c9:ac:06:2e:42:df:b3:19: 5a:a9:c6:3b:4a:98:18:41:43:9a:75:e0:d9:63:2d:c2:6a:05: 12:88:fe:42:b8:3f:b0:81:71:dc:3a:16:01:1a:b3:5b:89:ef: 2b:28:85:a4:f6:c7:bc:6b:c8:f7:27:b8:05:b6:05:39:07:3c: 2d:b7:d6:24:b9:63:90:9b:d3:8e:e0:31:9d:11:79:26:91:54: bd:bd:16:d6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtPX+Z1cz827Bsx8axalanyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhYjJmOTk3NWE5MWU3MTM3OWRhMTAwZWM4NGJkNDRhMGEy ODBkOWIwHhcNMjUxMjI0MDgwMDQzWhcNMjUxMjI1MDgwMDQzWjAzMTEwLwYDVQQD EyhhZDdjYzRiNTAwMTI1MTJhOGU4MTY5YzQ5Y2JhMGNiOGNlOWE5ZTdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnwxG5arOPFSDeGB+3Y1hrCNWo7eT qDdzvFmtbqYxA7h4J8XEUAfjOULxpluycnBsELs3GmzQQ5rH//KQjtuushD8xfbl R6Zge0VweuS6xOttQy5i7f2S3Vhm39aMjNFsnFgA/TovtsiGcLAx5ITL8qzJVBil VpG/DA3YBsvA3PLcET1MRdU33Fw//FQa6BHfgQO1QwFkUhjr5NsnwfP9FmXYIh9J wTlVOUB1qc6Uaoe/2EyqTxBAVLeTqxCycc3ChVQuJDx59o9ZLdrw/px8rJqTjy3O HH63J1CnLjHbI4TpbnbyUOCvRDx+5+uws6G+35gJBd2OJhcLPZEPG8SYrwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK18xLUAElEqjoFpxJy6DLjOmp57MB8GA1UdIwQY MBaAFJqy+ZdakecTedoQDshL1EoKKA2bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbXJMNWwxcVI1eE41MmhBT3lFdlVTZ29vRFpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS8wN2E0ODctMjZjYi00YjE4LWJiMzkt MTVmZTA2ZmZmOGJjLzEvbXJMNWwxcVI1eE41MmhBT3lFdlVTZ29vRFpzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS8wN2E0ODctMjZjYi00YjE4LWJiMzktMTVmZTA2ZmZmOGJj LzEvbXJMNWwxcVI1eE41MmhBT3lFdlVTZ29vRFpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk25s04es zc82vlb/exjs6UWcN2fibtTdQUQCrYDWaTC0FyH1gSpCYaeIn1x6CmliVZPLw7+R Gl+e4IEBGB7Z4CAb6mlEVsXY2J3HyQdfU2zIQD/HDEN4ZNBLQ0wsD8BZqHlhStO8 cC4qy98gHfvK788Rrdmyt5yQUoPZVgcTsALJnNcqxtGajV9m3es4BuKNfXu/l+27 l3nx5oMMKPWA6yXEsgw1ciljs7y5i8msBi5C37MZWqnGO0qYGEFDmnXg2WMtwmoF Eoj+Qrg/sIFx3DoWARqzW4nvKyiFpPbHvGvI9ye4BbYFOQc8LbfWJLljkJvTjuAx nRF5JpFUvb0W1g== -----END CERTIFICATE-----Generated at Wed Dec 24 10:49:31 2025 by rpki-client