This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/382597-0d50-400d-a71b-676e80dc1de6/1/mFTaUYIyMZ9noy_YrUwGU2xB1b8.mft File: mFTaUYIyMZ9noy_YrUwGU2xB1b8.mft (raw, json) Hash identifier: X6J7NYkUuIyfDxv+fiKx0FY1ouwvs0NaTxSzhU39mfE= Subject key identifier: 22:13:C9:4F:AB:E1:38:3C:39:BC:C6:C2:B7:4B:63:95:FF:CE:33:9C Authority key identifier: 98:54:DA:51:82:32:31:9F:67:A3:2F:D8:AD:4C:06:53:6C:41:D5:BF Certificate issuer: /CN=9854da518232319f67a32fd8ad4c06536c41d5bf Certificate serial: 019B3CEBD2FA602F9476D2C050A0DCA3EB20 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mFTaUYIyMZ9noy_YrUwGU2xB1b8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/382597-0d50-400d-a71b-676e80dc1de6/1/mFTaUYIyMZ9noy_YrUwGU2xB1b8.mft Manifest number: 1788 Signing time: Sat 20 Dec 2025 18:00:46 +0000 Manifest this update: Sat 20 Dec 2025 18:00:46 +0000 Manifest next update: Sun 21 Dec 2025 18:00:46 +0000 Files and hashes: 1: BFbItzgMXh2yCZ227Kwfzi1k3ME.roa (hash: 3p3Z55QLOu2JV1kUetHwILYBWmwCeLPU+vcoZy0JMPg=) 2: mFTaUYIyMZ9noy_YrUwGU2xB1b8.crl (hash: UsdSNbMtikLaRrMcR1u6gJRy8KQbC6q0G4unyZe8xjY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/382597-0d50-400d-a71b-676e80dc1de6/1/mFTaUYIyMZ9noy_YrUwGU2xB1b8.crl rsync://rpki.ripe.net/repository/DEFAULT/61/382597-0d50-400d-a71b-676e80dc1de6/1/mFTaUYIyMZ9noy_YrUwGU2xB1b8.mft rsync://rpki.ripe.net/repository/DEFAULT/mFTaUYIyMZ9noy_YrUwGU2xB1b8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:eb:d2:fa:60:2f:94:76:d2:c0:50:a0:dc:a3:eb:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9854da518232319f67a32fd8ad4c06536c41d5bf Validity Not Before: Dec 20 18:00:46 2025 GMT Not After : Dec 21 18:00:46 2025 GMT Subject: CN=2213c94fabe1383c39bcc6c2b74b6395ffce339c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:a2:99:bd:41:76:9c:a7:b8:7e:d4:ea:fd:c2: 31:74:8c:ab:13:cd:96:87:3b:3b:ad:d3:6f:e1:70: 70:09:51:a8:8c:b9:18:b8:6f:19:d7:2c:88:cd:19: f6:68:71:33:78:e7:54:f1:ea:4a:51:f3:06:50:1d: 04:01:ad:e3:57:df:b9:94:fe:cc:f6:4b:99:cf:94: 9d:0b:55:45:4b:2f:9a:b6:91:a5:8b:32:02:ac:5b: 08:a4:b7:64:9c:e3:79:e8:da:56:9a:54:02:66:47: 5d:2e:d6:52:d6:45:fe:f4:46:48:99:db:2e:32:77: 78:c9:a3:eb:08:2b:5e:02:7d:d6:d9:49:37:db:65: ce:9f:0b:f8:54:be:4f:cd:a2:47:9b:f4:31:85:19: 9f:cb:22:e6:fb:44:1b:d1:f8:0b:c1:bc:8e:4b:56: fc:d5:a7:c2:4b:e4:18:90:9d:aa:38:9c:7a:4a:73: f5:af:f8:17:ea:6f:59:f2:02:c4:49:ec:17:fa:32: 0e:2d:52:3f:d2:d0:d3:2b:7c:d7:f9:c4:f0:2b:3e: 40:93:fb:27:fb:19:49:89:b8:32:00:53:ff:e5:00: 13:bd:84:11:f4:a7:29:17:1a:b4:57:40:e0:a2:6a: 2e:69:d5:2b:9d:41:77:6f:fe:81:ee:d9:57:28:4d: f5:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:13:C9:4F:AB:E1:38:3C:39:BC:C6:C2:B7:4B:63:95:FF:CE:33:9C X509v3 Authority Key Identifier: keyid:98:54:DA:51:82:32:31:9F:67:A3:2F:D8:AD:4C:06:53:6C:41:D5:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mFTaUYIyMZ9noy_YrUwGU2xB1b8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/382597-0d50-400d-a71b-676e80dc1de6/1/mFTaUYIyMZ9noy_YrUwGU2xB1b8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/382597-0d50-400d-a71b-676e80dc1de6/1/mFTaUYIyMZ9noy_YrUwGU2xB1b8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:30:85:9e:d6:30:9d:44:df:f2:2f:33:16:70:3b:8d:9e:69: c6:19:8f:25:2b:86:db:77:48:83:0f:07:c4:15:be:c3:10:8d: 37:c2:bb:ce:11:b0:4a:91:96:eb:2b:ed:ba:1d:f7:8d:e2:7e: 6b:a1:bb:35:8b:3a:44:59:7e:b1:58:f7:02:5f:37:15:75:b7: 06:c7:93:75:5b:9b:40:9a:62:a4:cb:7b:fd:83:59:3a:68:9c: d3:97:53:86:10:86:e1:08:63:87:da:b1:17:77:c9:b9:5e:0d: 91:b9:d7:64:ec:82:f4:13:1c:dc:36:35:03:45:e2:e6:f3:c3: c3:31:00:26:be:67:70:3b:2d:c0:77:2f:7e:41:7e:5b:b6:95: 97:d8:67:45:77:e9:ef:4f:8b:d9:28:6f:f0:49:10:09:8c:a1: 88:a0:52:01:36:00:37:44:22:db:f9:14:97:c5:48:94:3b:f8: b4:56:0b:5d:44:2e:2b:18:ad:d7:bf:34:a2:ca:cb:c8:4c:1f: 22:c7:4b:a4:dd:05:cb:92:5f:e8:8d:99:67:05:38:be:c1:77: cd:24:1f:5d:90:ce:f4:7c:ad:b6:9b:34:36:ec:85:a6:a7:28: f9:e2:0f:02:22:5f:6d:de:aa:9b:1d:94:91:9a:26:d9:1f:e5: c2:92:b7:63 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs869L6YC+UdtLAUKDco+sgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk4NTRkYTUxODIzMjMxOWY2N2EzMmZkOGFkNGMwNjUzNmM0 MWQ1YmYwHhcNMjUxMjIwMTgwMDQ2WhcNMjUxMjIxMTgwMDQ2WjAzMTEwLwYDVQQD EygyMjEzYzk0ZmFiZTEzODNjMzliY2M2YzJiNzRiNjM5NWZmY2UzMzljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArKKZvUF2nKe4ftTq/cIxdIyrE82W hzs7rdNv4XBwCVGojLkYuG8Z1yyIzRn2aHEzeOdU8epKUfMGUB0EAa3jV9+5lP7M 9kuZz5SdC1VFSy+atpGlizICrFsIpLdknON56NpWmlQCZkddLtZS1kX+9EZImdsu Mnd4yaPrCCteAn3W2Uk322XOnwv4VL5PzaJHm/QxhRmfyyLm+0Qb0fgLwbyOS1b8 1afCS+QYkJ2qOJx6SnP1r/gX6m9Z8gLESewX+jIOLVI/0tDTK3zX+cTwKz5Ak/sn +xlJibgyAFP/5QATvYQR9KcpFxq0V0DgomouadUrnUF3b/6B7tlXKE31xQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCITyU+r4Tg8ObzGwrdLY5X/zjOcMB8GA1UdIwQY MBaAFJhU2lGCMjGfZ6Mv2K1MBlNsQdW/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbUZUYVVZSXlNWjlub3lfWXJVd0dVMnhCMWI4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS8zODI1OTctMGQ1MC00MDBkLWE3MWIt Njc2ZTgwZGMxZGU2LzEvbUZUYVVZSXlNWjlub3lfWXJVd0dVMnhCMWI4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS8zODI1OTctMGQ1MC00MDBkLWE3MWItNjc2ZTgwZGMxZGU2 LzEvbUZUYVVZSXlNWjlub3lfWXJVd0dVMnhCMWI4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeTCFntYw nUTf8i8zFnA7jZ5pxhmPJSuG23dIgw8HxBW+wxCNN8K7zhGwSpGW6yvtuh33jeJ+ a6G7NYs6RFl+sVj3Al83FXW3BseTdVubQJpipMt7/YNZOmic05dThhCG4Qhjh9qx F3fJuV4NkbnXZOyC9BMc3DY1A0Xi5vPDwzEAJr5ncDstwHcvfkF+W7aVl9hnRXfp 70+L2Shv8EkQCYyhiKBSATYAN0Qi2/kUl8VIlDv4tFYLXUQuKxit1780osrLyEwf IsdLpN0Fy5Jf6I2ZZwU4vsF3zSQfXZDO9Hyttps0NuyFpqco+eIPAiJfbd6qmx2U kZom2R/lwpK3Yw== -----END CERTIFICATE-----Generated at Sat Dec 20 23:13:45 2025 by rpki-client