This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/60bc06-c721-4e30-a757-6f4d818941a8/1/mfL0sCJG5gTiN_N5RaOCv62hJ38.mft File: mfL0sCJG5gTiN_N5RaOCv62hJ38.mft (raw, json) Hash identifier: ZbSQ83P5kOBilyebpp7umJzM7eBfY5M0t7RrlCakWVI= Subject key identifier: A0:86:86:F3:C3:80:FD:06:0A:ED:69:3F:E7:56:A8:B9:05:56:01:3B Authority key identifier: 99:F2:F4:B0:22:46:E6:04:E2:37:F3:79:45:A3:82:BF:AD:A1:27:7F Certificate issuer: /CN=99f2f4b02246e604e237f37945a382bfada1277f Certificate serial: 019B3CB53DE20DD05D9065FBFAE64DF057FA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mfL0sCJG5gTiN_N5RaOCv62hJ38.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/60bc06-c721-4e30-a757-6f4d818941a8/1/mfL0sCJG5gTiN_N5RaOCv62hJ38.mft Manifest number: 0872 Signing time: Sat 20 Dec 2025 17:01:09 +0000 Manifest this update: Sat 20 Dec 2025 17:01:09 +0000 Manifest next update: Sun 21 Dec 2025 17:01:09 +0000 Files and hashes: 1: mfL0sCJG5gTiN_N5RaOCv62hJ38.crl (hash: C46yMO4tutv1g9vMMZHrdisO8kNRfVBcOrQd0cIFZbw=) 2: tD16yJgx6FslawER1Evjktr90DU.roa (hash: IgaqAI1HCcxs2x01fN4KAw3fM/ZJo5SCnC5NuJ1Z+9Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/60bc06-c721-4e30-a757-6f4d818941a8/1/mfL0sCJG5gTiN_N5RaOCv62hJ38.crl rsync://rpki.ripe.net/repository/DEFAULT/65/60bc06-c721-4e30-a757-6f4d818941a8/1/mfL0sCJG5gTiN_N5RaOCv62hJ38.mft rsync://rpki.ripe.net/repository/DEFAULT/mfL0sCJG5gTiN_N5RaOCv62hJ38.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:b5:3d:e2:0d:d0:5d:90:65:fb:fa:e6:4d:f0:57:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99f2f4b02246e604e237f37945a382bfada1277f Validity Not Before: Dec 20 17:01:09 2025 GMT Not After : Dec 21 17:01:09 2025 GMT Subject: CN=a08686f3c380fd060aed693fe756a8b90556013b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:2a:76:c9:40:61:8e:16:ed:05:87:d2:d4:fc: ad:2f:7c:45:bc:8b:66:da:29:35:15:90:b0:b4:9b: 32:12:2f:22:4c:48:27:b0:6d:15:d9:d5:d1:8e:81: 2e:0f:74:c5:06:03:95:6e:7c:e8:a2:83:52:df:3f: 5b:7a:81:71:11:65:85:f3:88:5d:a9:a5:b9:7a:a1: b4:21:02:e8:b0:c0:26:92:14:39:db:1a:86:5f:d0: 16:b6:cb:c3:2e:42:a7:ad:0d:4f:8e:3f:74:cf:dd: 4f:64:71:97:6c:35:c0:7b:62:47:49:14:2b:d0:a7: ab:13:ff:14:3b:9f:69:7b:e3:b0:6e:b5:bd:59:71: 64:bf:d4:a8:23:90:9c:7c:6c:cd:8b:9a:d1:4e:cb: 9c:f6:0e:fa:13:e2:0d:c4:4c:19:d7:65:85:62:b4: 84:e5:59:98:cd:2e:f8:79:81:e1:56:38:9d:5b:60: 1a:a7:0f:32:63:00:57:b3:81:d5:a1:41:1a:92:d1: 2a:fd:a4:6b:56:10:00:14:a9:2e:ab:9f:71:2f:89: 34:4c:82:08:16:6a:b5:2b:97:b4:1f:92:60:e2:ac: 48:ff:19:64:42:16:ab:bf:be:32:4f:bc:48:86:6c: 4a:2e:ea:07:74:8f:1b:9b:d6:f0:ed:00:92:67:f2: 16:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:86:86:F3:C3:80:FD:06:0A:ED:69:3F:E7:56:A8:B9:05:56:01:3B X509v3 Authority Key Identifier: keyid:99:F2:F4:B0:22:46:E6:04:E2:37:F3:79:45:A3:82:BF:AD:A1:27:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mfL0sCJG5gTiN_N5RaOCv62hJ38.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/60bc06-c721-4e30-a757-6f4d818941a8/1/mfL0sCJG5gTiN_N5RaOCv62hJ38.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/60bc06-c721-4e30-a757-6f4d818941a8/1/mfL0sCJG5gTiN_N5RaOCv62hJ38.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:df:20:f9:a8:d0:8f:04:10:a6:74:f8:9f:b5:5e:6e:26:10: 5a:93:7f:36:8c:73:76:61:92:a5:e8:4d:09:8e:fe:35:4c:4a: 44:2e:23:45:c1:64:23:0b:91:2b:90:48:85:ff:ec:d6:00:54: 6e:ab:f8:f8:7f:ac:a7:9e:0b:8b:04:03:29:87:1b:1c:38:d6: 9b:fc:98:5a:35:1d:2e:13:0c:77:53:89:91:c2:8c:9f:29:31: af:ea:9c:09:ad:61:73:c8:3f:d3:f7:f6:32:b3:57:6f:bc:7a: 14:72:6f:21:fb:06:72:5b:b4:65:b5:20:a3:ac:b5:44:07:c0: 4b:f6:38:2a:ff:eb:8f:63:2f:43:a9:65:34:c8:85:3d:14:56: 4f:ea:ef:8d:5a:c1:80:a4:4a:78:5f:7a:0d:19:6c:f9:76:f0: 75:61:16:44:40:ad:06:31:a5:57:ea:8e:e5:24:4d:0b:cd:d0: ae:bb:05:c7:e6:df:ba:8c:a6:4b:ab:90:2c:d9:22:8e:22:5f: 3e:f2:7b:2e:64:28:08:e0:10:e3:43:2c:6f:05:8d:8b:38:ac: 2d:84:08:ac:73:8b:8c:c2:23:92:82:ea:1c:f3:db:c5:12:f2: 12:d8:a6:60:2d:d8:f5:54:e6:6e:1c:b6:91:82:57:53:44:fb: cb:3e:71:57 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8tT3iDdBdkGX7+uZN8Ff6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk5ZjJmNGIwMjI0NmU2MDRlMjM3ZjM3OTQ1YTM4MmJmYWRh MTI3N2YwHhcNMjUxMjIwMTcwMTA5WhcNMjUxMjIxMTcwMTA5WjAzMTEwLwYDVQQD EyhhMDg2ODZmM2MzODBmZDA2MGFlZDY5M2ZlNzU2YThiOTA1NTYwMTNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoSp2yUBhjhbtBYfS1PytL3xFvItm 2ik1FZCwtJsyEi8iTEgnsG0V2dXRjoEuD3TFBgOVbnzoooNS3z9beoFxEWWF84hd qaW5eqG0IQLosMAmkhQ52xqGX9AWtsvDLkKnrQ1Pjj90z91PZHGXbDXAe2JHSRQr 0KerE/8UO59pe+OwbrW9WXFkv9SoI5CcfGzNi5rRTsuc9g76E+INxEwZ12WFYrSE 5VmYzS74eYHhVjidW2Aapw8yYwBXs4HVoUEaktEq/aRrVhAAFKkuq59xL4k0TIII Fmq1K5e0H5Jg4qxI/xlkQharv74yT7xIhmxKLuoHdI8bm9bw7QCSZ/IW1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKCGhvPDgP0GCu1pP+dWqLkFVgE7MB8GA1UdIwQY MBaAFJny9LAiRuYE4jfzeUWjgr+toSd/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbWZMMHNDSkc1Z1RpTl9ONVJhT0N2NjJoSjM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS82MGJjMDYtYzcyMS00ZTMwLWE3NTct NmY0ZDgxODk0MWE4LzEvbWZMMHNDSkc1Z1RpTl9ONVJhT0N2NjJoSjM4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS82MGJjMDYtYzcyMS00ZTMwLWE3NTctNmY0ZDgxODk0MWE4 LzEvbWZMMHNDSkc1Z1RpTl9ONVJhT0N2NjJoSjM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApt8g+ajQ jwQQpnT4n7VebiYQWpN/NoxzdmGSpehNCY7+NUxKRC4jRcFkIwuRK5BIhf/s1gBU bqv4+H+sp54LiwQDKYcbHDjWm/yYWjUdLhMMd1OJkcKMnykxr+qcCa1hc8g/0/f2 MrNXb7x6FHJvIfsGclu0ZbUgo6y1RAfAS/Y4Kv/rj2MvQ6llNMiFPRRWT+rvjVrB gKRKeF96DRls+XbwdWEWRECtBjGlV+qO5SRNC83QrrsFx+bfuoymS6uQLNkijiJf PvJ7LmQoCOAQ40MsbwWNizisLYQIrHOLjMIjkoLqHPPbxRLyEtimYC3Y9VTmbhy2 kYJXU0T7yz5xVw== -----END CERTIFICATE-----Generated at Sat Dec 20 21:16:09 2025 by rpki-client