This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/f08716-4d2a-46ed-bded-af3e7d42968d/1/mUqt73Cb43uczULMK4xzLDlxUPo.mft File: mUqt73Cb43uczULMK4xzLDlxUPo.mft (raw, json) Hash identifier: uYWzdxQsRUAlFaj8cWEcH4wbsRjOGxBQk6wFnkxQoYs= Subject key identifier: 88:F1:2E:19:A6:2A:63:DD:F8:F8:51:0E:99:A8:20:26:46:C1:12:A5 Authority key identifier: 99:4A:AD:EF:70:9B:E3:7B:9C:CD:42:CC:2B:8C:73:2C:39:71:50:FA Certificate issuer: /CN=994aadef709be37b9ccd42cc2b8c732c397150fa Certificate serial: 019B39EAEDF8E3483C9B5537FD32D03C7137 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mUqt73Cb43uczULMK4xzLDlxUPo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/f08716-4d2a-46ed-bded-af3e7d42968d/1/mUqt73Cb43uczULMK4xzLDlxUPo.mft Manifest number: 176A Signing time: Sat 20 Dec 2025 04:00:56 +0000 Manifest this update: Sat 20 Dec 2025 04:00:56 +0000 Manifest next update: Sun 21 Dec 2025 04:00:56 +0000 Files and hashes: 1: mUqt73Cb43uczULMK4xzLDlxUPo.crl (hash: W0sJTe93/TQkS7a3yodXl5+ooFyYlkonCNySg8Xw4aA=) 2: rCQFs6YvGWUAxg9vVWInZlNxQI4.roa (hash: +0NX89cMUvPysuXc7Y1nf0CYHUBQMqz9BTCGNPE3tAA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/f08716-4d2a-46ed-bded-af3e7d42968d/1/mUqt73Cb43uczULMK4xzLDlxUPo.crl rsync://rpki.ripe.net/repository/DEFAULT/65/f08716-4d2a-46ed-bded-af3e7d42968d/1/mUqt73Cb43uczULMK4xzLDlxUPo.mft rsync://rpki.ripe.net/repository/DEFAULT/mUqt73Cb43uczULMK4xzLDlxUPo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:ea:ed:f8:e3:48:3c:9b:55:37:fd:32:d0:3c:71:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=994aadef709be37b9ccd42cc2b8c732c397150fa Validity Not Before: Dec 20 04:00:56 2025 GMT Not After : Dec 21 04:00:56 2025 GMT Subject: CN=88f12e19a62a63ddf8f8510e99a8202646c112a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:20:88:34:88:8d:78:62:9f:71:5e:54:cc:c1: ae:ed:3d:31:99:73:ee:59:b5:59:1b:80:50:67:d5: 71:9d:c3:8a:d6:af:ea:49:ef:f0:fe:dd:db:40:61: b0:9f:be:82:da:38:40:0b:64:d3:a9:0c:93:f4:4a: 70:dc:75:cb:de:cb:8f:0e:20:6b:b3:00:bc:fd:8e: ca:78:71:8b:bf:49:ff:48:0f:ff:9d:a2:98:e8:7b: f0:5a:53:a2:49:39:6d:28:05:96:22:ea:23:60:1f: f0:fa:79:ad:ed:a5:cf:48:7a:e4:5e:72:23:d1:a5: 98:7b:60:d5:5c:e9:54:c1:65:47:61:bd:d1:d3:48: 41:d2:86:16:91:29:a0:ac:9f:3a:68:dc:54:bd:3c: 71:30:2c:3c:8a:e5:28:57:cd:6d:bd:52:c8:c7:9b: 60:8c:66:ab:85:2a:85:ae:d7:75:cf:19:9d:6f:70: f8:01:75:83:b1:6e:76:63:04:bd:6d:71:16:69:ff: e6:24:a6:85:99:ed:0f:01:16:17:77:dd:b1:8a:26: a6:38:7d:80:2c:d2:9d:8c:e1:3a:9e:23:01:b9:a1: 1e:d7:08:f1:e7:8a:46:ba:dc:bf:af:42:a8:fd:6e: 04:62:88:d0:5e:7a:db:e4:fe:90:a6:e1:0b:1a:ef: a3:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:F1:2E:19:A6:2A:63:DD:F8:F8:51:0E:99:A8:20:26:46:C1:12:A5 X509v3 Authority Key Identifier: keyid:99:4A:AD:EF:70:9B:E3:7B:9C:CD:42:CC:2B:8C:73:2C:39:71:50:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mUqt73Cb43uczULMK4xzLDlxUPo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/f08716-4d2a-46ed-bded-af3e7d42968d/1/mUqt73Cb43uczULMK4xzLDlxUPo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/f08716-4d2a-46ed-bded-af3e7d42968d/1/mUqt73Cb43uczULMK4xzLDlxUPo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:f9:a5:e0:c5:4a:96:81:af:74:9d:f3:ac:3a:f8:36:57:a0: 2f:2f:66:23:bf:4f:90:6f:de:15:60:b6:a0:86:d1:19:21:17: 21:ed:ee:61:b5:0d:a6:e5:75:05:da:53:e0:4c:1a:75:fa:ed: b2:e8:07:6b:f5:20:66:b8:58:76:29:12:e3:8d:0c:75:52:98: 09:30:87:6b:4c:b6:09:9f:5d:36:c9:0e:e8:ec:22:25:98:aa: a3:f3:77:7f:60:d8:51:3c:08:e2:95:76:66:af:b0:28:56:39: 58:69:51:19:55:02:a2:5c:07:70:18:47:35:8c:4b:5f:4c:e0: 82:f3:87:f2:97:fd:1f:ef:09:72:de:13:cc:17:15:a5:fe:ac: b3:56:f4:06:94:93:14:9d:21:60:4f:2a:c3:3d:1a:c4:08:0c: ba:b6:e7:5f:fe:8d:7e:12:dd:9c:1c:42:f8:48:fb:fe:d0:1b: ff:39:bf:fb:df:72:63:e5:8c:25:6c:a2:3a:78:6b:72:51:45: 74:42:4f:eb:18:11:27:e8:60:cd:21:ff:87:e3:5b:96:06:43: 77:fc:af:33:07:e0:a2:d1:69:8f:46:9f:dd:21:99:23:f1:5d: 2c:32:5f:68:82:20:2b:50:b8:e5:5a:9f:35:3c:23:cb:2e:de: 2e:0e:8f:84 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs56u3440g8m1U3/TLQPHE3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk5NGFhZGVmNzA5YmUzN2I5Y2NkNDJjYzJiOGM3MzJjMzk3 MTUwZmEwHhcNMjUxMjIwMDQwMDU2WhcNMjUxMjIxMDQwMDU2WjAzMTEwLwYDVQQD Eyg4OGYxMmUxOWE2MmE2M2RkZjhmODUxMGU5OWE4MjAyNjQ2YzExMmE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxSCINIiNeGKfcV5UzMGu7T0xmXPu WbVZG4BQZ9VxncOK1q/qSe/w/t3bQGGwn76C2jhAC2TTqQyT9Epw3HXL3suPDiBr swC8/Y7KeHGLv0n/SA//naKY6HvwWlOiSTltKAWWIuojYB/w+nmt7aXPSHrkXnIj 0aWYe2DVXOlUwWVHYb3R00hB0oYWkSmgrJ86aNxUvTxxMCw8iuUoV81tvVLIx5tg jGarhSqFrtd1zxmdb3D4AXWDsW52YwS9bXEWaf/mJKaFme0PARYXd92xiiamOH2A LNKdjOE6niMBuaEe1wjx54pGuty/r0Ko/W4EYojQXnrb5P6QpuELGu+j/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIjxLhmmKmPd+PhRDpmoICZGwRKlMB8GA1UdIwQY MBaAFJlKre9wm+N7nM1CzCuMcyw5cVD6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbVVxdDczQ2I0M3VjelVMTUs0eHpMRGx4VVBvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS9mMDg3MTYtNGQyYS00NmVkLWJkZWQt YWYzZTdkNDI5NjhkLzEvbVVxdDczQ2I0M3VjelVMTUs0eHpMRGx4VVBvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS9mMDg3MTYtNGQyYS00NmVkLWJkZWQtYWYzZTdkNDI5Njhk LzEvbVVxdDczQ2I0M3VjelVMTUs0eHpMRGx4VVBvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVPml4MVK loGvdJ3zrDr4NlegLy9mI79PkG/eFWC2oIbRGSEXIe3uYbUNpuV1BdpT4Ewadfrt sugHa/UgZrhYdikS440MdVKYCTCHa0y2CZ9dNskO6OwiJZiqo/N3f2DYUTwI4pV2 Zq+wKFY5WGlRGVUColwHcBhHNYxLX0zggvOH8pf9H+8Jct4TzBcVpf6ss1b0BpST FJ0hYE8qwz0axAgMurbnX/6NfhLdnBxC+Ej7/tAb/zm/+99yY+WMJWyiOnhrclFF dEJP6xgRJ+hgzSH/h+NblgZDd/yvMwfgotFpj0af3SGZI/FdLDJfaIIgK1C45Vqf NTwjyy7eLg6PhA== -----END CERTIFICATE-----Generated at Sat Dec 20 10:31:36 2025 by rpki-client