This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/50e0f1-4614-4358-937a-2ede6727e139/1/98ci2uJwhooZg4p81JnVnCZ52JE.mft File: 98ci2uJwhooZg4p81JnVnCZ52JE.mft (raw, json) Hash identifier: MDEhkLeY0zLrcR8hZi89S5DTMFAi5aeIApeQURKu824= Subject key identifier: 08:13:C0:9D:BF:97:B3:7C:83:F8:8F:05:C6:2B:B0:91:1E:66:A0:51 Authority key identifier: F7:C7:22:DA:E2:70:86:8A:19:83:8A:7C:D4:99:D5:9C:26:79:D8:91 Certificate issuer: /CN=f7c722dae270868a19838a7cd499d59c2679d891 Certificate serial: 019B40C939C8BA367DBE2F54343991467D7E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/98ci2uJwhooZg4p81JnVnCZ52JE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/50e0f1-4614-4358-937a-2ede6727e139/1/98ci2uJwhooZg4p81JnVnCZ52JE.mft Manifest number: 0678 Signing time: Sun 21 Dec 2025 12:01:27 +0000 Manifest this update: Sun 21 Dec 2025 12:01:27 +0000 Manifest next update: Mon 22 Dec 2025 12:01:27 +0000 Files and hashes: 1: 2GvGxW56EwiXdY8WsCKuvBnzEmE.roa (hash: W3DnYzHP+CF6agGgHp9PqPmuvt/s/L6YaUF7RJiXgPQ=) 2: 98ci2uJwhooZg4p81JnVnCZ52JE.crl (hash: WVJpYN8OzFAWnOO7O0DClzIqjmCuh4WV+hMqXjCP1qI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/50e0f1-4614-4358-937a-2ede6727e139/1/98ci2uJwhooZg4p81JnVnCZ52JE.crl rsync://rpki.ripe.net/repository/DEFAULT/66/50e0f1-4614-4358-937a-2ede6727e139/1/98ci2uJwhooZg4p81JnVnCZ52JE.mft rsync://rpki.ripe.net/repository/DEFAULT/98ci2uJwhooZg4p81JnVnCZ52JE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 12:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:c9:39:c8:ba:36:7d:be:2f:54:34:39:91:46:7d:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f7c722dae270868a19838a7cd499d59c2679d891 Validity Not Before: Dec 21 12:01:27 2025 GMT Not After : Dec 22 12:01:27 2025 GMT Subject: CN=0813c09dbf97b37c83f88f05c62bb0911e66a051 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:35:df:2b:b7:90:10:e8:98:85:48:f4:41:23: ab:26:bb:a0:e1:d5:7d:60:8e:a4:3c:c9:34:a4:99: a9:b9:7d:1d:c4:e9:7b:19:06:a7:a0:6f:98:aa:cb: 96:af:a9:5b:41:ea:39:7f:91:c1:59:58:26:45:28: 6f:fc:a6:e6:a3:be:84:fb:65:5d:24:ec:4d:f6:10: 9c:eb:bd:a5:9f:ba:20:25:73:bc:9b:50:c5:93:fc: f0:4d:fe:1d:e5:b9:39:7a:a3:d7:04:b6:4b:3c:68: d9:60:17:2f:a6:89:fb:1d:70:49:9e:fc:51:d5:0f: 12:23:e8:b9:cb:06:e1:cf:18:60:49:e8:3b:32:1a: 52:a9:18:a5:ed:f5:f5:b3:51:ec:8c:61:2b:69:65: 9f:39:12:9a:dd:9f:9e:0d:b3:e9:ef:c9:ab:6c:d1: 79:d2:78:d5:db:3c:63:1a:d8:f6:c1:4a:26:ba:f9: 67:5c:ce:71:78:a0:d0:76:b4:f3:7d:f4:3f:4b:e1: 71:a0:58:86:1e:9e:eb:2d:ea:ff:57:82:0b:34:1b: 5c:18:28:3d:54:32:f5:6c:c7:50:54:50:09:2f:8c: e0:fc:0a:43:0e:af:c3:5d:c5:84:e6:09:8c:a9:f6: 5e:e0:76:c4:24:ee:b3:05:5d:c6:05:10:36:b2:bc: af:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:13:C0:9D:BF:97:B3:7C:83:F8:8F:05:C6:2B:B0:91:1E:66:A0:51 X509v3 Authority Key Identifier: keyid:F7:C7:22:DA:E2:70:86:8A:19:83:8A:7C:D4:99:D5:9C:26:79:D8:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/98ci2uJwhooZg4p81JnVnCZ52JE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/50e0f1-4614-4358-937a-2ede6727e139/1/98ci2uJwhooZg4p81JnVnCZ52JE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/50e0f1-4614-4358-937a-2ede6727e139/1/98ci2uJwhooZg4p81JnVnCZ52JE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:74:62:2f:05:92:e1:59:d5:58:71:b2:d8:c9:07:e3:dc:08: bd:2d:a3:32:77:23:16:95:a9:60:fb:3c:f5:9e:d6:30:78:be: 8d:af:88:9f:86:01:f4:6e:cc:68:41:e6:46:a8:2d:c0:94:42: bc:d7:58:bc:64:c0:2d:ea:2c:f5:10:d7:3f:81:ca:c3:6a:86: 7b:53:e1:6c:ec:1b:7a:88:2c:35:fc:3a:2c:b9:0b:47:b2:8d: 75:c6:9c:fa:10:9e:b2:3c:9e:d0:6a:5b:fb:30:37:28:fb:85: 9b:39:ca:9e:97:6a:1f:db:29:c5:a0:3c:98:26:e0:75:48:96: c4:df:a0:0b:01:68:04:0c:18:c3:37:c3:a7:e6:30:22:73:23: 04:56:d9:1b:8b:9b:54:f6:ea:43:db:eb:67:2e:6a:41:eb:d1: 7a:69:f9:56:49:62:ac:6d:eb:bc:58:e7:e2:9d:67:a2:61:eb: 23:00:07:16:df:02:67:07:8a:8c:eb:7a:8e:4c:b6:98:71:bd: 6a:ca:7f:a5:d7:db:e4:99:e5:9f:4f:5e:8e:9d:40:4e:d1:fc: b7:0e:03:d9:e0:6a:f2:ea:29:a9:77:0b:a0:f4:20:29:bd:e1: a7:73:1b:e6:f9:95:7a:ee:99:c6:32:1d:c3:b1:b1:c4:32:d1: 42:0f:73:bd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAyTnIujZ9vi9UNDmRRn1+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY3YzcyMmRhZTI3MDg2OGExOTgzOGE3Y2Q0OTlkNTljMjY3 OWQ4OTEwHhcNMjUxMjIxMTIwMTI3WhcNMjUxMjIyMTIwMTI3WjAzMTEwLwYDVQQD EygwODEzYzA5ZGJmOTdiMzdjODNmODhmMDVjNjJiYjA5MTFlNjZhMDUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAojXfK7eQEOiYhUj0QSOrJrug4dV9 YI6kPMk0pJmpuX0dxOl7GQanoG+YqsuWr6lbQeo5f5HBWVgmRShv/Kbmo76E+2Vd JOxN9hCc672ln7ogJXO8m1DFk/zwTf4d5bk5eqPXBLZLPGjZYBcvpon7HXBJnvxR 1Q8SI+i5ywbhzxhgSeg7MhpSqRil7fX1s1HsjGEraWWfORKa3Z+eDbPp78mrbNF5 0njV2zxjGtj2wUomuvlnXM5xeKDQdrTzffQ/S+FxoFiGHp7rLer/V4ILNBtcGCg9 VDL1bMdQVFAJL4zg/ApDDq/DXcWE5gmMqfZe4HbEJO6zBV3GBRA2sryvuwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAgTwJ2/l7N8g/iPBcYrsJEeZqBRMB8GA1UdIwQY MBaAFPfHItricIaKGYOKfNSZ1ZwmediRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOThjaTJ1Sndob29aZzRwODFKblZuQ1o1MkpFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni81MGUwZjEtNDYxNC00MzU4LTkzN2Et MmVkZTY3MjdlMTM5LzEvOThjaTJ1Sndob29aZzRwODFKblZuQ1o1MkpFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni81MGUwZjEtNDYxNC00MzU4LTkzN2EtMmVkZTY3MjdlMTM5 LzEvOThjaTJ1Sndob29aZzRwODFKblZuQ1o1MkpFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOXRiLwWS 4VnVWHGy2MkH49wIvS2jMncjFpWpYPs89Z7WMHi+ja+In4YB9G7MaEHmRqgtwJRC vNdYvGTALeos9RDXP4HKw2qGe1PhbOwbeogsNfw6LLkLR7KNdcac+hCesjye0Gpb +zA3KPuFmznKnpdqH9spxaA8mCbgdUiWxN+gCwFoBAwYwzfDp+YwInMjBFbZG4ub VPbqQ9vrZy5qQevRemn5VklirG3rvFjn4p1nomHrIwAHFt8CZweKjOt6jky2mHG9 asp/pdfb5Jnln09ejp1ATtH8tw4D2eBq8uopqXcLoPQgKb3hp3Mb5vmVeu6ZxjId w7GxxDLRQg9zvQ== -----END CERTIFICATE-----Generated at Sun Dec 21 19:26:01 2025 by rpki-client