This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/5205b8-98cf-4042-a0ce-e4c6741c802c/1/mfyNwqfBufMroZV_9JLcC6TyYP8.mft File: mfyNwqfBufMroZV_9JLcC6TyYP8.mft (raw, json) Hash identifier: PeX62O2hKUTKQJgPZ80yGQmYpMNxm1Gbg6yz23AfjU0= Subject key identifier: 6E:CE:DA:BD:B4:FF:5A:58:D7:7F:DA:85:38:C7:61:89:BD:7E:EA:B7 Authority key identifier: 99:FC:8D:C2:A7:C1:B9:F3:2B:A1:95:7F:F4:92:DC:0B:A4:F2:60:FF Certificate issuer: /CN=99fc8dc2a7c1b9f32ba1957ff492dc0ba4f260ff Certificate serial: 019B3BD9B5DFA0CDE0B296B1BEC2188F919B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mfyNwqfBufMroZV_9JLcC6TyYP8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/5205b8-98cf-4042-a0ce-e4c6741c802c/1/mfyNwqfBufMroZV_9JLcC6TyYP8.mft Manifest number: 01F0 Signing time: Sat 20 Dec 2025 13:01:21 +0000 Manifest this update: Sat 20 Dec 2025 13:01:21 +0000 Manifest next update: Sun 21 Dec 2025 13:01:21 +0000 Files and hashes: 1: bwcXy3FYmHBMxUWqGbTAjvoGjVE.roa (hash: i13BZ7NJZZP7VgcQkDsp+e+5aBIM+z4sday3aP/ehUI=) 2: mfyNwqfBufMroZV_9JLcC6TyYP8.crl (hash: HuNmwr70rFxSN/yS/MjfrjECXDksGfNXGsnbyclfdDE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/5205b8-98cf-4042-a0ce-e4c6741c802c/1/mfyNwqfBufMroZV_9JLcC6TyYP8.crl rsync://rpki.ripe.net/repository/DEFAULT/85/5205b8-98cf-4042-a0ce-e4c6741c802c/1/mfyNwqfBufMroZV_9JLcC6TyYP8.mft rsync://rpki.ripe.net/repository/DEFAULT/mfyNwqfBufMroZV_9JLcC6TyYP8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:d9:b5:df:a0:cd:e0:b2:96:b1:be:c2:18:8f:91:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99fc8dc2a7c1b9f32ba1957ff492dc0ba4f260ff Validity Not Before: Dec 20 13:01:21 2025 GMT Not After : Dec 21 13:01:21 2025 GMT Subject: CN=6ecedabdb4ff5a58d77fda8538c76189bd7eeab7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:1a:19:21:fb:44:86:f8:d6:ab:94:20:03:e9: 98:63:ae:28:8f:c4:05:f6:e4:b4:66:e9:1f:a9:55: d4:56:e7:45:79:22:ad:3c:a5:02:c7:2b:3d:e4:bf: 6f:92:cb:f7:e8:5a:82:d6:6e:7f:8f:97:54:49:0b: 73:21:38:65:e2:aa:3d:f0:fb:16:d6:b7:7e:1c:ed: e5:12:06:83:f7:a7:f1:62:81:ed:e5:d6:51:21:fe: 1a:80:af:7f:d7:82:47:32:3c:79:50:83:5d:fe:3c: 12:7c:d4:9d:cd:f6:96:60:15:29:b1:a5:85:32:66: fe:cf:de:f5:12:fe:a1:3b:27:a0:bc:75:dd:69:b6: 80:3f:e0:33:5e:15:a9:80:45:7d:4e:00:e5:9d:69: 0a:dd:c4:bf:fc:46:51:d8:64:b3:97:98:81:a7:f4: f4:19:c7:db:66:93:0f:9e:dd:3c:57:96:4b:05:94: 95:a4:29:e5:2d:ef:8f:7d:4d:a3:16:a8:3d:27:a0: fe:02:fa:41:f9:48:74:85:40:41:6b:c5:ea:dd:80: 8a:4b:f4:cb:0b:31:ed:e3:7c:c1:a4:b7:dd:9c:21: 71:b6:30:aa:95:bc:11:68:92:17:e3:31:62:36:0c: 45:34:d2:8e:14:eb:79:a1:2a:97:26:d0:66:91:ea: 2f:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:CE:DA:BD:B4:FF:5A:58:D7:7F:DA:85:38:C7:61:89:BD:7E:EA:B7 X509v3 Authority Key Identifier: keyid:99:FC:8D:C2:A7:C1:B9:F3:2B:A1:95:7F:F4:92:DC:0B:A4:F2:60:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mfyNwqfBufMroZV_9JLcC6TyYP8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/5205b8-98cf-4042-a0ce-e4c6741c802c/1/mfyNwqfBufMroZV_9JLcC6TyYP8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/85/5205b8-98cf-4042-a0ce-e4c6741c802c/1/mfyNwqfBufMroZV_9JLcC6TyYP8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:ba:55:5e:a2:ad:85:5c:d8:8a:77:ac:3b:03:76:cf:a1:7d: fd:59:29:bc:84:6f:bc:71:ba:d9:fe:99:92:57:e6:40:0e:92: b4:a6:2d:68:fb:2f:01:8a:1c:c2:b3:3d:1b:43:0f:22:93:98: 3f:97:17:34:ea:64:3c:ae:f6:b1:f7:78:64:2e:98:06:42:20: 26:b2:71:52:f6:45:eb:fc:6f:4f:6e:39:40:3b:48:4d:6d:e4: 68:b3:08:d9:57:94:4f:94:ed:c7:75:9c:54:cc:39:56:f1:83: 0c:29:d6:cc:fd:10:bb:a3:fe:c2:81:3b:d9:5c:55:de:3e:07: 1f:cb:b3:aa:2a:39:37:44:24:e3:c6:64:98:a9:c9:fb:b6:a0: 47:d5:00:70:1a:35:79:02:c5:3e:a4:08:00:09:c3:a6:e6:64: 8f:62:35:bb:5b:6b:ef:d1:f1:75:3c:01:dc:81:ad:42:b9:6d: ad:1b:26:97:15:67:ec:21:f0:8a:23:0a:8d:c4:0a:67:f1:b5: 7e:2f:88:73:68:6b:c5:7c:b7:2c:d5:34:7d:6a:c0:95:e9:8b: a7:ea:55:56:f8:61:c8:3a:70:30:74:53:d9:98:b6:8e:d1:cd: a3:7f:f7:3a:94:0b:77:ce:0e:22:2d:3d:93:8f:06:41:ff:39: 73:f2:78:63 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs72bXfoM3gspaxvsIYj5GbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk5ZmM4ZGMyYTdjMWI5ZjMyYmExOTU3ZmY0OTJkYzBiYTRm MjYwZmYwHhcNMjUxMjIwMTMwMTIxWhcNMjUxMjIxMTMwMTIxWjAzMTEwLwYDVQQD Eyg2ZWNlZGFiZGI0ZmY1YTU4ZDc3ZmRhODUzOGM3NjE4OWJkN2VlYWI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnBoZIftEhvjWq5QgA+mYY64oj8QF 9uS0ZukfqVXUVudFeSKtPKUCxys95L9vksv36FqC1m5/j5dUSQtzIThl4qo98PsW 1rd+HO3lEgaD96fxYoHt5dZRIf4agK9/14JHMjx5UINd/jwSfNSdzfaWYBUpsaWF Mmb+z971Ev6hOyegvHXdabaAP+AzXhWpgEV9TgDlnWkK3cS//EZR2GSzl5iBp/T0 GcfbZpMPnt08V5ZLBZSVpCnlLe+PfU2jFqg9J6D+AvpB+Uh0hUBBa8Xq3YCKS/TL CzHt43zBpLfdnCFxtjCqlbwRaJIX4zFiNgxFNNKOFOt5oSqXJtBmkeovXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG7O2r20/1pY13/ahTjHYYm9fuq3MB8GA1UdIwQY MBaAFJn8jcKnwbnzK6GVf/SS3Auk8mD/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbWZ5TndxZkJ1Zk1yb1pWXzlKTGNDNlR5WVA4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS81MjA1YjgtOThjZi00MDQyLWEwY2Ut ZTRjNjc0MWM4MDJjLzEvbWZ5TndxZkJ1Zk1yb1pWXzlKTGNDNlR5WVA4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NS81MjA1YjgtOThjZi00MDQyLWEwY2UtZTRjNjc0MWM4MDJj LzEvbWZ5TndxZkJ1Zk1yb1pWXzlKTGNDNlR5WVA4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW7pVXqKt hVzYinesOwN2z6F9/VkpvIRvvHG62f6ZklfmQA6StKYtaPsvAYocwrM9G0MPIpOY P5cXNOpkPK72sfd4ZC6YBkIgJrJxUvZF6/xvT245QDtITW3kaLMI2VeUT5Ttx3Wc VMw5VvGDDCnWzP0Qu6P+woE72VxV3j4HH8uzqio5N0Qk48ZkmKnJ+7agR9UAcBo1 eQLFPqQIAAnDpuZkj2I1u1tr79HxdTwB3IGtQrltrRsmlxVn7CHwiiMKjcQKZ/G1 fi+Ic2hrxXy3LNU0fWrAlemLp+pVVvhhyDpwMHRT2Zi2jtHNo3/3OpQLd84OIi09 k48GQf85c/J4Yw== -----END CERTIFICATE-----Generated at Sat Dec 20 18:10:52 2025 by rpki-client