This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/cbf93c-6dda-4824-8033-41c3cf908e97/1/Mca7r0CfX9bXCcTX0kNEopKjyqU.mft File: Mca7r0CfX9bXCcTX0kNEopKjyqU.mft (raw, json) Hash identifier: oZDXCQwAmnHrqgHtmYDH4FSWZVFU8yNinow4m8Solxg= Subject key identifier: 29:E5:E6:D1:1D:AB:68:F7:07:D4:5A:88:A0:61:A7:BC:8C:CD:46:F4 Authority key identifier: 31:C6:BB:AF:40:9F:5F:D6:D7:09:C4:D7:D2:43:44:A2:92:A3:CA:A5 Certificate issuer: /CN=31c6bbaf409f5fd6d709c4d7d24344a292a3caa5 Certificate serial: 019B4BF15AC93EE8E901F57B2E35E490FBB0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mca7r0CfX9bXCcTX0kNEopKjyqU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/cbf93c-6dda-4824-8033-41c3cf908e97/1/Mca7r0CfX9bXCcTX0kNEopKjyqU.mft Manifest number: 13B9 Signing time: Tue 23 Dec 2025 16:01:07 +0000 Manifest this update: Tue 23 Dec 2025 16:01:07 +0000 Manifest next update: Wed 24 Dec 2025 16:01:07 +0000 Files and hashes: 1: Kt18qGRPFhnoeDMRU6Ja36FUtdA.roa (hash: ZdZhwP5GgUBDAZeIM6qZ4JCbpszuez2XwZJ3dyqtyLY=) 2: Mca7r0CfX9bXCcTX0kNEopKjyqU.crl (hash: Vb5lbqJSBhRIvoDs7/vmLWA+9tfQaC7w2z+10R+DQEc=) 3: yRmsjuq_F6DD6X9AriATfFnXQ5Y.roa (hash: v4PNoMO1RSILauLPhTzIlbmj9RAxx7AGmat1z5c9V7E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/cbf93c-6dda-4824-8033-41c3cf908e97/1/Mca7r0CfX9bXCcTX0kNEopKjyqU.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/cbf93c-6dda-4824-8033-41c3cf908e97/1/Mca7r0CfX9bXCcTX0kNEopKjyqU.mft rsync://rpki.ripe.net/repository/DEFAULT/Mca7r0CfX9bXCcTX0kNEopKjyqU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 15:46:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4b:f1:5a:c9:3e:e8:e9:01:f5:7b:2e:35:e4:90:fb:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31c6bbaf409f5fd6d709c4d7d24344a292a3caa5 Validity Not Before: Dec 23 16:01:07 2025 GMT Not After : Dec 24 16:01:07 2025 GMT Subject: CN=29e5e6d11dab68f707d45a88a061a7bc8ccd46f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:c1:43:2f:b0:d0:61:99:11:15:0c:63:1d:f1: 61:d8:e3:94:22:61:02:07:45:eb:17:50:0e:3b:bf: a5:f9:e3:bc:1d:a4:26:ac:f2:16:80:49:da:f3:f0: 04:09:e6:aa:61:a1:3e:c7:08:c1:f5:2e:31:55:8c: ed:1d:9d:4f:be:f7:9b:70:07:0a:a0:4a:2c:ee:20: ae:a2:5f:e2:e6:a9:86:9e:e0:3b:88:74:80:ae:15: eb:e2:d9:38:14:63:de:f8:5d:27:0a:99:77:6f:28: ff:ae:b0:8f:9f:6a:32:97:63:bc:2c:83:bc:1d:1b: 2a:41:1c:33:2b:ef:b4:28:34:07:22:13:28:b4:98: 99:b2:27:77:7a:dc:a3:1b:c8:04:f2:55:83:79:14: 0e:ae:5c:2f:6d:7a:6b:41:3e:ac:f8:b8:ee:2c:3d: 73:5b:90:97:ab:62:f7:93:8f:34:74:a4:f0:04:5d: 0d:0e:b6:a3:24:28:72:40:c2:e2:11:37:72:81:ef: b3:c2:0c:f7:79:28:a6:ba:d5:d6:9f:37:5d:7d:d9: 3f:63:84:b2:3b:ac:68:71:13:b6:bd:ff:68:96:63: 85:ed:e4:62:1c:2a:dd:4e:13:ac:92:32:d6:63:22: 22:20:be:ea:44:7d:64:34:6a:e4:0d:59:5c:a5:86: 56:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:E5:E6:D1:1D:AB:68:F7:07:D4:5A:88:A0:61:A7:BC:8C:CD:46:F4 X509v3 Authority Key Identifier: keyid:31:C6:BB:AF:40:9F:5F:D6:D7:09:C4:D7:D2:43:44:A2:92:A3:CA:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mca7r0CfX9bXCcTX0kNEopKjyqU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/cbf93c-6dda-4824-8033-41c3cf908e97/1/Mca7r0CfX9bXCcTX0kNEopKjyqU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/cbf93c-6dda-4824-8033-41c3cf908e97/1/Mca7r0CfX9bXCcTX0kNEopKjyqU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:e7:b3:48:9c:25:f2:50:17:88:b4:6b:90:64:10:19:ca:80: 7e:57:0d:bc:07:89:a8:44:58:be:b1:15:74:51:8a:79:51:f4: 6f:c9:8c:67:45:1e:10:74:7a:72:0f:7c:5e:6e:84:29:e4:e1: 49:13:0b:d7:1a:de:8a:0d:53:24:47:87:7e:ee:f8:35:15:0e: c3:e5:19:1d:83:4e:2c:9d:9c:ba:6d:e2:da:d4:24:15:e9:a7: 46:7c:c9:43:cb:ba:fe:a3:6f:c7:59:96:47:f6:b4:c1:3b:8c: be:36:b7:e5:c1:9f:2d:16:2e:9e:e6:ab:f5:f9:e5:ed:8e:33: 5b:f1:a6:f1:15:64:f1:cf:fb:49:d3:05:15:94:4d:fd:d9:56: 6e:79:b6:d3:ba:6a:1b:5d:e3:29:82:d2:94:96:d1:97:98:13: 53:5b:5d:65:c6:93:e0:44:d4:c5:74:27:cc:1b:6c:d9:b4:6b: 96:a8:57:5f:1d:60:6c:6e:25:3b:cc:50:cf:1e:76:d5:48:65: 9a:f9:9e:c6:15:81:1a:fd:56:c5:c3:3a:ef:14:5b:1c:40:29: 4c:8d:0b:44:81:bd:d6:b6:a2:b4:df:97:d4:bb:70:ed:8d:97: 21:e4:75:4b:37:da:20:29:20:82:9a:d7:08:05:1b:84:76:79: 9e:27:fc:f7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtL8VrJPujpAfV7LjXkkPuwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxYzZiYmFmNDA5ZjVmZDZkNzA5YzRkN2QyNDM0NGEyOTJh M2NhYTUwHhcNMjUxMjIzMTYwMTA3WhcNMjUxMjI0MTYwMTA3WjAzMTEwLwYDVQQD EygyOWU1ZTZkMTFkYWI2OGY3MDdkNDVhODhhMDYxYTdiYzhjY2Q0NmY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhcFDL7DQYZkRFQxjHfFh2OOUImEC B0XrF1AOO7+l+eO8HaQmrPIWgEna8/AECeaqYaE+xwjB9S4xVYztHZ1PvvebcAcK oEos7iCuol/i5qmGnuA7iHSArhXr4tk4FGPe+F0nCpl3byj/rrCPn2oyl2O8LIO8 HRsqQRwzK++0KDQHIhMotJiZsid3etyjG8gE8lWDeRQOrlwvbXprQT6s+LjuLD1z W5CXq2L3k480dKTwBF0NDrajJChyQMLiETdyge+zwgz3eSimutXWnzddfdk/Y4Sy O6xocRO2vf9olmOF7eRiHCrdThOskjLWYyIiIL7qRH1kNGrkDVlcpYZWTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCnl5tEdq2j3B9RaiKBhp7yMzUb0MB8GA1UdIwQY MBaAFDHGu69An1/W1wnE19JDRKKSo8qlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTWNhN3IwQ2ZYOWJYQ2NUWDBrTkVvcEtqeXFVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi9jYmY5M2MtNmRkYS00ODI0LTgwMzMt NDFjM2NmOTA4ZTk3LzEvTWNhN3IwQ2ZYOWJYQ2NUWDBrTkVvcEtqeXFVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi9jYmY5M2MtNmRkYS00ODI0LTgwMzMtNDFjM2NmOTA4ZTk3 LzEvTWNhN3IwQ2ZYOWJYQ2NUWDBrTkVvcEtqeXFVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJeezSJwl 8lAXiLRrkGQQGcqAflcNvAeJqERYvrEVdFGKeVH0b8mMZ0UeEHR6cg98Xm6EKeTh SRML1xreig1TJEeHfu74NRUOw+UZHYNOLJ2cum3i2tQkFemnRnzJQ8u6/qNvx1mW R/a0wTuMvja35cGfLRYunuar9fnl7Y4zW/Gm8RVk8c/7SdMFFZRN/dlWbnm207pq G13jKYLSlJbRl5gTU1tdZcaT4ETUxXQnzBts2bRrlqhXXx1gbG4lO8xQzx521Uhl mvmexhWBGv1WxcM67xRbHEApTI0LRIG91raitN+X1Ltw7Y2XIeR1SzfaICkggprX CAUbhHZ5nif89w== -----END CERTIFICATE-----Generated at Tue Dec 23 22:39:05 2025 by rpki-client