This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/5908a9-0c0f-40ab-bfd6-69af0a6e989b/1/mBGGh_3W_4D7CYqe7vBt43f4XW4.mft File: mBGGh_3W_4D7CYqe7vBt43f4XW4.mft (raw, json) Hash identifier: NCbyZZktUcwWM7l1W3IzdbVsEf4QC98L1vMV2dxCpso= Subject key identifier: 9B:24:2F:6C:72:8A:22:5D:03:B7:83:0C:98:BC:9F:3E:A2:7B:73:09 Authority key identifier: 98:11:86:87:FD:D6:FF:80:FB:09:8A:9E:EE:F0:6D:E3:77:F8:5D:6E Certificate issuer: /CN=98118687fdd6ff80fb098a9eeef06de377f85d6e Certificate serial: 019B5305BF26483970A65BDF0746777D3DD5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mBGGh_3W_4D7CYqe7vBt43f4XW4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/5908a9-0c0f-40ab-bfd6-69af0a6e989b/1/mBGGh_3W_4D7CYqe7vBt43f4XW4.mft Manifest number: 0CEE Signing time: Thu 25 Dec 2025 01:00:44 +0000 Manifest this update: Thu 25 Dec 2025 01:00:44 +0000 Manifest next update: Fri 26 Dec 2025 01:00:44 +0000 Files and hashes: 1: 1lsllJIGemqZ89xHiZQkdlO1fKw.roa (hash: z+LS30vNnG/3Pd/eJpUiR3agQpnmviOChE1etXIcdSc=) 2: 3lXi1_g77NKzjT3HhPoXoOvjf4w.roa (hash: Ay8Ub8kwHojvnn8g9zm4+05FafWEgsI4HELIX5EKY7A=) 3: mBGGh_3W_4D7CYqe7vBt43f4XW4.crl (hash: IpE/G/i0syWJvWeQSZk/qu7wnerAnmPMUO/NnDN14EY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/5908a9-0c0f-40ab-bfd6-69af0a6e989b/1/mBGGh_3W_4D7CYqe7vBt43f4XW4.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/5908a9-0c0f-40ab-bfd6-69af0a6e989b/1/mBGGh_3W_4D7CYqe7vBt43f4XW4.mft rsync://rpki.ripe.net/repository/DEFAULT/mBGGh_3W_4D7CYqe7vBt43f4XW4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 01:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:53:05:bf:26:48:39:70:a6:5b:df:07:46:77:7d:3d:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98118687fdd6ff80fb098a9eeef06de377f85d6e Validity Not Before: Dec 25 01:00:44 2025 GMT Not After : Dec 26 01:00:44 2025 GMT Subject: CN=9b242f6c728a225d03b7830c98bc9f3ea27b7309 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:ef:ba:37:3e:59:b1:86:6a:fc:1f:33:b3:a1: b7:c3:72:39:18:31:2c:63:9b:1f:52:11:09:ff:7c: 8e:5d:8e:6f:cf:3a:6c:09:b6:aa:60:f0:ff:11:2a: 2f:28:47:e1:01:8f:bc:2d:1e:ba:27:4a:31:82:33: 27:5f:ff:c2:5a:40:8f:4b:92:e7:3f:51:a6:81:cb: 56:3e:86:9c:0a:c3:7c:d0:f2:64:f7:80:cc:53:47: d3:26:8f:6d:b6:15:e0:3e:7f:99:e0:30:80:14:60: b0:ad:b6:25:9c:ea:3d:c8:d0:a7:92:33:5c:97:41: 80:3e:65:25:b6:36:1f:f5:0e:38:8d:9b:3e:19:7c: 15:f2:9e:87:2c:db:52:a6:a0:f9:9f:64:34:52:10: 61:24:1a:5a:0f:36:ff:01:08:d4:6d:cd:8d:ec:27: ab:af:30:ae:a3:72:fe:6a:01:63:b8:57:21:1b:4e: bc:48:9e:a7:24:6d:14:2e:4c:72:09:92:12:ac:01: 7e:aa:d1:ff:80:6d:c8:fd:07:b2:40:76:43:61:32: d6:1b:a0:6f:fa:fd:54:fa:f2:1c:4a:a7:63:c5:76: f0:54:12:13:74:5d:8b:a9:b8:bb:ed:f3:31:66:f0: 0c:0a:ce:ee:82:72:f0:58:e0:02:4c:05:d3:11:a3: b4:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:24:2F:6C:72:8A:22:5D:03:B7:83:0C:98:BC:9F:3E:A2:7B:73:09 X509v3 Authority Key Identifier: keyid:98:11:86:87:FD:D6:FF:80:FB:09:8A:9E:EE:F0:6D:E3:77:F8:5D:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mBGGh_3W_4D7CYqe7vBt43f4XW4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/5908a9-0c0f-40ab-bfd6-69af0a6e989b/1/mBGGh_3W_4D7CYqe7vBt43f4XW4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/5908a9-0c0f-40ab-bfd6-69af0a6e989b/1/mBGGh_3W_4D7CYqe7vBt43f4XW4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:c4:8e:28:6b:92:2b:a5:d2:1c:24:14:2d:1a:90:f1:f2:63: 3e:e5:20:e7:92:03:7e:bb:6e:4d:bb:cb:8d:28:09:4c:c8:6e: de:9b:b2:20:03:77:01:a4:1c:3c:aa:48:2f:8f:07:29:91:90: ae:63:bb:3d:47:75:c9:dd:b8:bf:d1:e4:d2:95:8a:b6:4d:94: 4d:38:38:a7:f7:5b:3f:6a:49:11:81:21:56:25:d7:b1:eb:d4: f4:f0:83:c2:67:51:96:bd:1c:0d:b9:ec:e4:3c:c1:47:12:a2: 3e:63:19:0e:cc:1f:c1:ee:b6:db:6a:02:4f:35:b4:63:62:03: c3:2f:9a:98:99:23:bb:f0:82:1d:a0:60:4f:7e:43:5d:c2:a6: a6:f2:75:01:41:23:7a:d7:60:28:b8:cc:ee:72:e7:5d:d0:f6: 8f:c1:e8:96:e8:f9:45:4c:3d:84:16:21:bc:29:6b:13:22:0d: ac:6e:39:5f:50:26:5d:0f:bd:bc:bd:95:1d:c6:fa:78:55:52: 1e:8b:80:c5:b2:18:25:5c:0e:36:c2:8d:95:83:38:f6:e5:73: 57:fa:7d:ea:62:c1:9c:47:55:b7:6b:b8:5d:5f:b4:8e:a4:62: be:19:1f:92:32:54:ea:3a:6a:60:7b:6b:66:21:75:70:e4:c9: 0e:58:07:7b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtTBb8mSDlwplvfB0Z3fT3VMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk4MTE4Njg3ZmRkNmZmODBmYjA5OGE5ZWVlZjA2ZGUzNzdm ODVkNmUwHhcNMjUxMjI1MDEwMDQ0WhcNMjUxMjI2MDEwMDQ0WjAzMTEwLwYDVQQD Eyg5YjI0MmY2YzcyOGEyMjVkMDNiNzgzMGM5OGJjOWYzZWEyN2I3MzA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAju+6Nz5ZsYZq/B8zs6G3w3I5GDEs Y5sfUhEJ/3yOXY5vzzpsCbaqYPD/ESovKEfhAY+8LR66J0oxgjMnX//CWkCPS5Ln P1GmgctWPoacCsN80PJk94DMU0fTJo9tthXgPn+Z4DCAFGCwrbYlnOo9yNCnkjNc l0GAPmUltjYf9Q44jZs+GXwV8p6HLNtSpqD5n2Q0UhBhJBpaDzb/AQjUbc2N7Cer rzCuo3L+agFjuFchG068SJ6nJG0ULkxyCZISrAF+qtH/gG3I/QeyQHZDYTLWG6Bv +v1U+vIcSqdjxXbwVBITdF2Lqbi77fMxZvAMCs7ugnLwWOACTAXTEaO0hQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJskL2xyiiJdA7eDDJi8nz6ie3MJMB8GA1UdIwQY MBaAFJgRhof91v+A+wmKnu7wbeN3+F1uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbUJHR2hfM1dfNEQ3Q1lxZTd2QnQ0M2Y0WFc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy81OTA4YTktMGMwZi00MGFiLWJmZDYt NjlhZjBhNmU5ODliLzEvbUJHR2hfM1dfNEQ3Q1lxZTd2QnQ0M2Y0WFc0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy81OTA4YTktMGMwZi00MGFiLWJmZDYtNjlhZjBhNmU5ODli LzEvbUJHR2hfM1dfNEQ3Q1lxZTd2QnQ0M2Y0WFc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb8SOKGuS K6XSHCQULRqQ8fJjPuUg55IDfrtuTbvLjSgJTMhu3puyIAN3AaQcPKpIL48HKZGQ rmO7PUd1yd24v9Hk0pWKtk2UTTg4p/dbP2pJEYEhViXXsevU9PCDwmdRlr0cDbns 5DzBRxKiPmMZDswfwe6222oCTzW0Y2IDwy+amJkju/CCHaBgT35DXcKmpvJ1AUEj etdgKLjM7nLnXdD2j8Holuj5RUw9hBYhvClrEyINrG45X1AmXQ+9vL2VHcb6eFVS HouAxbIYJVwONsKNlYM49uVzV/p96mLBnEdVt2u4XV+0jqRivhkfkjJU6jpqYHtr ZiF1cOTJDlgHew== -----END CERTIFICATE-----Generated at Thu Dec 25 06:59:53 2025 by rpki-client