This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/43d301-f81a-492e-922c-c971dc713b1f/1/mPArXPtBclCOBze_Jc1dIqAdxFo.mft File: mPArXPtBclCOBze_Jc1dIqAdxFo.mft (raw, json) Hash identifier: p/ifaTt2oCwLyDvfyf3XgzZQaDSFrTVWTb7Yiwe/ASM= Subject key identifier: B4:F4:0D:36:2C:D0:80:95:4A:3A:84:CD:CB:11:FF:89:58:13:86:10 Authority key identifier: 98:F0:2B:5C:FB:41:72:50:8E:07:37:BF:25:CD:5D:22:A0:1D:C4:5A Certificate issuer: /CN=98f02b5cfb4172508e0737bf25cd5d22a01dc45a Certificate serial: 019B3C7EF6F20908E94C3DD0742BA9AEFC4A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mPArXPtBclCOBze_Jc1dIqAdxFo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/43d301-f81a-492e-922c-c971dc713b1f/1/mPArXPtBclCOBze_Jc1dIqAdxFo.mft Manifest number: 08B8 Signing time: Sat 20 Dec 2025 16:01:52 +0000 Manifest this update: Sat 20 Dec 2025 16:01:52 +0000 Manifest next update: Sun 21 Dec 2025 16:01:52 +0000 Files and hashes: 1: Keu4ORQGNbpvqRyHyCkLTUO_lOA.roa (hash: 8AaJ0cxF0N1CmP6IwiLLt/ItfrvG5f97UQsDx1F7lhM=) 2: mPArXPtBclCOBze_Jc1dIqAdxFo.crl (hash: QDKbV/Lqj1rrVy8Xm7b2L6ePhpLK1su87AlyxwIcIKo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/43d301-f81a-492e-922c-c971dc713b1f/1/mPArXPtBclCOBze_Jc1dIqAdxFo.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/43d301-f81a-492e-922c-c971dc713b1f/1/mPArXPtBclCOBze_Jc1dIqAdxFo.mft rsync://rpki.ripe.net/repository/DEFAULT/mPArXPtBclCOBze_Jc1dIqAdxFo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7e:f6:f2:09:08:e9:4c:3d:d0:74:2b:a9:ae:fc:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98f02b5cfb4172508e0737bf25cd5d22a01dc45a Validity Not Before: Dec 20 16:01:52 2025 GMT Not After : Dec 21 16:01:52 2025 GMT Subject: CN=b4f40d362cd080954a3a84cdcb11ff8958138610 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:46:c5:d0:45:d4:22:0d:ee:89:36:2e:76:9b: c1:30:74:72:fb:97:9c:97:ca:0c:15:b9:d3:44:8f: e4:0c:47:00:07:50:89:d1:38:1d:ec:59:98:0a:7c: fe:d9:0d:59:cd:25:97:e9:f8:6d:77:1f:9a:46:7e: be:e4:47:e7:b4:13:93:6a:7f:0c:21:18:60:39:40: 68:5a:16:26:1f:80:fc:62:21:66:62:3a:88:b6:05: be:75:af:d3:a0:3d:6d:3b:88:04:1f:40:ca:2c:59: 04:02:f0:ba:56:0d:2a:c8:e2:4d:c8:ba:ea:a1:7d: fd:2b:a5:a4:99:63:32:9d:03:fe:7e:59:d4:04:57: 2f:14:cf:de:4d:18:a7:b3:ee:87:2b:e1:1e:11:b1: 09:05:43:5f:20:95:89:34:27:d0:09:ff:27:dc:f4: 4a:d0:ed:17:4c:1b:54:c0:ca:75:08:d7:d6:d1:bf: 37:dc:9a:b1:af:1d:63:04:13:86:b3:c4:0b:b1:e0: 1e:ac:56:28:e6:44:b2:2f:1f:3d:5d:11:1a:87:e4: 1e:fa:12:65:46:96:f9:0f:28:01:05:51:1e:69:c2: 39:73:24:17:d5:32:c6:7a:50:99:20:a8:f3:b1:c5: ec:61:80:c9:74:4e:88:09:2d:41:b5:59:f4:11:cb: 7a:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:F4:0D:36:2C:D0:80:95:4A:3A:84:CD:CB:11:FF:89:58:13:86:10 X509v3 Authority Key Identifier: keyid:98:F0:2B:5C:FB:41:72:50:8E:07:37:BF:25:CD:5D:22:A0:1D:C4:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mPArXPtBclCOBze_Jc1dIqAdxFo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/43d301-f81a-492e-922c-c971dc713b1f/1/mPArXPtBclCOBze_Jc1dIqAdxFo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/43d301-f81a-492e-922c-c971dc713b1f/1/mPArXPtBclCOBze_Jc1dIqAdxFo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:46:c9:a5:fa:38:ee:98:ff:73:3e:cf:7c:cf:32:d6:89:17: 06:b3:05:0a:3f:95:4a:8f:e7:63:90:29:f5:2a:d9:22:c0:fe: 42:85:65:83:14:30:ed:56:3b:0d:18:86:24:c4:56:f8:5c:95: 01:42:c3:7f:39:f4:87:51:d8:82:b4:63:76:f5:a2:40:a4:4c: 11:94:03:41:0e:b9:c7:16:bc:69:fb:0c:88:82:ce:87:2f:27: b5:fb:b7:d8:19:5c:9b:9f:01:83:9b:e3:78:97:78:6e:62:8e: f3:e9:db:4a:83:75:18:85:3a:1b:fc:20:eb:93:5f:60:c7:06: a9:54:6d:00:13:77:18:51:c5:71:4a:86:84:49:bd:12:37:a7: fa:49:16:32:63:e1:33:bc:9a:1d:fb:bb:97:8b:06:f6:a2:a5: 44:d2:43:fe:2d:3d:d3:d4:a4:1a:37:ba:99:29:c5:01:bc:fc: 09:aa:ec:c3:a4:4f:27:bd:d5:a9:d0:f8:86:02:be:6d:7a:09: 1b:1d:29:42:6c:fa:4e:b7:e9:9e:2b:ff:14:08:3c:25:cf:dd: 5c:12:2d:b1:0c:61:1c:d6:fe:0d:17:19:7b:82:8c:f6:3d:c1: eb:b6:b4:29:f5:6f:7e:96:39:8a:17:14:ac:bc:05:5e:c8:36: 2a:fa:7f:65 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8fvbyCQjpTD3QdCuprvxKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk4ZjAyYjVjZmI0MTcyNTA4ZTA3MzdiZjI1Y2Q1ZDIyYTAx ZGM0NWEwHhcNMjUxMjIwMTYwMTUyWhcNMjUxMjIxMTYwMTUyWjAzMTEwLwYDVQQD EyhiNGY0MGQzNjJjZDA4MDk1NGEzYTg0Y2RjYjExZmY4OTU4MTM4NjEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAskbF0EXUIg3uiTYudpvBMHRy+5ec l8oMFbnTRI/kDEcAB1CJ0Tgd7FmYCnz+2Q1ZzSWX6fhtdx+aRn6+5EfntBOTan8M IRhgOUBoWhYmH4D8YiFmYjqItgW+da/ToD1tO4gEH0DKLFkEAvC6Vg0qyOJNyLrq oX39K6WkmWMynQP+flnUBFcvFM/eTRins+6HK+EeEbEJBUNfIJWJNCfQCf8n3PRK 0O0XTBtUwMp1CNfW0b833Jqxrx1jBBOGs8QLseAerFYo5kSyLx89XREah+Qe+hJl Rpb5DygBBVEeacI5cyQX1TLGelCZIKjzscXsYYDJdE6ICS1BtVn0Ect64QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLT0DTYs0ICVSjqEzcsR/4lYE4YQMB8GA1UdIwQY MBaAFJjwK1z7QXJQjgc3vyXNXSKgHcRaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbVBBclhQdEJjbENPQnplX0pjMWRJcUFkeEZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS80M2QzMDEtZjgxYS00OTJlLTkyMmMt Yzk3MWRjNzEzYjFmLzEvbVBBclhQdEJjbENPQnplX0pjMWRJcUFkeEZvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS80M2QzMDEtZjgxYS00OTJlLTkyMmMtYzk3MWRjNzEzYjFm LzEvbVBBclhQdEJjbENPQnplX0pjMWRJcUFkeEZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeEbJpfo4 7pj/cz7PfM8y1okXBrMFCj+VSo/nY5Ap9SrZIsD+QoVlgxQw7VY7DRiGJMRW+FyV AULDfzn0h1HYgrRjdvWiQKRMEZQDQQ65xxa8afsMiILOhy8ntfu32Blcm58Bg5vj eJd4bmKO8+nbSoN1GIU6G/wg65NfYMcGqVRtABN3GFHFcUqGhEm9Ejen+kkWMmPh M7yaHfu7l4sG9qKlRNJD/i0909SkGje6mSnFAbz8Carsw6RPJ73VqdD4hgK+bXoJ Gx0pQmz6Trfpniv/FAg8Jc/dXBItsQxhHNb+DRcZe4KM9j3B67a0KfVvfpY5ihcU rLwFXsg2Kvp/ZQ== -----END CERTIFICATE-----Generated at Sat Dec 20 18:39:51 2025 by rpki-client