This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/6004cc-ba89-4810-a23b-27565879af5c/1/mjUUk6-IflRNzAGhE7d1KLyYe84.mft File: mjUUk6-IflRNzAGhE7d1KLyYe84.mft (raw, json) Hash identifier: H3InWx+3N49GEx+0fPzRMnN/fNOSHpLfiWIzeqvfDJY= Subject key identifier: CB:03:11:5C:70:30:BE:6D:4B:13:CE:43:7F:FF:BC:32:5F:B6:09:3E Authority key identifier: 9A:35:14:93:AF:88:7E:54:4D:CC:01:A1:13:B7:75:28:BC:98:7B:CE Certificate issuer: /CN=9a351493af887e544dcc01a113b77528bc987bce Certificate serial: 019B6D340091DAF201E691CCC5BA9A88522E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mjUUk6-IflRNzAGhE7d1KLyYe84.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/6004cc-ba89-4810-a23b-27565879af5c/1/mjUUk6-IflRNzAGhE7d1KLyYe84.mft Manifest number: 111D Signing time: Tue 30 Dec 2025 03:01:22 +0000 Manifest this update: Tue 30 Dec 2025 03:01:22 +0000 Manifest next update: Wed 31 Dec 2025 03:01:22 +0000 Files and hashes: 1: mjUUk6-IflRNzAGhE7d1KLyYe84.crl (hash: 3IQcNpqHceqWU09A5Z7fvr2tAAaSVzyADig/3hgTTzI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/6004cc-ba89-4810-a23b-27565879af5c/1/mjUUk6-IflRNzAGhE7d1KLyYe84.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/6004cc-ba89-4810-a23b-27565879af5c/1/mjUUk6-IflRNzAGhE7d1KLyYe84.mft rsync://rpki.ripe.net/repository/DEFAULT/mjUUk6-IflRNzAGhE7d1KLyYe84.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 23:52:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6d:34:00:91:da:f2:01:e6:91:cc:c5:ba:9a:88:52:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a351493af887e544dcc01a113b77528bc987bce Validity Not Before: Dec 30 03:01:22 2025 GMT Not After : Dec 31 03:01:22 2025 GMT Subject: CN=cb03115c7030be6d4b13ce437fffbc325fb6093e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:e8:56:92:81:a1:34:f3:22:2f:53:c7:b1:56: c1:07:c0:57:6f:5c:bd:bc:02:49:52:72:0e:73:d2: 96:cd:75:35:d7:13:20:26:40:a6:29:25:a1:08:94: 55:36:24:0b:43:58:22:6c:b8:6a:6b:37:c9:1b:ea: b8:55:28:35:5f:7e:58:1f:10:89:83:32:62:ac:68: 96:ec:83:67:18:96:94:b0:56:a5:a7:78:d7:20:42: 0f:9f:35:b3:fe:90:ec:9b:61:e5:8a:86:0c:6f:cc: 5c:7f:d3:bd:5e:0d:c6:cf:99:6b:32:17:c3:9e:08: 77:0c:5b:e1:0d:6b:83:16:df:d1:15:8a:51:68:47: 17:56:4a:c3:e6:81:f0:f0:14:24:e0:bd:34:bd:b7: 49:91:bc:66:a4:42:77:96:4d:72:16:6f:23:9c:ed: 9b:60:a4:fb:af:fc:76:c2:c2:07:3b:a0:ed:d4:fd: 65:a5:25:21:eb:d2:04:66:6b:a9:d7:f6:62:3f:e3: 6f:1b:68:55:ea:85:b3:9c:38:86:cd:b5:76:79:ed: 9a:3f:06:e4:0e:d8:23:10:3e:fa:77:5b:66:a7:d5: 86:60:97:9a:5e:3b:3d:a7:e7:a0:20:ad:31:ab:11: c2:7a:5c:c4:21:12:c5:6c:41:e4:d0:2f:ee:d9:ef: 43:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:03:11:5C:70:30:BE:6D:4B:13:CE:43:7F:FF:BC:32:5F:B6:09:3E X509v3 Authority Key Identifier: keyid:9A:35:14:93:AF:88:7E:54:4D:CC:01:A1:13:B7:75:28:BC:98:7B:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mjUUk6-IflRNzAGhE7d1KLyYe84.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/6004cc-ba89-4810-a23b-27565879af5c/1/mjUUk6-IflRNzAGhE7d1KLyYe84.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/6004cc-ba89-4810-a23b-27565879af5c/1/mjUUk6-IflRNzAGhE7d1KLyYe84.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:17:d2:6a:fd:ca:6a:23:61:df:b0:e2:b3:5a:ec:6e:01:4b: d7:aa:1d:e5:72:97:52:49:c9:e7:17:75:fb:f2:00:0c:83:8f: 22:2a:de:4f:7e:34:cc:01:e1:d9:7e:66:6d:c1:74:fe:32:06: 01:2d:17:51:f3:78:d0:11:6b:73:fb:95:22:20:ef:fa:97:32: 15:e1:30:0f:6e:71:47:30:17:0b:6d:cd:ff:69:9c:6b:69:76: 8b:84:68:4a:9b:a0:5d:e8:30:80:61:0d:e1:70:e1:36:3e:23: 5b:cf:53:ff:73:ef:f4:c4:78:7c:f3:4a:5c:b8:a8:6f:b2:4f: 65:2e:7e:9c:17:0f:bc:29:f2:a2:97:49:9a:9e:f5:3c:6a:a6: 09:4f:78:bf:9c:6c:ae:11:52:70:0d:c4:2c:3d:5d:a7:4a:b7: b5:1d:82:f1:c5:09:60:b1:5a:45:98:d5:1f:a7:8a:1c:14:fa: 56:87:11:69:74:53:93:94:56:f1:aa:b0:f8:ac:3c:be:69:fb: 23:f0:9a:69:a0:17:38:69:70:ad:37:24:7c:75:3f:8f:50:55: 69:9d:59:5f:d5:ee:13:f9:83:95:5b:e1:8f:1f:d2:50:02:a2: d3:c6:b0:c7:aa:e9:17:0e:59:d0:9e:13:bf:bc:df:86:be:50: 04:4d:8c:f0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZttNACR2vIB5pHMxbqaiFIuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhMzUxNDkzYWY4ODdlNTQ0ZGNjMDFhMTEzYjc3NTI4YmM5 ODdiY2UwHhcNMjUxMjMwMDMwMTIyWhcNMjUxMjMxMDMwMTIyWjAzMTEwLwYDVQQD EyhjYjAzMTE1YzcwMzBiZTZkNGIxM2NlNDM3ZmZmYmMzMjVmYjYwOTNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyOhWkoGhNPMiL1PHsVbBB8BXb1y9 vAJJUnIOc9KWzXU11xMgJkCmKSWhCJRVNiQLQ1gibLhqazfJG+q4VSg1X35YHxCJ gzJirGiW7INnGJaUsFalp3jXIEIPnzWz/pDsm2HlioYMb8xcf9O9Xg3Gz5lrMhfD ngh3DFvhDWuDFt/RFYpRaEcXVkrD5oHw8BQk4L00vbdJkbxmpEJ3lk1yFm8jnO2b YKT7r/x2wsIHO6Dt1P1lpSUh69IEZmup1/ZiP+NvG2hV6oWznDiGzbV2ee2aPwbk DtgjED76d1tmp9WGYJeaXjs9p+egIK0xqxHCelzEIRLFbEHk0C/u2e9D4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMsDEVxwML5tSxPOQ3//vDJftgk+MB8GA1UdIwQY MBaAFJo1FJOviH5UTcwBoRO3dSi8mHvOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbWpVVWs2LUlmbFJOekFHaEU3ZDFLTHlZZTg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC82MDA0Y2MtYmE4OS00ODEwLWEyM2It Mjc1NjU4NzlhZjVjLzEvbWpVVWs2LUlmbFJOekFHaEU3ZDFLTHlZZTg0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC82MDA0Y2MtYmE4OS00ODEwLWEyM2ItMjc1NjU4NzlhZjVj LzEvbWpVVWs2LUlmbFJOekFHaEU3ZDFLTHlZZTg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAShfSav3K aiNh37Dis1rsbgFL16od5XKXUknJ5xd1+/IADIOPIireT340zAHh2X5mbcF0/jIG AS0XUfN40BFrc/uVIiDv+pcyFeEwD25xRzAXC23N/2mca2l2i4RoSpugXegwgGEN 4XDhNj4jW89T/3Pv9MR4fPNKXLiob7JPZS5+nBcPvCnyopdJmp71PGqmCU94v5xs rhFScA3ELD1dp0q3tR2C8cUJYLFaRZjVH6eKHBT6VocRaXRTk5RW8aqw+Kw8vmn7 I/CaaaAXOGlwrTckfHU/j1BVaZ1ZX9XuE/mDlVvhjx/SUAKi08awx6rpFw5Z0J4T v7zfhr5QBE2M8A== -----END CERTIFICATE-----Generated at Tue Dec 30 04:35:55 2025 by rpki-client