This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/1c1eb2-1f65-4f71-8b32-b4bfe456dde0/1/mWchgxr7izgwe0n1ue5ikq0eWFA.mft File: mWchgxr7izgwe0n1ue5ikq0eWFA.mft (raw, json) Hash identifier: AZVAecImrxHYaUXQUeW3mrKjiqJw3jzI7bIQdH9DfCE= Subject key identifier: 41:B4:CB:FF:60:35:B0:FA:6C:D4:FF:27:E8:CC:2B:14:35:F2:4C:E6 Authority key identifier: 99:67:21:83:1A:FB:8B:38:30:7B:49:F5:B9:EE:62:92:AD:1E:58:50 Certificate issuer: /CN=996721831afb8b38307b49f5b9ee6292ad1e5850 Certificate serial: 019B3C7FBBB37F397EBCC329FDA67955CA71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mWchgxr7izgwe0n1ue5ikq0eWFA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/1c1eb2-1f65-4f71-8b32-b4bfe456dde0/1/mWchgxr7izgwe0n1ue5ikq0eWFA.mft Manifest number: 17AA Signing time: Sat 20 Dec 2025 16:02:42 +0000 Manifest this update: Sat 20 Dec 2025 16:02:42 +0000 Manifest next update: Sun 21 Dec 2025 16:02:42 +0000 Files and hashes: 1: GQRzcbGzWvSj3FBVjoQIeOqNNGk.roa (hash: 9iREodFCIhImvgis0W2BigBjZMAhENAEnDzq98vhkcw=) 2: H0P6Uhc2PQuAj9mI5JuLmXDsE-E.roa (hash: lFsz70YXVH8oaNr7AK6yGfw7Y8IvCmN3m4Wget06GNk=) 3: ZDeqr4bzVJZzwb_UfOlQJbn9JTw.roa (hash: 3Blt9qc0qNOTbyRJx5iL7tY6336Yd2GQWHTIQYOz0WA=) 4: ZvGCFhuBxDOtsm0tH0ckprzlN14.roa (hash: B7us8cduOuoCgxcoM4UE2exXlDYOnkX04npadJBsbXM=) 5: mWchgxr7izgwe0n1ue5ikq0eWFA.crl (hash: M8D6/ihSkapD2HVyPg8N48L2KF8CXhTOuifMW0WZpvo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/1c1eb2-1f65-4f71-8b32-b4bfe456dde0/1/mWchgxr7izgwe0n1ue5ikq0eWFA.crl rsync://rpki.ripe.net/repository/DEFAULT/b5/1c1eb2-1f65-4f71-8b32-b4bfe456dde0/1/mWchgxr7izgwe0n1ue5ikq0eWFA.mft rsync://rpki.ripe.net/repository/DEFAULT/mWchgxr7izgwe0n1ue5ikq0eWFA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7f:bb:b3:7f:39:7e:bc:c3:29:fd:a6:79:55:ca:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=996721831afb8b38307b49f5b9ee6292ad1e5850 Validity Not Before: Dec 20 16:02:42 2025 GMT Not After : Dec 21 16:02:42 2025 GMT Subject: CN=41b4cbff6035b0fa6cd4ff27e8cc2b1435f24ce6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:fd:6e:b8:5a:91:05:39:13:a1:d3:9b:25:e2: 9e:f4:77:26:b8:53:a5:e6:05:22:9f:a1:ab:16:a8: 33:4e:c3:f4:a5:7d:c2:3e:93:71:4d:c1:03:8a:6b: d7:51:5b:88:db:ad:7a:75:dd:ca:8b:0d:df:ed:5c: a3:2b:72:31:e3:0c:5f:eb:36:f5:62:73:97:4f:c5: 8d:e5:89:b4:02:33:be:d0:d4:94:c2:b0:cc:db:82: 77:59:9a:be:5d:b2:99:ea:1c:d5:81:8a:bc:a9:a4: 2a:a8:a0:4f:66:c0:dc:1b:79:16:d4:96:e6:4c:78: e2:40:8f:2e:29:e4:12:b5:ad:ef:84:27:93:f3:c9: d9:8b:cf:fb:80:90:41:7f:f9:2c:32:c8:0e:bf:61: ef:40:d5:32:32:4a:0b:fd:54:a4:9e:03:3b:5b:6f: 5c:59:01:5e:52:5d:c5:85:97:76:33:59:b8:59:ca: 36:a6:b8:e9:a1:0a:43:1c:ea:0c:ee:69:79:7b:b4: e5:36:66:f7:f9:c6:e0:57:d7:fd:ee:57:38:3b:a9: 67:50:88:7f:55:68:3b:d9:6b:b2:9d:03:6f:05:16: 90:4e:6d:ef:30:71:c6:a8:6b:cf:aa:38:11:f8:91: d0:c9:13:1b:e3:fe:1a:65:29:8a:7e:42:6f:66:e5: b7:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:B4:CB:FF:60:35:B0:FA:6C:D4:FF:27:E8:CC:2B:14:35:F2:4C:E6 X509v3 Authority Key Identifier: keyid:99:67:21:83:1A:FB:8B:38:30:7B:49:F5:B9:EE:62:92:AD:1E:58:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mWchgxr7izgwe0n1ue5ikq0eWFA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/1c1eb2-1f65-4f71-8b32-b4bfe456dde0/1/mWchgxr7izgwe0n1ue5ikq0eWFA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/1c1eb2-1f65-4f71-8b32-b4bfe456dde0/1/mWchgxr7izgwe0n1ue5ikq0eWFA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:8f:19:c6:31:64:f4:40:29:8c:cb:d0:c1:06:ff:ea:5a:1d: 47:63:22:f6:1c:c6:20:2d:4c:73:53:4d:5d:19:c6:07:4e:43: 3c:a9:e9:31:06:37:f8:34:32:61:41:c0:04:6a:e7:0d:97:8f: b8:30:41:88:41:d3:98:7a:e1:95:15:8f:68:d9:51:38:2e:68: 5a:18:fe:32:52:1d:ec:90:5d:ce:35:a0:59:6d:35:d5:b6:ac: 48:9f:13:ac:99:e6:0b:45:a5:14:27:45:03:be:84:e9:5a:f9: 6f:cb:fb:ad:68:ef:eb:d2:e9:10:b4:ef:06:98:e6:1c:97:ec: 8b:95:c9:2c:20:67:0b:78:59:48:93:02:33:2c:9d:1c:5d:18: e5:a0:56:2f:3f:80:e3:5c:dd:3f:46:77:18:48:7a:31:51:5e: 01:0e:01:f9:52:7f:f8:72:72:f6:3a:92:a5:e4:af:51:01:35: 9a:67:b2:93:89:eb:72:1c:9c:f7:d9:64:20:41:c9:9c:90:dd: ed:78:ad:9e:f9:65:5a:e0:a7:42:ff:cf:59:df:3a:50:17:0c: 12:3e:c6:92:33:95:b4:1a:df:35:80:86:c0:4c:7e:83:0c:47: a2:de:da:40:a3:98:3d:da:dd:3c:80:e7:b2:cd:4e:57:2d:5a: 57:fd:c8:7e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8f7uzfzl+vMMp/aZ5VcpxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk5NjcyMTgzMWFmYjhiMzgzMDdiNDlmNWI5ZWU2MjkyYWQx ZTU4NTAwHhcNMjUxMjIwMTYwMjQyWhcNMjUxMjIxMTYwMjQyWjAzMTEwLwYDVQQD Eyg0MWI0Y2JmZjYwMzViMGZhNmNkNGZmMjdlOGNjMmIxNDM1ZjI0Y2U2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvf1uuFqRBTkTodObJeKe9HcmuFOl 5gUin6GrFqgzTsP0pX3CPpNxTcEDimvXUVuI2616dd3Kiw3f7VyjK3Ix4wxf6zb1 YnOXT8WN5Ym0AjO+0NSUwrDM24J3WZq+XbKZ6hzVgYq8qaQqqKBPZsDcG3kW1Jbm THjiQI8uKeQSta3vhCeT88nZi8/7gJBBf/ksMsgOv2HvQNUyMkoL/VSkngM7W29c WQFeUl3FhZd2M1m4Wco2prjpoQpDHOoM7ml5e7TlNmb3+cbgV9f97lc4O6lnUIh/ VWg72WuynQNvBRaQTm3vMHHGqGvPqjgR+JHQyRMb4/4aZSmKfkJvZuW3ywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEG0y/9gNbD6bNT/J+jMKxQ18kzmMB8GA1UdIwQY MBaAFJlnIYMa+4s4MHtJ9bnuYpKtHlhQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbVdjaGd4cjdpemd3ZTBuMXVlNWlrcTBlV0ZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS8xYzFlYjItMWY2NS00ZjcxLThiMzIt YjRiZmU0NTZkZGUwLzEvbVdjaGd4cjdpemd3ZTBuMXVlNWlrcTBlV0ZBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNS8xYzFlYjItMWY2NS00ZjcxLThiMzItYjRiZmU0NTZkZGUw LzEvbVdjaGd4cjdpemd3ZTBuMXVlNWlrcTBlV0ZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKI8ZxjFk 9EApjMvQwQb/6lodR2Mi9hzGIC1Mc1NNXRnGB05DPKnpMQY3+DQyYUHABGrnDZeP uDBBiEHTmHrhlRWPaNlROC5oWhj+MlId7JBdzjWgWW011basSJ8TrJnmC0WlFCdF A76E6Vr5b8v7rWjv69LpELTvBpjmHJfsi5XJLCBnC3hZSJMCMyydHF0Y5aBWLz+A 41zdP0Z3GEh6MVFeAQ4B+VJ/+HJy9jqSpeSvUQE1mmeyk4nrchyc99lkIEHJnJDd 7XitnvllWuCnQv/PWd86UBcMEj7GkjOVtBrfNYCGwEx+gwxHot7aQKOYPdrdPIDn ss1OVy1aV/3Ifg== -----END CERTIFICATE-----Generated at Sun Dec 21 00:52:41 2025 by rpki-client