This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/a20101-1c9f-44c5-8077-5190f7869a7f/1/mW-QP5GoWmDFRu4RQTSMw8gDaSc.mft File: mW-QP5GoWmDFRu4RQTSMw8gDaSc.mft (raw, json) Hash identifier: qZO6qKxuCYaKGRo3hGJuKZbjRhS7cFHUT9NOGsjxrXU= Subject key identifier: 9B:2E:0F:27:50:0D:FC:A9:43:CC:94:97:ED:46:92:36:64:26:25:F8 Authority key identifier: 99:6F:90:3F:91:A8:5A:60:C5:46:EE:11:41:34:8C:C3:C8:03:69:27 Certificate issuer: /CN=996f903f91a85a60c546ee1141348cc3c8036927 Certificate serial: 019B416D6F26226526803584FFE6FCD0F3F8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mW-QP5GoWmDFRu4RQTSMw8gDaSc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/a20101-1c9f-44c5-8077-5190f7869a7f/1/mW-QP5GoWmDFRu4RQTSMw8gDaSc.mft Manifest number: 141D Signing time: Sun 21 Dec 2025 15:00:49 +0000 Manifest this update: Sun 21 Dec 2025 15:00:49 +0000 Manifest next update: Mon 22 Dec 2025 15:00:49 +0000 Files and hashes: 1: mW-QP5GoWmDFRu4RQTSMw8gDaSc.crl (hash: 7UZEuFsyiYKY83bMeamyq5TR9bDtIxb6Hoyx2UzP19M=) 2: oGPLcgnT5_jMQFeXtQh3bXaXriM.roa (hash: QUvCaj08Q2TK+WnTDqsu5pyPq9XzMOcObz9WAotvcYU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/a20101-1c9f-44c5-8077-5190f7869a7f/1/mW-QP5GoWmDFRu4RQTSMw8gDaSc.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/a20101-1c9f-44c5-8077-5190f7869a7f/1/mW-QP5GoWmDFRu4RQTSMw8gDaSc.mft rsync://rpki.ripe.net/repository/DEFAULT/mW-QP5GoWmDFRu4RQTSMw8gDaSc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:6d:6f:26:22:65:26:80:35:84:ff:e6:fc:d0:f3:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=996f903f91a85a60c546ee1141348cc3c8036927 Validity Not Before: Dec 21 15:00:49 2025 GMT Not After : Dec 22 15:00:49 2025 GMT Subject: CN=9b2e0f27500dfca943cc9497ed469236642625f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:ea:4d:f3:a4:40:df:9e:85:08:48:5a:17:90: 2c:64:af:76:c7:ce:81:64:c8:5e:d7:54:a6:48:b9: b8:80:07:b9:88:92:14:89:6d:9a:fd:c3:7d:58:6d: 5e:84:62:3c:45:09:62:08:14:55:ba:c5:36:76:11: 59:c6:c3:a5:4e:5f:e8:a2:e4:8d:a7:da:24:00:46: 98:09:c5:b9:f9:f1:c1:61:5f:0d:50:bb:62:91:c0: cc:65:0f:8e:dc:03:19:81:d2:61:b0:60:a4:f9:4f: 06:51:9f:58:ad:7a:1b:fe:ee:ab:fc:a3:3b:c9:ac: ea:23:0e:e7:78:4b:e9:1c:79:28:83:ec:e0:b4:5b: 82:c6:59:4d:b3:77:0d:85:47:b7:22:28:a2:42:e2: 35:c6:ab:5f:b5:cb:d1:81:91:b8:44:0f:f9:12:a9: 0d:91:6b:29:c2:0d:43:fc:b1:6d:66:e2:7a:dd:a2: 5d:fc:a1:2f:18:30:20:81:b1:3b:32:b2:ef:a2:ab: 06:cd:c9:5e:36:f5:c0:de:6d:95:78:02:59:03:67: 04:1b:28:08:ea:23:91:84:4c:06:4e:56:23:a2:ab: 4c:36:d7:e6:f2:52:49:f0:42:79:85:c0:41:ed:4b: 75:5b:9a:99:e5:9c:58:80:a3:f6:38:78:fe:81:5c: 55:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:2E:0F:27:50:0D:FC:A9:43:CC:94:97:ED:46:92:36:64:26:25:F8 X509v3 Authority Key Identifier: keyid:99:6F:90:3F:91:A8:5A:60:C5:46:EE:11:41:34:8C:C3:C8:03:69:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mW-QP5GoWmDFRu4RQTSMw8gDaSc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/a20101-1c9f-44c5-8077-5190f7869a7f/1/mW-QP5GoWmDFRu4RQTSMw8gDaSc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/a20101-1c9f-44c5-8077-5190f7869a7f/1/mW-QP5GoWmDFRu4RQTSMw8gDaSc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:06:a5:30:a0:85:48:35:5e:4b:1d:77:6a:26:6f:01:7d:0e: cf:5f:01:3c:67:ab:48:eb:27:1d:69:e2:69:45:ca:7e:4c:36: ff:9d:4b:91:55:3f:fc:74:83:e4:37:72:f6:48:f6:e3:81:aa: 52:12:61:84:c5:0f:1d:53:6c:42:bf:8c:23:c9:1e:7b:e3:a1: b8:2e:c8:b3:84:08:52:39:26:0a:13:b1:df:73:70:7f:da:93: e4:be:42:71:e7:ff:05:74:ba:f9:17:ae:d7:16:30:fc:71:00: bb:86:84:14:6a:2e:97:05:39:8f:6a:74:7e:46:b6:70:79:66: 8a:e3:a0:82:16:63:82:26:35:e8:ec:17:3f:45:c4:19:b3:cd: a1:01:e4:ce:23:2a:00:d2:3d:fb:c5:33:40:eb:28:14:30:89: 6f:94:1a:6d:f8:f0:98:48:e3:d1:09:ad:f6:ba:f0:81:b4:66: da:ce:dd:51:d9:0e:d8:18:1f:a6:38:6e:b7:9e:09:7f:7d:ec: 42:c2:e3:c1:da:c1:5b:8b:a0:33:f9:40:74:25:2c:ba:8a:cd: d6:6c:51:b7:eb:15:10:f7:8b:91:c1:58:73:e4:90:86:fd:24: 06:38:1f:4c:d5:80:87:c1:32:a1:de:f3:98:48:28:93:46:a2: 09:af:3e:7a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtBbW8mImUmgDWE/+b80PP4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk5NmY5MDNmOTFhODVhNjBjNTQ2ZWUxMTQxMzQ4Y2MzYzgw MzY5MjcwHhcNMjUxMjIxMTUwMDQ5WhcNMjUxMjIyMTUwMDQ5WjAzMTEwLwYDVQQD Eyg5YjJlMGYyNzUwMGRmY2E5NDNjYzk0OTdlZDQ2OTIzNjY0MjYyNWY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsupN86RA356FCEhaF5AsZK92x86B ZMhe11SmSLm4gAe5iJIUiW2a/cN9WG1ehGI8RQliCBRVusU2dhFZxsOlTl/oouSN p9okAEaYCcW5+fHBYV8NULtikcDMZQ+O3AMZgdJhsGCk+U8GUZ9YrXob/u6r/KM7 yazqIw7neEvpHHkog+zgtFuCxllNs3cNhUe3IiiiQuI1xqtftcvRgZG4RA/5EqkN kWspwg1D/LFtZuJ63aJd/KEvGDAggbE7MrLvoqsGzcleNvXA3m2VeAJZA2cEGygI 6iORhEwGTlYjoqtMNtfm8lJJ8EJ5hcBB7Ut1W5qZ5ZxYgKP2OHj+gVxVJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJsuDydQDfypQ8yUl+1GkjZkJiX4MB8GA1UdIwQY MBaAFJlvkD+RqFpgxUbuEUE0jMPIA2knMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbVctUVA1R29XbURGUnU0UlFUU013OGdEYVNjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS9hMjAxMDEtMWM5Zi00NGM1LTgwNzct NTE5MGY3ODY5YTdmLzEvbVctUVA1R29XbURGUnU0UlFUU013OGdEYVNjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS9hMjAxMDEtMWM5Zi00NGM1LTgwNzctNTE5MGY3ODY5YTdm LzEvbVctUVA1R29XbURGUnU0UlFUU013OGdEYVNjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGwalMKCF SDVeSx13aiZvAX0Oz18BPGerSOsnHWniaUXKfkw2/51LkVU//HSD5Ddy9kj244Gq UhJhhMUPHVNsQr+MI8kee+OhuC7Is4QIUjkmChOx33Nwf9qT5L5Ccef/BXS6+Reu 1xYw/HEAu4aEFGoulwU5j2p0fka2cHlmiuOgghZjgiY16OwXP0XEGbPNoQHkziMq ANI9+8UzQOsoFDCJb5QabfjwmEjj0Qmt9rrwgbRm2s7dUdkO2Bgfpjhut54Jf33s QsLjwdrBW4ugM/lAdCUsuorN1mxRt+sVEPeLkcFYc+SQhv0kBjgfTNWAh8Eyod7z mEgok0aiCa8+eg== -----END CERTIFICATE-----Generated at Sun Dec 21 19:03:36 2025 by rpki-client