This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/e20c95-0f92-4598-96df-cbc2797c1d0a/1/mJAcfP_Rmk_qePebEASZkmbcwiQ.mft File: mJAcfP_Rmk_qePebEASZkmbcwiQ.mft (raw, json) Hash identifier: RmkKBfh/ZKynODH3sjBgs8xOsuwJ1vX4GplEmDEwkyI= Subject key identifier: 3B:91:DF:3A:DA:98:97:A6:C1:3F:E5:CC:39:18:3F:C8:62:13:55:E3 Authority key identifier: 98:90:1C:7C:FF:D1:9A:4F:EA:78:F7:9B:10:04:99:92:66:DC:C2:24 Certificate issuer: /CN=98901c7cffd19a4fea78f79b1004999266dcc224 Certificate serial: 019B3BA264C919F4946F729220C901351D4D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mJAcfP_Rmk_qePebEASZkmbcwiQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/e20c95-0f92-4598-96df-cbc2797c1d0a/1/mJAcfP_Rmk_qePebEASZkmbcwiQ.mft Manifest number: 178A Signing time: Sat 20 Dec 2025 12:00:56 +0000 Manifest this update: Sat 20 Dec 2025 12:00:56 +0000 Manifest next update: Sun 21 Dec 2025 12:00:56 +0000 Files and hashes: 1: HGWBnpYX08vMWUwwLOMJq_k78S0.roa (hash: yttjunWIbX6dwAiOo7g6fUQGb+c1a+Xf5qmbeU/dnp4=) 2: XmFs6QZFMPRdJzopVIFXmV--Vrs.roa (hash: btfm0oGigPJzbc1bJybbkI9gWRtDv9TpTBsAYkeB30s=) 3: mJAcfP_Rmk_qePebEASZkmbcwiQ.crl (hash: 1UUyPKNgAc1MzWUwG3h1jv17Ll++sZuY9VarfQASUzw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/e20c95-0f92-4598-96df-cbc2797c1d0a/1/mJAcfP_Rmk_qePebEASZkmbcwiQ.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/e20c95-0f92-4598-96df-cbc2797c1d0a/1/mJAcfP_Rmk_qePebEASZkmbcwiQ.mft rsync://rpki.ripe.net/repository/DEFAULT/mJAcfP_Rmk_qePebEASZkmbcwiQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 12:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:a2:64:c9:19:f4:94:6f:72:92:20:c9:01:35:1d:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98901c7cffd19a4fea78f79b1004999266dcc224 Validity Not Before: Dec 20 12:00:56 2025 GMT Not After : Dec 21 12:00:56 2025 GMT Subject: CN=3b91df3ada9897a6c13fe5cc39183fc8621355e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:aa:b2:e8:97:cf:ed:b2:65:c9:70:79:f5:2d: ce:0f:b9:4f:24:d1:3c:6d:b4:98:92:b6:a2:80:d4: b6:3f:11:67:6f:92:93:c3:07:c7:fc:b8:cf:cd:00: 02:4c:84:3b:20:5c:85:10:35:be:c3:29:ba:fb:ca: c8:c4:5f:aa:62:66:b2:5e:62:d1:10:17:e5:58:f4: 30:40:95:8a:2c:0f:8e:3a:ab:62:92:24:99:ab:f1: 78:6d:c4:fa:7d:73:07:1b:14:6c:62:68:27:03:0c: 7f:9f:3e:57:83:bd:f8:e7:38:59:93:87:f3:b7:6a: 4b:09:b0:49:a1:1d:8b:e0:c0:51:3c:70:5d:97:de: bd:08:d7:d0:c1:87:10:68:fd:bd:ac:9d:7f:75:e5: bf:de:97:f1:35:2a:4f:f5:1c:c7:65:79:8e:cd:92: 12:81:3c:a4:f9:72:60:41:0a:9d:ac:f2:2f:1d:ae: b3:7e:d0:27:fc:3f:bb:6b:03:2e:04:64:71:8f:20: 9c:dc:c0:79:61:31:5d:b2:2c:d9:33:11:bd:a4:bd: 4e:ff:6b:b9:55:68:25:bc:08:99:6f:15:2a:ca:df: 35:f6:fa:8a:e9:9e:5f:22:42:44:28:d5:c5:93:66: ea:e0:bd:10:b0:35:91:d4:15:d9:c8:67:7a:0e:7d: cb:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:91:DF:3A:DA:98:97:A6:C1:3F:E5:CC:39:18:3F:C8:62:13:55:E3 X509v3 Authority Key Identifier: keyid:98:90:1C:7C:FF:D1:9A:4F:EA:78:F7:9B:10:04:99:92:66:DC:C2:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mJAcfP_Rmk_qePebEASZkmbcwiQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/e20c95-0f92-4598-96df-cbc2797c1d0a/1/mJAcfP_Rmk_qePebEASZkmbcwiQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/e20c95-0f92-4598-96df-cbc2797c1d0a/1/mJAcfP_Rmk_qePebEASZkmbcwiQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:b9:f1:6e:99:ee:ee:0e:23:78:82:c4:55:8b:92:02:6f:d3: 6e:fb:9f:8c:f9:bb:73:a6:85:ae:00:72:75:1a:69:06:4d:fd: 09:2e:ce:3b:5b:ee:65:b2:0b:e7:0b:2a:bb:82:ee:0f:17:3f: 0c:a0:84:19:c6:c6:4b:84:e9:e2:f2:cb:04:a1:19:0c:9e:3e: 85:71:11:f3:d5:d9:35:51:a4:59:3c:7b:37:57:90:00:b6:4e: e1:ef:cf:fe:08:b5:23:91:b8:1c:74:06:c4:11:2e:93:0a:4a: f1:ca:d2:9c:0f:4b:7d:59:fe:13:74:1e:17:b4:4b:e7:d8:45: 3b:e9:c4:8c:4f:4e:5e:4b:5d:59:aa:47:f4:a3:e7:07:ce:08: 5a:4e:ac:c1:90:80:00:4c:b2:03:a7:cd:ab:82:22:05:f1:0c: df:4b:3e:4a:ad:aa:d4:88:2c:64:4d:23:70:f1:96:26:c9:b2: 97:7f:aa:98:c9:64:92:aa:5f:12:78:ee:f8:87:22:a5:85:58: e2:1b:69:f5:6b:79:fe:c9:13:21:10:f2:96:be:49:28:e1:58: 84:89:af:50:2b:a0:8c:b5:e0:45:f5:40:55:35:ae:8e:bf:0e: 34:8b:ae:c9:13:ba:04:03:5d:31:ae:a6:61:3a:87:86:0f:21: ed:dc:c4:aa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7omTJGfSUb3KSIMkBNR1NMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk4OTAxYzdjZmZkMTlhNGZlYTc4Zjc5YjEwMDQ5OTkyNjZk Y2MyMjQwHhcNMjUxMjIwMTIwMDU2WhcNMjUxMjIxMTIwMDU2WjAzMTEwLwYDVQQD EygzYjkxZGYzYWRhOTg5N2E2YzEzZmU1Y2MzOTE4M2ZjODYyMTM1NWUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsaqy6JfP7bJlyXB59S3OD7lPJNE8 bbSYkraigNS2PxFnb5KTwwfH/LjPzQACTIQ7IFyFEDW+wym6+8rIxF+qYmayXmLR EBflWPQwQJWKLA+OOqtikiSZq/F4bcT6fXMHGxRsYmgnAwx/nz5Xg7345zhZk4fz t2pLCbBJoR2L4MBRPHBdl969CNfQwYcQaP29rJ1/deW/3pfxNSpP9RzHZXmOzZIS gTyk+XJgQQqdrPIvHa6zftAn/D+7awMuBGRxjyCc3MB5YTFdsizZMxG9pL1O/2u5 VWglvAiZbxUqyt819vqK6Z5fIkJEKNXFk2bq4L0QsDWR1BXZyGd6Dn3LnwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDuR3zramJemwT/lzDkYP8hiE1XjMB8GA1UdIwQY MBaAFJiQHHz/0ZpP6nj3mxAEmZJm3MIkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbUpBY2ZQX1Jta19xZVBlYkVBU1prbWJjd2lRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9lMjBjOTUtMGY5Mi00NTk4LTk2ZGYt Y2JjMjc5N2MxZDBhLzEvbUpBY2ZQX1Jta19xZVBlYkVBU1prbWJjd2lRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC9lMjBjOTUtMGY5Mi00NTk4LTk2ZGYtY2JjMjc5N2MxZDBh LzEvbUpBY2ZQX1Jta19xZVBlYkVBU1prbWJjd2lRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANLnxbpnu 7g4jeILEVYuSAm/TbvufjPm7c6aFrgBydRppBk39CS7OO1vuZbIL5wsqu4LuDxc/ DKCEGcbGS4Tp4vLLBKEZDJ4+hXER89XZNVGkWTx7N1eQALZO4e/P/gi1I5G4HHQG xBEukwpK8crSnA9LfVn+E3QeF7RL59hFO+nEjE9OXktdWapH9KPnB84IWk6swZCA AEyyA6fNq4IiBfEM30s+Sq2q1IgsZE0jcPGWJsmyl3+qmMlkkqpfEnju+IcipYVY 4htp9Wt5/skTIRDylr5JKOFYhImvUCugjLXgRfVAVTWujr8ONIuuyRO6BANdMa6m YTqHhg8h7dzEqg== -----END CERTIFICATE-----Generated at Sat Dec 20 21:32:11 2025 by rpki-client