This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/cec2a9-3013-42b4-9483-a72c404f26fd/1/md1vCIIq4LpQVFQkVpI_r5BA9dA.mft File: md1vCIIq4LpQVFQkVpI_r5BA9dA.mft (raw, json) Hash identifier: zQ9a5Nicuv8DAhAMHinGdEltpiiylsp0v0RkP3KDFwA= Subject key identifier: EF:7C:B8:26:C9:8F:46:F1:C6:A0:10:75:A6:20:83:17:B5:37:53:9F Authority key identifier: 99:DD:6F:08:82:2A:E0:BA:50:54:54:24:56:92:3F:AF:90:40:F5:D0 Certificate issuer: /CN=99dd6f08822ae0ba5054542456923faf9040f5d0 Certificate serial: 019B2DB0217710D3F092628429C2B2D28D9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/md1vCIIq4LpQVFQkVpI_r5BA9dA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/cec2a9-3013-42b4-9483-a72c404f26fd/1/md1vCIIq4LpQVFQkVpI_r5BA9dA.mft Manifest number: 116B Signing time: Wed 17 Dec 2025 19:01:16 +0000 Manifest this update: Wed 17 Dec 2025 19:01:16 +0000 Manifest next update: Thu 18 Dec 2025 19:01:16 +0000 Files and hashes: 1: NUWfScDSH56OaOCaPfBblPu0Ydg.roa (hash: a4F0KmJ+v3pAeFAh9qDTsIqvwa1PoPI9PowXceZRGfg=) 2: md1vCIIq4LpQVFQkVpI_r5BA9dA.crl (hash: JLQrxpgA4X8TUMOQBzkkCo73+8Hr3gfRJJn/uxVtNKw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/cec2a9-3013-42b4-9483-a72c404f26fd/1/md1vCIIq4LpQVFQkVpI_r5BA9dA.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/cec2a9-3013-42b4-9483-a72c404f26fd/1/md1vCIIq4LpQVFQkVpI_r5BA9dA.mft rsync://rpki.ripe.net/repository/DEFAULT/md1vCIIq4LpQVFQkVpI_r5BA9dA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 19:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2d:b0:21:77:10:d3:f0:92:62:84:29:c2:b2:d2:8d:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99dd6f08822ae0ba5054542456923faf9040f5d0 Validity Not Before: Dec 17 19:01:16 2025 GMT Not After : Dec 18 19:01:16 2025 GMT Subject: CN=ef7cb826c98f46f1c6a01075a6208317b537539f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:c2:8a:78:e8:bd:0d:08:88:8e:92:57:92:dc: ce:a7:0f:dc:0d:30:25:d5:06:af:c0:c4:22:2f:61: af:d5:e7:f4:f9:f9:de:52:00:3a:3f:fa:68:71:eb: 31:85:7e:21:67:37:41:ed:a6:17:d4:26:ec:d0:b5: 1b:d5:ae:79:7d:79:6e:fb:bb:58:5a:37:75:8c:23: 0a:b1:10:62:60:e4:55:a0:b6:f0:84:d8:c1:0f:8c: eb:c9:9d:f7:69:d5:bb:b0:4c:42:2c:2d:97:7f:f8: 55:dd:0f:32:5c:81:e0:0a:71:2f:3e:28:43:7d:cc: e0:f3:43:ac:be:63:95:00:96:40:ed:1b:e6:a1:b8: 91:2a:ef:07:f9:f4:e7:64:f2:60:44:10:6e:46:f8: 62:58:8c:21:99:86:c4:44:d5:12:38:cf:0c:52:0d: 4d:3b:2a:c1:b7:d8:ff:7c:cd:97:d0:a9:20:5e:e1: 3c:a5:84:f7:99:24:84:6a:45:10:b6:16:e9:b2:47: 7d:76:6c:09:a6:3f:71:33:1a:fe:92:c6:fe:3c:f1: 54:17:d9:21:cb:1f:85:06:1d:62:c9:8c:32:55:10: dd:fb:4d:3f:fb:7d:75:00:b4:e1:8e:14:c9:9c:05: ed:f4:75:1b:e6:6e:84:53:8f:d7:05:82:13:91:c3: 82:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:7C:B8:26:C9:8F:46:F1:C6:A0:10:75:A6:20:83:17:B5:37:53:9F X509v3 Authority Key Identifier: keyid:99:DD:6F:08:82:2A:E0:BA:50:54:54:24:56:92:3F:AF:90:40:F5:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/md1vCIIq4LpQVFQkVpI_r5BA9dA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/cec2a9-3013-42b4-9483-a72c404f26fd/1/md1vCIIq4LpQVFQkVpI_r5BA9dA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/cec2a9-3013-42b4-9483-a72c404f26fd/1/md1vCIIq4LpQVFQkVpI_r5BA9dA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:fb:a8:20:70:3c:07:9b:69:9a:10:2b:b3:90:81:9b:5a:cb: d7:67:18:7a:1c:1a:1f:ff:ee:4a:33:d0:0a:e1:c0:b5:15:38: 27:ae:9a:fd:63:00:42:12:e9:1e:59:45:d0:7e:70:11:4c:4c: 17:5a:43:e1:9b:e2:9a:3f:59:b2:e0:cf:11:14:a2:7b:94:aa: 21:44:2e:78:45:c5:8b:3c:3f:39:5e:f6:3e:ca:17:c5:16:06: 68:3c:a0:08:e1:e7:9f:59:59:42:5d:f7:d0:73:4d:03:b7:32: 2e:fa:7f:15:1a:0f:1a:48:73:e2:0d:62:86:ce:df:4a:c4:7a: 33:a2:aa:b4:f5:f6:2e:21:7e:e0:1c:1e:b1:5f:90:67:d1:dc: 20:e6:b2:1d:06:af:81:0a:ff:55:e6:cc:53:4a:49:7a:02:49: 34:74:25:8c:a2:25:2f:3d:41:5a:69:05:25:0b:1d:b1:d0:0d: da:09:a5:4e:89:0b:4c:8c:fe:1c:c8:23:ef:1a:e6:df:6f:e8: 27:f2:a9:00:1b:6a:cb:7c:a0:f8:3d:30:7d:c4:09:6a:df:b4: b4:69:84:68:7f:f6:a3:6c:bb:10:b8:a0:8a:95:ae:6c:91:6f: e6:06:31:e7:a9:89:e6:87:1a:dd:6f:d6:40:a0:59:95:5c:aa: 9d:e2:58:55 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZstsCF3ENPwkmKEKcKy0o2bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk5ZGQ2ZjA4ODIyYWUwYmE1MDU0NTQyNDU2OTIzZmFmOTA0 MGY1ZDAwHhcNMjUxMjE3MTkwMTE2WhcNMjUxMjE4MTkwMTE2WjAzMTEwLwYDVQQD EyhlZjdjYjgyNmM5OGY0NmYxYzZhMDEwNzVhNjIwODMxN2I1Mzc1MzlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1cKKeOi9DQiIjpJXktzOpw/cDTAl 1QavwMQiL2Gv1ef0+fneUgA6P/pocesxhX4hZzdB7aYX1Cbs0LUb1a55fXlu+7tY Wjd1jCMKsRBiYORVoLbwhNjBD4zryZ33adW7sExCLC2Xf/hV3Q8yXIHgCnEvPihD fczg80OsvmOVAJZA7RvmobiRKu8H+fTnZPJgRBBuRvhiWIwhmYbERNUSOM8MUg1N OyrBt9j/fM2X0KkgXuE8pYT3mSSEakUQthbpskd9dmwJpj9xMxr+ksb+PPFUF9kh yx+FBh1iyYwyVRDd+00/+311ALThjhTJnAXt9HUb5m6EU4/XBYITkcOCVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO98uCbJj0bxxqAQdaYggxe1N1OfMB8GA1UdIwQY MBaAFJndbwiCKuC6UFRUJFaSP6+QQPXQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbWQxdkNJSXE0THBRVkZRa1ZwSV9yNUJBOWRBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS9jZWMyYTktMzAxMy00MmI0LTk0ODMt YTcyYzQwNGYyNmZkLzEvbWQxdkNJSXE0THBRVkZRa1ZwSV9yNUJBOWRBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS9jZWMyYTktMzAxMy00MmI0LTk0ODMtYTcyYzQwNGYyNmZk LzEvbWQxdkNJSXE0THBRVkZRa1ZwSV9yNUJBOWRBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh/uoIHA8 B5tpmhArs5CBm1rL12cYehwaH//uSjPQCuHAtRU4J66a/WMAQhLpHllF0H5wEUxM F1pD4Zvimj9ZsuDPERSie5SqIUQueEXFizw/OV72PsoXxRYGaDygCOHnn1lZQl33 0HNNA7cyLvp/FRoPGkhz4g1ihs7fSsR6M6KqtPX2LiF+4BwesV+QZ9HcIOayHQav gQr/VebMU0pJegJJNHQljKIlLz1BWmkFJQsdsdAN2gmlTokLTIz+HMgj7xrm32/o J/KpABtqy3yg+D0wfcQJat+0tGmEaH/2o2y7ELigipWubJFv5gYx56mJ5oca3W/W QKBZlVyqneJYVQ== -----END CERTIFICATE-----Generated at Wed Dec 17 20:46:48 2025 by rpki-client