This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/218197-7ec1-43a8-a591-73675f18113a/1/mNZvua2ttqkFe_YKqj_1LGZUBBg.mft File: mNZvua2ttqkFe_YKqj_1LGZUBBg.mft (raw, json) Hash identifier: G4WWwi/sgbqg8X4OP7E6fVaLGkvOXWSd8yfLCR8aONI= Subject key identifier: 8E:83:08:9F:1C:9A:27:38:D0:46:F6:E4:E0:25:25:FD:C6:27:69:DA Authority key identifier: 98:D6:6F:B9:AD:AD:B6:A9:05:7B:F6:0A:AA:3F:F5:2C:66:54:04:18 Certificate issuer: /CN=98d66fb9adadb6a9057bf60aaa3ff52c66540418 Certificate serial: 019B32D737E9DD8F1C9B6D3013C53ED1D6CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mNZvua2ttqkFe_YKqj_1LGZUBBg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/218197-7ec1-43a8-a591-73675f18113a/1/mNZvua2ttqkFe_YKqj_1LGZUBBg.mft Manifest number: 0CDB Signing time: Thu 18 Dec 2025 19:02:03 +0000 Manifest this update: Thu 18 Dec 2025 19:02:03 +0000 Manifest next update: Fri 19 Dec 2025 19:02:03 +0000 Files and hashes: 1: 7j9uxnJfVl55LcxAf_fr4i2drjY.roa (hash: 7whaNaNl7Pm7UlaWsp36rTim4yAY8fmMQU6Aiv7KQCs=) 2: mNZvua2ttqkFe_YKqj_1LGZUBBg.crl (hash: 84LsoKDxIC90eruPhQvqrOrKQtRIFWLvwKrq/piC9iA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/218197-7ec1-43a8-a591-73675f18113a/1/mNZvua2ttqkFe_YKqj_1LGZUBBg.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/218197-7ec1-43a8-a591-73675f18113a/1/mNZvua2ttqkFe_YKqj_1LGZUBBg.mft rsync://rpki.ripe.net/repository/DEFAULT/mNZvua2ttqkFe_YKqj_1LGZUBBg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 19:02:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:d7:37:e9:dd:8f:1c:9b:6d:30:13:c5:3e:d1:d6:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98d66fb9adadb6a9057bf60aaa3ff52c66540418 Validity Not Before: Dec 18 19:02:03 2025 GMT Not After : Dec 19 19:02:03 2025 GMT Subject: CN=8e83089f1c9a2738d046f6e4e02525fdc62769da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:d2:af:0f:5d:9f:eb:07:15:e8:62:fe:e6:cd: dc:9e:29:92:d9:ab:d2:54:0a:40:f2:af:dd:1e:6a: 58:b6:64:25:c0:51:95:23:d3:66:a1:b7:7c:db:e3: da:9a:c1:e1:b4:e3:e1:ee:da:cd:28:bd:32:5f:62: 61:39:2c:4c:e2:48:15:ef:84:e1:95:a2:4f:30:9f: 81:ba:d0:fe:25:79:5c:b8:1a:6b:d5:fa:d7:81:e3: 75:57:79:95:0f:aa:5b:01:8d:4a:18:a9:a5:fb:d6: 82:92:c2:16:38:37:4b:d4:eb:f9:e1:f1:78:41:b1: a2:6a:17:ca:12:2b:50:7b:de:0d:41:90:c8:e9:c7: 8c:5b:10:92:14:0f:f4:7f:70:63:e3:78:ba:47:b2: 6b:84:9b:df:9e:44:04:07:c5:8d:15:35:c6:55:d6: 74:17:f7:fd:bf:85:ff:08:93:11:ff:2f:58:6f:73: a4:4b:da:1e:05:9c:e6:93:48:53:05:02:fe:58:79: 9e:13:1b:1c:bf:e2:56:3f:67:6f:0f:9f:ea:08:45: 3c:04:ff:4e:66:29:b9:09:75:68:04:7e:cd:2e:f9: 91:4b:49:6e:1b:6d:4f:64:f1:4a:1d:69:5a:cc:9e: 3a:91:9c:c2:4e:c8:b0:d6:fb:fb:18:d2:11:9b:51: 67:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:83:08:9F:1C:9A:27:38:D0:46:F6:E4:E0:25:25:FD:C6:27:69:DA X509v3 Authority Key Identifier: keyid:98:D6:6F:B9:AD:AD:B6:A9:05:7B:F6:0A:AA:3F:F5:2C:66:54:04:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mNZvua2ttqkFe_YKqj_1LGZUBBg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/218197-7ec1-43a8-a591-73675f18113a/1/mNZvua2ttqkFe_YKqj_1LGZUBBg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/218197-7ec1-43a8-a591-73675f18113a/1/mNZvua2ttqkFe_YKqj_1LGZUBBg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:aa:d9:0f:f7:06:be:f2:5b:24:3f:fe:ed:95:61:00:17:00: fc:67:66:c2:58:4c:70:fe:dd:18:16:3f:70:b3:1b:3f:24:54: a4:47:26:c8:6d:4f:19:29:00:31:0d:df:4b:97:81:20:41:54: ea:3f:3e:48:44:f6:de:9b:60:d9:e9:25:95:58:8c:ae:5b:44: f5:cb:bf:e8:38:f7:6a:7e:6d:da:e2:d2:67:11:69:ec:fe:17: 11:a0:12:6a:2d:1d:27:7f:40:b9:6c:2b:b5:3f:58:2d:e1:ec: 7e:58:05:ec:8b:6c:31:b9:83:04:ea:fc:9b:35:8b:f2:a5:79: 69:3d:5b:16:5e:9a:ef:e6:14:b1:84:5c:53:42:cd:75:05:87: 7e:ea:07:df:d3:ee:9e:cf:8b:38:42:e9:2c:0f:bb:19:70:0f: 41:5d:cd:1d:48:88:98:35:e7:d7:13:da:1a:51:fb:48:b4:23: ba:4b:3b:d9:e1:8f:2d:39:85:a6:6c:ab:21:30:fd:a7:15:47: 8a:be:a8:fe:60:2b:0a:35:f3:f8:2d:38:d2:ce:d4:4d:b9:67: 3c:d5:bd:f2:59:32:37:5c:de:39:76:1c:08:89:b2:ac:09:1f: 2d:02:2b:a8:1c:07:61:6b:d1:b2:3e:33:75:b2:d9:1a:d5:eb: d7:f5:2d:74 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsy1zfp3Y8cm20wE8U+0dbLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk4ZDY2ZmI5YWRhZGI2YTkwNTdiZjYwYWFhM2ZmNTJjNjY1 NDA0MTgwHhcNMjUxMjE4MTkwMjAzWhcNMjUxMjE5MTkwMjAzWjAzMTEwLwYDVQQD Eyg4ZTgzMDg5ZjFjOWEyNzM4ZDA0NmY2ZTRlMDI1MjVmZGM2Mjc2OWRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1tKvD12f6wcV6GL+5s3cnimS2avS VApA8q/dHmpYtmQlwFGVI9Nmobd82+PamsHhtOPh7trNKL0yX2JhOSxM4kgV74Th laJPMJ+ButD+JXlcuBpr1frXgeN1V3mVD6pbAY1KGKml+9aCksIWODdL1Ov54fF4 QbGiahfKEitQe94NQZDI6ceMWxCSFA/0f3Bj43i6R7JrhJvfnkQEB8WNFTXGVdZ0 F/f9v4X/CJMR/y9Yb3OkS9oeBZzmk0hTBQL+WHmeExscv+JWP2dvD5/qCEU8BP9O Zim5CXVoBH7NLvmRS0luG21PZPFKHWlazJ46kZzCTsiw1vv7GNIRm1FnAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI6DCJ8cmic40Eb25OAlJf3GJ2naMB8GA1UdIwQY MBaAFJjWb7mtrbapBXv2Cqo/9SxmVAQYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbU5adnVhMnR0cWtGZV9ZS3FqXzFMR1pVQkJnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC8yMTgxOTctN2VjMS00M2E4LWE1OTEt NzM2NzVmMTgxMTNhLzEvbU5adnVhMnR0cWtGZV9ZS3FqXzFMR1pVQkJnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC8yMTgxOTctN2VjMS00M2E4LWE1OTEtNzM2NzVmMTgxMTNh LzEvbU5adnVhMnR0cWtGZV9ZS3FqXzFMR1pVQkJnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcarZD/cG vvJbJD/+7ZVhABcA/GdmwlhMcP7dGBY/cLMbPyRUpEcmyG1PGSkAMQ3fS5eBIEFU 6j8+SET23ptg2ekllViMrltE9cu/6Dj3an5t2uLSZxFp7P4XEaASai0dJ39AuWwr tT9YLeHsflgF7ItsMbmDBOr8mzWL8qV5aT1bFl6a7+YUsYRcU0LNdQWHfuoH39Pu ns+LOELpLA+7GXAPQV3NHUiImDXn1xPaGlH7SLQjuks72eGPLTmFpmyrITD9pxVH ir6o/mArCjXz+C040s7UTblnPNW98lkyN1zeOXYcCImyrAkfLQIrqBwHYWvRsj4z dbLZGtXr1/UtdA== -----END CERTIFICATE-----Generated at Fri Dec 19 01:24:45 2025 by rpki-client