This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/218197-7ec1-43a8-a591-73675f18113a/1/mNZvua2ttqkFe_YKqj_1LGZUBBg.mft File: mNZvua2ttqkFe_YKqj_1LGZUBBg.mft (raw, json) Hash identifier: N5KhDCl+BlzotuQzdQs6vPOtxNRQ9hK8FrgbLsAbM8g= Subject key identifier: 32:86:83:4F:32:76:D3:52:3B:5D:D5:22:C3:DA:2D:8D:8A:10:85:11 Authority key identifier: 98:D6:6F:B9:AD:AD:B6:A9:05:7B:F6:0A:AA:3F:F5:2C:66:54:04:18 Certificate issuer: /CN=98d66fb9adadb6a9057bf60aaa3ff52c66540418 Certificate serial: 019B650DA4337CE2EFB04CC2221DB140E372 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mNZvua2ttqkFe_YKqj_1LGZUBBg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/218197-7ec1-43a8-a591-73675f18113a/1/mNZvua2ttqkFe_YKqj_1LGZUBBg.mft Manifest number: 0CF5 Signing time: Sun 28 Dec 2025 13:02:31 +0000 Manifest this update: Sun 28 Dec 2025 13:02:31 +0000 Manifest next update: Mon 29 Dec 2025 13:02:31 +0000 Files and hashes: 1: 7j9uxnJfVl55LcxAf_fr4i2drjY.roa (hash: 7whaNaNl7Pm7UlaWsp36rTim4yAY8fmMQU6Aiv7KQCs=) 2: mNZvua2ttqkFe_YKqj_1LGZUBBg.crl (hash: 82UlADA/7KJEdJd+zZKDoIAFFOF/bgn717l6TkkM57M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/218197-7ec1-43a8-a591-73675f18113a/1/mNZvua2ttqkFe_YKqj_1LGZUBBg.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/218197-7ec1-43a8-a591-73675f18113a/1/mNZvua2ttqkFe_YKqj_1LGZUBBg.mft rsync://rpki.ripe.net/repository/DEFAULT/mNZvua2ttqkFe_YKqj_1LGZUBBg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 12:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:65:0d:a4:33:7c:e2:ef:b0:4c:c2:22:1d:b1:40:e3:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98d66fb9adadb6a9057bf60aaa3ff52c66540418 Validity Not Before: Dec 28 13:02:31 2025 GMT Not After : Dec 29 13:02:31 2025 GMT Subject: CN=3286834f3276d3523b5dd522c3da2d8d8a108511 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:97:0a:91:55:4a:16:1c:d4:cb:d8:12:c7:08: dc:89:71:70:d0:ad:df:91:ef:21:81:9a:30:bc:c4: b7:6c:37:91:e6:7d:47:13:5d:1e:81:c5:5e:fd:5e: 03:21:bf:68:b9:2a:02:33:b0:32:f1:18:1a:a3:86: 7c:e9:5f:0a:70:83:0f:78:9d:1b:8d:c4:7c:3e:e5: 12:f1:a4:28:9f:c0:a4:e5:fe:ef:90:52:2d:a0:8a: a4:31:dc:bd:6c:14:3f:41:a5:d6:75:07:eb:4b:90: 50:f6:1c:27:54:be:33:ec:2b:ad:a1:d1:33:a2:c5: af:93:71:c9:17:f0:1e:8d:ff:3d:3e:9c:30:6d:77: e2:6f:f7:05:0e:c5:be:cc:86:59:4a:70:f3:a4:7c: 3d:05:d1:7f:a8:fe:8a:f3:65:d6:58:9b:8b:f0:91: 4a:f8:2d:54:2d:69:47:e7:cf:24:c1:4b:c0:4d:78: 78:04:97:39:8d:e4:ac:ea:b8:17:59:23:c9:75:3f: 22:12:1a:8f:5f:a7:cf:25:71:d0:f9:4f:0f:9b:bd: 59:b5:d3:d0:17:d2:0d:89:99:d1:35:ac:86:8e:2e: fc:09:33:37:0b:bd:01:b5:5a:32:fe:8c:7f:15:e4: 1f:13:ce:5f:b4:c1:0d:e4:00:52:87:e4:27:41:8b: 82:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:86:83:4F:32:76:D3:52:3B:5D:D5:22:C3:DA:2D:8D:8A:10:85:11 X509v3 Authority Key Identifier: keyid:98:D6:6F:B9:AD:AD:B6:A9:05:7B:F6:0A:AA:3F:F5:2C:66:54:04:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mNZvua2ttqkFe_YKqj_1LGZUBBg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/218197-7ec1-43a8-a591-73675f18113a/1/mNZvua2ttqkFe_YKqj_1LGZUBBg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/218197-7ec1-43a8-a591-73675f18113a/1/mNZvua2ttqkFe_YKqj_1LGZUBBg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:ea:4d:fd:9b:2c:80:da:6e:a7:ad:4e:88:8f:c4:9b:d5:5b: 3e:8c:21:96:fa:b4:b2:e8:36:64:e4:66:67:04:2a:64:d6:ad: 1c:1d:42:84:7c:6b:dc:49:04:a2:8a:bb:09:b6:d9:fb:3c:22: 72:ad:4b:16:d6:73:b3:6d:83:5d:0f:5f:74:8d:f2:c7:c7:8e: dd:a0:e1:1c:42:f8:21:5d:67:6e:7b:d2:00:99:2f:7a:09:ae: 89:da:5d:ee:d7:d5:94:f6:3f:e2:4e:be:21:46:92:31:4a:ee: 81:a7:56:a3:14:01:cc:70:92:f0:e8:d5:76:d0:70:dd:bf:48: aa:a8:4e:0e:cf:ee:fc:7f:8d:ae:34:c1:f0:6b:22:0c:1b:5a: 62:29:1f:a8:af:ae:ac:7c:b2:b8:a8:17:3b:20:fe:d6:f2:f1: 1b:64:ac:5b:d9:ba:d4:30:f9:61:3b:38:d4:24:14:fa:ec:32: 93:94:21:d8:6a:5f:dc:0b:e0:3a:ab:42:b9:ff:fd:f2:45:dd: a6:70:6e:c1:fb:77:58:d2:0a:59:60:1a:98:a1:f4:13:91:50: ba:fd:45:a1:72:ac:a6:8a:18:17:f4:10:f8:03:4c:6f:e3:d4: 57:e5:a6:de:e8:fb:bf:f7:15:b1:13:cf:b0:5d:35:9d:f5:31: ae:52:46:7d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtlDaQzfOLvsEzCIh2xQONyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk4ZDY2ZmI5YWRhZGI2YTkwNTdiZjYwYWFhM2ZmNTJjNjY1 NDA0MTgwHhcNMjUxMjI4MTMwMjMxWhcNMjUxMjI5MTMwMjMxWjAzMTEwLwYDVQQD EygzMjg2ODM0ZjMyNzZkMzUyM2I1ZGQ1MjJjM2RhMmQ4ZDhhMTA4NTExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj5cKkVVKFhzUy9gSxwjciXFw0K3f ke8hgZowvMS3bDeR5n1HE10egcVe/V4DIb9ouSoCM7Ay8Rgao4Z86V8KcIMPeJ0b jcR8PuUS8aQon8Ck5f7vkFItoIqkMdy9bBQ/QaXWdQfrS5BQ9hwnVL4z7CutodEz osWvk3HJF/Aejf89PpwwbXfib/cFDsW+zIZZSnDzpHw9BdF/qP6K82XWWJuL8JFK +C1ULWlH588kwUvATXh4BJc5jeSs6rgXWSPJdT8iEhqPX6fPJXHQ+U8Pm71ZtdPQ F9INiZnRNayGji78CTM3C70BtVoy/ox/FeQfE85ftMEN5ABSh+QnQYuCvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDKGg08ydtNSO13VIsPaLY2KEIURMB8GA1UdIwQY MBaAFJjWb7mtrbapBXv2Cqo/9SxmVAQYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbU5adnVhMnR0cWtGZV9ZS3FqXzFMR1pVQkJnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC8yMTgxOTctN2VjMS00M2E4LWE1OTEt NzM2NzVmMTgxMTNhLzEvbU5adnVhMnR0cWtGZV9ZS3FqXzFMR1pVQkJnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC8yMTgxOTctN2VjMS00M2E4LWE1OTEtNzM2NzVmMTgxMTNh LzEvbU5adnVhMnR0cWtGZV9ZS3FqXzFMR1pVQkJnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuepN/Zss gNpup61OiI/Em9VbPowhlvq0sug2ZORmZwQqZNatHB1ChHxr3EkEooq7CbbZ+zwi cq1LFtZzs22DXQ9fdI3yx8eO3aDhHEL4IV1nbnvSAJkvegmuidpd7tfVlPY/4k6+ IUaSMUrugadWoxQBzHCS8OjVdtBw3b9IqqhODs/u/H+NrjTB8GsiDBtaYikfqK+u rHyyuKgXOyD+1vLxG2SsW9m61DD5YTs41CQU+uwyk5Qh2Gpf3AvgOqtCuf/98kXd pnBuwft3WNIKWWAamKH0E5FQuv1FoXKspooYF/QQ+ANMb+PUV+Wm3uj7v/cVsRPP sF01nfUxrlJGfQ== -----END CERTIFICATE-----Generated at Sun Dec 28 20:30:36 2025 by rpki-client