This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.mft File: mCz4CcDj6OVVL50N0uJ-DdLY2r4.mft (raw, json) Hash identifier: aTrGZdVS+d8nS8k6ip3UaOtU6xjeNtXNoqNEuGHrfBw= Subject key identifier: 8F:75:24:48:59:66:57:EB:2D:3C:14:E4:69:FE:4C:F4:F2:98:EE:85 Authority key identifier: 98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE Certificate issuer: /CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe Certificate serial: 019B375826AE7DE46DE5E653CD24E83EBF83 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.mft Manifest number: 1860 Signing time: Fri 19 Dec 2025 16:01:22 +0000 Manifest this update: Fri 19 Dec 2025 16:01:22 +0000 Manifest next update: Sat 20 Dec 2025 16:01:22 +0000 Files and hashes: 1: 1-W8fXv0jttdWKlzJAXVxxYtpRug.roa (hash: gpIh638+Fcd1tAei50b0+8GVpPlev9wrd/g4gdASdjg=) 2: 1-hmnqRRiYRBv3-7FZSouO-sZxc8.roa (hash: qZzAiDR7xg8HVxN9Yfi6WKDJM19ySP6xEDjjV5RaVos=) 3: 1UWB6DiO5XdV3re-o8rnuoqA6Ms.roa (hash: acQwekWVQZ/8nvJFITjzBnRus/D8fEtyc11Q6KELe7w=) 4: 21_l98tMuuHtah8-s1GQ4s9w80o.roa (hash: kBh4jdwY3MGZ4Pq8reV1XfNIfs+7zVu2WLUGJ+5lgvc=) 5: 4w30D5KawwaEKeLXCLppZs-985Y.roa (hash: D2Lwmoer5qGID/4i5fsaA6M5CcgJmrhikqoV9diBlTk=) 6: 584_8-MCCtntQOfvULwWZs9O7nE.roa (hash: 2qpHd4/GVV0NiG+wogJB5AQCeDp3yyLGq0zIUvBip28=) 7: AZYvtxCiQAo7McIIg5dYZPnjqkI.roa (hash: e/Nkv2lWFMKh5GkiCT+Bt9tYXmSUttTSHjKIqokHr5w=) 8: Brhkd2-auvvZmCyvxy5ORhHeQ6E.roa (hash: g8WF2m4nW9TPwqD2pE0ddCjVXs1fr0m/MHPrZ/Qj2HI=) 9: Hd_pbYNJS6Yi-k0tVsDsErLdxyo.roa (hash: nlfGof7swDkDQ7O/uQUGbM73LWqnxbg6+kbUFVkSQTw=) 10: IrnlAQa6M1A96HHiDasRUfVGqbQ.roa (hash: xgq5FcKSqvltS9tf8414o9TbLoeW+VIxwonV5uaPruw=) 11: LOKrZEDDVhVnSlJWlOLgQ5nPcM0.roa (hash: 2CeUB6HU9O6IboYshEwLG/p+jYhiKQ64ZtA5Y3idzrs=) 12: LbbsmkI3GqawDuN3XH6acheMxPw.roa (hash: BqWA3SYDAKLfoYVuIlyCld31iNDXkXCl/KtIv69jNUw=) 13: MRoUAROw4LH2qMua3FF0ivRRV1k.roa (hash: AM1ERkg9MkmZ5+MBy7Dj4XsMG8QwYDlhJ+3I/zu6fhk=) 14: OOYkNDqqDn1Unj3M-yrjf_S9VlU.roa (hash: oCGvjVeC4FC9ueufaA6bhsrNhxHd2pd306IA0XGXLfs=) 15: QJvPeNzFvPANqEbfkIc8-3zDQLs.roa (hash: felyBGjLHZhYiBLtOS5vAZwi9iqRNucwfxHrWgkMpWA=) 16: SxQI_3_Y-7ZpLPPNmq8yQolj8a4.roa (hash: /jpAQ90QqsOsi7QGg9C6CHgPGdkAjYPh2JAoZXEh1HE=) 17: TrJv_8fKTcS_JBhUlD0AOoYAAQA.roa (hash: f2kfoia7LPQzOEBZN5rSYHh6gWQLd4Eepwr2rpiJk9c=) 18: UhKvXl_m9nZBE-_rxYy3N0dwSmQ.roa (hash: MTKTbfYtfwy4jMu3+6j7vVJcG2UaV+0Ha/vAze0SZ3c=) 19: UlqMdzKNjKKz7GVAWhNQ0GeC6iE.roa (hash: vyjrNuYYOAehZPhyITO+Q5uPp2e1fJC2nVGYypgHEhg=) 20: W27NQHDSt-8QijhI1HYZsZz3Tfo.roa (hash: yNqWLj2CL2ilT9Yb7jbV3Mx92Lx6x20uHpMieW58ZKw=) 21: azJgsmdTDF3ELk-I19mAROWoKeE.roa (hash: oh/dgWtIFhqfW7S9fR3cOqTRk0csYkiTH2ALt2aoNhQ=) 22: eetoOfsHWTjLMfZd4vxj2wOaMbY.roa (hash: 5nUue4a1MqJN5QwbPYCQhcOixJJ8u3fjYV7s8ou0jm4=) 23: gnHztlWIUEkbfP_VpJDgy1aZ-q8.roa (hash: 8IEq5Il4ymKT0XR1RNf3aEeBm7YPqbccSq4VWhr/cXU=) 24: ly1aWzgKgTZvCsmq1YkFHrcGkZI.roa (hash: SyZ0oId3wfD6C8xRuw68jMVlCYOnuZUcIXZOE28ldLA=) 25: mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl (hash: YTNjmjGYgPdy3YDZhm0DL4ajWQgmGx7ieIO5Xj3LAl8=) 26: owD2F5PTIfIuOH1ResHlD6bHqfw.roa (hash: FwwD5nwDxuakINFZYh01TzvwO9abW6HL7q42RgazHtQ=) 27: rdyjilu40aDA8JWXXpkIm61tzQY.roa (hash: kUzYkjZ0Pr+4AdaDz/BIzjHecTU3TFmXSfUR1EA6v2E=) 28: s5Ai9g5eYYL8Bgx7ZWiTovq-xxE.roa (hash: BtApyhPvW43mqLBFeRPcKdPRw6DTk5KYzme6TZtVXns=) 29: sClmMBT_F-zHChOlRIEgdQPxP6k.roa (hash: ZhHXlBlX50DWtj7LBEqnVF6o2/ifQbmJsY9h3vjBI4Q=) 30: sMeA9xl8ZUuMKTOiIPGJ4CDhuVU.roa (hash: die5Hli6P/WXh1sfkmGYgfVjSONOwz0N0yrCW9dYC6M=) 31: sW7iMiWbwjQZ4JTr9eqMstrH0fY.roa (hash: fl3fF4gUVsev8QdVZnLOIu5u/5rzRWGxzrZRrAPXabs=) 32: tdG4gwbiCDTl2DZU4EFrqi-57Fc.roa (hash: HXWAwqtUcnHFWl+ei5dmWCUQV5Bz5IiYmO9iAB6ydxI=) 33: w23_TR4dcsNa31LTX8HVMLWRN_w.roa (hash: rfdkH9NAgBWGbrUS8/d8Rmrz5XY4u8KepKOXwjiNknw=) 34: wWRDfWHup1u0k3UjICPfUYIPuSY.roa (hash: yzH1M2v1GGWQRBkb4bWaRfefbh3n4eH1xoy+GhWge5A=) 35: wYxMdXSUEDjU1Cv3_j8xQDvi1yg.roa (hash: WyaQu0KrdFh/xZS6g5xHvbw77OL9Wai9qSXwo4Oty1g=) 36: xeXsIqRyNQ8tCJjLiS_SWkibat0.roa (hash: JByqNQHgtIum6mQVh/2h0Z7sUMkRsbp23RZvkf78Q8U=) 37: zA8L3Jvv9SEACC4CD6D8SPMP2Sk.roa (hash: Tngvw9PMaTEzEGc2VaqgRFM8azKZIG82ga5hio7GHN8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.mft rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:58:26:ae:7d:e4:6d:e5:e6:53:cd:24:e8:3e:bf:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe Validity Not Before: Dec 19 16:01:22 2025 GMT Not After : Dec 20 16:01:22 2025 GMT Subject: CN=8f752448596657eb2d3c14e469fe4cf4f298ee85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:91:1f:be:8c:30:23:e0:d8:a7:4d:19:8a:19: f8:43:01:6c:b8:cd:c1:6a:1c:b8:5f:00:f3:a7:c7: 31:28:ad:d4:79:c9:3f:65:79:b8:57:9d:56:77:fc: 86:a4:80:88:64:e3:8d:32:7f:c9:d9:a8:22:3f:da: 07:84:ae:f1:7f:e7:1f:29:b0:5a:dd:cb:d0:e5:0a: 24:a9:d4:7f:3e:81:7c:50:98:26:41:86:85:db:64: 36:cb:ed:1d:52:82:b1:4e:8e:65:1b:df:a7:7a:35: 85:05:7b:7a:c0:1c:ca:95:8a:10:70:37:6c:88:48: 85:43:19:2a:6b:3a:d4:d6:3a:9b:23:c7:d9:a7:52: 89:27:6a:e1:05:a6:cb:28:10:10:73:c9:10:de:c3: c3:aa:4f:0b:83:95:8f:12:07:31:9a:35:52:40:3b: 56:01:9a:17:90:61:91:3a:1a:9d:7e:6b:6d:54:01: d0:35:23:82:99:44:b9:c1:b5:c6:87:e9:cb:d5:5a: 39:8c:e8:90:cd:57:22:bc:d6:0a:1e:70:26:11:42: 34:0b:1a:58:98:c0:5e:fa:4c:d4:a6:c1:01:f9:ab: f5:40:d3:55:92:1b:7a:52:63:15:3c:22:a2:8c:f8: 30:cc:59:c4:25:3f:c6:69:9e:ca:03:de:72:6a:0d: 85:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:75:24:48:59:66:57:EB:2D:3C:14:E4:69:FE:4C:F4:F2:98:EE:85 X509v3 Authority Key Identifier: keyid:98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:0f:5f:36:5f:fd:6a:66:ab:cb:17:db:83:4b:dc:f9:ba:7f: 34:1e:41:e6:b7:0d:87:e2:81:9e:2a:f4:be:dc:4a:88:f7:cb: 82:e3:11:ee:e8:0a:a6:5f:2c:c7:90:c1:55:0c:28:4e:d6:1f: 8c:4f:85:07:62:d7:21:4f:cc:9b:77:4a:24:f5:22:52:ea:ae: 84:e1:89:a8:93:5f:b9:f2:34:5d:5c:9c:a2:a8:9f:b5:4c:ce: a4:0e:80:4d:87:41:b6:17:8e:bb:5b:89:2d:7e:8c:b8:6f:cc: 0b:a2:93:5d:af:6d:e5:e5:dd:24:41:bc:db:1a:e6:31:fe:1b: 9a:53:79:7f:ae:fd:8b:51:ad:75:33:06:13:5f:87:be:e6:a7: fe:fc:64:b9:77:c2:95:17:61:7e:fd:88:61:2c:02:4d:51:a9: 57:b6:3b:89:b8:84:95:b1:c5:f4:ae:3f:37:42:8b:9e:22:3d: 86:d1:78:03:21:b6:aa:1d:08:e6:f1:07:78:e6:df:91:6b:34: 5b:c1:f7:40:97:96:eb:7a:2d:cc:c2:72:fd:17:6b:c8:a6:58: 43:f6:26:21:28:d5:c1:10:a2:0a:8c:e6:ce:ae:2f:61:6f:00: b3:60:fa:1d:79:26:d9:6c:65:f9:39:8e:b5:67:3a:89:74:95: 13:5a:e6:26 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3WCaufeRt5eZTzSToPr+DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk4MmNmODA5YzBlM2U4ZTU1NTJmOWQwZGQyZTI3ZTBkZDJk OGRhYmUwHhcNMjUxMjE5MTYwMTIyWhcNMjUxMjIwMTYwMTIyWjAzMTEwLwYDVQQD Eyg4Zjc1MjQ0ODU5NjY1N2ViMmQzYzE0ZTQ2OWZlNGNmNGYyOThlZTg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwZEfvowwI+DYp00Zihn4QwFsuM3B ahy4XwDzp8cxKK3Ueck/ZXm4V51Wd/yGpICIZOONMn/J2agiP9oHhK7xf+cfKbBa 3cvQ5QokqdR/PoF8UJgmQYaF22Q2y+0dUoKxTo5lG9+nejWFBXt6wBzKlYoQcDds iEiFQxkqazrU1jqbI8fZp1KJJ2rhBabLKBAQc8kQ3sPDqk8Lg5WPEgcxmjVSQDtW AZoXkGGROhqdfmttVAHQNSOCmUS5wbXGh+nL1Vo5jOiQzVcivNYKHnAmEUI0CxpY mMBe+kzUpsEB+av1QNNVkht6UmMVPCKijPgwzFnEJT/GaZ7KA95yag2FJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI91JEhZZlfrLTwU5Gn+TPTymO6FMB8GA1UdIwQY MBaAFJgs+AnA4+jlVS+dDdLifg3S2Nq+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbUN6NENjRGo2T1ZWTDUwTjB1Si1EZExZMnI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC82MTY4ZDctOTQ2Yy00NTc0LTkxZWEt ODJhZDE0NTU1ZWFhLzEvbUN6NENjRGo2T1ZWTDUwTjB1Si1EZExZMnI0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC82MTY4ZDctOTQ2Yy00NTc0LTkxZWEtODJhZDE0NTU1ZWFh LzEvbUN6NENjRGo2T1ZWTDUwTjB1Si1EZExZMnI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfQ9fNl/9 amaryxfbg0vc+bp/NB5B5rcNh+KBnir0vtxKiPfLguMR7ugKpl8sx5DBVQwoTtYf jE+FB2LXIU/Mm3dKJPUiUuquhOGJqJNfufI0XVycoqiftUzOpA6ATYdBtheOu1uJ LX6MuG/MC6KTXa9t5eXdJEG82xrmMf4bmlN5f679i1GtdTMGE1+Hvuan/vxkuXfC lRdhfv2IYSwCTVGpV7Y7ibiElbHF9K4/N0KLniI9htF4AyG2qh0I5vEHeObfkWs0 W8H3QJeW63otzMJy/RdryKZYQ/YmISjVwRCiCozmzq4vYW8As2D6HXkm2Wxl+TmO tWc6iXSVE1rmJg== -----END CERTIFICATE-----Generated at Fri Dec 19 23:08:39 2025 by rpki-client