This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/c920da-1df8-4927-8831-ab0664e63fb6/1/mSUv9_Tc9iI00i-GoRNbNEkj2qs.mft File: mSUv9_Tc9iI00i-GoRNbNEkj2qs.mft (raw, json) Hash identifier: ScPfoVoRRPEIXPGyTMNQlHQ+5OrbnoafTkjJj75qPoE= Subject key identifier: 24:11:39:1F:E0:B3:FF:F5:C5:7D:C4:43:8B:8A:97:D0:11:A3:F9:AC Authority key identifier: 99:25:2F:F7:F4:DC:F6:22:34:D2:2F:86:A1:13:5B:34:49:23:DA:AB Certificate issuer: /CN=99252ff7f4dcf62234d22f86a1135b344923daab Certificate serial: 019B56072E0DAB6D97111F4328B680017639 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mSUv9_Tc9iI00i-GoRNbNEkj2qs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/c920da-1df8-4927-8831-ab0664e63fb6/1/mSUv9_Tc9iI00i-GoRNbNEkj2qs.mft Manifest number: 0A4C Signing time: Thu 25 Dec 2025 15:01:09 +0000 Manifest this update: Thu 25 Dec 2025 15:01:09 +0000 Manifest next update: Fri 26 Dec 2025 15:01:09 +0000 Files and hashes: 1: 7qi71OAs6leux75HGJJKxd48zLc.roa (hash: z9Iokxbw9AVC6K3SxkWdhXBi3p5Bja4hYfL/NkWRSQw=) 2: mSUv9_Tc9iI00i-GoRNbNEkj2qs.crl (hash: QbsnRJ5rtXFTcun7GO5ulkbyUPus5XLPgVzdE6+Mh1w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/c920da-1df8-4927-8831-ab0664e63fb6/1/mSUv9_Tc9iI00i-GoRNbNEkj2qs.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/c920da-1df8-4927-8831-ab0664e63fb6/1/mSUv9_Tc9iI00i-GoRNbNEkj2qs.mft rsync://rpki.ripe.net/repository/DEFAULT/mSUv9_Tc9iI00i-GoRNbNEkj2qs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 10:17:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:56:07:2e:0d:ab:6d:97:11:1f:43:28:b6:80:01:76:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99252ff7f4dcf62234d22f86a1135b344923daab Validity Not Before: Dec 25 15:01:09 2025 GMT Not After : Dec 26 15:01:09 2025 GMT Subject: CN=2411391fe0b3fff5c57dc4438b8a97d011a3f9ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:33:db:f5:4f:48:04:0d:9f:ef:16:f2:11:40: 9d:00:8a:dc:e9:5a:09:a9:cb:e8:d3:3a:90:99:bb: d4:e9:28:58:e2:5e:de:31:b0:31:fa:97:ac:85:da: ef:f1:c8:0c:79:6c:be:de:8a:71:70:5b:32:ea:c6: f2:56:9c:10:ff:6f:a8:03:0a:c1:dc:5b:77:1a:45: 64:9b:35:0c:24:7a:81:74:6d:ab:27:7a:6b:c9:3d: 97:fa:ec:e5:b8:70:f9:78:7f:6f:d0:09:6e:00:7f: 4c:c9:b5:4d:94:9b:20:dd:3f:4e:5b:ed:21:bc:94: c5:1d:5b:cb:e3:e3:8e:5c:42:56:11:74:f3:d2:21: 1d:ff:39:a4:dd:ef:02:4c:6d:89:62:64:5c:9d:81: d5:49:3d:90:3e:c0:5c:52:c2:22:dd:8f:78:43:4c: 56:28:2c:64:ae:c2:5e:ff:36:3a:2a:ce:2b:6a:e0: 33:2f:df:b9:36:f5:00:c2:46:fe:45:37:e2:f8:21: 2e:6e:61:64:eb:a8:01:bb:b3:74:13:5a:8a:b4:b1: d8:07:76:49:ac:ab:5c:89:ab:fd:e1:b2:f7:75:a7: a6:fe:a9:ce:3e:9e:09:17:a9:99:0e:81:a5:f8:9d: c8:1b:55:9f:df:8c:de:ae:48:98:7e:3a:19:c6:ab: f1:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:11:39:1F:E0:B3:FF:F5:C5:7D:C4:43:8B:8A:97:D0:11:A3:F9:AC X509v3 Authority Key Identifier: keyid:99:25:2F:F7:F4:DC:F6:22:34:D2:2F:86:A1:13:5B:34:49:23:DA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mSUv9_Tc9iI00i-GoRNbNEkj2qs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/c920da-1df8-4927-8831-ab0664e63fb6/1/mSUv9_Tc9iI00i-GoRNbNEkj2qs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/c920da-1df8-4927-8831-ab0664e63fb6/1/mSUv9_Tc9iI00i-GoRNbNEkj2qs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:fd:04:a9:bf:c2:f1:90:a9:c6:4b:21:dd:c9:06:d4:d2:e5: 73:1f:99:7f:17:97:2a:f8:b7:6a:7c:39:bc:9e:0e:57:de:b4: 31:4f:d6:c3:97:aa:75:fa:78:2d:ce:bd:3c:24:c3:15:fd:51: 3f:0e:27:4a:66:26:49:39:3b:bf:10:8c:1d:d9:61:bc:ca:88: be:4d:af:4d:fb:65:bb:5b:56:b2:9e:e4:05:aa:59:28:9f:b4: bc:cb:d7:32:0b:46:25:41:15:f1:cb:5f:13:ef:82:c0:bd:3c: 7c:a8:3f:c0:f3:63:18:90:30:b7:c1:3e:bb:07:cd:ab:c9:49: 73:09:9a:de:a8:3b:fa:48:0f:fa:c2:aa:d6:2c:e4:ce:0b:2e: 30:85:96:82:0d:74:2c:c9:30:e4:8e:95:fd:fa:2b:3f:5c:94: 42:49:37:c7:60:a5:1a:c1:c6:78:93:5a:ba:e1:ac:35:99:a4: b5:09:dd:9e:4b:cf:03:43:eb:7f:6c:7b:a1:a4:5f:4d:ee:56: 99:3f:5c:88:4e:91:7c:70:e9:f7:b9:48:cf:c5:6a:fe:67:47: ba:e8:5f:b8:a9:23:aa:dc:a7:c8:aa:96:3c:d0:f3:ee:d1:bd: aa:cf:3a:e6:42:5d:e5:86:6f:ad:6c:a4:4f:73:a6:bb:d5:0a: c6:72:29:6a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtWBy4Nq22XER9DKLaAAXY5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk5MjUyZmY3ZjRkY2Y2MjIzNGQyMmY4NmExMTM1YjM0NDky M2RhYWIwHhcNMjUxMjI1MTUwMTA5WhcNMjUxMjI2MTUwMTA5WjAzMTEwLwYDVQQD EygyNDExMzkxZmUwYjNmZmY1YzU3ZGM0NDM4YjhhOTdkMDExYTNmOWFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApzPb9U9IBA2f7xbyEUCdAIrc6VoJ qcvo0zqQmbvU6ShY4l7eMbAx+peshdrv8cgMeWy+3opxcFsy6sbyVpwQ/2+oAwrB 3Ft3GkVkmzUMJHqBdG2rJ3pryT2X+uzluHD5eH9v0AluAH9MybVNlJsg3T9OW+0h vJTFHVvL4+OOXEJWEXTz0iEd/zmk3e8CTG2JYmRcnYHVST2QPsBcUsIi3Y94Q0xW KCxkrsJe/zY6Ks4rauAzL9+5NvUAwkb+RTfi+CEubmFk66gBu7N0E1qKtLHYB3ZJ rKtciav94bL3daem/qnOPp4JF6mZDoGl+J3IG1Wf34zerkiYfjoZxqvxbQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCQROR/gs//1xX3EQ4uKl9ARo/msMB8GA1UdIwQY MBaAFJklL/f03PYiNNIvhqETWzRJI9qrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbVNVdjlfVGM5aUkwMGktR29STmJORWtqMnFzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9jOTIwZGEtMWRmOC00OTI3LTg4MzEt YWIwNjY0ZTYzZmI2LzEvbVNVdjlfVGM5aUkwMGktR29STmJORWtqMnFzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi9jOTIwZGEtMWRmOC00OTI3LTg4MzEtYWIwNjY0ZTYzZmI2 LzEvbVNVdjlfVGM5aUkwMGktR29STmJORWtqMnFzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd/0Eqb/C 8ZCpxksh3ckG1NLlcx+ZfxeXKvi3anw5vJ4OV960MU/Ww5eqdfp4Lc69PCTDFf1R Pw4nSmYmSTk7vxCMHdlhvMqIvk2vTftlu1tWsp7kBapZKJ+0vMvXMgtGJUEV8ctf E++CwL08fKg/wPNjGJAwt8E+uwfNq8lJcwma3qg7+kgP+sKq1izkzgsuMIWWgg10 LMkw5I6V/forP1yUQkk3x2ClGsHGeJNauuGsNZmktQndnkvPA0Prf2x7oaRfTe5W mT9ciE6RfHDp97lIz8Vq/mdHuuhfuKkjqtynyKqWPNDz7tG9qs865kJd5YZvrWyk T3Omu9UKxnIpag== -----END CERTIFICATE-----Generated at Thu Dec 25 16:02:07 2025 by rpki-client