This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/bfdda9-2742-4b2f-85b6-ef9c95276932/1/mR5LF54JU7nsxYWtmFmgC-NWgAE.mft File: mR5LF54JU7nsxYWtmFmgC-NWgAE.mft (raw, json) Hash identifier: B1PTArBdJzhXKXcjR57n4+bAOksalH+cO+tICpX3I4w= Subject key identifier: EB:16:39:43:BA:3A:F4:58:2D:D8:6A:A6:DD:B9:CA:E1:BF:B7:80:AA Authority key identifier: 99:1E:4B:17:9E:09:53:B9:EC:C5:85:AD:98:59:A0:0B:E3:56:80:01 Certificate issuer: /CN=991e4b179e0953b9ecc585ad9859a00be3568001 Certificate serial: 019B51BCDFF986A083638F0ACB66147AE41E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mR5LF54JU7nsxYWtmFmgC-NWgAE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/bfdda9-2742-4b2f-85b6-ef9c95276932/1/mR5LF54JU7nsxYWtmFmgC-NWgAE.mft Manifest number: 1793 Signing time: Wed 24 Dec 2025 19:01:31 +0000 Manifest this update: Wed 24 Dec 2025 19:01:31 +0000 Manifest next update: Thu 25 Dec 2025 19:01:31 +0000 Files and hashes: 1: 963pl4kMqERhlH5zQNINJ9q-oB4.roa (hash: BOAkYmCmSJL+jWIjxEb3nC4tx8Y5C6plreJ8j+irwHk=) 2: 9nSaJxHrbQ3QEW5mfZiYPpI-ugo.roa (hash: wy2LzSvu/dsXfdQ3akCDVPoEcY+5eaESxs8S9jGdusU=) 3: mR5LF54JU7nsxYWtmFmgC-NWgAE.crl (hash: VIFoLWPGJWi4dI0D1jPkfW4pIgHnDFLZOnmFy7ffNLE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/bfdda9-2742-4b2f-85b6-ef9c95276932/1/mR5LF54JU7nsxYWtmFmgC-NWgAE.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/bfdda9-2742-4b2f-85b6-ef9c95276932/1/mR5LF54JU7nsxYWtmFmgC-NWgAE.mft rsync://rpki.ripe.net/repository/DEFAULT/mR5LF54JU7nsxYWtmFmgC-NWgAE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 14:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:51:bc:df:f9:86:a0:83:63:8f:0a:cb:66:14:7a:e4:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=991e4b179e0953b9ecc585ad9859a00be3568001 Validity Not Before: Dec 24 19:01:31 2025 GMT Not After : Dec 25 19:01:31 2025 GMT Subject: CN=eb163943ba3af4582dd86aa6ddb9cae1bfb780aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:6b:42:1a:66:c4:a2:24:f7:f2:2a:4c:dd:15: 27:ce:db:e8:e8:bb:7f:0a:67:d5:40:08:45:26:e6: 8d:eb:85:1c:da:4f:b7:dd:58:2f:d0:f0:0a:43:cb: ba:e9:79:8a:3c:7d:a0:67:d1:25:75:da:a1:7d:83: 9c:14:bc:94:5c:9f:e8:de:b8:36:50:e8:3d:87:4c: 97:61:c0:e1:25:50:42:25:d3:6b:c3:2b:11:4b:85: 5b:6d:3f:7d:ec:0c:53:0f:0f:70:78:80:76:d4:1d: a0:e7:a6:e0:9c:17:fb:a9:0b:c0:a0:54:e9:c4:f5: 91:61:16:57:4e:89:8f:c0:e2:83:8c:05:44:f8:cf: 11:a2:1f:29:a5:40:c1:af:7e:c3:93:b2:c7:3a:26: 33:28:65:fc:c3:67:3a:27:4c:33:12:ff:52:ac:60: 44:03:65:e1:ee:e1:df:6d:2b:ff:d0:3d:6e:06:63: 6b:1a:79:a2:2f:01:7e:af:76:04:81:60:c0:9c:90: 37:1a:00:e9:e6:e6:d7:42:d8:f8:55:8a:84:bf:8b: 57:42:ea:58:e0:40:b0:f1:a2:08:41:09:58:92:ac: 33:2f:d4:76:48:97:ea:20:db:a7:aa:fb:80:9a:7d: 6c:a5:cc:50:9c:ec:09:97:9f:7b:6e:77:aa:cc:a0: 81:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:16:39:43:BA:3A:F4:58:2D:D8:6A:A6:DD:B9:CA:E1:BF:B7:80:AA X509v3 Authority Key Identifier: keyid:99:1E:4B:17:9E:09:53:B9:EC:C5:85:AD:98:59:A0:0B:E3:56:80:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mR5LF54JU7nsxYWtmFmgC-NWgAE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/bfdda9-2742-4b2f-85b6-ef9c95276932/1/mR5LF54JU7nsxYWtmFmgC-NWgAE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/bfdda9-2742-4b2f-85b6-ef9c95276932/1/mR5LF54JU7nsxYWtmFmgC-NWgAE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:4e:e2:29:d1:53:3d:9d:22:21:13:c2:bb:75:64:68:c6:aa: 32:a8:55:cc:a8:08:ed:97:bc:6f:4d:a6:e6:37:36:2b:55:94: 6d:92:da:a3:fb:5d:d7:81:f6:09:a1:cb:90:8d:a1:ff:b0:8f: 1f:68:fb:ef:9d:1d:2b:36:4b:ff:db:a4:6a:4f:23:01:e6:f4: 4a:e1:b1:77:e2:d4:c8:bc:04:08:d0:57:14:c8:15:75:5f:dd: 9a:f7:d8:64:32:ac:99:fd:fd:a2:78:46:5e:3e:9d:35:7e:07: 9b:ad:e7:08:76:bf:f5:78:40:a4:fb:b9:c2:6f:0d:9f:9f:6c: 67:b3:5d:b7:91:38:20:60:ca:1a:f4:21:3b:6f:2c:68:bb:ea: b5:f4:00:1f:b4:d2:4e:1f:b2:9e:03:8c:de:6b:d5:44:93:24: 2d:85:11:ed:5c:01:be:c6:f8:8b:02:a9:67:a4:49:8a:56:51: 00:10:c9:fb:ba:60:5a:9c:9c:5e:53:4d:a1:a9:58:d9:ad:52: ac:c3:fa:83:f7:cf:9a:1e:75:db:f2:9a:f7:b0:49:bc:d0:12: 70:f0:11:cd:5f:fc:21:1b:af:f8:cc:16:66:91:09:b1:b0:5b: 9d:12:22:4a:b4:b3:f2:10:38:37:09:71:65:14:3a:6f:58:34: 36:33:f0:37 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtRvN/5hqCDY48Ky2YUeuQeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk5MWU0YjE3OWUwOTUzYjllY2M1ODVhZDk4NTlhMDBiZTM1 NjgwMDEwHhcNMjUxMjI0MTkwMTMxWhcNMjUxMjI1MTkwMTMxWjAzMTEwLwYDVQQD EyhlYjE2Mzk0M2JhM2FmNDU4MmRkODZhYTZkZGI5Y2FlMWJmYjc4MGFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxGtCGmbEoiT38ipM3RUnztvo6Lt/ CmfVQAhFJuaN64Uc2k+33Vgv0PAKQ8u66XmKPH2gZ9ElddqhfYOcFLyUXJ/o3rg2 UOg9h0yXYcDhJVBCJdNrwysRS4VbbT997AxTDw9weIB21B2g56bgnBf7qQvAoFTp xPWRYRZXTomPwOKDjAVE+M8Roh8ppUDBr37Dk7LHOiYzKGX8w2c6J0wzEv9SrGBE A2Xh7uHfbSv/0D1uBmNrGnmiLwF+r3YEgWDAnJA3GgDp5ubXQtj4VYqEv4tXQupY 4ECw8aIIQQlYkqwzL9R2SJfqINunqvuAmn1spcxQnOwJl597bneqzKCBPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOsWOUO6OvRYLdhqpt25yuG/t4CqMB8GA1UdIwQY MBaAFJkeSxeeCVO57MWFrZhZoAvjVoABMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbVI1TEY1NEpVN25zeFlXdG1GbWdDLU5XZ0FFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9iZmRkYTktMjc0Mi00YjJmLTg1YjYt ZWY5Yzk1Mjc2OTMyLzEvbVI1TEY1NEpVN25zeFlXdG1GbWdDLU5XZ0FFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS9iZmRkYTktMjc0Mi00YjJmLTg1YjYtZWY5Yzk1Mjc2OTMy LzEvbVI1TEY1NEpVN25zeFlXdG1GbWdDLU5XZ0FFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOE7iKdFT PZ0iIRPCu3VkaMaqMqhVzKgI7Ze8b02m5jc2K1WUbZLao/td14H2CaHLkI2h/7CP H2j7750dKzZL/9ukak8jAeb0SuGxd+LUyLwECNBXFMgVdV/dmvfYZDKsmf39onhG Xj6dNX4Hm63nCHa/9XhApPu5wm8Nn59sZ7Ndt5E4IGDKGvQhO28saLvqtfQAH7TS Th+yngOM3mvVRJMkLYUR7VwBvsb4iwKpZ6RJilZRABDJ+7pgWpycXlNNoalY2a1S rMP6g/fPmh512/Ka97BJvNAScPARzV/8IRuv+MwWZpEJsbBbnRIiSrSz8hA4Nwlx ZRQ6b1g0NjPwNw== -----END CERTIFICATE-----Generated at Wed Dec 24 20:32:11 2025 by rpki-client