This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/bfdda9-2742-4b2f-85b6-ef9c95276932/1/mR5LF54JU7nsxYWtmFmgC-NWgAE.mft File: mR5LF54JU7nsxYWtmFmgC-NWgAE.mft (raw, json) Hash identifier: /0VBBgJlbwrZ2epslrNPCKj6tC/Wk47ByiNS+1JyCvU= Subject key identifier: 79:E3:34:9B:03:3A:8E:B0:7B:0B:C2:92:41:91:89:B4:78:B1:7A:09 Authority key identifier: 99:1E:4B:17:9E:09:53:B9:EC:C5:85:AD:98:59:A0:0B:E3:56:80:01 Certificate issuer: /CN=991e4b179e0953b9ecc585ad9859a00be3568001 Certificate serial: 019B3E6C1C4DE18825B1766BE7F106727605 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mR5LF54JU7nsxYWtmFmgC-NWgAE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/bfdda9-2742-4b2f-85b6-ef9c95276932/1/mR5LF54JU7nsxYWtmFmgC-NWgAE.mft Manifest number: 1789 Signing time: Sun 21 Dec 2025 01:00:31 +0000 Manifest this update: Sun 21 Dec 2025 01:00:31 +0000 Manifest next update: Mon 22 Dec 2025 01:00:31 +0000 Files and hashes: 1: 963pl4kMqERhlH5zQNINJ9q-oB4.roa (hash: BOAkYmCmSJL+jWIjxEb3nC4tx8Y5C6plreJ8j+irwHk=) 2: 9nSaJxHrbQ3QEW5mfZiYPpI-ugo.roa (hash: wy2LzSvu/dsXfdQ3akCDVPoEcY+5eaESxs8S9jGdusU=) 3: mR5LF54JU7nsxYWtmFmgC-NWgAE.crl (hash: E5x9J5qvl4zE6tnunhef8+4RGTt6LUx1RYmk5g+gJ0Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/bfdda9-2742-4b2f-85b6-ef9c95276932/1/mR5LF54JU7nsxYWtmFmgC-NWgAE.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/bfdda9-2742-4b2f-85b6-ef9c95276932/1/mR5LF54JU7nsxYWtmFmgC-NWgAE.mft rsync://rpki.ripe.net/repository/DEFAULT/mR5LF54JU7nsxYWtmFmgC-NWgAE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:6c:1c:4d:e1:88:25:b1:76:6b:e7:f1:06:72:76:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=991e4b179e0953b9ecc585ad9859a00be3568001 Validity Not Before: Dec 21 01:00:31 2025 GMT Not After : Dec 22 01:00:31 2025 GMT Subject: CN=79e3349b033a8eb07b0bc292419189b478b17a09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:d2:d2:3c:2d:ae:7c:b2:6e:0f:84:80:59:5f: 71:bc:c1:93:23:36:19:9c:90:48:86:40:ec:35:43: 13:10:b4:79:4c:12:17:cb:2c:ac:2d:69:48:62:b2: dd:09:dd:1c:57:29:4f:3c:d4:7b:63:9d:f7:a1:46: 40:2f:a1:f3:f5:3b:4b:64:a9:e7:7e:db:c1:c9:f3: ff:5b:65:fc:73:9c:2e:36:51:06:7f:52:1a:70:61: be:09:df:5e:be:2d:fb:63:d3:55:69:6d:dd:b5:f7: 30:a1:db:b3:61:11:ef:15:38:17:24:e3:3c:c0:09: 2a:fb:15:78:d5:97:f3:42:c5:b3:e5:6a:a8:32:85: b0:07:25:13:d6:f0:8a:54:b1:cb:61:8a:09:06:ec: aa:d3:e5:39:83:5c:24:ae:46:b5:e6:cd:b7:7e:36: 1b:ea:64:c3:3d:78:28:b8:81:3d:f6:32:80:0a:41: 74:e4:50:47:1b:e4:d8:a2:7e:15:23:2d:bb:62:a8: a8:b8:97:ad:1a:5a:7a:42:9f:e8:46:9c:4c:4c:f6: 90:09:72:f1:4b:08:ae:74:72:f3:7a:f6:e3:17:af: ac:d2:cb:37:69:d2:50:90:96:bf:d7:27:fe:ab:e6: ca:b0:db:f2:53:fc:1c:ca:be:5e:00:14:8e:2f:be: d4:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:E3:34:9B:03:3A:8E:B0:7B:0B:C2:92:41:91:89:B4:78:B1:7A:09 X509v3 Authority Key Identifier: keyid:99:1E:4B:17:9E:09:53:B9:EC:C5:85:AD:98:59:A0:0B:E3:56:80:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mR5LF54JU7nsxYWtmFmgC-NWgAE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/bfdda9-2742-4b2f-85b6-ef9c95276932/1/mR5LF54JU7nsxYWtmFmgC-NWgAE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/bfdda9-2742-4b2f-85b6-ef9c95276932/1/mR5LF54JU7nsxYWtmFmgC-NWgAE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:7b:17:3f:ba:16:61:ea:1c:67:0e:54:77:da:4c:33:95:7f: 47:9e:38:34:c6:84:a5:8f:bb:46:e9:bb:5c:e8:a7:7f:13:4f: fb:d0:12:1e:c4:7f:2b:91:a0:95:82:be:f6:4c:e6:7c:75:31: 26:af:e8:f9:34:cf:1b:ee:55:14:63:8a:e8:aa:90:09:cf:7f: 92:5f:6d:62:ec:ab:c3:c6:6b:03:80:b6:dd:8b:06:df:66:33: f2:b3:e3:dd:1c:05:9a:a2:9c:87:2a:d3:b0:17:4a:44:15:40: 44:23:b4:2c:45:9e:5e:98:11:6c:af:65:d5:31:80:4e:9b:28: 03:23:91:02:37:85:77:3b:c6:96:cd:28:8c:59:59:1e:5a:f6: ca:28:56:14:a2:29:e8:9e:c0:79:ed:6c:5d:30:81:f6:4b:2e: 08:44:ea:9a:93:54:81:a8:d4:04:97:61:6c:11:6b:a8:11:af: fe:10:56:28:02:85:4c:da:7d:e7:1e:dc:b6:db:37:2a:0c:80: 7d:09:1e:f4:62:f0:00:2a:2d:ea:37:41:3e:03:00:38:de:19: db:2b:a1:ee:67:0d:b0:9e:42:11:a1:72:c4:09:32:ec:fc:6d: 59:17:c9:24:fe:7c:1d:c2:6e:a7:60:f3:24:1e:65:de:a1:fe: e8:27:a2:d4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+bBxN4YglsXZr5/EGcnYFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk5MWU0YjE3OWUwOTUzYjllY2M1ODVhZDk4NTlhMDBiZTM1 NjgwMDEwHhcNMjUxMjIxMDEwMDMxWhcNMjUxMjIyMDEwMDMxWjAzMTEwLwYDVQQD Eyg3OWUzMzQ5YjAzM2E4ZWIwN2IwYmMyOTI0MTkxODliNDc4YjE3YTA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg9LSPC2ufLJuD4SAWV9xvMGTIzYZ nJBIhkDsNUMTELR5TBIXyyysLWlIYrLdCd0cVylPPNR7Y533oUZAL6Hz9TtLZKnn ftvByfP/W2X8c5wuNlEGf1IacGG+Cd9evi37Y9NVaW3dtfcwoduzYRHvFTgXJOM8 wAkq+xV41ZfzQsWz5WqoMoWwByUT1vCKVLHLYYoJBuyq0+U5g1wkrka15s23fjYb 6mTDPXgouIE99jKACkF05FBHG+TYon4VIy27YqiouJetGlp6Qp/oRpxMTPaQCXLx SwiudHLzevbjF6+s0ss3adJQkJa/1yf+q+bKsNvyU/wcyr5eABSOL77UIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHnjNJsDOo6wewvCkkGRibR4sXoJMB8GA1UdIwQY MBaAFJkeSxeeCVO57MWFrZhZoAvjVoABMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbVI1TEY1NEpVN25zeFlXdG1GbWdDLU5XZ0FFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9iZmRkYTktMjc0Mi00YjJmLTg1YjYt ZWY5Yzk1Mjc2OTMyLzEvbVI1TEY1NEpVN25zeFlXdG1GbWdDLU5XZ0FFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS9iZmRkYTktMjc0Mi00YjJmLTg1YjYtZWY5Yzk1Mjc2OTMy LzEvbVI1TEY1NEpVN25zeFlXdG1GbWdDLU5XZ0FFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX3sXP7oW YeocZw5Ud9pMM5V/R544NMaEpY+7Rum7XOinfxNP+9ASHsR/K5GglYK+9kzmfHUx Jq/o+TTPG+5VFGOK6KqQCc9/kl9tYuyrw8ZrA4C23YsG32Yz8rPj3RwFmqKchyrT sBdKRBVARCO0LEWeXpgRbK9l1TGATpsoAyORAjeFdzvGls0ojFlZHlr2yihWFKIp 6J7Aee1sXTCB9ksuCETqmpNUgajUBJdhbBFrqBGv/hBWKAKFTNp95x7ctts3KgyA fQke9GLwACot6jdBPgMAON4Z2yuh7mcNsJ5CEaFyxAky7PxtWRfJJP58HcJup2Dz JB5l3qH+6Cei1A== -----END CERTIFICATE-----Generated at Sun Dec 21 08:59:14 2025 by rpki-client