This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/0251f2-a1bb-44fb-b908-48d5ff4ba255/1/miSyfZ899uFOvHnhRui-MnVL-AA.mft File: miSyfZ899uFOvHnhRui-MnVL-AA.mft (raw, json) Hash identifier: hQ9W7yge3aYmtXJxUFflbWdu31mwAmavuZ5ckzLUIOw= Subject key identifier: 5C:28:32:1B:30:9A:B2:F2:3C:36:9F:B9:9B:EE:E1:30:F3:9A:F6:2D Authority key identifier: 9A:24:B2:7D:9F:3D:F6:E1:4E:BC:79:E1:46:E8:BE:32:75:4B:F8:00 Certificate issuer: /CN=9a24b27d9f3df6e14ebc79e146e8be32754bf800 Certificate serial: 019B39B42D8EF29788E49073DD52643F4FC4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/miSyfZ899uFOvHnhRui-MnVL-AA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/0251f2-a1bb-44fb-b908-48d5ff4ba255/1/miSyfZ899uFOvHnhRui-MnVL-AA.mft Manifest number: 0945 Signing time: Sat 20 Dec 2025 03:01:07 +0000 Manifest this update: Sat 20 Dec 2025 03:01:07 +0000 Manifest next update: Sun 21 Dec 2025 03:01:07 +0000 Files and hashes: 1: 3lMXvqEAcbLn_TGG01LICTbLW08.roa (hash: JLchOQ88ldGsLdqg4fteLfsJxI+Ai8g0uoHIiX7T5co=) 2: 6vvf0gyYCc5zR3uujS0xGb6b3n8.roa (hash: zngkJv70qUXqPNjBBuw0RYlE38iva+rkrXYPwV7JMdk=) 3: 8H8YfO4JdXnSw0HuSXWzJgxZXwk.roa (hash: gN43EGY/rRCHwPUl1nynP7n+Hz0mIShB9EUghrm5zz0=) 4: 9SiGYE_ulhQ3IAEjHE9ue_UFCiU.roa (hash: 7fBZliJyV/oVHsWlKgszqQM/1PPTrvyNsIdq+xa6Zt0=) 5: _3sIjV0NzBRBUXOfv_g2UXCkao8.roa (hash: cQ3AbgfUz8fqilC4hhCtVaH0mIMtsn/x+ig6JhvdshA=) 6: fyqlzqNhdNo_30Z-vFmbQ-nbTKY.roa (hash: iWvAjIMv+MY94DgZD12TggkG1vfalYVxgXLVuLLTUTM=) 7: miSyfZ899uFOvHnhRui-MnVL-AA.crl (hash: HCAEWra6Tbru6DlYXKIbmEd+rM73EIR+kSiHcMKUo6o=) 8: xhHuufE4KuZkDqsJ_1MxD3GIx8M.roa (hash: /zwCpAsX0Hsr+2gnOWP4YOqrQ5dGeSMwHT7AFOWoMJo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/0251f2-a1bb-44fb-b908-48d5ff4ba255/1/miSyfZ899uFOvHnhRui-MnVL-AA.crl rsync://rpki.ripe.net/repository/DEFAULT/da/0251f2-a1bb-44fb-b908-48d5ff4ba255/1/miSyfZ899uFOvHnhRui-MnVL-AA.mft rsync://rpki.ripe.net/repository/DEFAULT/miSyfZ899uFOvHnhRui-MnVL-AA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:b4:2d:8e:f2:97:88:e4:90:73:dd:52:64:3f:4f:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a24b27d9f3df6e14ebc79e146e8be32754bf800 Validity Not Before: Dec 20 03:01:07 2025 GMT Not After : Dec 21 03:01:07 2025 GMT Subject: CN=5c28321b309ab2f23c369fb99beee130f39af62d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:81:f5:21:be:b2:b8:1e:24:bd:56:88:c0:97: fe:3f:44:b8:1b:90:88:22:cb:8e:d8:10:99:7b:55: c0:fe:41:ef:26:b4:b4:f5:e6:ac:84:29:df:ac:f9: aa:29:8e:95:30:7a:6d:51:cc:7f:f2:df:cd:43:4d: 88:50:da:6e:6f:e1:b4:e1:a2:13:ba:8e:3a:44:c3: 77:84:48:db:2c:49:9c:ea:76:9b:32:e1:91:34:6c: d2:9b:81:99:d4:96:af:f9:2d:18:2e:fb:e6:fd:1c: 3a:42:0b:c6:5a:d8:2b:8e:97:1c:5f:20:f5:4a:19: f4:e2:85:81:48:04:e1:32:bd:88:8a:1f:4d:6d:93: cc:f8:7f:ee:84:c2:68:4a:1f:8b:7a:1d:fb:6c:b0: 10:64:49:78:e0:90:38:97:1e:c2:15:91:22:bc:7b: 18:92:80:37:f6:14:3b:30:6d:23:59:ec:53:cd:cc: a9:21:bb:5c:89:cf:b5:15:1f:92:64:24:a2:57:03: a2:7e:bf:ff:d9:3d:95:51:be:13:c8:35:f0:8b:4f: 01:0d:a2:3a:5b:52:1e:49:42:2f:dd:43:b8:88:eb: 9d:64:b2:0a:21:5a:bf:f5:80:33:c3:f1:6b:f4:49: 91:79:4e:c7:c0:d2:9a:46:56:f0:7c:99:fb:1f:0d: 75:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:28:32:1B:30:9A:B2:F2:3C:36:9F:B9:9B:EE:E1:30:F3:9A:F6:2D X509v3 Authority Key Identifier: keyid:9A:24:B2:7D:9F:3D:F6:E1:4E:BC:79:E1:46:E8:BE:32:75:4B:F8:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/miSyfZ899uFOvHnhRui-MnVL-AA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/0251f2-a1bb-44fb-b908-48d5ff4ba255/1/miSyfZ899uFOvHnhRui-MnVL-AA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/da/0251f2-a1bb-44fb-b908-48d5ff4ba255/1/miSyfZ899uFOvHnhRui-MnVL-AA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:9b:90:2d:14:e3:e9:a2:20:af:80:f8:0a:75:d3:6a:a9:5f: ed:aa:e3:07:bc:47:1d:93:b3:fe:52:41:04:99:a6:e6:1c:41: a3:2f:96:4f:b8:80:ee:e4:37:b4:af:9a:c8:85:ca:e3:88:f0: 2e:bc:41:0b:56:bb:13:a8:04:e5:76:42:f6:94:9a:b4:93:54: e3:30:55:fb:f9:83:85:38:90:25:f7:50:81:22:37:eb:d1:2f: b1:dc:a4:df:16:14:18:09:21:33:d1:97:bf:e6:af:2a:72:e6: 96:a6:4a:75:b0:eb:90:aa:f2:c5:85:e1:75:5e:c9:e5:28:63: 0c:22:a5:ce:24:ba:06:5d:79:c7:a2:c8:54:2b:4b:84:2c:99: 98:19:1b:b4:b4:9b:0d:1b:2c:68:67:47:3b:19:53:45:b7:bb: 5b:a5:de:20:0a:22:63:34:24:9c:91:3a:ed:f0:de:a9:c3:91: 6e:4d:f3:0b:04:06:b7:cd:c3:4e:96:bd:3f:ef:ae:48:ef:29: 10:49:2e:a6:59:63:dc:1c:ce:c1:74:ee:c0:7b:09:51:25:9b: a1:c1:be:21:3a:cd:08:aa:69:c3:3b:5d:5a:94:5e:53:7d:3a: 73:cf:15:80:3e:b3:b2:61:5e:89:67:3c:18:11:98:f5:ff:b2: da:80:3c:5c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5tC2O8peI5JBz3VJkP0/EMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhMjRiMjdkOWYzZGY2ZTE0ZWJjNzllMTQ2ZThiZTMyNzU0 YmY4MDAwHhcNMjUxMjIwMDMwMTA3WhcNMjUxMjIxMDMwMTA3WjAzMTEwLwYDVQQD Eyg1YzI4MzIxYjMwOWFiMmYyM2MzNjlmYjk5YmVlZTEzMGYzOWFmNjJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn4H1Ib6yuB4kvVaIwJf+P0S4G5CI IsuO2BCZe1XA/kHvJrS09eashCnfrPmqKY6VMHptUcx/8t/NQ02IUNpub+G04aIT uo46RMN3hEjbLEmc6nabMuGRNGzSm4GZ1Jav+S0YLvvm/Rw6QgvGWtgrjpccXyD1 Shn04oWBSAThMr2Iih9NbZPM+H/uhMJoSh+Leh37bLAQZEl44JA4lx7CFZEivHsY koA39hQ7MG0jWexTzcypIbtcic+1FR+SZCSiVwOifr//2T2VUb4TyDXwi08BDaI6 W1IeSUIv3UO4iOudZLIKIVq/9YAzw/Fr9EmReU7HwNKaRlbwfJn7Hw11BwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFwoMhswmrLyPDafuZvu4TDzmvYtMB8GA1UdIwQY MBaAFJoksn2fPfbhTrx54UbovjJ1S/gAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbWlTeWZaODk5dUZPdkhuaFJ1aS1NblZMLUFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS8wMjUxZjItYTFiYi00NGZiLWI5MDgt NDhkNWZmNGJhMjU1LzEvbWlTeWZaODk5dUZPdkhuaFJ1aS1NblZMLUFBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYS8wMjUxZjItYTFiYi00NGZiLWI5MDgtNDhkNWZmNGJhMjU1 LzEvbWlTeWZaODk5dUZPdkhuaFJ1aS1NblZMLUFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOJuQLRTj 6aIgr4D4CnXTaqlf7arjB7xHHZOz/lJBBJmm5hxBoy+WT7iA7uQ3tK+ayIXK44jw LrxBC1a7E6gE5XZC9pSatJNU4zBV+/mDhTiQJfdQgSI369Evsdyk3xYUGAkhM9GX v+avKnLmlqZKdbDrkKryxYXhdV7J5ShjDCKlziS6Bl15x6LIVCtLhCyZmBkbtLSb DRssaGdHOxlTRbe7W6XeIAoiYzQknJE67fDeqcORbk3zCwQGt83DTpa9P++uSO8p EEkupllj3BzOwXTuwHsJUSWbocG+ITrNCKppwztdWpReU306c88VgD6zsmFeiWc8 GBGY9f+y2oA8XA== -----END CERTIFICATE-----Generated at Sat Dec 20 06:55:51 2025 by rpki-client