This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/f0b320-9991-4e71-b3ee-494d91aeb655/1/mR-saFXyKWutFZhw-cvtIjVmE6s.mft File: mR-saFXyKWutFZhw-cvtIjVmE6s.mft (raw, json) Hash identifier: 4/NM9W33zfpt+EDdE3MdcYNO9Fc6rZSCpFx7oaLc8ZA= Subject key identifier: 26:9F:8E:14:0B:98:53:B3:18:60:1E:60:6A:8E:5C:46:E7:9A:AA:F7 Authority key identifier: 99:1F:AC:68:55:F2:29:6B:AD:15:98:70:F9:CB:ED:22:35:66:13:AB Certificate issuer: /CN=991fac6855f2296bad159870f9cbed22356613ab Certificate serial: 019B3C46E19BD541DF43266DE358092C856B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mR-saFXyKWutFZhw-cvtIjVmE6s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/f0b320-9991-4e71-b3ee-494d91aeb655/1/mR-saFXyKWutFZhw-cvtIjVmE6s.mft Manifest number: 1128 Signing time: Sat 20 Dec 2025 15:00:36 +0000 Manifest this update: Sat 20 Dec 2025 15:00:36 +0000 Manifest next update: Sun 21 Dec 2025 15:00:36 +0000 Files and hashes: 1: XAcSBecQIc8UIgDTpBhL8Q6tOP8.roa (hash: H5rv5m3vIYcLSxBobS/ikS6XumhtJHd2OiEi1Eup9mg=) 2: mR-saFXyKWutFZhw-cvtIjVmE6s.crl (hash: rUynjqcxt8v5WgN9c929l6qMZWXBtLcqYTafIdr6YWk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/f0b320-9991-4e71-b3ee-494d91aeb655/1/mR-saFXyKWutFZhw-cvtIjVmE6s.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/f0b320-9991-4e71-b3ee-494d91aeb655/1/mR-saFXyKWutFZhw-cvtIjVmE6s.mft rsync://rpki.ripe.net/repository/DEFAULT/mR-saFXyKWutFZhw-cvtIjVmE6s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:46:e1:9b:d5:41:df:43:26:6d:e3:58:09:2c:85:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=991fac6855f2296bad159870f9cbed22356613ab Validity Not Before: Dec 20 15:00:36 2025 GMT Not After : Dec 21 15:00:36 2025 GMT Subject: CN=269f8e140b9853b318601e606a8e5c46e79aaaf7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:44:c3:e8:3e:65:10:91:0e:41:f4:22:b4:e6: 3a:2e:09:63:b8:4a:58:ce:70:06:30:6e:7b:ab:72: 6c:b2:64:96:8f:a4:41:a4:27:9b:f1:9b:60:e5:ae: e3:eb:d1:6c:5c:44:63:15:a5:08:ca:07:29:09:12: ae:ed:da:86:ef:77:5d:30:3c:2f:f2:87:1e:73:d0: df:fb:ae:77:49:3b:76:fc:45:e6:82:0a:ef:b4:31: 8a:f9:c0:44:33:54:84:62:2b:5c:08:33:aa:02:6d: 14:97:98:c1:c4:4d:f9:3c:de:d6:e4:28:d6:ab:79: 55:08:eb:54:59:e0:10:e6:c5:20:58:23:6f:41:23: 82:e1:cb:8a:54:38:3b:ff:cc:98:4a:6a:3d:d5:6d: 1a:8e:76:a0:79:64:bd:11:e3:ab:d8:9b:23:8a:b6: 0f:b2:4f:24:b3:8e:37:b3:85:ed:f6:df:30:61:c4: 54:21:ae:f8:e9:46:fe:3e:7b:31:4c:17:3a:f3:42: 09:27:80:aa:e2:e5:48:ea:96:c2:67:56:9a:48:d9: 55:2a:78:9a:b3:cc:25:c3:d3:2f:db:69:82:3b:8d: 1c:8a:ef:bf:99:c3:c5:97:6e:fe:82:84:1f:2b:f1: 24:9d:4b:bd:ba:39:99:1a:00:99:cf:e9:36:3b:d9: 4e:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:9F:8E:14:0B:98:53:B3:18:60:1E:60:6A:8E:5C:46:E7:9A:AA:F7 X509v3 Authority Key Identifier: keyid:99:1F:AC:68:55:F2:29:6B:AD:15:98:70:F9:CB:ED:22:35:66:13:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mR-saFXyKWutFZhw-cvtIjVmE6s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/f0b320-9991-4e71-b3ee-494d91aeb655/1/mR-saFXyKWutFZhw-cvtIjVmE6s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/f0b320-9991-4e71-b3ee-494d91aeb655/1/mR-saFXyKWutFZhw-cvtIjVmE6s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:83:82:bf:39:42:35:fc:ea:72:36:8b:f3:70:49:4b:3c:76: b7:c8:d2:bd:80:77:0c:a4:7b:b2:e9:44:bc:08:e3:5b:52:a4: 51:b8:15:e2:88:1c:02:df:fe:11:a2:74:fe:e2:74:8b:a6:f0: 65:dd:fc:37:77:1b:db:e4:3e:8e:39:22:9c:3b:6d:2e:11:74: de:f1:fe:f8:ec:23:d8:80:a2:f3:4b:b2:66:6d:ad:71:30:9d: 80:59:fb:07:51:81:0a:b4:d8:85:86:d0:b1:38:64:32:e6:39: 7a:e0:95:8f:5b:9b:96:cc:ac:ec:c2:97:a7:2c:88:18:1c:13: 9a:8e:42:4e:3d:2b:3f:d2:b7:eb:33:62:ba:01:0b:24:d0:43: 20:64:49:b8:c9:23:99:ea:ee:09:4f:a7:d3:f2:81:f2:71:cb: c9:86:09:c2:0c:9c:a2:d1:10:5e:39:5f:8f:5a:26:af:3e:ac: b7:59:3b:93:cf:43:dd:e8:d6:10:b7:d1:bf:c6:68:b1:92:55: e9:d7:86:a8:47:20:20:c1:f2:5a:6c:ee:e4:9e:cb:c5:f7:70: 5c:99:6c:3c:a7:f7:d1:53:a5:f6:84:79:a6:12:58:fa:49:70: b8:7a:f6:86:0d:ba:60:c1:f9:aa:1e:5f:96:23:4c:54:9c:b2: 21:40:c6:3e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8RuGb1UHfQyZt41gJLIVrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk5MWZhYzY4NTVmMjI5NmJhZDE1OTg3MGY5Y2JlZDIyMzU2 NjEzYWIwHhcNMjUxMjIwMTUwMDM2WhcNMjUxMjIxMTUwMDM2WjAzMTEwLwYDVQQD EygyNjlmOGUxNDBiOTg1M2IzMTg2MDFlNjA2YThlNWM0NmU3OWFhYWY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwUTD6D5lEJEOQfQitOY6LgljuEpY znAGMG57q3JssmSWj6RBpCeb8Ztg5a7j69FsXERjFaUIygcpCRKu7dqG73ddMDwv 8ocec9Df+653STt2/EXmggrvtDGK+cBEM1SEYitcCDOqAm0Ul5jBxE35PN7W5CjW q3lVCOtUWeAQ5sUgWCNvQSOC4cuKVDg7/8yYSmo91W0ajnageWS9EeOr2JsjirYP sk8ks443s4Xt9t8wYcRUIa746Ub+PnsxTBc680IJJ4Cq4uVI6pbCZ1aaSNlVKnia s8wlw9Mv22mCO40ciu+/mcPFl27+goQfK/EknUu9ujmZGgCZz+k2O9lOtQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCafjhQLmFOzGGAeYGqOXEbnmqr3MB8GA1UdIwQY MBaAFJkfrGhV8ilrrRWYcPnL7SI1ZhOrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbVItc2FGWHlLV3V0Rlpody1jdnRJalZtRTZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy9mMGIzMjAtOTk5MS00ZTcxLWIzZWUt NDk0ZDkxYWViNjU1LzEvbVItc2FGWHlLV3V0Rlpody1jdnRJalZtRTZzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy9mMGIzMjAtOTk5MS00ZTcxLWIzZWUtNDk0ZDkxYWViNjU1 LzEvbVItc2FGWHlLV3V0Rlpody1jdnRJalZtRTZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsIOCvzlC NfzqcjaL83BJSzx2t8jSvYB3DKR7sulEvAjjW1KkUbgV4ogcAt/+EaJ0/uJ0i6bw Zd38N3cb2+Q+jjkinDttLhF03vH++Owj2ICi80uyZm2tcTCdgFn7B1GBCrTYhYbQ sThkMuY5euCVj1ublsys7MKXpyyIGBwTmo5CTj0rP9K36zNiugELJNBDIGRJuMkj meruCU+n0/KB8nHLyYYJwgycotEQXjlfj1omrz6st1k7k89D3ejWELfRv8ZosZJV 6deGqEcgIMHyWmzu5J7LxfdwXJlsPKf30VOl9oR5phJY+klwuHr2hg26YMH5qh5f liNMVJyyIUDGPg== -----END CERTIFICATE-----Generated at Sun Dec 21 00:44:36 2025 by rpki-client