This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/44c42c-1e68-4aab-839d-9593e3a43725/1/mQxLs441zXAyDreRUgxsrTSksnE.mft File: mQxLs441zXAyDreRUgxsrTSksnE.mft (raw, json) Hash identifier: CBQkOszR+wbDYwTy6wETTrrKKk7o3gOTY0ovRChf3jw= Subject key identifier: 2E:D8:DE:19:23:01:A2:76:5A:29:35:70:CC:0A:0E:BA:7E:C8:76:34 Authority key identifier: 99:0C:4B:B3:8E:35:CD:70:32:0E:B7:91:52:0C:6C:AD:34:A4:B2:71 Certificate issuer: /CN=990c4bb38e35cd70320eb791520c6cad34a4b271 Certificate serial: 019B54861278E7D7F4A14363AE9CFF3C236F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mQxLs441zXAyDreRUgxsrTSksnE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/44c42c-1e68-4aab-839d-9593e3a43725/1/mQxLs441zXAyDreRUgxsrTSksnE.mft Manifest number: 1428 Signing time: Thu 25 Dec 2025 08:00:31 +0000 Manifest this update: Thu 25 Dec 2025 08:00:31 +0000 Manifest next update: Fri 26 Dec 2025 08:00:31 +0000 Files and hashes: 1: JtxbWq9ormth5LcKwN5vG4Q3apo.roa (hash: lQXeYw4zv4cIzlRUFSI2nS9Q4llqbkuImnCVCQNKPmM=) 2: mQxLs441zXAyDreRUgxsrTSksnE.crl (hash: ogA/ZVhtv7KWZkdae96WouE36pFkfLl4NGD1VOMTkKo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/44c42c-1e68-4aab-839d-9593e3a43725/1/mQxLs441zXAyDreRUgxsrTSksnE.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/44c42c-1e68-4aab-839d-9593e3a43725/1/mQxLs441zXAyDreRUgxsrTSksnE.mft rsync://rpki.ripe.net/repository/DEFAULT/mQxLs441zXAyDreRUgxsrTSksnE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 03:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:54:86:12:78:e7:d7:f4:a1:43:63:ae:9c:ff:3c:23:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=990c4bb38e35cd70320eb791520c6cad34a4b271 Validity Not Before: Dec 25 08:00:31 2025 GMT Not After : Dec 26 08:00:31 2025 GMT Subject: CN=2ed8de192301a2765a293570cc0a0eba7ec87634 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:44:6e:58:2f:2c:10:3b:1a:0e:af:76:a2:f5: 38:a2:7d:23:c4:ea:0f:83:aa:1a:28:13:b3:ec:1a: a0:89:ab:fb:e5:03:4d:7d:79:9d:51:8f:99:ae:bb: bd:65:4f:0c:af:c8:a0:fc:2d:8f:e6:a6:53:a0:2c: c5:3d:53:54:a7:b8:ef:92:9e:20:4c:cb:d2:33:f1: 73:f8:f0:d5:f4:30:05:9c:05:d6:98:1a:3f:71:d6: 17:9c:d8:06:55:d7:2a:6b:04:60:6c:60:3d:9f:9a: 3d:c0:f5:0d:78:6d:7a:f1:ad:9e:08:6f:de:05:ce: 46:5b:d3:84:12:29:46:99:f8:d4:16:e2:f8:18:72: 65:c9:db:ca:68:24:bc:e7:6a:bf:8c:73:31:d0:76: b0:ff:b7:2c:6b:71:6f:8d:31:95:92:6a:ac:bc:c3: f7:72:72:4e:ec:f1:b5:cd:fe:0f:be:bf:a3:6e:54: f0:64:e1:46:c8:88:d6:c1:bd:fe:5c:51:0c:69:9e: 32:64:fc:d7:ed:36:4f:55:08:0b:8d:ee:87:c6:3f: 5d:2e:2a:2b:4c:77:d1:e6:53:ea:69:52:68:13:54: f8:5b:3a:c7:53:d8:a9:fa:ef:c8:d5:4b:32:b2:81: 1a:89:6f:8e:a0:c5:e6:70:18:cf:4e:b6:67:09:97: ec:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:D8:DE:19:23:01:A2:76:5A:29:35:70:CC:0A:0E:BA:7E:C8:76:34 X509v3 Authority Key Identifier: keyid:99:0C:4B:B3:8E:35:CD:70:32:0E:B7:91:52:0C:6C:AD:34:A4:B2:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mQxLs441zXAyDreRUgxsrTSksnE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/44c42c-1e68-4aab-839d-9593e3a43725/1/mQxLs441zXAyDreRUgxsrTSksnE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/44c42c-1e68-4aab-839d-9593e3a43725/1/mQxLs441zXAyDreRUgxsrTSksnE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:8d:78:72:ff:9b:f9:12:f0:43:e8:8e:1c:bd:63:40:92:51: 60:e2:22:dc:66:02:79:49:49:f7:76:61:82:dc:ea:84:c4:af: 19:89:04:75:e7:83:22:e5:48:1e:59:16:b2:15:c6:bd:68:82: 1d:02:0d:a3:05:69:de:70:f7:d5:b1:8f:7b:23:97:ad:8e:7d: 0a:2e:d9:d4:62:9c:68:40:1c:6c:6e:67:14:db:40:28:a8:3a: d8:58:63:5c:47:ed:4f:f7:10:4e:42:13:be:5e:ca:bf:28:ee: e5:c2:ef:85:3f:61:d9:27:d6:bf:b1:e4:58:18:6b:8d:50:7e: 03:23:78:ca:0c:4f:09:db:bb:12:ac:7c:a5:97:bc:4b:87:99: 19:30:a5:98:fc:b2:5e:b3:0c:58:e7:10:3b:10:61:74:13:8c: d5:b2:a0:bb:ed:62:7e:43:cc:ab:05:5f:0b:7e:7f:ec:f5:8c: 64:07:29:07:97:0b:30:cf:6e:88:74:ce:16:0c:bb:0d:f5:3b: 1d:aa:47:ea:af:91:59:b3:1d:a5:37:31:89:01:71:a3:c1:98: bb:8b:00:e7:8f:72:76:97:c5:13:db:b5:60:8a:98:22:37:7b: 58:86:74:29:df:29:73:b1:d4:e7:a3:5a:a5:ec:47:8e:5b:03: 79:9c:be:f1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtUhhJ459f0oUNjrpz/PCNvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk5MGM0YmIzOGUzNWNkNzAzMjBlYjc5MTUyMGM2Y2FkMzRh NGIyNzEwHhcNMjUxMjI1MDgwMDMxWhcNMjUxMjI2MDgwMDMxWjAzMTEwLwYDVQQD EygyZWQ4ZGUxOTIzMDFhMjc2NWEyOTM1NzBjYzBhMGViYTdlYzg3NjM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqERuWC8sEDsaDq92ovU4on0jxOoP g6oaKBOz7Bqgiav75QNNfXmdUY+Zrru9ZU8Mr8ig/C2P5qZToCzFPVNUp7jvkp4g TMvSM/Fz+PDV9DAFnAXWmBo/cdYXnNgGVdcqawRgbGA9n5o9wPUNeG168a2eCG/e Bc5GW9OEEilGmfjUFuL4GHJlydvKaCS852q/jHMx0Haw/7csa3FvjTGVkmqsvMP3 cnJO7PG1zf4Pvr+jblTwZOFGyIjWwb3+XFEMaZ4yZPzX7TZPVQgLje6Hxj9dLior THfR5lPqaVJoE1T4WzrHU9ip+u/I1UsysoEaiW+OoMXmcBjPTrZnCZfsVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC7Y3hkjAaJ2Wik1cMwKDrp+yHY0MB8GA1UdIwQY MBaAFJkMS7OONc1wMg63kVIMbK00pLJxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbVF4THM0NDF6WEF5RHJlUlVneHNyVFNrc25FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi80NGM0MmMtMWU2OC00YWFiLTgzOWQt OTU5M2UzYTQzNzI1LzEvbVF4THM0NDF6WEF5RHJlUlVneHNyVFNrc25FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi80NGM0MmMtMWU2OC00YWFiLTgzOWQtOTU5M2UzYTQzNzI1 LzEvbVF4THM0NDF6WEF5RHJlUlVneHNyVFNrc25FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATo14cv+b +RLwQ+iOHL1jQJJRYOIi3GYCeUlJ93ZhgtzqhMSvGYkEdeeDIuVIHlkWshXGvWiC HQINowVp3nD31bGPeyOXrY59Ci7Z1GKcaEAcbG5nFNtAKKg62FhjXEftT/cQTkIT vl7Kvyju5cLvhT9h2SfWv7HkWBhrjVB+AyN4ygxPCdu7Eqx8pZe8S4eZGTClmPyy XrMMWOcQOxBhdBOM1bKgu+1ifkPMqwVfC35/7PWMZAcpB5cLMM9uiHTOFgy7DfU7 HapH6q+RWbMdpTcxiQFxo8GYu4sA549ydpfFE9u1YIqYIjd7WIZ0Kd8pc7HU56Na pexHjlsDeZy+8Q== -----END CERTIFICATE-----Generated at Thu Dec 25 11:23:39 2025 by rpki-client