This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/44c42c-1e68-4aab-839d-9593e3a43725/1/mQxLs441zXAyDreRUgxsrTSksnE.mft File: mQxLs441zXAyDreRUgxsrTSksnE.mft (raw, json) Hash identifier: prngN4IPuuFrGLFCSl3ye12BXN3xzGToqWYP0L4ysls= Subject key identifier: E5:0F:75:81:08:9D:58:A0:FC:D0:12:C7:2D:42:93:69:74:26:57:10 Authority key identifier: 99:0C:4B:B3:8E:35:CD:70:32:0E:B7:91:52:0C:6C:AD:34:A4:B2:71 Certificate issuer: /CN=990c4bb38e35cd70320eb791520c6cad34a4b271 Certificate serial: 019B3F484448D2954F1767C2BC7B6396786A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mQxLs441zXAyDreRUgxsrTSksnE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/44c42c-1e68-4aab-839d-9593e3a43725/1/mQxLs441zXAyDreRUgxsrTSksnE.mft Manifest number: 141D Signing time: Sun 21 Dec 2025 05:00:59 +0000 Manifest this update: Sun 21 Dec 2025 05:00:59 +0000 Manifest next update: Mon 22 Dec 2025 05:00:59 +0000 Files and hashes: 1: JtxbWq9ormth5LcKwN5vG4Q3apo.roa (hash: lQXeYw4zv4cIzlRUFSI2nS9Q4llqbkuImnCVCQNKPmM=) 2: mQxLs441zXAyDreRUgxsrTSksnE.crl (hash: EhlkLjZd7w3svmMR/tVq3mfeHJgwjzUhgpefDl1MSy8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/44c42c-1e68-4aab-839d-9593e3a43725/1/mQxLs441zXAyDreRUgxsrTSksnE.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/44c42c-1e68-4aab-839d-9593e3a43725/1/mQxLs441zXAyDreRUgxsrTSksnE.mft rsync://rpki.ripe.net/repository/DEFAULT/mQxLs441zXAyDreRUgxsrTSksnE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:48:44:48:d2:95:4f:17:67:c2:bc:7b:63:96:78:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=990c4bb38e35cd70320eb791520c6cad34a4b271 Validity Not Before: Dec 21 05:00:59 2025 GMT Not After : Dec 22 05:00:59 2025 GMT Subject: CN=e50f7581089d58a0fcd012c72d42936974265710 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:d6:91:22:21:db:a2:94:9b:ee:1d:1d:0f:81: af:82:88:3a:0c:7b:2f:5c:aa:0f:23:6e:aa:19:4e: bb:76:41:1a:14:2d:0b:be:2d:30:a5:1c:63:7c:20: 8b:b6:7e:ba:db:39:34:ca:14:fb:3a:9c:a9:80:43: b5:c1:89:6a:f8:69:07:c3:60:91:13:fa:fc:fe:9a: ee:bf:f8:59:09:7c:73:a5:a8:15:93:ad:7e:aa:30: 1a:da:04:8a:79:85:9d:8c:ff:d5:84:b3:9e:34:0b: cf:f7:ab:ea:57:dd:02:a7:04:d9:8b:aa:9d:f8:73: dc:1f:5e:10:20:5a:2e:bb:9b:48:6f:05:62:04:5e: e2:3d:e1:cc:e1:1b:9d:e7:cb:fb:33:cc:7b:5d:a6: 98:c4:dc:b6:61:f8:fb:64:6c:60:90:37:0c:d6:33: 03:0b:cf:f2:8b:c7:7d:53:e7:82:52:b3:d8:8c:7b: 18:f8:f0:7e:75:e3:05:a1:bb:61:56:eb:07:22:3c: 06:95:8d:06:b0:90:f0:35:e3:9b:27:b8:17:e2:1b: 8c:4a:d1:2b:52:3b:a7:4b:7d:b6:12:83:78:9a:9a: 37:19:6c:e7:01:0a:dc:eb:c5:f2:20:5e:02:35:2d: 1f:bb:23:c2:bf:d5:d2:2f:e9:9e:4a:cd:96:48:19: 31:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:0F:75:81:08:9D:58:A0:FC:D0:12:C7:2D:42:93:69:74:26:57:10 X509v3 Authority Key Identifier: keyid:99:0C:4B:B3:8E:35:CD:70:32:0E:B7:91:52:0C:6C:AD:34:A4:B2:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mQxLs441zXAyDreRUgxsrTSksnE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/44c42c-1e68-4aab-839d-9593e3a43725/1/mQxLs441zXAyDreRUgxsrTSksnE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/44c42c-1e68-4aab-839d-9593e3a43725/1/mQxLs441zXAyDreRUgxsrTSksnE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:0d:12:4f:a3:fd:19:ec:16:64:de:e7:78:13:48:c4:3a:28: ba:4b:1d:45:bf:27:f9:e5:75:df:da:52:bf:27:78:0b:96:a2: e7:37:e2:f6:07:f6:16:21:78:5e:16:5d:00:6e:df:a8:85:d8: 65:df:9a:de:66:9d:a6:82:00:25:18:58:9b:1a:23:f4:b5:16: 57:49:3b:68:1c:fd:be:85:a4:28:fd:5a:a5:b6:b2:9c:1c:1e: b9:59:59:c7:17:dd:c6:86:66:1c:d3:c0:78:aa:9e:0c:12:6a: da:46:88:fe:d2:40:84:c8:d2:47:e0:57:83:b4:59:cb:18:28: db:e0:d7:72:05:8e:1e:f9:60:c3:22:a7:fc:84:64:e5:95:8e: 57:d4:32:18:39:b9:75:cc:c3:3b:9c:6a:46:7f:f8:66:a3:16: 22:e9:35:59:8c:ad:e3:ce:6b:20:27:f3:29:e1:93:42:fd:cc: c3:e2:7e:b1:b4:f1:b9:68:44:33:b7:fc:af:2e:33:6c:84:a8: 8c:ad:ec:32:d2:4b:df:6a:4d:83:2b:b5:9a:7e:3a:79:82:5d: 29:b3:82:15:a6:fe:73:d3:3c:70:55:0b:3d:ee:53:59:38:9d: 85:63:59:fa:79:71:7f:2f:29:88:43:74:c5:11:10:4d:46:cc: a7:33:e4:fe -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/SERI0pVPF2fCvHtjlnhqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk5MGM0YmIzOGUzNWNkNzAzMjBlYjc5MTUyMGM2Y2FkMzRh NGIyNzEwHhcNMjUxMjIxMDUwMDU5WhcNMjUxMjIyMDUwMDU5WjAzMTEwLwYDVQQD EyhlNTBmNzU4MTA4OWQ1OGEwZmNkMDEyYzcyZDQyOTM2OTc0MjY1NzEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArNaRIiHbopSb7h0dD4Gvgog6DHsv XKoPI26qGU67dkEaFC0Lvi0wpRxjfCCLtn662zk0yhT7OpypgEO1wYlq+GkHw2CR E/r8/pruv/hZCXxzpagVk61+qjAa2gSKeYWdjP/VhLOeNAvP96vqV90CpwTZi6qd +HPcH14QIFouu5tIbwViBF7iPeHM4Rud58v7M8x7XaaYxNy2Yfj7ZGxgkDcM1jMD C8/yi8d9U+eCUrPYjHsY+PB+deMFobthVusHIjwGlY0GsJDwNeObJ7gX4huMStEr UjunS322EoN4mpo3GWznAQrc68XyIF4CNS0fuyPCv9XSL+meSs2WSBkxqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOUPdYEInVig/NASxy1Ck2l0JlcQMB8GA1UdIwQY MBaAFJkMS7OONc1wMg63kVIMbK00pLJxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbVF4THM0NDF6WEF5RHJlUlVneHNyVFNrc25FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi80NGM0MmMtMWU2OC00YWFiLTgzOWQt OTU5M2UzYTQzNzI1LzEvbVF4THM0NDF6WEF5RHJlUlVneHNyVFNrc25FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi80NGM0MmMtMWU2OC00YWFiLTgzOWQtOTU5M2UzYTQzNzI1 LzEvbVF4THM0NDF6WEF5RHJlUlVneHNyVFNrc25FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhA0ST6P9 GewWZN7neBNIxDoouksdRb8n+eV139pSvyd4C5ai5zfi9gf2FiF4XhZdAG7fqIXY Zd+a3madpoIAJRhYmxoj9LUWV0k7aBz9voWkKP1apbaynBweuVlZxxfdxoZmHNPA eKqeDBJq2kaI/tJAhMjSR+BXg7RZyxgo2+DXcgWOHvlgwyKn/IRk5ZWOV9QyGDm5 dczDO5xqRn/4ZqMWIuk1WYyt485rICfzKeGTQv3Mw+J+sbTxuWhEM7f8ry4zbISo jK3sMtJL32pNgyu1mn46eYJdKbOCFab+c9M8cFULPe5TWTidhWNZ+nlxfy8piEN0 xREQTUbMpzPk/g== -----END CERTIFICATE-----Generated at Sun Dec 21 09:00:25 2025 by rpki-client