This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/mc5WmhTC2zdy8jGHzmjmVB7ABI4.mft File: mc5WmhTC2zdy8jGHzmjmVB7ABI4.mft (raw, json) Hash identifier: G4U+sUq+MPyHBTQZ+jlicql/P6IiCdL0NpH7YJWnzyg= Subject key identifier: E9:88:8E:85:92:DC:32:A2:57:2F:26:A6:CE:00:64:7C:DF:89:11:10 Authority key identifier: 99:CE:56:9A:14:C2:DB:37:72:F2:31:87:CE:68:E6:54:1E:C0:04:8E Certificate issuer: /CN=99ce569a14c2db3772f23187ce68e6541ec0048e Certificate serial: 019B2BF834C63B5940B9408DAA2EEC97168D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mc5WmhTC2zdy8jGHzmjmVB7ABI4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/mc5WmhTC2zdy8jGHzmjmVB7ABI4.mft Manifest number: 17A2 Signing time: Wed 17 Dec 2025 11:00:45 +0000 Manifest this update: Wed 17 Dec 2025 11:00:45 +0000 Manifest next update: Thu 18 Dec 2025 11:00:45 +0000 Files and hashes: 1: 7hlWKm8vTIF0LH1H2oS6Admh1TI.roa (hash: JGgMMA+OZIrWq67kkKcLVk/aNndkz3SnG1R5RYOVvj8=) 2: 8Okcs_WzeZSlRzql6-e5V5V7syA.roa (hash: Bgf74cz9Nwo/ctlxM9vVhY3z4DibfYQP6Uszu31EXc8=) 3: AJpw_2i3EoQNYD9kunMPYOdByi8.roa (hash: 2y+udfjFmNVer5C4pJzKndxIM53KHs0ELdljGNxXclM=) 4: AMENJrV8ygov73L3LGeoA2nctFI.roa (hash: gyRR16y3QtUpUlKZN2rwn2h0u1QJLqcAd5tS2Xa5lmY=) 5: BW-ZjApW-eGpyxFEOc0qqC_7S5k.roa (hash: RqpMiCDIPeUSPd1EPbgHwl0XZwlcr7/eFSWcSxO7pPY=) 6: Ik8Kqt-zKfrsdQjyrAjHXX-mlLc.roa (hash: Zg9C0+0W8n0QIjR6RRPkp/OJIpBk8iu2+syGMIoxQyg=) 7: RYdEtsOojE3SXyShhqAjMIQl9xQ.roa (hash: bxAZYk1bj8j4gGSsg9+CUkCHFq1GRl7baVopFxolE0s=) 8: WBeAt2UOvPgAdfpllYF8DBrXsx8.roa (hash: IGhLKO/rQTI4tOBHJDgWqI73xTyqxuZsgF0ztyC/dOc=) 9: dMlBq16YcIM7-JR7sVrQGjUo5Ts.roa (hash: i7NU7NT4PhY/w3tg6T+Z3qdRHBm2oFSaLm/74+Urx2g=) 10: f4e7IUwG3JkPasx3oPPOpKnw014.roa (hash: oT75cSQjF7ggxHOJOkz6Sxjs0hfilCF0H6NE1nJtUfo=) 11: mNguxrQSssFTgOvDx-TtVJcngJ0.roa (hash: p4yScE1NaP9LVRZLGH/RikX/bIEDOl76JK/45ns5C9Q=) 12: mc5WmhTC2zdy8jGHzmjmVB7ABI4.crl (hash: Z8AATEhQDfbI3+tG9WvEqTQd/S4dTEBh6HnRat4ejyg=) 13: tGisfrUmcm7oDtUaKLvnP0jBq0s.roa (hash: nA2OAz9Nlstpul0i0fjQIz6ieEk/T79qTn4SzXVWXBw=) 14: u_mqTybwgy-hqVDwwCNi1Bf-8tI.roa (hash: JZzfV1nFUUQsICoBUJ9//kJmxjSvH3d3D7ybB8QQr/Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/mc5WmhTC2zdy8jGHzmjmVB7ABI4.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/mc5WmhTC2zdy8jGHzmjmVB7ABI4.mft rsync://rpki.ripe.net/repository/DEFAULT/mc5WmhTC2zdy8jGHzmjmVB7ABI4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:f8:34:c6:3b:59:40:b9:40:8d:aa:2e:ec:97:16:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99ce569a14c2db3772f23187ce68e6541ec0048e Validity Not Before: Dec 17 11:00:45 2025 GMT Not After : Dec 18 11:00:45 2025 GMT Subject: CN=e9888e8592dc32a2572f26a6ce00647cdf891110 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:b0:59:a8:0f:c0:ae:57:59:8c:08:68:38:32: 5a:c5:12:4b:2a:1e:70:81:1b:f6:af:e0:24:89:22: bf:af:52:96:9a:a3:d7:11:fe:e4:8d:71:d9:ea:b1: 1b:e3:df:2a:0d:dc:f9:98:96:e1:bf:0d:f3:53:39: 6d:ef:88:41:90:b3:ae:98:76:0a:2a:64:8e:bf:fe: e0:d0:ba:2a:09:e2:de:4e:1b:6b:57:20:63:55:7f: 13:0e:17:c0:40:6e:bb:6f:bb:56:7f:9e:c7:e7:25: c9:17:23:a2:fe:da:50:a0:a9:18:e5:6b:d9:3a:ef: 30:8f:1a:6c:9e:2e:12:dd:e9:b3:bf:91:cf:f0:2a: 4e:b5:4b:ab:02:98:46:9c:3c:72:e9:83:38:82:d3: a3:fb:a9:37:34:c5:f5:41:73:4e:f7:c2:f9:88:f8: 86:75:88:ab:34:94:db:2e:a7:2f:ae:67:02:91:22: 87:e5:08:74:69:10:d2:66:86:d9:b4:72:94:5b:ff: 01:f3:ae:c3:96:67:f6:d2:f3:59:66:f5:c3:48:39: 19:08:52:e5:05:29:1f:b3:7c:d5:16:b4:e3:3b:ad: 0a:77:c6:10:54:1a:8e:c9:c9:65:3a:92:20:12:dc: 8c:e3:40:da:19:f8:53:ff:5d:3e:be:d3:b6:52:36: 3d:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:88:8E:85:92:DC:32:A2:57:2F:26:A6:CE:00:64:7C:DF:89:11:10 X509v3 Authority Key Identifier: keyid:99:CE:56:9A:14:C2:DB:37:72:F2:31:87:CE:68:E6:54:1E:C0:04:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mc5WmhTC2zdy8jGHzmjmVB7ABI4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/mc5WmhTC2zdy8jGHzmjmVB7ABI4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/mc5WmhTC2zdy8jGHzmjmVB7ABI4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:9a:6f:1a:3c:8b:56:34:c0:6f:00:86:c7:2f:af:92:45:24: ff:77:18:f7:67:d0:cd:51:19:a9:4f:a3:c4:58:7d:fa:ce:79: f6:5d:d0:ad:07:ae:fb:55:e2:f2:ef:8f:7e:3b:92:a4:1e:16: 59:17:90:17:c3:c5:1b:cc:90:b7:e9:16:27:d8:5f:a1:38:8c: fe:fe:72:53:05:e6:49:01:f1:db:92:35:77:d2:03:7b:93:e3: 72:29:cf:21:dc:5d:5f:48:02:c6:40:cf:20:54:9f:3a:a4:41: 0b:d4:da:06:0e:cf:2c:94:6c:a3:eb:0f:43:96:1e:4d:5b:67: 37:24:20:7c:47:78:f9:2c:d4:ef:38:de:07:66:dd:bd:78:37: 27:08:9f:71:fd:2d:4c:09:1b:4f:d0:90:66:d4:70:bf:3c:a1: 26:11:f9:5a:5f:38:e3:c1:2b:36:1b:d3:31:f2:0d:d1:84:85: 40:bf:d5:02:08:2f:3e:d1:55:01:19:14:35:f6:ca:bb:dc:04: e3:a1:4e:db:d7:fd:ad:0e:1d:28:27:61:5f:fd:f8:ad:57:3f: 3f:20:fc:a0:38:b8:9a:8c:6a:e8:f5:1c:a5:9e:80:d0:8d:42: 46:6a:91:82:1e:4e:83:63:95:c7:b5:4c:b3:93:fd:e7:81:53: b8:e0:9d:84 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsr+DTGO1lAuUCNqi7slxaNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk5Y2U1NjlhMTRjMmRiMzc3MmYyMzE4N2NlNjhlNjU0MWVj MDA0OGUwHhcNMjUxMjE3MTEwMDQ1WhcNMjUxMjE4MTEwMDQ1WjAzMTEwLwYDVQQD EyhlOTg4OGU4NTkyZGMzMmEyNTcyZjI2YTZjZTAwNjQ3Y2RmODkxMTEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs7BZqA/ArldZjAhoODJaxRJLKh5w gRv2r+AkiSK/r1KWmqPXEf7kjXHZ6rEb498qDdz5mJbhvw3zUzlt74hBkLOumHYK KmSOv/7g0LoqCeLeThtrVyBjVX8TDhfAQG67b7tWf57H5yXJFyOi/tpQoKkY5WvZ Ou8wjxpsni4S3emzv5HP8CpOtUurAphGnDxy6YM4gtOj+6k3NMX1QXNO98L5iPiG dYirNJTbLqcvrmcCkSKH5Qh0aRDSZobZtHKUW/8B867Dlmf20vNZZvXDSDkZCFLl BSkfs3zVFrTjO60Kd8YQVBqOycllOpIgEtyM40DaGfhT/10+vtO2UjY9swIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOmIjoWS3DKiVy8mps4AZHzfiREQMB8GA1UdIwQY MBaAFJnOVpoUwts3cvIxh85o5lQewASOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbWM1V21oVEMyemR5OGpHSHptam1WQjdBQkk0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi9jYzZlOTktNmU1Zi00MDFiLTkxMmQt MTA5NTU0NGM2YzUwLzEvbWM1V21oVEMyemR5OGpHSHptam1WQjdBQkk0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi9jYzZlOTktNmU1Zi00MDFiLTkxMmQtMTA5NTU0NGM2YzUw LzEvbWM1V21oVEMyemR5OGpHSHptam1WQjdBQkk0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnZpvGjyL VjTAbwCGxy+vkkUk/3cY92fQzVEZqU+jxFh9+s559l3QrQeu+1Xi8u+PfjuSpB4W WReQF8PFG8yQt+kWJ9hfoTiM/v5yUwXmSQHx25I1d9IDe5PjcinPIdxdX0gCxkDP IFSfOqRBC9TaBg7PLJRso+sPQ5YeTVtnNyQgfEd4+SzU7zjeB2bdvXg3Jwifcf0t TAkbT9CQZtRwvzyhJhH5Wl8448ErNhvTMfIN0YSFQL/VAggvPtFVARkUNfbKu9wE 46FO29f9rQ4dKCdhX/34rVc/PyD8oDi4moxq6PUcpZ6A0I1CRmqRgh5Og2OVx7VM s5P954FTuOCdhA== -----END CERTIFICATE-----Generated at Wed Dec 17 15:14:26 2025 by rpki-client