This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/3f7463-4d4f-41a6-8d72-3951378aa766/1/mBPi9jUdO00eYapAFvGyz6YtfN8.mft File: mBPi9jUdO00eYapAFvGyz6YtfN8.mft (raw, json) Hash identifier: VAicWbFXhN2gPK22gPnUST9KJsQlZ9yjAncY75O8RGw= Subject key identifier: A6:F3:A3:D9:6A:F4:FF:CA:3F:B2:F8:B4:4C:8A:82:E8:49:CD:59:D2 Authority key identifier: 98:13:E2:F6:35:1D:3B:4D:1E:61:AA:40:16:F1:B2:CF:A6:2D:7C:DF Certificate issuer: /CN=9813e2f6351d3b4d1e61aa4016f1b2cfa62d7cdf Certificate serial: 019B3FED59C98E2744EBAB6200D247D7CC4F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mBPi9jUdO00eYapAFvGyz6YtfN8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/3f7463-4d4f-41a6-8d72-3951378aa766/1/mBPi9jUdO00eYapAFvGyz6YtfN8.mft Manifest number: 044B Signing time: Sun 21 Dec 2025 08:01:18 +0000 Manifest this update: Sun 21 Dec 2025 08:01:18 +0000 Manifest next update: Mon 22 Dec 2025 08:01:18 +0000 Files and hashes: 1: N0qByPu3emMo9XfORXwQEiEDLX4.roa (hash: WDWKjOtvs4aBJ9ngAGga+267IwwKrgiGUR6VHAFxV3g=) 2: RoGqfo5WHnk9aJGToptEEJnYgSQ.roa (hash: L10AuIcaDMRz0t+d0kRw1yKzyj6eu5ePd1bWDs52MY4=) 3: dXZ-6UVHqdia25OyDn-Duexa4bY.roa (hash: 0T5UCEoUYDMxK/4Yih5THGiZdvmX2Rir43/xhLtG52s=) 4: ffVCJAudGRklTh6J2p53gbRPIvk.roa (hash: DvmrtTZ+4GX+XZD2/G6E6Uk/XxFpGuY4Z0oM1q4ZEeI=) 5: gkNUdTJYKI-HrI5siVhEhSliy48.roa (hash: ABXVZgoh60JAitHXcWT+7NbO1hc9hcd5tRCQ91UiLVQ=) 6: mBPi9jUdO00eYapAFvGyz6YtfN8.crl (hash: pjXJWimnrVet5P/QP9rxYz65vJyWC9qEQf6DaF1ve3w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/3f7463-4d4f-41a6-8d72-3951378aa766/1/mBPi9jUdO00eYapAFvGyz6YtfN8.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/3f7463-4d4f-41a6-8d72-3951378aa766/1/mBPi9jUdO00eYapAFvGyz6YtfN8.mft rsync://rpki.ripe.net/repository/DEFAULT/mBPi9jUdO00eYapAFvGyz6YtfN8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 08:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:ed:59:c9:8e:27:44:eb:ab:62:00:d2:47:d7:cc:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9813e2f6351d3b4d1e61aa4016f1b2cfa62d7cdf Validity Not Before: Dec 21 08:01:18 2025 GMT Not After : Dec 22 08:01:18 2025 GMT Subject: CN=a6f3a3d96af4ffca3fb2f8b44c8a82e849cd59d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:6e:8d:66:df:e0:72:72:3b:f9:f6:80:4d:90: 89:48:41:41:91:6c:4c:14:bc:8a:a8:bc:81:bc:2d: 94:33:04:03:a1:48:99:64:7f:77:97:5e:1a:64:14: 1b:26:d8:3e:42:db:71:34:7c:f4:74:87:ae:98:19: dc:41:20:ab:01:bd:bc:db:e1:a5:50:fe:fc:90:f4: 3a:47:a3:cd:c3:90:43:5d:51:1f:ff:6b:8e:46:5d: be:d3:3e:38:75:10:34:75:aa:ba:fd:3f:c0:34:f2: 04:ef:6f:29:a0:4c:ad:4c:1c:45:a7:4f:fb:41:fd: b1:54:6d:e9:f0:e0:b1:e0:0a:2b:ed:3e:c6:cc:eb: 36:60:19:86:4a:7e:51:26:6f:4c:a6:db:df:43:b0: c8:15:98:e8:be:3b:8d:bc:a1:d3:7d:17:00:c0:14: d6:4c:56:4a:95:94:29:cb:77:90:1b:5b:36:9c:2f: b7:6a:52:d4:fd:59:f6:ef:7c:f5:93:3d:a0:71:23: 25:e1:f2:2a:10:b2:bf:3b:a1:cc:8f:8d:96:ad:db: 03:98:35:91:35:ef:0f:8d:23:2c:d5:00:01:c5:3c: 11:da:fc:92:74:f2:b9:39:30:0e:09:e0:f0:3f:07: 64:60:4c:25:fd:a5:f2:d0:e9:e9:ca:72:81:4b:f0: e9:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:F3:A3:D9:6A:F4:FF:CA:3F:B2:F8:B4:4C:8A:82:E8:49:CD:59:D2 X509v3 Authority Key Identifier: keyid:98:13:E2:F6:35:1D:3B:4D:1E:61:AA:40:16:F1:B2:CF:A6:2D:7C:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mBPi9jUdO00eYapAFvGyz6YtfN8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/3f7463-4d4f-41a6-8d72-3951378aa766/1/mBPi9jUdO00eYapAFvGyz6YtfN8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/3f7463-4d4f-41a6-8d72-3951378aa766/1/mBPi9jUdO00eYapAFvGyz6YtfN8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:09:66:96:ce:22:94:09:b3:d5:51:bc:ca:d6:cc:37:3d:23: 06:ef:44:5f:30:b0:25:29:8b:3a:0f:0f:e0:b0:2f:35:eb:aa: 94:b0:df:67:91:f1:9c:0a:46:87:9b:0a:22:2e:bb:27:f1:13: b0:0b:c4:2e:da:b9:25:c8:ff:32:39:65:d8:10:06:b7:16:3c: 5d:6b:e0:8a:86:46:d1:14:c6:75:2c:c9:ce:b1:5e:cb:08:c1: e2:c9:b2:5a:3f:90:b5:bc:04:28:3d:e5:97:a2:cc:cd:ad:22: 55:a3:51:ba:6d:df:bc:38:1e:66:a4:bf:95:33:9e:7e:eb:88: 14:9f:50:06:e3:e8:76:52:95:e4:1f:f4:8d:f9:bd:01:75:dd: 06:ec:88:1b:16:ed:2b:73:53:b9:e2:9c:e8:1a:a0:c3:d6:e1: 35:7a:8a:42:c0:33:e9:cf:31:bc:c7:88:fc:65:40:4f:c9:71: ae:7b:cd:a3:68:69:dd:46:94:4f:82:96:a9:85:37:56:19:e9: 2a:00:ae:f3:35:c3:b4:b2:b9:a3:46:61:41:87:91:69:06:5d: 04:a7:10:95:16:c2:28:3e:a5:b0:0b:d3:6a:0e:f5:a4:82:b0: a5:f5:5d:e5:5e:26:f5:a3:54:1f:ff:60:7f:4d:a2:c5:86:02: 14:29:c0:6b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/7VnJjidE66tiANJH18xPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk4MTNlMmY2MzUxZDNiNGQxZTYxYWE0MDE2ZjFiMmNmYTYy ZDdjZGYwHhcNMjUxMjIxMDgwMTE4WhcNMjUxMjIyMDgwMTE4WjAzMTEwLwYDVQQD EyhhNmYzYTNkOTZhZjRmZmNhM2ZiMmY4YjQ0YzhhODJlODQ5Y2Q1OWQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7G6NZt/gcnI7+faATZCJSEFBkWxM FLyKqLyBvC2UMwQDoUiZZH93l14aZBQbJtg+QttxNHz0dIeumBncQSCrAb282+Gl UP78kPQ6R6PNw5BDXVEf/2uORl2+0z44dRA0daq6/T/ANPIE728poEytTBxFp0/7 Qf2xVG3p8OCx4Aor7T7GzOs2YBmGSn5RJm9MptvfQ7DIFZjovjuNvKHTfRcAwBTW TFZKlZQpy3eQG1s2nC+3alLU/Vn273z1kz2gcSMl4fIqELK/O6HMj42WrdsDmDWR Ne8PjSMs1QABxTwR2vySdPK5OTAOCeDwPwdkYEwl/aXy0OnpynKBS/DppQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKbzo9lq9P/KP7L4tEyKguhJzVnSMB8GA1UdIwQY MBaAFJgT4vY1HTtNHmGqQBbxss+mLXzfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbUJQaTlqVWRPMDBlWWFwQUZ2R3l6Nll0Zk44LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi8zZjc0NjMtNGQ0Zi00MWE2LThkNzIt Mzk1MTM3OGFhNzY2LzEvbUJQaTlqVWRPMDBlWWFwQUZ2R3l6Nll0Zk44Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi8zZjc0NjMtNGQ0Zi00MWE2LThkNzItMzk1MTM3OGFhNzY2 LzEvbUJQaTlqVWRPMDBlWWFwQUZ2R3l6Nll0Zk44LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAewlmls4i lAmz1VG8ytbMNz0jBu9EXzCwJSmLOg8P4LAvNeuqlLDfZ5HxnApGh5sKIi67J/ET sAvELtq5Jcj/Mjll2BAGtxY8XWvgioZG0RTGdSzJzrFeywjB4smyWj+QtbwEKD3l l6LMza0iVaNRum3fvDgeZqS/lTOefuuIFJ9QBuPodlKV5B/0jfm9AXXdBuyIGxbt K3NTueKc6Bqgw9bhNXqKQsAz6c8xvMeI/GVAT8lxrnvNo2hp3UaUT4KWqYU3Vhnp KgCu8zXDtLK5o0ZhQYeRaQZdBKcQlRbCKD6lsAvTag71pIKwpfVd5V4m9aNUH/9g f02ixYYCFCnAaw== -----END CERTIFICATE-----Generated at Sun Dec 21 17:16:00 2025 by rpki-client