This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/813010-a96f-4510-9dbc-21f7751ca76c/1/mIRVhKyAlMGAa3Om9T5GuaKOgSs.mft File: mIRVhKyAlMGAa3Om9T5GuaKOgSs.mft (raw, json) Hash identifier: ppsCeZphJzhT8F7TzVeSlZgpO/TH9pw42viuTODLtAI= Subject key identifier: 88:7A:39:31:E5:D4:38:0C:FB:FC:61:C4:FC:F8:CF:5F:00:F6:8F:81 Authority key identifier: 98:84:55:84:AC:80:94:C1:80:6B:73:A6:F5:3E:46:B9:A2:8E:81:2B Certificate issuer: /CN=98845584ac8094c1806b73a6f53e46b9a28e812b Certificate serial: 019AF3C0893102FF82CFB4755D8A15290A26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mIRVhKyAlMGAa3Om9T5GuaKOgSs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/813010-a96f-4510-9dbc-21f7751ca76c/1/mIRVhKyAlMGAa3Om9T5GuaKOgSs.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 13:01:12 +0000 Manifest this update: Sat 06 Dec 2025 13:01:12 +0000 Manifest next update: Sun 07 Dec 2025 13:01:12 +0000 Files and hashes: 1: 1-2hqQTW3ul_bD8JHqn2arc4SQt4.roa (hash: 7Jb+agyXKOWc8cNwhtr84wIX4Xn98h0+c+7K9P4oPMA=) 2: mIRVhKyAlMGAa3Om9T5GuaKOgSs.crl (hash: yl1HAu3tqDW8dzj3ZkRrfq7pAnB7hj52/Tb3tH96lHk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/813010-a96f-4510-9dbc-21f7751ca76c/1/mIRVhKyAlMGAa3Om9T5GuaKOgSs.crl rsync://rpki.ripe.net/repository/DEFAULT/06/813010-a96f-4510-9dbc-21f7751ca76c/1/mIRVhKyAlMGAa3Om9T5GuaKOgSs.mft rsync://rpki.ripe.net/repository/DEFAULT/mIRVhKyAlMGAa3Om9T5GuaKOgSs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:c0:89:31:02:ff:82:cf:b4:75:5d:8a:15:29:0a:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98845584ac8094c1806b73a6f53e46b9a28e812b Validity Not Before: Dec 6 13:01:12 2025 GMT Not After : Dec 7 13:01:12 2025 GMT Subject: CN=887a3931e5d4380cfbfc61c4fcf8cf5f00f68f81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:3c:5d:f6:af:8d:7a:8f:4a:3c:e7:2d:a2:93: 4c:26:c8:01:1e:7c:40:b8:37:64:ff:15:99:ce:0a: d2:b6:4c:20:ef:a7:ae:9f:38:3a:00:27:dd:c5:f9: dd:ed:97:11:8e:c8:5f:bd:e1:f2:fb:ba:05:80:92: a9:7d:96:93:74:ef:98:0d:b0:69:a5:32:fa:52:43: 61:23:d0:f0:d5:9b:b5:02:a3:32:77:d8:22:b9:7f: 4d:74:a0:93:4a:2a:92:e9:13:9e:3e:92:f3:e1:70: aa:d3:fc:c6:14:18:6c:b8:db:e9:33:cd:1a:33:9f: dd:c7:c0:be:76:5d:32:f9:29:6f:9f:6f:73:2e:73: aa:3b:12:3e:f1:4b:cd:94:d2:d6:21:81:f0:fe:49: a4:a9:01:0a:ab:6f:ff:a9:ce:54:6c:9e:0d:b5:79: 75:11:90:ff:11:48:50:f6:52:93:cf:1d:1c:1f:8f: 00:b0:0e:a8:b2:19:9e:12:61:4e:af:85:76:e1:a1: 61:eb:e4:18:07:51:1d:8d:68:90:ed:d0:dc:18:aa: 5f:45:30:3f:26:fb:84:ac:75:1b:b9:92:0a:7d:cd: dc:69:6f:e0:ce:33:d5:26:7d:ec:0c:50:27:98:b2: a7:6c:7b:b6:20:49:ce:0a:9e:4b:a7:72:57:fb:82: ad:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:7A:39:31:E5:D4:38:0C:FB:FC:61:C4:FC:F8:CF:5F:00:F6:8F:81 X509v3 Authority Key Identifier: keyid:98:84:55:84:AC:80:94:C1:80:6B:73:A6:F5:3E:46:B9:A2:8E:81:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mIRVhKyAlMGAa3Om9T5GuaKOgSs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/813010-a96f-4510-9dbc-21f7751ca76c/1/mIRVhKyAlMGAa3Om9T5GuaKOgSs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/06/813010-a96f-4510-9dbc-21f7751ca76c/1/mIRVhKyAlMGAa3Om9T5GuaKOgSs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:c6:b5:41:67:6c:6a:41:e4:1f:75:61:fc:a5:e5:67:5c:f0: 98:4c:4c:e9:8c:ba:f5:5b:3a:1a:d3:2e:92:1b:88:cf:b8:3f: ef:a3:53:fa:f1:28:84:2e:41:79:a5:81:00:9b:c6:d2:d3:a4: ed:9a:f2:f7:0a:83:a7:62:bd:03:08:b4:2a:63:c5:26:74:61: 1c:1f:7d:e4:12:25:be:a9:3d:16:7f:e1:8d:4e:c5:f3:d6:f4: 33:f0:dc:01:fb:6e:24:40:5f:cf:ca:26:63:6d:f1:2d:f7:76: 2b:b4:87:1c:d0:c8:42:5b:b2:1e:b8:b7:b6:1a:b8:cf:ad:2b: 65:65:0b:0b:6b:f3:48:5c:db:c6:17:89:ae:c4:75:78:3d:f0: da:75:c1:ef:a0:e6:ca:b1:40:54:7f:25:66:8a:c4:ed:8e:6c: 85:b5:11:4e:95:c4:e4:cb:13:7e:8f:b6:8c:5a:56:3b:63:fa: b1:84:06:81:55:8a:a0:d6:6a:9d:8c:15:fc:e2:85:08:b7:2c: b6:0e:11:9d:4a:c4:0f:37:20:b7:2a:b5:79:2b:ba:88:26:39: 65:e1:59:a8:fe:b8:de:05:54:32:5a:78:ae:cd:08:e9:1f:00: 2e:5b:d3:77:fe:72:a6:02:68:b1:dd:fd:8d:18:38:b0:22:26: ea:2b:28:91 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzwIkxAv+Cz7R1XYoVKQomMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk4ODQ1NTg0YWM4MDk0YzE4MDZiNzNhNmY1M2U0NmI5YTI4 ZTgxMmIwHhcNMjUxMjA2MTMwMTEyWhcNMjUxMjA3MTMwMTEyWjAzMTEwLwYDVQQD Eyg4ODdhMzkzMWU1ZDQzODBjZmJmYzYxYzRmY2Y4Y2Y1ZjAwZjY4ZjgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzDxd9q+Neo9KPOctopNMJsgBHnxA uDdk/xWZzgrStkwg76eunzg6ACfdxfnd7ZcRjshfveHy+7oFgJKpfZaTdO+YDbBp pTL6UkNhI9Dw1Zu1AqMyd9giuX9NdKCTSiqS6ROePpLz4XCq0/zGFBhsuNvpM80a M5/dx8C+dl0y+Slvn29zLnOqOxI+8UvNlNLWIYHw/kmkqQEKq2//qc5UbJ4NtXl1 EZD/EUhQ9lKTzx0cH48AsA6oshmeEmFOr4V24aFh6+QYB1EdjWiQ7dDcGKpfRTA/ JvuErHUbuZIKfc3caW/gzjPVJn3sDFAnmLKnbHu2IEnOCp5Lp3JX+4Kt6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIh6OTHl1DgM+/xhxPz4z18A9o+BMB8GA1UdIwQY MBaAFJiEVYSsgJTBgGtzpvU+RrmijoErMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbUlSVmhLeUFsTUdBYTNPbTlUNUd1YUtPZ1NzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi84MTMwMTAtYTk2Zi00NTEwLTlkYmMt MjFmNzc1MWNhNzZjLzEvbUlSVmhLeUFsTUdBYTNPbTlUNUd1YUtPZ1NzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNi84MTMwMTAtYTk2Zi00NTEwLTlkYmMtMjFmNzc1MWNhNzZj LzEvbUlSVmhLeUFsTUdBYTNPbTlUNUd1YUtPZ1NzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgMa1QWds akHkH3Vh/KXlZ1zwmExM6Yy69Vs6GtMukhuIz7g/76NT+vEohC5BeaWBAJvG0tOk 7Zry9wqDp2K9Awi0KmPFJnRhHB995BIlvqk9Fn/hjU7F89b0M/DcAftuJEBfz8om Y23xLfd2K7SHHNDIQluyHri3thq4z60rZWULC2vzSFzbxheJrsR1eD3w2nXB76Dm yrFAVH8lZorE7Y5shbURTpXE5MsTfo+2jFpWO2P6sYQGgVWKoNZqnYwV/OKFCLcs tg4RnUrEDzcgtyq1eSu6iCY5ZeFZqP643gVUMlp4rs0I6R8ALlvTd/5ypgJosd39 jRg4sCIm6isokQ== -----END CERTIFICATE-----Generated at Sat Dec 6 16:56:34 2025 by rpki-client