This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/410d94-af78-4397-adfe-48d738c5947d/1/mdOi1vrWUWeOltJOJNGdcf44BAk.mft File: mdOi1vrWUWeOltJOJNGdcf44BAk.mft (raw, json) Hash identifier: CKx+1OQG1Atd1OZJtzZX/eAp9jkHcfcD/j1YCZmvqZw= Subject key identifier: FB:EC:14:7B:AB:94:1E:A8:C9:22:E2:1F:3F:50:75:77:90:8C:AB:5F Authority key identifier: 99:D3:A2:D6:FA:D6:51:67:8E:96:D2:4E:24:D1:9D:71:FE:38:04:09 Certificate issuer: /CN=99d3a2d6fad651678e96d24e24d19d71fe380409 Certificate serial: 019AF1D2254EA7218AF683BBC65BDC3FCED9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mdOi1vrWUWeOltJOJNGdcf44BAk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/410d94-af78-4397-adfe-48d738c5947d/1/mdOi1vrWUWeOltJOJNGdcf44BAk.mft Manifest number: 0F9C Signing time: Sat 06 Dec 2025 04:01:12 +0000 Manifest this update: Sat 06 Dec 2025 04:01:12 +0000 Manifest next update: Sun 07 Dec 2025 04:01:12 +0000 Files and hashes: 1: WVEl02tR4FpSWGE0ahJdvTx1Yno.roa (hash: 5NNyoAtIIwqGJh3NNq7YS6x3xdzErX6ICXLZ0eVA/9g=) 2: Z259DsTig8t3A9cd7HAu8mMPpR0.roa (hash: JRmS+LkkqmTVluxufvzadoY4Pc8kUr0Ok9oaH67NvH8=) 3: _ltzxuGkz6znSaa7SgLi6XMBftU.roa (hash: +kNXhyoqNb3mbEFSERmsDLNGdx3dBqclzBGCcZo07A0=) 4: mdOi1vrWUWeOltJOJNGdcf44BAk.crl (hash: pMiz85ggknMOJBuVphC3Ygz1QHjQHpSudr8DFIH7ts8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/410d94-af78-4397-adfe-48d738c5947d/1/mdOi1vrWUWeOltJOJNGdcf44BAk.crl rsync://rpki.ripe.net/repository/DEFAULT/25/410d94-af78-4397-adfe-48d738c5947d/1/mdOi1vrWUWeOltJOJNGdcf44BAk.mft rsync://rpki.ripe.net/repository/DEFAULT/mdOi1vrWUWeOltJOJNGdcf44BAk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:25:4e:a7:21:8a:f6:83:bb:c6:5b:dc:3f:ce:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99d3a2d6fad651678e96d24e24d19d71fe380409 Validity Not Before: Dec 6 04:01:12 2025 GMT Not After : Dec 7 04:01:12 2025 GMT Subject: CN=fbec147bab941ea8c922e21f3f507577908cab5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:6a:f1:80:5e:20:41:e3:45:02:d9:b4:39:16: 74:ca:3f:73:92:13:af:06:7d:22:54:27:ab:32:b4: 02:8c:5f:ac:c5:e8:a2:96:e2:eb:a2:1f:0f:12:cf: 1d:7c:42:2f:ab:cd:f6:f4:f2:dd:2c:d4:6f:a2:03: 6d:68:fe:fc:e0:3d:03:51:06:2e:d7:27:ec:af:3e: 86:ae:36:75:47:f0:1a:6c:14:43:09:88:37:66:99: 5c:70:72:1b:92:e4:65:36:f5:fa:71:65:50:a7:0c: 2e:f1:0b:17:34:47:d7:a4:e9:f3:48:d7:d8:d2:a4: dc:0a:97:68:4e:c9:ec:fd:20:6a:23:57:1d:0e:3e: b9:11:e4:2c:92:67:0f:48:6e:99:a8:c3:e0:f3:78: 68:6d:55:42:42:d4:9f:64:21:6d:b3:26:90:12:a6: 2c:57:63:9f:8d:1b:31:c4:10:8a:fd:c1:cc:3c:24: 3d:ae:a1:e9:94:25:99:20:16:1e:28:64:f4:41:de: 40:b6:66:62:b8:38:a1:46:4a:82:ee:1e:9f:00:89: 20:6e:4e:0c:21:86:43:a0:85:44:ce:6c:37:81:97: 38:2d:16:41:10:92:f6:9c:58:27:f4:28:58:95:15: 4e:6d:af:16:1b:d7:70:d2:ee:c9:ea:b6:b8:05:59: b9:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:EC:14:7B:AB:94:1E:A8:C9:22:E2:1F:3F:50:75:77:90:8C:AB:5F X509v3 Authority Key Identifier: keyid:99:D3:A2:D6:FA:D6:51:67:8E:96:D2:4E:24:D1:9D:71:FE:38:04:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mdOi1vrWUWeOltJOJNGdcf44BAk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/410d94-af78-4397-adfe-48d738c5947d/1/mdOi1vrWUWeOltJOJNGdcf44BAk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/410d94-af78-4397-adfe-48d738c5947d/1/mdOi1vrWUWeOltJOJNGdcf44BAk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:96:c6:41:af:cc:16:ce:0a:f1:ee:9c:ea:2e:37:e0:47:dc: 66:21:30:13:a7:ab:96:81:b3:c3:32:5f:50:3a:92:8d:21:bb: 1b:58:52:fe:ff:4a:41:ef:06:7b:12:42:a7:71:15:98:0b:fe: cb:32:37:bc:4a:78:c3:91:4c:ec:a0:f8:ea:e1:89:0d:1a:3c: d0:20:51:58:fb:2f:13:80:af:8e:10:b7:65:6b:11:a6:83:be: 80:2f:bb:19:71:be:34:0e:28:91:61:18:ae:d1:41:66:fc:81: 40:89:8b:88:83:df:40:b3:10:ba:e3:de:ce:8a:14:57:53:22: 6e:3d:22:16:a7:e9:4f:7e:78:28:80:e6:05:01:71:ed:50:63: 12:ad:68:cd:f5:29:46:4a:41:61:bf:88:11:cd:b5:ab:9d:3a: d1:65:58:6b:32:92:00:86:6e:43:8e:df:d2:01:9b:2a:87:1c: bb:dd:90:34:29:5f:02:54:94:22:9e:bb:17:d7:f0:44:8d:15: 53:52:8f:28:e4:37:2d:f5:79:9f:77:88:f9:d3:c9:ba:11:bd: 64:a3:49:00:86:b0:1c:b9:75:9b:a2:31:41:19:64:ab:55:87: 80:fe:8a:40:40:aa:e4:ba:77:43:7f:38:31:df:c9:48:17:69: f6:27:ae:0c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0iVOpyGK9oO7xlvcP87ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk5ZDNhMmQ2ZmFkNjUxNjc4ZTk2ZDI0ZTI0ZDE5ZDcxZmUz ODA0MDkwHhcNMjUxMjA2MDQwMTEyWhcNMjUxMjA3MDQwMTEyWjAzMTEwLwYDVQQD EyhmYmVjMTQ3YmFiOTQxZWE4YzkyMmUyMWYzZjUwNzU3NzkwOGNhYjVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoGrxgF4gQeNFAtm0ORZ0yj9zkhOv Bn0iVCerMrQCjF+sxeiiluLroh8PEs8dfEIvq8329PLdLNRvogNtaP784D0DUQYu 1yfsrz6GrjZ1R/AabBRDCYg3ZplccHIbkuRlNvX6cWVQpwwu8QsXNEfXpOnzSNfY 0qTcCpdoTsns/SBqI1cdDj65EeQskmcPSG6ZqMPg83hobVVCQtSfZCFtsyaQEqYs V2OfjRsxxBCK/cHMPCQ9rqHplCWZIBYeKGT0Qd5AtmZiuDihRkqC7h6fAIkgbk4M IYZDoIVEzmw3gZc4LRZBEJL2nFgn9ChYlRVOba8WG9dw0u7J6ra4BVm5wQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPvsFHurlB6oySLiHz9QdXeQjKtfMB8GA1UdIwQY MBaAFJnTotb61lFnjpbSTiTRnXH+OAQJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbWRPaTF2cldVV2VPbHRKT0pOR2RjZjQ0QkFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS80MTBkOTQtYWY3OC00Mzk3LWFkZmUt NDhkNzM4YzU5NDdkLzEvbWRPaTF2cldVV2VPbHRKT0pOR2RjZjQ0QkFrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS80MTBkOTQtYWY3OC00Mzk3LWFkZmUtNDhkNzM4YzU5NDdk LzEvbWRPaTF2cldVV2VPbHRKT0pOR2RjZjQ0QkFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGJbGQa/M Fs4K8e6c6i434EfcZiEwE6erloGzwzJfUDqSjSG7G1hS/v9KQe8GexJCp3EVmAv+ yzI3vEp4w5FM7KD46uGJDRo80CBRWPsvE4CvjhC3ZWsRpoO+gC+7GXG+NA4okWEY rtFBZvyBQImLiIPfQLMQuuPezooUV1Mibj0iFqfpT354KIDmBQFx7VBjEq1ozfUp RkpBYb+IEc21q5060WVYazKSAIZuQ47f0gGbKoccu92QNClfAlSUIp67F9fwRI0V U1KPKOQ3LfV5n3eI+dPJuhG9ZKNJAIawHLl1m6IxQRlkq1WHgP6KQECq5Lp3Q384 Md/JSBdp9ieuDA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:06:59 2025 by rpki-client