This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/0dd4cb-1f72-40ed-a657-1c22eff72818/1/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.mft File: mf7ny9jnjR8UpFOgS5FvfBWB0gQ.mft (raw, json) Hash identifier: nVpc8WXFyGFuq8UcVMIon/lO5V5yTuy8D2AosJRdE6E= Subject key identifier: 4E:83:3E:7C:B9:42:8D:AE:86:78:2C:98:48:79:8C:6C:57:A2:6B:61 Authority key identifier: 99:FE:E7:CB:D8:E7:8D:1F:14:A4:53:A0:4B:91:6F:7C:15:81:D2:04 Certificate issuer: /CN=99fee7cbd8e78d1f14a453a04b916f7c1581d204 Certificate serial: 019AF2ADB5FC055F7EFE9690FB6380A7883E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/0dd4cb-1f72-40ed-a657-1c22eff72818/1/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.mft Manifest number: 1153 Signing time: Sat 06 Dec 2025 08:01:01 +0000 Manifest this update: Sat 06 Dec 2025 08:01:01 +0000 Manifest next update: Sun 07 Dec 2025 08:01:01 +0000 Files and hashes: 1: LghvM2HkoxwkfnMrVuGOmbXEEys.roa (hash: 1OZRBAIe8Cgw+ndoc+DfU+Xu6V9sRaXB9Lxh1AlcmzI=) 2: OalAb_NOtnnw1Uf7t2E7JPJ6VoY.roa (hash: /2DSINFIyLLAuWT+NSN2AERglHoq5WMezjiuaEAGBLc=) 3: UMwJfotBVzQ9ei8MWZTF-MMyZ9s.roa (hash: 7E8VN4G/FyL9Hwi63NY6rXsJXVoge0Qr5gQg0WbzGjo=) 4: YLlE5pxTdS6tg_rMJZiHRJCBtz0.roa (hash: Bw/ViWsgEqyxUU4QLJ0NfAmaEK6jP82CD1tF0xNBYgI=) 5: i0UQOeJ6YNtAxZECZiMmxjiaF3I.roa (hash: Tq5saoxoAZ2SR0wF+u5fAsszTDxNlUp7BPSS54+/SOc=) 6: mf7ny9jnjR8UpFOgS5FvfBWB0gQ.crl (hash: nEDLsN02CEB4wPAodyV6fyjWMBlHOZFCaU+J0TbkFws=) 7: qOY7wbeKs3nIQqhImhSE17lPdCk.roa (hash: jaqajIIr+ngeFDOwuzVR6399SRRk8jyurbScXxLtxAE=) 8: qpRtX4nTQAXf7W0iXup_p_c22k0.roa (hash: oaoByfuIIELfDuNhi1s5K/79IREcQBqmDkYcHlpZHyI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/0dd4cb-1f72-40ed-a657-1c22eff72818/1/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.crl rsync://rpki.ripe.net/repository/DEFAULT/29/0dd4cb-1f72-40ed-a657-1c22eff72818/1/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.mft rsync://rpki.ripe.net/repository/DEFAULT/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:b5:fc:05:5f:7e:fe:96:90:fb:63:80:a7:88:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99fee7cbd8e78d1f14a453a04b916f7c1581d204 Validity Not Before: Dec 6 08:01:01 2025 GMT Not After : Dec 7 08:01:01 2025 GMT Subject: CN=4e833e7cb9428dae86782c9848798c6c57a26b61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:44:8e:4b:30:56:f1:f2:7f:4b:df:1a:b6:0a: d6:db:9c:31:c5:85:d3:d8:af:ef:53:24:f5:49:80: a9:1c:1a:ab:2c:6f:be:81:80:f6:e2:f0:2f:7f:56: 32:66:cd:3a:7e:98:71:5d:c2:d7:b6:64:4c:13:df: dd:86:40:23:de:a7:bd:52:e7:43:18:a0:e7:6b:c5: 0e:b5:35:3b:6f:03:e3:5e:5e:79:b5:8f:0a:b2:f1: 8a:e8:b8:06:bb:db:6b:12:2f:d0:37:32:e9:1a:f6: 6a:66:3a:6f:5c:09:a4:84:7d:70:9e:54:79:bd:25: 29:c5:39:d8:c8:e5:ab:d7:58:a7:c2:71:82:b4:fd: 14:57:3f:ea:db:fa:4c:21:3d:47:d2:9f:44:6a:7a: b1:3d:eb:8a:6e:3e:1a:bf:01:d8:c6:0c:b8:95:99: b0:93:46:3d:fd:4c:6c:85:e8:83:83:ba:32:76:30: 5c:86:ae:9f:24:ea:98:dc:6a:cf:f6:8f:ce:30:7e: 64:41:c0:97:22:08:98:48:69:69:ea:ca:57:92:ec: 1c:72:7e:74:97:6d:46:42:ab:5b:6e:27:ed:a6:8b: 73:ff:02:2e:08:a3:73:71:89:91:c4:46:97:a4:ed: 29:27:1f:3c:eb:9b:8e:f6:a2:29:b4:b6:0a:f4:e1: 42:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:83:3E:7C:B9:42:8D:AE:86:78:2C:98:48:79:8C:6C:57:A2:6B:61 X509v3 Authority Key Identifier: keyid:99:FE:E7:CB:D8:E7:8D:1F:14:A4:53:A0:4B:91:6F:7C:15:81:D2:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/0dd4cb-1f72-40ed-a657-1c22eff72818/1/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/0dd4cb-1f72-40ed-a657-1c22eff72818/1/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:6d:cc:05:91:3a:5c:5a:7e:35:95:0c:7b:b1:e8:30:77:5c: d4:c1:42:33:4c:a9:e9:40:84:d9:f9:83:87:61:17:43:c7:6e: dc:97:74:36:56:ca:b2:37:4d:66:f1:02:98:cc:59:a1:57:87: 7c:1b:eb:08:ed:1e:c4:b2:8c:91:74:ad:97:70:14:ab:f0:34: 68:a8:ce:95:87:2e:bd:a4:62:47:a6:eb:ae:e4:d4:32:fc:47: 9f:51:77:16:92:ad:7e:6d:5c:bb:c2:5b:d5:de:dd:6c:52:5d: 1c:34:ba:d4:3e:5c:33:41:1a:39:90:1c:bc:86:bb:41:4a:d7: f0:75:c2:14:a9:30:83:cd:19:e9:08:5c:4b:88:4b:09:aa:fb: 1a:c9:2a:b7:19:b3:fd:d7:34:57:1c:0f:71:76:8e:ac:aa:56: ad:32:37:c3:9c:68:ca:65:ee:93:6c:e5:3c:04:66:31:4b:fd: 09:9d:ac:59:aa:a0:09:32:61:ec:77:b0:5f:35:96:61:6d:13: 1b:2d:0d:d7:6b:fa:60:f2:42:96:f0:47:da:b2:a2:a2:3a:3a: 23:8d:60:84:42:ba:dc:ef:8a:e2:50:c6:99:61:f3:a0:17:6c: e5:16:75:7f:22:65:8e:db:31:fe:bd:9e:15:2f:66:eb:f3:ab: ce:a9:d7:60 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrbX8BV9+/paQ+2OAp4g+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk5ZmVlN2NiZDhlNzhkMWYxNGE0NTNhMDRiOTE2ZjdjMTU4 MWQyMDQwHhcNMjUxMjA2MDgwMTAxWhcNMjUxMjA3MDgwMTAxWjAzMTEwLwYDVQQD Eyg0ZTgzM2U3Y2I5NDI4ZGFlODY3ODJjOTg0ODc5OGM2YzU3YTI2YjYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5kSOSzBW8fJ/S98atgrW25wxxYXT 2K/vUyT1SYCpHBqrLG++gYD24vAvf1YyZs06fphxXcLXtmRME9/dhkAj3qe9UudD GKDna8UOtTU7bwPjXl55tY8KsvGK6LgGu9trEi/QNzLpGvZqZjpvXAmkhH1wnlR5 vSUpxTnYyOWr11inwnGCtP0UVz/q2/pMIT1H0p9EanqxPeuKbj4avwHYxgy4lZmw k0Y9/UxsheiDg7oydjBchq6fJOqY3GrP9o/OMH5kQcCXIgiYSGlp6spXkuwccn50 l21GQqtbbiftpotz/wIuCKNzcYmRxEaXpO0pJx8865uO9qIptLYK9OFCXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE6DPny5Qo2uhngsmEh5jGxXomthMB8GA1UdIwQY MBaAFJn+58vY540fFKRToEuRb3wVgdIEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbWY3bnk5am5qUjhVcEZPZ1M1RnZmQldCMGdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8wZGQ0Y2ItMWY3Mi00MGVkLWE2NTct MWMyMmVmZjcyODE4LzEvbWY3bnk5am5qUjhVcEZPZ1M1RnZmQldCMGdRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS8wZGQ0Y2ItMWY3Mi00MGVkLWE2NTctMWMyMmVmZjcyODE4 LzEvbWY3bnk5am5qUjhVcEZPZ1M1RnZmQldCMGdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHG3MBZE6 XFp+NZUMe7HoMHdc1MFCM0yp6UCE2fmDh2EXQ8du3Jd0NlbKsjdNZvECmMxZoVeH fBvrCO0exLKMkXStl3AUq/A0aKjOlYcuvaRiR6brruTUMvxHn1F3FpKtfm1cu8Jb 1d7dbFJdHDS61D5cM0EaOZAcvIa7QUrX8HXCFKkwg80Z6QhcS4hLCar7Gskqtxmz /dc0VxwPcXaOrKpWrTI3w5xoymXuk2zlPARmMUv9CZ2sWaqgCTJh7HewXzWWYW0T Gy0N12v6YPJClvBH2rKiojo6I41ghEK63O+K4lDGmWHzoBds5RZ1fyJljtsx/r2e FS9m6/OrzqnXYA== -----END CERTIFICATE-----Generated at Sat Dec 6 12:39:08 2025 by rpki-client