This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/d2a3b5-97de-4d47-b1db-45ee5840682c/1/mfseX91w4MDmCIWjBYH-DAJBDX0.mft File: mfseX91w4MDmCIWjBYH-DAJBDX0.mft (raw, json) Hash identifier: K26C3flwzE0gMagJqpjEvTdpzLK9qrg0jzWYVxvCW74= Subject key identifier: E1:00:B7:9B:0B:A2:EF:B4:7F:AE:78:8D:2D:BC:46:77:B1:FF:29:80 Authority key identifier: 99:FB:1E:5F:DD:70:E0:C0:E6:08:85:A3:05:81:FE:0C:02:41:0D:7D Certificate issuer: /CN=99fb1e5fdd70e0c0e60885a30581fe0c02410d7d Certificate serial: 019AF12D9E4610C557E77A4FA9250854F3CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mfseX91w4MDmCIWjBYH-DAJBDX0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/d2a3b5-97de-4d47-b1db-45ee5840682c/1/mfseX91w4MDmCIWjBYH-DAJBDX0.mft Manifest number: 175D Signing time: Sat 06 Dec 2025 01:01:29 +0000 Manifest this update: Sat 06 Dec 2025 01:01:29 +0000 Manifest next update: Sun 07 Dec 2025 01:01:29 +0000 Files and hashes: 1: mfseX91w4MDmCIWjBYH-DAJBDX0.crl (hash: xCPq84W6WI+vZDdvO59O3AhMrIGa/VgGdP5lNi8pSYs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/d2a3b5-97de-4d47-b1db-45ee5840682c/1/mfseX91w4MDmCIWjBYH-DAJBDX0.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/d2a3b5-97de-4d47-b1db-45ee5840682c/1/mfseX91w4MDmCIWjBYH-DAJBDX0.mft rsync://rpki.ripe.net/repository/DEFAULT/mfseX91w4MDmCIWjBYH-DAJBDX0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:9e:46:10:c5:57:e7:7a:4f:a9:25:08:54:f3:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99fb1e5fdd70e0c0e60885a30581fe0c02410d7d Validity Not Before: Dec 6 01:01:29 2025 GMT Not After : Dec 7 01:01:29 2025 GMT Subject: CN=e100b79b0ba2efb47fae788d2dbc4677b1ff2980 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:32:a2:27:04:e1:f5:a2:e5:bd:e3:67:86:60: a0:f3:91:00:43:ea:93:fa:f9:57:7d:10:d5:26:79: f6:e2:7f:29:d6:02:69:35:a4:b6:71:09:c2:1c:c9: ef:e5:f1:5e:a8:26:7d:19:67:bd:51:82:51:0d:10: 5c:55:b2:d4:eb:88:02:be:f4:e2:dd:a2:28:1b:7c: df:61:c5:f1:d1:c6:12:59:39:97:04:6b:16:9b:1f: 25:9f:48:2d:25:4f:45:d1:f4:ed:45:79:01:b0:5c: 8d:53:75:01:b8:5e:10:a3:e6:22:48:93:45:79:c0: 8c:ba:d8:bc:04:c0:98:48:c7:61:36:7f:85:f3:2d: 3b:28:3c:3f:e5:31:be:d0:eb:5e:3b:69:d9:e3:98: ad:42:f4:77:02:46:9e:61:38:a2:a4:ca:39:20:09: 1a:81:e8:41:cb:e7:4d:7d:a0:9b:98:dd:0b:09:da: 89:df:81:70:c6:6b:a1:26:72:89:7a:5c:c8:21:98: e8:a3:ba:a5:2d:2c:20:f3:f4:ed:eb:cb:24:c0:e5: fc:cc:fd:98:0a:28:2c:fc:cc:1c:e0:20:4e:ad:f6: 11:b2:0c:a9:00:2b:4e:aa:ca:1f:be:ea:85:ea:03: 39:ce:8e:eb:95:67:20:83:74:08:11:23:77:c0:4d: a8:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:00:B7:9B:0B:A2:EF:B4:7F:AE:78:8D:2D:BC:46:77:B1:FF:29:80 X509v3 Authority Key Identifier: keyid:99:FB:1E:5F:DD:70:E0:C0:E6:08:85:A3:05:81:FE:0C:02:41:0D:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mfseX91w4MDmCIWjBYH-DAJBDX0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/d2a3b5-97de-4d47-b1db-45ee5840682c/1/mfseX91w4MDmCIWjBYH-DAJBDX0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/d2a3b5-97de-4d47-b1db-45ee5840682c/1/mfseX91w4MDmCIWjBYH-DAJBDX0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:14:b0:4a:5d:48:f1:b3:99:ad:b2:02:a9:ac:3e:0a:f4:1f: d4:35:16:b1:d5:e3:d4:e9:1a:e0:06:64:ec:50:42:cb:fa:c8: 3d:0e:9d:05:46:89:85:3b:cf:52:76:6b:71:8c:14:91:a5:f9: 08:13:c6:49:bf:b1:bf:5a:d9:31:4d:ee:91:0a:0a:e2:9d:a5: 2b:0f:be:bc:eb:03:b7:0f:20:32:33:c2:0a:dc:a7:9b:50:27: 6f:26:e6:90:96:23:f1:46:d8:29:a4:70:d0:21:33:d0:ba:de: c8:99:8d:ef:62:4a:24:2c:24:07:2d:25:37:a9:5f:dd:46:23: 96:93:76:fa:7d:02:e8:71:82:ed:c3:93:da:ee:ab:65:81:59: f5:05:c1:6f:62:54:a1:a5:45:c1:15:e4:52:33:59:64:d8:84: d4:f3:8a:f8:aa:9a:68:db:21:9c:27:b3:dc:39:7c:c8:02:ce: 5e:18:fe:63:a2:f0:0b:d2:b2:45:17:46:41:c0:fb:6e:8b:e9: 28:bd:0d:4a:b4:c8:ed:a1:7c:26:7d:58:1e:e3:74:7f:42:95: 10:a7:20:70:dd:9d:4a:f7:72:1f:d9:3b:72:fa:0a:d8:46:73: 81:c6:c1:7d:78:9b:77:bc:1d:76:54:4a:94:db:33:f9:bf:d1: dc:9e:24:87 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLZ5GEMVX53pPqSUIVPPLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk5ZmIxZTVmZGQ3MGUwYzBlNjA4ODVhMzA1ODFmZTBjMDI0 MTBkN2QwHhcNMjUxMjA2MDEwMTI5WhcNMjUxMjA3MDEwMTI5WjAzMTEwLwYDVQQD EyhlMTAwYjc5YjBiYTJlZmI0N2ZhZTc4OGQyZGJjNDY3N2IxZmYyOTgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsjKiJwTh9aLlveNnhmCg85EAQ+qT +vlXfRDVJnn24n8p1gJpNaS2cQnCHMnv5fFeqCZ9GWe9UYJRDRBcVbLU64gCvvTi 3aIoG3zfYcXx0cYSWTmXBGsWmx8ln0gtJU9F0fTtRXkBsFyNU3UBuF4Qo+YiSJNF ecCMuti8BMCYSMdhNn+F8y07KDw/5TG+0OteO2nZ45itQvR3AkaeYTiipMo5IAka gehBy+dNfaCbmN0LCdqJ34FwxmuhJnKJelzIIZjoo7qlLSwg8/Tt68skwOX8zP2Y Cigs/Mwc4CBOrfYRsgypACtOqsofvuqF6gM5zo7rlWcgg3QIESN3wE2oFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOEAt5sLou+0f654jS28Rnex/ymAMB8GA1UdIwQY MBaAFJn7Hl/dcODA5giFowWB/gwCQQ19MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbWZzZVg5MXc0TURtQ0lXakJZSC1EQUpCRFgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS9kMmEzYjUtOTdkZS00ZDQ3LWIxZGIt NDVlZTU4NDA2ODJjLzEvbWZzZVg5MXc0TURtQ0lXakJZSC1EQUpCRFgwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS9kMmEzYjUtOTdkZS00ZDQ3LWIxZGItNDVlZTU4NDA2ODJj LzEvbWZzZVg5MXc0TURtQ0lXakJZSC1EQUpCRFgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFRSwSl1I 8bOZrbICqaw+CvQf1DUWsdXj1Oka4AZk7FBCy/rIPQ6dBUaJhTvPUnZrcYwUkaX5 CBPGSb+xv1rZMU3ukQoK4p2lKw++vOsDtw8gMjPCCtynm1AnbybmkJYj8UbYKaRw 0CEz0LreyJmN72JKJCwkBy0lN6lf3UYjlpN2+n0C6HGC7cOT2u6rZYFZ9QXBb2JU oaVFwRXkUjNZZNiE1POK+KqaaNshnCez3Dl8yALOXhj+Y6LwC9KyRRdGQcD7bovp KL0NSrTI7aF8Jn1YHuN0f0KVEKcgcN2dSvdyH9k7cvoK2EZzgcbBfXibd7wddlRK lNsz+b/R3J4khw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:16:20 2025 by rpki-client