This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/d2a3b5-97de-4d47-b1db-45ee5840682c/1/mfseX91w4MDmCIWjBYH-DAJBDX0.mft File: mfseX91w4MDmCIWjBYH-DAJBDX0.mft (raw, json) Hash identifier: +FPdWxT/3YrmcEDym2CHvbwDF5LygwG3/Xc6MlCxFzk= Subject key identifier: 96:1E:95:B8:B2:EA:14:E4:97:B8:B8:E1:8A:CB:8D:A2:AA:74:C7:F8 Authority key identifier: 99:FB:1E:5F:DD:70:E0:C0:E6:08:85:A3:05:81:FE:0C:02:41:0D:7D Certificate issuer: /CN=99fb1e5fdd70e0c0e60885a30581fe0c02410d7d Certificate serial: 019B2740728EF26004C83439BC59CD9AF350 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mfseX91w4MDmCIWjBYH-DAJBDX0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/d2a3b5-97de-4d47-b1db-45ee5840682c/1/mfseX91w4MDmCIWjBYH-DAJBDX0.mft Manifest number: 1779 Signing time: Tue 16 Dec 2025 13:01:33 +0000 Manifest this update: Tue 16 Dec 2025 13:01:33 +0000 Manifest next update: Wed 17 Dec 2025 13:01:33 +0000 Files and hashes: 1: mfseX91w4MDmCIWjBYH-DAJBDX0.crl (hash: UZmwL1iEcVszTJxRxPy0L/f/EqEfT5N29iNVqscBwPc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/d2a3b5-97de-4d47-b1db-45ee5840682c/1/mfseX91w4MDmCIWjBYH-DAJBDX0.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/d2a3b5-97de-4d47-b1db-45ee5840682c/1/mfseX91w4MDmCIWjBYH-DAJBDX0.mft rsync://rpki.ripe.net/repository/DEFAULT/mfseX91w4MDmCIWjBYH-DAJBDX0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 13:01:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:27:40:72:8e:f2:60:04:c8:34:39:bc:59:cd:9a:f3:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99fb1e5fdd70e0c0e60885a30581fe0c02410d7d Validity Not Before: Dec 16 13:01:33 2025 GMT Not After : Dec 17 13:01:33 2025 GMT Subject: CN=961e95b8b2ea14e497b8b8e18acb8da2aa74c7f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:f0:9f:dc:85:de:01:82:ee:6e:41:cf:b0:b0: a1:5a:84:81:6e:09:a5:60:dc:e3:e2:1d:a9:12:ac: 66:42:47:29:84:b9:59:22:b0:f3:6a:38:af:aa:c5: 47:6c:89:7f:b5:68:17:1f:24:bb:8b:e4:96:dc:27: d9:8a:ed:84:a0:da:37:b7:36:f8:95:00:2a:d4:b4: ba:be:db:64:8e:8a:98:94:e1:b7:9a:c2:28:1b:94: 76:ee:5b:b8:e8:09:df:d8:3e:72:0d:d0:b8:0c:9e: b4:c2:9f:fb:3b:bc:61:0b:79:f1:91:ae:9a:95:00: ed:16:fd:26:75:74:8f:ef:4d:a8:40:5d:c3:d0:9d: e3:87:4c:cd:69:2f:c8:50:cc:d7:e0:23:7f:bb:75: 3e:66:5b:14:68:37:76:10:e2:a6:48:0d:b5:e3:80: 3f:37:67:69:56:0f:4a:e0:2b:7a:c1:81:d3:5d:98: da:6d:6e:b1:18:e2:83:71:4d:69:53:e3:19:f9:f4: 02:74:5c:2c:0b:cf:6b:66:b4:63:1c:af:d3:6f:35: 38:dc:2f:64:bd:42:f4:de:f5:7a:8b:f9:6f:a8:2c: 44:ed:4a:fa:ba:c4:a8:c0:06:47:98:e6:56:11:9b: 7f:86:67:a1:7a:28:7d:ee:fa:8c:ac:15:84:70:84: de:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:1E:95:B8:B2:EA:14:E4:97:B8:B8:E1:8A:CB:8D:A2:AA:74:C7:F8 X509v3 Authority Key Identifier: keyid:99:FB:1E:5F:DD:70:E0:C0:E6:08:85:A3:05:81:FE:0C:02:41:0D:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mfseX91w4MDmCIWjBYH-DAJBDX0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/d2a3b5-97de-4d47-b1db-45ee5840682c/1/mfseX91w4MDmCIWjBYH-DAJBDX0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/d2a3b5-97de-4d47-b1db-45ee5840682c/1/mfseX91w4MDmCIWjBYH-DAJBDX0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:f6:39:76:2c:30:10:04:88:d8:ec:80:de:1d:bd:a9:63:9d: 7f:37:96:11:91:cb:8f:34:7f:b5:3d:02:98:16:b7:51:d0:ba: 26:97:6b:ac:24:6a:18:85:4a:8b:4f:82:14:2e:a2:29:13:3d: 0a:1a:10:79:f7:7f:44:65:be:4e:ca:ca:df:83:28:09:15:65: 9a:11:4b:bb:2f:e4:2c:67:29:42:89:6d:a9:ce:e5:d6:16:c0: 82:b1:e6:02:cf:f0:36:5f:ac:7b:e5:fa:58:b1:cd:54:62:30: 10:7e:4d:48:41:e8:e0:9c:0d:a7:06:7b:b6:f4:e3:de:80:56: 91:5a:97:80:5d:d4:8d:7c:97:51:18:3f:88:10:6c:cb:e5:55: 32:e8:7f:08:94:79:2d:6c:15:7f:02:08:01:f5:96:c6:52:8d: 2d:f4:db:0c:00:79:50:8c:0c:6c:64:af:11:49:09:72:d7:b6: 18:f5:bd:0a:99:b2:37:f9:7f:1e:1a:2d:7d:27:fe:99:86:71: 42:57:21:2b:ea:3c:8c:32:86:18:10:ff:bd:62:27:95:c7:47: fb:c6:d7:16:60:4d:f9:23:54:6e:5a:42:32:05:04:ad:6c:32: 24:7b:4c:c4:fe:7e:1d:21:ad:a4:52:7f:73:72:c2:33:4d:dd: 15:98:82:a9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsnQHKO8mAEyDQ5vFnNmvNQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk5ZmIxZTVmZGQ3MGUwYzBlNjA4ODVhMzA1ODFmZTBjMDI0 MTBkN2QwHhcNMjUxMjE2MTMwMTMzWhcNMjUxMjE3MTMwMTMzWjAzMTEwLwYDVQQD Eyg5NjFlOTViOGIyZWExNGU0OTdiOGI4ZTE4YWNiOGRhMmFhNzRjN2Y4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnPCf3IXeAYLubkHPsLChWoSBbgml YNzj4h2pEqxmQkcphLlZIrDzajivqsVHbIl/tWgXHyS7i+SW3CfZiu2EoNo3tzb4 lQAq1LS6vttkjoqYlOG3msIoG5R27lu46Anf2D5yDdC4DJ60wp/7O7xhC3nxka6a lQDtFv0mdXSP702oQF3D0J3jh0zNaS/IUMzX4CN/u3U+ZlsUaDd2EOKmSA2144A/ N2dpVg9K4Ct6wYHTXZjabW6xGOKDcU1pU+MZ+fQCdFwsC89rZrRjHK/TbzU43C9k vUL03vV6i/lvqCxE7Ur6usSowAZHmOZWEZt/hmeheih97vqMrBWEcITetwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJYelbiy6hTkl7i44YrLjaKqdMf4MB8GA1UdIwQY MBaAFJn7Hl/dcODA5giFowWB/gwCQQ19MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbWZzZVg5MXc0TURtQ0lXakJZSC1EQUpCRFgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS9kMmEzYjUtOTdkZS00ZDQ3LWIxZGIt NDVlZTU4NDA2ODJjLzEvbWZzZVg5MXc0TURtQ0lXakJZSC1EQUpCRFgwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS9kMmEzYjUtOTdkZS00ZDQ3LWIxZGItNDVlZTU4NDA2ODJj LzEvbWZzZVg5MXc0TURtQ0lXakJZSC1EQUpCRFgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUPY5diww EASI2OyA3h29qWOdfzeWEZHLjzR/tT0CmBa3UdC6JpdrrCRqGIVKi0+CFC6iKRM9 ChoQefd/RGW+TsrK34MoCRVlmhFLuy/kLGcpQoltqc7l1hbAgrHmAs/wNl+se+X6 WLHNVGIwEH5NSEHo4JwNpwZ7tvTj3oBWkVqXgF3UjXyXURg/iBBsy+VVMuh/CJR5 LWwVfwIIAfWWxlKNLfTbDAB5UIwMbGSvEUkJcte2GPW9CpmyN/l/HhotfSf+mYZx QlchK+o8jDKGGBD/vWInlcdH+8bXFmBN+SNUblpCMgUErWwyJHtMxP5+HSGtpFJ/ c3LCM03dFZiCqQ== -----END CERTIFICATE-----Generated at Tue Dec 16 19:44:32 2025 by rpki-client