This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/f96dce-3a49-4571-b962-a2fe4991a037/1/mQbOKxqYD70e-Zw_VlNorWIbxPQ.mft File: mQbOKxqYD70e-Zw_VlNorWIbxPQ.mft (raw, json) Hash identifier: /kjt6X61hLO9W7YlWsG8D3GFRlCMp6iT3sSKKV2/pjA= Subject key identifier: 2B:96:19:EA:D4:6F:F7:22:97:3B:99:EF:C0:3F:34:F8:79:2B:C8:24 Authority key identifier: 99:06:CE:2B:1A:98:0F:BD:1E:F9:9C:3F:56:53:68:AD:62:1B:C4:F4 Certificate issuer: /CN=9906ce2b1a980fbd1ef99c3f565368ad621bc4f4 Certificate serial: 019AF31B74C0917029011AB6BE953A478F3B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mQbOKxqYD70e-Zw_VlNorWIbxPQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/f96dce-3a49-4571-b962-a2fe4991a037/1/mQbOKxqYD70e-Zw_VlNorWIbxPQ.mft Manifest number: 0491 Signing time: Sat 06 Dec 2025 10:00:54 +0000 Manifest this update: Sat 06 Dec 2025 10:00:54 +0000 Manifest next update: Sun 07 Dec 2025 10:00:54 +0000 Files and hashes: 1: mQbOKxqYD70e-Zw_VlNorWIbxPQ.crl (hash: RJHxN30uvfkxvEKD0hHyVGvJFe1MvadcHIrOhUUrmy8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/f96dce-3a49-4571-b962-a2fe4991a037/1/mQbOKxqYD70e-Zw_VlNorWIbxPQ.crl rsync://rpki.ripe.net/repository/DEFAULT/2c/f96dce-3a49-4571-b962-a2fe4991a037/1/mQbOKxqYD70e-Zw_VlNorWIbxPQ.mft rsync://rpki.ripe.net/repository/DEFAULT/mQbOKxqYD70e-Zw_VlNorWIbxPQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:74:c0:91:70:29:01:1a:b6:be:95:3a:47:8f:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9906ce2b1a980fbd1ef99c3f565368ad621bc4f4 Validity Not Before: Dec 6 10:00:54 2025 GMT Not After : Dec 7 10:00:54 2025 GMT Subject: CN=2b9619ead46ff722973b99efc03f34f8792bc824 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:f9:c6:7a:29:19:7a:ba:d0:22:55:bf:b1:48: f6:4b:d7:cf:9e:77:ff:5f:80:a0:ee:74:f0:e9:95: 4b:de:6f:98:be:f1:5a:e0:42:b4:ce:c6:de:78:3d: f9:8b:8f:4c:84:cb:a6:c6:c2:4f:64:78:ae:87:07: 35:45:76:b1:5d:b5:39:f5:a7:f1:5b:d2:d0:64:78: 92:f2:d0:17:ea:2d:40:4b:b4:12:65:83:0e:07:c2: 60:84:2a:64:98:5c:6b:ac:f3:38:18:20:10:16:00: b0:cb:ff:d8:88:73:4a:bc:82:d4:9c:00:64:31:a6: 98:6e:1d:d8:44:86:bb:0d:14:c6:6c:2c:4f:9d:95: 01:d3:3d:08:2d:c6:11:78:14:fb:0c:c3:e8:00:67: f5:de:32:82:d5:5c:78:27:4d:61:d6:ff:cc:3d:56: e7:dd:5c:0a:ec:f9:dc:24:92:db:a6:6d:e1:3e:a4: 48:a2:8e:2f:58:7a:d6:cd:1c:9a:9f:cf:b5:3e:15: 1e:9b:36:54:1f:9e:03:aa:e8:fd:1b:a5:23:b7:1a: 06:2e:31:1f:87:aa:43:c2:44:87:bf:91:b4:18:94: 64:92:eb:45:fd:a5:ce:bc:e3:db:8a:b3:0a:1c:7a: 6f:2d:a4:a4:77:b0:00:59:61:ab:a2:69:27:a9:5a: e2:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:96:19:EA:D4:6F:F7:22:97:3B:99:EF:C0:3F:34:F8:79:2B:C8:24 X509v3 Authority Key Identifier: keyid:99:06:CE:2B:1A:98:0F:BD:1E:F9:9C:3F:56:53:68:AD:62:1B:C4:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mQbOKxqYD70e-Zw_VlNorWIbxPQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/f96dce-3a49-4571-b962-a2fe4991a037/1/mQbOKxqYD70e-Zw_VlNorWIbxPQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/f96dce-3a49-4571-b962-a2fe4991a037/1/mQbOKxqYD70e-Zw_VlNorWIbxPQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:43:da:a1:61:78:cc:14:d0:76:32:6d:4b:5a:a4:ea:17:e3: 11:96:14:c3:39:2d:27:dc:af:5d:40:61:11:ba:24:58:a6:45: 4a:82:62:51:00:cb:a2:a2:4c:29:32:ff:a3:a1:f7:61:4b:8d: 17:ec:14:0b:a0:4a:5f:df:60:33:14:25:e2:78:49:c2:a4:07: 63:ed:e3:d9:64:6f:0f:3a:1f:87:82:d0:4f:3e:46:12:26:18: cb:d4:ea:00:8a:98:2d:27:d6:39:26:e1:5a:5f:2a:12:98:56: 38:26:3b:98:df:df:c1:d9:37:06:9f:dd:06:f5:0f:28:52:4c: 56:6d:d3:13:8b:a8:f8:f1:58:9a:ba:d2:42:a8:a7:96:0b:4a: ac:5d:b2:52:73:3c:02:35:a9:a6:e3:2c:46:75:2a:06:b1:8b: dd:38:00:c8:88:b4:c4:13:12:ff:e4:33:e3:2f:84:36:6a:6e: 49:03:7c:10:26:37:13:2a:23:b2:47:77:ab:d3:50:91:64:12: a0:dd:15:06:ce:10:5f:e0:eb:41:90:58:dc:a8:52:70:61:77: 25:a5:d6:b1:d3:00:ce:88:44:f5:5e:d1:48:24:25:0b:d7:1c: 03:e7:9c:55:f7:b0:95:ba:0c:01:92:26:a4:7a:94:92:be:69: f6:ad:3b:06 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG3TAkXApARq2vpU6R487MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk5MDZjZTJiMWE5ODBmYmQxZWY5OWMzZjU2NTM2OGFkNjIx YmM0ZjQwHhcNMjUxMjA2MTAwMDU0WhcNMjUxMjA3MTAwMDU0WjAzMTEwLwYDVQQD EygyYjk2MTllYWQ0NmZmNzIyOTczYjk5ZWZjMDNmMzRmODc5MmJjODI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3PnGeikZerrQIlW/sUj2S9fPnnf/ X4Cg7nTw6ZVL3m+YvvFa4EK0zsbeeD35i49MhMumxsJPZHiuhwc1RXaxXbU59afx W9LQZHiS8tAX6i1AS7QSZYMOB8JghCpkmFxrrPM4GCAQFgCwy//YiHNKvILUnABk MaaYbh3YRIa7DRTGbCxPnZUB0z0ILcYReBT7DMPoAGf13jKC1Vx4J01h1v/MPVbn 3VwK7PncJJLbpm3hPqRIoo4vWHrWzRyan8+1PhUemzZUH54Dquj9G6UjtxoGLjEf h6pDwkSHv5G0GJRkkutF/aXOvOPbirMKHHpvLaSkd7AAWWGromknqVritQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCuWGerUb/cilzuZ78A/NPh5K8gkMB8GA1UdIwQY MBaAFJkGzisamA+9HvmcP1ZTaK1iG8T0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbVFiT0t4cVlENzBlLVp3X1ZsTm9yV0lieFBRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy9mOTZkY2UtM2E0OS00NTcxLWI5NjIt YTJmZTQ5OTFhMDM3LzEvbVFiT0t4cVlENzBlLVp3X1ZsTm9yV0lieFBRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYy9mOTZkY2UtM2E0OS00NTcxLWI5NjItYTJmZTQ5OTFhMDM3 LzEvbVFiT0t4cVlENzBlLVp3X1ZsTm9yV0lieFBRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADEPaoWF4 zBTQdjJtS1qk6hfjEZYUwzktJ9yvXUBhEbokWKZFSoJiUQDLoqJMKTL/o6H3YUuN F+wUC6BKX99gMxQl4nhJwqQHY+3j2WRvDzofh4LQTz5GEiYYy9TqAIqYLSfWOSbh Wl8qEphWOCY7mN/fwdk3Bp/dBvUPKFJMVm3TE4uo+PFYmrrSQqinlgtKrF2yUnM8 AjWppuMsRnUqBrGL3TgAyIi0xBMS/+Qz4y+ENmpuSQN8ECY3Eyojskd3q9NQkWQS oN0VBs4QX+DrQZBY3KhScGF3JaXWsdMAzohE9V7RSCQlC9ccA+ecVfewlboMAZIm pHqUkr5p9q07Bg== -----END CERTIFICATE-----Generated at Sat Dec 6 13:48:44 2025 by rpki-client