This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/bdbde0-1d97-4126-93e6-8e77173dc4bc/1/_MrtD4HiSNrzMrgIQ9Sino19UeQ.mft File: _MrtD4HiSNrzMrgIQ9Sino19UeQ.mft (raw, json) Hash identifier: //AND3wFBIbjXZOVx/7FB0LRPXQvvX30BYNUb3zN0bM= Subject key identifier: 6A:E9:81:5D:25:98:96:20:70:CC:50:0C:59:8D:29:7C:C9:C2:CE:82 Authority key identifier: FC:CA:ED:0F:81:E2:48:DA:F3:32:B8:08:43:D4:A2:9E:8D:7D:51:E4 Certificate issuer: /CN=fccaed0f81e248daf332b80843d4a29e8d7d51e4 Certificate serial: 019AF23F69FCB5886F782A02C16DAD184CB8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_MrtD4HiSNrzMrgIQ9Sino19UeQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/bdbde0-1d97-4126-93e6-8e77173dc4bc/1/_MrtD4HiSNrzMrgIQ9Sino19UeQ.mft Manifest number: 148B Signing time: Sat 06 Dec 2025 06:00:33 +0000 Manifest this update: Sat 06 Dec 2025 06:00:33 +0000 Manifest next update: Sun 07 Dec 2025 06:00:33 +0000 Files and hashes: 1: IYbiKXlQmjVmc2EBeJ1ZyhaFvEg.roa (hash: 4Xy4cTbgeWofaNajn2cgHkph6DzzB6nqlaBQdJk6xLo=) 2: _MrtD4HiSNrzMrgIQ9Sino19UeQ.crl (hash: j+6nrjCdOl3ufuSykkiCyMOgWcOsyQXFk7PIoL0hQK8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/bdbde0-1d97-4126-93e6-8e77173dc4bc/1/_MrtD4HiSNrzMrgIQ9Sino19UeQ.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/bdbde0-1d97-4126-93e6-8e77173dc4bc/1/_MrtD4HiSNrzMrgIQ9Sino19UeQ.mft rsync://rpki.ripe.net/repository/DEFAULT/_MrtD4HiSNrzMrgIQ9Sino19UeQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:69:fc:b5:88:6f:78:2a:02:c1:6d:ad:18:4c:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fccaed0f81e248daf332b80843d4a29e8d7d51e4 Validity Not Before: Dec 6 06:00:33 2025 GMT Not After : Dec 7 06:00:33 2025 GMT Subject: CN=6ae9815d2598962070cc500c598d297cc9c2ce82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:d4:27:7a:74:24:92:ab:9a:12:fe:f8:db:0e: 36:a0:56:e7:36:a6:e9:de:33:ab:95:7e:3f:43:fe: 0a:03:1c:06:47:a7:48:c8:e2:a2:27:8e:56:87:f9: 9e:05:d2:df:16:bb:c8:3e:fa:ef:e9:de:9d:60:b6: 05:ed:04:db:9a:46:db:da:5d:c6:2c:71:37:3b:fc: 4b:b5:4c:1e:33:c0:8a:5b:4b:68:05:6d:9b:a6:1c: 3d:35:16:57:3f:06:33:c9:c7:d1:4c:11:b7:36:fd: 19:2a:fa:d6:8d:96:d8:a8:9f:ec:04:e7:94:26:54: 04:3c:40:db:3c:6f:4f:1a:bc:64:77:d9:9a:9c:a1: 45:fa:dd:68:1b:d3:1f:78:fe:4c:72:c6:08:e0:32: 15:57:35:1b:41:f5:5d:b8:7e:3c:14:6f:05:7a:cc: e8:55:08:7d:36:57:42:a3:a7:e3:e4:50:69:d2:dc: 54:ec:8e:9e:13:41:ec:6d:7c:a2:1d:ee:34:bb:81: 21:e6:f1:87:63:b3:e9:2e:9b:22:1a:d1:56:81:e6: a2:9d:78:7b:42:6a:8b:ef:c8:9d:a5:45:f7:ee:7f: 78:0c:22:f7:5b:7b:fe:b3:a7:de:7d:e9:d6:f9:6a: 80:ce:d7:e1:77:bd:77:93:4a:e7:e0:ea:f4:e9:90: 54:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:E9:81:5D:25:98:96:20:70:CC:50:0C:59:8D:29:7C:C9:C2:CE:82 X509v3 Authority Key Identifier: keyid:FC:CA:ED:0F:81:E2:48:DA:F3:32:B8:08:43:D4:A2:9E:8D:7D:51:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_MrtD4HiSNrzMrgIQ9Sino19UeQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/bdbde0-1d97-4126-93e6-8e77173dc4bc/1/_MrtD4HiSNrzMrgIQ9Sino19UeQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/bdbde0-1d97-4126-93e6-8e77173dc4bc/1/_MrtD4HiSNrzMrgIQ9Sino19UeQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:bc:b9:b9:e8:87:64:8b:3e:d5:2c:b2:b9:4b:b7:c0:49:22: 1e:90:2f:51:10:9a:75:8b:95:70:45:ce:c1:80:e6:80:3f:3d: 73:cc:ea:eb:eb:83:2e:68:8e:2e:a5:5d:32:86:00:d4:ba:20: 02:79:01:5f:9e:1c:55:dc:7c:88:e8:08:38:c7:dd:d1:a9:fe: 7d:d1:14:e6:12:42:76:3f:d6:15:fe:b0:12:89:25:ad:5f:35: 81:11:10:c6:2f:20:9a:2b:1a:87:46:02:24:af:28:e5:5b:8b: 0e:8d:08:c8:ed:7e:f9:22:66:47:13:3b:c9:b5:f2:0f:e8:a3: f4:0d:ad:39:94:de:14:57:9c:81:55:98:6e:9b:ab:48:98:4e: 65:7b:50:e9:05:27:03:d3:80:49:3a:47:9b:05:08:1c:23:36: 2e:72:d1:53:46:75:20:84:76:4c:7c:e8:92:83:d4:c1:1c:0d: 16:b2:a5:80:c2:c3:a0:11:28:b5:53:bc:aa:b1:13:2f:0e:a7: a0:98:a9:26:9b:54:c3:74:39:e9:ce:78:65:ce:c0:c8:07:ec: e4:af:a5:3b:47:fc:c0:49:ed:d1:8a:a9:a0:dd:43:52:2b:67: b1:3f:3d:63:a8:2f:77:57:25:4e:1c:dc:74:fe:93:c9:4b:ff: 5e:d7:67:e2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP2n8tYhveCoCwW2tGEy4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZjY2FlZDBmODFlMjQ4ZGFmMzMyYjgwODQzZDRhMjllOGQ3 ZDUxZTQwHhcNMjUxMjA2MDYwMDMzWhcNMjUxMjA3MDYwMDMzWjAzMTEwLwYDVQQD Eyg2YWU5ODE1ZDI1OTg5NjIwNzBjYzUwMGM1OThkMjk3Y2M5YzJjZTgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAitQnenQkkquaEv742w42oFbnNqbp 3jOrlX4/Q/4KAxwGR6dIyOKiJ45Wh/meBdLfFrvIPvrv6d6dYLYF7QTbmkbb2l3G LHE3O/xLtUweM8CKW0toBW2bphw9NRZXPwYzycfRTBG3Nv0ZKvrWjZbYqJ/sBOeU JlQEPEDbPG9PGrxkd9manKFF+t1oG9MfeP5McsYI4DIVVzUbQfVduH48FG8Feszo VQh9NldCo6fj5FBp0txU7I6eE0HsbXyiHe40u4Eh5vGHY7PpLpsiGtFWgeainXh7 QmqL78idpUX37n94DCL3W3v+s6fefenW+WqAztfhd713k0rn4Or06ZBUvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGrpgV0lmJYgcMxQDFmNKXzJws6CMB8GA1UdIwQY MBaAFPzK7Q+B4kja8zK4CEPUop6NfVHkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX01ydEQ0SGlTTnJ6TXJnSVE5U2lubzE5VWVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC9iZGJkZTAtMWQ5Ny00MTI2LTkzZTYt OGU3NzE3M2RjNGJjLzEvX01ydEQ0SGlTTnJ6TXJnSVE5U2lubzE5VWVRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC9iZGJkZTAtMWQ5Ny00MTI2LTkzZTYtOGU3NzE3M2RjNGJj LzEvX01ydEQ0SGlTTnJ6TXJnSVE5U2lubzE5VWVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXry5ueiH ZIs+1SyyuUu3wEkiHpAvURCadYuVcEXOwYDmgD89c8zq6+uDLmiOLqVdMoYA1Log AnkBX54cVdx8iOgIOMfd0an+fdEU5hJCdj/WFf6wEoklrV81gREQxi8gmisah0YC JK8o5VuLDo0IyO1++SJmRxM7ybXyD+ij9A2tOZTeFFecgVWYbpurSJhOZXtQ6QUn A9OASTpHmwUIHCM2LnLRU0Z1IIR2THzokoPUwRwNFrKlgMLDoBEotVO8qrETLw6n oJipJptUw3Q56c54Zc7AyAfs5K+lO0f8wEnt0YqpoN1DUitnsT89Y6gvd1clThzc dP6TyUv/Xtdn4g== -----END CERTIFICATE-----Generated at Sat Dec 6 12:15:08 2025 by rpki-client