This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/8ea9b9-3b6e-4fdf-b5d1-f04fdcc09e51/1/mSuGCVzlWNLpYYcopEIoonvpCY8.mft File: mSuGCVzlWNLpYYcopEIoonvpCY8.mft (raw, json) Hash identifier: NRjBeFVdPx1Qsw0EiJPiHQzDzuQo/1seBmu0zjXX83E= Subject key identifier: 85:01:A0:38:E1:68:90:FD:80:B6:20:2E:D5:2A:B4:39:82:53:C7:B7 Authority key identifier: 99:2B:86:09:5C:E5:58:D2:E9:61:87:28:A4:42:28:A2:7B:E9:09:8F Certificate issuer: /CN=992b86095ce558d2e9618728a44228a27be9098f Certificate serial: 019B2F9E844E9ADA215A5C54224D6D67E06D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mSuGCVzlWNLpYYcopEIoonvpCY8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/8ea9b9-3b6e-4fdf-b5d1-f04fdcc09e51/1/mSuGCVzlWNLpYYcopEIoonvpCY8.mft Manifest number: 17A9 Signing time: Thu 18 Dec 2025 04:01:16 +0000 Manifest this update: Thu 18 Dec 2025 04:01:16 +0000 Manifest next update: Fri 19 Dec 2025 04:01:16 +0000 Files and hashes: 1: BlYJMM4ls15zJ30iXM_Rv84I-d4.roa (hash: MRyw1DsxxSYF8y5F3ROkLuVWefJpMb00uWwfBxmnsGk=) 2: e2BcAV15shqdiU98OktC9_gXkUU.roa (hash: rZS4+9XjUiv9YzxM45CHUYZIhLrSaA9eZkuie33ePcg=) 3: mSuGCVzlWNLpYYcopEIoonvpCY8.crl (hash: 3ziCwYoyeOSqUfRm1Ijccs39QsIicDkBtIOChcEI+rc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/8ea9b9-3b6e-4fdf-b5d1-f04fdcc09e51/1/mSuGCVzlWNLpYYcopEIoonvpCY8.crl rsync://rpki.ripe.net/repository/DEFAULT/39/8ea9b9-3b6e-4fdf-b5d1-f04fdcc09e51/1/mSuGCVzlWNLpYYcopEIoonvpCY8.mft rsync://rpki.ripe.net/repository/DEFAULT/mSuGCVzlWNLpYYcopEIoonvpCY8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 01:18:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:9e:84:4e:9a:da:21:5a:5c:54:22:4d:6d:67:e0:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=992b86095ce558d2e9618728a44228a27be9098f Validity Not Before: Dec 18 04:01:16 2025 GMT Not After : Dec 19 04:01:16 2025 GMT Subject: CN=8501a038e16890fd80b6202ed52ab4398253c7b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:bb:75:19:c8:e5:5a:c4:f9:65:d1:bc:0e:11: 68:9b:e8:5d:95:f5:8c:92:6e:09:a9:11:a9:73:07: 6f:e7:82:d0:34:54:9a:b7:c0:c5:86:ce:62:42:31: c3:3a:bb:cf:04:7d:c9:bf:da:c9:d1:dc:4d:0c:de: b1:a9:d4:6a:41:64:e3:a6:ba:d1:2f:cb:4c:63:f7: 81:87:58:37:e1:28:27:f5:5b:c6:a9:37:21:b7:9c: 02:17:11:48:2a:c6:7b:0b:75:c1:d8:aa:58:b6:5c: 73:1f:8f:73:10:73:d7:fe:ea:ac:fb:8f:43:9a:3e: c3:84:a2:d2:fb:22:0f:04:fc:c7:7e:b3:78:c0:6b: 97:74:54:84:63:6e:a8:32:11:03:eb:e3:50:ec:22: 57:80:f8:69:1b:de:09:c1:e8:16:1d:7b:fd:56:ad: ea:a2:53:c0:9a:7d:2d:00:2f:99:7c:f8:10:18:0a: 57:f5:7e:81:09:c1:81:cc:c3:42:54:d6:1d:9e:bb: 00:c0:35:7d:f9:29:80:29:b3:e8:49:e1:bc:e1:34: de:6b:88:2a:aa:91:d1:73:63:36:f7:72:b2:5f:ef: ea:12:9b:1c:5d:05:52:40:dd:5b:0f:fb:0c:47:42: 6c:00:d8:a6:b6:46:0a:23:93:62:51:da:1a:86:88: a3:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:01:A0:38:E1:68:90:FD:80:B6:20:2E:D5:2A:B4:39:82:53:C7:B7 X509v3 Authority Key Identifier: keyid:99:2B:86:09:5C:E5:58:D2:E9:61:87:28:A4:42:28:A2:7B:E9:09:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mSuGCVzlWNLpYYcopEIoonvpCY8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/8ea9b9-3b6e-4fdf-b5d1-f04fdcc09e51/1/mSuGCVzlWNLpYYcopEIoonvpCY8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/39/8ea9b9-3b6e-4fdf-b5d1-f04fdcc09e51/1/mSuGCVzlWNLpYYcopEIoonvpCY8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:42:32:aa:47:02:36:67:20:f9:ce:33:29:18:af:ec:98:4a: 2d:7a:0e:6d:69:2d:fd:95:46:c4:c2:48:5c:41:04:8e:f8:11: a0:99:e6:2c:49:b1:cc:e2:da:3a:4e:8e:63:11:35:8e:2e:c1: 78:38:e6:19:4f:66:22:86:c0:a5:72:3f:f6:bc:17:26:b7:26: 65:e3:9e:06:32:24:ea:6a:d3:90:5f:dc:8e:50:47:8d:21:0d: 24:3a:d0:ce:48:a6:6c:b9:4e:8a:72:3c:02:8f:8e:30:2f:64: 30:79:a0:b8:7b:fa:6f:42:53:4d:15:20:3f:24:2a:b1:ad:8e: cf:da:48:81:6f:8a:18:2c:75:46:f0:f3:a4:32:61:ca:bb:e7: 87:ec:3d:31:1f:8c:db:e0:35:3e:69:e8:d0:be:98:e1:41:8c: 2a:49:e7:4b:ba:bb:09:3e:d7:c0:23:5d:11:8a:a1:b6:71:0a: 73:c8:33:91:a2:1b:1c:8f:19:c3:94:2a:02:59:13:d1:0d:87: 95:95:d7:03:34:41:56:6f:fb:33:e5:06:00:47:7d:ad:ca:8e: 56:6e:4f:16:4d:52:e0:5b:67:46:c5:9c:9e:27:62:b0:b4:93: fe:5e:49:ae:30:56:2e:d7:42:ba:a4:5b:8b:dd:90:bb:c8:05: 5a:5a:ea:47 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsvnoROmtohWlxUIk1tZ+BtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk5MmI4NjA5NWNlNTU4ZDJlOTYxODcyOGE0NDIyOGEyN2Jl OTA5OGYwHhcNMjUxMjE4MDQwMTE2WhcNMjUxMjE5MDQwMTE2WjAzMTEwLwYDVQQD Eyg4NTAxYTAzOGUxNjg5MGZkODBiNjIwMmVkNTJhYjQzOTgyNTNjN2I3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsLt1GcjlWsT5ZdG8DhFom+hdlfWM km4JqRGpcwdv54LQNFSat8DFhs5iQjHDOrvPBH3Jv9rJ0dxNDN6xqdRqQWTjprrR L8tMY/eBh1g34Sgn9VvGqTcht5wCFxFIKsZ7C3XB2KpYtlxzH49zEHPX/uqs+49D mj7DhKLS+yIPBPzHfrN4wGuXdFSEY26oMhED6+NQ7CJXgPhpG94JwegWHXv9Vq3q olPAmn0tAC+ZfPgQGApX9X6BCcGBzMNCVNYdnrsAwDV9+SmAKbPoSeG84TTea4gq qpHRc2M293KyX+/qEpscXQVSQN1bD/sMR0JsANimtkYKI5NiUdoahoijEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIUBoDjhaJD9gLYgLtUqtDmCU8e3MB8GA1UdIwQY MBaAFJkrhglc5VjS6WGHKKRCKKJ76QmPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbVN1R0NWemxXTkxwWVljb3BFSW9vbnZwQ1k4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS84ZWE5YjktM2I2ZS00ZmRmLWI1ZDEt ZjA0ZmRjYzA5ZTUxLzEvbVN1R0NWemxXTkxwWVljb3BFSW9vbnZwQ1k4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOS84ZWE5YjktM2I2ZS00ZmRmLWI1ZDEtZjA0ZmRjYzA5ZTUx LzEvbVN1R0NWemxXTkxwWVljb3BFSW9vbnZwQ1k4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP0IyqkcC Nmcg+c4zKRiv7JhKLXoObWkt/ZVGxMJIXEEEjvgRoJnmLEmxzOLaOk6OYxE1ji7B eDjmGU9mIobApXI/9rwXJrcmZeOeBjIk6mrTkF/cjlBHjSENJDrQzkimbLlOinI8 Ao+OMC9kMHmguHv6b0JTTRUgPyQqsa2Oz9pIgW+KGCx1RvDzpDJhyrvnh+w9MR+M 2+A1Pmno0L6Y4UGMKknnS7q7CT7XwCNdEYqhtnEKc8gzkaIbHI8Zw5QqAlkT0Q2H lZXXAzRBVm/7M+UGAEd9rcqOVm5PFk1S4FtnRsWcnidisLST/l5JrjBWLtdCuqRb i92Qu8gFWlrqRw== -----END CERTIFICATE-----Generated at Thu Dec 18 07:36:50 2025 by rpki-client