This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/8b906b-9c1d-45d9-86ba-c7fe62227df3/1/mFrmxZw15GA4fa68-4Zvih67NoY.mft File: mFrmxZw15GA4fa68-4Zvih67NoY.mft (raw, json) Hash identifier: zaBPe3Xz2afrZ6rngzVcQKrH9aPe/EhZ5NYbhxaOgz8= Subject key identifier: 5B:08:72:DC:43:44:C9:52:31:A0:B6:8B:5E:63:D1:E2:37:FF:E5:63 Authority key identifier: 98:5A:E6:C5:9C:35:E4:60:38:7D:AE:BC:FB:86:6F:8A:1E:BB:36:86 Certificate issuer: /CN=985ae6c59c35e460387daebcfb866f8a1ebb3686 Certificate serial: 019AF12E62D90383B94DF128D4B604EFEDF0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mFrmxZw15GA4fa68-4Zvih67NoY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/8b906b-9c1d-45d9-86ba-c7fe62227df3/1/mFrmxZw15GA4fa68-4Zvih67NoY.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 01:02:20 +0000 Manifest this update: Sat 06 Dec 2025 01:02:20 +0000 Manifest next update: Sun 07 Dec 2025 01:02:20 +0000 Files and hashes: 1: 5qz81vMuyN5eYJ6zyRRelyT4XK0.roa (hash: 0LizoQ7sooXP56qjV8fYtL2cZDWoYFEUv70QcevbSss=) 2: Oo8Lhh4RlCa7xttIyBwx5LDEUoc.roa (hash: wrOx7qjHfGVS+J5guJXeAV7Who7QhhesA0WvqwwUSt0=) 3: bred8jKnNPms1BCagsD8kMQFkWQ.roa (hash: VvTTWuUY3ocSZzeJdjIHCKMe7BquJDgv+iCTQ7eJzuc=) 4: mFrmxZw15GA4fa68-4Zvih67NoY.crl (hash: AQIPiY8/lENgEZXC5euys6eilvJ1AGW8B8ejhHcYNi4=) 5: orjkFnmOp2fkt5BOjfHTUe1SFM8.roa (hash: VR0THqWhrxUSaUWx/H66JHdMtnv+5/NgmHEPJq0RqoM=) 6: vHN5MXtzccXdspQhStY4Z57CoPM.roa (hash: 4HXRwfo/a7HGgHSGpok7A4ldu5noCeEQDTLX8aICufE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/8b906b-9c1d-45d9-86ba-c7fe62227df3/1/mFrmxZw15GA4fa68-4Zvih67NoY.crl rsync://rpki.ripe.net/repository/DEFAULT/41/8b906b-9c1d-45d9-86ba-c7fe62227df3/1/mFrmxZw15GA4fa68-4Zvih67NoY.mft rsync://rpki.ripe.net/repository/DEFAULT/mFrmxZw15GA4fa68-4Zvih67NoY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:62:d9:03:83:b9:4d:f1:28:d4:b6:04:ef:ed:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=985ae6c59c35e460387daebcfb866f8a1ebb3686 Validity Not Before: Dec 6 01:02:20 2025 GMT Not After : Dec 7 01:02:20 2025 GMT Subject: CN=5b0872dc4344c95231a0b68b5e63d1e237ffe563 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:a2:5c:f7:2c:df:11:92:0c:a1:f9:56:d0:e5: 95:c1:a1:22:6c:3f:c9:f1:b2:fa:d5:d9:44:d2:5e: bf:1d:87:00:b2:01:c4:bb:ef:94:a3:35:3c:10:fb: 1d:3b:e2:c4:c5:91:a5:17:73:6b:6a:30:6a:5f:10: a1:31:c4:ad:19:62:23:9b:9d:84:f8:7b:de:42:9e: 18:3e:c1:06:3d:73:00:8c:29:7f:b5:b4:fd:e5:2b: f8:e3:b5:c1:27:48:19:de:d0:2c:a9:05:56:5b:5d: d4:5d:57:96:34:e9:ab:59:49:e2:74:a4:98:09:3e: 26:16:89:ed:3d:49:c4:cb:a7:72:89:43:64:43:35: f7:68:ac:25:a2:d3:d6:ae:82:01:ce:26:d0:76:c3: 37:d4:44:12:69:fb:9d:12:f5:1f:ac:90:60:e4:63: 62:a5:5a:62:f4:ca:b0:20:9c:b1:6e:b7:3b:c7:07: d0:80:80:a0:e7:93:08:20:d0:e2:a6:ae:1a:fc:a4: ca:43:3e:27:4d:a1:aa:0f:2f:d8:83:f9:73:4f:a2: da:83:7b:6b:56:ad:09:c6:4e:db:97:23:bc:5f:e1: 14:fc:d1:12:ac:d2:fe:a7:bc:a9:27:16:dd:c0:8e: 4e:43:5f:9f:1d:b2:63:33:64:8b:42:c3:a1:4d:ab: 93:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:08:72:DC:43:44:C9:52:31:A0:B6:8B:5E:63:D1:E2:37:FF:E5:63 X509v3 Authority Key Identifier: keyid:98:5A:E6:C5:9C:35:E4:60:38:7D:AE:BC:FB:86:6F:8A:1E:BB:36:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mFrmxZw15GA4fa68-4Zvih67NoY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/8b906b-9c1d-45d9-86ba-c7fe62227df3/1/mFrmxZw15GA4fa68-4Zvih67NoY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/41/8b906b-9c1d-45d9-86ba-c7fe62227df3/1/mFrmxZw15GA4fa68-4Zvih67NoY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:47:95:95:23:29:55:77:cd:c4:96:6c:ca:35:4c:a8:8d:30: bc:44:08:8a:d8:ac:08:06:5a:16:48:43:89:0a:ea:ea:ef:c8: 57:18:5c:59:d2:db:29:ab:f2:11:d2:23:6b:b7:70:26:6a:0d: 17:fe:49:87:88:33:f2:c5:07:32:66:a6:0e:0b:66:2d:19:b0: 0d:65:eb:69:ec:53:b9:af:a4:7a:f9:84:45:9b:a5:ba:18:0b: e3:67:7b:33:66:62:88:02:21:d7:34:88:06:42:ae:da:c4:e6: a5:71:a6:37:13:e7:9b:33:25:40:b4:f8:ba:47:f9:a0:eb:33: ba:91:ee:22:a0:56:77:61:ff:74:31:34:5e:83:6a:92:b7:73: 8a:e1:da:28:28:c8:e3:37:b9:1a:93:26:f1:50:3f:fb:fe:c5: d1:17:07:5f:e8:1b:f5:0e:d5:bb:b1:8f:46:b3:94:11:47:62: 09:4d:13:fa:ec:6d:67:d1:df:cc:97:f6:8a:61:f0:a3:d3:c1: 1b:8a:d6:a4:68:d3:40:5a:bc:f9:a3:ed:b7:3c:8f:f0:0b:53: ac:16:65:ce:f9:b0:d0:ab:e4:94:c0:7f:27:3d:f9:e8:40:a5: 6d:b0:e8:8c:9c:98:ca:bf:01:5b:1f:e8:ae:ce:ca:1b:d7:c3: 0e:35:be:85 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLmLZA4O5TfEo1LYE7+3wMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk4NWFlNmM1OWMzNWU0NjAzODdkYWViY2ZiODY2ZjhhMWVi YjM2ODYwHhcNMjUxMjA2MDEwMjIwWhcNMjUxMjA3MDEwMjIwWjAzMTEwLwYDVQQD Eyg1YjA4NzJkYzQzNDRjOTUyMzFhMGI2OGI1ZTYzZDFlMjM3ZmZlNTYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzaJc9yzfEZIMoflW0OWVwaEibD/J 8bL61dlE0l6/HYcAsgHEu++UozU8EPsdO+LExZGlF3NrajBqXxChMcStGWIjm52E +HveQp4YPsEGPXMAjCl/tbT95Sv447XBJ0gZ3tAsqQVWW13UXVeWNOmrWUnidKSY CT4mFontPUnEy6dyiUNkQzX3aKwlotPWroIBzibQdsM31EQSafudEvUfrJBg5GNi pVpi9MqwIJyxbrc7xwfQgICg55MIINDipq4a/KTKQz4nTaGqDy/Yg/lzT6Lag3tr Vq0Jxk7blyO8X+EU/NESrNL+p7ypJxbdwI5OQ1+fHbJjM2SLQsOhTauTHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFsIctxDRMlSMaC2i15j0eI3/+VjMB8GA1UdIwQY MBaAFJha5sWcNeRgOH2uvPuGb4oeuzaGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbUZybXhadzE1R0E0ZmE2OC00WnZpaDY3Tm9ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS84YjkwNmItOWMxZC00NWQ5LTg2YmEt YzdmZTYyMjI3ZGYzLzEvbUZybXhadzE1R0E0ZmE2OC00WnZpaDY3Tm9ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MS84YjkwNmItOWMxZC00NWQ5LTg2YmEtYzdmZTYyMjI3ZGYz LzEvbUZybXhadzE1R0E0ZmE2OC00WnZpaDY3Tm9ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYUeVlSMp VXfNxJZsyjVMqI0wvEQIitisCAZaFkhDiQrq6u/IVxhcWdLbKavyEdIja7dwJmoN F/5Jh4gz8sUHMmamDgtmLRmwDWXraexTua+kevmERZuluhgL42d7M2ZiiAIh1zSI BkKu2sTmpXGmNxPnmzMlQLT4ukf5oOszupHuIqBWd2H/dDE0XoNqkrdziuHaKCjI 4ze5GpMm8VA/+/7F0RcHX+gb9Q7Vu7GPRrOUEUdiCU0T+uxtZ9HfzJf2imHwo9PB G4rWpGjTQFq8+aPttzyP8AtTrBZlzvmw0KvklMB/Jz356EClbbDojJyYyr8BWx/o rs7KG9fDDjW+hQ== -----END CERTIFICATE-----Generated at Sat Dec 6 11:12:51 2025 by rpki-client