This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/d853d7-7785-4e6d-993c-7c6e4809df59/1/mXrZ9c2mbZYdG87vxGPmKe6Bmlw.mft File: mXrZ9c2mbZYdG87vxGPmKe6Bmlw.mft (raw, json) Hash identifier: 0wwi4l8jcOKiKAXBfW0Lvrs3JT95jaUB0E8DjUYfEnA= Subject key identifier: 6C:42:75:48:82:E8:38:66:EA:DD:25:CF:8C:D5:5F:0F:0C:A9:28:98 Authority key identifier: 99:7A:D9:F5:CD:A6:6D:96:1D:1B:CE:EF:C4:63:E6:29:EE:81:9A:5C Certificate issuer: /CN=997ad9f5cda66d961d1bceefc463e629ee819a5c Certificate serial: 019AF276C27C49171F7E8D9B7299FF7680FD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mXrZ9c2mbZYdG87vxGPmKe6Bmlw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/d853d7-7785-4e6d-993c-7c6e4809df59/1/mXrZ9c2mbZYdG87vxGPmKe6Bmlw.mft Manifest number: 21 Signing time: Sat 06 Dec 2025 07:01:00 +0000 Manifest this update: Sat 06 Dec 2025 07:01:00 +0000 Manifest next update: Sun 07 Dec 2025 07:01:00 +0000 Files and hashes: 1: GNpQl66SlLD7k64oHfoj3L0otEQ.roa (hash: fuge2Ih7rkHNFHBfjSZi6ZhVlTXhFgJG1F6DrgT5vw0=) 2: mXrZ9c2mbZYdG87vxGPmKe6Bmlw.crl (hash: d76QwkAfe3xViXM2zY7YAU+5uJZLtXRdrqIK+oGVMrY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/d853d7-7785-4e6d-993c-7c6e4809df59/1/mXrZ9c2mbZYdG87vxGPmKe6Bmlw.crl rsync://rpki.ripe.net/repository/DEFAULT/47/d853d7-7785-4e6d-993c-7c6e4809df59/1/mXrZ9c2mbZYdG87vxGPmKe6Bmlw.mft rsync://rpki.ripe.net/repository/DEFAULT/mXrZ9c2mbZYdG87vxGPmKe6Bmlw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:c2:7c:49:17:1f:7e:8d:9b:72:99:ff:76:80:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=997ad9f5cda66d961d1bceefc463e629ee819a5c Validity Not Before: Dec 6 07:01:00 2025 GMT Not After : Dec 7 07:01:00 2025 GMT Subject: CN=6c42754882e83866eadd25cf8cd55f0f0ca92898 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:61:92:ec:4a:da:f8:9b:2c:fe:d8:08:ab:ff: 52:14:51:a5:1c:14:f1:77:ea:85:11:0c:6c:82:28: 2f:7f:ab:d1:1f:0c:89:89:41:b0:a2:87:65:4f:35: bf:85:3e:9c:0f:bc:6f:1c:5e:96:1e:f8:25:8a:ea: 47:4f:05:5e:d0:07:fc:39:56:34:c9:3f:e2:ee:e7: 68:f9:3c:0e:82:67:c3:bf:26:77:4d:4a:46:93:e9: ab:b8:3e:b5:b3:bd:ba:42:5d:8e:b3:64:be:74:d0: 01:c8:f8:01:e1:5d:26:c0:5c:fa:4c:f3:1f:bf:04: 35:28:dd:f3:d8:b8:75:9c:71:71:26:e4:e3:92:09: 39:db:6a:ba:91:9f:05:7f:29:1d:ff:87:b3:a5:e0: 75:5e:1d:8f:cd:84:a4:8d:e2:3d:ac:b7:a8:ff:67: cc:49:70:73:a7:44:c5:19:f4:b6:68:4d:83:5f:6c: e7:42:4f:12:98:d4:7a:d0:2e:02:4e:20:5c:a6:d0: d3:c2:46:47:84:91:6f:44:8a:2f:95:d4:d3:b4:9c: 46:70:97:37:99:79:b1:e3:51:7d:b7:64:41:ac:11: 34:74:c4:fb:22:e7:80:87:bc:21:fc:28:bb:62:54: 72:46:30:57:28:83:e9:b2:3e:de:f6:59:ca:34:d7: f1:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:42:75:48:82:E8:38:66:EA:DD:25:CF:8C:D5:5F:0F:0C:A9:28:98 X509v3 Authority Key Identifier: keyid:99:7A:D9:F5:CD:A6:6D:96:1D:1B:CE:EF:C4:63:E6:29:EE:81:9A:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mXrZ9c2mbZYdG87vxGPmKe6Bmlw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/d853d7-7785-4e6d-993c-7c6e4809df59/1/mXrZ9c2mbZYdG87vxGPmKe6Bmlw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/d853d7-7785-4e6d-993c-7c6e4809df59/1/mXrZ9c2mbZYdG87vxGPmKe6Bmlw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:86:e5:06:4e:2e:d3:b6:dd:19:0d:93:e7:7f:c1:27:e3:6b: b8:0d:53:5f:38:55:a2:fa:29:27:d7:b1:3d:03:25:a8:dd:cf: 97:8c:e5:80:da:e2:31:f0:5a:28:43:a9:c2:a1:c2:7d:c4:32: 25:15:fb:4d:a4:5f:c6:62:d1:98:3e:f6:6a:24:2c:23:8a:9b: 19:27:15:26:ec:da:23:c9:18:8f:78:bb:04:54:dc:de:14:91: 25:15:fe:ad:b5:3e:90:a4:44:a7:a2:de:d7:14:82:85:86:c6: 5f:a8:aa:01:c4:21:78:0d:28:dd:23:a8:23:3b:07:9c:15:d4: d9:38:48:54:cf:ca:dc:7e:f0:a5:e7:88:f5:e8:85:f0:0f:a7: 5f:61:f1:4f:a6:15:ff:40:b1:f1:c6:2b:4d:0b:b8:1f:60:70: c6:e2:2a:20:65:86:aa:59:34:d8:4f:d5:6e:ee:f4:3f:31:23: af:5e:78:4a:31:e3:11:75:d3:73:6f:ef:83:18:ae:7c:e9:a1: d4:81:33:3e:3d:09:d4:26:bb:81:64:c2:86:6b:d5:9f:fb:b1: 68:e6:6a:7b:cd:35:aa:8e:28:51:71:0e:72:38:18:77:41:9d: be:18:e8:c7:c1:3b:15:21:a5:85:73:a6:d7:c7:22:b2:35:7b: b3:72:4e:ba -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydsJ8SRcffo2bcpn/doD9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk5N2FkOWY1Y2RhNjZkOTYxZDFiY2VlZmM0NjNlNjI5ZWU4 MTlhNWMwHhcNMjUxMjA2MDcwMTAwWhcNMjUxMjA3MDcwMTAwWjAzMTEwLwYDVQQD Eyg2YzQyNzU0ODgyZTgzODY2ZWFkZDI1Y2Y4Y2Q1NWYwZjBjYTkyODk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp2GS7Era+Jss/tgIq/9SFFGlHBTx d+qFEQxsgigvf6vRHwyJiUGwoodlTzW/hT6cD7xvHF6WHvgliupHTwVe0Af8OVY0 yT/i7udo+TwOgmfDvyZ3TUpGk+mruD61s726Ql2Os2S+dNAByPgB4V0mwFz6TPMf vwQ1KN3z2Lh1nHFxJuTjkgk522q6kZ8Ffykd/4ezpeB1Xh2PzYSkjeI9rLeo/2fM SXBzp0TFGfS2aE2DX2znQk8SmNR60C4CTiBcptDTwkZHhJFvRIovldTTtJxGcJc3 mXmx41F9t2RBrBE0dMT7IueAh7wh/Ci7YlRyRjBXKIPpsj7e9lnKNNfxgwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGxCdUiC6Dhm6t0lz4zVXw8MqSiYMB8GA1UdIwQY MBaAFJl62fXNpm2WHRvO78Rj5inugZpcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbVhyWjljMm1iWllkRzg3dnhHUG1LZTZCbWx3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9kODUzZDctNzc4NS00ZTZkLTk5M2Mt N2M2ZTQ4MDlkZjU5LzEvbVhyWjljMm1iWllkRzg3dnhHUG1LZTZCbWx3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny9kODUzZDctNzc4NS00ZTZkLTk5M2MtN2M2ZTQ4MDlkZjU5 LzEvbVhyWjljMm1iWllkRzg3dnhHUG1LZTZCbWx3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPIblBk4u 07bdGQ2T53/BJ+NruA1TXzhVovopJ9exPQMlqN3Pl4zlgNriMfBaKEOpwqHCfcQy JRX7TaRfxmLRmD72aiQsI4qbGScVJuzaI8kYj3i7BFTc3hSRJRX+rbU+kKREp6Le 1xSChYbGX6iqAcQheA0o3SOoIzsHnBXU2ThIVM/K3H7wpeeI9eiF8A+nX2HxT6YV /0Cx8cYrTQu4H2BwxuIqIGWGqlk02E/Vbu70PzEjr154SjHjEXXTc2/vgxiufOmh 1IEzPj0J1Ca7gWTChmvVn/uxaOZqe801qo4oUXEOcjgYd0Gdvhjox8E7FSGlhXOm 18cisjV7s3JOug== -----END CERTIFICATE-----Generated at Sat Dec 6 11:46:32 2025 by rpki-client