This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/f4009f-8275-4716-9971-ba39e7c2f6a1/1/mryiPS4rrR-1eI3bX1pvx6tiyiA.mft File: mryiPS4rrR-1eI3bX1pvx6tiyiA.mft (raw, json) Hash identifier: Kyh+a6fLwwELuuSYTncZUZCCwKJ27Q7mnmwSYkZqlnQ= Subject key identifier: E3:92:75:C4:24:4F:8C:FC:18:A9:A0:45:49:AD:9C:99:A0:86:A3:75 Authority key identifier: 9A:BC:A2:3D:2E:2B:AD:1F:B5:78:8D:DB:5F:5A:6F:C7:AB:62:CA:20 Certificate issuer: /CN=9abca23d2e2bad1fb5788ddb5f5a6fc7ab62ca20 Certificate serial: 019AF0F5F2ED9D2EE863784FFD815E5BAA26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mryiPS4rrR-1eI3bX1pvx6tiyiA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/f4009f-8275-4716-9971-ba39e7c2f6a1/1/mryiPS4rrR-1eI3bX1pvx6tiyiA.mft Manifest number: 0131 Signing time: Sat 06 Dec 2025 00:00:41 +0000 Manifest this update: Sat 06 Dec 2025 00:00:41 +0000 Manifest next update: Sun 07 Dec 2025 00:00:41 +0000 Files and hashes: 1: LNE0MuZMavkklT_2pqrHqhF84rY.roa (hash: ZYqhRbVzdQKSF9ZEirdkyB29pkjWB2pzYX8b2N86rj0=) 2: mryiPS4rrR-1eI3bX1pvx6tiyiA.crl (hash: 6SO/zwp8PMYLWF6qHhxrGLH56C4C0CiAcjgS79hCW8k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/f4009f-8275-4716-9971-ba39e7c2f6a1/1/mryiPS4rrR-1eI3bX1pvx6tiyiA.crl rsync://rpki.ripe.net/repository/DEFAULT/49/f4009f-8275-4716-9971-ba39e7c2f6a1/1/mryiPS4rrR-1eI3bX1pvx6tiyiA.mft rsync://rpki.ripe.net/repository/DEFAULT/mryiPS4rrR-1eI3bX1pvx6tiyiA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:f5:f2:ed:9d:2e:e8:63:78:4f:fd:81:5e:5b:aa:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9abca23d2e2bad1fb5788ddb5f5a6fc7ab62ca20 Validity Not Before: Dec 6 00:00:41 2025 GMT Not After : Dec 7 00:00:41 2025 GMT Subject: CN=e39275c4244f8cfc18a9a04549ad9c99a086a375 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:3d:50:52:db:a9:b6:b5:18:ec:92:2c:4d:09: e6:21:18:a7:2a:e7:30:56:50:91:aa:aa:12:88:e5: 00:e0:b8:0c:e1:98:43:5d:44:45:08:8e:a6:2f:db: 7c:b5:a8:63:9c:f0:60:86:fb:8a:3a:af:d3:ef:d8: 51:36:94:eb:ee:e9:4f:21:87:ba:e3:9c:79:49:8a: 53:6d:ab:e1:73:26:29:fe:bc:50:51:10:58:4a:a8: 7e:fa:8e:b2:39:9b:0a:7d:a1:31:aa:e5:b3:cb:87: d5:a8:9a:10:89:35:10:60:ed:47:5d:dd:1c:22:cf: d6:e7:e7:b6:49:e0:63:12:02:3a:f9:7a:ed:a1:d7: e6:50:13:a2:bc:d8:83:ab:a9:ce:f3:71:f7:5f:38: 5f:39:d8:96:cd:a7:a7:ca:8c:61:b1:0c:f3:3a:0f: a7:5c:f3:ba:a1:04:d6:6e:12:c2:3a:0d:4d:99:fd: d2:cd:26:c9:72:ee:9c:ac:c6:35:35:da:2f:c4:1c: ea:15:99:42:80:ea:d8:7e:8d:94:a4:c7:b6:48:ab: 49:44:2c:56:13:3d:23:4b:7f:b9:1e:1c:39:f6:f0: 3b:5e:31:56:91:7c:74:1c:ba:41:68:62:a8:80:1e: de:1f:1e:b0:da:f4:26:44:6d:c4:3f:f5:10:51:82: 24:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:92:75:C4:24:4F:8C:FC:18:A9:A0:45:49:AD:9C:99:A0:86:A3:75 X509v3 Authority Key Identifier: keyid:9A:BC:A2:3D:2E:2B:AD:1F:B5:78:8D:DB:5F:5A:6F:C7:AB:62:CA:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mryiPS4rrR-1eI3bX1pvx6tiyiA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/f4009f-8275-4716-9971-ba39e7c2f6a1/1/mryiPS4rrR-1eI3bX1pvx6tiyiA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/49/f4009f-8275-4716-9971-ba39e7c2f6a1/1/mryiPS4rrR-1eI3bX1pvx6tiyiA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:e8:aa:54:3a:d6:b7:62:c2:81:08:4f:5c:90:be:7c:f0:e8: d2:80:03:9e:b3:47:58:41:23:db:43:11:74:10:a7:22:a9:26: 43:56:e6:8c:10:57:53:93:b7:00:7a:cb:ae:81:af:26:52:0a: 0b:99:83:88:08:d7:8a:89:67:5c:a1:ef:e1:73:5d:07:49:b9: dc:45:3b:37:6c:58:b7:37:06:84:7a:37:fe:92:41:c9:40:98: ad:14:a6:98:e9:3b:1d:26:57:2f:c3:b4:c6:12:e3:4d:b3:1d: 71:0b:1c:8a:a2:92:cb:8a:d1:5d:c1:52:cd:a9:59:eb:50:2e: fa:51:11:41:2e:18:77:72:e9:c2:04:6a:a6:87:f8:05:a1:12: 93:63:6b:ea:52:e0:a5:3b:c1:9b:5e:9d:4e:e8:4e:59:87:ba: 25:7e:e5:85:19:67:85:64:89:c9:a6:c5:16:68:91:55:dc:d6: 6c:da:ca:f0:db:36:b7:b5:4d:0d:0e:0f:7c:56:4c:9a:c0:d4: b3:98:5c:7d:e1:55:5c:21:a5:c8:c4:04:b1:96:ec:11:15:cd: 8d:da:8e:bd:03:c7:63:b7:43:f7:65:ea:a3:8d:68:36:71:02: 40:7c:ad:e3:fb:48:1c:d3:e9:3b:1d:08:5f:d8:42:b8:82:d6: 78:d2:85:83 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrw9fLtnS7oY3hP/YFeW6omMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhYmNhMjNkMmUyYmFkMWZiNTc4OGRkYjVmNWE2ZmM3YWI2 MmNhMjAwHhcNMjUxMjA2MDAwMDQxWhcNMjUxMjA3MDAwMDQxWjAzMTEwLwYDVQQD EyhlMzkyNzVjNDI0NGY4Y2ZjMThhOWEwNDU0OWFkOWM5OWEwODZhMzc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzz1QUtuptrUY7JIsTQnmIRinKucw VlCRqqoSiOUA4LgM4ZhDXURFCI6mL9t8tahjnPBghvuKOq/T79hRNpTr7ulPIYe6 45x5SYpTbavhcyYp/rxQURBYSqh++o6yOZsKfaExquWzy4fVqJoQiTUQYO1HXd0c Is/W5+e2SeBjEgI6+XrtodfmUBOivNiDq6nO83H3XzhfOdiWzaenyoxhsQzzOg+n XPO6oQTWbhLCOg1Nmf3SzSbJcu6crMY1NdovxBzqFZlCgOrYfo2UpMe2SKtJRCxW Ez0jS3+5Hhw59vA7XjFWkXx0HLpBaGKogB7eHx6w2vQmRG3EP/UQUYIkIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOOSdcQkT4z8GKmgRUmtnJmghqN1MB8GA1UdIwQY MBaAFJq8oj0uK60ftXiN219ab8erYsogMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbXJ5aVBTNHJyUi0xZUkzYlgxcHZ4NnRpeWlBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS9mNDAwOWYtODI3NS00NzE2LTk5NzEt YmEzOWU3YzJmNmExLzEvbXJ5aVBTNHJyUi0xZUkzYlgxcHZ4NnRpeWlBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OS9mNDAwOWYtODI3NS00NzE2LTk5NzEtYmEzOWU3YzJmNmEx LzEvbXJ5aVBTNHJyUi0xZUkzYlgxcHZ4NnRpeWlBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiuiqVDrW t2LCgQhPXJC+fPDo0oADnrNHWEEj20MRdBCnIqkmQ1bmjBBXU5O3AHrLroGvJlIK C5mDiAjXiolnXKHv4XNdB0m53EU7N2xYtzcGhHo3/pJByUCYrRSmmOk7HSZXL8O0 xhLjTbMdcQsciqKSy4rRXcFSzalZ61Au+lERQS4Yd3LpwgRqpof4BaESk2Nr6lLg pTvBm16dTuhOWYe6JX7lhRlnhWSJyabFFmiRVdzWbNrK8Ns2t7VNDQ4PfFZMmsDU s5hcfeFVXCGlyMQEsZbsERXNjdqOvQPHY7dD92Xqo41oNnECQHyt4/tIHNPpOx0I X9hCuILWeNKFgw== -----END CERTIFICATE-----Generated at Sat Dec 6 09:15:49 2025 by rpki-client