This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/706f41-0531-43df-b1e9-6f86d0b7e3e0/1/bMdYWreoPsgLVauVe_N7eR52UBY.mft File: bMdYWreoPsgLVauVe_N7eR52UBY.mft (raw, json) Hash identifier: df+x2CnjUHM3Z1eRHDNUnDNOjeDbsYEpaMKva936GAQ= Subject key identifier: 12:CD:28:C0:3B:D2:86:7F:F1:2B:94:CD:D5:6B:D0:15:42:88:77:B4 Authority key identifier: 6C:C7:58:5A:B7:A8:3E:C8:0B:55:AB:95:7B:F3:7B:79:1E:76:50:16 Certificate issuer: /CN=6cc7585ab7a83ec80b55ab957bf37b791e765016 Certificate serial: 019B3C7E289CD7C6E13353CD37441179ACCB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bMdYWreoPsgLVauVe_N7eR52UBY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/706f41-0531-43df-b1e9-6f86d0b7e3e0/1/bMdYWreoPsgLVauVe_N7eR52UBY.mft Manifest number: 14F3 Signing time: Sat 20 Dec 2025 16:00:59 +0000 Manifest this update: Sat 20 Dec 2025 16:00:59 +0000 Manifest next update: Sun 21 Dec 2025 16:00:59 +0000 Files and hashes: 1: JJLEui4261ZXJVAJCMhhZuF8jH8.roa (hash: /ixKOls/TcJQuO85TTUBz1567wbeYHBB+Wz+IfsDjR8=) 2: bMdYWreoPsgLVauVe_N7eR52UBY.crl (hash: P1nfP2vIvgnnHgg6aX1CoyACSk17ydKEP6dJ0/+GBV8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/706f41-0531-43df-b1e9-6f86d0b7e3e0/1/bMdYWreoPsgLVauVe_N7eR52UBY.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/706f41-0531-43df-b1e9-6f86d0b7e3e0/1/bMdYWreoPsgLVauVe_N7eR52UBY.mft rsync://rpki.ripe.net/repository/DEFAULT/bMdYWreoPsgLVauVe_N7eR52UBY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7e:28:9c:d7:c6:e1:33:53:cd:37:44:11:79:ac:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6cc7585ab7a83ec80b55ab957bf37b791e765016 Validity Not Before: Dec 20 16:00:59 2025 GMT Not After : Dec 21 16:00:59 2025 GMT Subject: CN=12cd28c03bd2867ff12b94cdd56bd015428877b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:3e:40:e1:8e:32:8f:7a:11:a3:99:3f:65:45: 6b:63:09:f2:1f:b4:13:6a:8f:ad:c0:1b:25:d7:4e: 88:96:9b:46:40:34:24:80:56:f7:58:b0:81:95:ba: c9:7e:1a:3d:81:fb:e7:05:e5:4f:ff:9b:1c:c0:91: 50:c1:64:7d:27:df:a8:ad:98:ba:e6:51:00:5c:c2: 39:db:c0:50:35:c6:f1:fb:3c:66:f2:b9:0a:4b:4c: dd:a6:d6:20:f0:d5:8e:91:e4:5d:0e:cf:49:0b:cc: f2:68:da:72:b9:58:81:8b:2b:c0:62:4a:2d:46:ff: fc:88:e1:6f:b8:e5:a7:2a:60:5b:28:62:33:11:c2: aa:89:10:c8:81:69:4e:5a:9d:36:50:22:b6:fb:90: d1:ab:ef:b6:b3:a0:2f:22:a7:2f:2c:cb:e7:fb:28: 4c:af:e2:e1:91:99:6b:9c:65:77:f3:16:4b:c8:51: 55:52:7e:40:5b:00:ef:7e:2a:bc:30:82:d9:dc:17: 0a:1a:6e:0c:f0:1f:3a:d0:9c:e0:8e:c1:33:a2:fe: e3:ff:a1:75:8a:6a:d1:e8:ac:d8:a3:6c:ed:82:63: 39:cd:fd:fc:14:09:d3:2f:3e:9b:10:86:61:95:a8: 6a:76:aa:03:d5:78:25:f8:e5:ce:ec:8a:44:51:20: bc:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:CD:28:C0:3B:D2:86:7F:F1:2B:94:CD:D5:6B:D0:15:42:88:77:B4 X509v3 Authority Key Identifier: keyid:6C:C7:58:5A:B7:A8:3E:C8:0B:55:AB:95:7B:F3:7B:79:1E:76:50:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bMdYWreoPsgLVauVe_N7eR52UBY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/706f41-0531-43df-b1e9-6f86d0b7e3e0/1/bMdYWreoPsgLVauVe_N7eR52UBY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/706f41-0531-43df-b1e9-6f86d0b7e3e0/1/bMdYWreoPsgLVauVe_N7eR52UBY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:ca:34:63:c0:3f:38:a7:fc:05:3b:75:81:9a:5d:0a:d9:0c: db:13:ee:9c:ac:12:f9:e6:16:5c:86:44:ec:7c:46:84:c1:2a: a7:31:8f:ab:35:db:5e:1f:e0:2f:4b:30:b4:02:9c:fb:9a:f5: a6:50:1c:11:57:c1:52:59:f5:dc:38:29:db:c8:27:c8:46:53: 0f:d5:69:55:b1:51:a9:4e:68:aa:cd:0f:ff:d3:ee:2d:d1:07: c7:27:9a:73:53:bf:ee:1c:37:b1:fe:18:87:bb:89:18:bb:60: c6:72:3c:8d:03:41:29:85:69:5e:2f:17:12:79:5c:75:52:f7: 71:f9:78:d3:c4:90:05:50:21:5f:95:ec:2d:71:88:81:f1:be: 39:5b:da:e9:c0:ce:69:fc:f7:fe:7b:da:7a:53:42:08:9c:0f: 8d:ce:18:57:50:4d:7b:1e:b2:af:10:f2:ca:81:5e:16:21:d9: 00:db:bb:89:32:6c:e9:88:f3:ee:29:8d:c9:36:77:ed:64:47: 1d:f5:b4:2f:78:fb:6b:e5:07:03:99:c7:12:db:07:b8:c7:41: e9:92:49:4c:c0:27:9b:4d:9f:9c:b8:b4:25:e2:93:85:3f:35: ee:49:e8:17:30:49:b5:d2:aa:b1:b0:9f:7e:e3:70:7d:e4:c2: 5e:3d:c2:a3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8fiic18bhM1PNN0QReazLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjYzc1ODVhYjdhODNlYzgwYjU1YWI5NTdiZjM3Yjc5MWU3 NjUwMTYwHhcNMjUxMjIwMTYwMDU5WhcNMjUxMjIxMTYwMDU5WjAzMTEwLwYDVQQD EygxMmNkMjhjMDNiZDI4NjdmZjEyYjk0Y2RkNTZiZDAxNTQyODg3N2I0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1j5A4Y4yj3oRo5k/ZUVrYwnyH7QT ao+twBsl106IlptGQDQkgFb3WLCBlbrJfho9gfvnBeVP/5scwJFQwWR9J9+orZi6 5lEAXMI528BQNcbx+zxm8rkKS0zdptYg8NWOkeRdDs9JC8zyaNpyuViBiyvAYkot Rv/8iOFvuOWnKmBbKGIzEcKqiRDIgWlOWp02UCK2+5DRq++2s6AvIqcvLMvn+yhM r+LhkZlrnGV38xZLyFFVUn5AWwDvfiq8MILZ3BcKGm4M8B860JzgjsEzov7j/6F1 imrR6KzYo2ztgmM5zf38FAnTLz6bEIZhlahqdqoD1Xgl+OXO7IpEUSC8BwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBLNKMA70oZ/8SuUzdVr0BVCiHe0MB8GA1UdIwQY MBaAFGzHWFq3qD7IC1WrlXvze3kedlAWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYk1kWVdyZW9Qc2dMVmF1VmVfTjdlUjUyVUJZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS83MDZmNDEtMDUzMS00M2RmLWIxZTkt NmY4NmQwYjdlM2UwLzEvYk1kWVdyZW9Qc2dMVmF1VmVfTjdlUjUyVUJZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS83MDZmNDEtMDUzMS00M2RmLWIxZTktNmY4NmQwYjdlM2Uw LzEvYk1kWVdyZW9Qc2dMVmF1VmVfTjdlUjUyVUJZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXso0Y8A/ OKf8BTt1gZpdCtkM2xPunKwS+eYWXIZE7HxGhMEqpzGPqzXbXh/gL0swtAKc+5r1 plAcEVfBUln13Dgp28gnyEZTD9VpVbFRqU5oqs0P/9PuLdEHxyeac1O/7hw3sf4Y h7uJGLtgxnI8jQNBKYVpXi8XEnlcdVL3cfl408SQBVAhX5XsLXGIgfG+OVva6cDO afz3/nvaelNCCJwPjc4YV1BNex6yrxDyyoFeFiHZANu7iTJs6Yjz7imNyTZ37WRH HfW0L3j7a+UHA5nHEtsHuMdB6ZJJTMAnm02fnLi0JeKThT817knoFzBJtdKqsbCf fuNwfeTCXj3Cow== -----END CERTIFICATE-----Generated at Sat Dec 20 22:22:00 2025 by rpki-client