This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/d505e8-02b3-4d87-94c6-1da4b92799f6/1/mCtWk7gmH7U5_qOxPIFxFfAMGN8.mft File: mCtWk7gmH7U5_qOxPIFxFfAMGN8.mft (raw, json) Hash identifier: t60fqUZwGjnUIkcDMEGOPZTwtMCJNSfo8EdqVQ3TA2U= Subject key identifier: 9F:24:63:F1:5D:7F:A0:4E:3F:09:01:18:C3:FB:70:E9:E2:31:95:71 Authority key identifier: 98:2B:56:93:B8:26:1F:B5:39:FE:A3:B1:3C:81:71:15:F0:0C:18:DF Certificate issuer: /CN=982b5693b8261fb539fea3b13c817115f00c18df Certificate serial: 019AF0BFA45C17CC5F78ADF6E913B136C271 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCtWk7gmH7U5_qOxPIFxFfAMGN8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/d505e8-02b3-4d87-94c6-1da4b92799f6/1/mCtWk7gmH7U5_qOxPIFxFfAMGN8.mft Manifest number: 06D8 Signing time: Fri 05 Dec 2025 23:01:22 +0000 Manifest this update: Fri 05 Dec 2025 23:01:22 +0000 Manifest next update: Sat 06 Dec 2025 23:01:22 +0000 Files and hashes: 1: 8eJjkZcpuWjV5v8rUew7uwzMNnU.roa (hash: yUs06Rtd51ccCs/vsal2jQR2RBqNnF02H0mDpxwGrFE=) 2: mCtWk7gmH7U5_qOxPIFxFfAMGN8.crl (hash: smVlLk0jucgYIZXWGMxi4548TzaIion0b5uP+3HkEJs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/d505e8-02b3-4d87-94c6-1da4b92799f6/1/mCtWk7gmH7U5_qOxPIFxFfAMGN8.crl rsync://rpki.ripe.net/repository/DEFAULT/51/d505e8-02b3-4d87-94c6-1da4b92799f6/1/mCtWk7gmH7U5_qOxPIFxFfAMGN8.mft rsync://rpki.ripe.net/repository/DEFAULT/mCtWk7gmH7U5_qOxPIFxFfAMGN8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:a4:5c:17:cc:5f:78:ad:f6:e9:13:b1:36:c2:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=982b5693b8261fb539fea3b13c817115f00c18df Validity Not Before: Dec 5 23:01:22 2025 GMT Not After : Dec 6 23:01:22 2025 GMT Subject: CN=9f2463f15d7fa04e3f090118c3fb70e9e2319571 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:0a:86:4c:b5:c8:30:97:9a:9c:ae:1d:cd:91: f2:9c:90:47:f8:b9:c7:5f:9a:c4:41:62:f2:62:78: 71:42:07:39:19:65:dd:8a:3b:7d:fa:54:3e:0b:8e: 96:b4:4f:fe:58:85:9f:5a:02:3f:a7:be:0c:85:49: 1a:1b:23:87:db:fd:2b:83:62:0b:f8:48:d1:a1:88: cc:8e:e7:10:4a:8e:15:11:8e:f3:64:a7:fd:a3:c0: 9b:1d:b9:39:2c:bb:dc:ed:04:74:bc:9c:cb:e5:ea: d3:62:73:4a:47:e4:46:af:ac:c9:40:69:38:20:06: 7b:c0:fe:ac:76:c0:17:9a:94:52:7b:8e:a5:17:f1: 19:18:b0:8a:cb:64:05:a9:59:8b:be:08:57:50:c7: 42:b5:79:69:7f:05:2a:4b:87:19:88:38:21:56:88: 6c:d5:c7:e2:cf:b5:4d:29:7f:5e:3c:13:d3:03:48: eb:2c:ab:33:c4:3f:d0:25:95:9b:83:87:e4:84:7b: 99:c5:d9:fc:1f:07:ef:76:22:4c:25:59:4c:96:46: 3a:0e:09:8d:80:3b:00:51:d3:23:43:e8:07:47:4d: 73:5c:23:86:e6:09:51:01:27:67:20:68:6c:80:d4: 91:01:7d:87:56:dc:0b:da:74:37:21:67:78:d4:ad: d5:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:24:63:F1:5D:7F:A0:4E:3F:09:01:18:C3:FB:70:E9:E2:31:95:71 X509v3 Authority Key Identifier: keyid:98:2B:56:93:B8:26:1F:B5:39:FE:A3:B1:3C:81:71:15:F0:0C:18:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCtWk7gmH7U5_qOxPIFxFfAMGN8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/d505e8-02b3-4d87-94c6-1da4b92799f6/1/mCtWk7gmH7U5_qOxPIFxFfAMGN8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/d505e8-02b3-4d87-94c6-1da4b92799f6/1/mCtWk7gmH7U5_qOxPIFxFfAMGN8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:13:1b:9d:4a:f1:e0:93:69:00:9f:d6:2e:ea:8c:00:29:aa: 40:67:ee:88:b1:52:45:b0:be:c4:2a:21:26:07:4f:66:86:36: 0b:83:2d:89:2a:00:22:29:47:20:dc:94:8b:3f:2a:83:fb:ed: 3a:78:2b:48:0e:dd:1f:f9:05:e6:bf:70:50:e8:fe:a8:7e:4b: 21:25:de:e6:c8:b6:b8:ac:92:e1:c8:22:f5:07:a5:42:58:97: b2:9f:ec:a1:30:7b:d4:b5:04:2e:62:8b:7a:b3:4c:7c:1b:a7: 1f:97:7e:70:a7:3c:cd:ee:8d:98:28:93:7f:2a:7f:ee:77:59: a0:bc:f4:86:d8:b9:a3:21:36:36:b3:1d:b3:f4:97:0e:e5:e0: 5b:9f:84:20:e9:2f:7e:f6:1e:c8:d5:51:62:52:f8:71:1d:96: 2e:65:bf:ff:81:f2:78:d4:cd:d3:3a:3a:be:14:eb:a2:17:22: 0b:b7:c6:bd:4c:00:05:3e:39:3e:ce:5d:f3:22:af:c5:bd:72: 3d:1d:93:ef:48:9a:28:bd:99:72:48:0e:b9:17:6b:aa:53:58: 1d:42:f6:86:7e:f9:ec:10:65:cd:7e:72:d6:6d:9a:12:2e:d0: 59:f1:d1:03:21:56:b2:ab:20:d8:b1:dd:86:d3:39:f2:05:65: e1:f7:7a:de -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwv6RcF8xfeK326ROxNsJxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk4MmI1NjkzYjgyNjFmYjUzOWZlYTNiMTNjODE3MTE1ZjAw YzE4ZGYwHhcNMjUxMjA1MjMwMTIyWhcNMjUxMjA2MjMwMTIyWjAzMTEwLwYDVQQD Eyg5ZjI0NjNmMTVkN2ZhMDRlM2YwOTAxMThjM2ZiNzBlOWUyMzE5NTcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2AqGTLXIMJeanK4dzZHynJBH+LnH X5rEQWLyYnhxQgc5GWXdijt9+lQ+C46WtE/+WIWfWgI/p74MhUkaGyOH2/0rg2IL +EjRoYjMjucQSo4VEY7zZKf9o8CbHbk5LLvc7QR0vJzL5erTYnNKR+RGr6zJQGk4 IAZ7wP6sdsAXmpRSe46lF/EZGLCKy2QFqVmLvghXUMdCtXlpfwUqS4cZiDghVohs 1cfiz7VNKX9ePBPTA0jrLKszxD/QJZWbg4fkhHuZxdn8HwfvdiJMJVlMlkY6DgmN gDsAUdMjQ+gHR01zXCOG5glRASdnIGhsgNSRAX2HVtwL2nQ3IWd41K3VmQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ8kY/Fdf6BOPwkBGMP7cOniMZVxMB8GA1UdIwQY MBaAFJgrVpO4Jh+1Of6jsTyBcRXwDBjfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbUN0V2s3Z21IN1U1X3FPeFBJRnhGZkFNR044LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS9kNTA1ZTgtMDJiMy00ZDg3LTk0YzYt MWRhNGI5Mjc5OWY2LzEvbUN0V2s3Z21IN1U1X3FPeFBJRnhGZkFNR044Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS9kNTA1ZTgtMDJiMy00ZDg3LTk0YzYtMWRhNGI5Mjc5OWY2 LzEvbUN0V2s3Z21IN1U1X3FPeFBJRnhGZkFNR044LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAxMbnUrx 4JNpAJ/WLuqMACmqQGfuiLFSRbC+xCohJgdPZoY2C4MtiSoAIilHINyUiz8qg/vt OngrSA7dH/kF5r9wUOj+qH5LISXe5si2uKyS4cgi9QelQliXsp/soTB71LUELmKL erNMfBunH5d+cKc8ze6NmCiTfyp/7ndZoLz0hti5oyE2NrMds/SXDuXgW5+EIOkv fvYeyNVRYlL4cR2WLmW//4HyeNTN0zo6vhTrohciC7fGvUwABT45Ps5d8yKvxb1y PR2T70iaKL2ZckgOuRdrqlNYHUL2hn757BBlzX5y1m2aEi7QWfHRAyFWsqsg2LHd htM58gVl4fd63g== -----END CERTIFICATE-----Generated at Sat Dec 6 09:03:42 2025 by rpki-client