This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/07a487-26cb-4b18-bb39-15fe06fff8bc/1/mrL5l1qR5xN52hAOyEvUSgooDZs.mft File: mrL5l1qR5xN52hAOyEvUSgooDZs.mft (raw, json) Hash identifier: sHqY22CMKeGL8V1bI7cvYmNCuoLxfGOp2jJWTAba0sE= Subject key identifier: 9B:E9:CD:8E:A6:FE:A5:02:99:47:FA:8B:2C:4A:60:6E:2E:1B:DA:C7 Authority key identifier: 9A:B2:F9:97:5A:91:E7:13:79:DA:10:0E:C8:4B:D4:4A:0A:28:0D:9B Certificate issuer: /CN=9ab2f9975a91e71379da100ec84bd44a0a280d9b Certificate serial: 019AF49BEB88E30722F75DC7F38ABB51DA0E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mrL5l1qR5xN52hAOyEvUSgooDZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/07a487-26cb-4b18-bb39-15fe06fff8bc/1/mrL5l1qR5xN52hAOyEvUSgooDZs.mft Manifest number: 14A7 Signing time: Sat 06 Dec 2025 17:00:50 +0000 Manifest this update: Sat 06 Dec 2025 17:00:50 +0000 Manifest next update: Sun 07 Dec 2025 17:00:50 +0000 Files and hashes: 1: PbBhRej558nP-vCP2i5bq2vF02I.roa (hash: k4y0Lkz3mWSRjZ9l7iXnliVmD502EHJIpmvxtHIQNOU=) 2: mrL5l1qR5xN52hAOyEvUSgooDZs.crl (hash: RgxNtSS7mkwGuWHOg0o4v3o5AvmnyA6aL6U/xN5IBJ4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/07a487-26cb-4b18-bb39-15fe06fff8bc/1/mrL5l1qR5xN52hAOyEvUSgooDZs.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/07a487-26cb-4b18-bb39-15fe06fff8bc/1/mrL5l1qR5xN52hAOyEvUSgooDZs.mft rsync://rpki.ripe.net/repository/DEFAULT/mrL5l1qR5xN52hAOyEvUSgooDZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:9b:eb:88:e3:07:22:f7:5d:c7:f3:8a:bb:51:da:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab2f9975a91e71379da100ec84bd44a0a280d9b Validity Not Before: Dec 6 17:00:50 2025 GMT Not After : Dec 7 17:00:50 2025 GMT Subject: CN=9be9cd8ea6fea5029947fa8b2c4a606e2e1bdac7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:f0:a2:80:a2:6c:2b:82:54:ad:2d:75:1d:44: a3:a3:8c:b3:31:7f:84:57:f5:cc:88:24:04:34:ba: 34:e6:c0:8a:81:39:b2:20:31:88:c5:38:21:24:c4: cd:ae:b7:16:ec:56:fe:59:ae:7f:42:6e:85:5e:05: 96:44:61:0a:cd:b7:62:90:9b:72:00:09:73:1b:b3: fa:94:08:8c:53:77:b5:5a:8d:f4:d6:94:f8:b8:07: 3e:c0:4f:69:2f:f3:26:d6:87:80:76:a0:09:6b:f1: 0a:24:b3:d3:6e:50:9c:94:03:c2:6d:9f:8f:8d:86: 18:ef:74:b4:bb:2f:6e:7a:d6:37:ec:a1:45:60:18: a1:da:86:b6:e5:0a:a6:c7:a9:39:7e:42:9b:97:cd: a2:29:48:cd:d3:94:e7:58:8f:fd:27:87:64:c9:05: 78:3a:16:a5:b7:e3:e1:6c:f1:3e:ad:45:53:3f:16: 08:93:2d:52:61:16:5e:0a:6f:3b:82:62:ca:99:44: b5:e4:e6:75:07:40:f7:28:4b:06:5c:9c:53:f1:73: 3c:14:88:25:6a:30:c2:44:11:fd:11:0f:fb:3a:0c: 43:ad:0f:d6:64:66:64:b5:c8:a0:fb:ff:90:5d:76: 68:9e:53:0d:82:e8:4a:ce:56:9a:76:f0:8f:88:80: 52:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:E9:CD:8E:A6:FE:A5:02:99:47:FA:8B:2C:4A:60:6E:2E:1B:DA:C7 X509v3 Authority Key Identifier: keyid:9A:B2:F9:97:5A:91:E7:13:79:DA:10:0E:C8:4B:D4:4A:0A:28:0D:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mrL5l1qR5xN52hAOyEvUSgooDZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/07a487-26cb-4b18-bb39-15fe06fff8bc/1/mrL5l1qR5xN52hAOyEvUSgooDZs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/07a487-26cb-4b18-bb39-15fe06fff8bc/1/mrL5l1qR5xN52hAOyEvUSgooDZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:ef:2e:da:29:a5:48:74:cc:52:b3:56:3d:60:c8:ea:ba:b8: 08:11:73:c4:cd:b6:6c:e3:80:ad:dd:97:ae:2a:4c:2d:b5:18: af:87:94:18:a6:96:31:91:b2:4e:e4:b7:1d:06:52:07:3b:f4: 79:9c:d1:1b:79:06:1e:06:3a:03:2d:d9:e0:f1:3b:2f:5d:f9: 28:4b:06:09:46:47:2f:21:88:5d:fb:e7:ae:40:b4:5b:69:e4: 73:44:42:57:98:e7:d7:fd:61:c9:06:18:76:88:36:37:a0:95: 46:32:84:0b:c6:de:7f:17:44:f0:ad:62:32:94:29:42:b5:6f: b3:8c:cb:6b:1b:15:b6:7d:19:df:b6:ea:40:71:82:48:4c:97: d7:9b:9a:ed:c7:b8:d4:ef:94:fe:87:be:c6:ef:30:de:c6:c1: 03:0f:4d:77:c4:a8:f8:a8:b3:cc:43:cd:bc:55:ac:3f:a2:03: 54:00:35:8c:92:bd:47:48:07:df:0c:64:fe:8d:bc:7e:4c:98: f6:b5:2f:90:7e:42:9e:4b:7f:58:6f:44:a0:e9:2b:ae:af:ac: 9e:07:4d:ce:69:cb:f6:79:2e:72:3a:c9:7d:ff:bf:38:a3:41: cf:96:87:0b:1e:a1:70:cd:6e:90:ce:c2:db:78:62:43:f2:b2: b8:63:6b:96 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0m+uI4wci913H84q7UdoOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhYjJmOTk3NWE5MWU3MTM3OWRhMTAwZWM4NGJkNDRhMGEy ODBkOWIwHhcNMjUxMjA2MTcwMDUwWhcNMjUxMjA3MTcwMDUwWjAzMTEwLwYDVQQD Eyg5YmU5Y2Q4ZWE2ZmVhNTAyOTk0N2ZhOGIyYzRhNjA2ZTJlMWJkYWM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtPCigKJsK4JUrS11HUSjo4yzMX+E V/XMiCQENLo05sCKgTmyIDGIxTghJMTNrrcW7Fb+Wa5/Qm6FXgWWRGEKzbdikJty AAlzG7P6lAiMU3e1Wo301pT4uAc+wE9pL/Mm1oeAdqAJa/EKJLPTblCclAPCbZ+P jYYY73S0uy9uetY37KFFYBih2oa25Qqmx6k5fkKbl82iKUjN05TnWI/9J4dkyQV4 Ohalt+PhbPE+rUVTPxYIky1SYRZeCm87gmLKmUS15OZ1B0D3KEsGXJxT8XM8FIgl ajDCRBH9EQ/7OgxDrQ/WZGZktcig+/+QXXZonlMNguhKzlaadvCPiIBSnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJvpzY6m/qUCmUf6iyxKYG4uG9rHMB8GA1UdIwQY MBaAFJqy+ZdakecTedoQDshL1EoKKA2bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbXJMNWwxcVI1eE41MmhBT3lFdlVTZ29vRFpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS8wN2E0ODctMjZjYi00YjE4LWJiMzkt MTVmZTA2ZmZmOGJjLzEvbXJMNWwxcVI1eE41MmhBT3lFdlVTZ29vRFpzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS8wN2E0ODctMjZjYi00YjE4LWJiMzktMTVmZTA2ZmZmOGJj LzEvbXJMNWwxcVI1eE41MmhBT3lFdlVTZ29vRFpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ+8u2iml SHTMUrNWPWDI6rq4CBFzxM22bOOArd2XripMLbUYr4eUGKaWMZGyTuS3HQZSBzv0 eZzRG3kGHgY6Ay3Z4PE7L135KEsGCUZHLyGIXfvnrkC0W2nkc0RCV5jn1/1hyQYY dog2N6CVRjKEC8befxdE8K1iMpQpQrVvs4zLaxsVtn0Z37bqQHGCSEyX15ua7ce4 1O+U/oe+xu8w3sbBAw9Nd8So+KizzEPNvFWsP6IDVAA1jJK9R0gH3wxk/o28fkyY 9rUvkH5Cnkt/WG9EoOkrrq+sngdNzmnL9nkucjrJff+/OKNBz5aHCx6hcM1ukM7C 23hiQ/KyuGNrlg== -----END CERTIFICATE-----Generated at Sun Dec 7 00:04:03 2025 by rpki-client