This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/382597-0d50-400d-a71b-676e80dc1de6/1/mFTaUYIyMZ9noy_YrUwGU2xB1b8.mft File: mFTaUYIyMZ9noy_YrUwGU2xB1b8.mft (raw, json) Hash identifier: XE3cQPyxE/Wh5bgpAuuBBW1jC9N6OUM/zuXqhHgIPTA= Subject key identifier: 18:85:76:87:63:E7:39:07:26:6A:A9:62:AB:1C:AB:E8:81:C6:7F:82 Authority key identifier: 98:54:DA:51:82:32:31:9F:67:A3:2F:D8:AD:4C:06:53:6C:41:D5:BF Certificate issuer: /CN=9854da518232319f67a32fd8ad4c06536c41d5bf Certificate serial: 019AF3891FD573C6196B2A30FCFFB8971FDC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mFTaUYIyMZ9noy_YrUwGU2xB1b8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/382597-0d50-400d-a71b-676e80dc1de6/1/mFTaUYIyMZ9noy_YrUwGU2xB1b8.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 12:00:41 +0000 Manifest this update: Sat 06 Dec 2025 12:00:41 +0000 Manifest next update: Sun 07 Dec 2025 12:00:41 +0000 Files and hashes: 1: BFbItzgMXh2yCZ227Kwfzi1k3ME.roa (hash: 3p3Z55QLOu2JV1kUetHwILYBWmwCeLPU+vcoZy0JMPg=) 2: mFTaUYIyMZ9noy_YrUwGU2xB1b8.crl (hash: d2A5jsLIgUQZ7Ia0uRB3NRGAOfCPL+0uXvRZZIjN9qk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/382597-0d50-400d-a71b-676e80dc1de6/1/mFTaUYIyMZ9noy_YrUwGU2xB1b8.crl rsync://rpki.ripe.net/repository/DEFAULT/61/382597-0d50-400d-a71b-676e80dc1de6/1/mFTaUYIyMZ9noy_YrUwGU2xB1b8.mft rsync://rpki.ripe.net/repository/DEFAULT/mFTaUYIyMZ9noy_YrUwGU2xB1b8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:1f:d5:73:c6:19:6b:2a:30:fc:ff:b8:97:1f:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9854da518232319f67a32fd8ad4c06536c41d5bf Validity Not Before: Dec 6 12:00:41 2025 GMT Not After : Dec 7 12:00:41 2025 GMT Subject: CN=1885768763e73907266aa962ab1cabe881c67f82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:89:ed:eb:ae:02:ed:a1:94:c2:0e:66:df:61: c5:9f:eb:fb:fd:9b:64:7e:4f:d9:fe:42:51:10:64: 2f:d2:c3:ba:5a:93:1b:44:2d:ce:53:5a:c0:ba:80: c8:d5:e3:33:6d:11:3a:1b:26:b5:a3:3b:78:11:21: bc:6a:20:c5:98:02:cd:69:b6:11:22:f9:fc:60:73: 04:6f:23:ec:b8:58:ec:ec:81:40:5d:74:9f:05:8b: 3c:56:04:a8:7b:de:50:e2:f8:c2:e4:44:b2:12:1c: e4:2d:e1:f7:96:30:33:1c:db:c1:f0:6e:44:88:cc: ff:7e:e4:7c:fd:ce:38:b7:cd:eb:3e:55:a8:67:a8: 0a:55:a1:6f:20:31:07:a5:60:6f:ff:62:e4:2a:4d: a7:fd:29:7a:23:be:e5:a3:47:78:96:f6:f8:6e:e6: f8:e7:cb:78:45:bf:37:af:bc:ef:3c:c8:b4:94:08: 44:72:45:3d:3a:4d:78:75:38:f0:28:d7:df:f9:18: 3d:4f:57:22:b7:a5:0e:8a:0f:71:e3:91:32:5d:bb: a3:61:ed:dc:f2:60:0f:84:50:41:eb:27:ca:75:11: 7e:1a:35:46:dd:8b:e5:dc:70:21:75:18:47:35:32: f8:67:6e:40:c3:37:8d:47:9e:cd:e5:46:5d:16:c2: 4d:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:85:76:87:63:E7:39:07:26:6A:A9:62:AB:1C:AB:E8:81:C6:7F:82 X509v3 Authority Key Identifier: keyid:98:54:DA:51:82:32:31:9F:67:A3:2F:D8:AD:4C:06:53:6C:41:D5:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mFTaUYIyMZ9noy_YrUwGU2xB1b8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/382597-0d50-400d-a71b-676e80dc1de6/1/mFTaUYIyMZ9noy_YrUwGU2xB1b8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/382597-0d50-400d-a71b-676e80dc1de6/1/mFTaUYIyMZ9noy_YrUwGU2xB1b8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:9f:bd:41:22:3b:54:45:3d:2c:53:1c:b8:c1:fb:d0:ba:f6: f3:fb:95:7c:07:20:db:59:65:b9:48:4c:78:6d:71:49:b1:90: d3:c4:61:3c:08:e1:0e:dc:a7:ef:bb:37:01:de:1b:0e:f6:7d: 78:27:7b:c1:bb:16:86:01:79:50:95:8d:09:20:7c:6a:67:47: 8e:ae:28:20:24:e5:e4:a5:6d:a7:bd:ad:9d:da:0c:e1:99:64: f8:23:55:d7:a7:a8:f6:0b:03:fc:c7:42:5c:e7:48:b7:ed:ab: 2a:fb:fc:a6:47:0d:5f:81:9d:15:77:a0:a8:8b:0b:0d:b9:39: 2b:c5:8d:e0:7c:4b:37:d4:d2:be:a7:f5:50:57:fb:7f:7a:66: f8:85:ac:f8:29:85:ba:3e:cd:20:c7:62:dc:fd:33:53:25:63: 62:c3:47:67:13:90:ea:21:9e:2e:d9:94:23:2a:20:2a:e3:8f: 58:8f:10:be:f7:4e:6f:3e:20:65:8a:39:5f:0e:61:3e:37:79: 88:7f:cf:8f:69:e5:8f:33:8b:e3:0f:27:3c:3f:f1:de:81:6a: 1d:0d:dc:2e:28:57:1f:25:44:be:c0:51:5b:7b:a9:d5:3d:3f: 26:37:c2:9b:b9:9a:91:6f:0d:24:df:23:18:91:1f:19:1e:a1: 75:ae:71:87 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrziR/Vc8YZayow/P+4lx/cMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk4NTRkYTUxODIzMjMxOWY2N2EzMmZkOGFkNGMwNjUzNmM0 MWQ1YmYwHhcNMjUxMjA2MTIwMDQxWhcNMjUxMjA3MTIwMDQxWjAzMTEwLwYDVQQD EygxODg1NzY4NzYzZTczOTA3MjY2YWE5NjJhYjFjYWJlODgxYzY3ZjgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuYnt664C7aGUwg5m32HFn+v7/Ztk fk/Z/kJREGQv0sO6WpMbRC3OU1rAuoDI1eMzbRE6Gya1ozt4ESG8aiDFmALNabYR Ivn8YHMEbyPsuFjs7IFAXXSfBYs8VgSoe95Q4vjC5ESyEhzkLeH3ljAzHNvB8G5E iMz/fuR8/c44t83rPlWoZ6gKVaFvIDEHpWBv/2LkKk2n/Sl6I77lo0d4lvb4bub4 58t4Rb83r7zvPMi0lAhEckU9Ok14dTjwKNff+Rg9T1cit6UOig9x45EyXbujYe3c 8mAPhFBB6yfKdRF+GjVG3Yvl3HAhdRhHNTL4Z25AwzeNR57N5UZdFsJNowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBiFdodj5zkHJmqpYqscq+iBxn+CMB8GA1UdIwQY MBaAFJhU2lGCMjGfZ6Mv2K1MBlNsQdW/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbUZUYVVZSXlNWjlub3lfWXJVd0dVMnhCMWI4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS8zODI1OTctMGQ1MC00MDBkLWE3MWIt Njc2ZTgwZGMxZGU2LzEvbUZUYVVZSXlNWjlub3lfWXJVd0dVMnhCMWI4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS8zODI1OTctMGQ1MC00MDBkLWE3MWItNjc2ZTgwZGMxZGU2 LzEvbUZUYVVZSXlNWjlub3lfWXJVd0dVMnhCMWI4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq5+9QSI7 VEU9LFMcuMH70Lr28/uVfAcg21lluUhMeG1xSbGQ08RhPAjhDtyn77s3Ad4bDvZ9 eCd7wbsWhgF5UJWNCSB8amdHjq4oICTl5KVtp72tndoM4Zlk+CNV16eo9gsD/MdC XOdIt+2rKvv8pkcNX4GdFXegqIsLDbk5K8WN4HxLN9TSvqf1UFf7f3pm+IWs+CmF uj7NIMdi3P0zUyVjYsNHZxOQ6iGeLtmUIyogKuOPWI8QvvdObz4gZYo5Xw5hPjd5 iH/Pj2nljzOL4w8nPD/x3oFqHQ3cLihXHyVEvsBRW3up1T0/JjfCm7makW8NJN8j GJEfGR6hda5xhw== -----END CERTIFICATE-----Generated at Sat Dec 6 19:38:09 2025 by rpki-client