This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/60bc06-c721-4e30-a757-6f4d818941a8/1/mfL0sCJG5gTiN_N5RaOCv62hJ38.mft File: mfL0sCJG5gTiN_N5RaOCv62hJ38.mft (raw, json) Hash identifier: +jq2cvv5LcO5y4FM49ggSlEZjOavWrVV3O8oj4hr2Y4= Subject key identifier: A8:FE:AB:EE:E8:E8:EB:0D:F7:A8:7D:A0:82:62:9D:92:4A:8A:90:1D Authority key identifier: 99:F2:F4:B0:22:46:E6:04:E2:37:F3:79:45:A3:82:BF:AD:A1:27:7F Certificate issuer: /CN=99f2f4b02246e604e237f37945a382bfada1277f Certificate serial: 019AF3528389376A0A8B6990992FB1453DC6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mfL0sCJG5gTiN_N5RaOCv62hJ38.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/60bc06-c721-4e30-a757-6f4d818941a8/1/mfL0sCJG5gTiN_N5RaOCv62hJ38.mft Manifest number: 084C Signing time: Sat 06 Dec 2025 11:01:02 +0000 Manifest this update: Sat 06 Dec 2025 11:01:02 +0000 Manifest next update: Sun 07 Dec 2025 11:01:02 +0000 Files and hashes: 1: mfL0sCJG5gTiN_N5RaOCv62hJ38.crl (hash: Em0b4/j46mFsmMS0S1r1CpBCXo59lfC2kyDSBxfBiFE=) 2: tD16yJgx6FslawER1Evjktr90DU.roa (hash: IgaqAI1HCcxs2x01fN4KAw3fM/ZJo5SCnC5NuJ1Z+9Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/60bc06-c721-4e30-a757-6f4d818941a8/1/mfL0sCJG5gTiN_N5RaOCv62hJ38.crl rsync://rpki.ripe.net/repository/DEFAULT/65/60bc06-c721-4e30-a757-6f4d818941a8/1/mfL0sCJG5gTiN_N5RaOCv62hJ38.mft rsync://rpki.ripe.net/repository/DEFAULT/mfL0sCJG5gTiN_N5RaOCv62hJ38.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 11:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:83:89:37:6a:0a:8b:69:90:99:2f:b1:45:3d:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99f2f4b02246e604e237f37945a382bfada1277f Validity Not Before: Dec 6 11:01:02 2025 GMT Not After : Dec 7 11:01:02 2025 GMT Subject: CN=a8feabeee8e8eb0df7a87da082629d924a8a901d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:76:84:e8:9e:2b:ad:2a:14:7e:47:6e:3c:6d: 6a:40:44:db:7f:76:18:24:de:00:23:c0:89:57:54: e0:bd:1a:47:2c:69:2f:4b:19:37:79:1e:09:fc:15: 89:14:e2:22:01:06:e4:0b:4c:19:ee:77:a2:d2:a0: 62:64:7d:a8:33:c2:f8:90:05:0d:d3:46:d8:cb:24: 90:90:c2:f3:1e:98:23:fb:54:91:0b:30:05:73:25: 13:ed:15:ca:8e:69:fd:04:b2:1a:97:e5:a7:37:25: 99:36:34:39:c2:46:0c:06:7f:18:bf:a6:f6:5b:87: f7:93:1b:a6:81:54:fd:da:72:04:33:64:8a:02:74: e0:9a:eb:11:39:22:72:8b:40:02:c3:29:2a:cf:94: cb:6a:1e:6a:34:31:39:3f:0b:36:57:db:e8:7c:c9: a8:34:c8:25:62:08:c5:7d:02:b6:36:c0:84:3b:6c: 50:a1:db:36:39:ac:31:01:a0:35:e4:81:62:f1:6c: 41:eb:30:78:8c:d0:13:5f:bc:03:4f:06:d1:61:50: 74:a9:b2:28:5f:83:09:bc:64:71:e7:b4:59:1b:dd: ed:35:25:2a:55:69:28:8c:79:9c:b0:c8:fd:ef:dc: 94:6d:6f:43:b5:9b:37:f9:9d:bc:b3:90:5f:07:7c: 27:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:FE:AB:EE:E8:E8:EB:0D:F7:A8:7D:A0:82:62:9D:92:4A:8A:90:1D X509v3 Authority Key Identifier: keyid:99:F2:F4:B0:22:46:E6:04:E2:37:F3:79:45:A3:82:BF:AD:A1:27:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mfL0sCJG5gTiN_N5RaOCv62hJ38.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/60bc06-c721-4e30-a757-6f4d818941a8/1/mfL0sCJG5gTiN_N5RaOCv62hJ38.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/60bc06-c721-4e30-a757-6f4d818941a8/1/mfL0sCJG5gTiN_N5RaOCv62hJ38.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:5e:17:92:2c:a5:bf:e2:08:a2:fe:78:e9:1b:62:51:c6:bd: 12:70:a0:50:59:65:82:64:19:7e:3d:78:83:fe:7a:93:79:6c: 76:72:1a:6a:a7:bc:a4:58:be:ce:7f:35:b2:66:97:77:51:f7: 61:67:75:9c:a1:c9:a0:a1:24:b5:e6:13:85:4a:1a:d3:ac:04: c0:2e:c3:ce:57:8a:f2:bc:bd:62:8e:9a:14:37:2b:93:81:7f: a9:8c:46:33:56:b6:e9:e3:ae:93:ec:59:cf:57:3f:9c:b7:a3: 1d:cc:84:9b:ff:34:78:f4:bb:dc:17:0b:2b:dd:6b:74:c1:f7: fa:f2:c7:9a:98:73:7d:33:20:d5:85:c7:8e:5c:9a:35:c0:44: d5:b2:4e:07:83:94:a8:af:3b:eb:20:e8:db:14:4d:b3:5f:8f: e5:67:fa:1d:89:6e:f3:ca:e0:4b:7c:b2:11:af:42:86:0e:b8: a8:8f:17:2f:a6:ed:89:cc:44:aa:4d:96:a4:17:15:cb:d6:f4: e4:4b:4d:6b:ff:cb:ca:b3:ee:d3:06:64:eb:f3:bc:ea:19:bf: de:be:0d:8a:d9:e9:90:94:22:d9:18:bd:08:d3:22:3a:1a:95: f7:22:f7:74:85:81:aa:20:ce:a4:ab:cb:ef:6f:17:45:31:0c: 1a:f8:09:66 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzUoOJN2oKi2mQmS+xRT3GMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk5ZjJmNGIwMjI0NmU2MDRlMjM3ZjM3OTQ1YTM4MmJmYWRh MTI3N2YwHhcNMjUxMjA2MTEwMTAyWhcNMjUxMjA3MTEwMTAyWjAzMTEwLwYDVQQD EyhhOGZlYWJlZWU4ZThlYjBkZjdhODdkYTA4MjYyOWQ5MjRhOGE5MDFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvXaE6J4rrSoUfkduPG1qQETbf3YY JN4AI8CJV1TgvRpHLGkvSxk3eR4J/BWJFOIiAQbkC0wZ7nei0qBiZH2oM8L4kAUN 00bYyySQkMLzHpgj+1SRCzAFcyUT7RXKjmn9BLIal+WnNyWZNjQ5wkYMBn8Yv6b2 W4f3kxumgVT92nIEM2SKAnTgmusROSJyi0ACwykqz5TLah5qNDE5Pws2V9vofMmo NMglYgjFfQK2NsCEO2xQods2OawxAaA15IFi8WxB6zB4jNATX7wDTwbRYVB0qbIo X4MJvGRx57RZG93tNSUqVWkojHmcsMj979yUbW9DtZs3+Z28s5BfB3wn4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKj+q+7o6OsN96h9oIJinZJKipAdMB8GA1UdIwQY MBaAFJny9LAiRuYE4jfzeUWjgr+toSd/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbWZMMHNDSkc1Z1RpTl9ONVJhT0N2NjJoSjM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS82MGJjMDYtYzcyMS00ZTMwLWE3NTct NmY0ZDgxODk0MWE4LzEvbWZMMHNDSkc1Z1RpTl9ONVJhT0N2NjJoSjM4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS82MGJjMDYtYzcyMS00ZTMwLWE3NTctNmY0ZDgxODk0MWE4 LzEvbWZMMHNDSkc1Z1RpTl9ONVJhT0N2NjJoSjM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQF4Xkiyl v+IIov546RtiUca9EnCgUFllgmQZfj14g/56k3lsdnIaaqe8pFi+zn81smaXd1H3 YWd1nKHJoKEkteYThUoa06wEwC7DzleK8ry9Yo6aFDcrk4F/qYxGM1a26eOuk+xZ z1c/nLejHcyEm/80ePS73BcLK91rdMH3+vLHmphzfTMg1YXHjlyaNcBE1bJOB4OU qK876yDo2xRNs1+P5Wf6HYlu88rgS3yyEa9Chg64qI8XL6bticxEqk2WpBcVy9b0 5EtNa//LyrPu0wZk6/O86hm/3r4NitnpkJQi2Ri9CNMiOhqV9yL3dIWBqiDOpKvL 728XRTEMGvgJZg== -----END CERTIFICATE-----Generated at Sat Dec 6 17:51:21 2025 by rpki-client