This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/1a1cbe-217d-434b-ada1-44e219a9e96e/1/mi67vL4b9jRu1Ha4PH4Tp4RBes0.mft File: mi67vL4b9jRu1Ha4PH4Tp4RBes0.mft (raw, json) Hash identifier: 6j3tBdde/nPm/4tiPlEhqaHP5DlAqOoPCFIiQdpf0pc= Subject key identifier: 18:DF:5F:A1:73:85:2C:E6:89:BE:74:AB:EE:48:85:E2:BB:F8:95:96 Authority key identifier: 9A:2E:BB:BC:BE:1B:F6:34:6E:D4:76:B8:3C:7E:13:A7:84:41:7A:CD Certificate issuer: /CN=9a2ebbbcbe1bf6346ed476b83c7e13a784417acd Certificate serial: 019AF16466D561F837159A984F2085DD609C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mi67vL4b9jRu1Ha4PH4Tp4RBes0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/1a1cbe-217d-434b-ada1-44e219a9e96e/1/mi67vL4b9jRu1Ha4PH4Tp4RBes0.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 02:01:20 +0000 Manifest this update: Sat 06 Dec 2025 02:01:20 +0000 Manifest next update: Sun 07 Dec 2025 02:01:20 +0000 Files and hashes: 1: mi67vL4b9jRu1Ha4PH4Tp4RBes0.crl (hash: zIcbGR3mcRFhWa+pwAgHp9QsjdmvAF3QZYE0llcAe60=) 2: p3SnBhPJD4zqhLWqM9q8OwXJYug.roa (hash: KsTNEITlhctFDNSkvlwZyGm1BzJMCGD3crVV4BOTdy8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/1a1cbe-217d-434b-ada1-44e219a9e96e/1/mi67vL4b9jRu1Ha4PH4Tp4RBes0.crl rsync://rpki.ripe.net/repository/DEFAULT/71/1a1cbe-217d-434b-ada1-44e219a9e96e/1/mi67vL4b9jRu1Ha4PH4Tp4RBes0.mft rsync://rpki.ripe.net/repository/DEFAULT/mi67vL4b9jRu1Ha4PH4Tp4RBes0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:66:d5:61:f8:37:15:9a:98:4f:20:85:dd:60:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a2ebbbcbe1bf6346ed476b83c7e13a784417acd Validity Not Before: Dec 6 02:01:20 2025 GMT Not After : Dec 7 02:01:20 2025 GMT Subject: CN=18df5fa173852ce689be74abee4885e2bbf89596 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:1f:e6:46:6f:d0:e6:1d:4f:70:a4:73:65:e3: 9c:01:53:aa:5f:2c:8e:88:19:6e:1f:c7:b5:8a:59: 25:da:6f:0e:6e:30:12:31:81:2d:7e:f7:ac:13:d0: 1d:d4:46:24:78:b6:f3:77:5e:d2:59:b8:2a:32:d4: 9b:4e:0b:97:1d:d9:03:6d:4f:0b:86:ce:09:43:1c: 5e:1a:57:cc:83:71:ed:ac:7a:c6:cf:40:fe:3e:1e: 41:60:f5:2a:57:1c:4d:a4:cb:85:be:74:df:60:78: 00:7f:6f:56:3d:36:07:8d:31:5b:43:08:96:07:be: c9:0e:9b:8b:11:21:f7:8c:ea:6a:79:49:80:0c:07: cf:a6:3f:2b:27:fc:76:a2:1d:51:67:75:bd:9a:35: 37:d0:27:da:02:f3:66:1d:e7:ac:88:07:8e:e5:6a: b9:ef:57:94:85:f5:c5:e8:a3:1f:49:19:1a:af:81: 31:d5:e7:9f:05:4e:32:67:56:73:54:d2:f0:bd:61: bf:5f:59:78:d2:7a:a4:ea:84:65:d0:d1:42:7c:20: 6c:b8:78:e6:eb:6d:e7:9a:46:a1:fb:73:27:4e:b2: c8:4a:20:6b:35:26:b1:66:cb:b8:28:c4:47:c7:89: 0f:a6:40:67:ff:ff:01:fc:d9:95:e9:61:f3:d2:c0: 30:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:DF:5F:A1:73:85:2C:E6:89:BE:74:AB:EE:48:85:E2:BB:F8:95:96 X509v3 Authority Key Identifier: keyid:9A:2E:BB:BC:BE:1B:F6:34:6E:D4:76:B8:3C:7E:13:A7:84:41:7A:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mi67vL4b9jRu1Ha4PH4Tp4RBes0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/1a1cbe-217d-434b-ada1-44e219a9e96e/1/mi67vL4b9jRu1Ha4PH4Tp4RBes0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/71/1a1cbe-217d-434b-ada1-44e219a9e96e/1/mi67vL4b9jRu1Ha4PH4Tp4RBes0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:2a:bc:e2:8f:90:76:5d:95:26:68:10:6e:d2:07:55:77:40: 4b:55:45:2e:bc:ae:f2:fe:8e:99:2c:68:ba:e4:ad:4f:66:b8: e2:37:e6:a0:81:32:a8:fc:11:32:a8:3f:d4:8b:5f:5f:c8:ff: 24:b6:30:ce:3a:f8:58:9e:60:9b:5c:de:ce:b0:cd:15:29:a5: d9:89:a3:79:0f:82:09:74:bb:b1:aa:89:25:d1:35:a0:2e:78: c4:ec:df:eb:52:d8:9f:ba:f0:d0:76:c8:c0:cf:a8:12:11:00: d2:16:ef:d2:f3:e0:d1:ca:bf:55:3f:d1:ce:84:7b:00:23:2e: 27:d3:fe:de:f0:26:bd:6e:c5:a5:34:a4:d7:c0:28:10:73:2c: a4:1c:b8:c7:2b:d0:f6:64:31:4d:1d:23:34:a2:6b:10:d4:7b: a7:4d:b7:ac:8d:ca:53:ba:f3:c4:a5:fe:fb:1c:bd:b4:ff:61: 25:86:b5:41:7d:04:88:ac:c4:22:cb:70:2f:db:96:b7:5a:cd: ed:ad:cd:56:92:2b:4c:f0:83:f8:2a:70:db:9e:5a:37:07:c9: 32:37:6f:71:d0:8a:2b:31:70:0c:14:b0:91:de:f2:3b:e9:ea: 09:79:3c:92:43:78:3e:4f:4c:ca:c2:d9:f7:e8:75:92:cb:a9: a7:31:64:8d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZGbVYfg3FZqYTyCF3WCcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhMmViYmJjYmUxYmY2MzQ2ZWQ0NzZiODNjN2UxM2E3ODQ0 MTdhY2QwHhcNMjUxMjA2MDIwMTIwWhcNMjUxMjA3MDIwMTIwWjAzMTEwLwYDVQQD EygxOGRmNWZhMTczODUyY2U2ODliZTc0YWJlZTQ4ODVlMmJiZjg5NTk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjx/mRm/Q5h1PcKRzZeOcAVOqXyyO iBluH8e1ilkl2m8ObjASMYEtfvesE9Ad1EYkeLbzd17SWbgqMtSbTguXHdkDbU8L hs4JQxxeGlfMg3HtrHrGz0D+Ph5BYPUqVxxNpMuFvnTfYHgAf29WPTYHjTFbQwiW B77JDpuLESH3jOpqeUmADAfPpj8rJ/x2oh1RZ3W9mjU30CfaAvNmHeesiAeO5Wq5 71eUhfXF6KMfSRkar4Ex1eefBU4yZ1ZzVNLwvWG/X1l40nqk6oRl0NFCfCBsuHjm 623nmkah+3MnTrLISiBrNSaxZsu4KMRHx4kPpkBn//8B/NmV6WHz0sAwdQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBjfX6FzhSzmib50q+5IheK7+JWWMB8GA1UdIwQY MBaAFJouu7y+G/Y0btR2uDx+E6eEQXrNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbWk2N3ZMNGI5alJ1MUhhNFBINFRwNFJCZXMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS8xYTFjYmUtMjE3ZC00MzRiLWFkYTEt NDRlMjE5YTllOTZlLzEvbWk2N3ZMNGI5alJ1MUhhNFBINFRwNFJCZXMwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MS8xYTFjYmUtMjE3ZC00MzRiLWFkYTEtNDRlMjE5YTllOTZl LzEvbWk2N3ZMNGI5alJ1MUhhNFBINFRwNFJCZXMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkiq84o+Q dl2VJmgQbtIHVXdAS1VFLryu8v6OmSxouuStT2a44jfmoIEyqPwRMqg/1ItfX8j/ JLYwzjr4WJ5gm1zezrDNFSml2YmjeQ+CCXS7saqJJdE1oC54xOzf61LYn7rw0HbI wM+oEhEA0hbv0vPg0cq/VT/RzoR7ACMuJ9P+3vAmvW7FpTSk18AoEHMspBy4xyvQ 9mQxTR0jNKJrENR7p023rI3KU7rzxKX++xy9tP9hJYa1QX0EiKzEIstwL9uWt1rN 7a3NVpIrTPCD+Cpw255aNwfJMjdvcdCKKzFwDBSwkd7yO+nqCXk8kkN4Pk9MysLZ 9+h1ksuppzFkjQ== -----END CERTIFICATE-----Generated at Sat Dec 6 11:07:34 2025 by rpki-client