This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/1edd25-ff90-40ae-8a20-f76b8353ad68/1/mZYvXuAnimDLvNQWkZH3FIEhatQ.mft File: mZYvXuAnimDLvNQWkZH3FIEhatQ.mft (raw, json) Hash identifier: m4DW2UqPHu8Bt8fRftnDf+4ADp2wnt52s6GQBPn3zN8= Subject key identifier: 0A:EC:7F:82:73:AF:E6:25:07:33:0B:E7:8F:40:9B:92:4A:74:71:98 Authority key identifier: 99:96:2F:5E:E0:27:8A:60:CB:BC:D4:16:91:91:F7:14:81:21:6A:D4 Certificate issuer: /CN=99962f5ee0278a60cbbcd4169191f71481216ad4 Certificate serial: 019B360EBBB2BC837DA1F76BF06D5F96A1A4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mZYvXuAnimDLvNQWkZH3FIEhatQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/1edd25-ff90-40ae-8a20-f76b8353ad68/1/mZYvXuAnimDLvNQWkZH3FIEhatQ.mft Manifest number: 14BC Signing time: Fri 19 Dec 2025 10:01:33 +0000 Manifest this update: Fri 19 Dec 2025 10:01:33 +0000 Manifest next update: Sat 20 Dec 2025 10:01:33 +0000 Files and hashes: 1: PcKfcpxjxCfbogVi4GU3TNWXfWo.roa (hash: FyEhv9qszU5/I+NRa1KRYr4i13WZJNlUiL5+rA2wd9M=) 2: dKjh9OyM_cot3UzX7jW4QBDob5U.roa (hash: HTTUqeSNDV7AnFAFILfDkkX8OZRGZuFCWYdTMt5tQp0=) 3: mZYvXuAnimDLvNQWkZH3FIEhatQ.crl (hash: ZEKnF4nyZrQ6aF5KizrcCMstcL4Mf7XveW7J+AN1HwQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/1edd25-ff90-40ae-8a20-f76b8353ad68/1/mZYvXuAnimDLvNQWkZH3FIEhatQ.crl rsync://rpki.ripe.net/repository/DEFAULT/74/1edd25-ff90-40ae-8a20-f76b8353ad68/1/mZYvXuAnimDLvNQWkZH3FIEhatQ.mft rsync://rpki.ripe.net/repository/DEFAULT/mZYvXuAnimDLvNQWkZH3FIEhatQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:0e:bb:b2:bc:83:7d:a1:f7:6b:f0:6d:5f:96:a1:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99962f5ee0278a60cbbcd4169191f71481216ad4 Validity Not Before: Dec 19 10:01:33 2025 GMT Not After : Dec 20 10:01:33 2025 GMT Subject: CN=0aec7f8273afe62507330be78f409b924a747198 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:e0:ce:c2:fe:66:8b:01:86:0b:55:58:5b:3f: 5d:1b:f6:0e:37:4e:ce:17:d2:a9:94:9a:bb:2d:2a: 6c:31:1d:32:8f:3c:3a:d4:98:0d:b1:50:17:38:f1: 72:09:40:e1:72:58:bd:7e:f3:8e:7a:9f:c3:ca:26: 53:03:52:72:bb:0d:95:60:80:ff:80:26:ff:94:13: 7d:fb:03:5c:09:5d:a0:83:0f:b6:8f:37:25:7b:0a: d2:12:11:91:f2:10:ba:4d:4b:3b:81:21:22:1a:16: 95:25:65:16:0a:b8:4e:77:c1:23:2d:40:d3:30:ea: 99:77:e5:fa:bc:54:40:d4:f5:dc:c7:9f:74:35:c7: 13:cf:df:61:77:e9:4c:cb:97:ff:76:01:8a:4e:18: dc:88:9b:1a:25:35:68:e4:6c:d7:7c:1b:24:60:47: 02:78:3f:83:43:c6:ca:b1:33:55:61:e2:78:e9:7e: 24:86:36:d4:f9:06:b5:92:f2:51:72:1d:24:37:33: 44:5e:84:80:d0:7f:0a:ee:db:c7:dd:eb:66:58:ec: 27:69:5c:a5:9d:ed:b5:c5:34:85:4a:40:9a:0d:9d: 01:56:5d:c1:ff:b7:cd:bc:18:9b:77:14:95:6a:25: 24:55:b1:b7:e5:62:20:e1:bd:75:66:4f:85:31:f9: f3:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:EC:7F:82:73:AF:E6:25:07:33:0B:E7:8F:40:9B:92:4A:74:71:98 X509v3 Authority Key Identifier: keyid:99:96:2F:5E:E0:27:8A:60:CB:BC:D4:16:91:91:F7:14:81:21:6A:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mZYvXuAnimDLvNQWkZH3FIEhatQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/1edd25-ff90-40ae-8a20-f76b8353ad68/1/mZYvXuAnimDLvNQWkZH3FIEhatQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/74/1edd25-ff90-40ae-8a20-f76b8353ad68/1/mZYvXuAnimDLvNQWkZH3FIEhatQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:8f:56:b4:79:95:b2:b0:63:82:6b:09:35:f8:41:ce:48:e8: 99:dc:47:2d:c0:93:35:7d:32:2f:a8:5e:2f:2b:eb:2e:40:6f: 21:7e:89:93:aa:cf:37:ec:fd:45:15:81:68:93:91:c0:47:a3: a0:81:d7:7b:1f:73:20:64:f8:84:07:bb:99:45:f0:10:b8:c2: a9:cb:9e:56:00:4f:d0:dd:3c:cb:93:45:e4:31:84:a0:cc:c7: 4f:eb:7c:2c:99:aa:65:30:e4:e5:03:b5:14:ee:01:1f:2a:9b: d8:82:5d:e7:2e:02:97:42:dc:3c:ee:c6:4e:06:c3:1a:91:f3: 00:30:c4:6a:15:1b:21:a2:5f:5d:96:0c:ff:77:b7:7f:8f:f6: a2:5d:93:14:f0:64:ce:db:22:ea:e7:0d:59:b5:3e:6a:1a:93: 2b:f3:ff:62:29:98:57:57:59:c0:b7:95:bd:43:e6:fa:b5:91: 00:81:ec:f8:98:8c:9f:08:c1:3e:57:ae:89:0e:c5:11:48:e2: a3:07:b9:62:cc:17:b6:e1:ec:a4:09:2e:43:ee:9f:72:42:d4: c1:6a:3c:1b:2a:a5:5c:a5:50:fd:09:19:bc:c1:36:68:61:26: b4:d5:43:cc:93:75:1d:ab:fe:c4:b6:64:c0:da:78:6d:58:5b: 51:c4:40:05 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs2DruyvIN9ofdr8G1flqGkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk5OTYyZjVlZTAyNzhhNjBjYmJjZDQxNjkxOTFmNzE0ODEy MTZhZDQwHhcNMjUxMjE5MTAwMTMzWhcNMjUxMjIwMTAwMTMzWjAzMTEwLwYDVQQD EygwYWVjN2Y4MjczYWZlNjI1MDczMzBiZTc4ZjQwOWI5MjRhNzQ3MTk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApODOwv5miwGGC1VYWz9dG/YON07O F9KplJq7LSpsMR0yjzw61JgNsVAXOPFyCUDhcli9fvOOep/DyiZTA1Jyuw2VYID/ gCb/lBN9+wNcCV2ggw+2jzclewrSEhGR8hC6TUs7gSEiGhaVJWUWCrhOd8EjLUDT MOqZd+X6vFRA1PXcx590NccTz99hd+lMy5f/dgGKThjciJsaJTVo5GzXfBskYEcC eD+DQ8bKsTNVYeJ46X4khjbU+Qa1kvJRch0kNzNEXoSA0H8K7tvH3etmWOwnaVyl ne21xTSFSkCaDZ0BVl3B/7fNvBibdxSVaiUkVbG35WIg4b11Zk+FMfnz8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFArsf4Jzr+YlBzML549Am5JKdHGYMB8GA1UdIwQY MBaAFJmWL17gJ4pgy7zUFpGR9xSBIWrUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbVpZdlh1QW5pbURMdk5RV2taSDNGSUVoYXRRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC8xZWRkMjUtZmY5MC00MGFlLThhMjAt Zjc2YjgzNTNhZDY4LzEvbVpZdlh1QW5pbURMdk5RV2taSDNGSUVoYXRRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NC8xZWRkMjUtZmY5MC00MGFlLThhMjAtZjc2YjgzNTNhZDY4 LzEvbVpZdlh1QW5pbURMdk5RV2taSDNGSUVoYXRRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYI9WtHmV srBjgmsJNfhBzkjomdxHLcCTNX0yL6heLyvrLkBvIX6Jk6rPN+z9RRWBaJORwEej oIHXex9zIGT4hAe7mUXwELjCqcueVgBP0N08y5NF5DGEoMzHT+t8LJmqZTDk5QO1 FO4BHyqb2IJd5y4Cl0LcPO7GTgbDGpHzADDEahUbIaJfXZYM/3e3f4/2ol2TFPBk ztsi6ucNWbU+ahqTK/P/YimYV1dZwLeVvUPm+rWRAIHs+JiMnwjBPleuiQ7FEUji owe5YswXtuHspAkuQ+6fckLUwWo8GyqlXKVQ/QkZvME2aGEmtNVDzJN1Hav+xLZk wNp4bVhbUcRABQ== -----END CERTIFICATE-----Generated at Fri Dec 19 16:39:18 2025 by rpki-client