This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/5205b8-98cf-4042-a0ce-e4c6741c802c/1/mfyNwqfBufMroZV_9JLcC6TyYP8.mft File: mfyNwqfBufMroZV_9JLcC6TyYP8.mft (raw, json) Hash identifier: yALHAz3+QQxL4EzztSuh8PZO81DQVaDEldbX4uMMsq4= Subject key identifier: 63:BB:7B:AC:8A:22:B9:5C:54:73:1E:EA:7C:E4:FE:0B:09:E7:CA:7B Authority key identifier: 99:FC:8D:C2:A7:C1:B9:F3:2B:A1:95:7F:F4:92:DC:0B:A4:F2:60:FF Certificate issuer: /CN=99fc8dc2a7c1b9f32ba1957ff492dc0ba4f260ff Certificate serial: 019AF27720D42CA7A0EB3576DD1DA07F2483 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mfyNwqfBufMroZV_9JLcC6TyYP8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/5205b8-98cf-4042-a0ce-e4c6741c802c/1/mfyNwqfBufMroZV_9JLcC6TyYP8.mft Manifest number: 01CA Signing time: Sat 06 Dec 2025 07:01:24 +0000 Manifest this update: Sat 06 Dec 2025 07:01:24 +0000 Manifest next update: Sun 07 Dec 2025 07:01:24 +0000 Files and hashes: 1: bwcXy3FYmHBMxUWqGbTAjvoGjVE.roa (hash: i13BZ7NJZZP7VgcQkDsp+e+5aBIM+z4sday3aP/ehUI=) 2: mfyNwqfBufMroZV_9JLcC6TyYP8.crl (hash: gg3bHBkAMc069mMSPzbP6cxB19MUiDbGBGIiDJoFk3g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/5205b8-98cf-4042-a0ce-e4c6741c802c/1/mfyNwqfBufMroZV_9JLcC6TyYP8.crl rsync://rpki.ripe.net/repository/DEFAULT/85/5205b8-98cf-4042-a0ce-e4c6741c802c/1/mfyNwqfBufMroZV_9JLcC6TyYP8.mft rsync://rpki.ripe.net/repository/DEFAULT/mfyNwqfBufMroZV_9JLcC6TyYP8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:77:20:d4:2c:a7:a0:eb:35:76:dd:1d:a0:7f:24:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99fc8dc2a7c1b9f32ba1957ff492dc0ba4f260ff Validity Not Before: Dec 6 07:01:24 2025 GMT Not After : Dec 7 07:01:24 2025 GMT Subject: CN=63bb7bac8a22b95c54731eea7ce4fe0b09e7ca7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:69:e3:2c:4c:72:ae:de:1b:74:a3:50:f0:a8: f8:1d:bb:89:d2:56:42:83:a0:32:9e:52:c0:ee:7a: 8c:78:2c:19:b0:02:9d:56:df:66:8f:99:e4:86:fc: 1e:ed:2f:57:7e:0e:86:38:29:97:95:7b:5d:32:17: 26:3e:c1:32:4c:51:d9:d0:e1:a5:73:24:54:b2:a3: 20:8b:46:31:9b:62:5f:f1:fc:8e:65:c2:54:be:af: f5:c1:16:b8:51:5d:a7:29:29:32:1b:58:b0:17:5e: b1:62:3a:f3:c6:e5:12:b9:ad:47:1a:13:1f:21:fe: c2:88:cf:9f:d5:00:a6:ba:53:10:60:ea:7d:b7:e2: 31:c7:11:62:b2:cf:7e:c7:0f:1d:ed:c7:ef:23:52: 63:68:ae:af:4e:d2:08:67:29:82:22:b2:16:c3:d0: c4:1f:13:10:94:62:d5:13:b8:25:9c:7a:30:10:f8: ae:4e:ab:16:7a:2e:25:45:a3:ba:80:c1:00:ff:20: 37:ab:74:a3:be:bd:98:e3:02:87:d2:c5:e9:cf:b8: d6:32:b6:6b:91:f0:80:6b:84:68:76:de:83:2c:43: 7f:ba:2a:73:a5:00:85:27:4b:ca:c1:95:27:2e:91: ec:d6:77:b1:44:06:9a:6e:9f:36:d7:1e:10:09:5f: 5d:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:BB:7B:AC:8A:22:B9:5C:54:73:1E:EA:7C:E4:FE:0B:09:E7:CA:7B X509v3 Authority Key Identifier: keyid:99:FC:8D:C2:A7:C1:B9:F3:2B:A1:95:7F:F4:92:DC:0B:A4:F2:60:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mfyNwqfBufMroZV_9JLcC6TyYP8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/5205b8-98cf-4042-a0ce-e4c6741c802c/1/mfyNwqfBufMroZV_9JLcC6TyYP8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/85/5205b8-98cf-4042-a0ce-e4c6741c802c/1/mfyNwqfBufMroZV_9JLcC6TyYP8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:ff:82:35:9e:f5:07:87:df:f8:c7:20:0e:d4:19:83:b3:bf: 69:e2:fb:51:f1:ff:fe:92:3a:ca:b3:de:0b:7e:57:e9:8c:9e: 85:9a:46:ef:d0:5f:a9:28:f3:bd:f7:65:65:e6:08:dd:26:6a: 96:b7:ba:08:3c:76:50:76:30:69:ef:b2:df:b9:e2:f6:9d:ce: a4:bb:b8:79:29:6c:82:b6:80:ae:81:bc:0f:e0:3d:0d:77:92: e1:d1:ad:1d:0e:0f:f6:6f:92:f6:bf:2a:6f:56:51:72:20:2b: 5b:a9:41:25:ef:bb:2b:f5:32:60:d2:71:d1:ed:87:2d:5e:c8: aa:43:48:87:8b:52:29:70:de:ea:e4:22:36:0b:c4:6c:f1:b4: 0b:48:ef:07:98:d5:cf:03:be:b9:82:2a:8a:0e:3c:b8:63:77: 77:22:60:e4:d4:7f:31:de:16:d7:c9:86:09:ec:1a:97:e2:8c: f5:a4:d3:80:16:8a:e1:0b:e2:6b:59:a9:8e:7d:6f:8c:64:35: 1a:ba:66:ec:56:2a:9c:e5:7a:d7:b6:01:f6:c1:62:72:40:3e: df:d0:5b:9e:a4:68:9a:af:6d:42:3b:fa:1c:dd:5b:77:97:9c: 48:f0:d1:64:f7:17:4c:a1:7f:74:20:85:f2:24:9d:d9:7c:80: 68:ed:10:17 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydyDULKeg6zV23R2gfySDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk5ZmM4ZGMyYTdjMWI5ZjMyYmExOTU3ZmY0OTJkYzBiYTRm MjYwZmYwHhcNMjUxMjA2MDcwMTI0WhcNMjUxMjA3MDcwMTI0WjAzMTEwLwYDVQQD Eyg2M2JiN2JhYzhhMjJiOTVjNTQ3MzFlZWE3Y2U0ZmUwYjA5ZTdjYTdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArGnjLExyrt4bdKNQ8Kj4HbuJ0lZC g6AynlLA7nqMeCwZsAKdVt9mj5nkhvwe7S9Xfg6GOCmXlXtdMhcmPsEyTFHZ0OGl cyRUsqMgi0Yxm2Jf8fyOZcJUvq/1wRa4UV2nKSkyG1iwF16xYjrzxuUSua1HGhMf If7CiM+f1QCmulMQYOp9t+IxxxFiss9+xw8d7cfvI1JjaK6vTtIIZymCIrIWw9DE HxMQlGLVE7glnHowEPiuTqsWei4lRaO6gMEA/yA3q3Sjvr2Y4wKH0sXpz7jWMrZr kfCAa4Rodt6DLEN/uipzpQCFJ0vKwZUnLpHs1nexRAaabp821x4QCV9dvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGO7e6yKIrlcVHMe6nzk/gsJ58p7MB8GA1UdIwQY MBaAFJn8jcKnwbnzK6GVf/SS3Auk8mD/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbWZ5TndxZkJ1Zk1yb1pWXzlKTGNDNlR5WVA4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS81MjA1YjgtOThjZi00MDQyLWEwY2Ut ZTRjNjc0MWM4MDJjLzEvbWZ5TndxZkJ1Zk1yb1pWXzlKTGNDNlR5WVA4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NS81MjA1YjgtOThjZi00MDQyLWEwY2UtZTRjNjc0MWM4MDJj LzEvbWZ5TndxZkJ1Zk1yb1pWXzlKTGNDNlR5WVA4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMv+CNZ71 B4ff+McgDtQZg7O/aeL7UfH//pI6yrPeC35X6YyehZpG79BfqSjzvfdlZeYI3SZq lre6CDx2UHYwae+y37ni9p3OpLu4eSlsgraAroG8D+A9DXeS4dGtHQ4P9m+S9r8q b1ZRciArW6lBJe+7K/UyYNJx0e2HLV7IqkNIh4tSKXDe6uQiNgvEbPG0C0jvB5jV zwO+uYIqig48uGN3dyJg5NR/Md4W18mGCewal+KM9aTTgBaK4Qvia1mpjn1vjGQ1 Grpm7FYqnOV617YB9sFickA+39BbnqRomq9tQjv6HN1bd5ecSPDRZPcXTKF/dCCF 8iSd2XyAaO0QFw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:34:28 2025 by rpki-client