This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/fa110d-e6e5-4bf9-84fe-bf26a7faa603/1/mRXw1qlhquvGsLUInaApObMQpRw.mft File: mRXw1qlhquvGsLUInaApObMQpRw.mft (raw, json) Hash identifier: 2DIcK61VkDS3B91oNs6mPrlJuIa2246Ogxk8H3IoxQA= Subject key identifier: 23:F4:A3:CF:79:6C:DF:3F:AD:C4:E3:F7:80:6A:81:B5:FE:99:B9:0B Authority key identifier: 99:15:F0:D6:A9:61:AA:EB:C6:B0:B5:08:9D:A0:29:39:B3:10:A5:1C Certificate issuer: /CN=9915f0d6a961aaebc6b0b5089da02939b310a51c Certificate serial: 019AF16488013AAEDAD3E2A3FA96C671547C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mRXw1qlhquvGsLUInaApObMQpRw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/fa110d-e6e5-4bf9-84fe-bf26a7faa603/1/mRXw1qlhquvGsLUInaApObMQpRw.mft Manifest number: 16F3 Signing time: Sat 06 Dec 2025 02:01:28 +0000 Manifest this update: Sat 06 Dec 2025 02:01:28 +0000 Manifest next update: Sun 07 Dec 2025 02:01:28 +0000 Files and hashes: 1: 3EoDXcpFiHwKQL3NphGsn39OCs8.roa (hash: ComC0hDOhJ69SVTLkm+pHNkS7oN++Uq45Amm8PB7U5o=) 2: mRXw1qlhquvGsLUInaApObMQpRw.crl (hash: jqG6bunqqDicx5x/9sQCx1mH0wwHDhsze6E9f46oTOw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/fa110d-e6e5-4bf9-84fe-bf26a7faa603/1/mRXw1qlhquvGsLUInaApObMQpRw.crl rsync://rpki.ripe.net/repository/DEFAULT/8b/fa110d-e6e5-4bf9-84fe-bf26a7faa603/1/mRXw1qlhquvGsLUInaApObMQpRw.mft rsync://rpki.ripe.net/repository/DEFAULT/mRXw1qlhquvGsLUInaApObMQpRw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:88:01:3a:ae:da:d3:e2:a3:fa:96:c6:71:54:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9915f0d6a961aaebc6b0b5089da02939b310a51c Validity Not Before: Dec 6 02:01:28 2025 GMT Not After : Dec 7 02:01:28 2025 GMT Subject: CN=23f4a3cf796cdf3fadc4e3f7806a81b5fe99b90b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:91:d5:52:a3:73:c9:93:a8:bb:f9:78:a7:9c: f2:55:24:43:d7:37:6c:25:99:ac:c3:5d:c9:77:e0: 9f:1c:57:b2:ae:27:1e:bc:29:a6:cd:ed:9b:76:35: 08:a0:ef:b0:67:e2:ae:ab:36:84:e7:ed:ba:3d:df: a2:24:6a:db:41:94:18:e8:1c:59:41:1c:47:a0:d1: 79:04:e1:90:40:79:84:c5:85:b8:7d:6b:20:33:6d: c1:b0:01:e7:8c:0f:88:f0:b6:1e:84:49:9d:66:d2: 05:c0:2f:04:c6:0c:20:ab:58:2a:11:d9:10:65:cc: a3:cc:db:f2:68:f3:ad:fa:73:ab:54:ed:5c:33:ec: 42:16:bd:4c:6b:b4:ab:83:3f:da:45:0c:e3:41:df: 5f:ea:44:9c:e9:b0:98:87:7a:36:0c:c2:a3:5a:97: dd:d0:42:9f:92:01:e6:ce:b9:7b:63:a4:eb:26:10: 9d:0e:65:dc:a2:d5:ab:e7:e4:c8:1b:bf:f8:56:48: a0:8f:9e:ed:7d:64:f2:74:c1:3e:91:a3:73:01:a2: ba:1c:fc:bf:af:09:74:c2:3e:48:ea:64:f6:38:ef: a4:6d:54:e7:c8:11:43:94:96:ce:42:5c:b3:5e:74: 30:10:a4:89:57:ad:9f:82:7b:20:a4:23:d3:0c:ff: 88:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:F4:A3:CF:79:6C:DF:3F:AD:C4:E3:F7:80:6A:81:B5:FE:99:B9:0B X509v3 Authority Key Identifier: keyid:99:15:F0:D6:A9:61:AA:EB:C6:B0:B5:08:9D:A0:29:39:B3:10:A5:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mRXw1qlhquvGsLUInaApObMQpRw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/fa110d-e6e5-4bf9-84fe-bf26a7faa603/1/mRXw1qlhquvGsLUInaApObMQpRw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/fa110d-e6e5-4bf9-84fe-bf26a7faa603/1/mRXw1qlhquvGsLUInaApObMQpRw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cf:a7:59:86:0c:44:fb:8d:a3:f1:5d:ec:e5:21:07:34:55:11: ef:f5:2f:d2:39:63:48:db:ef:b2:d6:e0:0e:60:67:44:52:25: f9:37:be:d4:c7:dd:e3:a4:16:ce:32:9f:f2:b1:c4:35:92:2d: 96:dc:3a:d2:c4:7c:07:81:dd:e0:b0:7b:ef:aa:01:13:b8:af: 73:47:de:7b:05:fe:3a:af:2c:dd:ec:f9:0f:b6:83:16:4e:58: 7c:ee:10:ca:e2:c2:2f:67:29:3d:04:08:b6:33:93:17:e8:98: f3:f3:9a:da:26:46:29:fa:b4:46:ce:aa:6b:c5:68:7f:14:56: b7:42:cb:5b:9b:dc:1f:13:f1:ee:ef:f3:96:6c:f7:4b:71:99: bc:d9:97:10:8d:40:d3:67:05:b2:45:b7:4a:b0:f4:53:89:9a: 6a:92:03:ec:25:72:6e:52:29:bc:22:5d:37:9a:96:53:60:ad: 9a:9c:f7:4d:54:9b:2f:30:3f:32:32:1b:41:66:5a:8d:32:ec: 68:e1:02:b0:c8:f5:53:5a:c9:57:10:6c:ae:c9:72:9e:39:9c: 93:0b:ff:66:ee:e9:2e:e1:e9:75:da:ba:c0:32:aa:82:18:5c: 6f:c4:46:50:92:f8:68:16:02:f0:d0:45:e3:cc:fb:28:23:d8: 7e:1c:19:01 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZIgBOq7a0+Kj+pbGcVR8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk5MTVmMGQ2YTk2MWFhZWJjNmIwYjUwODlkYTAyOTM5YjMx MGE1MWMwHhcNMjUxMjA2MDIwMTI4WhcNMjUxMjA3MDIwMTI4WjAzMTEwLwYDVQQD EygyM2Y0YTNjZjc5NmNkZjNmYWRjNGUzZjc4MDZhODFiNWZlOTliOTBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA55HVUqNzyZOou/l4p5zyVSRD1zds JZmsw13Jd+CfHFeyricevCmmze2bdjUIoO+wZ+KuqzaE5+26Pd+iJGrbQZQY6BxZ QRxHoNF5BOGQQHmExYW4fWsgM23BsAHnjA+I8LYehEmdZtIFwC8Exgwgq1gqEdkQ ZcyjzNvyaPOt+nOrVO1cM+xCFr1Ma7Srgz/aRQzjQd9f6kSc6bCYh3o2DMKjWpfd 0EKfkgHmzrl7Y6TrJhCdDmXcotWr5+TIG7/4Vkigj57tfWTydME+kaNzAaK6HPy/ rwl0wj5I6mT2OO+kbVTnyBFDlJbOQlyzXnQwEKSJV62fgnsgpCPTDP+ItwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCP0o895bN8/rcTj94BqgbX+mbkLMB8GA1UdIwQY MBaAFJkV8NapYarrxrC1CJ2gKTmzEKUcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbVJYdzFxbGhxdXZHc0xVSW5hQXBPYk1RcFJ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9mYTExMGQtZTZlNS00YmY5LTg0ZmUt YmYyNmE3ZmFhNjAzLzEvbVJYdzFxbGhxdXZHc0xVSW5hQXBPYk1RcFJ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yi9mYTExMGQtZTZlNS00YmY5LTg0ZmUtYmYyNmE3ZmFhNjAz LzEvbVJYdzFxbGhxdXZHc0xVSW5hQXBPYk1RcFJ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAz6dZhgxE +42j8V3s5SEHNFUR7/Uv0jljSNvvstbgDmBnRFIl+Te+1Mfd46QWzjKf8rHENZIt ltw60sR8B4Hd4LB776oBE7ivc0feewX+Oq8s3ez5D7aDFk5YfO4QyuLCL2cpPQQI tjOTF+iY8/Oa2iZGKfq0Rs6qa8VofxRWt0LLW5vcHxPx7u/zlmz3S3GZvNmXEI1A 02cFskW3SrD0U4maapID7CVyblIpvCJdN5qWU2Ctmpz3TVSbLzA/MjIbQWZajTLs aOECsMj1U1rJVxBsrslynjmckwv/Zu7pLuHpddq6wDKqghhcb8RGUJL4aBYC8NBF 48z7KCPYfhwZAQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:06:43 2025 by rpki-client