This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/mdW_rUXXxlpuNDAoUJ_RiS6XudA.mft File: mdW_rUXXxlpuNDAoUJ_RiS6XudA.mft (raw, json) Hash identifier: 84V4xT2CDBpU4dMc4B0djkaPsBRtZ79zo8c2zNe4HBs= Subject key identifier: F6:2F:4D:61:78:81:6D:9F:E7:FB:28:5F:30:30:07:75:0B:A1:66:4C Authority key identifier: 99:D5:BF:AD:45:D7:C6:5A:6E:34:30:28:50:9F:D1:89:2E:97:B9:D0 Certificate issuer: /CN=99d5bfad45d7c65a6e343028509fd1892e97b9d0 Certificate serial: 019AF4D2A58C44C23A338FD9C64194024328 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mdW_rUXXxlpuNDAoUJ_RiS6XudA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/mdW_rUXXxlpuNDAoUJ_RiS6XudA.mft Manifest number: 17D2 Signing time: Sat 06 Dec 2025 18:00:36 +0000 Manifest this update: Sat 06 Dec 2025 18:00:36 +0000 Manifest next update: Sun 07 Dec 2025 18:00:36 +0000 Files and hashes: 1: 2SiMmPzB52V_YaOlKCfxADMyci0.roa (hash: l9OSOCKOnQoxyHzpr/opmnJTNbBJ58gOQcmTy8/ln9g=) 2: 6cG7apJZWTaCYJhEQ2AxuGdOU6Y.roa (hash: JJCXT/6UNi9mEIWqA8v8nCsjcSMSSRjcc/zrEHMqmj0=) 3: 8SwD2syCQhmofhgov7byX9Itmmw.roa (hash: cUvCnHiFH7D4J+0OEABbyLy6H+sXz0JcuvR63cJNE18=) 4: 99na7wV0wOq68_7vIbCrL9gfxjs.roa (hash: 42LNXKEAxEwEc7Szkj0BiLf8pgpR4M/aL88CA0G+dmY=) 5: 9pMjaJdgappxiU1Tk0UMIRy3SNc.roa (hash: KKwO3btWZ5ddNVsSe6VCRqppaOicRKCDauf9ToA7uzQ=) 6: JHPfdmZ9_Y7nWvY0D-d0lDb96Vg.roa (hash: gf2XByKnGE8jJhVC4HR5cPA59ppt1RRzDD6FJs3YMQ0=) 7: epU58EjYpMtSgrUzd3xlkI9EhKU.roa (hash: d2WOVeDIsDjpX00onNi7gIPb75WWaXv2cOi5GanZkh8=) 8: mdW_rUXXxlpuNDAoUJ_RiS6XudA.crl (hash: 6zTyIAGuWitXiZQ7JCwKFztAUz6YGjtm//DzY2koK+E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/mdW_rUXXxlpuNDAoUJ_RiS6XudA.crl rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/mdW_rUXXxlpuNDAoUJ_RiS6XudA.mft rsync://rpki.ripe.net/repository/DEFAULT/mdW_rUXXxlpuNDAoUJ_RiS6XudA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 18:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:d2:a5:8c:44:c2:3a:33:8f:d9:c6:41:94:02:43:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99d5bfad45d7c65a6e343028509fd1892e97b9d0 Validity Not Before: Dec 6 18:00:36 2025 GMT Not After : Dec 7 18:00:36 2025 GMT Subject: CN=f62f4d6178816d9fe7fb285f303007750ba1664c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:ff:9b:66:ea:4b:36:4c:61:0b:5c:8b:2b:ca: 63:d7:c5:d2:ea:7d:4c:08:12:53:7a:6d:73:c4:8e: a7:6c:21:20:bd:d3:ce:49:4a:16:5d:11:23:c9:1c: 1e:ab:95:d4:e9:ef:17:91:61:31:33:10:ec:ff:76: 71:9c:9b:d5:2a:ef:50:e6:3b:f7:29:62:1e:29:d4: e3:6b:dd:2d:7a:27:97:b2:e8:e0:ed:30:3c:c1:d4: 92:ca:59:c1:3a:a8:d5:4a:21:e6:f4:f0:65:97:de: 50:12:fd:81:4a:84:4f:95:42:ac:82:7b:44:94:82: 78:f5:a4:7c:a2:fa:25:11:09:cf:e1:32:5a:48:cc: 10:c4:27:3e:89:05:2e:76:8f:49:b5:76:b7:9b:e0: f9:30:c0:e5:e7:64:1b:0a:ac:d8:44:e8:92:49:59: 83:f5:52:d2:b3:71:1c:57:8c:69:e0:f7:a6:19:35: d8:2e:4e:32:da:0f:0c:b8:8b:38:9d:91:57:f2:58: 87:32:28:d5:a7:00:7a:3d:3c:fd:be:53:91:41:99: a3:eb:21:ee:6f:08:24:32:d8:3a:dd:5a:3c:d0:ee: 5d:e3:a0:83:f9:ac:55:1f:81:dc:f5:1e:ed:fb:6e: 6f:0c:50:7c:1d:4a:f8:bf:d3:1a:16:ff:91:59:2c: 95:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:2F:4D:61:78:81:6D:9F:E7:FB:28:5F:30:30:07:75:0B:A1:66:4C X509v3 Authority Key Identifier: keyid:99:D5:BF:AD:45:D7:C6:5A:6E:34:30:28:50:9F:D1:89:2E:97:B9:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mdW_rUXXxlpuNDAoUJ_RiS6XudA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/mdW_rUXXxlpuNDAoUJ_RiS6XudA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/mdW_rUXXxlpuNDAoUJ_RiS6XudA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:90:af:2f:c9:3a:30:62:0b:2d:ca:08:e1:2a:e2:4f:07:ed: 5b:51:f3:f4:50:e1:5a:a4:78:9c:6a:f2:75:08:04:3f:62:7d: 32:04:26:9e:7d:fb:94:67:20:44:e6:4c:5c:45:97:36:32:1e: 8b:f0:00:e6:c4:05:ee:2c:db:98:ba:88:4b:bf:23:d0:ad:f0: ec:fe:6f:8d:3f:3b:eb:e7:ec:e1:e4:a6:d3:c7:52:df:e9:e4: 92:1a:af:a4:da:65:ed:41:84:85:fb:21:a1:df:06:b2:3d:fa: 73:d1:59:43:b7:13:46:ee:a5:7e:5a:77:c3:73:75:a2:d4:05: be:af:8e:df:cf:bb:0c:a4:09:76:e9:07:be:2a:f8:e5:cb:d2: 2e:74:69:fa:3a:cd:21:08:da:4b:8d:7a:d5:1e:58:95:04:85: ac:c2:38:e8:37:ae:ec:11:82:be:4b:11:2d:f6:90:d1:db:92: 68:39:be:a2:14:96:79:d2:f7:33:66:53:0b:ea:66:b5:c7:fd: b6:8d:84:fe:37:96:33:ac:f2:32:00:ca:23:8f:a7:e8:f1:69: 93:e8:a6:65:28:f6:33:4f:b1:b6:01:f8:dd:56:80:a5:60:6a: 66:a8:be:57:de:7d:35:2b:73:e5:d3:fb:0e:36:d9:8c:b6:34: 1f:82:a2:0f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr00qWMRMI6M4/ZxkGUAkMoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk5ZDViZmFkNDVkN2M2NWE2ZTM0MzAyODUwOWZkMTg5MmU5 N2I5ZDAwHhcNMjUxMjA2MTgwMDM2WhcNMjUxMjA3MTgwMDM2WjAzMTEwLwYDVQQD EyhmNjJmNGQ2MTc4ODE2ZDlmZTdmYjI4NWYzMDMwMDc3NTBiYTE2NjRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtP+bZupLNkxhC1yLK8pj18XS6n1M CBJTem1zxI6nbCEgvdPOSUoWXREjyRweq5XU6e8XkWExMxDs/3ZxnJvVKu9Q5jv3 KWIeKdTja90teieXsujg7TA8wdSSylnBOqjVSiHm9PBll95QEv2BSoRPlUKsgntE lIJ49aR8ovolEQnP4TJaSMwQxCc+iQUudo9JtXa3m+D5MMDl52QbCqzYROiSSVmD 9VLSs3EcV4xp4PemGTXYLk4y2g8MuIs4nZFX8liHMijVpwB6PTz9vlORQZmj6yHu bwgkMtg63Vo80O5d46CD+axVH4Hc9R7t+25vDFB8HUr4v9MaFv+RWSyVjwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPYvTWF4gW2f5/soXzAwB3ULoWZMMB8GA1UdIwQY MBaAFJnVv61F18ZabjQwKFCf0Ykul7nQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbWRXX3JVWFh4bHB1TkRBb1VKX1JpUzZYdWRBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC84MTcxZTMtMmQyOS00Y2I2LThhOTQt NzU1MTgwOWNiNzMxLzEvbWRXX3JVWFh4bHB1TkRBb1VKX1JpUzZYdWRBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC84MTcxZTMtMmQyOS00Y2I2LThhOTQtNzU1MTgwOWNiNzMx LzEvbWRXX3JVWFh4bHB1TkRBb1VKX1JpUzZYdWRBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMJCvL8k6 MGILLcoI4SriTwftW1Hz9FDhWqR4nGrydQgEP2J9MgQmnn37lGcgROZMXEWXNjIe i/AA5sQF7izbmLqIS78j0K3w7P5vjT876+fs4eSm08dS3+nkkhqvpNpl7UGEhfsh od8Gsj36c9FZQ7cTRu6lflp3w3N1otQFvq+O38+7DKQJdukHvir45cvSLnRp+jrN IQjaS4161R5YlQSFrMI46Deu7BGCvksRLfaQ0duSaDm+ohSWedL3M2ZTC+pmtcf9 to2E/jeWM6zyMgDKI4+n6PFpk+imZSj2M0+xtgH43VaApWBqZqi+V959NStz5dP7 DjbZjLY0H4KiDw== -----END CERTIFICATE-----Generated at Sun Dec 7 02:40:21 2025 by rpki-client