This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/34e91f-a8a9-4937-9fb5-7a01bddd6560/1/mdNWGe0hC-CsKdFwortc10VWk7w.mft File: mdNWGe0hC-CsKdFwortc10VWk7w.mft (raw, json) Hash identifier: 3F26nYWmOWs9IwNLtnX5F1iugZkPp9BefaGGnsiCBD4= Subject key identifier: 1C:DB:6F:B2:FA:A4:2C:DB:F9:C2:79:1A:09:5E:4B:39:15:08:87:06 Authority key identifier: 99:D3:56:19:ED:21:0B:E0:AC:29:D1:70:A2:BB:5C:D7:45:56:93:BC Certificate issuer: /CN=99d35619ed210be0ac29d170a2bb5cd7455693bc Certificate serial: 019AF12DDCDCCD2E3FF763205BF41D981F3E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mdNWGe0hC-CsKdFwortc10VWk7w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/34e91f-a8a9-4937-9fb5-7a01bddd6560/1/mdNWGe0hC-CsKdFwortc10VWk7w.mft Manifest number: 168F Signing time: Sat 06 Dec 2025 01:01:45 +0000 Manifest this update: Sat 06 Dec 2025 01:01:45 +0000 Manifest next update: Sun 07 Dec 2025 01:01:45 +0000 Files and hashes: 1: eUC78a5iIDA3NnkTRgfvxwNqxjg.roa (hash: gOCTr9qoGQ7aucr1ozDn80KAKdoZpLb4iX/BnNIbZIY=) 2: mdNWGe0hC-CsKdFwortc10VWk7w.crl (hash: DKiy/7IKFyG+zdcZNh2f4TMOWd1JNRPJ7JyViVVZris=) 3: qtSiJdqBkG0uo9WVYHWv-Gpf4SI.roa (hash: tDTpVD4J8FxzW7VK20T8qWOQjmWt3jizwnkYWluPqRY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/34e91f-a8a9-4937-9fb5-7a01bddd6560/1/mdNWGe0hC-CsKdFwortc10VWk7w.crl rsync://rpki.ripe.net/repository/DEFAULT/97/34e91f-a8a9-4937-9fb5-7a01bddd6560/1/mdNWGe0hC-CsKdFwortc10VWk7w.mft rsync://rpki.ripe.net/repository/DEFAULT/mdNWGe0hC-CsKdFwortc10VWk7w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:dc:dc:cd:2e:3f:f7:63:20:5b:f4:1d:98:1f:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99d35619ed210be0ac29d170a2bb5cd7455693bc Validity Not Before: Dec 6 01:01:45 2025 GMT Not After : Dec 7 01:01:45 2025 GMT Subject: CN=1cdb6fb2faa42cdbf9c2791a095e4b3915088706 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:6a:81:a0:b5:5d:70:79:f8:76:2d:35:30:dd: 7c:2c:a1:70:93:13:e5:c3:ca:b2:77:c9:02:7f:2e: 0c:09:7e:93:ac:28:fc:10:ff:c0:3a:55:56:45:b6: 7f:89:c2:e4:79:e2:e9:82:64:b9:95:0e:5b:15:ec: 2d:80:b4:aa:ba:96:4f:08:35:83:87:45:9d:79:0c: 69:c4:21:b7:79:b4:19:70:7d:3a:21:fb:b7:73:5a: 88:32:c5:bb:3f:08:0f:03:db:27:70:e6:da:bd:14: 10:3b:ab:c5:b7:45:8e:d5:3b:71:cb:35:12:d7:66: 7c:2a:ee:dd:08:ad:6e:38:70:64:dc:bb:8c:8b:96: 71:bf:e5:5d:d8:f6:58:7d:88:20:af:24:79:f6:53: 28:32:2d:4c:20:5b:6d:fa:6f:9f:33:f9:26:3f:c6: 13:d3:20:4c:9c:6f:97:81:72:0d:b8:29:c6:07:85: 8c:b7:d4:7c:b2:86:da:fd:12:39:e7:ad:f4:7c:98: 0a:b5:11:a0:0c:fc:06:a5:db:77:17:8b:c3:1a:6f: 3f:94:1c:b3:57:34:2c:26:d9:69:30:b3:d3:ec:06: a5:a8:42:86:84:96:5e:1a:12:cc:1d:e0:d0:e0:df: 25:b1:50:70:e1:8e:c9:eb:7c:b1:37:ee:6b:0e:fb: b0:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:DB:6F:B2:FA:A4:2C:DB:F9:C2:79:1A:09:5E:4B:39:15:08:87:06 X509v3 Authority Key Identifier: keyid:99:D3:56:19:ED:21:0B:E0:AC:29:D1:70:A2:BB:5C:D7:45:56:93:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mdNWGe0hC-CsKdFwortc10VWk7w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/34e91f-a8a9-4937-9fb5-7a01bddd6560/1/mdNWGe0hC-CsKdFwortc10VWk7w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/97/34e91f-a8a9-4937-9fb5-7a01bddd6560/1/mdNWGe0hC-CsKdFwortc10VWk7w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:bf:2a:8e:d9:cb:7a:51:20:f4:d4:17:77:e7:21:dd:d4:25: 85:02:31:47:5a:60:5e:7f:31:a1:3a:06:10:69:25:c7:64:ef: 1c:c0:14:3f:12:3a:69:09:59:40:41:1c:5a:06:be:3c:a4:24: a6:e3:6b:75:fe:61:24:f9:c3:c8:e4:f1:bd:46:b5:bd:52:73: a5:9c:a9:35:ef:c8:d7:93:dd:0d:b1:5b:90:81:c6:3c:15:c3: 3f:56:8a:37:01:1d:1b:de:b1:1c:33:f3:bf:b3:e7:1b:9a:86: 6f:1b:40:97:b9:eb:93:21:43:4b:9f:2b:c9:45:55:48:47:ad: 4d:40:9c:ad:91:4c:ef:18:d4:d9:8b:92:71:b5:f1:6e:9a:85: d5:83:fb:f2:d0:2b:33:af:d2:22:79:9d:f4:4e:b3:c8:c9:84: a2:19:a7:e0:4f:36:38:1f:03:42:83:59:36:60:d7:3e:e6:26: b4:0a:d7:ff:ff:4a:2f:02:bb:8f:fa:98:1d:ac:aa:2c:9e:c2: fd:ba:86:ae:c2:e0:da:11:0a:da:22:87:c5:90:e3:2e:02:44: db:f6:e4:1d:5f:ff:33:9c:41:84:6c:94:12:3f:59:99:a6:40: 5a:c8:10:95:be:9d:b2:dd:4c:5f:fa:f5:46:2b:44:ca:8f:42: 45:b3:29:b4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLdzczS4/92MgW/QdmB8+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk5ZDM1NjE5ZWQyMTBiZTBhYzI5ZDE3MGEyYmI1Y2Q3NDU1 NjkzYmMwHhcNMjUxMjA2MDEwMTQ1WhcNMjUxMjA3MDEwMTQ1WjAzMTEwLwYDVQQD EygxY2RiNmZiMmZhYTQyY2RiZjljMjc5MWEwOTVlNGIzOTE1MDg4NzA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAumqBoLVdcHn4di01MN18LKFwkxPl w8qyd8kCfy4MCX6TrCj8EP/AOlVWRbZ/icLkeeLpgmS5lQ5bFewtgLSqupZPCDWD h0WdeQxpxCG3ebQZcH06Ifu3c1qIMsW7PwgPA9sncObavRQQO6vFt0WO1TtxyzUS 12Z8Ku7dCK1uOHBk3LuMi5Zxv+Vd2PZYfYggryR59lMoMi1MIFtt+m+fM/kmP8YT 0yBMnG+XgXINuCnGB4WMt9R8soba/RI55630fJgKtRGgDPwGpdt3F4vDGm8/lByz VzQsJtlpMLPT7AalqEKGhJZeGhLMHeDQ4N8lsVBw4Y7J63yxN+5rDvuwgwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBzbb7L6pCzb+cJ5GgleSzkVCIcGMB8GA1UdIwQY MBaAFJnTVhntIQvgrCnRcKK7XNdFVpO8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbWROV0dlMGhDLUNzS2RGd29ydGMxMFZXazd3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny8zNGU5MWYtYThhOS00OTM3LTlmYjUt N2EwMWJkZGQ2NTYwLzEvbWROV0dlMGhDLUNzS2RGd29ydGMxMFZXazd3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ny8zNGU5MWYtYThhOS00OTM3LTlmYjUtN2EwMWJkZGQ2NTYw LzEvbWROV0dlMGhDLUNzS2RGd29ydGMxMFZXazd3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd78qjtnL elEg9NQXd+ch3dQlhQIxR1pgXn8xoToGEGklx2TvHMAUPxI6aQlZQEEcWga+PKQk puNrdf5hJPnDyOTxvUa1vVJzpZypNe/I15PdDbFbkIHGPBXDP1aKNwEdG96xHDPz v7PnG5qGbxtAl7nrkyFDS58ryUVVSEetTUCcrZFM7xjU2YuScbXxbpqF1YP78tAr M6/SInmd9E6zyMmEohmn4E82OB8DQoNZNmDXPuYmtArX//9KLwK7j/qYHayqLJ7C /bqGrsLg2hEK2iKHxZDjLgJE2/bkHV//M5xBhGyUEj9ZmaZAWsgQlb6dst1MX/r1 RitEyo9CRbMptA== -----END CERTIFICATE-----Generated at Sat Dec 6 10:18:36 2025 by rpki-client