This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/4f8c2d-ec40-4d3c-8426-b75ef563720c/1/mTfH9VuM8OdKXeCQMprZtyjGrXc.mft File: mTfH9VuM8OdKXeCQMprZtyjGrXc.mft (raw, json) Hash identifier: 6p2rpYJYjUAJ4QbgwQFb0Dz08fNFnzJNJg8kHUOw2ws= Subject key identifier: 85:AE:4F:BD:20:CE:EB:63:25:22:BC:7C:51:7C:10:AD:B5:E9:AE:42 Authority key identifier: 99:37:C7:F5:5B:8C:F0:E7:4A:5D:E0:90:32:9A:D9:B7:28:C6:AD:77 Certificate issuer: /CN=9937c7f55b8cf0e74a5de090329ad9b728c6ad77 Certificate serial: 019AF31BA353EA430C0EEE612F3F29F4A70D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mTfH9VuM8OdKXeCQMprZtyjGrXc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/4f8c2d-ec40-4d3c-8426-b75ef563720c/1/mTfH9VuM8OdKXeCQMprZtyjGrXc.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 10:01:06 +0000 Manifest this update: Sat 06 Dec 2025 10:01:06 +0000 Manifest next update: Sun 07 Dec 2025 10:01:06 +0000 Files and hashes: 1: QDRodL1Ij0kvPV6RatQCpAs4M7Q.roa (hash: 8yQMKLh2R6BvydYUR3v0EXrX6Bu8MKleBRx4SEEyIAM=) 2: mTfH9VuM8OdKXeCQMprZtyjGrXc.crl (hash: U6oxb6PKUd85DhRduDWpU2FjUD0UQnPAocN5uwCD634=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/4f8c2d-ec40-4d3c-8426-b75ef563720c/1/mTfH9VuM8OdKXeCQMprZtyjGrXc.crl rsync://rpki.ripe.net/repository/DEFAULT/99/4f8c2d-ec40-4d3c-8426-b75ef563720c/1/mTfH9VuM8OdKXeCQMprZtyjGrXc.mft rsync://rpki.ripe.net/repository/DEFAULT/mTfH9VuM8OdKXeCQMprZtyjGrXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:a3:53:ea:43:0c:0e:ee:61:2f:3f:29:f4:a7:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9937c7f55b8cf0e74a5de090329ad9b728c6ad77 Validity Not Before: Dec 6 10:01:06 2025 GMT Not After : Dec 7 10:01:06 2025 GMT Subject: CN=85ae4fbd20ceeb632522bc7c517c10adb5e9ae42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:aa:dc:61:81:b8:21:f8:82:e8:fc:a3:4b:45: e8:7e:ba:4e:7d:4c:89:95:08:45:af:0a:84:34:2e: f6:3e:d2:8a:b2:e1:f7:dd:e7:4a:99:67:3f:1d:ae: 08:f5:d1:f6:93:53:42:fe:4e:7d:4b:b8:25:d5:35: 2f:2d:e8:0a:91:c4:0e:ed:3d:3d:88:60:f7:2b:0b: fd:ad:7b:b3:e7:ce:81:da:1d:aa:71:b2:63:07:9d: b0:71:7c:e6:b5:c6:5a:0a:b0:62:ff:f1:12:4e:49: 9f:cc:fd:27:10:b5:8f:c1:1a:c3:bb:63:d1:da:69: ed:17:20:f0:6a:7e:0c:17:f6:19:ff:c6:3e:23:18: 40:c9:c0:f5:63:e0:06:77:1c:e3:95:06:7d:5c:a2: 15:1d:46:a8:99:64:b3:1f:9c:04:07:e0:a6:0c:e0: e4:c7:c2:29:8e:d1:6a:e4:4a:d3:3f:59:77:e9:9d: 20:e3:04:5f:86:27:94:38:ea:25:63:b4:a7:c8:f2: 71:a3:cd:a9:4c:20:14:51:20:c6:cb:7b:17:fb:de: a6:17:2a:7c:41:b9:49:b5:26:9e:62:e9:35:2d:c1: 97:76:ae:21:1b:22:8b:7b:59:18:2a:cd:31:44:47: b4:f5:00:dd:56:d8:67:b5:a6:fd:33:e1:d4:a8:5d: da:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:AE:4F:BD:20:CE:EB:63:25:22:BC:7C:51:7C:10:AD:B5:E9:AE:42 X509v3 Authority Key Identifier: keyid:99:37:C7:F5:5B:8C:F0:E7:4A:5D:E0:90:32:9A:D9:B7:28:C6:AD:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mTfH9VuM8OdKXeCQMprZtyjGrXc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/4f8c2d-ec40-4d3c-8426-b75ef563720c/1/mTfH9VuM8OdKXeCQMprZtyjGrXc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/99/4f8c2d-ec40-4d3c-8426-b75ef563720c/1/mTfH9VuM8OdKXeCQMprZtyjGrXc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:84:b2:3d:b6:cc:42:c1:2c:57:94:36:c4:ba:d7:78:b6:e4: 9a:f7:25:f4:54:b3:08:1f:45:14:bd:b3:c1:e5:de:f0:1c:ca: 76:a2:b3:c3:10:4e:88:1c:b0:20:77:70:1f:ce:e1:aa:0b:04: 03:a0:d6:9e:6d:2f:4c:0f:c7:fc:f5:ab:16:3c:77:c4:e3:43: 39:7c:49:09:ba:68:c8:83:e7:ec:23:e8:80:7e:2a:1e:72:05: 30:91:b6:14:98:02:9f:8f:a2:98:a4:1e:aa:fb:ff:0b:ee:5f: 38:06:ed:e7:54:c8:f1:25:88:6d:90:3c:40:57:22:df:ac:74: 52:fc:b6:65:bf:22:d9:3d:94:c9:3c:ae:6c:32:22:80:4c:8a: 1b:e0:96:9b:7d:cf:85:04:86:d9:2f:16:0a:2f:ad:a9:02:e4: 57:a0:f7:cd:09:ca:4b:c4:09:bf:68:8c:a4:29:94:0e:f5:ed: 6a:7f:80:bf:2f:b4:c6:78:3d:db:45:d4:8e:53:bb:f7:e9:31: c0:48:11:c5:3a:4b:67:7c:39:24:8d:5a:fe:ed:44:04:da:46: 23:7e:37:88:6f:d7:9d:58:d5:35:2f:e7:58:86:54:36:ef:1f: d9:ed:7f:f4:9b:66:19:0c:42:ac:2c:d5:54:07:8c:cf:8e:ee: 2b:e3:0e:d1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG6NT6kMMDu5hLz8p9KcNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk5MzdjN2Y1NWI4Y2YwZTc0YTVkZTA5MDMyOWFkOWI3Mjhj NmFkNzcwHhcNMjUxMjA2MTAwMTA2WhcNMjUxMjA3MTAwMTA2WjAzMTEwLwYDVQQD Eyg4NWFlNGZiZDIwY2VlYjYzMjUyMmJjN2M1MTdjMTBhZGI1ZTlhZTQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+KrcYYG4IfiC6PyjS0XofrpOfUyJ lQhFrwqENC72PtKKsuH33edKmWc/Ha4I9dH2k1NC/k59S7gl1TUvLegKkcQO7T09 iGD3Kwv9rXuz586B2h2qcbJjB52wcXzmtcZaCrBi//ESTkmfzP0nELWPwRrDu2PR 2mntFyDwan4MF/YZ/8Y+IxhAycD1Y+AGdxzjlQZ9XKIVHUaomWSzH5wEB+CmDODk x8IpjtFq5ErTP1l36Z0g4wRfhieUOOolY7SnyPJxo82pTCAUUSDGy3sX+96mFyp8 QblJtSaeYuk1LcGXdq4hGyKLe1kYKs0xREe09QDdVthntab9M+HUqF3acwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIWuT70gzutjJSK8fFF8EK216a5CMB8GA1UdIwQY MBaAFJk3x/VbjPDnSl3gkDKa2bcoxq13MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbVRmSDlWdU04T2RLWGVDUU1wclp0eWpHclhjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS80ZjhjMmQtZWM0MC00ZDNjLTg0MjYt Yjc1ZWY1NjM3MjBjLzEvbVRmSDlWdU04T2RLWGVDUU1wclp0eWpHclhjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OS80ZjhjMmQtZWM0MC00ZDNjLTg0MjYtYjc1ZWY1NjM3MjBj LzEvbVRmSDlWdU04T2RLWGVDUU1wclp0eWpHclhjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGYSyPbbM QsEsV5Q2xLrXeLbkmvcl9FSzCB9FFL2zweXe8BzKdqKzwxBOiBywIHdwH87hqgsE A6DWnm0vTA/H/PWrFjx3xONDOXxJCbpoyIPn7CPogH4qHnIFMJG2FJgCn4+imKQe qvv/C+5fOAbt51TI8SWIbZA8QFci36x0Uvy2Zb8i2T2UyTyubDIigEyKG+CWm33P hQSG2S8WCi+tqQLkV6D3zQnKS8QJv2iMpCmUDvXtan+Avy+0xng920XUjlO79+kx wEgRxTpLZ3w5JI1a/u1EBNpGI343iG/XnVjVNS/nWIZUNu8f2e1/9JtmGQxCrCzV VAeMz47uK+MO0Q== -----END CERTIFICATE-----Generated at Sat Dec 6 14:57:33 2025 by rpki-client