This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/9ce15f-559a-43b4-a059-cbd4b4bb6f1d/1/mpTE6sr0BAocMO0e3qjjAAcxtqo.mft File: mpTE6sr0BAocMO0e3qjjAAcxtqo.mft (raw, json) Hash identifier: d/7mLVT5wR8MdfW3o2OpJVgjynIXgsTlr5By/q1sMTk= Subject key identifier: EF:EE:29:58:FD:AD:4F:DF:D0:A3:A0:8D:7A:21:70:88:C5:AB:C7:B8 Authority key identifier: 9A:94:C4:EA:CA:F4:04:0A:1C:30:ED:1E:DE:A8:E3:00:07:31:B6:AA Certificate issuer: /CN=9a94c4eacaf4040a1c30ed1edea8e3000731b6aa Certificate serial: 019AF389FB2127D62D0AE81A50D294E953C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mpTE6sr0BAocMO0e3qjjAAcxtqo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/9ce15f-559a-43b4-a059-cbd4b4bb6f1d/1/mpTE6sr0BAocMO0e3qjjAAcxtqo.mft Manifest number: 0617 Signing time: Sat 06 Dec 2025 12:01:37 +0000 Manifest this update: Sat 06 Dec 2025 12:01:37 +0000 Manifest next update: Sun 07 Dec 2025 12:01:37 +0000 Files and hashes: 1: WvHTHUW2Hu_mDZctFQeVwGysiHE.roa (hash: 0IRIumTzEnldnjuLK5Mty3ubumeenKJPjlLba1MpsmY=) 2: mpTE6sr0BAocMO0e3qjjAAcxtqo.crl (hash: 8eG1HgR/HYsIVmDmPmk8Rc1wykjePNqDwdqjv+/EsOk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/9ce15f-559a-43b4-a059-cbd4b4bb6f1d/1/mpTE6sr0BAocMO0e3qjjAAcxtqo.crl rsync://rpki.ripe.net/repository/DEFAULT/9c/9ce15f-559a-43b4-a059-cbd4b4bb6f1d/1/mpTE6sr0BAocMO0e3qjjAAcxtqo.mft rsync://rpki.ripe.net/repository/DEFAULT/mpTE6sr0BAocMO0e3qjjAAcxtqo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:fb:21:27:d6:2d:0a:e8:1a:50:d2:94:e9:53:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a94c4eacaf4040a1c30ed1edea8e3000731b6aa Validity Not Before: Dec 6 12:01:37 2025 GMT Not After : Dec 7 12:01:37 2025 GMT Subject: CN=efee2958fdad4fdfd0a3a08d7a217088c5abc7b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:d2:2b:34:25:1f:49:f8:01:f0:e4:9c:49:36: bf:f5:d3:6c:eb:3f:60:29:39:f6:53:18:ed:85:26: 7e:84:b8:b3:db:ba:09:c1:d2:08:ae:ea:e5:45:ac: 47:82:71:f7:12:56:4a:e7:b0:3f:9c:f9:d8:cc:f0: 7b:fc:10:8c:12:a9:21:cb:03:1a:46:65:be:c9:ea: 05:c4:52:ed:d9:d2:05:87:46:d4:d5:b8:6a:02:86: b6:92:9e:01:d8:8e:b6:97:f1:4e:9e:51:fe:fb:05: f4:16:57:b2:05:36:e9:7d:43:2f:f5:60:a5:2c:2b: 5c:1f:51:dd:ea:50:71:77:be:85:d4:1c:ed:8c:ba: 52:ea:0d:87:7d:fe:2d:d6:07:ff:b6:51:c3:f0:63: 71:80:4f:67:7a:0a:9a:59:22:4b:53:99:e9:ec:28: f7:05:c7:07:8c:11:69:fd:93:a8:8b:0d:46:07:62: f4:3b:f4:1f:2b:e5:c1:7a:a9:1f:07:77:5a:69:af: 82:5b:98:23:f3:97:87:65:57:8a:f7:0e:e4:2e:94: 8a:52:a2:fe:36:0a:6f:2d:9e:c7:bb:ad:aa:8e:af: 18:71:12:6f:3d:0b:87:99:29:d4:38:9e:cb:c1:7f: 24:7c:39:8f:47:eb:85:0c:d7:91:c0:ff:da:c3:86: a7:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:EE:29:58:FD:AD:4F:DF:D0:A3:A0:8D:7A:21:70:88:C5:AB:C7:B8 X509v3 Authority Key Identifier: keyid:9A:94:C4:EA:CA:F4:04:0A:1C:30:ED:1E:DE:A8:E3:00:07:31:B6:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mpTE6sr0BAocMO0e3qjjAAcxtqo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/9ce15f-559a-43b4-a059-cbd4b4bb6f1d/1/mpTE6sr0BAocMO0e3qjjAAcxtqo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/9ce15f-559a-43b4-a059-cbd4b4bb6f1d/1/mpTE6sr0BAocMO0e3qjjAAcxtqo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:0b:1d:ff:1e:1e:fa:13:72:6c:87:b3:43:e9:dc:ce:92:ee: 5f:0b:c1:b3:19:b3:2a:93:6d:26:62:c7:67:6c:1f:fc:81:47: e8:27:48:af:7f:92:09:cb:28:9b:42:e2:61:23:f5:64:7a:d0: ab:ae:4c:bb:98:7b:c4:09:2a:3d:b1:00:83:b4:a6:75:1b:85: 62:44:d2:cb:4a:19:62:9b:35:1c:2d:09:51:e6:67:1e:8c:97: c4:6b:e2:15:f5:42:8d:c7:36:c8:c7:4b:40:e8:d1:25:f8:c6: fb:1d:18:82:33:4f:c0:e1:5f:0c:7e:12:54:2e:db:73:78:59: 4c:60:ff:3e:aa:cd:fa:a9:db:95:5f:f6:40:8b:71:c4:ca:2c: 90:09:38:40:38:c3:7c:99:63:a1:bb:fd:c1:ee:f4:c8:d9:b9: 6b:0f:1a:df:e8:a0:00:bf:1c:b9:44:d6:fc:4b:df:c1:4c:94: 88:ed:fc:f0:bb:bd:c1:38:a9:46:61:28:b8:03:8e:74:9d:74: a2:51:cb:4d:e6:a2:a5:84:bb:a0:67:8c:84:de:f6:2b:be:c9: a0:53:27:d3:de:20:b7:83:02:ec:8e:d2:6a:1c:1e:17:fc:b9: c9:9e:4c:61:4e:d9:19:1d:a5:0a:c8:50:63:63:fa:b0:61:99: de:98:76:0f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzifshJ9YtCugaUNKU6VPFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhOTRjNGVhY2FmNDA0MGExYzMwZWQxZWRlYThlMzAwMDcz MWI2YWEwHhcNMjUxMjA2MTIwMTM3WhcNMjUxMjA3MTIwMTM3WjAzMTEwLwYDVQQD EyhlZmVlMjk1OGZkYWQ0ZmRmZDBhM2EwOGQ3YTIxNzA4OGM1YWJjN2I4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqNIrNCUfSfgB8OScSTa/9dNs6z9g KTn2UxjthSZ+hLiz27oJwdIIrurlRaxHgnH3ElZK57A/nPnYzPB7/BCMEqkhywMa RmW+yeoFxFLt2dIFh0bU1bhqAoa2kp4B2I62l/FOnlH++wX0FleyBTbpfUMv9WCl LCtcH1Hd6lBxd76F1BztjLpS6g2Hff4t1gf/tlHD8GNxgE9negqaWSJLU5np7Cj3 BccHjBFp/ZOoiw1GB2L0O/QfK+XBeqkfB3daaa+CW5gj85eHZVeK9w7kLpSKUqL+ NgpvLZ7Hu62qjq8YcRJvPQuHmSnUOJ7LwX8kfDmPR+uFDNeRwP/aw4anPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO/uKVj9rU/f0KOgjXohcIjFq8e4MB8GA1UdIwQY MBaAFJqUxOrK9AQKHDDtHt6o4wAHMbaqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbXBURTZzcjBCQW9jTU8wZTNxampBQWN4dHFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy85Y2UxNWYtNTU5YS00M2I0LWEwNTkt Y2JkNGI0YmI2ZjFkLzEvbXBURTZzcjBCQW9jTU8wZTNxampBQWN4dHFvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yy85Y2UxNWYtNTU5YS00M2I0LWEwNTktY2JkNGI0YmI2ZjFk LzEvbXBURTZzcjBCQW9jTU8wZTNxampBQWN4dHFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARgsd/x4e +hNybIezQ+nczpLuXwvBsxmzKpNtJmLHZ2wf/IFH6CdIr3+SCcsom0LiYSP1ZHrQ q65Mu5h7xAkqPbEAg7SmdRuFYkTSy0oZYps1HC0JUeZnHoyXxGviFfVCjcc2yMdL QOjRJfjG+x0YgjNPwOFfDH4SVC7bc3hZTGD/PqrN+qnblV/2QItxxMoskAk4QDjD fJljobv9we70yNm5aw8a3+igAL8cuUTW/EvfwUyUiO388Lu9wTipRmEouAOOdJ10 olHLTeaipYS7oGeMhN72K77JoFMn094gt4MC7I7SahweF/y5yZ5MYU7ZGR2lCshQ Y2P6sGGZ3ph2Dw== -----END CERTIFICATE-----Generated at Sat Dec 6 14:23:52 2025 by rpki-client