This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/43d301-f81a-492e-922c-c971dc713b1f/1/mPArXPtBclCOBze_Jc1dIqAdxFo.mft File: mPArXPtBclCOBze_Jc1dIqAdxFo.mft (raw, json) Hash identifier: b1c+xK/6jUPs+iCPejorJeQs2ytAOHK91us+8RNbfr4= Subject key identifier: BA:EC:18:0C:E7:DC:CD:95:7C:0C:E1:E2:2D:BE:57:A0:ED:32:ED:97 Authority key identifier: 98:F0:2B:5C:FB:41:72:50:8E:07:37:BF:25:CD:5D:22:A0:1D:C4:5A Certificate issuer: /CN=98f02b5cfb4172508e0737bf25cd5d22a01dc45a Certificate serial: 019AF6F92A2014210229F9C3065779760EDE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mPArXPtBclCOBze_Jc1dIqAdxFo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/43d301-f81a-492e-922c-c971dc713b1f/1/mPArXPtBclCOBze_Jc1dIqAdxFo.mft Manifest number: 0894 Signing time: Sun 07 Dec 2025 04:01:55 +0000 Manifest this update: Sun 07 Dec 2025 04:01:55 +0000 Manifest next update: Mon 08 Dec 2025 04:01:55 +0000 Files and hashes: 1: Keu4ORQGNbpvqRyHyCkLTUO_lOA.roa (hash: 8AaJ0cxF0N1CmP6IwiLLt/ItfrvG5f97UQsDx1F7lhM=) 2: mPArXPtBclCOBze_Jc1dIqAdxFo.crl (hash: Xl2Ril4K3R39ROzaJT5qAflQJxcrUl2o/y9kJIKe9wQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/43d301-f81a-492e-922c-c971dc713b1f/1/mPArXPtBclCOBze_Jc1dIqAdxFo.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/43d301-f81a-492e-922c-c971dc713b1f/1/mPArXPtBclCOBze_Jc1dIqAdxFo.mft rsync://rpki.ripe.net/repository/DEFAULT/mPArXPtBclCOBze_Jc1dIqAdxFo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:f9:2a:20:14:21:02:29:f9:c3:06:57:79:76:0e:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98f02b5cfb4172508e0737bf25cd5d22a01dc45a Validity Not Before: Dec 7 04:01:55 2025 GMT Not After : Dec 8 04:01:55 2025 GMT Subject: CN=baec180ce7dccd957c0ce1e22dbe57a0ed32ed97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:22:d9:71:72:27:ef:9e:73:60:91:ba:be:9b: 21:4c:8d:73:37:83:3e:e8:38:23:2f:5f:0d:e3:c2: 34:c1:22:ae:2c:f6:df:a7:e0:20:c7:c0:fa:5a:b8: 79:86:6a:92:a2:86:ef:a0:13:3c:53:b9:05:4a:8e: 4d:3e:9f:60:c2:20:b7:62:aa:60:82:9d:b0:8b:4b: 1f:20:54:c4:96:73:d5:68:9c:0d:be:06:14:7d:9d: 78:c9:b6:53:42:3b:ec:9f:6a:bb:16:66:6c:0e:0b: b1:69:66:48:8b:2f:77:dc:ff:fe:85:7e:49:90:44: 63:1e:c4:e8:f6:1a:f1:f5:e4:08:9f:a9:33:f5:4b: 86:40:3b:f8:9c:b9:6a:c2:25:f6:ed:4d:a2:aa:f6: 43:2d:50:d6:35:6e:03:a2:56:8d:d3:e6:8e:06:da: cd:e7:58:68:bc:d8:cc:3b:d7:d0:6e:1e:3c:3f:5d: 5c:70:be:e4:2d:71:fa:75:43:f0:b1:88:01:ca:88: 5a:2a:0c:57:cd:21:a0:14:68:e5:10:69:88:df:7f: c7:88:9b:4e:39:f4:48:e4:51:1d:25:e5:9b:93:aa: 5b:bd:4f:47:c1:2a:3d:ea:47:80:43:fa:46:1a:62: f4:31:1c:6d:87:e8:0c:f5:b3:63:ba:1c:76:90:63: 3e:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:EC:18:0C:E7:DC:CD:95:7C:0C:E1:E2:2D:BE:57:A0:ED:32:ED:97 X509v3 Authority Key Identifier: keyid:98:F0:2B:5C:FB:41:72:50:8E:07:37:BF:25:CD:5D:22:A0:1D:C4:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mPArXPtBclCOBze_Jc1dIqAdxFo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/43d301-f81a-492e-922c-c971dc713b1f/1/mPArXPtBclCOBze_Jc1dIqAdxFo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/43d301-f81a-492e-922c-c971dc713b1f/1/mPArXPtBclCOBze_Jc1dIqAdxFo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:fc:aa:93:16:b4:b5:7b:16:76:dd:f2:cb:aa:f3:9b:a0:44: 90:f8:80:4c:d2:85:21:54:09:c6:c0:df:d0:aa:e9:78:6a:26: 00:32:44:9d:03:d0:f7:4c:92:d1:4c:3a:7f:e6:d0:06:c3:3f: 95:d7:9e:79:37:b0:b1:13:30:7f:a0:bc:2e:65:66:7d:26:e8: 18:a2:33:3e:e3:e0:ef:0e:08:5d:4c:78:03:3b:75:e5:d0:30: d5:d0:09:9a:cd:f5:08:fa:03:97:f5:fe:fb:67:64:30:d1:92: f3:71:c9:75:f1:1d:02:79:60:55:5c:03:95:46:cc:69:a4:7c: 8f:92:7c:37:4a:5f:2a:3c:f7:d1:5c:49:69:80:6b:9d:d5:0f: e8:ce:b5:1a:da:c2:7a:a6:40:54:a9:58:fe:4c:cf:e8:f5:3d: f6:ec:49:3c:90:04:da:2c:1f:0c:bf:50:20:c9:c2:d8:b5:43: f5:2b:ed:f0:ab:af:a2:80:1c:09:7d:f1:15:d5:a0:f6:5b:f1: 2b:ba:91:ec:8a:ea:c6:8b:6e:c0:44:53:fa:6a:f6:4c:bd:43: 4d:18:62:6d:94:fc:20:0f:b7:80:c3:00:57:32:41:df:52:99: b5:89:c3:b1:60:cf:73:0f:43:04:02:9a:7b:6e:86:79:e4:aa: 51:5b:d6:18 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2+SogFCECKfnDBld5dg7eMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk4ZjAyYjVjZmI0MTcyNTA4ZTA3MzdiZjI1Y2Q1ZDIyYTAx ZGM0NWEwHhcNMjUxMjA3MDQwMTU1WhcNMjUxMjA4MDQwMTU1WjAzMTEwLwYDVQQD EyhiYWVjMTgwY2U3ZGNjZDk1N2MwY2UxZTIyZGJlNTdhMGVkMzJlZDk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtyLZcXIn755zYJG6vpshTI1zN4M+ 6DgjL18N48I0wSKuLPbfp+Agx8D6Wrh5hmqSoobvoBM8U7kFSo5NPp9gwiC3Yqpg gp2wi0sfIFTElnPVaJwNvgYUfZ14ybZTQjvsn2q7FmZsDguxaWZIiy933P/+hX5J kERjHsTo9hrx9eQIn6kz9UuGQDv4nLlqwiX27U2iqvZDLVDWNW4DolaN0+aOBtrN 51hovNjMO9fQbh48P11ccL7kLXH6dUPwsYgByohaKgxXzSGgFGjlEGmI33/HiJtO OfRI5FEdJeWbk6pbvU9HwSo96keAQ/pGGmL0MRxth+gM9bNjuhx2kGM+fwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLrsGAzn3M2VfAzh4i2+V6DtMu2XMB8GA1UdIwQY MBaAFJjwK1z7QXJQjgc3vyXNXSKgHcRaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbVBBclhQdEJjbENPQnplX0pjMWRJcUFkeEZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS80M2QzMDEtZjgxYS00OTJlLTkyMmMt Yzk3MWRjNzEzYjFmLzEvbVBBclhQdEJjbENPQnplX0pjMWRJcUFkeEZvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS80M2QzMDEtZjgxYS00OTJlLTkyMmMtYzk3MWRjNzEzYjFm LzEvbVBBclhQdEJjbENPQnplX0pjMWRJcUFkeEZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYfyqkxa0 tXsWdt3yy6rzm6BEkPiATNKFIVQJxsDf0KrpeGomADJEnQPQ90yS0Uw6f+bQBsM/ ldeeeTewsRMwf6C8LmVmfSboGKIzPuPg7w4IXUx4Azt15dAw1dAJms31CPoDl/X+ +2dkMNGS83HJdfEdAnlgVVwDlUbMaaR8j5J8N0pfKjz30VxJaYBrndUP6M61GtrC eqZAVKlY/kzP6PU99uxJPJAE2iwfDL9QIMnC2LVD9Svt8KuvooAcCX3xFdWg9lvx K7qR7IrqxotuwERT+mr2TL1DTRhibZT8IA+3gMMAVzJB31KZtYnDsWDPcw9DBAKa e26GeeSqUVvWGA== -----END CERTIFICATE-----Generated at Sun Dec 7 05:59:51 2025 by rpki-client