This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/cec2a9-3013-42b4-9483-a72c404f26fd/1/md1vCIIq4LpQVFQkVpI_r5BA9dA.mft File: md1vCIIq4LpQVFQkVpI_r5BA9dA.mft (raw, json) Hash identifier: qVbOMxivTqmrGSVDMFezSoTE3fYp1WaETMGKpHFpo+Y= Subject key identifier: B9:F2:7B:34:C4:A5:A0:B8:BF:9A:69:8F:FA:B4:42:2A:45:29:EF:33 Authority key identifier: 99:DD:6F:08:82:2A:E0:BA:50:54:54:24:56:92:3F:AF:90:40:F5:D0 Certificate issuer: /CN=99dd6f08822ae0ba5054542456923faf9040f5d0 Certificate serial: 019AF3C01EE6CE589530FF0EE05CA2D276B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/md1vCIIq4LpQVFQkVpI_r5BA9dA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/cec2a9-3013-42b4-9483-a72c404f26fd/1/md1vCIIq4LpQVFQkVpI_r5BA9dA.mft Manifest number: 114D Signing time: Sat 06 Dec 2025 13:00:45 +0000 Manifest this update: Sat 06 Dec 2025 13:00:45 +0000 Manifest next update: Sun 07 Dec 2025 13:00:45 +0000 Files and hashes: 1: NUWfScDSH56OaOCaPfBblPu0Ydg.roa (hash: a4F0KmJ+v3pAeFAh9qDTsIqvwa1PoPI9PowXceZRGfg=) 2: md1vCIIq4LpQVFQkVpI_r5BA9dA.crl (hash: jUu6jSOXWhC2hVtefCco46g2iP/a31IAqCDT2Uq5268=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/cec2a9-3013-42b4-9483-a72c404f26fd/1/md1vCIIq4LpQVFQkVpI_r5BA9dA.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/cec2a9-3013-42b4-9483-a72c404f26fd/1/md1vCIIq4LpQVFQkVpI_r5BA9dA.mft rsync://rpki.ripe.net/repository/DEFAULT/md1vCIIq4LpQVFQkVpI_r5BA9dA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:c0:1e:e6:ce:58:95:30:ff:0e:e0:5c:a2:d2:76:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99dd6f08822ae0ba5054542456923faf9040f5d0 Validity Not Before: Dec 6 13:00:45 2025 GMT Not After : Dec 7 13:00:45 2025 GMT Subject: CN=b9f27b34c4a5a0b8bf9a698ffab4422a4529ef33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:36:01:fb:1d:80:0d:b5:9c:7b:2a:dd:91:dc: 8f:ab:c7:16:62:ad:ae:8d:3e:12:2c:26:e5:1b:9f: a8:92:bc:ac:30:f5:3d:79:08:df:af:04:1f:9a:cc: 49:80:3a:98:5c:5a:95:0c:9e:50:5a:b6:23:6e:8c: 61:db:72:4b:8d:b2:24:0c:b9:cf:1c:4a:f8:2b:13: 65:2e:ce:3d:ec:72:be:66:b6:8b:41:1b:84:de:ce: 01:ee:10:2d:06:f3:cd:7a:5d:fe:4b:2b:e1:28:c0: c2:b1:df:2e:dc:98:c9:8f:93:ed:f6:94:18:db:fd: 2e:03:98:69:4c:c7:24:b9:dd:9f:e0:63:fa:57:69: 5a:19:96:9c:6a:24:47:fd:0f:46:b2:e9:e6:66:70: d0:25:d1:1d:0e:1d:4d:0e:cb:b4:28:49:26:e1:3a: 16:06:f4:de:33:e3:93:86:c4:02:4a:5d:5c:fb:2b: 7a:ba:37:75:ae:c8:ed:f0:f6:c6:7c:22:d8:c4:8a: e0:93:a6:3c:09:4c:0d:37:06:06:37:fe:f5:8d:52: de:3c:bd:55:fa:11:66:fc:11:a4:c8:ca:06:70:47: 6f:76:84:b1:b4:05:24:c3:46:43:50:9b:93:2a:ad: 2e:2e:4e:c1:e6:cc:15:f8:58:8a:77:01:c6:3d:b0: e3:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:F2:7B:34:C4:A5:A0:B8:BF:9A:69:8F:FA:B4:42:2A:45:29:EF:33 X509v3 Authority Key Identifier: keyid:99:DD:6F:08:82:2A:E0:BA:50:54:54:24:56:92:3F:AF:90:40:F5:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/md1vCIIq4LpQVFQkVpI_r5BA9dA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/cec2a9-3013-42b4-9483-a72c404f26fd/1/md1vCIIq4LpQVFQkVpI_r5BA9dA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/cec2a9-3013-42b4-9483-a72c404f26fd/1/md1vCIIq4LpQVFQkVpI_r5BA9dA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:0c:0b:85:fe:ee:c6:8d:bb:3f:90:45:36:15:d6:16:d7:b0: d0:28:32:2f:1c:4d:88:fd:ab:f8:5a:a6:3b:68:84:e0:97:a0: dc:e7:bd:59:db:53:59:83:35:16:e7:12:e8:43:ad:3f:32:23: 5c:d4:57:29:fe:63:97:53:0a:36:2f:5e:ae:3a:0f:2b:c0:5e: a5:a7:88:0f:52:f4:01:d0:d2:29:8f:25:11:e9:df:ed:0b:b2: b0:bc:3c:88:1c:d8:ab:f1:74:0d:8a:c1:ac:44:34:a3:28:e9: c7:19:ad:1b:e6:f7:5c:f3:8f:14:43:9b:b1:dc:ef:73:53:7e: 05:8b:d5:a8:c2:2c:e5:15:69:c2:0f:88:00:38:d5:89:1e:6d: ea:9c:70:fc:da:4c:84:71:19:3e:55:95:53:0f:e8:c6:7d:9a: ca:af:8f:aa:02:c5:fb:dd:a2:bb:57:04:89:04:6a:52:f8:7c: 62:c8:6f:35:76:ac:c7:aa:a2:4c:ae:a2:fa:56:5c:a1:ca:d5: 70:2d:8a:81:a7:4a:f3:c4:69:30:9b:57:51:b0:5d:f8:de:aa: f3:e7:f9:ca:de:0a:d0:c2:65:46:2f:0d:84:9f:cb:46:a3:8e: 55:4c:d4:89:45:02:17:61:56:9e:6a:ec:a6:c5:2b:db:4d:26: b0:92:1b:01 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzwB7mzliVMP8O4Fyi0na4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk5ZGQ2ZjA4ODIyYWUwYmE1MDU0NTQyNDU2OTIzZmFmOTA0 MGY1ZDAwHhcNMjUxMjA2MTMwMDQ1WhcNMjUxMjA3MTMwMDQ1WjAzMTEwLwYDVQQD EyhiOWYyN2IzNGM0YTVhMGI4YmY5YTY5OGZmYWI0NDIyYTQ1MjllZjMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmzYB+x2ADbWceyrdkdyPq8cWYq2u jT4SLCblG5+okrysMPU9eQjfrwQfmsxJgDqYXFqVDJ5QWrYjboxh23JLjbIkDLnP HEr4KxNlLs497HK+ZraLQRuE3s4B7hAtBvPNel3+SyvhKMDCsd8u3JjJj5Pt9pQY 2/0uA5hpTMckud2f4GP6V2laGZacaiRH/Q9GsunmZnDQJdEdDh1NDsu0KEkm4ToW BvTeM+OThsQCSl1c+yt6ujd1rsjt8PbGfCLYxIrgk6Y8CUwNNwYGN/71jVLePL1V +hFm/BGkyMoGcEdvdoSxtAUkw0ZDUJuTKq0uLk7B5swV+FiKdwHGPbDjiwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLnyezTEpaC4v5ppj/q0QipFKe8zMB8GA1UdIwQY MBaAFJndbwiCKuC6UFRUJFaSP6+QQPXQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbWQxdkNJSXE0THBRVkZRa1ZwSV9yNUJBOWRBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS9jZWMyYTktMzAxMy00MmI0LTk0ODMt YTcyYzQwNGYyNmZkLzEvbWQxdkNJSXE0THBRVkZRa1ZwSV9yNUJBOWRBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS9jZWMyYTktMzAxMy00MmI0LTk0ODMtYTcyYzQwNGYyNmZk LzEvbWQxdkNJSXE0THBRVkZRa1ZwSV9yNUJBOWRBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlAwLhf7u xo27P5BFNhXWFtew0CgyLxxNiP2r+FqmO2iE4Jeg3Oe9WdtTWYM1FucS6EOtPzIj XNRXKf5jl1MKNi9erjoPK8BepaeID1L0AdDSKY8lEenf7QuysLw8iBzYq/F0DYrB rEQ0oyjpxxmtG+b3XPOPFEObsdzvc1N+BYvVqMIs5RVpwg+IADjViR5t6pxw/NpM hHEZPlWVUw/oxn2ayq+PqgLF+92iu1cEiQRqUvh8YshvNXasx6qiTK6i+lZcocrV cC2KgadK88RpMJtXUbBd+N6q8+f5yt4K0MJlRi8NhJ/LRqOOVUzUiUUCF2FWnmrs psUr200msJIbAQ== -----END CERTIFICATE-----Generated at Sat Dec 6 21:35:42 2025 by rpki-client