This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/218197-7ec1-43a8-a591-73675f18113a/1/mNZvua2ttqkFe_YKqj_1LGZUBBg.mft File: mNZvua2ttqkFe_YKqj_1LGZUBBg.mft (raw, json) Hash identifier: v2+Syc8B9JSQl1ssT6+sK1qjR4Q/H+XZJ7P4bu4FsDo= Subject key identifier: DD:3A:41:84:EE:E8:F8:EF:7A:33:21:10:11:FF:90:E3:A2:04:57:D7 Authority key identifier: 98:D6:6F:B9:AD:AD:B6:A9:05:7B:F6:0A:AA:3F:F5:2C:66:54:04:18 Certificate issuer: /CN=98d66fb9adadb6a9057bf60aaa3ff52c66540418 Certificate serial: 019B3E6DEF00DF07CD8E0AAED47E3C946EEC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mNZvua2ttqkFe_YKqj_1LGZUBBg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/218197-7ec1-43a8-a591-73675f18113a/1/mNZvua2ttqkFe_YKqj_1LGZUBBg.mft Manifest number: 0CE1 Signing time: Sun 21 Dec 2025 01:02:30 +0000 Manifest this update: Sun 21 Dec 2025 01:02:30 +0000 Manifest next update: Mon 22 Dec 2025 01:02:30 +0000 Files and hashes: 1: 7j9uxnJfVl55LcxAf_fr4i2drjY.roa (hash: 7whaNaNl7Pm7UlaWsp36rTim4yAY8fmMQU6Aiv7KQCs=) 2: mNZvua2ttqkFe_YKqj_1LGZUBBg.crl (hash: yVy+m3ftquzy7/iCVBxbT/oymmV0UisTFL4HDft0IyI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/218197-7ec1-43a8-a591-73675f18113a/1/mNZvua2ttqkFe_YKqj_1LGZUBBg.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/218197-7ec1-43a8-a591-73675f18113a/1/mNZvua2ttqkFe_YKqj_1LGZUBBg.mft rsync://rpki.ripe.net/repository/DEFAULT/mNZvua2ttqkFe_YKqj_1LGZUBBg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:6d:ef:00:df:07:cd:8e:0a:ae:d4:7e:3c:94:6e:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98d66fb9adadb6a9057bf60aaa3ff52c66540418 Validity Not Before: Dec 21 01:02:30 2025 GMT Not After : Dec 22 01:02:30 2025 GMT Subject: CN=dd3a4184eee8f8ef7a33211011ff90e3a20457d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:95:b0:03:86:c5:0e:da:ce:5a:c1:e6:da:02: 07:b4:09:f3:0a:75:7b:70:16:a8:98:2d:cc:70:2d: 07:78:9c:47:8d:eb:3b:42:d8:24:2e:a8:cd:02:ee: 68:03:9b:ed:2c:70:30:20:37:17:9f:57:76:ce:aa: 70:b8:93:4f:d3:77:36:b6:e4:4a:34:fc:0f:8a:ea: db:c1:8e:98:d4:6d:66:af:46:2c:fe:cf:c9:a4:e4: 3c:5a:9d:d7:6d:a0:de:d1:8e:b0:a7:8c:aa:06:fe: 65:f3:68:72:f6:91:1d:ab:0b:06:a7:d5:c4:a5:85: 23:c4:7d:35:fe:fc:29:58:39:9a:d9:18:f9:41:30: 4e:af:04:c6:44:83:12:a6:22:6a:c1:f0:da:65:77: fa:5d:76:3a:6d:33:18:77:32:26:8b:51:b6:0d:b7: 1b:ab:ce:5e:e9:08:b3:a5:31:c7:dc:23:79:3e:f3: bd:cd:59:b9:10:e4:aa:5b:24:04:cb:da:dc:ea:02: 81:11:ef:4c:ec:69:c2:f5:43:a9:94:9a:c6:0e:46: 81:24:1f:99:60:b4:40:09:61:26:77:dd:e0:cd:07: 8a:4e:56:a4:8d:26:fa:ff:fa:ad:0a:ec:55:81:18: 34:2a:e1:95:13:60:24:43:3e:64:d7:67:fd:de:fd: 3a:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:3A:41:84:EE:E8:F8:EF:7A:33:21:10:11:FF:90:E3:A2:04:57:D7 X509v3 Authority Key Identifier: keyid:98:D6:6F:B9:AD:AD:B6:A9:05:7B:F6:0A:AA:3F:F5:2C:66:54:04:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mNZvua2ttqkFe_YKqj_1LGZUBBg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/218197-7ec1-43a8-a591-73675f18113a/1/mNZvua2ttqkFe_YKqj_1LGZUBBg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/218197-7ec1-43a8-a591-73675f18113a/1/mNZvua2ttqkFe_YKqj_1LGZUBBg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:5e:c6:c4:8e:9b:de:03:13:b0:4d:ac:6e:9d:ad:86:4f:cd: d8:50:00:78:f3:21:93:cd:33:f7:40:42:0f:dd:70:ac:c1:dd: 48:50:1f:68:01:00:7e:81:6b:02:b8:52:e6:c6:f1:19:53:cc: b3:da:3c:e4:56:95:76:b8:e8:b5:c3:01:ff:0b:f2:6c:87:e3: ef:35:06:61:de:78:79:ab:db:ea:57:47:30:ed:78:da:25:dc: 8f:90:99:6e:30:dd:6d:03:ee:f2:2d:ac:de:da:2d:29:08:2b: f5:2f:cc:3c:e6:12:45:8a:eb:87:09:66:c3:bf:b3:44:4e:4e: 62:63:30:ee:d8:33:02:0d:5a:57:54:8f:5e:b0:4b:15:03:84: c5:c1:b9:7d:8c:ab:c2:8a:76:23:02:47:b2:e1:91:32:86:1f: 2e:bf:e1:ea:01:0c:b2:90:70:94:db:50:18:4b:6c:54:01:55: 33:ba:39:74:31:52:cf:91:12:c1:81:03:87:c5:d7:bf:aa:a9: aa:4a:c0:00:20:5d:e2:61:3b:12:b4:07:ce:01:87:52:45:d3: f1:03:72:dd:44:bc:30:14:c2:87:6f:a4:04:e2:23:a0:3a:a3: 81:d7:9b:52:21:f8:16:e7:e7:a5:ee:9e:f2:f8:34:06:c3:42: af:66:d0:e6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+be8A3wfNjgqu1H48lG7sMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk4ZDY2ZmI5YWRhZGI2YTkwNTdiZjYwYWFhM2ZmNTJjNjY1 NDA0MTgwHhcNMjUxMjIxMDEwMjMwWhcNMjUxMjIyMDEwMjMwWjAzMTEwLwYDVQQD EyhkZDNhNDE4NGVlZThmOGVmN2EzMzIxMTAxMWZmOTBlM2EyMDQ1N2Q3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzpWwA4bFDtrOWsHm2gIHtAnzCnV7 cBaomC3McC0HeJxHjes7QtgkLqjNAu5oA5vtLHAwIDcXn1d2zqpwuJNP03c2tuRK NPwPiurbwY6Y1G1mr0Ys/s/JpOQ8Wp3XbaDe0Y6wp4yqBv5l82hy9pEdqwsGp9XE pYUjxH01/vwpWDma2Rj5QTBOrwTGRIMSpiJqwfDaZXf6XXY6bTMYdzImi1G2Dbcb q85e6QizpTHH3CN5PvO9zVm5EOSqWyQEy9rc6gKBEe9M7GnC9UOplJrGDkaBJB+Z YLRACWEmd93gzQeKTlakjSb6//qtCuxVgRg0KuGVE2AkQz5k12f93v06zwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN06QYTu6PjvejMhEBH/kOOiBFfXMB8GA1UdIwQY MBaAFJjWb7mtrbapBXv2Cqo/9SxmVAQYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbU5adnVhMnR0cWtGZV9ZS3FqXzFMR1pVQkJnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC8yMTgxOTctN2VjMS00M2E4LWE1OTEt NzM2NzVmMTgxMTNhLzEvbU5adnVhMnR0cWtGZV9ZS3FqXzFMR1pVQkJnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC8yMTgxOTctN2VjMS00M2E4LWE1OTEtNzM2NzVmMTgxMTNh LzEvbU5adnVhMnR0cWtGZV9ZS3FqXzFMR1pVQkJnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXF7GxI6b 3gMTsE2sbp2thk/N2FAAePMhk80z90BCD91wrMHdSFAfaAEAfoFrArhS5sbxGVPM s9o85FaVdrjotcMB/wvybIfj7zUGYd54eavb6ldHMO142iXcj5CZbjDdbQPu8i2s 3totKQgr9S/MPOYSRYrrhwlmw7+zRE5OYmMw7tgzAg1aV1SPXrBLFQOExcG5fYyr wop2IwJHsuGRMoYfLr/h6gEMspBwlNtQGEtsVAFVM7o5dDFSz5ESwYEDh8XXv6qp qkrAACBd4mE7ErQHzgGHUkXT8QNy3US8MBTCh2+kBOIjoDqjgdebUiH4Fufnpe6e 8vg0BsNCr2bQ5g== -----END CERTIFICATE-----Generated at Sun Dec 21 06:53:31 2025 by rpki-client