This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/17a69d-b7f7-4ba1-b7ee-98bc254c23e5/1/mAl8K7BitcKZI5Gk7R7k9Po3ecs.mft File: mAl8K7BitcKZI5Gk7R7k9Po3ecs.mft (raw, json) Hash identifier: iqaAcR0/DaEH9/Z39flUPJwRrCN3Dp4bkyFwOQ2yVPA= Subject key identifier: A0:81:85:88:57:EE:BD:56:17:02:94:22:B3:1B:A5:A5:D9:48:45:77 Authority key identifier: 98:09:7C:2B:B0:62:B5:C2:99:23:91:A4:ED:1E:E4:F4:FA:37:79:CB Certificate issuer: /CN=98097c2bb062b5c2992391a4ed1ee4f4fa3779cb Certificate serial: 019AF276C47509206C9DB92C983A9BDB69B2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mAl8K7BitcKZI5Gk7R7k9Po3ecs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/17a69d-b7f7-4ba1-b7ee-98bc254c23e5/1/mAl8K7BitcKZI5Gk7R7k9Po3ecs.mft Manifest number: 175F Signing time: Sat 06 Dec 2025 07:01:00 +0000 Manifest this update: Sat 06 Dec 2025 07:01:00 +0000 Manifest next update: Sun 07 Dec 2025 07:01:00 +0000 Files and hashes: 1: E2H2EgczXO4vEC46FZxvsHwh6_8.roa (hash: 9qoKSnH10eUGGs+3culoGCr3jfo4da0aiqS7K6wGUPQ=) 2: mAl8K7BitcKZI5Gk7R7k9Po3ecs.crl (hash: 0nP/xCHVIk2gU1iGM6+u0k4FsZJ4Ywq6dvu4dsrh0ec=) 3: tYbAWeHoGjW4_0OkM4yMqFJOybI.roa (hash: htZo5UqGGeI3toMrh3D8Z6/VXgbSZywSkH3LLl1S9Ws=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/17a69d-b7f7-4ba1-b7ee-98bc254c23e5/1/mAl8K7BitcKZI5Gk7R7k9Po3ecs.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/17a69d-b7f7-4ba1-b7ee-98bc254c23e5/1/mAl8K7BitcKZI5Gk7R7k9Po3ecs.mft rsync://rpki.ripe.net/repository/DEFAULT/mAl8K7BitcKZI5Gk7R7k9Po3ecs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:c4:75:09:20:6c:9d:b9:2c:98:3a:9b:db:69:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98097c2bb062b5c2992391a4ed1ee4f4fa3779cb Validity Not Before: Dec 6 07:01:00 2025 GMT Not After : Dec 7 07:01:00 2025 GMT Subject: CN=a081858857eebd5617029422b31ba5a5d9484577 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:34:9f:f6:c1:ca:7f:48:03:c0:3d:2d:43:57: 26:5b:cb:c1:ea:36:d2:2b:72:7d:3d:d2:66:72:43: 8f:54:b6:02:04:61:3e:03:01:a7:b4:66:c1:73:c3: dd:9c:d8:32:90:6a:23:cc:74:16:16:c4:7f:7d:cf: 4f:39:0b:fc:ea:26:c8:f2:09:66:46:91:28:a4:bf: 01:b3:20:c5:3a:9b:b6:2f:f6:4b:ed:e9:ca:55:9c: 37:43:b4:ed:18:91:66:6d:43:c3:8f:68:02:1d:80: bd:bc:18:38:13:26:b9:df:30:39:19:dc:98:17:c4: 57:97:87:1c:55:89:42:22:6f:d6:3e:ab:2a:85:5c: ae:47:64:2c:a0:73:35:e6:a0:31:db:34:ee:b1:54: 72:ab:75:89:68:d0:ca:3e:ed:05:f1:7f:f4:5b:4f: f4:12:ef:28:6d:f2:d1:85:2a:fc:43:9b:16:62:4c: 4d:b9:e4:db:36:40:33:62:46:62:c5:18:05:78:0b: 15:d7:ab:33:4e:77:f8:9b:69:cb:eb:be:09:56:7c: ee:99:2e:7d:2f:1e:de:5e:ad:f6:05:f6:76:d1:05: ac:d8:11:da:90:35:70:94:db:39:74:23:09:8c:fb: 5d:8b:d4:76:9b:79:a4:1c:4f:9f:b2:9f:77:af:40: 7e:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:81:85:88:57:EE:BD:56:17:02:94:22:B3:1B:A5:A5:D9:48:45:77 X509v3 Authority Key Identifier: keyid:98:09:7C:2B:B0:62:B5:C2:99:23:91:A4:ED:1E:E4:F4:FA:37:79:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mAl8K7BitcKZI5Gk7R7k9Po3ecs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/17a69d-b7f7-4ba1-b7ee-98bc254c23e5/1/mAl8K7BitcKZI5Gk7R7k9Po3ecs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/17a69d-b7f7-4ba1-b7ee-98bc254c23e5/1/mAl8K7BitcKZI5Gk7R7k9Po3ecs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:08:6d:67:f3:88:1c:dd:f4:40:7b:a7:56:f8:a0:90:d5:0e: 10:fe:de:88:52:99:71:45:d3:7f:a4:7a:e9:c2:31:14:99:2a: 3d:71:60:84:7f:18:a5:c3:9d:2b:1d:bc:2d:96:2f:65:eb:d7: 40:3d:89:4b:2e:1d:ac:7d:bd:7e:14:05:5f:7d:66:db:ff:64: cb:57:c1:bb:f9:7e:c5:39:0b:e5:ee:4f:3f:33:70:c8:7c:35: 80:20:05:6d:10:56:56:1d:bc:33:48:d2:b3:27:20:82:63:79: ef:eb:82:20:f5:64:f2:cd:43:d6:11:33:a4:38:d7:b0:54:88: d7:46:95:ef:47:ea:cf:73:2f:bb:03:10:41:d7:4d:70:a7:8d: 18:61:29:e7:5d:d3:6b:c9:f2:9a:68:a8:e0:91:e0:01:72:d8: 8b:3b:86:1b:b4:58:1c:70:30:b2:86:53:b4:4c:56:4f:12:7c: e6:5c:04:52:c6:4c:f4:84:bc:c4:14:1c:5b:4d:b9:73:7d:b9: 62:9d:b3:07:61:3c:da:83:25:33:05:bc:97:04:b6:5a:cf:97: 13:7f:eb:b8:1a:ae:97:f9:c1:28:31:fa:bc:5f:51:5b:a7:55: 23:5e:58:27:59:cd:9a:82:2f:78:b5:ed:88:93:b9:7a:95:b4: 13:a0:c1:ca -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydsR1CSBsnbksmDqb22myMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk4MDk3YzJiYjA2MmI1YzI5OTIzOTFhNGVkMWVlNGY0ZmEz Nzc5Y2IwHhcNMjUxMjA2MDcwMTAwWhcNMjUxMjA3MDcwMTAwWjAzMTEwLwYDVQQD EyhhMDgxODU4ODU3ZWViZDU2MTcwMjk0MjJiMzFiYTVhNWQ5NDg0NTc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzjSf9sHKf0gDwD0tQ1cmW8vB6jbS K3J9PdJmckOPVLYCBGE+AwGntGbBc8PdnNgykGojzHQWFsR/fc9POQv86ibI8glm RpEopL8BsyDFOpu2L/ZL7enKVZw3Q7TtGJFmbUPDj2gCHYC9vBg4Eya53zA5GdyY F8RXl4ccVYlCIm/WPqsqhVyuR2QsoHM15qAx2zTusVRyq3WJaNDKPu0F8X/0W0/0 Eu8obfLRhSr8Q5sWYkxNueTbNkAzYkZixRgFeAsV16szTnf4m2nL674JVnzumS59 Lx7eXq32BfZ20QWs2BHakDVwlNs5dCMJjPtdi9R2m3mkHE+fsp93r0B+UQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKCBhYhX7r1WFwKUIrMbpaXZSEV3MB8GA1UdIwQY MBaAFJgJfCuwYrXCmSORpO0e5PT6N3nLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbUFsOEs3Qml0Y0taSTVHazdSN2s5UG8zZWNzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS8xN2E2OWQtYjdmNy00YmExLWI3ZWUt OThiYzI1NGMyM2U1LzEvbUFsOEs3Qml0Y0taSTVHazdSN2s5UG8zZWNzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS8xN2E2OWQtYjdmNy00YmExLWI3ZWUtOThiYzI1NGMyM2U1 LzEvbUFsOEs3Qml0Y0taSTVHazdSN2s5UG8zZWNzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaghtZ/OI HN30QHunVvigkNUOEP7eiFKZcUXTf6R66cIxFJkqPXFghH8YpcOdKx28LZYvZevX QD2JSy4drH29fhQFX31m2/9ky1fBu/l+xTkL5e5PPzNwyHw1gCAFbRBWVh28M0jS sycggmN57+uCIPVk8s1D1hEzpDjXsFSI10aV70fqz3MvuwMQQddNcKeNGGEp513T a8nymmio4JHgAXLYizuGG7RYHHAwsoZTtExWTxJ85lwEUsZM9IS8xBQcW025c325 Yp2zB2E82oMlMwW8lwS2Ws+XE3/ruBqul/nBKDH6vF9RW6dVI15YJ1nNmoIveLXt iJO5epW0E6DByg== -----END CERTIFICATE-----Generated at Sat Dec 6 14:37:23 2025 by rpki-client