This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/c920da-1df8-4927-8831-ab0664e63fb6/1/mSUv9_Tc9iI00i-GoRNbNEkj2qs.mft File: mSUv9_Tc9iI00i-GoRNbNEkj2qs.mft (raw, json) Hash identifier: t0rrCKMcGH34wzoQWHESUtzeHP2tRWIcg+T1uPAktZM= Subject key identifier: F3:8F:D5:4C:88:32:E3:1A:67:62:84:95:58:92:57:DF:99:30:BE:6F Authority key identifier: 99:25:2F:F7:F4:DC:F6:22:34:D2:2F:86:A1:13:5B:34:49:23:DA:AB Certificate issuer: /CN=99252ff7f4dcf62234d22f86a1135b344923daab Certificate serial: 019B3CEC77C118CD9FD5BF45F3DAE87C3F47 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mSUv9_Tc9iI00i-GoRNbNEkj2qs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/c920da-1df8-4927-8831-ab0664e63fb6/1/mSUv9_Tc9iI00i-GoRNbNEkj2qs.mft Manifest number: 0A3F Signing time: Sat 20 Dec 2025 18:01:28 +0000 Manifest this update: Sat 20 Dec 2025 18:01:28 +0000 Manifest next update: Sun 21 Dec 2025 18:01:28 +0000 Files and hashes: 1: 7qi71OAs6leux75HGJJKxd48zLc.roa (hash: z9Iokxbw9AVC6K3SxkWdhXBi3p5Bja4hYfL/NkWRSQw=) 2: mSUv9_Tc9iI00i-GoRNbNEkj2qs.crl (hash: WS+gyreyN/fgkAxPhvKhuBXwhBwwy+qbuK7HwlNBons=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/c920da-1df8-4927-8831-ab0664e63fb6/1/mSUv9_Tc9iI00i-GoRNbNEkj2qs.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/c920da-1df8-4927-8831-ab0664e63fb6/1/mSUv9_Tc9iI00i-GoRNbNEkj2qs.mft rsync://rpki.ripe.net/repository/DEFAULT/mSUv9_Tc9iI00i-GoRNbNEkj2qs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:ec:77:c1:18:cd:9f:d5:bf:45:f3:da:e8:7c:3f:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99252ff7f4dcf62234d22f86a1135b344923daab Validity Not Before: Dec 20 18:01:28 2025 GMT Not After : Dec 21 18:01:28 2025 GMT Subject: CN=f38fd54c8832e31a67628495589257df9930be6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:9d:92:63:a9:45:ba:1f:05:47:c5:60:68:fc: db:71:5b:db:8d:ae:95:0a:21:f0:8f:40:f3:27:6e: 40:b8:db:56:6d:cc:fd:08:ae:8f:bc:aa:9a:ad:e3: 5f:e7:4d:40:c8:2e:b5:a2:86:d0:2f:44:f9:4c:b0: a6:7b:a2:a4:7c:e3:67:c9:80:33:c8:f6:81:2d:60: 24:c0:aa:05:d2:96:da:83:f5:87:a7:36:81:71:8d: 95:e0:d6:11:e1:c9:3b:6d:28:b1:32:5d:59:5e:72: 6d:cb:c5:ee:a7:71:da:a5:16:c5:1b:5f:e8:ed:ec: 12:ac:c6:ad:86:8a:1a:28:4b:c6:78:ed:8b:c8:f5: c1:d1:c8:76:e9:10:62:aa:d3:83:db:ea:26:c1:68: 4c:76:6b:e9:8c:47:02:38:60:55:f0:4d:c2:3a:b9: 3b:85:de:ee:4a:35:e1:56:ef:48:64:24:34:3a:cf: 26:c0:e0:6c:3f:65:dd:86:4c:92:5e:48:e9:c6:7a: 7c:44:c8:de:57:34:6a:23:24:48:2e:15:79:57:6e: 0d:2b:4b:3b:ad:fc:f9:a9:4e:c6:65:6b:03:ea:61: 51:48:d1:b6:bd:cc:5e:fd:cc:d5:84:aa:18:b5:7f: c2:01:ad:1c:e9:5e:39:f7:53:62:0e:db:db:42:7c: 07:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:8F:D5:4C:88:32:E3:1A:67:62:84:95:58:92:57:DF:99:30:BE:6F X509v3 Authority Key Identifier: keyid:99:25:2F:F7:F4:DC:F6:22:34:D2:2F:86:A1:13:5B:34:49:23:DA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mSUv9_Tc9iI00i-GoRNbNEkj2qs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/c920da-1df8-4927-8831-ab0664e63fb6/1/mSUv9_Tc9iI00i-GoRNbNEkj2qs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/c920da-1df8-4927-8831-ab0664e63fb6/1/mSUv9_Tc9iI00i-GoRNbNEkj2qs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:6e:39:2d:14:96:e7:f0:eb:e9:c7:46:3b:2a:2d:ae:89:7e: 3f:b0:c3:c7:b2:2e:ad:42:25:e3:0f:41:2f:d6:37:a7:b9:5f: 47:86:e0:2c:dd:9e:50:75:36:3d:31:6c:b9:b0:09:53:a1:2a: bb:62:22:c5:35:cc:11:2e:22:be:d3:fc:ce:87:08:79:e3:1f: b3:de:d4:50:47:2e:25:88:d8:e5:23:82:db:35:b7:9e:61:d9: 3c:df:60:ef:63:6a:d6:40:36:15:28:c7:00:44:92:90:8d:57: 5e:11:79:f4:e3:10:e3:3a:ad:b4:89:85:f8:93:8e:e1:94:b4: cf:b0:38:c3:c8:31:e8:14:b1:41:1a:d7:92:58:48:a6:38:1b: 7c:9a:d4:45:7b:ff:9b:f7:d2:b1:ad:ea:b4:0b:78:c7:61:04: 61:eb:16:bc:a4:4f:38:f0:4f:97:fa:7a:98:fb:b9:22:e5:6e: b1:ee:61:05:2e:4a:b4:54:11:52:55:5c:10:2a:54:e5:ec:c6: c3:4d:0f:3d:5e:1c:19:cf:b6:44:22:5e:1e:a5:9c:a6:ce:f7: 0b:9d:25:dc:84:a1:b6:54:10:8a:95:d3:9b:2a:8d:00:ce:09: 7e:76:26:20:d1:1e:0b:a6:1e:e6:f3:87:be:d6:58:3f:1e:2b: cc:68:1c:0d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs87HfBGM2f1b9F89rofD9HMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk5MjUyZmY3ZjRkY2Y2MjIzNGQyMmY4NmExMTM1YjM0NDky M2RhYWIwHhcNMjUxMjIwMTgwMTI4WhcNMjUxMjIxMTgwMTI4WjAzMTEwLwYDVQQD EyhmMzhmZDU0Yzg4MzJlMzFhNjc2Mjg0OTU1ODkyNTdkZjk5MzBiZTZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwp2SY6lFuh8FR8VgaPzbcVvbja6V CiHwj0DzJ25AuNtWbcz9CK6PvKqareNf501AyC61oobQL0T5TLCme6KkfONnyYAz yPaBLWAkwKoF0pbag/WHpzaBcY2V4NYR4ck7bSixMl1ZXnJty8Xup3HapRbFG1/o 7ewSrMathooaKEvGeO2LyPXB0ch26RBiqtOD2+omwWhMdmvpjEcCOGBV8E3COrk7 hd7uSjXhVu9IZCQ0Os8mwOBsP2XdhkySXkjpxnp8RMjeVzRqIyRILhV5V24NK0s7 rfz5qU7GZWsD6mFRSNG2vcxe/czVhKoYtX/CAa0c6V4591NiDtvbQnwHxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPOP1UyIMuMaZ2KElViSV9+ZML5vMB8GA1UdIwQY MBaAFJklL/f03PYiNNIvhqETWzRJI9qrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbVNVdjlfVGM5aUkwMGktR29STmJORWtqMnFzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9jOTIwZGEtMWRmOC00OTI3LTg4MzEt YWIwNjY0ZTYzZmI2LzEvbVNVdjlfVGM5aUkwMGktR29STmJORWtqMnFzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi9jOTIwZGEtMWRmOC00OTI3LTg4MzEtYWIwNjY0ZTYzZmI2 LzEvbVNVdjlfVGM5aUkwMGktR29STmJORWtqMnFzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIm45LRSW 5/Dr6cdGOyotrol+P7DDx7IurUIl4w9BL9Y3p7lfR4bgLN2eUHU2PTFsubAJU6Eq u2IixTXMES4ivtP8zocIeeMfs97UUEcuJYjY5SOC2zW3nmHZPN9g72Nq1kA2FSjH AESSkI1XXhF59OMQ4zqttImF+JOO4ZS0z7A4w8gx6BSxQRrXklhIpjgbfJrURXv/ m/fSsa3qtAt4x2EEYesWvKRPOPBPl/p6mPu5IuVuse5hBS5KtFQRUlVcECpU5ezG w00PPV4cGc+2RCJeHqWcps73C50l3IShtlQQipXTmyqNAM4JfnYmINEeC6Ye5vOH vtZYPx4rzGgcDQ== -----END CERTIFICATE-----Generated at Sat Dec 20 22:31:37 2025 by rpki-client