This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/f0b320-9991-4e71-b3ee-494d91aeb655/1/mR-saFXyKWutFZhw-cvtIjVmE6s.mft File: mR-saFXyKWutFZhw-cvtIjVmE6s.mft (raw, json) Hash identifier: bUmZVybX7FHnHhY7WZ8Uin7NVucdik1XWAu9ftWo24M= Subject key identifier: 66:95:97:34:48:E4:17:AA:04:DF:C9:18:59:52:9D:5E:8A:97:5E:36 Authority key identifier: 99:1F:AC:68:55:F2:29:6B:AD:15:98:70:F9:CB:ED:22:35:66:13:AB Certificate issuer: /CN=991fac6855f2296bad159870f9cbed22356613ab Certificate serial: 019AF4D28C060B254D5D962E9BD60A5592E4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mR-saFXyKWutFZhw-cvtIjVmE6s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/f0b320-9991-4e71-b3ee-494d91aeb655/1/mR-saFXyKWutFZhw-cvtIjVmE6s.mft Manifest number: 1103 Signing time: Sat 06 Dec 2025 18:00:30 +0000 Manifest this update: Sat 06 Dec 2025 18:00:30 +0000 Manifest next update: Sun 07 Dec 2025 18:00:30 +0000 Files and hashes: 1: XAcSBecQIc8UIgDTpBhL8Q6tOP8.roa (hash: H5rv5m3vIYcLSxBobS/ikS6XumhtJHd2OiEi1Eup9mg=) 2: mR-saFXyKWutFZhw-cvtIjVmE6s.crl (hash: uWsw2oyaQ36gOFm2nP58XC3u1thFzGlx1cilV2ROCWI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/f0b320-9991-4e71-b3ee-494d91aeb655/1/mR-saFXyKWutFZhw-cvtIjVmE6s.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/f0b320-9991-4e71-b3ee-494d91aeb655/1/mR-saFXyKWutFZhw-cvtIjVmE6s.mft rsync://rpki.ripe.net/repository/DEFAULT/mR-saFXyKWutFZhw-cvtIjVmE6s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:d2:8c:06:0b:25:4d:5d:96:2e:9b:d6:0a:55:92:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=991fac6855f2296bad159870f9cbed22356613ab Validity Not Before: Dec 6 18:00:30 2025 GMT Not After : Dec 7 18:00:30 2025 GMT Subject: CN=6695973448e417aa04dfc91859529d5e8a975e36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:89:9d:c0:5c:90:1c:9d:76:68:67:65:9d:f9: 94:b3:75:35:eb:40:15:14:cd:eb:46:8f:eb:6d:89: 0f:20:50:c4:69:ae:cd:5d:a8:64:cb:ae:38:f6:48: 2a:36:4c:51:58:92:06:4d:70:c5:f5:c8:bf:96:9e: 6c:bc:55:63:b3:27:a6:87:44:d7:e2:ec:c3:eb:90: d0:18:06:d7:cc:55:03:1c:6e:cb:21:0d:52:60:ae: 1b:05:75:37:b0:65:62:18:78:75:5d:dc:16:a5:76: 17:f3:d7:c7:63:11:05:75:36:73:cf:35:59:41:74: b3:b5:1d:28:af:b0:bd:3b:81:4d:a1:b9:de:7d:6a: 05:e4:3e:92:7d:10:21:b6:3f:66:11:14:99:50:ab: 15:e3:4a:ae:7e:32:0a:5b:ac:74:12:1c:87:62:96: 61:52:9a:a0:1c:98:e7:01:68:22:d0:9f:f6:94:cc: 09:19:9e:05:ce:28:6c:48:ae:c5:6a:44:01:58:f8: ae:ac:d6:43:b4:e4:c8:4c:e7:82:e1:f9:4f:b4:35: f1:26:ac:7b:61:17:66:23:0d:d9:8b:c9:5c:12:0c: c2:8e:af:12:60:fa:99:66:ae:7f:89:6a:e7:c6:49: 89:65:d0:89:09:d5:6c:7e:bc:ae:ba:72:73:fc:3c: 2b:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:95:97:34:48:E4:17:AA:04:DF:C9:18:59:52:9D:5E:8A:97:5E:36 X509v3 Authority Key Identifier: keyid:99:1F:AC:68:55:F2:29:6B:AD:15:98:70:F9:CB:ED:22:35:66:13:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mR-saFXyKWutFZhw-cvtIjVmE6s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/f0b320-9991-4e71-b3ee-494d91aeb655/1/mR-saFXyKWutFZhw-cvtIjVmE6s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/f0b320-9991-4e71-b3ee-494d91aeb655/1/mR-saFXyKWutFZhw-cvtIjVmE6s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:90:5a:8b:59:6f:c4:19:24:a3:7d:07:a1:7c:b3:0e:30:fc: 72:16:d8:ea:7f:1b:fb:45:e7:b2:d0:92:32:40:f3:c0:b4:2f: 71:b6:55:72:56:df:e9:47:9f:17:d1:1e:d1:0f:47:e2:62:34: af:a4:51:69:d8:0b:d6:18:8a:7f:4c:9c:9b:62:40:4e:40:d8: a1:5a:ca:01:1a:78:85:24:78:19:0c:b8:af:b8:48:f8:88:c3: a3:56:b8:01:8c:85:ce:e8:68:9c:d3:04:88:33:49:5e:48:5d: 5f:f2:2d:6f:30:33:04:59:a4:27:dd:cd:f3:22:d4:0f:87:0f: 8f:ae:4a:90:7d:c9:b2:b6:75:d7:d4:f2:32:ec:dd:c2:b9:ab: f8:38:a4:44:23:f7:ed:a9:6a:19:fc:33:ff:25:e0:b7:5e:bf: a1:64:c7:a9:fd:8a:fc:93:93:59:2e:3f:65:96:e7:67:57:b2: 6b:b7:f8:a5:66:b8:ff:16:bb:2f:85:fc:ba:37:ab:52:03:ba: c7:28:12:80:0a:d2:a6:38:76:f1:93:b8:28:b1:a4:a0:03:9a: 1c:a6:09:3b:73:e7:95:e6:c8:60:6e:bc:a8:8a:75:25:94:f6: dd:c3:fa:2f:d2:3b:75:9d:b4:38:c6:b7:92:1a:d0:f2:99:7c: 2d:64:a7:d2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr00owGCyVNXZYum9YKVZLkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk5MWZhYzY4NTVmMjI5NmJhZDE1OTg3MGY5Y2JlZDIyMzU2 NjEzYWIwHhcNMjUxMjA2MTgwMDMwWhcNMjUxMjA3MTgwMDMwWjAzMTEwLwYDVQQD Eyg2Njk1OTczNDQ4ZTQxN2FhMDRkZmM5MTg1OTUyOWQ1ZThhOTc1ZTM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqImdwFyQHJ12aGdlnfmUs3U160AV FM3rRo/rbYkPIFDEaa7NXahky6449kgqNkxRWJIGTXDF9ci/lp5svFVjsyemh0TX 4uzD65DQGAbXzFUDHG7LIQ1SYK4bBXU3sGViGHh1XdwWpXYX89fHYxEFdTZzzzVZ QXSztR0or7C9O4FNobnefWoF5D6SfRAhtj9mERSZUKsV40qufjIKW6x0EhyHYpZh UpqgHJjnAWgi0J/2lMwJGZ4FzihsSK7FakQBWPiurNZDtOTITOeC4flPtDXxJqx7 YRdmIw3Zi8lcEgzCjq8SYPqZZq5/iWrnxkmJZdCJCdVsfryuunJz/Dwr1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGaVlzRI5BeqBN/JGFlSnV6Kl142MB8GA1UdIwQY MBaAFJkfrGhV8ilrrRWYcPnL7SI1ZhOrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbVItc2FGWHlLV3V0Rlpody1jdnRJalZtRTZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy9mMGIzMjAtOTk5MS00ZTcxLWIzZWUt NDk0ZDkxYWViNjU1LzEvbVItc2FGWHlLV3V0Rlpody1jdnRJalZtRTZzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy9mMGIzMjAtOTk5MS00ZTcxLWIzZWUtNDk0ZDkxYWViNjU1 LzEvbVItc2FGWHlLV3V0Rlpody1jdnRJalZtRTZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI5Bai1lv xBkko30HoXyzDjD8chbY6n8b+0XnstCSMkDzwLQvcbZVclbf6UefF9Ee0Q9H4mI0 r6RRadgL1hiKf0ycm2JATkDYoVrKARp4hSR4GQy4r7hI+IjDo1a4AYyFzuhonNME iDNJXkhdX/ItbzAzBFmkJ93N8yLUD4cPj65KkH3JsrZ119TyMuzdwrmr+DikRCP3 7alqGfwz/yXgt16/oWTHqf2K/JOTWS4/ZZbnZ1eya7f4pWa4/xa7L4X8ujerUgO6 xygSgArSpjh28ZO4KLGkoAOaHKYJO3PnlebIYG68qIp1JZT23cP6L9I7dZ20OMa3 khrQ8pl8LWSn0g== -----END CERTIFICATE-----Generated at Sat Dec 6 22:28:16 2025 by rpki-client