This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/44c42c-1e68-4aab-839d-9593e3a43725/1/mQxLs441zXAyDreRUgxsrTSksnE.mft File: mQxLs441zXAyDreRUgxsrTSksnE.mft (raw, json) Hash identifier: I8PJa7UrM11flG/e9OinW+uINmDzSnr3V5xOqJpqjyk= Subject key identifier: B1:95:FD:A2:0B:41:53:10:D9:0C:38:63:1F:5C:04:D4:F2:E1:AE:FE Authority key identifier: 99:0C:4B:B3:8E:35:CD:70:32:0E:B7:91:52:0C:6C:AD:34:A4:B2:71 Certificate issuer: /CN=990c4bb38e35cd70320eb791520c6cad34a4b271 Certificate serial: 019AF208C962BA2E19A9DB719B0CACE5ACAB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mQxLs441zXAyDreRUgxsrTSksnE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/44c42c-1e68-4aab-839d-9593e3a43725/1/mQxLs441zXAyDreRUgxsrTSksnE.mft Manifest number: 13F5 Signing time: Sat 06 Dec 2025 05:00:53 +0000 Manifest this update: Sat 06 Dec 2025 05:00:53 +0000 Manifest next update: Sun 07 Dec 2025 05:00:53 +0000 Files and hashes: 1: JtxbWq9ormth5LcKwN5vG4Q3apo.roa (hash: lQXeYw4zv4cIzlRUFSI2nS9Q4llqbkuImnCVCQNKPmM=) 2: mQxLs441zXAyDreRUgxsrTSksnE.crl (hash: 4vwcEr2CSw2xnU6xNZGn78tay7uG0M2rHnakMPbdiwI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/44c42c-1e68-4aab-839d-9593e3a43725/1/mQxLs441zXAyDreRUgxsrTSksnE.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/44c42c-1e68-4aab-839d-9593e3a43725/1/mQxLs441zXAyDreRUgxsrTSksnE.mft rsync://rpki.ripe.net/repository/DEFAULT/mQxLs441zXAyDreRUgxsrTSksnE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:c9:62:ba:2e:19:a9:db:71:9b:0c:ac:e5:ac:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=990c4bb38e35cd70320eb791520c6cad34a4b271 Validity Not Before: Dec 6 05:00:53 2025 GMT Not After : Dec 7 05:00:53 2025 GMT Subject: CN=b195fda20b415310d90c38631f5c04d4f2e1aefe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:84:48:e8:27:d6:e7:ea:31:25:02:47:ba:1b: 47:a5:66:1b:f1:c3:05:e8:2d:0e:9d:e2:27:e4:d2: 06:c8:e6:99:f9:98:26:7b:a5:1f:e4:65:9b:bb:95: 8c:80:81:72:aa:93:45:ad:de:32:3e:e7:6a:94:b3: 41:f5:09:b0:84:c0:8f:96:62:31:18:9a:a5:39:f9: 30:7a:cb:b4:a6:74:bd:10:fc:42:45:e7:63:c5:7e: a2:e5:4a:77:80:4f:c5:95:19:00:01:a2:35:68:df: ff:26:a0:ef:81:b0:c3:bc:5e:f4:66:ff:bd:49:99: 38:cf:15:d6:c9:13:11:d0:cf:d3:8a:82:4e:cd:60: 38:6b:48:22:d2:c6:64:20:73:b6:87:6a:29:1a:7a: af:6e:d2:6c:8b:55:ff:f6:05:28:0d:55:4c:f1:a5: 91:88:46:3e:7c:d5:a7:7a:99:48:82:f2:0c:db:b5: d0:b9:ee:b2:2f:c7:61:1c:a5:b1:4d:35:f3:84:d3: 8f:4e:7b:1e:5f:62:61:d1:79:a8:dc:49:71:f3:a9: 95:38:ac:2e:68:2f:27:86:18:bc:42:cb:21:7c:b0: ec:57:dc:fb:33:28:c8:72:7c:a8:e3:2e:ce:37:3e: b2:5b:7a:c8:93:31:64:3d:d4:76:bf:d3:36:da:80: af:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:95:FD:A2:0B:41:53:10:D9:0C:38:63:1F:5C:04:D4:F2:E1:AE:FE X509v3 Authority Key Identifier: keyid:99:0C:4B:B3:8E:35:CD:70:32:0E:B7:91:52:0C:6C:AD:34:A4:B2:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mQxLs441zXAyDreRUgxsrTSksnE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/44c42c-1e68-4aab-839d-9593e3a43725/1/mQxLs441zXAyDreRUgxsrTSksnE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/44c42c-1e68-4aab-839d-9593e3a43725/1/mQxLs441zXAyDreRUgxsrTSksnE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:6d:a1:50:67:d3:95:05:45:c1:17:83:84:25:f2:f4:86:ca: 52:1e:76:a5:13:73:ed:01:49:a5:e5:79:65:1f:4f:76:50:0b: fe:54:b1:d6:3c:ba:5f:ec:e4:c7:3e:c9:4e:78:43:26:44:b9: 5a:aa:23:1d:13:68:b3:7c:4d:04:32:11:d2:ff:fa:d1:fb:f9: 61:fd:06:79:9e:e2:6d:03:a0:db:98:1d:15:40:ba:70:f8:cb: fb:05:ef:3c:5a:7b:78:9d:d3:17:63:51:9d:c3:9c:8c:7a:09: a4:4b:f8:0b:8a:7a:b4:68:94:35:75:aa:cb:be:f3:87:20:c4: 91:8f:61:5f:7a:c1:32:da:ae:ef:66:97:5a:c0:1f:25:b8:90: ea:38:43:76:76:f1:ed:c3:28:d1:e8:65:2f:aa:03:1b:ec:ee: 2a:3b:44:32:5a:ac:c3:fc:51:6f:ba:eb:90:26:3e:52:e8:27: 32:7c:d6:16:9e:82:3a:50:34:4f:98:b8:06:f2:7c:a0:aa:7c: 4a:80:c2:17:e7:cd:ff:a6:d3:70:fa:f5:8c:5d:16:b0:da:12: ec:c5:57:fa:d6:28:ba:37:91:6a:95:f1:69:8b:36:fe:3a:72: 11:3d:44:64:a0:72:a3:ec:83:43:48:57:c3:bc:d4:c1:dc:f7: 2e:be:09:b4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCMliui4Zqdtxmwys5ayrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk5MGM0YmIzOGUzNWNkNzAzMjBlYjc5MTUyMGM2Y2FkMzRh NGIyNzEwHhcNMjUxMjA2MDUwMDUzWhcNMjUxMjA3MDUwMDUzWjAzMTEwLwYDVQQD EyhiMTk1ZmRhMjBiNDE1MzEwZDkwYzM4NjMxZjVjMDRkNGYyZTFhZWZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwYRI6CfW5+oxJQJHuhtHpWYb8cMF 6C0OneIn5NIGyOaZ+Zgme6Uf5GWbu5WMgIFyqpNFrd4yPudqlLNB9QmwhMCPlmIx GJqlOfkwesu0pnS9EPxCRedjxX6i5Up3gE/FlRkAAaI1aN//JqDvgbDDvF70Zv+9 SZk4zxXWyRMR0M/TioJOzWA4a0gi0sZkIHO2h2opGnqvbtJsi1X/9gUoDVVM8aWR iEY+fNWneplIgvIM27XQue6yL8dhHKWxTTXzhNOPTnseX2Jh0Xmo3Elx86mVOKwu aC8nhhi8QsshfLDsV9z7MyjIcnyo4y7ONz6yW3rIkzFkPdR2v9M22oCviwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLGV/aILQVMQ2Qw4Yx9cBNTy4a7+MB8GA1UdIwQY MBaAFJkMS7OONc1wMg63kVIMbK00pLJxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbVF4THM0NDF6WEF5RHJlUlVneHNyVFNrc25FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi80NGM0MmMtMWU2OC00YWFiLTgzOWQt OTU5M2UzYTQzNzI1LzEvbVF4THM0NDF6WEF5RHJlUlVneHNyVFNrc25FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi80NGM0MmMtMWU2OC00YWFiLTgzOWQtOTU5M2UzYTQzNzI1 LzEvbVF4THM0NDF6WEF5RHJlUlVneHNyVFNrc25FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnG2hUGfT lQVFwReDhCXy9IbKUh52pRNz7QFJpeV5ZR9PdlAL/lSx1jy6X+zkxz7JTnhDJkS5 WqojHRNos3xNBDIR0v/60fv5Yf0GeZ7ibQOg25gdFUC6cPjL+wXvPFp7eJ3TF2NR ncOcjHoJpEv4C4p6tGiUNXWqy77zhyDEkY9hX3rBMtqu72aXWsAfJbiQ6jhDdnbx 7cMo0ehlL6oDG+zuKjtEMlqsw/xRb7rrkCY+UugnMnzWFp6COlA0T5i4BvJ8oKp8 SoDCF+fN/6bTcPr1jF0WsNoS7MVX+tYoujeRapXxaYs2/jpyET1EZKByo+yDQ0hX w7zUwdz3Lr4JtA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:55:47 2025 by rpki-client