This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/9453a0-e655-480e-b6a9-e39524e7a6ed/1/mVXFpxN-tdR-ok4X0n-pLQtC-9g.mft File: mVXFpxN-tdR-ok4X0n-pLQtC-9g.mft (raw, json) Hash identifier: SSJHrvpISVyn9Iy3CUlqkGV8BZz0O6mh0P8J42zP6lc= Subject key identifier: 70:D7:4E:4A:14:1A:44:3E:40:AF:E0:46:E6:13:ED:48:74:CE:CB:BD Authority key identifier: 99:55:C5:A7:13:7E:B5:D4:7E:A2:4E:17:D2:7F:A9:2D:0B:42:FB:D8 Certificate issuer: /CN=9955c5a7137eb5d47ea24e17d27fa92d0b42fbd8 Certificate serial: 019AF23FB1B6B9A2BDB01F7B5D2B17D727A6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mVXFpxN-tdR-ok4X0n-pLQtC-9g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/9453a0-e655-480e-b6a9-e39524e7a6ed/1/mVXFpxN-tdR-ok4X0n-pLQtC-9g.mft Manifest number: 1645 Signing time: Sat 06 Dec 2025 06:00:51 +0000 Manifest this update: Sat 06 Dec 2025 06:00:51 +0000 Manifest next update: Sun 07 Dec 2025 06:00:51 +0000 Files and hashes: 1: 2z0NeYZe1xNl9FiaXMK1zDvmewM.roa (hash: cOILWkUhsnduTiBD7sHiLuG2BYfCl/U6Tpdfh+0XXP8=) 2: BnHU_9oB_ewnVOgPSPpU2bWe8Zk.roa (hash: go8wZXjflDuAlY6EuMTLQuty8jZX31nqsRbiTUQs4zs=) 3: Cb9IfbvVd462ED5QHHlj-LEweLw.roa (hash: 7Eevpsqm9wy59M0ZaZdGU+Ma/l1JUlTqTqjFG2nGxwA=) 4: mVXFpxN-tdR-ok4X0n-pLQtC-9g.crl (hash: 0JWdjz4+MBfFCkr2l4EyJhYPJ/DA91EibCIoI+3a6Mk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/9453a0-e655-480e-b6a9-e39524e7a6ed/1/mVXFpxN-tdR-ok4X0n-pLQtC-9g.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/9453a0-e655-480e-b6a9-e39524e7a6ed/1/mVXFpxN-tdR-ok4X0n-pLQtC-9g.mft rsync://rpki.ripe.net/repository/DEFAULT/mVXFpxN-tdR-ok4X0n-pLQtC-9g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:b1:b6:b9:a2:bd:b0:1f:7b:5d:2b:17:d7:27:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9955c5a7137eb5d47ea24e17d27fa92d0b42fbd8 Validity Not Before: Dec 6 06:00:51 2025 GMT Not After : Dec 7 06:00:51 2025 GMT Subject: CN=70d74e4a141a443e40afe046e613ed4874cecbbd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:55:31:f9:a7:30:9f:d2:46:f6:31:64:f7:89: 48:d9:f8:64:46:8f:94:0c:98:11:a4:77:d8:6f:2e: 21:fd:bd:68:77:2d:04:c2:13:8e:87:62:bd:2d:e3: 8f:8c:e8:8e:db:64:9f:68:59:26:3b:7e:96:9d:6b: 82:35:f0:10:6e:42:df:25:e7:92:d9:6d:b0:b0:83: 00:41:dd:cb:e1:c8:2f:bb:1e:28:95:fd:da:6b:14: 37:e0:25:7a:6d:2d:c4:7b:36:4b:dc:bd:d6:1b:ab: f1:3e:17:d5:d1:87:cc:f7:b9:1f:26:38:64:55:5f: 2a:7c:96:44:c9:b1:b6:61:43:0e:86:c0:4a:47:35: d5:a8:b5:e8:39:50:b4:e9:c2:8c:e1:4f:54:bf:7c: 42:b1:21:8b:88:6c:b0:58:83:d2:ca:e0:82:67:48: 88:ae:1d:b3:e6:98:2e:d0:5d:10:fa:e2:cd:6e:7f: 91:ba:f6:7e:bc:85:61:c2:2a:73:2e:ae:e5:17:e3: 9b:df:04:5d:7e:8a:0c:a8:7f:f9:c2:46:e9:19:db: 0c:52:cb:4e:33:da:a1:fe:f0:28:a5:d2:3c:dc:1b: fb:32:96:14:22:94:83:e3:ff:b8:b0:72:a4:cd:e2: f6:56:eb:ea:ea:02:27:64:a5:ed:2e:38:e9:23:51: 79:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:D7:4E:4A:14:1A:44:3E:40:AF:E0:46:E6:13:ED:48:74:CE:CB:BD X509v3 Authority Key Identifier: keyid:99:55:C5:A7:13:7E:B5:D4:7E:A2:4E:17:D2:7F:A9:2D:0B:42:FB:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mVXFpxN-tdR-ok4X0n-pLQtC-9g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/9453a0-e655-480e-b6a9-e39524e7a6ed/1/mVXFpxN-tdR-ok4X0n-pLQtC-9g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/9453a0-e655-480e-b6a9-e39524e7a6ed/1/mVXFpxN-tdR-ok4X0n-pLQtC-9g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:64:a8:3c:c0:d2:37:35:c2:f7:68:37:97:96:37:65:78:c1: 26:e7:a5:b0:92:18:6e:c4:99:69:83:00:0f:df:6f:86:b1:54: b1:af:65:2c:a3:04:6f:f2:91:6f:3e:e6:f7:36:02:65:89:29: 5d:73:ff:57:b7:d8:aa:2b:2c:72:29:a2:80:83:aa:34:d2:69: 92:f5:5c:2c:0e:bb:b8:db:86:ee:b7:2e:76:c6:28:b0:38:b8: ae:0a:11:08:82:7f:48:5c:02:d4:9f:a4:6a:b0:85:c4:dd:fa: cb:b4:91:bc:ff:7c:39:d1:b6:53:06:05:ed:fc:7f:95:d7:9e: bc:49:5a:b8:08:fe:22:d8:08:cb:27:0d:a9:87:62:5e:9a:69: 99:71:9f:6d:c1:82:48:04:ae:e3:46:ef:c1:88:b5:f9:70:d9: 99:60:4c:6b:a5:11:07:09:8c:71:5b:70:56:32:81:0c:6e:6d: 48:10:84:1f:7e:b0:8b:08:ae:16:03:52:99:11:f6:4f:f1:c0: 38:96:73:27:6d:29:fc:d4:59:ca:68:e7:d4:61:59:1c:b2:5c: 00:e6:d0:e6:7f:2a:78:34:68:35:0b:d5:6c:75:cc:0a:60:96: 01:e6:f3:87:86:16:b2:9e:9f:ac:cb:02:dc:55:59:1f:98:6b: 97:52:d5:7a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP7G2uaK9sB97XSsX1yemMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk5NTVjNWE3MTM3ZWI1ZDQ3ZWEyNGUxN2QyN2ZhOTJkMGI0 MmZiZDgwHhcNMjUxMjA2MDYwMDUxWhcNMjUxMjA3MDYwMDUxWjAzMTEwLwYDVQQD Eyg3MGQ3NGU0YTE0MWE0NDNlNDBhZmUwNDZlNjEzZWQ0ODc0Y2VjYmJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0lUx+acwn9JG9jFk94lI2fhkRo+U DJgRpHfYby4h/b1ody0EwhOOh2K9LeOPjOiO22SfaFkmO36WnWuCNfAQbkLfJeeS 2W2wsIMAQd3L4cgvux4olf3aaxQ34CV6bS3EezZL3L3WG6vxPhfV0YfM97kfJjhk VV8qfJZEybG2YUMOhsBKRzXVqLXoOVC06cKM4U9Uv3xCsSGLiGywWIPSyuCCZ0iI rh2z5pgu0F0Q+uLNbn+RuvZ+vIVhwipzLq7lF+Ob3wRdfooMqH/5wkbpGdsMUstO M9qh/vAopdI83Bv7MpYUIpSD4/+4sHKkzeL2Vuvq6gInZKXtLjjpI1F5mQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHDXTkoUGkQ+QK/gRuYT7Uh0zsu9MB8GA1UdIwQY MBaAFJlVxacTfrXUfqJOF9J/qS0LQvvYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbVZYRnB4Ti10ZFItb2s0WDBuLXBMUXRDLTlnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy85NDUzYTAtZTY1NS00ODBlLWI2YTkt ZTM5NTI0ZTdhNmVkLzEvbVZYRnB4Ti10ZFItb2s0WDBuLXBMUXRDLTlnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy85NDUzYTAtZTY1NS00ODBlLWI2YTktZTM5NTI0ZTdhNmVk LzEvbVZYRnB4Ti10ZFItb2s0WDBuLXBMUXRDLTlnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcGSoPMDS NzXC92g3l5Y3ZXjBJuelsJIYbsSZaYMAD99vhrFUsa9lLKMEb/KRbz7m9zYCZYkp XXP/V7fYqisscimigIOqNNJpkvVcLA67uNuG7rcudsYosDi4rgoRCIJ/SFwC1J+k arCFxN36y7SRvP98OdG2UwYF7fx/ldeevElauAj+ItgIyycNqYdiXpppmXGfbcGC SASu40bvwYi1+XDZmWBMa6URBwmMcVtwVjKBDG5tSBCEH36wiwiuFgNSmRH2T/HA OJZzJ20p/NRZymjn1GFZHLJcAObQ5n8qeDRoNQvVbHXMCmCWAebzh4YWsp6frMsC 3FVZH5hrl1LVeg== -----END CERTIFICATE-----Generated at Sat Dec 6 10:56:10 2025 by rpki-client