This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/3f7463-4d4f-41a6-8d72-3951378aa766/1/mBPi9jUdO00eYapAFvGyz6YtfN8.mft File: mBPi9jUdO00eYapAFvGyz6YtfN8.mft (raw, json) Hash identifier: Eiaoxli7edeO01MJQzELNTdbQAlymX8SBLtFHpNJKQY= Subject key identifier: 56:07:68:D5:F4:1A:89:7F:F7:AF:4E:F8:D5:CD:06:4F:5D:9A:CA:9F Authority key identifier: 98:13:E2:F6:35:1D:3B:4D:1E:61:AA:40:16:F1:B2:CF:A6:2D:7C:DF Certificate issuer: /CN=9813e2f6351d3b4d1e61aa4016f1b2cfa62d7cdf Certificate serial: 019AF49BB335096E4648C050E9778D77321F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mBPi9jUdO00eYapAFvGyz6YtfN8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/3f7463-4d4f-41a6-8d72-3951378aa766/1/mBPi9jUdO00eYapAFvGyz6YtfN8.mft Manifest number: 0424 Signing time: Sat 06 Dec 2025 17:00:35 +0000 Manifest this update: Sat 06 Dec 2025 17:00:35 +0000 Manifest next update: Sun 07 Dec 2025 17:00:35 +0000 Files and hashes: 1: N0qByPu3emMo9XfORXwQEiEDLX4.roa (hash: WDWKjOtvs4aBJ9ngAGga+267IwwKrgiGUR6VHAFxV3g=) 2: RoGqfo5WHnk9aJGToptEEJnYgSQ.roa (hash: L10AuIcaDMRz0t+d0kRw1yKzyj6eu5ePd1bWDs52MY4=) 3: dXZ-6UVHqdia25OyDn-Duexa4bY.roa (hash: 0T5UCEoUYDMxK/4Yih5THGiZdvmX2Rir43/xhLtG52s=) 4: ffVCJAudGRklTh6J2p53gbRPIvk.roa (hash: DvmrtTZ+4GX+XZD2/G6E6Uk/XxFpGuY4Z0oM1q4ZEeI=) 5: gkNUdTJYKI-HrI5siVhEhSliy48.roa (hash: ABXVZgoh60JAitHXcWT+7NbO1hc9hcd5tRCQ91UiLVQ=) 6: mBPi9jUdO00eYapAFvGyz6YtfN8.crl (hash: F6htkpHF68kEIyYbjCBCwOIoO9IG7E2p6eoe/aiVQHw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/3f7463-4d4f-41a6-8d72-3951378aa766/1/mBPi9jUdO00eYapAFvGyz6YtfN8.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/3f7463-4d4f-41a6-8d72-3951378aa766/1/mBPi9jUdO00eYapAFvGyz6YtfN8.mft rsync://rpki.ripe.net/repository/DEFAULT/mBPi9jUdO00eYapAFvGyz6YtfN8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 17:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:9b:b3:35:09:6e:46:48:c0:50:e9:77:8d:77:32:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9813e2f6351d3b4d1e61aa4016f1b2cfa62d7cdf Validity Not Before: Dec 6 17:00:35 2025 GMT Not After : Dec 7 17:00:35 2025 GMT Subject: CN=560768d5f41a897ff7af4ef8d5cd064f5d9aca9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:f3:0c:ca:3b:83:90:af:e8:e9:35:71:2c:44: 01:b6:82:e0:07:20:a0:5c:96:f4:ac:49:b2:67:b7: 29:11:4a:3a:ef:d9:8f:ab:70:39:78:5c:02:bf:9d: da:8f:fd:16:a7:ca:19:9d:eb:6d:3a:ef:fa:4e:d5: 94:da:54:84:1d:9c:85:cc:58:5b:ae:a1:0e:6c:e8: 6a:b4:11:28:65:67:9d:e5:ee:a3:c1:84:c3:48:95: 36:ef:98:90:97:e5:8a:ce:88:64:c4:43:b9:18:5d: d6:fb:7d:19:7b:6d:6b:10:08:e6:04:db:94:75:fc: a2:ff:7e:7b:1f:e7:8b:31:ae:ec:61:a4:0c:49:9c: a6:01:a0:70:01:02:aa:47:3e:55:b0:60:cb:4c:26: e8:52:f3:bc:eb:d5:9f:1b:26:c6:34:f6:5a:1d:8f: fc:85:e6:bb:50:f2:65:7a:be:31:3a:81:5d:5d:dd: 87:a0:cf:6f:fa:fa:64:6f:a0:c6:3d:25:16:80:fa: 39:f3:8a:33:92:ae:db:4f:75:bb:11:74:e4:b5:18: c1:6c:5b:67:a8:8e:d5:4e:2c:fe:4c:fc:aa:80:df: bd:c4:92:43:b6:7b:8a:84:bb:d8:33:a4:05:1a:33: 98:a1:0b:f2:e7:e1:00:49:93:d8:cf:10:c2:df:df: 13:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:07:68:D5:F4:1A:89:7F:F7:AF:4E:F8:D5:CD:06:4F:5D:9A:CA:9F X509v3 Authority Key Identifier: keyid:98:13:E2:F6:35:1D:3B:4D:1E:61:AA:40:16:F1:B2:CF:A6:2D:7C:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mBPi9jUdO00eYapAFvGyz6YtfN8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/3f7463-4d4f-41a6-8d72-3951378aa766/1/mBPi9jUdO00eYapAFvGyz6YtfN8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/3f7463-4d4f-41a6-8d72-3951378aa766/1/mBPi9jUdO00eYapAFvGyz6YtfN8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:9f:44:5e:a1:11:33:cd:b7:72:8e:f3:c7:5d:9b:44:8b:46: 7c:86:e5:46:05:9a:4b:c9:0b:40:b4:44:c3:d8:02:55:c5:f9: e6:c7:a6:14:d1:22:63:6e:8a:d9:93:0b:66:d9:09:3a:d1:b0: 25:6f:19:bd:0a:b7:40:c5:51:f8:19:c6:c6:58:45:95:72:c4: ad:9e:9b:92:78:09:9b:de:cd:49:62:ee:92:bc:87:92:e4:ae: 7d:06:f7:57:47:a9:ae:f0:b4:61:48:de:85:5f:61:67:fc:54: 98:06:d3:a8:99:9b:94:46:fd:91:d4:43:7a:0e:ed:48:c2:4a: 40:83:8a:13:24:24:31:6e:e4:57:95:05:e8:00:41:ef:9b:c2: 7e:26:43:a3:57:9d:4d:1e:ab:e2:bb:55:a4:6b:af:b7:66:62: 58:a0:61:40:35:0f:e0:a7:5e:fc:dd:5e:1b:33:47:95:d2:a2: f1:a6:b6:1f:14:e6:32:67:dd:d0:27:ae:f5:cd:13:c9:24:b0: af:c2:9f:a0:10:39:4b:79:c3:8b:e9:2a:5e:0c:10:c2:77:e4: f2:46:02:44:4f:53:2e:a1:9f:5e:c3:ee:e4:65:cb:07:34:9f: 17:10:c3:b0:e6:19:e2:9a:65:b6:46:36:70:cd:dc:b7:47:6e: 91:f7:02:bc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0m7M1CW5GSMBQ6XeNdzIfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk4MTNlMmY2MzUxZDNiNGQxZTYxYWE0MDE2ZjFiMmNmYTYy ZDdjZGYwHhcNMjUxMjA2MTcwMDM1WhcNMjUxMjA3MTcwMDM1WjAzMTEwLwYDVQQD Eyg1NjA3NjhkNWY0MWE4OTdmZjdhZjRlZjhkNWNkMDY0ZjVkOWFjYTlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAovMMyjuDkK/o6TVxLEQBtoLgByCg XJb0rEmyZ7cpEUo679mPq3A5eFwCv53aj/0Wp8oZnettOu/6TtWU2lSEHZyFzFhb rqEObOhqtBEoZWed5e6jwYTDSJU275iQl+WKzohkxEO5GF3W+30Ze21rEAjmBNuU dfyi/357H+eLMa7sYaQMSZymAaBwAQKqRz5VsGDLTCboUvO869WfGybGNPZaHY/8 hea7UPJler4xOoFdXd2HoM9v+vpkb6DGPSUWgPo584ozkq7bT3W7EXTktRjBbFtn qI7VTiz+TPyqgN+9xJJDtnuKhLvYM6QFGjOYoQvy5+EASZPYzxDC398TgwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFYHaNX0Gol/969O+NXNBk9dmsqfMB8GA1UdIwQY MBaAFJgT4vY1HTtNHmGqQBbxss+mLXzfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbUJQaTlqVWRPMDBlWWFwQUZ2R3l6Nll0Zk44LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi8zZjc0NjMtNGQ0Zi00MWE2LThkNzIt Mzk1MTM3OGFhNzY2LzEvbUJQaTlqVWRPMDBlWWFwQUZ2R3l6Nll0Zk44Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi8zZjc0NjMtNGQ0Zi00MWE2LThkNzItMzk1MTM3OGFhNzY2 LzEvbUJQaTlqVWRPMDBlWWFwQUZ2R3l6Nll0Zk44LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn59EXqER M823co7zx12bRItGfIblRgWaS8kLQLREw9gCVcX55semFNEiY26K2ZMLZtkJOtGw JW8ZvQq3QMVR+BnGxlhFlXLErZ6bkngJm97NSWLukryHkuSufQb3V0eprvC0YUje hV9hZ/xUmAbTqJmblEb9kdRDeg7tSMJKQIOKEyQkMW7kV5UF6ABB75vCfiZDo1ed TR6r4rtVpGuvt2ZiWKBhQDUP4Kde/N1eGzNHldKi8aa2HxTmMmfd0Ceu9c0TySSw r8KfoBA5S3nDi+kqXgwQwnfk8kYCRE9TLqGfXsPu5GXLBzSfFxDDsOYZ4ppltkY2 cM3ct0dukfcCvA== -----END CERTIFICATE-----Generated at Sun Dec 7 01:52:52 2025 by rpki-client