This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/13aaec-648a-43b6-a767-3af11c444835/1/MxSDS__K3sS4kl2gQu8N6YmYBFY.mft File: MxSDS__K3sS4kl2gQu8N6YmYBFY.mft (raw, json) Hash identifier: W0Qp8caP6zKSqlvUeY2+0mBQ8B7MbT/VNu1aL8KxEzU= Subject key identifier: F6:E8:22:CB:C8:D2:F3:3E:B4:86:C8:C0:6D:D5:C3:11:40:B4:0E:E4 Authority key identifier: 33:14:83:4B:FF:CA:DE:C4:B8:92:5D:A0:42:EF:0D:E9:89:98:04:56 Certificate issuer: /CN=3314834bffcadec4b8925da042ef0de989980456 Certificate serial: 019AF209A5E45C6CE444FCF0A6F2F43FAC5C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MxSDS__K3sS4kl2gQu8N6YmYBFY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/13aaec-648a-43b6-a767-3af11c444835/1/MxSDS__K3sS4kl2gQu8N6YmYBFY.mft Manifest number: 06 Signing time: Sat 06 Dec 2025 05:01:49 +0000 Manifest this update: Sat 06 Dec 2025 05:01:49 +0000 Manifest next update: Sun 07 Dec 2025 05:01:49 +0000 Files and hashes: 1: MxSDS__K3sS4kl2gQu8N6YmYBFY.crl (hash: y2/LgOmp3Gp6h2yjWabhrDrlzvRPBBCqbPHW6es9j2k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/13aaec-648a-43b6-a767-3af11c444835/1/MxSDS__K3sS4kl2gQu8N6YmYBFY.crl rsync://rpki.ripe.net/repository/DEFAULT/03/13aaec-648a-43b6-a767-3af11c444835/1/MxSDS__K3sS4kl2gQu8N6YmYBFY.mft rsync://rpki.ripe.net/repository/DEFAULT/MxSDS__K3sS4kl2gQu8N6YmYBFY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:a5:e4:5c:6c:e4:44:fc:f0:a6:f2:f4:3f:ac:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3314834bffcadec4b8925da042ef0de989980456 Validity Not Before: Dec 6 05:01:49 2025 GMT Not After : Dec 7 05:01:49 2025 GMT Subject: CN=f6e822cbc8d2f33eb486c8c06dd5c31140b40ee4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:29:65:26:28:4e:fd:46:03:1b:59:0e:69:51: 23:c1:76:b1:4e:d2:2e:de:f5:e7:1a:59:25:89:d6: 43:08:50:26:1b:cd:06:8e:ba:8f:ce:f0:26:9b:f6: 90:1c:b2:b3:3c:16:68:11:39:71:c0:d9:3c:12:1b: 45:95:88:1d:86:96:3f:8f:07:11:c2:b0:ad:e6:37: 55:4e:26:ce:b2:ed:f6:7d:e3:f9:8a:fb:1a:8a:3b: d1:d2:70:43:fb:6f:7d:db:fd:73:7a:15:28:7e:27: aa:4c:b5:2e:fd:48:47:3e:73:37:6a:dd:d8:ed:1a: 39:12:d5:43:9a:a2:65:46:36:55:9b:e3:99:ba:a7: 2f:a9:76:fd:00:fc:c6:c6:0c:b4:9b:a5:50:0b:98: 78:6e:3a:70:fd:29:f2:45:a5:01:81:e3:2b:46:eb: b9:1f:a0:43:ef:58:95:90:27:61:4d:1b:5a:4b:02: 15:7e:b2:a5:fc:00:5c:49:91:c9:47:ba:7a:51:36: d3:cc:32:28:f7:89:12:6d:be:38:ed:04:fa:40:58: ce:f0:37:8d:c1:f0:3d:9e:93:07:91:87:28:d3:ba: 31:58:d4:dd:36:f0:d3:cb:f6:51:6e:7f:7b:c1:3e: e1:f0:76:88:91:40:d1:1c:cc:76:a2:aa:20:31:db: 63:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:E8:22:CB:C8:D2:F3:3E:B4:86:C8:C0:6D:D5:C3:11:40:B4:0E:E4 X509v3 Authority Key Identifier: keyid:33:14:83:4B:FF:CA:DE:C4:B8:92:5D:A0:42:EF:0D:E9:89:98:04:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MxSDS__K3sS4kl2gQu8N6YmYBFY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/13aaec-648a-43b6-a767-3af11c444835/1/MxSDS__K3sS4kl2gQu8N6YmYBFY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/13aaec-648a-43b6-a767-3af11c444835/1/MxSDS__K3sS4kl2gQu8N6YmYBFY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:e0:39:3c:af:f5:20:b2:7b:54:c8:9d:db:cb:78:80:95:08: bf:8e:cf:1c:2d:77:8a:7e:b4:7d:00:9b:c1:80:2d:47:55:ab: 8b:38:b7:85:1b:7a:85:be:a0:c9:c0:92:99:1a:f0:e7:7f:ec: ce:8d:5e:9a:48:3e:76:fa:9e:33:c7:93:4e:da:8b:a8:50:14: 13:86:b2:11:cb:d9:fa:ef:e2:82:57:8f:90:ab:46:c5:df:57: c4:29:87:ff:b0:e9:25:6e:9a:f9:5f:3e:c3:01:9e:8a:5d:e3: 07:af:f5:fe:81:cf:3e:e9:d9:89:1f:6d:a5:54:43:28:eb:f7: bb:85:fb:a2:ed:6f:3f:29:a0:94:ee:0f:7e:63:1d:28:bf:65: 4c:44:66:e8:27:12:f3:af:36:b0:9b:14:21:13:41:e9:43:28: 22:99:94:7b:29:b6:e6:44:5b:ab:f8:f5:8c:3b:40:a9:8b:89: 74:8c:fe:08:11:63:fe:14:80:42:e8:85:ce:29:5a:11:76:66: c8:b4:84:21:55:fc:ea:0f:e3:a9:dd:ab:12:50:02:45:4e:8b: ee:05:8e:f5:ad:7a:d2:34:f7:9a:25:76:1b:35:20:39:ab:74: d2:53:2a:93:e9:91:37:03:35:7b:02:c8:cc:0a:34:09:ef:66: 1e:f2:91:c5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCaXkXGzkRPzwpvL0P6xcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMzMTQ4MzRiZmZjYWRlYzRiODkyNWRhMDQyZWYwZGU5ODk5 ODA0NTYwHhcNMjUxMjA2MDUwMTQ5WhcNMjUxMjA3MDUwMTQ5WjAzMTEwLwYDVQQD EyhmNmU4MjJjYmM4ZDJmMzNlYjQ4NmM4YzA2ZGQ1YzMxMTQwYjQwZWU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7yllJihO/UYDG1kOaVEjwXaxTtIu 3vXnGlklidZDCFAmG80GjrqPzvAmm/aQHLKzPBZoETlxwNk8EhtFlYgdhpY/jwcR wrCt5jdVTibOsu32feP5ivsaijvR0nBD+2992/1zehUofieqTLUu/UhHPnM3at3Y 7Ro5EtVDmqJlRjZVm+OZuqcvqXb9APzGxgy0m6VQC5h4bjpw/SnyRaUBgeMrRuu5 H6BD71iVkCdhTRtaSwIVfrKl/ABcSZHJR7p6UTbTzDIo94kSbb447QT6QFjO8DeN wfA9npMHkYco07oxWNTdNvDTy/ZRbn97wT7h8HaIkUDRHMx2oqogMdtjtQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPboIsvI0vM+tIbIwG3VwxFAtA7kMB8GA1UdIwQY MBaAFDMUg0v/yt7EuJJdoELvDemJmARWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTXhTRFNfX0szc1M0a2wyZ1F1OE42WW1ZQkZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy8xM2FhZWMtNjQ4YS00M2I2LWE3Njct M2FmMTFjNDQ0ODM1LzEvTXhTRFNfX0szc1M0a2wyZ1F1OE42WW1ZQkZZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy8xM2FhZWMtNjQ4YS00M2I2LWE3NjctM2FmMTFjNDQ0ODM1 LzEvTXhTRFNfX0szc1M0a2wyZ1F1OE42WW1ZQkZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAquA5PK/1 ILJ7VMid28t4gJUIv47PHC13in60fQCbwYAtR1Wrizi3hRt6hb6gycCSmRrw53/s zo1emkg+dvqeM8eTTtqLqFAUE4ayEcvZ+u/iglePkKtGxd9XxCmH/7DpJW6a+V8+ wwGeil3jB6/1/oHPPunZiR9tpVRDKOv3u4X7ou1vPymglO4PfmMdKL9lTERm6CcS 8682sJsUIRNB6UMoIpmUeym25kRbq/j1jDtAqYuJdIz+CBFj/hSAQuiFzilaEXZm yLSEIVX86g/jqd2rElACRU6L7gWO9a160jT3miV2GzUgOat00lMqk+mRNwM1ewLI zAo0Ce9mHvKRxQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:02:16 2025 by rpki-client