This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/6f8f43-1a19-410f-a2f3-e4ac706da148/1/MRhMnotqpAfA1z7QugYwdfYxTjY.mft File: MRhMnotqpAfA1z7QugYwdfYxTjY.mft (raw, json) Hash identifier: RhSuP3+PhjfLJ4Ew5VOIKgsoNu9MoWkLkBBkw7ZGNqU= Subject key identifier: BE:B4:37:E2:2C:F2:57:28:E2:EF:A4:F9:83:93:DA:2F:7B:C5:E3:CB Authority key identifier: 31:18:4C:9E:8B:6A:A4:07:C0:D7:3E:D0:BA:06:30:75:F6:31:4E:36 Certificate issuer: /CN=31184c9e8b6aa407c0d73ed0ba063075f6314e36 Certificate serial: 019AF23FDC5822A25C66AAAB32CD806F8244 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MRhMnotqpAfA1z7QugYwdfYxTjY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/6f8f43-1a19-410f-a2f3-e4ac706da148/1/MRhMnotqpAfA1z7QugYwdfYxTjY.mft Manifest number: 0837 Signing time: Sat 06 Dec 2025 06:01:02 +0000 Manifest this update: Sat 06 Dec 2025 06:01:02 +0000 Manifest next update: Sun 07 Dec 2025 06:01:02 +0000 Files and hashes: 1: M16uuK8RBAhq-G4iUMFVGeS4VOA.roa (hash: Tzmv8XvI8c70nplaF0O7on0dN4ghnMF0KoTaadCmRAo=) 2: MRhMnotqpAfA1z7QugYwdfYxTjY.crl (hash: /gfnfcx9s7wZo3X+p1EmhiRuhrK12OxGVlhTCjI1X0M=) 3: j0wVGA_XYNpaj0gdPVnYetQ4kdo.roa (hash: LDoymRkSd4Uoyu5Lf7qh9Z/0YCixabChwL/74B3fLbA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/6f8f43-1a19-410f-a2f3-e4ac706da148/1/MRhMnotqpAfA1z7QugYwdfYxTjY.crl rsync://rpki.ripe.net/repository/DEFAULT/03/6f8f43-1a19-410f-a2f3-e4ac706da148/1/MRhMnotqpAfA1z7QugYwdfYxTjY.mft rsync://rpki.ripe.net/repository/DEFAULT/MRhMnotqpAfA1z7QugYwdfYxTjY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:dc:58:22:a2:5c:66:aa:ab:32:cd:80:6f:82:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31184c9e8b6aa407c0d73ed0ba063075f6314e36 Validity Not Before: Dec 6 06:01:02 2025 GMT Not After : Dec 7 06:01:02 2025 GMT Subject: CN=beb437e22cf25728e2efa4f98393da2f7bc5e3cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:9a:f5:13:61:a8:41:36:5b:0e:ba:15:2a:bd: 3a:16:5e:a6:94:88:0e:07:92:82:9d:af:aa:db:da: f7:1f:46:a4:07:c2:83:da:a7:f6:aa:c7:8f:b5:15: 59:e9:7c:7c:8d:84:9b:c0:d2:3b:52:ec:bb:83:35: 34:38:97:94:77:3c:24:b1:e7:8e:75:4a:90:33:a6: 36:98:0a:9d:46:de:dc:2f:0e:29:5c:3d:90:1c:60: e2:2e:8e:8e:1d:57:a9:d1:60:16:1d:dd:91:7a:c6: 30:35:9d:c3:86:3a:84:4f:8c:65:ca:ab:8e:14:cd: 5d:3a:72:95:75:be:33:53:ea:fb:fb:58:73:94:78: ae:e1:0c:81:14:e8:8d:67:ff:b2:47:66:39:b2:a9: 8e:23:4e:81:a4:be:12:3d:b1:4e:5b:f3:d4:a7:54: ce:8e:d9:83:38:64:77:64:9e:1e:73:a4:6a:d6:3b: f1:9f:00:63:4e:89:bd:9d:4e:1b:b5:3d:98:62:e9: 1c:6f:86:3a:3f:73:8a:d4:94:1b:2c:a9:17:37:7f: 8a:25:a6:8b:b7:2b:4a:8a:1f:7e:b5:a1:c7:65:1d: 9a:4d:5d:94:d3:7b:2d:52:66:2b:e7:a3:a1:53:fa: ee:c8:a2:64:05:66:e7:7d:1c:68:24:53:ed:8f:e7: 0e:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:B4:37:E2:2C:F2:57:28:E2:EF:A4:F9:83:93:DA:2F:7B:C5:E3:CB X509v3 Authority Key Identifier: keyid:31:18:4C:9E:8B:6A:A4:07:C0:D7:3E:D0:BA:06:30:75:F6:31:4E:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MRhMnotqpAfA1z7QugYwdfYxTjY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/6f8f43-1a19-410f-a2f3-e4ac706da148/1/MRhMnotqpAfA1z7QugYwdfYxTjY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/6f8f43-1a19-410f-a2f3-e4ac706da148/1/MRhMnotqpAfA1z7QugYwdfYxTjY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:b1:b7:aa:c5:f2:8c:4f:66:4f:e7:53:37:3c:a1:dc:9d:56: c0:31:68:b5:eb:1e:75:d3:16:c9:7c:bf:20:6d:6f:a9:99:48: 59:4d:42:ed:66:4b:23:1e:03:72:dd:fb:cb:0e:8b:30:53:53: e7:c4:9d:68:82:fd:3a:a3:5c:6a:32:8d:d2:6a:17:3e:36:7d: 1b:b0:79:ab:b2:e2:aa:a2:4e:58:39:c2:0f:6e:85:f4:21:27: 15:b8:b0:8e:79:aa:b0:5a:75:fd:c7:db:20:0f:de:95:01:01: cd:58:d0:4a:74:63:42:65:54:a5:6e:74:d3:52:3f:31:0b:54: 43:1d:c3:ae:3b:11:72:14:55:2d:b1:f0:c3:f8:0a:b4:6b:fd: ce:1a:de:77:13:2a:59:40:e3:00:19:4c:40:61:ae:78:45:3e: d6:77:73:43:0f:ef:58:99:e9:11:8e:71:49:26:58:13:35:f1: 9d:39:72:15:c2:ce:be:22:30:80:1e:9f:91:71:bc:79:6f:62: 94:28:56:4f:a0:7a:8e:b4:e6:b7:3a:13:86:6c:4e:49:d0:22: c4:16:0c:9a:cc:8b:59:a4:52:78:b8:8d:c9:46:75:7c:c5:75: 28:d7:49:51:a8:3d:6f:86:54:f5:30:0b:ab:ac:75:09:20:c8: 53:ac:99:ec -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP9xYIqJcZqqrMs2Ab4JEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxMTg0YzllOGI2YWE0MDdjMGQ3M2VkMGJhMDYzMDc1ZjYz MTRlMzYwHhcNMjUxMjA2MDYwMTAyWhcNMjUxMjA3MDYwMTAyWjAzMTEwLwYDVQQD EyhiZWI0MzdlMjJjZjI1NzI4ZTJlZmE0Zjk4MzkzZGEyZjdiYzVlM2NiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxZr1E2GoQTZbDroVKr06Fl6mlIgO B5KCna+q29r3H0akB8KD2qf2qsePtRVZ6Xx8jYSbwNI7Uuy7gzU0OJeUdzwkseeO dUqQM6Y2mAqdRt7cLw4pXD2QHGDiLo6OHVep0WAWHd2ResYwNZ3DhjqET4xlyquO FM1dOnKVdb4zU+r7+1hzlHiu4QyBFOiNZ/+yR2Y5sqmOI06BpL4SPbFOW/PUp1TO jtmDOGR3ZJ4ec6Rq1jvxnwBjTom9nU4btT2YYukcb4Y6P3OK1JQbLKkXN3+KJaaL tytKih9+taHHZR2aTV2U03stUmYr56OhU/ruyKJkBWbnfRxoJFPtj+cOQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL60N+Is8lco4u+k+YOT2i97xePLMB8GA1UdIwQY MBaAFDEYTJ6LaqQHwNc+0LoGMHX2MU42MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTVJoTW5vdHFwQWZBMXo3UXVnWXdkZll4VGpZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy82ZjhmNDMtMWExOS00MTBmLWEyZjMt ZTRhYzcwNmRhMTQ4LzEvTVJoTW5vdHFwQWZBMXo3UXVnWXdkZll4VGpZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy82ZjhmNDMtMWExOS00MTBmLWEyZjMtZTRhYzcwNmRhMTQ4 LzEvTVJoTW5vdHFwQWZBMXo3UXVnWXdkZll4VGpZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAebG3qsXy jE9mT+dTNzyh3J1WwDFoteseddMWyXy/IG1vqZlIWU1C7WZLIx4Dct37yw6LMFNT 58SdaIL9OqNcajKN0moXPjZ9G7B5q7LiqqJOWDnCD26F9CEnFbiwjnmqsFp1/cfb IA/elQEBzVjQSnRjQmVUpW5001I/MQtUQx3DrjsRchRVLbHww/gKtGv9zhredxMq WUDjABlMQGGueEU+1ndzQw/vWJnpEY5xSSZYEzXxnTlyFcLOviIwgB6fkXG8eW9i lChWT6B6jrTmtzoThmxOSdAixBYMmsyLWaRSeLiNyUZ1fMV1KNdJUag9b4ZU9TAL q6x1CSDIU6yZ7A== -----END CERTIFICATE-----Generated at Sat Dec 6 11:57:36 2025 by rpki-client