This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/a70e5f-0480-415c-8512-921a2e7a5608/1/MdsPiDz5RJFFHpCMbmgqzjaxNgI.mft File: MdsPiDz5RJFFHpCMbmgqzjaxNgI.mft (raw, json) Hash identifier: jhAeGDMD4DukJdn5dVE2nmSwQaVJhG5flSNCSAKLWEc= Subject key identifier: F9:88:AF:7C:F2:3C:72:54:D1:7F:11:56:C9:96:67:23:CC:47:70:27 Authority key identifier: 31:DB:0F:88:3C:F9:44:91:45:1E:90:8C:6E:68:2A:CE:36:B1:36:02 Certificate issuer: /CN=31db0f883cf94491451e908c6e682ace36b13602 Certificate serial: 019AF3F77977F0AAA14A0188D984D0C7CB82 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdsPiDz5RJFFHpCMbmgqzjaxNgI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/a70e5f-0480-415c-8512-921a2e7a5608/1/MdsPiDz5RJFFHpCMbmgqzjaxNgI.mft Manifest number: 0972 Signing time: Sat 06 Dec 2025 14:01:13 +0000 Manifest this update: Sat 06 Dec 2025 14:01:13 +0000 Manifest next update: Sun 07 Dec 2025 14:01:13 +0000 Files and hashes: 1: MdsPiDz5RJFFHpCMbmgqzjaxNgI.crl (hash: P8jmifLaI53BH91EAyFKNdrmGOzqU0Byq9TBwmrt7FU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/a70e5f-0480-415c-8512-921a2e7a5608/1/MdsPiDz5RJFFHpCMbmgqzjaxNgI.crl rsync://rpki.ripe.net/repository/DEFAULT/04/a70e5f-0480-415c-8512-921a2e7a5608/1/MdsPiDz5RJFFHpCMbmgqzjaxNgI.mft rsync://rpki.ripe.net/repository/DEFAULT/MdsPiDz5RJFFHpCMbmgqzjaxNgI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f7:79:77:f0:aa:a1:4a:01:88:d9:84:d0:c7:cb:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31db0f883cf94491451e908c6e682ace36b13602 Validity Not Before: Dec 6 14:01:13 2025 GMT Not After : Dec 7 14:01:13 2025 GMT Subject: CN=f988af7cf23c7254d17f1156c9966723cc477027 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:ed:8d:91:82:bd:56:02:6d:23:e4:0a:84:2b: 63:db:3a:bb:3a:68:ce:3d:77:aa:d1:b7:8e:23:dd: 3e:5f:ef:d9:4f:99:d1:a5:fe:18:6c:10:45:94:45: 33:c7:c5:25:ba:d7:7f:e5:3f:0a:59:0d:b4:7a:f3: 3c:b0:9d:5c:8d:ea:3a:42:8f:94:ad:24:e1:c5:22: ed:54:68:05:b3:0a:cf:93:62:69:47:01:7c:76:af: 86:e3:dd:e0:76:2c:88:31:28:02:5d:35:a8:83:39: 45:62:e7:62:ff:b4:8d:36:16:e6:f6:81:20:03:dc: 53:18:81:62:62:a5:cc:30:0b:1b:54:04:3a:f0:5a: 93:ae:1b:9a:0b:b2:20:a2:27:b5:1b:2d:34:01:19: 30:7e:b0:6e:7d:a2:cd:6a:31:44:2c:0a:ec:2e:c3: c7:41:d8:65:3b:14:a1:d0:a6:5f:0c:42:db:a0:c7: 06:d8:a6:b7:de:2d:8c:b7:7f:77:b9:27:b8:1a:78: e4:32:6a:13:1a:5a:bd:47:14:dd:25:90:c4:7e:42: 23:14:f4:31:d7:d1:5d:c2:89:b9:d6:b0:02:09:27: a7:2b:5f:df:f6:93:76:7c:bf:3a:e0:1e:25:9e:d7: 28:63:30:b5:4c:84:e4:9d:57:95:4f:ca:de:3f:da: c5:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:88:AF:7C:F2:3C:72:54:D1:7F:11:56:C9:96:67:23:CC:47:70:27 X509v3 Authority Key Identifier: keyid:31:DB:0F:88:3C:F9:44:91:45:1E:90:8C:6E:68:2A:CE:36:B1:36:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdsPiDz5RJFFHpCMbmgqzjaxNgI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/a70e5f-0480-415c-8512-921a2e7a5608/1/MdsPiDz5RJFFHpCMbmgqzjaxNgI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/04/a70e5f-0480-415c-8512-921a2e7a5608/1/MdsPiDz5RJFFHpCMbmgqzjaxNgI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:2a:78:2a:b7:90:ce:d1:22:73:61:1b:e8:3a:52:65:f9:fa: a5:18:28:83:0d:9b:66:8d:40:23:91:cf:80:26:06:18:95:51: 83:2d:92:47:ee:8c:c7:44:48:f8:7f:a1:16:25:c8:12:c8:aa: 40:25:54:98:78:b3:d8:8e:24:27:d3:80:c6:8c:41:00:62:50: c5:23:39:a5:ce:0f:5a:35:e5:b6:c1:d8:0a:c8:d7:c1:c7:ea: 44:01:c8:a5:a5:90:a0:fa:ed:73:5a:7b:1b:43:56:d8:26:4a: cf:b5:0a:2c:29:da:17:fd:d4:27:0d:1a:1e:fd:f0:ff:39:3c: e7:7e:10:98:04:1d:67:c1:bd:64:ae:d1:c9:5c:3c:d6:cc:c7: 26:d1:1f:5e:21:7b:6a:6c:9a:56:a1:63:db:fe:5e:26:a4:50: 8f:b5:60:dd:30:3c:dc:c7:37:81:de:34:e4:75:da:e7:ec:c9: 77:2b:67:0c:2d:bb:39:09:da:7b:14:01:9f:66:a4:a3:f2:a7: 5c:d4:b7:3f:f4:cc:f0:aa:9e:0b:59:af:2c:aa:6d:99:0b:f6: 7e:c9:3a:ad:36:76:b6:54:47:8e:e2:74:89:19:d1:97:94:85: 1e:03:fa:8f:7a:5f:4e:8a:f9:19:f0:be:1c:ca:04:82:0c:fc: 1c:bb:c3:55 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz93l38KqhSgGI2YTQx8uCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxZGIwZjg4M2NmOTQ0OTE0NTFlOTA4YzZlNjgyYWNlMzZi MTM2MDIwHhcNMjUxMjA2MTQwMTEzWhcNMjUxMjA3MTQwMTEzWjAzMTEwLwYDVQQD EyhmOTg4YWY3Y2YyM2M3MjU0ZDE3ZjExNTZjOTk2NjcyM2NjNDc3MDI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArO2NkYK9VgJtI+QKhCtj2zq7OmjO PXeq0beOI90+X+/ZT5nRpf4YbBBFlEUzx8Ulutd/5T8KWQ20evM8sJ1cjeo6Qo+U rSThxSLtVGgFswrPk2JpRwF8dq+G493gdiyIMSgCXTWogzlFYudi/7SNNhbm9oEg A9xTGIFiYqXMMAsbVAQ68FqTrhuaC7Igoie1Gy00ARkwfrBufaLNajFELArsLsPH QdhlOxSh0KZfDELboMcG2Ka33i2Mt393uSe4GnjkMmoTGlq9RxTdJZDEfkIjFPQx 19Fdwom51rACCSenK1/f9pN2fL864B4lntcoYzC1TITknVeVT8reP9rFnwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPmIr3zyPHJU0X8RVsmWZyPMR3AnMB8GA1UdIwQY MBaAFDHbD4g8+USRRR6QjG5oKs42sTYCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTWRzUGlEejVSSkZGSHBDTWJtZ3F6amF4TmdJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC9hNzBlNWYtMDQ4MC00MTVjLTg1MTIt OTIxYTJlN2E1NjA4LzEvTWRzUGlEejVSSkZGSHBDTWJtZ3F6amF4TmdJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNC9hNzBlNWYtMDQ4MC00MTVjLTg1MTItOTIxYTJlN2E1NjA4 LzEvTWRzUGlEejVSSkZGSHBDTWJtZ3F6amF4TmdJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgyp4KreQ ztEic2Eb6DpSZfn6pRgogw2bZo1AI5HPgCYGGJVRgy2SR+6Mx0RI+H+hFiXIEsiq QCVUmHiz2I4kJ9OAxoxBAGJQxSM5pc4PWjXltsHYCsjXwcfqRAHIpaWQoPrtc1p7 G0NW2CZKz7UKLCnaF/3UJw0aHv3w/zk8534QmAQdZ8G9ZK7RyVw81szHJtEfXiF7 amyaVqFj2/5eJqRQj7Vg3TA83Mc3gd405HXa5+zJdytnDC27OQnaexQBn2ako/Kn XNS3P/TM8KqeC1mvLKptmQv2fsk6rTZ2tlRHjuJ0iRnRl5SFHgP6j3pfTor5GfC+ HMoEggz8HLvDVQ== -----END CERTIFICATE-----Generated at Sat Dec 6 17:11:48 2025 by rpki-client