This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/2820d1-fd20-4889-834f-d527ce0d9930/1/MFxE6MlhoUUNCqshLw3scX0d77Y.mft File: MFxE6MlhoUUNCqshLw3scX0d77Y.mft (raw, json) Hash identifier: wyDfN/UczAiqFdFRocSR6HesO3fQGypgNXOj5HVtWKI= Subject key identifier: DE:8B:C0:52:80:96:CF:CC:23:C4:BF:7D:2D:7A:08:5C:50:51:16:15 Authority key identifier: 30:5C:44:E8:C9:61:A1:45:0D:0A:AB:21:2F:0D:EC:71:7D:1D:EF:B6 Certificate issuer: /CN=305c44e8c961a1450d0aab212f0dec717d1defb6 Certificate serial: 019AF31C1B59D8F7451EC8F1E7CE91C1C1E7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MFxE6MlhoUUNCqshLw3scX0d77Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/2820d1-fd20-4889-834f-d527ce0d9930/1/MFxE6MlhoUUNCqshLw3scX0d77Y.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 10:01:36 +0000 Manifest this update: Sat 06 Dec 2025 10:01:36 +0000 Manifest next update: Sun 07 Dec 2025 10:01:36 +0000 Files and hashes: 1: MFxE6MlhoUUNCqshLw3scX0d77Y.crl (hash: 4qKSUhtnoAwpPGGUpRCGA71ysYVMHD+ksDLVMUwlc7I=) 2: mJgdj-dzJHYIwfc18P0iKUu6K8Q.roa (hash: BwFiGax6tDOHoiiFhGtxEO6XUIlUJlP+Zm+e5NhOWpg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/2820d1-fd20-4889-834f-d527ce0d9930/1/MFxE6MlhoUUNCqshLw3scX0d77Y.crl rsync://rpki.ripe.net/repository/DEFAULT/09/2820d1-fd20-4889-834f-d527ce0d9930/1/MFxE6MlhoUUNCqshLw3scX0d77Y.mft rsync://rpki.ripe.net/repository/DEFAULT/MFxE6MlhoUUNCqshLw3scX0d77Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:1b:59:d8:f7:45:1e:c8:f1:e7:ce:91:c1:c1:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=305c44e8c961a1450d0aab212f0dec717d1defb6 Validity Not Before: Dec 6 10:01:36 2025 GMT Not After : Dec 7 10:01:36 2025 GMT Subject: CN=de8bc0528096cfcc23c4bf7d2d7a085c50511615 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:58:aa:de:8a:90:f3:04:6c:af:c8:51:a6:a4: 5c:ce:27:39:d6:78:9f:d6:6f:c0:75:e6:57:33:0e: b1:42:e9:ab:e3:ed:77:33:99:51:f5:07:a6:c3:b5: e6:c3:d7:8d:a2:f3:74:b3:a0:b9:ad:50:8c:50:28: ca:9e:cb:d2:a1:cb:fa:2d:cb:47:61:35:8b:14:23: 84:ab:3c:de:b2:75:29:51:82:73:4b:2f:e5:50:54: 03:0c:67:72:97:c6:4b:81:70:b6:5f:b8:3f:5b:5b: 33:2a:7b:b1:1b:3d:22:1e:85:31:e4:47:84:be:dd: d9:d0:f5:cc:6f:76:cc:59:03:d9:33:9f:8d:e2:19: 43:e3:63:f9:17:f2:bc:1f:1b:be:74:aa:e8:56:47: e7:d4:fa:9d:e7:72:df:bc:e6:9d:dc:f5:1f:51:37: 15:e9:f1:de:95:cd:11:1c:92:da:43:73:9f:59:d6: 3a:45:00:12:fa:cb:8f:e3:02:3a:32:7e:ba:2d:8f: c6:20:09:1d:2a:8e:f8:f9:10:bd:fc:0c:80:4b:f3: 0d:90:0a:24:f5:81:8a:7b:b9:ab:7f:7c:1e:31:e5: d8:36:0c:48:6f:ad:16:c5:b0:a8:7a:2b:0b:cc:1e: f6:a1:49:7e:85:f9:7e:cf:31:05:f9:2b:9a:ca:7c: d0:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:8B:C0:52:80:96:CF:CC:23:C4:BF:7D:2D:7A:08:5C:50:51:16:15 X509v3 Authority Key Identifier: keyid:30:5C:44:E8:C9:61:A1:45:0D:0A:AB:21:2F:0D:EC:71:7D:1D:EF:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MFxE6MlhoUUNCqshLw3scX0d77Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/2820d1-fd20-4889-834f-d527ce0d9930/1/MFxE6MlhoUUNCqshLw3scX0d77Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/2820d1-fd20-4889-834f-d527ce0d9930/1/MFxE6MlhoUUNCqshLw3scX0d77Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:73:04:b2:01:a3:ee:d3:e2:14:2f:6d:d8:48:0b:9c:bf:f1: c8:dc:52:49:bb:c6:f5:d3:0f:3b:00:d6:be:59:61:3e:e6:4c: ad:53:7e:ca:72:85:4a:ad:3a:a7:1d:52:ba:9c:08:ae:73:35: 01:e8:7d:f4:a6:4c:61:72:91:c3:35:1c:07:da:82:15:6d:9b: 04:21:f8:f8:09:f1:00:7c:c4:3d:b0:df:ce:1d:62:e0:8a:76: b5:1b:10:0e:a0:2e:fc:42:8a:2f:72:5d:4d:4f:ff:da:7a:07: 21:9f:fd:b8:16:bd:f8:56:2d:61:0f:da:75:33:7b:2b:51:f4: 35:be:4f:a2:af:df:01:37:e1:3b:ad:46:a0:58:a1:9c:66:4a: f7:c7:f3:0c:e2:8c:7f:10:a0:4a:69:92:c4:10:11:9a:7b:3e: 44:c2:cc:7b:fb:ff:e3:45:2c:b6:89:6d:61:46:8c:d1:13:a9: 05:01:b5:ce:25:0a:bd:95:f2:02:d2:07:80:aa:7a:6c:84:b8: 1f:75:c2:20:5c:f7:b7:87:fc:57:2b:be:6c:2c:b0:14:cf:ac: 0c:d3:39:12:78:9a:09:b3:45:c6:22:52:b4:45:62:b5:b3:66: 0a:f9:d8:05:a6:ed:c1:9f:07:b7:f2:89:d2:33:65:33:b5:3d: a9:31:b9:3d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHBtZ2PdFHsjx586RwcHnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwNWM0NGU4Yzk2MWExNDUwZDBhYWIyMTJmMGRlYzcxN2Qx ZGVmYjYwHhcNMjUxMjA2MTAwMTM2WhcNMjUxMjA3MTAwMTM2WjAzMTEwLwYDVQQD EyhkZThiYzA1MjgwOTZjZmNjMjNjNGJmN2QyZDdhMDg1YzUwNTExNjE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5liq3oqQ8wRsr8hRpqRczic51nif 1m/AdeZXMw6xQumr4+13M5lR9Qemw7Xmw9eNovN0s6C5rVCMUCjKnsvSocv6LctH YTWLFCOEqzzesnUpUYJzSy/lUFQDDGdyl8ZLgXC2X7g/W1szKnuxGz0iHoUx5EeE vt3Z0PXMb3bMWQPZM5+N4hlD42P5F/K8Hxu+dKroVkfn1Pqd53LfvOad3PUfUTcV 6fHelc0RHJLaQ3OfWdY6RQAS+suP4wI6Mn66LY/GIAkdKo74+RC9/AyAS/MNkAok 9YGKe7mrf3weMeXYNgxIb60WxbCoeisLzB72oUl+hfl+zzEF+SuaynzQGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN6LwFKAls/MI8S/fS16CFxQURYVMB8GA1UdIwQY MBaAFDBcROjJYaFFDQqrIS8N7HF9He+2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTUZ4RTZNbGhvVVVOQ3FzaEx3M3NjWDBkNzdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS8yODIwZDEtZmQyMC00ODg5LTgzNGYt ZDUyN2NlMGQ5OTMwLzEvTUZ4RTZNbGhvVVVOQ3FzaEx3M3NjWDBkNzdZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS8yODIwZDEtZmQyMC00ODg5LTgzNGYtZDUyN2NlMGQ5OTMw LzEvTUZ4RTZNbGhvVVVOQ3FzaEx3M3NjWDBkNzdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeHMEsgGj 7tPiFC9t2EgLnL/xyNxSSbvG9dMPOwDWvllhPuZMrVN+ynKFSq06px1SupwIrnM1 Aeh99KZMYXKRwzUcB9qCFW2bBCH4+AnxAHzEPbDfzh1i4Ip2tRsQDqAu/EKKL3Jd TU//2noHIZ/9uBa9+FYtYQ/adTN7K1H0Nb5Poq/fATfhO61GoFihnGZK98fzDOKM fxCgSmmSxBARmns+RMLMe/v/40UstoltYUaM0ROpBQG1ziUKvZXyAtIHgKp6bIS4 H3XCIFz3t4f8Vyu+bCywFM+sDNM5EniaCbNFxiJStEVitbNmCvnYBabtwZ8Ht/KJ 0jNlM7U9qTG5PQ== -----END CERTIFICATE-----Generated at Sat Dec 6 14:03:48 2025 by rpki-client