This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/ee9519-ff61-4679-9015-80e427596b5d/1/McsA0vhEAYEMMgC1L6OI6TZR3fM.mft File: McsA0vhEAYEMMgC1L6OI6TZR3fM.mft (raw, json) Hash identifier: Y2zkLkG8Uv7ODk8XD0mEIENsBck3n28xC13hx7Hj/L8= Subject key identifier: 14:45:B5:91:87:DF:6C:28:6F:E1:49:A9:32:17:CB:3F:CC:51:57:8A Authority key identifier: 31:CB:00:D2:F8:44:01:81:0C:32:00:B5:2F:A3:88:E9:36:51:DD:F3 Certificate issuer: /CN=31cb00d2f84401810c3200b52fa388e93651ddf3 Certificate serial: 019AF1D20514F78FCF1F0A28B962B3402B3B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/McsA0vhEAYEMMgC1L6OI6TZR3fM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/ee9519-ff61-4679-9015-80e427596b5d/1/McsA0vhEAYEMMgC1L6OI6TZR3fM.mft Manifest number: 06E7 Signing time: Sat 06 Dec 2025 04:01:03 +0000 Manifest this update: Sat 06 Dec 2025 04:01:03 +0000 Manifest next update: Sun 07 Dec 2025 04:01:03 +0000 Files and hashes: 1: 6QZXrPa3sBN80OwKH97Qmpz11-w.roa (hash: UdHrwly/eXNnDWvZzXVWVnCJ0eO0DldyC6uMO4NJQeg=) 2: McsA0vhEAYEMMgC1L6OI6TZR3fM.crl (hash: 8D0xVCAzzzSunXPlRqF4NzC6apH9hhyNLPvAiJ9FK8Y=) 3: Q4ARpo7c_FOTpND5OOktY5HSyqo.roa (hash: ILsFUwZlsj6McFw7LlD/gZjYBWIJxR6ph/CcN+j5KSY=) 4: hyttk-VciYASeJhwhte3fbo6duo.roa (hash: 7BwJiVdV5v0GFak7++7KK6Hv1MdzUEXFe+dIhNvsD1A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/ee9519-ff61-4679-9015-80e427596b5d/1/McsA0vhEAYEMMgC1L6OI6TZR3fM.crl rsync://rpki.ripe.net/repository/DEFAULT/11/ee9519-ff61-4679-9015-80e427596b5d/1/McsA0vhEAYEMMgC1L6OI6TZR3fM.mft rsync://rpki.ripe.net/repository/DEFAULT/McsA0vhEAYEMMgC1L6OI6TZR3fM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:05:14:f7:8f:cf:1f:0a:28:b9:62:b3:40:2b:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31cb00d2f84401810c3200b52fa388e93651ddf3 Validity Not Before: Dec 6 04:01:03 2025 GMT Not After : Dec 7 04:01:03 2025 GMT Subject: CN=1445b59187df6c286fe149a93217cb3fcc51578a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:cc:ae:97:cc:91:8f:5d:90:4b:83:68:21:d3: 1c:0c:0f:4a:6d:01:17:c2:97:41:00:af:7c:cc:a9: 34:f1:b7:89:c9:fe:00:16:7d:e3:5f:8b:33:48:88: ba:df:28:2b:aa:cf:2d:67:fc:f1:46:4f:fa:e8:af: 71:4f:3c:57:b4:ca:3d:66:83:0a:ac:42:50:d8:c5: e1:a2:21:9b:32:e0:de:52:a4:58:ea:b9:00:99:f0: ab:34:1a:1d:d7:0b:3f:79:8a:0a:8b:f5:f5:6e:72: d3:3a:de:52:63:24:50:38:b3:8b:3d:0f:db:f7:c8: 14:84:b5:dd:9d:a0:bf:6b:60:c3:26:89:5a:5a:f2: 08:b3:d1:e2:8e:37:72:a1:1f:4f:eb:fc:21:5d:62: 7b:df:c7:cf:04:f4:02:d4:34:c5:8b:48:3f:76:62: 00:c0:61:3d:36:b6:7f:40:41:b4:7d:2f:e5:dc:e3: dd:57:ae:9a:43:2f:72:67:6c:6f:4c:8a:19:28:9a: 7c:f5:51:18:df:f3:7e:99:c2:6d:95:e3:5f:7c:c4: 47:1d:ad:19:60:76:7b:cb:bf:81:bb:1c:0d:30:d7: 88:79:73:dc:34:22:17:77:06:02:cd:e7:56:62:e9: 7c:91:8a:66:0f:47:dc:3e:3a:47:f7:13:2a:8f:76: fd:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:45:B5:91:87:DF:6C:28:6F:E1:49:A9:32:17:CB:3F:CC:51:57:8A X509v3 Authority Key Identifier: keyid:31:CB:00:D2:F8:44:01:81:0C:32:00:B5:2F:A3:88:E9:36:51:DD:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/McsA0vhEAYEMMgC1L6OI6TZR3fM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/ee9519-ff61-4679-9015-80e427596b5d/1/McsA0vhEAYEMMgC1L6OI6TZR3fM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/ee9519-ff61-4679-9015-80e427596b5d/1/McsA0vhEAYEMMgC1L6OI6TZR3fM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:db:f1:94:fe:d5:45:93:80:b4:da:ba:2e:bb:d0:ae:8e:ed: a9:c8:93:a8:5b:42:7b:f7:02:45:0f:68:19:1c:71:a5:8c:4d: ca:ef:58:0e:11:df:66:15:d3:8c:fa:b5:f8:84:ea:09:fd:92: bb:92:42:38:fc:ee:03:30:a2:a0:b0:97:66:39:3f:9f:ae:f5: 63:5a:68:16:1d:f1:30:1e:7f:03:dc:02:fc:b4:0a:e6:9b:22: a2:0a:af:e9:3a:6d:d9:57:7d:70:26:b8:28:05:fd:61:14:8e: d0:a9:a4:d8:85:86:bd:ec:05:25:2b:5b:05:8c:22:c4:91:92: 0a:58:c5:2b:45:6f:79:3c:63:f7:b3:d7:a3:e2:e7:0f:aa:24: 2b:6a:4e:fd:fa:16:c2:ef:ac:4a:03:ca:83:d4:a9:c1:cf:2f: 59:fb:b3:60:88:b9:0b:13:95:32:da:04:7a:da:36:29:b5:a7: 36:a6:64:6a:f4:bf:30:73:d0:f2:5d:ff:78:21:75:3e:cb:60: 09:e9:7e:4c:69:03:3d:d6:10:b7:e3:ae:39:08:53:07:d5:8b: 91:8c:a4:d1:95:57:15:c7:84:d0:48:07:65:ff:5c:d1:52:34: 26:74:51:1b:66:df:98:b3:20:3a:9d:54:cc:50:a6:59:dd:37: 4a:4f:cb:66 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0gUU94/PHwoouWKzQCs7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxY2IwMGQyZjg0NDAxODEwYzMyMDBiNTJmYTM4OGU5MzY1 MWRkZjMwHhcNMjUxMjA2MDQwMTAzWhcNMjUxMjA3MDQwMTAzWjAzMTEwLwYDVQQD EygxNDQ1YjU5MTg3ZGY2YzI4NmZlMTQ5YTkzMjE3Y2IzZmNjNTE1NzhhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt8yul8yRj12QS4NoIdMcDA9KbQEX wpdBAK98zKk08beJyf4AFn3jX4szSIi63ygrqs8tZ/zxRk/66K9xTzxXtMo9ZoMK rEJQ2MXhoiGbMuDeUqRY6rkAmfCrNBod1ws/eYoKi/X1bnLTOt5SYyRQOLOLPQ/b 98gUhLXdnaC/a2DDJolaWvIIs9HijjdyoR9P6/whXWJ738fPBPQC1DTFi0g/dmIA wGE9NrZ/QEG0fS/l3OPdV66aQy9yZ2xvTIoZKJp89VEY3/N+mcJtleNffMRHHa0Z YHZ7y7+BuxwNMNeIeXPcNCIXdwYCzedWYul8kYpmD0fcPjpH9xMqj3b97QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBRFtZGH32wob+FJqTIXyz/MUVeKMB8GA1UdIwQY MBaAFDHLANL4RAGBDDIAtS+jiOk2Ud3zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTWNzQTB2aEVBWUVNTWdDMUw2T0k2VFpSM2ZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9lZTk1MTktZmY2MS00Njc5LTkwMTUt ODBlNDI3NTk2YjVkLzEvTWNzQTB2aEVBWUVNTWdDMUw2T0k2VFpSM2ZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS9lZTk1MTktZmY2MS00Njc5LTkwMTUtODBlNDI3NTk2YjVk LzEvTWNzQTB2aEVBWUVNTWdDMUw2T0k2VFpSM2ZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK9vxlP7V RZOAtNq6LrvQro7tqciTqFtCe/cCRQ9oGRxxpYxNyu9YDhHfZhXTjPq1+ITqCf2S u5JCOPzuAzCioLCXZjk/n671Y1poFh3xMB5/A9wC/LQK5psiogqv6Tpt2Vd9cCa4 KAX9YRSO0Kmk2IWGvewFJStbBYwixJGSCljFK0VveTxj97PXo+LnD6okK2pO/foW wu+sSgPKg9Spwc8vWfuzYIi5CxOVMtoEeto2KbWnNqZkavS/MHPQ8l3/eCF1Pstg Cel+TGkDPdYQt+OuOQhTB9WLkYyk0ZVXFceE0EgHZf9c0VI0JnRRG2bfmLMgOp1U zFCmWd03Sk/LZg== -----END CERTIFICATE-----Generated at Sat Dec 6 11:38:54 2025 by rpki-client