This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/0adcd8-8a4b-4923-bf36-814a611eca60/1/MptRPmVwb8qlQ6EaDkLSixCd87Y.mft File: MptRPmVwb8qlQ6EaDkLSixCd87Y.mft (raw, json) Hash identifier: k3Wtv4wXgcm+Z0rmW/C67vISEQkf4AMP2sbMQF6RdM4= Subject key identifier: A9:41:1A:54:C6:D2:EA:01:97:F6:DA:5A:96:A8:4A:F9:0F:B9:CF:8F Authority key identifier: 32:9B:51:3E:65:70:6F:CA:A5:43:A1:1A:0E:42:D2:8B:10:9D:F3:B6 Certificate issuer: /CN=329b513e65706fcaa543a11a0e42d28b109df3b6 Certificate serial: 019B3AC6925A146B28957F9910FB7FB7FE4D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MptRPmVwb8qlQ6EaDkLSixCd87Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/0adcd8-8a4b-4923-bf36-814a611eca60/1/MptRPmVwb8qlQ6EaDkLSixCd87Y.mft Manifest number: 1495 Signing time: Sat 20 Dec 2025 08:00:50 +0000 Manifest this update: Sat 20 Dec 2025 08:00:50 +0000 Manifest next update: Sun 21 Dec 2025 08:00:50 +0000 Files and hashes: 1: MptRPmVwb8qlQ6EaDkLSixCd87Y.crl (hash: 5Gg7XHvVEJN2bqDuX5fAq79JCIIkXUWyiZ5XbREXYAE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/0adcd8-8a4b-4923-bf36-814a611eca60/1/MptRPmVwb8qlQ6EaDkLSixCd87Y.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/0adcd8-8a4b-4923-bf36-814a611eca60/1/MptRPmVwb8qlQ6EaDkLSixCd87Y.mft rsync://rpki.ripe.net/repository/DEFAULT/MptRPmVwb8qlQ6EaDkLSixCd87Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 08:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:c6:92:5a:14:6b:28:95:7f:99:10:fb:7f:b7:fe:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=329b513e65706fcaa543a11a0e42d28b109df3b6 Validity Not Before: Dec 20 08:00:50 2025 GMT Not After : Dec 21 08:00:50 2025 GMT Subject: CN=a9411a54c6d2ea0197f6da5a96a84af90fb9cf8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:52:d3:9c:c1:d9:ab:c5:23:b8:0e:55:69:b2: c9:cc:a4:14:b8:4b:88:6b:40:ec:32:be:41:85:46: 7c:b0:c3:b7:5b:4a:cf:d8:c5:d1:8a:cc:92:d5:f7: b2:d8:e4:0b:18:5f:87:02:d2:55:9a:1a:d9:7d:95: 10:34:92:c9:aa:d2:61:7d:3f:ff:62:e7:68:86:42: c0:05:c5:83:8b:90:13:9c:c1:bb:35:fc:b3:7c:5b: 26:76:a3:b0:af:64:89:ea:cc:5f:29:0c:97:b3:51: 51:4c:88:33:67:12:fd:1c:58:18:12:53:1d:54:07: 13:c2:25:e1:ba:c6:59:c8:5f:32:50:63:77:69:a3: 7f:89:b3:cd:cd:15:54:62:a4:fc:73:14:2f:70:50: be:a2:42:42:c7:66:4b:db:ee:c1:a2:f7:ac:7f:57: 67:a5:7b:47:9c:4e:ef:c5:72:0b:7f:e9:98:bd:b6: 2a:d0:1f:e3:e1:ad:db:9b:9c:cd:27:38:19:e6:8f: 48:74:24:73:4b:59:7d:26:91:6f:54:1a:5a:92:00: ec:0a:93:63:df:2a:2b:71:d1:06:ee:3d:e0:2a:86: 76:94:8a:51:1f:04:ac:2c:a1:84:71:c4:df:8a:a5: e8:f9:3d:fa:a0:ae:0e:79:3c:75:9b:3d:65:27:31: e0:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:41:1A:54:C6:D2:EA:01:97:F6:DA:5A:96:A8:4A:F9:0F:B9:CF:8F X509v3 Authority Key Identifier: keyid:32:9B:51:3E:65:70:6F:CA:A5:43:A1:1A:0E:42:D2:8B:10:9D:F3:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MptRPmVwb8qlQ6EaDkLSixCd87Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/0adcd8-8a4b-4923-bf36-814a611eca60/1/MptRPmVwb8qlQ6EaDkLSixCd87Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/0adcd8-8a4b-4923-bf36-814a611eca60/1/MptRPmVwb8qlQ6EaDkLSixCd87Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:75:f7:51:40:8d:0c:48:86:0a:ad:01:7e:cc:6e:46:02:d5: a7:58:55:aa:6c:38:85:96:74:e9:87:21:a4:88:5f:10:c4:83: f6:1e:fb:77:36:9b:68:3d:0a:f6:33:b3:f4:13:54:ff:a1:16: 0e:14:40:9c:64:21:e3:3e:66:85:d4:89:83:cc:db:8d:bf:2d: 35:8f:3e:5b:36:b5:6d:77:9b:3d:08:0a:13:11:97:e0:3b:93: af:f7:31:05:5d:4f:d1:df:6c:91:07:b4:1d:9c:e9:83:29:77: d7:e0:ea:ba:a4:42:37:cd:53:a2:d1:b5:4b:be:d6:dc:11:a8: e9:64:b8:8a:98:74:37:ff:20:64:16:cd:2f:b7:43:d0:9f:96: 87:51:e6:4b:ba:41:0f:01:35:5f:ba:ec:db:ba:c1:bf:6e:9f: 91:e0:64:20:6c:4f:e2:ee:1e:47:f0:17:b1:ec:77:10:fc:f1: 89:27:6d:e1:98:2c:24:75:19:bb:19:28:99:51:fd:8b:48:90: 6f:bc:b3:e9:fb:7f:78:79:79:7f:30:17:27:c9:2e:7a:b0:94: 8a:85:c2:09:d3:c8:df:6a:41:20:9e:44:4e:bd:90:3c:ed:7a: 45:b3:2d:a6:ca:68:c5:01:51:c7:2a:65:fb:88:a0:c9:f9:33: 23:58:5c:4d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6xpJaFGsolX+ZEPt/t/5NMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyOWI1MTNlNjU3MDZmY2FhNTQzYTExYTBlNDJkMjhiMTA5 ZGYzYjYwHhcNMjUxMjIwMDgwMDUwWhcNMjUxMjIxMDgwMDUwWjAzMTEwLwYDVQQD EyhhOTQxMWE1NGM2ZDJlYTAxOTdmNmRhNWE5NmE4NGFmOTBmYjljZjhmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwVLTnMHZq8UjuA5VabLJzKQUuEuI a0DsMr5BhUZ8sMO3W0rP2MXRisyS1fey2OQLGF+HAtJVmhrZfZUQNJLJqtJhfT// YudohkLABcWDi5ATnMG7NfyzfFsmdqOwr2SJ6sxfKQyXs1FRTIgzZxL9HFgYElMd VAcTwiXhusZZyF8yUGN3aaN/ibPNzRVUYqT8cxQvcFC+okJCx2ZL2+7Bovesf1dn pXtHnE7vxXILf+mYvbYq0B/j4a3bm5zNJzgZ5o9IdCRzS1l9JpFvVBpakgDsCpNj 3yorcdEG7j3gKoZ2lIpRHwSsLKGEccTfiqXo+T36oK4OeTx1mz1lJzHgFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKlBGlTG0uoBl/baWpaoSvkPuc+PMB8GA1UdIwQY MBaAFDKbUT5lcG/KpUOhGg5C0osQnfO2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTXB0UlBtVndiOHFsUTZFYURrTFNpeENkODdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS8wYWRjZDgtOGE0Yi00OTIzLWJmMzYt ODE0YTYxMWVjYTYwLzEvTXB0UlBtVndiOHFsUTZFYURrTFNpeENkODdZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS8wYWRjZDgtOGE0Yi00OTIzLWJmMzYtODE0YTYxMWVjYTYw LzEvTXB0UlBtVndiOHFsUTZFYURrTFNpeENkODdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXHX3UUCN DEiGCq0BfsxuRgLVp1hVqmw4hZZ06YchpIhfEMSD9h77dzabaD0K9jOz9BNU/6EW DhRAnGQh4z5mhdSJg8zbjb8tNY8+Wza1bXebPQgKExGX4DuTr/cxBV1P0d9skQe0 HZzpgyl31+DquqRCN81TotG1S77W3BGo6WS4iph0N/8gZBbNL7dD0J+Wh1HmS7pB DwE1X7rs27rBv26fkeBkIGxP4u4eR/AXsex3EPzxiSdt4ZgsJHUZuxkomVH9i0iQ b7yz6ft/eHl5fzAXJ8kuerCUioXCCdPI32pBIJ5ETr2QPO16RbMtpspoxQFRxypl +4igyfkzI1hcTQ== -----END CERTIFICATE-----Generated at Sat Dec 20 15:10:45 2025 by rpki-client