This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/af832b-a641-4e46-a836-40f4c68e9a31/1/MdfZ0pzs-OWRIiM9cW5rBQ5xhHg.mft File: MdfZ0pzs-OWRIiM9cW5rBQ5xhHg.mft (raw, json) Hash identifier: p3J7eolDjcScOa2b6RVRme9DBqu364v6QoD/YQt71C0= Subject key identifier: E1:22:42:1C:FE:BE:EF:2E:45:2A:D8:67:AC:68:91:A6:B3:9B:B7:27 Authority key identifier: 31:D7:D9:D2:9C:EC:F8:E5:91:22:23:3D:71:6E:6B:05:0E:71:84:78 Certificate issuer: /CN=31d7d9d29cecf8e59122233d716e6b050e718478 Certificate serial: 019AF23FC3E4933E10107E0EC6BC94D51930 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdfZ0pzs-OWRIiM9cW5rBQ5xhHg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/af832b-a641-4e46-a836-40f4c68e9a31/1/MdfZ0pzs-OWRIiM9cW5rBQ5xhHg.mft Manifest number: 033C Signing time: Sat 06 Dec 2025 06:00:56 +0000 Manifest this update: Sat 06 Dec 2025 06:00:56 +0000 Manifest next update: Sun 07 Dec 2025 06:00:56 +0000 Files and hashes: 1: DSrriY0kTNELG4oxKEIjyONHFzY.roa (hash: G+y9D4/mU3p2L2jX8635Per34u+yYnPZalrdKQqBsuo=) 2: MdfZ0pzs-OWRIiM9cW5rBQ5xhHg.crl (hash: NSMNXJY3Nx7vZDlDBxEzrzcXx3eQ235C8y/oHI/wy9g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/af832b-a641-4e46-a836-40f4c68e9a31/1/MdfZ0pzs-OWRIiM9cW5rBQ5xhHg.crl rsync://rpki.ripe.net/repository/DEFAULT/20/af832b-a641-4e46-a836-40f4c68e9a31/1/MdfZ0pzs-OWRIiM9cW5rBQ5xhHg.mft rsync://rpki.ripe.net/repository/DEFAULT/MdfZ0pzs-OWRIiM9cW5rBQ5xhHg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:c3:e4:93:3e:10:10:7e:0e:c6:bc:94:d5:19:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31d7d9d29cecf8e59122233d716e6b050e718478 Validity Not Before: Dec 6 06:00:56 2025 GMT Not After : Dec 7 06:00:56 2025 GMT Subject: CN=e122421cfebeef2e452ad867ac6891a6b39bb727 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:1e:5c:43:88:84:e7:25:bb:60:e8:c1:46:f5: 35:d1:75:7f:11:5f:e6:c6:a8:08:b9:be:1c:ee:f8: b9:49:78:4b:4e:6a:4a:1c:c4:d8:2f:eb:9e:9b:31: b7:ea:f6:1b:4a:7b:57:cb:14:e9:fc:f1:4a:7f:72: 73:04:67:8b:16:07:20:82:47:53:4b:a8:a2:f0:00: 17:74:2d:ca:e7:b8:f8:26:6c:2f:95:58:17:ce:df: a7:ae:c5:41:d5:6c:9d:23:86:61:d2:75:78:95:b8: 33:8d:9c:2e:38:f1:90:30:ab:94:79:36:0c:3b:cb: 44:b6:b3:10:c1:2b:6a:e6:a6:be:0e:19:8a:15:c7: 07:5c:a6:b5:52:7c:a7:bf:ae:e0:9d:5f:27:c3:a0: eb:ce:00:dd:1a:9c:a5:43:a9:1e:2a:79:24:ff:37: b6:aa:ef:a2:ed:a9:1d:8d:73:bb:eb:cb:c7:90:0d: 34:4d:1d:20:8e:2e:29:b6:39:08:14:17:1d:84:16: dd:5e:1f:43:8d:3a:67:17:20:8e:01:d2:9f:87:9b: aa:8e:e2:63:25:5c:de:d5:5b:2d:75:9e:dd:61:a0: 2c:f6:a4:c0:b6:df:c7:c9:a1:ee:1d:b4:e6:10:1d: 01:d3:8a:17:77:fa:53:11:1e:67:32:05:d5:33:8a: 3d:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:22:42:1C:FE:BE:EF:2E:45:2A:D8:67:AC:68:91:A6:B3:9B:B7:27 X509v3 Authority Key Identifier: keyid:31:D7:D9:D2:9C:EC:F8:E5:91:22:23:3D:71:6E:6B:05:0E:71:84:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdfZ0pzs-OWRIiM9cW5rBQ5xhHg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/af832b-a641-4e46-a836-40f4c68e9a31/1/MdfZ0pzs-OWRIiM9cW5rBQ5xhHg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/af832b-a641-4e46-a836-40f4c68e9a31/1/MdfZ0pzs-OWRIiM9cW5rBQ5xhHg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:a5:bd:97:22:9e:12:a7:6a:e3:ab:b9:f7:7a:3c:4c:8a:bc: c4:42:99:e3:53:e7:18:88:13:a7:2b:72:cc:be:98:fe:91:fd: 05:c9:39:1c:32:c1:a0:5c:a0:13:4e:a2:c3:f5:d7:f2:d5:11: 55:81:71:b3:66:96:b6:de:69:cb:40:e1:3e:88:de:dc:c8:ab: ad:08:4f:22:ec:31:f4:d0:3c:28:46:4a:af:8d:93:2c:35:98: d5:67:ff:74:f2:62:0d:25:e4:07:86:5f:56:ba:27:b9:02:68: 57:82:34:3e:8e:49:dc:cc:7f:fc:a5:d7:1b:27:c2:6d:94:78: 5c:2b:a3:0b:e8:99:4d:94:f2:58:8e:26:07:ce:72:82:4f:90: 4d:5d:1a:95:e1:f2:94:cb:1f:c2:12:35:1e:76:d0:2d:06:9a: 0c:09:c1:41:59:0d:bc:90:5d:30:8a:f7:d3:ee:ec:42:76:dc: 62:cd:ee:c0:34:bc:92:53:03:e7:80:1c:73:e9:14:37:ee:44: f8:84:4a:26:a0:dc:81:f1:ac:ca:aa:ad:43:1b:a4:d2:98:f5: 2b:72:8a:c7:b7:bb:ca:99:10:ce:d1:1e:26:53:3c:66:04:55: 49:9f:ec:27:cb:63:1b:86:3a:1e:fb:56:99:d8:73:5c:02:f0: fb:26:4c:9a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP8Pkkz4QEH4OxryU1RkwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxZDdkOWQyOWNlY2Y4ZTU5MTIyMjMzZDcxNmU2YjA1MGU3 MTg0NzgwHhcNMjUxMjA2MDYwMDU2WhcNMjUxMjA3MDYwMDU2WjAzMTEwLwYDVQQD EyhlMTIyNDIxY2ZlYmVlZjJlNDUyYWQ4NjdhYzY4OTFhNmIzOWJiNzI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyh5cQ4iE5yW7YOjBRvU10XV/EV/m xqgIub4c7vi5SXhLTmpKHMTYL+uemzG36vYbSntXyxTp/PFKf3JzBGeLFgcggkdT S6ii8AAXdC3K57j4JmwvlVgXzt+nrsVB1WydI4Zh0nV4lbgzjZwuOPGQMKuUeTYM O8tEtrMQwStq5qa+DhmKFccHXKa1Unynv67gnV8nw6DrzgDdGpylQ6keKnkk/ze2 qu+i7akdjXO768vHkA00TR0gji4ptjkIFBcdhBbdXh9DjTpnFyCOAdKfh5uqjuJj JVze1VstdZ7dYaAs9qTAtt/HyaHuHbTmEB0B04oXd/pTER5nMgXVM4o9UwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOEiQhz+vu8uRSrYZ6xokaazm7cnMB8GA1UdIwQY MBaAFDHX2dKc7PjlkSIjPXFuawUOcYR4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTWRmWjBwenMtT1dSSWlNOWNXNXJCUTV4aEhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC9hZjgzMmItYTY0MS00ZTQ2LWE4MzYt NDBmNGM2OGU5YTMxLzEvTWRmWjBwenMtT1dSSWlNOWNXNXJCUTV4aEhnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC9hZjgzMmItYTY0MS00ZTQ2LWE4MzYtNDBmNGM2OGU5YTMx LzEvTWRmWjBwenMtT1dSSWlNOWNXNXJCUTV4aEhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN6W9lyKe Eqdq46u593o8TIq8xEKZ41PnGIgTpytyzL6Y/pH9Bck5HDLBoFygE06iw/XX8tUR VYFxs2aWtt5py0DhPoje3MirrQhPIuwx9NA8KEZKr42TLDWY1Wf/dPJiDSXkB4Zf VronuQJoV4I0Po5J3Mx//KXXGyfCbZR4XCujC+iZTZTyWI4mB85ygk+QTV0aleHy lMsfwhI1HnbQLQaaDAnBQVkNvJBdMIr30+7sQnbcYs3uwDS8klMD54Acc+kUN+5E +IRKJqDcgfGsyqqtQxuk0pj1K3KKx7e7ypkQztEeJlM8ZgRVSZ/sJ8tjG4Y6HvtW mdhzXALw+yZMmg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:55:35 2025 by rpki-client