This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/5c36f7-9fca-4896-ab72-05e7fa630bbc/1/mpj-vDPk1ReuPZyj6TLi1Lpohaw.mft File: mpj-vDPk1ReuPZyj6TLi1Lpohaw.mft (raw, json) Hash identifier: EMPIfHy4PPsw0YWOm0LDtbhuGxUhUIJZbTd7HpaJGj4= Subject key identifier: 9C:03:BA:E8:B0:0E:80:E8:51:A0:20:36:2A:F0:4E:3A:85:0B:23:05 Authority key identifier: 9A:98:FE:BC:33:E4:D5:17:AE:3D:9C:A3:E9:32:E2:D4:BA:68:85:AC Certificate issuer: /CN=9a98febc33e4d517ae3d9ca3e932e2d4ba6885ac Certificate serial: 019AF3C066CCAEFC47077B72B8DC020C0EE5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mpj-vDPk1ReuPZyj6TLi1Lpohaw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/5c36f7-9fca-4896-ab72-05e7fa630bbc/1/mpj-vDPk1ReuPZyj6TLi1Lpohaw.mft Manifest number: 0BC6 Signing time: Sat 06 Dec 2025 13:01:03 +0000 Manifest this update: Sat 06 Dec 2025 13:01:03 +0000 Manifest next update: Sun 07 Dec 2025 13:01:03 +0000 Files and hashes: 1: mpj-vDPk1ReuPZyj6TLi1Lpohaw.crl (hash: TsyZhEwyBvLn3s9oeOBkuHBFlm5CH8tMA/NkonfGPng=) 2: yetABbyl2MadBOs3otjwQ2Snhiw.roa (hash: QjHSeYtiJ8ed7+XFEV/Jho222/lz+EVhX5TG4jAr6Y4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/5c36f7-9fca-4896-ab72-05e7fa630bbc/1/mpj-vDPk1ReuPZyj6TLi1Lpohaw.crl rsync://rpki.ripe.net/repository/DEFAULT/3e/5c36f7-9fca-4896-ab72-05e7fa630bbc/1/mpj-vDPk1ReuPZyj6TLi1Lpohaw.mft rsync://rpki.ripe.net/repository/DEFAULT/mpj-vDPk1ReuPZyj6TLi1Lpohaw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:c0:66:cc:ae:fc:47:07:7b:72:b8:dc:02:0c:0e:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a98febc33e4d517ae3d9ca3e932e2d4ba6885ac Validity Not Before: Dec 6 13:01:03 2025 GMT Not After : Dec 7 13:01:03 2025 GMT Subject: CN=9c03bae8b00e80e851a020362af04e3a850b2305 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:4b:4b:00:d5:8c:77:bf:45:c1:f5:f4:cf:7d: 2e:59:27:3e:1e:b7:be:45:77:3c:3a:d6:07:aa:e0: 1d:60:55:b2:7a:97:e7:91:82:ce:d3:3f:b2:14:47: 62:c6:4d:93:11:ca:d5:3a:49:10:46:9c:08:32:c6: e3:d5:e1:fa:3f:19:5f:48:20:34:b7:77:1e:c6:5e: 96:cf:73:f2:54:26:ae:6c:a2:a2:c2:eb:8b:e5:6c: 9d:54:be:51:8b:2b:88:23:46:36:b7:8e:3c:91:35: e5:4f:22:a4:df:09:86:6b:e5:fa:81:37:9a:9f:3f: 5c:d2:b2:6b:39:68:6d:50:d6:1f:4b:a9:fb:0c:5a: 5a:4b:fe:94:5f:73:36:e5:9b:16:e6:fa:95:87:c9: f2:f2:0d:5a:be:8f:5f:44:d0:4a:98:97:66:2a:b3: 27:9b:5e:f0:fe:be:3c:38:4f:99:e0:6f:23:ac:10: b2:ec:88:4b:79:38:03:9a:d7:2d:88:4e:f2:e7:11: 22:29:03:35:23:38:7f:7c:ab:9b:8f:f7:64:39:a8: c4:0a:88:4a:81:e3:b1:a1:f1:67:41:3c:eb:16:a4: 1f:cd:b7:10:4a:fa:85:d9:98:c3:05:f9:ef:dd:91: 0a:87:2c:62:62:c4:31:e4:3c:ee:3f:d9:c1:bf:58: e9:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:03:BA:E8:B0:0E:80:E8:51:A0:20:36:2A:F0:4E:3A:85:0B:23:05 X509v3 Authority Key Identifier: keyid:9A:98:FE:BC:33:E4:D5:17:AE:3D:9C:A3:E9:32:E2:D4:BA:68:85:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mpj-vDPk1ReuPZyj6TLi1Lpohaw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/5c36f7-9fca-4896-ab72-05e7fa630bbc/1/mpj-vDPk1ReuPZyj6TLi1Lpohaw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/5c36f7-9fca-4896-ab72-05e7fa630bbc/1/mpj-vDPk1ReuPZyj6TLi1Lpohaw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:54:d5:79:e7:e1:01:54:2f:47:5a:e8:5c:4a:28:79:b8:f7: 56:05:a7:9f:0e:cb:a9:7e:d9:2e:e2:bd:d2:ca:a3:35:8b:55: 9c:3a:26:82:77:8c:23:5d:cb:2a:9e:11:7e:f2:4a:19:22:bb: 0d:82:20:6a:b9:85:49:3e:2c:53:3f:7e:37:da:b6:57:ee:32: 1c:11:14:cd:56:56:a9:3b:52:10:eb:25:82:7c:a7:84:cb:ec: aa:21:96:87:0c:ee:16:7c:0a:82:70:af:3c:d1:50:3b:e0:49: 8f:d2:5b:b4:14:72:47:a8:4d:5f:c7:37:bb:fe:03:71:a8:88: f0:03:ff:00:3c:c8:71:52:2a:38:db:ff:c0:c6:46:2f:8f:9b: 5f:8e:dd:92:e0:fe:13:52:00:83:0a:0e:de:73:13:55:a3:8f: 19:c3:dd:da:fc:20:d5:95:5d:b3:74:c3:18:17:9b:cb:df:d7: cf:eb:72:ff:33:f4:0b:a7:02:d2:26:16:96:a8:29:5d:f3:f7: ce:f7:92:3c:02:42:61:5c:54:e3:ad:fc:64:88:2b:46:fd:05: b3:f4:68:fc:91:5d:52:35:11:80:4b:6e:60:96:d6:d8:f5:bc: 5c:7c:48:50:2d:85:33:dd:91:98:76:be:bc:79:4b:27:bd:8e: 31:19:1c:d2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzwGbMrvxHB3tyuNwCDA7lMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhOThmZWJjMzNlNGQ1MTdhZTNkOWNhM2U5MzJlMmQ0YmE2 ODg1YWMwHhcNMjUxMjA2MTMwMTAzWhcNMjUxMjA3MTMwMTAzWjAzMTEwLwYDVQQD Eyg5YzAzYmFlOGIwMGU4MGU4NTFhMDIwMzYyYWYwNGUzYTg1MGIyMzA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4ktLANWMd79FwfX0z30uWSc+Hre+ RXc8OtYHquAdYFWyepfnkYLO0z+yFEdixk2TEcrVOkkQRpwIMsbj1eH6PxlfSCA0 t3cexl6Wz3PyVCaubKKiwuuL5WydVL5RiyuII0Y2t448kTXlTyKk3wmGa+X6gTea nz9c0rJrOWhtUNYfS6n7DFpaS/6UX3M25ZsW5vqVh8ny8g1avo9fRNBKmJdmKrMn m17w/r48OE+Z4G8jrBCy7IhLeTgDmtctiE7y5xEiKQM1Izh/fKubj/dkOajECohK geOxofFnQTzrFqQfzbcQSvqF2ZjDBfnv3ZEKhyxiYsQx5DzuP9nBv1jpaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJwDuuiwDoDoUaAgNirwTjqFCyMFMB8GA1UdIwQY MBaAFJqY/rwz5NUXrj2co+ky4tS6aIWsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbXBqLXZEUGsxUmV1UFp5ajZUTGkxTHBvaGF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS81YzM2ZjctOWZjYS00ODk2LWFiNzIt MDVlN2ZhNjMwYmJjLzEvbXBqLXZEUGsxUmV1UFp5ajZUTGkxTHBvaGF3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZS81YzM2ZjctOWZjYS00ODk2LWFiNzItMDVlN2ZhNjMwYmJj LzEvbXBqLXZEUGsxUmV1UFp5ajZUTGkxTHBvaGF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADlTVeefh AVQvR1roXEooebj3VgWnnw7LqX7ZLuK90sqjNYtVnDomgneMI13LKp4RfvJKGSK7 DYIgarmFST4sUz9+N9q2V+4yHBEUzVZWqTtSEOslgnynhMvsqiGWhwzuFnwKgnCv PNFQO+BJj9JbtBRyR6hNX8c3u/4DcaiI8AP/ADzIcVIqONv/wMZGL4+bX47dkuD+ E1IAgwoO3nMTVaOPGcPd2vwg1ZVds3TDGBeby9/Xz+ty/zP0C6cC0iYWlqgpXfP3 zveSPAJCYVxU4638ZIgrRv0Fs/Ro/JFdUjURgEtuYJbW2PW8XHxIUC2FM92RmHa+ vHlLJ72OMRkc0g== -----END CERTIFICATE-----Generated at Sat Dec 6 20:59:29 2025 by rpki-client