This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/38eee8-7b5b-4323-8fa5-4cac2c20753a/1/MfEkvY8Uu5ikiEnFIFg3Mjv8-Ew.mft File: MfEkvY8Uu5ikiEnFIFg3Mjv8-Ew.mft (raw, json) Hash identifier: dY7Ew8siipBxJm/36DGsjrriFbLXaeSzQkrwyPkyEF8= Subject key identifier: D8:4B:77:94:A9:6F:ED:B8:27:96:86:EC:9F:EF:6F:60:7C:A7:AC:CA Authority key identifier: 31:F1:24:BD:8F:14:BB:98:A4:88:49:C5:20:58:37:32:3B:FC:F8:4C Certificate issuer: /CN=31f124bd8f14bb98a48849c5205837323bfcf84c Certificate serial: 019B281B9642D7FF87386C05E615C097FB14 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MfEkvY8Uu5ikiEnFIFg3Mjv8-Ew.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/38eee8-7b5b-4323-8fa5-4cac2c20753a/1/MfEkvY8Uu5ikiEnFIFg3Mjv8-Ew.mft Manifest number: 059E Signing time: Tue 16 Dec 2025 17:00:55 +0000 Manifest this update: Tue 16 Dec 2025 17:00:55 +0000 Manifest next update: Wed 17 Dec 2025 17:00:55 +0000 Files and hashes: 1: MfEkvY8Uu5ikiEnFIFg3Mjv8-Ew.crl (hash: jNutN62oAjXFgcqbytUsCsInSiLlX9Za8qHPQewQDJ0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/38eee8-7b5b-4323-8fa5-4cac2c20753a/1/MfEkvY8Uu5ikiEnFIFg3Mjv8-Ew.crl rsync://rpki.ripe.net/repository/DEFAULT/42/38eee8-7b5b-4323-8fa5-4cac2c20753a/1/MfEkvY8Uu5ikiEnFIFg3Mjv8-Ew.mft rsync://rpki.ripe.net/repository/DEFAULT/MfEkvY8Uu5ikiEnFIFg3Mjv8-Ew.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 14:45:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:28:1b:96:42:d7:ff:87:38:6c:05:e6:15:c0:97:fb:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31f124bd8f14bb98a48849c5205837323bfcf84c Validity Not Before: Dec 16 17:00:55 2025 GMT Not After : Dec 17 17:00:55 2025 GMT Subject: CN=d84b7794a96fedb8279686ec9fef6f607ca7acca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:d2:d5:15:fd:c8:62:b1:e3:b3:7b:2b:29:42: 9b:7b:f7:41:f3:42:17:7c:7f:bc:7b:f5:89:c6:f2: 30:3d:73:b8:d8:ee:85:c5:24:ac:7e:40:9f:b4:6d: 22:59:9a:f1:25:17:8a:7a:d0:33:81:62:df:ed:ca: 3e:f4:dd:c9:78:bb:1e:81:de:c5:c9:70:c8:6a:d6: b1:4d:d5:31:5a:0e:b7:22:4d:d7:e2:38:b5:b0:86: d4:7e:72:71:22:37:5e:cd:45:7b:5d:97:4b:99:4d: 13:18:fc:36:c7:b5:65:54:b8:fc:15:92:da:0d:94: 7f:7f:f9:87:e4:95:5c:cd:27:9a:5f:3e:7a:8e:29: 3e:7f:f2:52:9e:8e:69:f9:ee:7a:12:14:f3:89:ca: cc:59:2d:ca:93:e9:4d:c2:6a:68:59:62:70:2d:c7: 1a:e6:47:21:2c:46:d0:93:36:f5:7e:13:60:c6:07: ef:ad:52:37:a6:a9:21:2e:ee:d7:c5:e5:e9:91:55: 0a:c9:0f:87:a5:92:7e:7e:6f:48:9e:75:0d:fb:34: 9b:e2:14:ef:c4:c4:c5:b8:aa:cf:20:ca:4c:70:3b: 7e:f2:f0:ff:23:28:82:ec:d9:4e:7d:2f:49:bd:e5: 0d:79:da:c6:ca:da:d7:74:d9:e8:e1:96:92:33:a4: 3b:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:4B:77:94:A9:6F:ED:B8:27:96:86:EC:9F:EF:6F:60:7C:A7:AC:CA X509v3 Authority Key Identifier: keyid:31:F1:24:BD:8F:14:BB:98:A4:88:49:C5:20:58:37:32:3B:FC:F8:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MfEkvY8Uu5ikiEnFIFg3Mjv8-Ew.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/38eee8-7b5b-4323-8fa5-4cac2c20753a/1/MfEkvY8Uu5ikiEnFIFg3Mjv8-Ew.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/38eee8-7b5b-4323-8fa5-4cac2c20753a/1/MfEkvY8Uu5ikiEnFIFg3Mjv8-Ew.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:33:c4:4c:86:3a:a4:b9:0b:4f:67:35:e8:29:59:40:a9:eb: 70:79:07:62:0d:48:1a:1a:46:43:20:a1:65:19:95:af:04:59: 30:3c:0b:2e:5e:bb:d1:d9:6f:00:8e:c3:14:1a:6a:cd:85:d4: 4c:cd:b8:6a:8a:55:c9:9c:d2:9e:d0:bf:bb:8c:f4:e6:99:86: 98:3e:ee:f3:13:7b:c6:cc:5a:cc:f8:0d:0d:e9:6c:bb:2e:cb: 9a:7c:4e:a5:d6:38:ac:d1:63:2c:f8:88:ad:4f:1b:60:60:5e: cd:b5:c9:d1:9e:44:ec:00:22:d7:cd:8f:db:dc:f3:7c:e2:f1: 9b:28:93:46:3c:c0:7c:96:c4:ca:be:c2:b9:7e:d5:51:a5:51: 3e:3f:ae:76:46:a2:a7:5f:7c:d6:16:5f:4f:ce:56:ac:f1:61: c0:6e:52:aa:60:60:a4:8a:3e:f5:25:bd:08:5c:de:b6:0a:b6: 19:17:e9:44:19:b0:e2:9f:a3:b4:e5:f3:62:06:8d:49:c8:20: da:2b:51:30:8d:81:a4:f3:e0:30:e6:cf:c3:a1:8e:40:cd:cf: d0:a2:58:65:46:13:2e:1a:32:4c:64:f3:98:ae:67:6e:15:27: c1:9f:17:9f:cb:d5:55:2a:47:d9:e5:7d:1f:90:c8:cb:66:c6: 34:68:69:af -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsoG5ZC1/+HOGwF5hXAl/sUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxZjEyNGJkOGYxNGJiOThhNDg4NDljNTIwNTgzNzMyM2Jm Y2Y4NGMwHhcNMjUxMjE2MTcwMDU1WhcNMjUxMjE3MTcwMDU1WjAzMTEwLwYDVQQD EyhkODRiNzc5NGE5NmZlZGI4Mjc5Njg2ZWM5ZmVmNmY2MDdjYTdhY2NhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAldLVFf3IYrHjs3srKUKbe/dB80IX fH+8e/WJxvIwPXO42O6FxSSsfkCftG0iWZrxJReKetAzgWLf7co+9N3JeLsegd7F yXDIataxTdUxWg63Ik3X4ji1sIbUfnJxIjdezUV7XZdLmU0TGPw2x7VlVLj8FZLa DZR/f/mH5JVczSeaXz56jik+f/JSno5p+e56EhTzicrMWS3Kk+lNwmpoWWJwLcca 5kchLEbQkzb1fhNgxgfvrVI3pqkhLu7XxeXpkVUKyQ+HpZJ+fm9InnUN+zSb4hTv xMTFuKrPIMpMcDt+8vD/IyiC7NlOfS9JveUNedrGytrXdNno4ZaSM6Q7lwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNhLd5Spb+24J5aG7J/vb2B8p6zKMB8GA1UdIwQY MBaAFDHxJL2PFLuYpIhJxSBYNzI7/PhMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTWZFa3ZZOFV1NWlraUVuRklGZzNNanY4LUV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi8zOGVlZTgtN2I1Yi00MzIzLThmYTUt NGNhYzJjMjA3NTNhLzEvTWZFa3ZZOFV1NWlraUVuRklGZzNNanY4LUV3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi8zOGVlZTgtN2I1Yi00MzIzLThmYTUtNGNhYzJjMjA3NTNh LzEvTWZFa3ZZOFV1NWlraUVuRklGZzNNanY4LUV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkDPETIY6 pLkLT2c16ClZQKnrcHkHYg1IGhpGQyChZRmVrwRZMDwLLl670dlvAI7DFBpqzYXU TM24aopVyZzSntC/u4z05pmGmD7u8xN7xsxazPgNDelsuy7LmnxOpdY4rNFjLPiI rU8bYGBezbXJ0Z5E7AAi182P29zzfOLxmyiTRjzAfJbEyr7CuX7VUaVRPj+udkai p1981hZfT85WrPFhwG5SqmBgpIo+9SW9CFzetgq2GRfpRBmw4p+jtOXzYgaNScgg 2itRMI2BpPPgMObPw6GOQM3P0KJYZUYTLhoyTGTzmK5nbhUnwZ8Xn8vVVSpH2eV9 H5DIy2bGNGhprw== -----END CERTIFICATE-----Generated at Tue Dec 16 20:59:57 2025 by rpki-client