This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/38eee8-7b5b-4323-8fa5-4cac2c20753a/1/MfEkvY8Uu5ikiEnFIFg3Mjv8-Ew.mft File: MfEkvY8Uu5ikiEnFIFg3Mjv8-Ew.mft (raw, json) Hash identifier: CDTWbiMnaraKBrwFptvETjVCh4a1yfKX9I4HLBNOQHg= Subject key identifier: CC:D0:63:7E:9E:8D:4E:63:71:5C:E6:3D:E8:EA:53:BF:9A:C8:F5:37 Authority key identifier: 31:F1:24:BD:8F:14:BB:98:A4:88:49:C5:20:58:37:32:3B:FC:F8:4C Certificate issuer: /CN=31f124bd8f14bb98a48849c5205837323bfcf84c Certificate serial: 019B262DEBAEB4CF6D0F29B68108E4FCDA0E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MfEkvY8Uu5ikiEnFIFg3Mjv8-Ew.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/38eee8-7b5b-4323-8fa5-4cac2c20753a/1/MfEkvY8Uu5ikiEnFIFg3Mjv8-Ew.mft Manifest number: 059D Signing time: Tue 16 Dec 2025 08:01:42 +0000 Manifest this update: Tue 16 Dec 2025 08:01:42 +0000 Manifest next update: Wed 17 Dec 2025 08:01:42 +0000 Files and hashes: 1: MfEkvY8Uu5ikiEnFIFg3Mjv8-Ew.crl (hash: hrK/0pbFQ0FgXe57OkFhOxP1xXpN7vqFnuVLbBRek9c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/38eee8-7b5b-4323-8fa5-4cac2c20753a/1/MfEkvY8Uu5ikiEnFIFg3Mjv8-Ew.crl rsync://rpki.ripe.net/repository/DEFAULT/42/38eee8-7b5b-4323-8fa5-4cac2c20753a/1/MfEkvY8Uu5ikiEnFIFg3Mjv8-Ew.mft rsync://rpki.ripe.net/repository/DEFAULT/MfEkvY8Uu5ikiEnFIFg3Mjv8-Ew.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 08:01:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:26:2d:eb:ae:b4:cf:6d:0f:29:b6:81:08:e4:fc:da:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31f124bd8f14bb98a48849c5205837323bfcf84c Validity Not Before: Dec 16 08:01:42 2025 GMT Not After : Dec 17 08:01:42 2025 GMT Subject: CN=ccd0637e9e8d4e63715ce63de8ea53bf9ac8f537 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:36:05:78:7a:a9:b1:2c:1d:fe:b9:e0:08:8d: c6:46:57:06:d9:90:13:d5:4d:b7:69:65:3d:69:f7: e8:e1:f9:3a:ff:f8:0d:ce:7d:54:39:a3:41:92:ca: 98:75:5c:e8:bd:a9:33:53:b2:29:d3:73:bc:cd:6a: 61:a3:ec:f4:ef:14:f3:f4:d3:1a:14:2a:ff:5c:9c: 45:8e:94:01:e7:d0:cd:99:e2:70:12:01:4f:34:91: e6:a8:57:00:8c:e6:0a:0a:cf:19:6e:19:ba:b3:07: af:d0:48:74:36:9e:be:1d:2c:53:a3:ab:44:ce:ec: c7:8f:21:bc:e3:81:dc:16:cb:20:d8:86:e6:ef:25: 31:19:9f:99:2e:ff:9b:76:fd:b2:78:5b:41:05:3f: 98:ee:15:3c:f2:e1:f2:b3:70:42:e5:62:93:d5:0b: e1:7f:e2:0e:71:10:44:1b:a5:ee:f6:d8:7a:09:e7: 5e:01:e3:1d:fc:54:6f:82:8b:ea:6f:47:7e:b2:bc: 9a:ad:77:41:b0:c5:a7:9c:37:53:78:1c:c0:82:26: e9:32:eb:e6:2a:1e:c6:19:bb:ae:7d:f1:79:fd:78: 9b:f0:74:bc:54:73:5a:f4:3d:e6:e2:a3:79:8a:e1: 5f:fd:fd:0f:95:75:c6:ec:53:51:1c:7e:63:61:56: 07:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:D0:63:7E:9E:8D:4E:63:71:5C:E6:3D:E8:EA:53:BF:9A:C8:F5:37 X509v3 Authority Key Identifier: keyid:31:F1:24:BD:8F:14:BB:98:A4:88:49:C5:20:58:37:32:3B:FC:F8:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MfEkvY8Uu5ikiEnFIFg3Mjv8-Ew.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/38eee8-7b5b-4323-8fa5-4cac2c20753a/1/MfEkvY8Uu5ikiEnFIFg3Mjv8-Ew.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/38eee8-7b5b-4323-8fa5-4cac2c20753a/1/MfEkvY8Uu5ikiEnFIFg3Mjv8-Ew.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:f0:8c:20:6a:2d:16:c5:f4:2f:1b:0a:ea:b0:cf:aa:6e:db: ac:92:f7:b7:6c:b9:9f:bb:90:71:05:c4:35:6b:5a:d6:a1:6f: 1f:84:b1:74:a0:85:5d:f2:6d:ef:78:3f:ae:17:85:fa:ec:6f: 4c:49:7f:c3:a6:0b:2f:a6:74:a1:1b:f0:98:ef:2f:bb:f5:f1: ab:9f:ed:19:49:a8:e0:5f:66:ae:87:91:b6:76:91:65:f9:1b: df:86:a1:a3:8b:db:e4:d3:65:ec:4c:b7:3f:75:1f:58:88:bd: e3:4a:e0:63:24:10:fd:67:58:37:a7:2f:bd:e3:03:ac:03:d6: ef:51:92:bf:56:fc:d9:4e:27:11:89:07:8f:c7:dc:22:a1:96: 84:67:55:ad:01:bb:87:9e:b1:ef:dc:44:39:76:b6:84:9c:be: bd:e6:15:88:77:a7:ae:1d:a8:dc:42:6f:2b:9b:c9:81:b4:fa: b9:75:53:a3:fe:25:cd:57:9f:1c:5b:d2:ec:65:b7:43:fc:14: 02:1c:65:c0:1e:6b:43:7f:fb:43:cb:8e:78:78:be:e0:08:e9: dd:36:f5:ef:3f:7b:e4:2c:15:85:9b:12:ac:67:54:c7:12:2a: 4c:24:c1:1d:32:61:c5:51:35:71:c3:56:7f:de:61:50:e2:eb: a6:7d:9c:2e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsmLeuutM9tDym2gQjk/NoOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxZjEyNGJkOGYxNGJiOThhNDg4NDljNTIwNTgzNzMyM2Jm Y2Y4NGMwHhcNMjUxMjE2MDgwMTQyWhcNMjUxMjE3MDgwMTQyWjAzMTEwLwYDVQQD EyhjY2QwNjM3ZTllOGQ0ZTYzNzE1Y2U2M2RlOGVhNTNiZjlhYzhmNTM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwjYFeHqpsSwd/rngCI3GRlcG2ZAT 1U23aWU9affo4fk6//gNzn1UOaNBksqYdVzovakzU7Ip03O8zWpho+z07xTz9NMa FCr/XJxFjpQB59DNmeJwEgFPNJHmqFcAjOYKCs8Zbhm6swev0Eh0Np6+HSxTo6tE zuzHjyG844HcFssg2Ibm7yUxGZ+ZLv+bdv2yeFtBBT+Y7hU88uHys3BC5WKT1Qvh f+IOcRBEG6Xu9th6CedeAeMd/FRvgovqb0d+sryarXdBsMWnnDdTeBzAgibpMuvm Kh7GGbuuffF5/Xib8HS8VHNa9D3m4qN5iuFf/f0PlXXG7FNRHH5jYVYHyQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMzQY36ejU5jcVzmPejqU7+ayPU3MB8GA1UdIwQY MBaAFDHxJL2PFLuYpIhJxSBYNzI7/PhMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTWZFa3ZZOFV1NWlraUVuRklGZzNNanY4LUV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi8zOGVlZTgtN2I1Yi00MzIzLThmYTUt NGNhYzJjMjA3NTNhLzEvTWZFa3ZZOFV1NWlraUVuRklGZzNNanY4LUV3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi8zOGVlZTgtN2I1Yi00MzIzLThmYTUtNGNhYzJjMjA3NTNh LzEvTWZFa3ZZOFV1NWlraUVuRklGZzNNanY4LUV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW/CMIGot FsX0LxsK6rDPqm7brJL3t2y5n7uQcQXENWta1qFvH4SxdKCFXfJt73g/rheF+uxv TEl/w6YLL6Z0oRvwmO8vu/Xxq5/tGUmo4F9mroeRtnaRZfkb34aho4vb5NNl7Ey3 P3UfWIi940rgYyQQ/WdYN6cvveMDrAPW71GSv1b82U4nEYkHj8fcIqGWhGdVrQG7 h56x79xEOXa2hJy+veYViHenrh2o3EJvK5vJgbT6uXVTo/4lzVefHFvS7GW3Q/wU AhxlwB5rQ3/7Q8uOeHi+4Ajp3Tb17z975CwVhZsSrGdUxxIqTCTBHTJhxVE1ccNW f95hUOLrpn2cLg== -----END CERTIFICATE-----Generated at Tue Dec 16 18:01:17 2025 by rpki-client