This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/MR1it_2fz8h9_qmHUVdnyDjiG7k.mft File: MR1it_2fz8h9_qmHUVdnyDjiG7k.mft (raw, json) Hash identifier: SnLiXPUNLUcdPlzFrXvbYzne4AnwSx73z5WI4+XDeuk= Subject key identifier: D6:EA:39:D4:CD:C6:CC:E3:89:FB:69:10:80:BF:94:41:29:76:64:DC Authority key identifier: 31:1D:62:B7:FD:9F:CF:C8:7D:FE:A9:87:51:57:67:C8:38:E2:1B:B9 Certificate issuer: /CN=311d62b7fd9fcfc87dfea987515767c838e21bb9 Certificate serial: 019AF4653F95322AA59E5197188E057A7723 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MR1it_2fz8h9_qmHUVdnyDjiG7k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/MR1it_2fz8h9_qmHUVdnyDjiG7k.mft Manifest number: 176C Signing time: Sat 06 Dec 2025 16:01:07 +0000 Manifest this update: Sat 06 Dec 2025 16:01:07 +0000 Manifest next update: Sun 07 Dec 2025 16:01:07 +0000 Files and hashes: 1: 2hjMikwQnrrEAN1yMmo4yNGPigk.roa (hash: va6CTRy1tpKgbw+4WXa+7xdTzdjfkhLrL6uUCxg03v4=) 2: 4anNvnqS_uath7Y6EK7D7BC3YzE.roa (hash: Bnv1UeMKU1sDW+whV3TipNzoS8kdERV9WO2YiJiRQJk=) 3: MR1it_2fz8h9_qmHUVdnyDjiG7k.crl (hash: Lx8M4yOdz/e96/Kne13FTTsXFwyyxifRFua8xQdDSBA=) 4: QWLPaj62U4CAYLuNbQSuF8yo9Rg.roa (hash: WelEuZteZjlUXOetnougM0+APhmhxsS7BtV9U+PH3aU=) 5: rAzaD8-4SFX5j-t_AZkG74hcrGo.roa (hash: gUBb80vQa9xzG40VeB1TgYoV9OYlxwRJMp3/2FmSfMI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/MR1it_2fz8h9_qmHUVdnyDjiG7k.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/MR1it_2fz8h9_qmHUVdnyDjiG7k.mft rsync://rpki.ripe.net/repository/DEFAULT/MR1it_2fz8h9_qmHUVdnyDjiG7k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:65:3f:95:32:2a:a5:9e:51:97:18:8e:05:7a:77:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=311d62b7fd9fcfc87dfea987515767c838e21bb9 Validity Not Before: Dec 6 16:01:07 2025 GMT Not After : Dec 7 16:01:07 2025 GMT Subject: CN=d6ea39d4cdc6cce389fb691080bf9441297664dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:1b:03:de:1d:4d:ea:75:ca:ca:5f:d1:fc:ba: dd:9a:0d:c7:99:7a:ba:19:40:90:b7:ae:81:63:21: ef:75:74:37:2c:6e:f2:2b:01:30:dc:6f:c8:97:ed: 15:94:35:9a:cd:cb:26:31:41:24:11:e8:ee:15:1f: e3:3d:98:b2:16:60:96:84:c7:1a:bf:ee:02:a7:45: 7c:9e:c4:52:31:d0:c8:59:1b:ae:36:f4:47:e4:46: 63:8a:66:78:c6:4f:2f:d2:9e:a5:f4:13:57:50:62: 5d:29:85:3b:f7:50:03:00:3e:e7:7d:36:8e:6c:80: 1f:7a:46:2c:9a:9d:01:96:5d:cd:b3:25:a8:f8:76: 69:11:eb:d4:83:8f:ec:2b:61:ad:45:93:08:d0:57: f7:a0:79:53:e4:72:b1:d2:04:a5:78:c5:a0:36:64: b2:44:62:ac:0d:01:e1:a7:9a:42:31:62:a6:09:38: 72:00:91:72:41:1b:98:90:15:76:12:46:2f:ea:98: 6d:fc:aa:e3:73:a6:61:fc:b8:97:89:3a:b7:c3:df: b1:d0:93:ca:dc:8b:f4:d5:84:aa:86:35:35:0c:5a: 0f:5d:cb:4a:33:ed:d2:e6:7e:5d:54:5e:f7:42:f1: 7e:13:a5:5e:a3:50:39:ce:80:41:a1:77:ea:5b:4f: f1:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:EA:39:D4:CD:C6:CC:E3:89:FB:69:10:80:BF:94:41:29:76:64:DC X509v3 Authority Key Identifier: keyid:31:1D:62:B7:FD:9F:CF:C8:7D:FE:A9:87:51:57:67:C8:38:E2:1B:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MR1it_2fz8h9_qmHUVdnyDjiG7k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/MR1it_2fz8h9_qmHUVdnyDjiG7k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/MR1it_2fz8h9_qmHUVdnyDjiG7k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d0:f8:e4:b6:30:5d:dc:2e:42:b4:f8:33:e8:cf:85:63:d7:be: ed:b3:04:96:81:b3:e7:fe:f3:9f:27:7f:d7:d6:4e:f3:69:aa: 6b:e1:5e:56:8f:4a:5c:d2:b5:f2:66:23:9f:cb:d3:01:01:97: 17:e6:d4:72:db:5b:bd:60:6e:dd:2c:ae:e6:33:c9:25:99:be: 3a:f8:6a:ed:73:a5:e7:03:de:f0:a7:12:6c:36:94:ad:ec:4f: 73:cd:2e:14:c0:29:a0:54:5f:d1:99:d4:43:33:7b:84:06:17: dd:dd:fa:a6:87:ee:03:99:d5:b4:fb:10:38:2b:2e:11:4a:42: 8d:84:b1:70:5a:b1:e4:f3:46:f0:ac:6c:64:9f:d3:ac:c1:5a: 2d:d9:ab:8e:77:cd:a5:e1:16:f2:b3:ed:07:e2:da:7a:ed:b3: bb:7c:af:be:b9:47:77:8a:62:2d:a4:39:79:4a:8e:a7:26:46: 3e:44:25:80:dc:5b:b8:39:f4:3d:d7:f1:62:55:5d:47:d4:60: 51:16:b4:7c:0c:21:70:7e:0f:09:c2:88:77:fc:ea:6a:30:6e: c9:0e:d7:98:b1:9b:d1:44:d3:9d:19:d3:2c:56:64:60:2f:e5: c0:18:ed:4d:54:8d:a5:04:35:a9:f9:22:68:4b:bd:d3:7e:28: 32:4c:b2:60 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0ZT+VMiqlnlGXGI4FencjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxMWQ2MmI3ZmQ5ZmNmYzg3ZGZlYTk4NzUxNTc2N2M4Mzhl MjFiYjkwHhcNMjUxMjA2MTYwMTA3WhcNMjUxMjA3MTYwMTA3WjAzMTEwLwYDVQQD EyhkNmVhMzlkNGNkYzZjY2UzODlmYjY5MTA4MGJmOTQ0MTI5NzY2NGRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtRsD3h1N6nXKyl/R/Lrdmg3HmXq6 GUCQt66BYyHvdXQ3LG7yKwEw3G/Il+0VlDWazcsmMUEkEejuFR/jPZiyFmCWhMca v+4Cp0V8nsRSMdDIWRuuNvRH5EZjimZ4xk8v0p6l9BNXUGJdKYU791ADAD7nfTaO bIAfekYsmp0Bll3NsyWo+HZpEevUg4/sK2GtRZMI0Ff3oHlT5HKx0gSleMWgNmSy RGKsDQHhp5pCMWKmCThyAJFyQRuYkBV2EkYv6pht/Krjc6Zh/LiXiTq3w9+x0JPK 3Iv01YSqhjU1DFoPXctKM+3S5n5dVF73QvF+E6Veo1A5zoBBoXfqW0/xwQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNbqOdTNxszjiftpEIC/lEEpdmTcMB8GA1UdIwQY MBaAFDEdYrf9n8/Iff6ph1FXZ8g44hu5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTVIxaXRfMmZ6OGg5X3FtSFVWZG55RGppRzdrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy81NzY4OGUtYTk2NC00OTMzLTg2MzEt ODUwZjM0OTA2MjI5LzEvTVIxaXRfMmZ6OGg5X3FtSFVWZG55RGppRzdrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy81NzY4OGUtYTk2NC00OTMzLTg2MzEtODUwZjM0OTA2MjI5 LzEvTVIxaXRfMmZ6OGg5X3FtSFVWZG55RGppRzdrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0PjktjBd 3C5CtPgz6M+FY9e+7bMEloGz5/7znyd/19ZO82mqa+FeVo9KXNK18mYjn8vTAQGX F+bUcttbvWBu3Syu5jPJJZm+Ovhq7XOl5wPe8KcSbDaUrexPc80uFMApoFRf0ZnU QzN7hAYX3d36pofuA5nVtPsQOCsuEUpCjYSxcFqx5PNG8KxsZJ/TrMFaLdmrjnfN peEW8rPtB+Laeu2zu3yvvrlHd4piLaQ5eUqOpyZGPkQlgNxbuDn0PdfxYlVdR9Rg URa0fAwhcH4PCcKId/zqajBuyQ7XmLGb0UTTnRnTLFZkYC/lwBjtTVSNpQQ1qfki aEu9034oMkyyYA== -----END CERTIFICATE-----Generated at Sat Dec 6 20:24:02 2025 by rpki-client