This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/adc0fe-a24f-4736-afb8-796b38796f69/1/MPCPhA4xfpUgW6E0l9nbxzd7nlc.mft File: MPCPhA4xfpUgW6E0l9nbxzd7nlc.mft (raw, json) Hash identifier: nTOOqN4smKvibNQV/r1RNIALxptR8aNTKC+GI8vYW80= Subject key identifier: 4A:F2:6B:23:1B:84:DB:31:B1:CC:8B:EC:19:39:9C:21:12:D6:49:8F Authority key identifier: 30:F0:8F:84:0E:31:7E:95:20:5B:A1:34:97:D9:DB:C7:37:7B:9E:57 Certificate issuer: /CN=30f08f840e317e95205ba13497d9dbc7377b9e57 Certificate serial: 019AF12CBC6F4D0700BE28C4B16B65BD0D94 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MPCPhA4xfpUgW6E0l9nbxzd7nlc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/adc0fe-a24f-4736-afb8-796b38796f69/1/MPCPhA4xfpUgW6E0l9nbxzd7nlc.mft Manifest number: 07DC Signing time: Sat 06 Dec 2025 01:00:32 +0000 Manifest this update: Sat 06 Dec 2025 01:00:32 +0000 Manifest next update: Sun 07 Dec 2025 01:00:32 +0000 Files and hashes: 1: MPCPhA4xfpUgW6E0l9nbxzd7nlc.crl (hash: qyDK3dGdDEPVUnynN4NDv2eUI0vJEWf6cRvIM1M86fY=) 2: w63CtVkaTB-I3bLthiRIKcHJ1z0.roa (hash: PphDOFm6VhjC/oLMpXqjasemzNyOPtAOJruxm2WGQGk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/adc0fe-a24f-4736-afb8-796b38796f69/1/MPCPhA4xfpUgW6E0l9nbxzd7nlc.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/adc0fe-a24f-4736-afb8-796b38796f69/1/MPCPhA4xfpUgW6E0l9nbxzd7nlc.mft rsync://rpki.ripe.net/repository/DEFAULT/MPCPhA4xfpUgW6E0l9nbxzd7nlc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2c:bc:6f:4d:07:00:be:28:c4:b1:6b:65:bd:0d:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30f08f840e317e95205ba13497d9dbc7377b9e57 Validity Not Before: Dec 6 01:00:32 2025 GMT Not After : Dec 7 01:00:32 2025 GMT Subject: CN=4af26b231b84db31b1cc8bec19399c2112d6498f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:3e:60:e6:42:0b:39:7a:53:20:c2:d6:d6:45: b7:1a:ca:7b:08:84:97:c7:71:98:63:68:91:38:f6: ba:41:d6:c3:c7:35:1f:a3:eb:a1:c0:d9:aa:f2:ae: 36:9e:d2:1e:40:f0:79:be:39:95:8a:48:e5:04:1d: cd:c3:59:22:d7:fe:87:75:62:fb:38:98:27:0c:8c: 46:57:41:46:84:e9:32:13:61:43:0a:c2:5a:fd:8b: 4a:35:ab:dd:af:83:59:af:d6:29:64:05:32:0b:97: 54:21:d7:3e:20:5a:8c:07:8a:a8:3f:49:ae:d2:e3: d2:c8:dc:5e:28:72:1a:0f:9c:19:af:bc:76:b1:1a: e3:7c:21:30:8b:49:b6:4d:ac:f4:b0:82:e6:3e:a6: ca:64:3d:4a:f2:43:e9:d4:65:ed:3f:45:70:20:5f: 3d:ba:cf:20:fd:94:9f:1a:27:44:3e:b9:b1:d8:d4: 4f:b7:c9:b2:d9:6f:c1:f8:7a:9f:de:fc:62:db:d9: 39:c5:44:83:d5:3a:55:2f:5a:38:2b:c5:f3:29:ea: 1b:6c:bc:fa:9c:71:48:f4:3a:c3:08:0e:34:49:fb: 85:db:b4:c6:4c:52:8c:78:19:11:2d:59:fd:19:54: 73:bc:22:e3:57:ff:ac:c7:5f:af:7d:7f:27:18:16: 55:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:F2:6B:23:1B:84:DB:31:B1:CC:8B:EC:19:39:9C:21:12:D6:49:8F X509v3 Authority Key Identifier: keyid:30:F0:8F:84:0E:31:7E:95:20:5B:A1:34:97:D9:DB:C7:37:7B:9E:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MPCPhA4xfpUgW6E0l9nbxzd7nlc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/adc0fe-a24f-4736-afb8-796b38796f69/1/MPCPhA4xfpUgW6E0l9nbxzd7nlc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/adc0fe-a24f-4736-afb8-796b38796f69/1/MPCPhA4xfpUgW6E0l9nbxzd7nlc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:ba:29:a7:a0:9a:32:fd:dc:f0:0b:a3:4e:76:1d:0e:9e:4b: cd:4b:a4:40:3b:2f:31:79:ea:6e:2e:33:09:9d:8f:3c:8c:3b: 76:c5:58:15:bb:d6:09:6b:c0:f8:5f:cd:e9:cd:13:22:54:2e: 20:9c:46:c8:e2:d9:ba:a2:2b:78:41:88:f6:61:f2:fa:bd:39: ca:70:89:c6:e6:07:a8:b5:05:4a:ff:92:0a:e7:70:35:bc:65: 7c:d5:a1:8c:0e:89:7c:41:06:bf:e7:21:54:3c:63:1a:1f:07: 69:82:2d:1a:e8:86:b7:34:31:0f:19:84:04:46:53:e6:f7:45: c2:37:93:6d:bc:d6:07:af:73:f1:02:95:ea:84:71:c9:c6:3f: 84:f6:7d:d1:c8:a9:b3:50:dc:dc:b1:a2:02:c1:b1:79:25:b8: 78:c6:d3:9a:63:fa:9d:38:d2:83:51:06:d7:5d:0e:0c:8b:91: 21:ef:00:64:98:c1:f4:9d:70:1f:78:5f:71:2a:36:bc:60:04: 12:1f:7d:b5:67:7a:08:5b:77:f3:32:37:2d:1d:4b:e4:4e:9c: ef:49:a4:bb:0b:bf:8a:2d:e8:76:dd:d3:31:0d:48:20:b3:2c: ee:84:3f:83:77:b5:8b:6e:74:cd:73:a7:11:91:27:34:9a:bf: 0d:b5:5b:41 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLLxvTQcAvijEsWtlvQ2UMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwZjA4Zjg0MGUzMTdlOTUyMDViYTEzNDk3ZDlkYmM3Mzc3 YjllNTcwHhcNMjUxMjA2MDEwMDMyWhcNMjUxMjA3MDEwMDMyWjAzMTEwLwYDVQQD Eyg0YWYyNmIyMzFiODRkYjMxYjFjYzhiZWMxOTM5OWMyMTEyZDY0OThmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqz5g5kILOXpTIMLW1kW3Gsp7CISX x3GYY2iROPa6QdbDxzUfo+uhwNmq8q42ntIeQPB5vjmVikjlBB3Nw1ki1/6HdWL7 OJgnDIxGV0FGhOkyE2FDCsJa/YtKNavdr4NZr9YpZAUyC5dUIdc+IFqMB4qoP0mu 0uPSyNxeKHIaD5wZr7x2sRrjfCEwi0m2Taz0sILmPqbKZD1K8kPp1GXtP0VwIF89 us8g/ZSfGidEPrmx2NRPt8my2W/B+Hqf3vxi29k5xUSD1TpVL1o4K8XzKeobbLz6 nHFI9DrDCA40SfuF27TGTFKMeBkRLVn9GVRzvCLjV/+sx1+vfX8nGBZVYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEryayMbhNsxscyL7Bk5nCES1kmPMB8GA1UdIwQY MBaAFDDwj4QOMX6VIFuhNJfZ28c3e55XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTVBDUGhBNHhmcFVnVzZFMGw5bmJ4emQ3bmxjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9hZGMwZmUtYTI0Zi00NzM2LWFmYjgt Nzk2YjM4Nzk2ZjY5LzEvTVBDUGhBNHhmcFVnVzZFMGw5bmJ4emQ3bmxjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS9hZGMwZmUtYTI0Zi00NzM2LWFmYjgtNzk2YjM4Nzk2ZjY5 LzEvTVBDUGhBNHhmcFVnVzZFMGw5bmJ4emQ3bmxjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFbopp6Ca Mv3c8AujTnYdDp5LzUukQDsvMXnqbi4zCZ2PPIw7dsVYFbvWCWvA+F/N6c0TIlQu IJxGyOLZuqIreEGI9mHy+r05ynCJxuYHqLUFSv+SCudwNbxlfNWhjA6JfEEGv+ch VDxjGh8HaYItGuiGtzQxDxmEBEZT5vdFwjeTbbzWB69z8QKV6oRxycY/hPZ90cip s1Dc3LGiAsGxeSW4eMbTmmP6nTjSg1EG110ODIuRIe8AZJjB9J1wH3hfcSo2vGAE Eh99tWd6CFt38zI3LR1L5E6c70mkuwu/ii3odt3TMQ1IILMs7oQ/g3e1i250zXOn EZEnNJq/DbVbQQ== -----END CERTIFICATE-----Generated at Sat Dec 6 10:27:58 2025 by rpki-client