This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/e0925e-47bf-4907-bcbc-fd9f36a8ba6e/1/Mx53hPYKyNlpuBz1IxzZ3Ah87TI.mft File: Mx53hPYKyNlpuBz1IxzZ3Ah87TI.mft (raw, json) Hash identifier: S9P13JVCjKHgRbDo5Z+qgoEBn0XYIbOzmQju0PHckLg= Subject key identifier: 5C:EB:7E:90:6F:D7:33:6E:C1:53:DD:CE:F7:49:0D:8E:D7:1B:EE:00 Authority key identifier: 33:1E:77:84:F6:0A:C8:D9:69:B8:1C:F5:23:1C:D9:DC:08:7C:ED:32 Certificate issuer: /CN=331e7784f60ac8d969b81cf5231cd9dc087ced32 Certificate serial: 019AF1D1FB4AF709ADC349CACE6FB6727946 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mx53hPYKyNlpuBz1IxzZ3Ah87TI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/e0925e-47bf-4907-bcbc-fd9f36a8ba6e/1/Mx53hPYKyNlpuBz1IxzZ3Ah87TI.mft Manifest number: 1766 Signing time: Sat 06 Dec 2025 04:01:01 +0000 Manifest this update: Sat 06 Dec 2025 04:01:01 +0000 Manifest next update: Sun 07 Dec 2025 04:01:01 +0000 Files and hashes: 1: Mx53hPYKyNlpuBz1IxzZ3Ah87TI.crl (hash: Xi2wRiq3YFji2yFAQHUnlE5Q00A03oJ0pzck4FL99v8=) 2: qzYfqleKMXziWfjI2OhKWSLGXWI.roa (hash: TK9bijwIRNWSf6A7SMNJb8WGXN3cTGP9yogtHb8815I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/e0925e-47bf-4907-bcbc-fd9f36a8ba6e/1/Mx53hPYKyNlpuBz1IxzZ3Ah87TI.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/e0925e-47bf-4907-bcbc-fd9f36a8ba6e/1/Mx53hPYKyNlpuBz1IxzZ3Ah87TI.mft rsync://rpki.ripe.net/repository/DEFAULT/Mx53hPYKyNlpuBz1IxzZ3Ah87TI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:fb:4a:f7:09:ad:c3:49:ca:ce:6f:b6:72:79:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=331e7784f60ac8d969b81cf5231cd9dc087ced32 Validity Not Before: Dec 6 04:01:01 2025 GMT Not After : Dec 7 04:01:01 2025 GMT Subject: CN=5ceb7e906fd7336ec153ddcef7490d8ed71bee00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:94:b6:1c:86:f0:1e:86:e4:25:20:63:c9:68: 46:40:27:4e:93:cd:f1:51:de:8b:1d:c2:da:9f:6a: 23:0f:72:67:c8:e3:28:f9:58:13:39:f5:a3:c9:5b: 7a:22:a0:c4:1f:56:28:fe:e9:75:c2:2e:bc:2c:aa: 68:ed:1c:50:a6:be:b7:32:a1:99:ed:64:37:b8:dd: 5c:fb:d6:91:7c:e3:8e:94:ab:fe:28:f8:fd:2d:ba: ff:65:4e:29:58:e1:df:9e:10:99:01:6b:58:bb:c6: 45:60:48:ef:5a:0d:b3:a2:aa:17:d2:7a:bd:e7:e7: 8b:42:3d:9f:c0:62:6d:fd:c3:0c:f3:51:5b:52:dc: a9:a7:9d:e3:9c:3c:25:da:35:32:6a:6e:27:0d:35: 50:98:c0:d4:67:79:ff:58:ca:6c:60:d5:44:f4:ef: bb:9e:ce:1a:b4:6d:52:66:c4:3c:91:d1:dd:66:e5: 97:b7:5f:a0:7e:5a:a9:92:b6:5b:95:92:e9:c4:69: dc:e2:46:ca:25:8f:23:67:13:fe:b1:23:08:a4:c6: 43:91:35:6f:70:41:d1:11:e9:cb:6b:4b:04:14:98: e9:68:f3:ab:01:e2:b6:a6:54:5d:b4:4e:cc:8b:a9: f4:5e:81:a0:e7:4a:c8:2f:de:30:70:54:02:d8:bf: b3:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:EB:7E:90:6F:D7:33:6E:C1:53:DD:CE:F7:49:0D:8E:D7:1B:EE:00 X509v3 Authority Key Identifier: keyid:33:1E:77:84:F6:0A:C8:D9:69:B8:1C:F5:23:1C:D9:DC:08:7C:ED:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mx53hPYKyNlpuBz1IxzZ3Ah87TI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/e0925e-47bf-4907-bcbc-fd9f36a8ba6e/1/Mx53hPYKyNlpuBz1IxzZ3Ah87TI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/e0925e-47bf-4907-bcbc-fd9f36a8ba6e/1/Mx53hPYKyNlpuBz1IxzZ3Ah87TI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:89:38:13:2a:22:69:79:ee:2d:cd:95:dd:d6:a4:19:6f:1a: 2c:e9:a2:3b:cf:5c:ec:94:1b:ac:bb:7c:eb:52:bc:56:3a:5b: 59:61:1f:84:04:e3:0a:6c:d1:48:dd:26:c0:6d:c2:bb:a3:22: c4:70:a1:0e:6a:36:b9:60:c2:23:01:21:ee:8b:77:f8:2f:de: 4a:b4:40:e6:9e:4f:fb:c1:91:3f:b6:56:e0:4e:00:d0:dc:48: 98:da:f5:b6:e0:34:2a:42:c2:39:f7:04:47:c7:62:81:c7:6d: a4:a0:bd:89:2d:be:6f:38:b4:b8:3f:f8:b9:eb:2d:1a:06:89: 73:2c:15:ec:3f:19:5c:3e:fe:2f:26:27:07:12:d9:0c:63:92: 2b:fa:43:fd:38:5e:1d:07:06:7e:53:a8:95:b6:4e:8b:e1:0e: 4c:4e:3c:64:db:2d:1a:9f:54:af:2e:49:11:28:92:74:67:99: 97:d7:9c:46:6c:32:f8:62:7a:8d:83:82:b2:6f:15:b6:c3:a0: c8:5a:12:cc:a9:92:0e:f6:3d:22:bd:b9:d2:5d:5b:ee:84:2f: d3:e6:1f:ab:50:71:40:a8:67:f6:d9:09:ec:f0:ba:49:9c:ba: d6:ad:c2:be:4b:d5:a8:e6:11:02:7e:7c:7f:41:d2:97:1e:b4: 42:2d:29:22 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0ftK9wmtw0nKzm+2cnlGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMzMWU3Nzg0ZjYwYWM4ZDk2OWI4MWNmNTIzMWNkOWRjMDg3 Y2VkMzIwHhcNMjUxMjA2MDQwMTAxWhcNMjUxMjA3MDQwMTAxWjAzMTEwLwYDVQQD Eyg1Y2ViN2U5MDZmZDczMzZlYzE1M2RkY2VmNzQ5MGQ4ZWQ3MWJlZTAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzJS2HIbwHobkJSBjyWhGQCdOk83x Ud6LHcLan2ojD3JnyOMo+VgTOfWjyVt6IqDEH1Yo/ul1wi68LKpo7RxQpr63MqGZ 7WQ3uN1c+9aRfOOOlKv+KPj9Lbr/ZU4pWOHfnhCZAWtYu8ZFYEjvWg2zoqoX0nq9 5+eLQj2fwGJt/cMM81FbUtypp53jnDwl2jUyam4nDTVQmMDUZ3n/WMpsYNVE9O+7 ns4atG1SZsQ8kdHdZuWXt1+gflqpkrZblZLpxGnc4kbKJY8jZxP+sSMIpMZDkTVv cEHREenLa0sEFJjpaPOrAeK2plRdtE7Mi6n0XoGg50rIL94wcFQC2L+zaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFzrfpBv1zNuwVPdzvdJDY7XG+4AMB8GA1UdIwQY MBaAFDMed4T2CsjZabgc9SMc2dwIfO0yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTXg1M2hQWUt5TmxwdUJ6MUl4elozQWg4N1RJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi9lMDkyNWUtNDdiZi00OTA3LWJjYmMt ZmQ5ZjM2YThiYTZlLzEvTXg1M2hQWUt5TmxwdUJ6MUl4elozQWg4N1RJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Zi9lMDkyNWUtNDdiZi00OTA3LWJjYmMtZmQ5ZjM2YThiYTZl LzEvTXg1M2hQWUt5TmxwdUJ6MUl4elozQWg4N1RJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApok4Eyoi aXnuLc2V3dakGW8aLOmiO89c7JQbrLt861K8VjpbWWEfhATjCmzRSN0mwG3Cu6Mi xHChDmo2uWDCIwEh7ot3+C/eSrRA5p5P+8GRP7ZW4E4A0NxImNr1tuA0KkLCOfcE R8digcdtpKC9iS2+bzi0uD/4uestGgaJcywV7D8ZXD7+LyYnBxLZDGOSK/pD/The HQcGflOolbZOi+EOTE48ZNstGp9Ury5JESiSdGeZl9ecRmwy+GJ6jYOCsm8VtsOg yFoSzKmSDvY9Ir250l1b7oQv0+Yfq1BxQKhn9tkJ7PC6SZy61q3CvkvVqOYRAn58 f0HSlx60Qi0pIg== -----END CERTIFICATE-----Generated at Sat Dec 6 11:07:52 2025 by rpki-client