This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/491c92-8967-473e-9ea7-a589787bff90/1/MdqSAyHGyCzuaSnnmPyTcrrMuSU.mft File: MdqSAyHGyCzuaSnnmPyTcrrMuSU.mft (raw, json) Hash identifier: 5sKFFglGdMVoEgEsX1wNRLdcp4l1Ua+apVhkY69b7qQ= Subject key identifier: 5F:59:2A:A5:87:9F:42:5D:96:81:A1:4A:EC:97:E2:56:FA:DA:61:F5 Authority key identifier: 31:DA:92:03:21:C6:C8:2C:EE:69:29:E7:98:FC:93:72:BA:CC:B9:25 Certificate issuer: /CN=31da920321c6c82cee6929e798fc9372baccb925 Certificate serial: 019AF31D55259DDE705288EA05AC03F3EE7C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdqSAyHGyCzuaSnnmPyTcrrMuSU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/491c92-8967-473e-9ea7-a589787bff90/1/MdqSAyHGyCzuaSnnmPyTcrrMuSU.mft Manifest number: 095D Signing time: Sat 06 Dec 2025 10:02:57 +0000 Manifest this update: Sat 06 Dec 2025 10:02:57 +0000 Manifest next update: Sun 07 Dec 2025 10:02:57 +0000 Files and hashes: 1: MdqSAyHGyCzuaSnnmPyTcrrMuSU.crl (hash: daZ8roUKACHnbctLip0zXRcD8dX3lqcbJpI+ODZYeiY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/491c92-8967-473e-9ea7-a589787bff90/1/MdqSAyHGyCzuaSnnmPyTcrrMuSU.crl rsync://rpki.ripe.net/repository/DEFAULT/50/491c92-8967-473e-9ea7-a589787bff90/1/MdqSAyHGyCzuaSnnmPyTcrrMuSU.mft rsync://rpki.ripe.net/repository/DEFAULT/MdqSAyHGyCzuaSnnmPyTcrrMuSU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1d:55:25:9d:de:70:52:88:ea:05:ac:03:f3:ee:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31da920321c6c82cee6929e798fc9372baccb925 Validity Not Before: Dec 6 10:02:57 2025 GMT Not After : Dec 7 10:02:57 2025 GMT Subject: CN=5f592aa5879f425d9681a14aec97e256fada61f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:61:5b:ec:ab:78:c6:2a:6f:09:fe:7b:aa:d0: 29:3c:ce:10:fb:fd:2f:eb:3e:59:6b:51:52:f8:f7: 48:d8:52:69:54:cd:6a:d4:0c:81:77:0e:cc:49:a9: 1c:b6:66:13:38:88:df:fc:0e:3e:7e:c3:23:f3:09: b5:b1:2e:7f:78:76:e8:94:ab:67:d4:a0:ca:79:4e: aa:14:37:59:00:67:74:95:a4:3e:2e:c0:1c:74:67: 9b:fd:0e:5d:b0:01:54:2e:35:6f:0d:fd:d4:e0:80: bb:ff:c9:f1:2b:20:86:a1:75:e7:50:30:5b:33:43: 65:f6:e0:cf:36:65:8e:29:9f:a1:49:8f:40:9a:7b: db:a5:f8:48:11:e1:76:39:ec:a8:07:06:7f:82:b2: 3c:2a:a9:c7:bb:b0:94:e4:4c:ef:49:c1:de:a0:a2: b8:8c:e3:af:e8:2b:5a:da:47:35:f2:6a:bf:5f:f3: 41:eb:d6:06:cf:21:2c:49:68:0f:9e:9a:3d:5f:87: 86:11:8c:2a:cf:95:5f:f3:bd:54:31:da:45:2b:10: f8:be:4e:92:34:c5:17:bd:1d:1a:fe:2e:44:5d:dd: 94:05:cb:7c:bb:16:8a:66:fa:fd:c1:9a:fc:3c:b7: 50:65:e2:5d:b6:57:47:3d:f1:ff:c1:86:a6:5e:da: 11:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:59:2A:A5:87:9F:42:5D:96:81:A1:4A:EC:97:E2:56:FA:DA:61:F5 X509v3 Authority Key Identifier: keyid:31:DA:92:03:21:C6:C8:2C:EE:69:29:E7:98:FC:93:72:BA:CC:B9:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdqSAyHGyCzuaSnnmPyTcrrMuSU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/491c92-8967-473e-9ea7-a589787bff90/1/MdqSAyHGyCzuaSnnmPyTcrrMuSU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/50/491c92-8967-473e-9ea7-a589787bff90/1/MdqSAyHGyCzuaSnnmPyTcrrMuSU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:df:7e:2c:8e:4f:d1:7e:05:6c:f7:2a:28:62:fc:bc:d9:00: c1:32:74:2b:9b:d2:40:36:92:3b:ea:ed:a0:40:ac:e9:75:34: da:d9:60:c8:ce:2b:d2:6e:0e:8a:d2:f7:7f:24:74:24:9e:0a: 6e:de:bc:ce:88:95:50:15:aa:e9:ed:18:7c:17:7d:90:50:7f: fc:5b:25:25:e8:a2:d3:92:9f:d6:40:6e:82:f8:cc:8c:05:fd: 19:15:70:d7:4e:b1:34:3f:7a:39:d8:49:e8:5b:79:0a:5d:1f: c8:57:2f:d4:ea:9d:a5:94:b5:70:8e:1f:c9:19:b4:fc:bb:e5: 0f:68:0a:c3:ba:b1:6b:f1:c3:0d:d9:f7:bc:71:2d:3a:7a:20: 09:03:82:33:6e:a9:75:a7:b3:2c:a8:c3:a4:5d:e3:f3:94:61: 75:d7:56:66:25:77:a4:70:50:db:75:0d:1f:3c:34:5a:f6:02: 6f:cb:03:b6:1f:08:c1:82:4a:c7:92:b3:42:98:85:5e:d5:68: dd:e5:f4:6f:0f:ac:55:93:7f:2f:24:27:69:a0:7c:1f:82:2a: e4:25:a9:5c:bd:2b:65:9f:23:ab:34:90:7d:10:ea:f6:3e:52: 36:fd:d5:69:61:0f:fd:e4:1e:fa:20:25:3d:c2:6b:78:b0:56: 5e:db:32:a0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHVUlnd5wUojqBawD8+58MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxZGE5MjAzMjFjNmM4MmNlZTY5MjllNzk4ZmM5MzcyYmFj Y2I5MjUwHhcNMjUxMjA2MTAwMjU3WhcNMjUxMjA3MTAwMjU3WjAzMTEwLwYDVQQD Eyg1ZjU5MmFhNTg3OWY0MjVkOTY4MWExNGFlYzk3ZTI1NmZhZGE2MWY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsmFb7Kt4xipvCf57qtApPM4Q+/0v 6z5Za1FS+PdI2FJpVM1q1AyBdw7MSakctmYTOIjf/A4+fsMj8wm1sS5/eHbolKtn 1KDKeU6qFDdZAGd0laQ+LsAcdGeb/Q5dsAFULjVvDf3U4IC7/8nxKyCGoXXnUDBb M0Nl9uDPNmWOKZ+hSY9AmnvbpfhIEeF2OeyoBwZ/grI8KqnHu7CU5EzvScHeoKK4 jOOv6Cta2kc18mq/X/NB69YGzyEsSWgPnpo9X4eGEYwqz5Vf871UMdpFKxD4vk6S NMUXvR0a/i5EXd2UBct8uxaKZvr9wZr8PLdQZeJdtldHPfH/wYamXtoRAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF9ZKqWHn0JdloGhSuyX4lb62mH1MB8GA1UdIwQY MBaAFDHakgMhxsgs7mkp55j8k3K6zLklMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTWRxU0F5SEd5Q3p1YVNubm1QeVRjcnJNdVNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC80OTFjOTItODk2Ny00NzNlLTllYTct YTU4OTc4N2JmZjkwLzEvTWRxU0F5SEd5Q3p1YVNubm1QeVRjcnJNdVNVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MC80OTFjOTItODk2Ny00NzNlLTllYTctYTU4OTc4N2JmZjkw LzEvTWRxU0F5SEd5Q3p1YVNubm1QeVRjcnJNdVNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjd9+LI5P 0X4FbPcqKGL8vNkAwTJ0K5vSQDaSO+rtoECs6XU02tlgyM4r0m4OitL3fyR0JJ4K bt68zoiVUBWq6e0YfBd9kFB//FslJeii05Kf1kBugvjMjAX9GRVw106xND96OdhJ 6Ft5Cl0fyFcv1OqdpZS1cI4fyRm0/LvlD2gKw7qxa/HDDdn3vHEtOnogCQOCM26p daezLKjDpF3j85RhdddWZiV3pHBQ23UNHzw0WvYCb8sDth8IwYJKx5KzQpiFXtVo 3eX0bw+sVZN/LyQnaaB8H4Iq5CWpXL0rZZ8jqzSQfRDq9j5SNv3VaWEP/eQe+iAl PcJreLBWXtsyoA== -----END CERTIFICATE-----Generated at Sat Dec 6 14:04:08 2025 by rpki-client