This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/01acea-ca76-4a72-bc73-318636c4dc86/1/_mxqYEID4ZvSNsDjZBrmlkTUqnQ.mft File: _mxqYEID4ZvSNsDjZBrmlkTUqnQ.mft (raw, json) Hash identifier: MWt8lpcB9AnkcsSHXwQGXGCdTyCng4flMdgrliPruKQ= Subject key identifier: A7:43:B0:D9:40:3F:F0:03:AC:FB:1D:70:93:EE:1F:AB:E3:1E:2B:C2 Authority key identifier: FE:6C:6A:60:42:03:E1:9B:D2:36:C0:E3:64:1A:E6:96:44:D4:AA:74 Certificate issuer: /CN=fe6c6a604203e19bd236c0e3641ae69644d4aa74 Certificate serial: 019AF19B264EF73ABC75C1633076BDE4A350 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_mxqYEID4ZvSNsDjZBrmlkTUqnQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/01acea-ca76-4a72-bc73-318636c4dc86/1/_mxqYEID4ZvSNsDjZBrmlkTUqnQ.mft Manifest number: 01B4 Signing time: Sat 06 Dec 2025 03:01:08 +0000 Manifest this update: Sat 06 Dec 2025 03:01:08 +0000 Manifest next update: Sun 07 Dec 2025 03:01:08 +0000 Files and hashes: 1: _mxqYEID4ZvSNsDjZBrmlkTUqnQ.crl (hash: Z7k8eqc8ZE768h6sJUeLanCxLGXB9EyDMaOoJnB6xM8=) 2: oidQOFv_T3t4hgPCm6h_UreADsw.roa (hash: y9QfSR0j2NSF/2jSZyP0tv3TDh1rVPF+ZeadaUNAaYk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/01acea-ca76-4a72-bc73-318636c4dc86/1/_mxqYEID4ZvSNsDjZBrmlkTUqnQ.crl rsync://rpki.ripe.net/repository/DEFAULT/51/01acea-ca76-4a72-bc73-318636c4dc86/1/_mxqYEID4ZvSNsDjZBrmlkTUqnQ.mft rsync://rpki.ripe.net/repository/DEFAULT/_mxqYEID4ZvSNsDjZBrmlkTUqnQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:26:4e:f7:3a:bc:75:c1:63:30:76:bd:e4:a3:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fe6c6a604203e19bd236c0e3641ae69644d4aa74 Validity Not Before: Dec 6 03:01:08 2025 GMT Not After : Dec 7 03:01:08 2025 GMT Subject: CN=a743b0d9403ff003acfb1d7093ee1fabe31e2bc2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:bf:f9:23:87:b9:44:ca:53:3c:f0:01:6d:2b: b1:bb:6e:2f:4d:aa:ab:26:db:b2:fe:79:64:18:ec: 0e:ba:d7:70:a9:e3:2e:e0:74:25:10:ea:dd:cc:b2: 7d:99:7a:d8:ae:56:de:91:82:a3:c8:fa:9f:50:c0: b6:b8:a2:25:8b:fc:c1:73:52:b5:92:9b:2b:01:41: b4:78:0b:b0:fd:52:b1:78:8a:41:5b:79:b6:63:6a: 8b:ce:17:21:4a:85:0b:bb:6a:b8:ec:fa:17:85:e4: 2b:98:a9:54:32:b1:d2:5c:ae:c3:c0:fe:f6:ef:f4: 4a:7d:8f:dd:04:d3:64:ce:b3:f6:a3:c2:54:0a:bc: d4:d7:17:37:77:50:13:8a:d7:65:d8:15:84:04:49: 90:92:5a:9e:37:cd:56:87:d1:91:c0:17:0d:9b:8e: 34:f7:6a:08:fb:97:01:f2:b1:13:ec:06:46:8a:28: ef:e2:54:f9:eb:c8:b8:5c:8d:58:f7:21:84:7e:a9: 47:37:6b:4c:fb:81:6a:80:6f:d1:24:6e:17:c1:8e: b2:b7:1d:02:bf:a0:81:88:d2:cc:b6:29:e6:37:7f: bc:86:23:c8:0e:cb:45:c4:f3:f1:96:06:db:73:ee: 59:42:a3:c6:a5:66:45:71:ea:fa:49:e0:89:ed:f4: 5c:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:43:B0:D9:40:3F:F0:03:AC:FB:1D:70:93:EE:1F:AB:E3:1E:2B:C2 X509v3 Authority Key Identifier: keyid:FE:6C:6A:60:42:03:E1:9B:D2:36:C0:E3:64:1A:E6:96:44:D4:AA:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_mxqYEID4ZvSNsDjZBrmlkTUqnQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/01acea-ca76-4a72-bc73-318636c4dc86/1/_mxqYEID4ZvSNsDjZBrmlkTUqnQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/01acea-ca76-4a72-bc73-318636c4dc86/1/_mxqYEID4ZvSNsDjZBrmlkTUqnQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:a9:e6:f4:1b:aa:2b:84:6f:0a:64:49:28:4d:13:cb:58:2e: c2:94:39:59:61:f9:27:91:41:98:a4:6e:0f:d8:9d:dc:c0:de: 5e:54:2b:b7:7a:4b:81:05:7d:a8:8a:b7:c3:ef:fe:ab:95:db: ab:50:63:a8:63:1a:ca:d5:8c:ee:6b:70:12:e3:2b:35:03:a2: c3:ea:f2:fd:5c:19:ad:da:6d:50:52:cb:2e:be:08:32:a0:d4: f9:a6:13:14:79:42:31:17:3a:9f:75:8f:b0:18:54:7e:b6:fa: 33:e7:8f:40:92:0d:4f:75:06:a8:0f:7b:ff:ae:c3:74:8a:5d: ab:dd:06:42:0a:0a:3d:4c:e9:e2:3c:5d:a4:75:ca:a4:4c:21: 8a:6c:e9:4d:99:48:75:fb:d8:d9:56:e8:94:79:71:3a:ca:f7: 83:7c:cc:b8:04:d2:a1:0a:2d:a3:24:a0:fb:de:c2:22:73:cd: 9d:d0:00:e3:c4:aa:bb:4a:82:be:a5:8d:8f:0e:4b:6e:fa:9a: 33:94:49:24:83:4e:c3:8a:07:51:1f:81:17:55:a4:3c:51:90: bc:63:b2:90:ed:ed:99:2e:c0:7a:30:9b:49:d4:fb:bb:41:f7: b7:04:36:19:e6:bb:b7:ba:99:32:63:3a:d5:79:f2:45:14:f5: a2:3a:84:b8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmyZO9zq8dcFjMHa95KNQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZlNmM2YTYwNDIwM2UxOWJkMjM2YzBlMzY0MWFlNjk2NDRk NGFhNzQwHhcNMjUxMjA2MDMwMTA4WhcNMjUxMjA3MDMwMTA4WjAzMTEwLwYDVQQD EyhhNzQzYjBkOTQwM2ZmMDAzYWNmYjFkNzA5M2VlMWZhYmUzMWUyYmMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1L/5I4e5RMpTPPABbSuxu24vTaqr Jtuy/nlkGOwOutdwqeMu4HQlEOrdzLJ9mXrYrlbekYKjyPqfUMC2uKIli/zBc1K1 kpsrAUG0eAuw/VKxeIpBW3m2Y2qLzhchSoULu2q47PoXheQrmKlUMrHSXK7DwP72 7/RKfY/dBNNkzrP2o8JUCrzU1xc3d1ATitdl2BWEBEmQklqeN81Wh9GRwBcNm440 92oI+5cB8rET7AZGiijv4lT568i4XI1Y9yGEfqlHN2tM+4FqgG/RJG4XwY6ytx0C v6CBiNLMtinmN3+8hiPIDstFxPPxlgbbc+5ZQqPGpWZFcer6SeCJ7fRcQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKdDsNlAP/ADrPsdcJPuH6vjHivCMB8GA1UdIwQY MBaAFP5samBCA+Gb0jbA42Qa5pZE1Kp0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX214cVlFSUQ0WnZTTnNEalpCcm1sa1RVcW5RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS8wMWFjZWEtY2E3Ni00YTcyLWJjNzMt MzE4NjM2YzRkYzg2LzEvX214cVlFSUQ0WnZTTnNEalpCcm1sa1RVcW5RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS8wMWFjZWEtY2E3Ni00YTcyLWJjNzMtMzE4NjM2YzRkYzg2 LzEvX214cVlFSUQ0WnZTTnNEalpCcm1sa1RVcW5RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASanm9Buq K4RvCmRJKE0Ty1guwpQ5WWH5J5FBmKRuD9id3MDeXlQrt3pLgQV9qIq3w+/+q5Xb q1BjqGMaytWM7mtwEuMrNQOiw+ry/VwZrdptUFLLLr4IMqDU+aYTFHlCMRc6n3WP sBhUfrb6M+ePQJINT3UGqA97/67DdIpdq90GQgoKPUzp4jxdpHXKpEwhimzpTZlI dfvY2VbolHlxOsr3g3zMuATSoQotoySg+97CInPNndAA48Squ0qCvqWNjw5Lbvqa M5RJJINOw4oHUR+BF1WkPFGQvGOykO3tmS7AejCbSdT7u0H3twQ2Gea7t7qZMmM6 1XnyRRT1ojqEuA== -----END CERTIFICATE-----Generated at Sat Dec 6 11:39:16 2025 by rpki-client