This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/9fd57c-90ef-44b0-93e4-fe5aed59a7d9/1/MTzbxLTeVJXuYTF9LnN8LD9_g7o.mft File: MTzbxLTeVJXuYTF9LnN8LD9_g7o.mft (raw, json) Hash identifier: UXMhhSlBU2fva5N7otnjTN2ODMaMvjPd9kcHnAtyQyg= Subject key identifier: E5:42:DF:3C:61:29:04:1A:65:EA:3C:BF:18:FD:5A:B3:BE:BC:65:24 Authority key identifier: 31:3C:DB:C4:B4:DE:54:95:EE:61:31:7D:2E:73:7C:2C:3F:7F:83:BA Certificate issuer: /CN=313cdbc4b4de5495ee61317d2e737c2c3f7f83ba Certificate serial: 019AF20971F6925A0A0A5CFE24A8D8826D42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MTzbxLTeVJXuYTF9LnN8LD9_g7o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/9fd57c-90ef-44b0-93e4-fe5aed59a7d9/1/MTzbxLTeVJXuYTF9LnN8LD9_g7o.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 05:01:36 +0000 Manifest this update: Sat 06 Dec 2025 05:01:36 +0000 Manifest next update: Sun 07 Dec 2025 05:01:36 +0000 Files and hashes: 1: MTzbxLTeVJXuYTF9LnN8LD9_g7o.crl (hash: vkgRt2kyLw9sNNxFTcNEPmbF8sVKZlVXNPn5VIEmQVo=) 2: obw4nOA7tbdHTmeG8UDdlnqVl2Y.roa (hash: irTwgjfFzy8NnkY/EBFl3pB1GcEZSVUg+iwZc/3vTSw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/9fd57c-90ef-44b0-93e4-fe5aed59a7d9/1/MTzbxLTeVJXuYTF9LnN8LD9_g7o.crl rsync://rpki.ripe.net/repository/DEFAULT/57/9fd57c-90ef-44b0-93e4-fe5aed59a7d9/1/MTzbxLTeVJXuYTF9LnN8LD9_g7o.mft rsync://rpki.ripe.net/repository/DEFAULT/MTzbxLTeVJXuYTF9LnN8LD9_g7o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:71:f6:92:5a:0a:0a:5c:fe:24:a8:d8:82:6d:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=313cdbc4b4de5495ee61317d2e737c2c3f7f83ba Validity Not Before: Dec 6 05:01:36 2025 GMT Not After : Dec 7 05:01:36 2025 GMT Subject: CN=e542df3c6129041a65ea3cbf18fd5ab3bebc6524 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:51:15:28:98:57:56:00:19:c3:0e:19:d7:e2: b1:81:c1:9e:a9:f9:fc:be:93:dd:0c:2f:08:20:e3: 51:c0:39:27:56:b3:a7:39:7c:07:33:e3:f6:c7:dc: 2e:aa:51:94:0f:4c:b8:83:d8:f0:44:c9:12:07:d7: 0f:8e:ef:31:78:a4:bf:6b:62:94:91:0b:53:54:23: 08:2b:0d:49:0d:62:31:e2:b4:39:56:d4:ff:cc:3a: ec:3e:0a:3d:da:4d:e1:a9:ee:a9:9e:ea:23:5f:90: 23:a5:4a:62:fb:da:d7:e2:e7:62:7e:98:15:b2:ee: 94:a3:54:51:df:8e:39:60:4f:8b:d4:24:2a:19:d5: e3:e7:19:09:5c:54:26:75:90:13:93:9b:01:cf:40: a9:6f:21:ad:04:65:c7:07:7e:53:2d:de:87:7b:b9: 4b:28:35:3f:d1:78:b6:f7:0b:39:a8:d0:2f:c0:98: 9a:f1:ab:46:29:e9:85:98:70:a8:8c:39:b8:3e:2c: d0:44:49:5e:f0:05:31:80:42:5c:ec:c2:a2:f3:d7: 5f:6e:cc:47:fe:ea:09:bd:48:83:d2:33:88:b7:6d: 6d:6c:12:b3:74:12:10:81:59:66:74:7c:e3:73:7b: 9f:f8:99:ea:57:31:3b:7e:69:4b:02:fc:ad:d6:80: 33:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:42:DF:3C:61:29:04:1A:65:EA:3C:BF:18:FD:5A:B3:BE:BC:65:24 X509v3 Authority Key Identifier: keyid:31:3C:DB:C4:B4:DE:54:95:EE:61:31:7D:2E:73:7C:2C:3F:7F:83:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MTzbxLTeVJXuYTF9LnN8LD9_g7o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/9fd57c-90ef-44b0-93e4-fe5aed59a7d9/1/MTzbxLTeVJXuYTF9LnN8LD9_g7o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/9fd57c-90ef-44b0-93e4-fe5aed59a7d9/1/MTzbxLTeVJXuYTF9LnN8LD9_g7o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:39:c3:4b:c9:cd:ba:8e:71:5d:e5:0a:ac:94:3c:e5:36:c7: 23:1f:19:48:f4:ec:cf:33:aa:d2:83:0b:9a:1e:fe:58:2f:12: ba:e2:a9:cc:fc:b3:58:07:f6:dc:e1:c4:d4:9d:6f:47:2d:4b: fd:2b:e0:63:33:ba:50:48:97:b6:31:8c:5c:da:fb:a3:e0:7b: e2:90:b4:a6:7c:99:d3:70:9b:ad:42:6c:75:17:3f:24:c8:0c: 30:6b:78:d6:01:95:b2:3a:8f:75:ef:7f:3b:92:df:4c:92:bf: f3:92:9f:ab:0b:08:3d:93:0b:c2:f8:ee:12:1c:89:8b:34:73: 0c:0b:ec:a0:d2:0b:31:82:1a:ef:43:e8:13:2d:97:7a:bf:eb: d6:97:d0:09:94:29:4c:d3:f4:53:99:b4:5f:cb:b9:77:8e:78: 0c:50:43:09:0f:4c:4c:ea:91:d7:20:03:f0:b6:4f:ce:bd:af: 59:d7:18:aa:d0:4d:74:fd:68:ed:3f:a3:fe:cb:dc:c6:81:81: 1d:a4:df:6a:4f:c7:8f:82:00:a0:13:52:8e:21:f1:e3:cc:cb: e3:61:55:c3:d4:18:3e:94:fc:67:14:49:f3:35:9a:9f:e3:f8: d1:4b:ee:62:40:93:9d:90:97:56:40:68:d6:10:de:b8:13:c9: 06:ed:45:75 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCXH2kloKClz+JKjYgm1CMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxM2NkYmM0YjRkZTU0OTVlZTYxMzE3ZDJlNzM3YzJjM2Y3 ZjgzYmEwHhcNMjUxMjA2MDUwMTM2WhcNMjUxMjA3MDUwMTM2WjAzMTEwLwYDVQQD EyhlNTQyZGYzYzYxMjkwNDFhNjVlYTNjYmYxOGZkNWFiM2JlYmM2NTI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApFEVKJhXVgAZww4Z1+KxgcGeqfn8 vpPdDC8IIONRwDknVrOnOXwHM+P2x9wuqlGUD0y4g9jwRMkSB9cPju8xeKS/a2KU kQtTVCMIKw1JDWIx4rQ5VtT/zDrsPgo92k3hqe6pnuojX5AjpUpi+9rX4udifpgV su6Uo1RR3445YE+L1CQqGdXj5xkJXFQmdZATk5sBz0CpbyGtBGXHB35TLd6He7lL KDU/0Xi29ws5qNAvwJia8atGKemFmHCojDm4PizQREle8AUxgEJc7MKi89dfbsxH /uoJvUiD0jOIt21tbBKzdBIQgVlmdHzjc3uf+JnqVzE7fmlLAvyt1oAzKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOVC3zxhKQQaZeo8vxj9WrO+vGUkMB8GA1UdIwQY MBaAFDE828S03lSV7mExfS5zfCw/f4O6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTVR6YnhMVGVWSlh1WVRGOUxuTjhMRDlfZzdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny85ZmQ1N2MtOTBlZi00NGIwLTkzZTQt ZmU1YWVkNTlhN2Q5LzEvTVR6YnhMVGVWSlh1WVRGOUxuTjhMRDlfZzdvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny85ZmQ1N2MtOTBlZi00NGIwLTkzZTQtZmU1YWVkNTlhN2Q5 LzEvTVR6YnhMVGVWSlh1WVRGOUxuTjhMRDlfZzdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUTnDS8nN uo5xXeUKrJQ85TbHIx8ZSPTszzOq0oMLmh7+WC8SuuKpzPyzWAf23OHE1J1vRy1L /SvgYzO6UEiXtjGMXNr7o+B74pC0pnyZ03CbrUJsdRc/JMgMMGt41gGVsjqPde9/ O5LfTJK/85KfqwsIPZMLwvjuEhyJizRzDAvsoNILMYIa70PoEy2Xer/r1pfQCZQp TNP0U5m0X8u5d454DFBDCQ9MTOqR1yAD8LZPzr2vWdcYqtBNdP1o7T+j/svcxoGB HaTfak/Hj4IAoBNSjiHx48zL42FVw9QYPpT8ZxRJ8zWan+P40UvuYkCTnZCXVkBo 1hDeuBPJBu1FdQ== -----END CERTIFICATE-----Generated at Sat Dec 6 13:15:16 2025 by rpki-client