This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/c5c233-b478-44bc-ae9e-48bc8cb3cdaa/1/mpYaEhxSAFTfTOWeVZKsaLBQa-8.mft File: mpYaEhxSAFTfTOWeVZKsaLBQa-8.mft (raw, json) Hash identifier: 7QJdTpWXi79EQQyqru20Gcetq5cGTc9r1XZ2tdbNMbs= Subject key identifier: DE:BD:28:E1:2A:8B:06:0C:F9:5F:11:86:2C:61:E7:76:D4:24:54:B8 Authority key identifier: 9A:96:1A:12:1C:52:00:54:DF:4C:E5:9E:55:92:AC:68:B0:50:6B:EF Certificate issuer: /CN=9a961a121c520054df4ce59e5592ac68b0506bef Certificate serial: 019AF19AA8AB6D68D223B96F2A55029A85D2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mpYaEhxSAFTfTOWeVZKsaLBQa-8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/c5c233-b478-44bc-ae9e-48bc8cb3cdaa/1/mpYaEhxSAFTfTOWeVZKsaLBQa-8.mft Manifest number: 0756 Signing time: Sat 06 Dec 2025 03:00:35 +0000 Manifest this update: Sat 06 Dec 2025 03:00:35 +0000 Manifest next update: Sun 07 Dec 2025 03:00:35 +0000 Files and hashes: 1: mpYaEhxSAFTfTOWeVZKsaLBQa-8.crl (hash: Nxb41b0uxwHfs3JJOihEAX6LXblvPg2W5zkVmaH8NuE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/c5c233-b478-44bc-ae9e-48bc8cb3cdaa/1/mpYaEhxSAFTfTOWeVZKsaLBQa-8.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/c5c233-b478-44bc-ae9e-48bc8cb3cdaa/1/mpYaEhxSAFTfTOWeVZKsaLBQa-8.mft rsync://rpki.ripe.net/repository/DEFAULT/mpYaEhxSAFTfTOWeVZKsaLBQa-8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:a8:ab:6d:68:d2:23:b9:6f:2a:55:02:9a:85:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a961a121c520054df4ce59e5592ac68b0506bef Validity Not Before: Dec 6 03:00:35 2025 GMT Not After : Dec 7 03:00:35 2025 GMT Subject: CN=debd28e12a8b060cf95f11862c61e776d42454b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:58:f8:d6:70:a2:be:9f:5f:40:57:83:71:2d: 02:dc:5c:d6:84:9f:69:9a:44:08:47:7d:02:1e:28: 03:9c:3c:75:8e:28:bc:5e:97:d2:fa:22:1b:e5:51: 54:14:70:a9:dc:9b:0d:d6:65:b1:53:2d:5c:dc:52: 8f:b0:5b:31:f3:3a:af:83:4e:e2:17:97:df:2d:0d: 36:81:a4:b9:a0:9e:0c:e1:91:69:6e:ff:04:dc:34: 09:bd:10:20:bd:57:eb:9e:0e:38:da:af:36:0a:f8: b4:22:75:88:7e:ed:fd:22:a5:84:b1:a3:d8:c6:6d: 5c:2d:5b:9f:41:c6:d0:31:b0:c3:49:4c:2a:8f:96: ff:cd:ed:f4:d5:73:61:c7:99:36:82:69:8b:89:b6: c9:c4:eb:d0:2c:66:96:e1:2c:5f:67:dc:5c:23:7f: 9d:20:4e:af:8b:6f:a4:19:c8:45:ed:f1:59:dc:9b: 1f:3a:a9:af:fd:6c:3d:cb:fb:76:54:ee:f6:46:05: 4b:28:3c:d3:5d:11:7c:80:76:d8:db:d8:29:f1:f9: 32:91:eb:8b:18:66:2d:d5:91:ee:80:37:d5:04:fb: 9c:57:56:84:c6:53:cf:a6:cc:4a:8e:d1:f4:b7:ab: e6:0f:1b:e5:5a:00:44:54:04:34:30:f0:19:65:b9: c9:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:BD:28:E1:2A:8B:06:0C:F9:5F:11:86:2C:61:E7:76:D4:24:54:B8 X509v3 Authority Key Identifier: keyid:9A:96:1A:12:1C:52:00:54:DF:4C:E5:9E:55:92:AC:68:B0:50:6B:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mpYaEhxSAFTfTOWeVZKsaLBQa-8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/c5c233-b478-44bc-ae9e-48bc8cb3cdaa/1/mpYaEhxSAFTfTOWeVZKsaLBQa-8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/c5c233-b478-44bc-ae9e-48bc8cb3cdaa/1/mpYaEhxSAFTfTOWeVZKsaLBQa-8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:a8:6b:1f:d3:c4:7e:34:4f:21:9d:24:87:02:64:47:4e:60: 80:c4:a6:31:95:e4:3f:66:9c:e2:23:54:01:37:5d:8c:fb:12: b0:33:7d:8f:6e:95:5c:a2:f7:25:26:06:b0:5c:5f:ee:7e:ec: dd:3a:ff:3c:9a:f4:cd:29:04:44:eb:e2:11:f2:a6:78:d3:d1: 55:b3:d3:c5:6d:06:a0:31:50:39:4f:94:c5:28:7b:bc:85:f6: 50:ef:5a:5c:c3:3d:72:97:43:91:cb:ed:7e:ae:6b:40:84:2c: 6a:7b:18:1b:e2:22:32:2e:1b:ef:e9:fa:13:fc:c7:15:ea:55: 28:dc:60:c5:c9:0e:49:9e:37:a9:52:0e:40:75:03:10:7b:ee: 49:96:7f:df:ac:07:c6:d6:37:69:a6:d2:f5:05:9b:84:0b:92: 7d:c8:25:5c:fa:8f:f1:27:25:1c:bb:e1:8f:89:e0:7f:73:f3: 7d:8f:fb:19:22:ca:5b:76:41:d0:40:7e:05:0f:71:b3:b7:60: 06:a6:c2:8e:e6:ee:0f:fe:bc:68:3a:49:85:a9:5b:47:f5:87: bc:d9:27:26:dd:a9:a6:6a:5c:84:7e:ae:ed:ed:ec:66:08:0f: d4:66:ca:ad:c1:1b:d7:62:c6:3c:81:c2:7b:e1:97:7b:9b:7e: 4b:9a:79:52 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmqirbWjSI7lvKlUCmoXSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhOTYxYTEyMWM1MjAwNTRkZjRjZTU5ZTU1OTJhYzY4YjA1 MDZiZWYwHhcNMjUxMjA2MDMwMDM1WhcNMjUxMjA3MDMwMDM1WjAzMTEwLwYDVQQD EyhkZWJkMjhlMTJhOGIwNjBjZjk1ZjExODYyYzYxZTc3NmQ0MjQ1NGI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzlj41nCivp9fQFeDcS0C3FzWhJ9p mkQIR30CHigDnDx1jii8XpfS+iIb5VFUFHCp3JsN1mWxUy1c3FKPsFsx8zqvg07i F5ffLQ02gaS5oJ4M4ZFpbv8E3DQJvRAgvVfrng442q82Cvi0InWIfu39IqWEsaPY xm1cLVufQcbQMbDDSUwqj5b/ze301XNhx5k2gmmLibbJxOvQLGaW4SxfZ9xcI3+d IE6vi2+kGchF7fFZ3JsfOqmv/Ww9y/t2VO72RgVLKDzTXRF8gHbY29gp8fkykeuL GGYt1ZHugDfVBPucV1aExlPPpsxKjtH0t6vmDxvlWgBEVAQ0MPAZZbnJWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN69KOEqiwYM+V8Rhixh53bUJFS4MB8GA1UdIwQY MBaAFJqWGhIcUgBU30zlnlWSrGiwUGvvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbXBZYUVoeFNBRlRmVE9XZVZaS3NhTEJRYS04LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS9jNWMyMzMtYjQ3OC00NGJjLWFlOWUt NDhiYzhjYjNjZGFhLzEvbXBZYUVoeFNBRlRmVE9XZVZaS3NhTEJRYS04Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS9jNWMyMzMtYjQ3OC00NGJjLWFlOWUtNDhiYzhjYjNjZGFh LzEvbXBZYUVoeFNBRlRmVE9XZVZaS3NhTEJRYS04LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALqhrH9PE fjRPIZ0khwJkR05ggMSmMZXkP2ac4iNUATddjPsSsDN9j26VXKL3JSYGsFxf7n7s 3Tr/PJr0zSkEROviEfKmeNPRVbPTxW0GoDFQOU+UxSh7vIX2UO9aXMM9cpdDkcvt fq5rQIQsansYG+IiMi4b7+n6E/zHFepVKNxgxckOSZ43qVIOQHUDEHvuSZZ/36wH xtY3aabS9QWbhAuSfcglXPqP8SclHLvhj4ngf3PzfY/7GSLKW3ZB0EB+BQ9xs7dg BqbCjubuD/68aDpJhalbR/WHvNknJt2ppmpchH6u7e3sZggP1GbKrcEb12LGPIHC e+GXe5t+S5p5Ug== -----END CERTIFICATE-----Generated at Sat Dec 6 08:26:39 2025 by rpki-client