This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/84f86e-4ea7-4db3-aa30-c2c9e2393a32/1/MX71WudtQiUE6uWyBnJNNkQzEcc.mft File: MX71WudtQiUE6uWyBnJNNkQzEcc.mft (raw, json) Hash identifier: pZeOk9WRkASoIROTsWwMlROtZcQlGlM5IBnFzPGuxmQ= Subject key identifier: 25:88:CD:A5:E9:56:3B:B6:A2:1C:94:BD:3F:20:C6:F6:98:60:74:03 Authority key identifier: 31:7E:F5:5A:E7:6D:42:25:04:EA:E5:B2:06:72:4D:36:44:33:11:C7 Certificate issuer: /CN=317ef55ae76d422504eae5b206724d36443311c7 Certificate serial: 019B3A21E542B587D8755EAA974D36947373 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MX71WudtQiUE6uWyBnJNNkQzEcc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/84f86e-4ea7-4db3-aa30-c2c9e2393a32/1/MX71WudtQiUE6uWyBnJNNkQzEcc.mft Manifest number: 1787 Signing time: Sat 20 Dec 2025 05:00:58 +0000 Manifest this update: Sat 20 Dec 2025 05:00:58 +0000 Manifest next update: Sun 21 Dec 2025 05:00:58 +0000 Files and hashes: 1: 6KI42LA3k4Z423gzE8zSlIe9RA4.roa (hash: MywiSVripv33Y3DFEx1AfwLFpUpd5icicODvhSpR2Lc=) 2: MX71WudtQiUE6uWyBnJNNkQzEcc.crl (hash: PyiskdrKcgKky40AWXh6oBa4ZbUVumj/xhw5QJIkamg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/84f86e-4ea7-4db3-aa30-c2c9e2393a32/1/MX71WudtQiUE6uWyBnJNNkQzEcc.crl rsync://rpki.ripe.net/repository/DEFAULT/65/84f86e-4ea7-4db3-aa30-c2c9e2393a32/1/MX71WudtQiUE6uWyBnJNNkQzEcc.mft rsync://rpki.ripe.net/repository/DEFAULT/MX71WudtQiUE6uWyBnJNNkQzEcc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 05:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:21:e5:42:b5:87:d8:75:5e:aa:97:4d:36:94:73:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=317ef55ae76d422504eae5b206724d36443311c7 Validity Not Before: Dec 20 05:00:58 2025 GMT Not After : Dec 21 05:00:58 2025 GMT Subject: CN=2588cda5e9563bb6a21c94bd3f20c6f698607403 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:f9:ff:27:c4:9c:2a:bb:3a:fc:73:d3:40:3e: 02:98:5c:9e:86:73:6b:13:f3:1b:0d:b9:b7:d4:d5: 32:d8:50:d4:e5:5c:86:cd:33:5c:0a:2d:ec:94:86: c9:bc:26:ce:52:0d:7e:02:c8:10:5d:66:32:d5:a8: 04:61:d9:94:31:c5:d6:2c:45:b2:ff:4d:29:59:ab: d9:aa:be:22:1f:38:fc:d5:5a:82:cd:eb:75:48:0e: d0:bf:70:a2:29:71:d6:14:56:94:b1:16:37:8f:77: c4:5a:be:69:6a:f4:f2:6d:27:21:2a:c2:15:5b:06: 89:f7:0d:8a:c5:95:f8:aa:84:f3:c9:fe:b1:c2:b5: 54:d6:bf:6d:8d:d3:b6:bb:a3:1e:f4:21:7c:69:87: 45:ff:b0:ae:04:21:0c:ad:e3:e7:ca:bd:09:8a:e6: 07:6b:14:71:3f:6d:c2:6c:ad:83:76:ed:c6:f1:b8: 7d:33:da:0e:31:64:03:6e:58:57:fc:83:a2:22:8b: 9e:27:87:4a:73:aa:93:d2:e3:67:8f:df:e1:cc:1c: 15:dd:28:58:d8:17:6c:f7:9e:3e:7c:44:41:0b:91: c7:3c:ae:e0:f2:59:bc:4c:33:b2:36:f1:85:a1:08: 4c:33:62:7b:32:0f:7e:2f:7c:6a:fd:27:31:d2:4a: 42:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:88:CD:A5:E9:56:3B:B6:A2:1C:94:BD:3F:20:C6:F6:98:60:74:03 X509v3 Authority Key Identifier: keyid:31:7E:F5:5A:E7:6D:42:25:04:EA:E5:B2:06:72:4D:36:44:33:11:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MX71WudtQiUE6uWyBnJNNkQzEcc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/84f86e-4ea7-4db3-aa30-c2c9e2393a32/1/MX71WudtQiUE6uWyBnJNNkQzEcc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/84f86e-4ea7-4db3-aa30-c2c9e2393a32/1/MX71WudtQiUE6uWyBnJNNkQzEcc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:dd:ff:12:22:7a:48:41:14:f2:83:81:21:87:be:61:de:bd: 82:0b:cc:82:57:72:8f:23:b6:59:af:56:7d:97:70:a9:d3:bc: e6:3c:61:61:60:81:2d:05:8e:79:32:8d:c4:8c:b4:37:73:23: 47:0a:8f:2d:4c:26:63:40:c9:25:87:1c:d4:d0:43:fd:10:38: c2:98:f2:d4:d2:fd:ca:ca:30:f5:89:4f:30:e9:ff:c0:76:cc: 8c:a0:73:e7:ab:ef:b1:38:f3:2d:c4:74:e8:a5:6f:28:84:93: 21:c6:32:c6:cf:f2:52:e1:20:c0:73:db:58:8b:82:f8:a0:46: 6e:d9:ad:1d:1a:e7:c0:1b:ca:bc:eb:ab:6c:95:99:a9:d2:a0: 07:e2:ad:ab:89:c3:5e:ec:33:f2:40:d7:2e:98:6d:49:34:eb: a7:f0:7a:0f:3c:30:34:dd:c1:b5:e9:20:56:39:84:75:a2:26: 41:e6:62:17:c1:f8:a2:d3:99:c2:05:0b:00:5b:76:0a:99:44: f2:ae:bf:da:64:96:83:a4:e8:92:46:ae:e5:e3:e7:7e:64:33: cd:59:74:84:fb:27:46:b2:95:71:75:62:d9:c4:3f:41:28:0a: e1:bd:cb:6d:6f:49:52:ff:78:eb:95:14:81:72:3a:ba:14:fe: c2:ff:6a:bc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6IeVCtYfYdV6ql002lHNzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxN2VmNTVhZTc2ZDQyMjUwNGVhZTViMjA2NzI0ZDM2NDQz MzExYzcwHhcNMjUxMjIwMDUwMDU4WhcNMjUxMjIxMDUwMDU4WjAzMTEwLwYDVQQD EygyNTg4Y2RhNWU5NTYzYmI2YTIxYzk0YmQzZjIwYzZmNjk4NjA3NDAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu/n/J8ScKrs6/HPTQD4CmFyehnNr E/MbDbm31NUy2FDU5VyGzTNcCi3slIbJvCbOUg1+AsgQXWYy1agEYdmUMcXWLEWy /00pWavZqr4iHzj81VqCzet1SA7Qv3CiKXHWFFaUsRY3j3fEWr5pavTybSchKsIV WwaJ9w2KxZX4qoTzyf6xwrVU1r9tjdO2u6Me9CF8aYdF/7CuBCEMrePnyr0JiuYH axRxP23CbK2Ddu3G8bh9M9oOMWQDblhX/IOiIoueJ4dKc6qT0uNnj9/hzBwV3ShY 2Bds954+fERBC5HHPK7g8lm8TDOyNvGFoQhMM2J7Mg9+L3xq/Scx0kpCUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCWIzaXpVju2ohyUvT8gxvaYYHQDMB8GA1UdIwQY MBaAFDF+9VrnbUIlBOrlsgZyTTZEMxHHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTVg3MVd1ZHRRaVVFNnVXeUJuSk5Oa1F6RWNjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS84NGY4NmUtNGVhNy00ZGIzLWFhMzAt YzJjOWUyMzkzYTMyLzEvTVg3MVd1ZHRRaVVFNnVXeUJuSk5Oa1F6RWNjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS84NGY4NmUtNGVhNy00ZGIzLWFhMzAtYzJjOWUyMzkzYTMy LzEvTVg3MVd1ZHRRaVVFNnVXeUJuSk5Oa1F6RWNjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJt3/EiJ6 SEEU8oOBIYe+Yd69ggvMgldyjyO2Wa9WfZdwqdO85jxhYWCBLQWOeTKNxIy0N3Mj RwqPLUwmY0DJJYcc1NBD/RA4wpjy1NL9ysow9YlPMOn/wHbMjKBz56vvsTjzLcR0 6KVvKISTIcYyxs/yUuEgwHPbWIuC+KBGbtmtHRrnwBvKvOurbJWZqdKgB+Ktq4nD Xuwz8kDXLphtSTTrp/B6DzwwNN3BtekgVjmEdaImQeZiF8H4otOZwgULAFt2CplE 8q6/2mSWg6Tokkau5ePnfmQzzVl0hPsnRrKVcXVi2cQ/QSgK4b3LbW9JUv9465UU gXI6uhT+wv9qvA== -----END CERTIFICATE-----Generated at Sat Dec 20 15:05:21 2025 by rpki-client