This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/fd2294-cf37-4fc9-9edd-a4f7b088bc1a/1/MtRJGf3QivuaTQqHeJIwESUd1_A.mft File: MtRJGf3QivuaTQqHeJIwESUd1_A.mft (raw, json) Hash identifier: usAXcIxdxopXtcd03r7Sp4DO1uBy8onNIXcOCB7OclA= Subject key identifier: 71:42:F3:94:EE:FF:2C:C5:2F:E9:E3:0A:56:A4:C3:DE:B5:74:82:27 Authority key identifier: 32:D4:49:19:FD:D0:8A:FB:9A:4D:0A:87:78:92:30:11:25:1D:D7:F0 Certificate issuer: /CN=32d44919fdd08afb9a4d0a8778923011251dd7f0 Certificate serial: 019AF31CD06F716FD99C1A883533B276BF08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MtRJGf3QivuaTQqHeJIwESUd1_A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/fd2294-cf37-4fc9-9edd-a4f7b088bc1a/1/MtRJGf3QivuaTQqHeJIwESUd1_A.mft Manifest number: 0DE4 Signing time: Sat 06 Dec 2025 10:02:23 +0000 Manifest this update: Sat 06 Dec 2025 10:02:23 +0000 Manifest next update: Sun 07 Dec 2025 10:02:23 +0000 Files and hashes: 1: EcMSrqduSSEdpF-7ulVjTtPYpNE.roa (hash: ZA8qM0bISMva3I03nVcIL7KQUByRBGHdqun/Plkp8KA=) 2: MtRJGf3QivuaTQqHeJIwESUd1_A.crl (hash: DJh/3rmyY3LjTW+3v9Yg4fJx4DUWYF1iQk0tDA3Wwas=) 3: ant41ZKD96l4WAVLo9wrXso0aLA.roa (hash: 4K6WUz90Jye7WV1VDdQMdxKlwlzmRn7OIrbr4mY6WUc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/fd2294-cf37-4fc9-9edd-a4f7b088bc1a/1/MtRJGf3QivuaTQqHeJIwESUd1_A.crl rsync://rpki.ripe.net/repository/DEFAULT/6f/fd2294-cf37-4fc9-9edd-a4f7b088bc1a/1/MtRJGf3QivuaTQqHeJIwESUd1_A.mft rsync://rpki.ripe.net/repository/DEFAULT/MtRJGf3QivuaTQqHeJIwESUd1_A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:d0:6f:71:6f:d9:9c:1a:88:35:33:b2:76:bf:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32d44919fdd08afb9a4d0a8778923011251dd7f0 Validity Not Before: Dec 6 10:02:23 2025 GMT Not After : Dec 7 10:02:23 2025 GMT Subject: CN=7142f394eeff2cc52fe9e30a56a4c3deb5748227 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:e4:34:28:19:41:09:61:d7:62:69:10:a1:68: 15:08:e9:1a:cf:63:05:21:5e:de:91:4f:fc:36:77: c3:50:aa:bd:b1:56:36:7b:dd:ad:42:35:97:0c:5e: 22:e8:8f:aa:d7:c5:3c:8d:9e:ee:6c:b6:f2:d0:5d: ce:ee:e8:7f:1f:ad:9b:41:b0:48:26:b4:39:10:f0: f9:01:e9:37:9a:68:29:02:f5:8f:1a:fe:92:8f:84: 97:d3:b2:06:c6:e7:f8:fc:58:de:16:a4:ee:58:bd: 94:a2:7a:ba:8d:c3:a4:20:98:da:a8:fe:e7:95:0c: 14:27:84:cf:c3:f3:c6:5c:6c:2b:07:c0:c8:9a:f0: f6:15:52:25:07:25:1d:22:63:ae:1c:6f:f6:98:ad: ea:08:37:fa:eb:a3:bf:17:7d:60:f2:0b:0e:26:e3: b5:f6:9b:95:49:18:b5:81:51:d5:54:41:56:d5:83: 2a:10:56:b0:13:46:97:9a:9e:bd:68:82:89:ac:4a: 91:0a:6d:dd:bf:92:dd:a7:87:84:73:e0:32:15:59: 34:84:b4:86:60:16:72:78:5d:ef:21:77:bf:01:46: 00:38:f4:91:4c:56:e9:36:1b:a8:25:40:5b:c2:a2: de:88:f0:6a:f1:cd:cd:6e:fa:f1:92:84:02:48:5a: 23:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:42:F3:94:EE:FF:2C:C5:2F:E9:E3:0A:56:A4:C3:DE:B5:74:82:27 X509v3 Authority Key Identifier: keyid:32:D4:49:19:FD:D0:8A:FB:9A:4D:0A:87:78:92:30:11:25:1D:D7:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MtRJGf3QivuaTQqHeJIwESUd1_A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/fd2294-cf37-4fc9-9edd-a4f7b088bc1a/1/MtRJGf3QivuaTQqHeJIwESUd1_A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/fd2294-cf37-4fc9-9edd-a4f7b088bc1a/1/MtRJGf3QivuaTQqHeJIwESUd1_A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:d6:4e:ce:d9:18:55:24:da:0d:60:98:ea:c5:06:58:bf:8f: 47:25:09:d1:04:fe:0d:42:0e:55:09:7a:e2:fd:ab:47:bc:57: a8:0a:47:98:38:4f:9b:62:83:94:c7:0a:08:e8:5a:37:a2:b0: 19:4a:a6:af:b6:8b:10:f8:43:59:38:24:b2:66:d4:0e:e1:90: 1e:f0:41:11:75:31:fc:85:e8:45:9f:14:51:50:31:7b:00:b0: c3:c9:23:ef:50:84:ec:5f:7c:b3:21:7a:59:c2:5d:3e:ff:d7: 25:79:3c:87:03:34:2c:bd:94:ee:2d:6b:2e:50:33:7a:d2:88: 83:fa:21:92:9f:87:52:98:3e:dd:5a:bd:3d:12:bf:3e:1e:6e: 06:3b:c1:68:76:4f:77:6a:7c:c3:8c:c2:17:34:c4:45:fe:a9: 96:c4:e4:b7:ff:90:a3:f6:da:3c:3a:fb:14:fb:06:9c:c8:ef: bc:c8:19:57:47:0c:63:5c:e8:c4:65:2e:17:a9:a0:e4:e8:24: f6:c1:3e:ce:4d:23:60:f9:59:c8:e2:3a:79:8a:1a:8c:ef:df: 4a:f5:5e:1f:80:a5:e0:66:27:c0:04:88:34:f8:cf:26:f6:6c: 48:a9:07:c5:97:aa:08:7f:c7:85:fb:44:33:41:29:a0:d8:81: 86:ea:a8:e5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHNBvcW/ZnBqINTOydr8IMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyZDQ0OTE5ZmRkMDhhZmI5YTRkMGE4Nzc4OTIzMDExMjUx ZGQ3ZjAwHhcNMjUxMjA2MTAwMjIzWhcNMjUxMjA3MTAwMjIzWjAzMTEwLwYDVQQD Eyg3MTQyZjM5NGVlZmYyY2M1MmZlOWUzMGE1NmE0YzNkZWI1NzQ4MjI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1OQ0KBlBCWHXYmkQoWgVCOkaz2MF IV7ekU/8NnfDUKq9sVY2e92tQjWXDF4i6I+q18U8jZ7ubLby0F3O7uh/H62bQbBI JrQ5EPD5Aek3mmgpAvWPGv6Sj4SX07IGxuf4/FjeFqTuWL2Uonq6jcOkIJjaqP7n lQwUJ4TPw/PGXGwrB8DImvD2FVIlByUdImOuHG/2mK3qCDf666O/F31g8gsOJuO1 9puVSRi1gVHVVEFW1YMqEFawE0aXmp69aIKJrEqRCm3dv5Ldp4eEc+AyFVk0hLSG YBZyeF3vIXe/AUYAOPSRTFbpNhuoJUBbwqLeiPBq8c3NbvrxkoQCSFojAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHFC85Tu/yzFL+njClakw961dIInMB8GA1UdIwQY MBaAFDLUSRn90Ir7mk0Kh3iSMBElHdfwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTXRSSkdmM1FpdnVhVFFxSGVKSXdFU1VkMV9BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi9mZDIyOTQtY2YzNy00ZmM5LTllZGQt YTRmN2IwODhiYzFhLzEvTXRSSkdmM1FpdnVhVFFxSGVKSXdFU1VkMV9BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Zi9mZDIyOTQtY2YzNy00ZmM5LTllZGQtYTRmN2IwODhiYzFh LzEvTXRSSkdmM1FpdnVhVFFxSGVKSXdFU1VkMV9BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP9ZOztkY VSTaDWCY6sUGWL+PRyUJ0QT+DUIOVQl64v2rR7xXqApHmDhPm2KDlMcKCOhaN6Kw GUqmr7aLEPhDWTgksmbUDuGQHvBBEXUx/IXoRZ8UUVAxewCww8kj71CE7F98syF6 WcJdPv/XJXk8hwM0LL2U7i1rLlAzetKIg/ohkp+HUpg+3Vq9PRK/Ph5uBjvBaHZP d2p8w4zCFzTERf6plsTkt/+Qo/baPDr7FPsGnMjvvMgZV0cMY1zoxGUuF6mg5Ogk 9sE+zk0jYPlZyOI6eYoajO/fSvVeH4Cl4GYnwASINPjPJvZsSKkHxZeqCH/HhftE M0EpoNiBhuqo5Q== -----END CERTIFICATE-----Generated at Sat Dec 6 13:03:31 2025 by rpki-client