This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/a9a1c9-3444-4e5b-a720-18040c8e22ed/1/MjiPz3TS5ZUk9OtNluRMUiLbY-E.mft File: MjiPz3TS5ZUk9OtNluRMUiLbY-E.mft (raw, json) Hash identifier: 2uKRbFoVuRz5BRGY4H9HhocfkiZVtxpiP/BfVDnj67E= Subject key identifier: 3B:D4:76:FE:4F:52:03:C0:09:05:B4:B6:C0:0D:3B:94:47:7B:99:8B Authority key identifier: 32:38:8F:CF:74:D2:E5:95:24:F4:EB:4D:96:E4:4C:52:22:DB:63:E1 Certificate issuer: /CN=32388fcf74d2e59524f4eb4d96e44c5222db63e1 Certificate serial: 019AF46511F15952C395EF5A005B3762882E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MjiPz3TS5ZUk9OtNluRMUiLbY-E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/a9a1c9-3444-4e5b-a720-18040c8e22ed/1/MjiPz3TS5ZUk9OtNluRMUiLbY-E.mft Manifest number: 042F Signing time: Sat 06 Dec 2025 16:00:55 +0000 Manifest this update: Sat 06 Dec 2025 16:00:55 +0000 Manifest next update: Sun 07 Dec 2025 16:00:55 +0000 Files and hashes: 1: Dj76IuhY_ZcEBVE2KiizEPfmq2o.roa (hash: JLl5LgwXFq7LFSA5pMou2kKkB8aQfwmYIzIvN9pXPiU=) 2: MjiPz3TS5ZUk9OtNluRMUiLbY-E.crl (hash: y0zT5NPCkRj2hLYiYydl4inC6NeLGvTUxfnnic3aPIA=) 3: kFZ56ZsF2Br-F4_BOqSTO2KxSHA.roa (hash: S6v3r4laXjhVYZ3ga0DT/nLxzqhZMNCLJUlCOrTApDQ=) 4: l_KNRz-DOMsGFsOq9QowWZSTlSY.roa (hash: npXTC3HvU34eVfQ3A8stCbWQJ3DirxlZznu2fCVNFbM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/a9a1c9-3444-4e5b-a720-18040c8e22ed/1/MjiPz3TS5ZUk9OtNluRMUiLbY-E.crl rsync://rpki.ripe.net/repository/DEFAULT/73/a9a1c9-3444-4e5b-a720-18040c8e22ed/1/MjiPz3TS5ZUk9OtNluRMUiLbY-E.mft rsync://rpki.ripe.net/repository/DEFAULT/MjiPz3TS5ZUk9OtNluRMUiLbY-E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:65:11:f1:59:52:c3:95:ef:5a:00:5b:37:62:88:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32388fcf74d2e59524f4eb4d96e44c5222db63e1 Validity Not Before: Dec 6 16:00:55 2025 GMT Not After : Dec 7 16:00:55 2025 GMT Subject: CN=3bd476fe4f5203c00905b4b6c00d3b94477b998b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:74:7b:4e:80:ef:f1:13:e4:44:06:41:ea:c1: 90:25:a2:a9:98:cd:86:27:42:75:d8:b0:5f:78:91: 5f:da:89:86:3c:d7:be:6b:47:63:7e:34:87:7d:76: 62:78:e0:76:da:89:e5:aa:10:21:0f:6b:31:69:aa: d7:75:7e:22:42:cf:9c:19:24:5f:a7:57:4a:c9:3d: 2d:a9:bc:94:31:79:63:c7:32:2e:ea:e0:c0:1e:6d: 55:63:73:df:43:39:40:e1:f3:ba:43:c9:79:ab:dc: db:3c:2b:48:d4:32:96:2f:79:4f:33:9b:a8:98:0c: 3a:73:71:42:5a:2e:a6:4a:0a:a9:31:37:03:33:b2: 06:fd:70:31:00:bf:c9:6d:b7:80:86:52:5d:49:77: b1:fd:41:de:6e:d4:a1:ab:3b:4d:5e:86:5b:aa:cf: fb:1b:48:8a:a3:d9:2a:87:8d:fe:ec:7a:f9:77:d6: 9a:4d:b0:3d:86:a0:d0:a8:a8:66:18:c7:d6:0f:9d: 45:bb:9e:41:42:f0:64:1b:05:bd:4d:1e:9f:ed:dd: b6:d6:88:b9:dd:c1:12:b0:8b:b9:35:89:ef:f0:fc: 62:89:6d:d8:78:ad:4c:8c:7a:41:70:88:eb:2b:45: f0:82:31:e3:1f:d9:44:4f:2c:34:c2:74:4f:2c:f0: 1a:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:D4:76:FE:4F:52:03:C0:09:05:B4:B6:C0:0D:3B:94:47:7B:99:8B X509v3 Authority Key Identifier: keyid:32:38:8F:CF:74:D2:E5:95:24:F4:EB:4D:96:E4:4C:52:22:DB:63:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MjiPz3TS5ZUk9OtNluRMUiLbY-E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/a9a1c9-3444-4e5b-a720-18040c8e22ed/1/MjiPz3TS5ZUk9OtNluRMUiLbY-E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/73/a9a1c9-3444-4e5b-a720-18040c8e22ed/1/MjiPz3TS5ZUk9OtNluRMUiLbY-E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:0c:82:d4:8a:47:22:2c:90:0f:86:ea:a7:20:2a:71:24:50: e9:36:75:65:93:6c:58:c9:55:6c:68:21:2d:2b:40:0e:32:8c: 72:c2:c1:e4:bc:80:ec:e4:ad:57:ca:d7:27:56:01:5c:06:eb: d5:3a:66:3e:66:10:01:14:a4:af:52:76:89:85:1c:d0:11:d9: fd:3f:c1:39:9c:5f:ec:1d:c5:57:4b:9e:8f:42:d9:84:8b:4a: 64:81:f2:22:07:ca:07:68:70:09:ba:90:c6:12:a8:64:d8:e2: 54:99:b0:e4:c0:9a:b9:a4:ac:7a:76:49:66:c9:f2:1f:91:47: 75:a5:3e:b9:38:cc:a5:35:4a:8c:f4:06:ab:32:81:4e:b6:41: 3f:8c:da:f1:e8:5b:a9:6e:0b:fd:bf:b3:75:b6:ce:f4:b3:1e: a2:70:43:16:86:9b:a8:6c:a1:23:92:4e:81:0f:5b:bc:68:10: 9c:fb:c7:42:32:ec:ae:38:e4:8f:30:e6:ed:ec:10:0d:9f:15: ac:f8:1b:07:af:4d:86:2b:21:f9:8b:c9:7e:f6:61:b7:85:24: 2f:f5:e7:f5:0c:3f:7d:51:7b:e5:04:d9:a0:b8:ad:eb:f7:30: 18:e0:62:63:a2:54:2a:48:fb:ee:88:38:5f:86:fc:e5:f7:d7: 7a:86:de:a5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0ZRHxWVLDle9aAFs3YoguMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyMzg4ZmNmNzRkMmU1OTUyNGY0ZWI0ZDk2ZTQ0YzUyMjJk YjYzZTEwHhcNMjUxMjA2MTYwMDU1WhcNMjUxMjA3MTYwMDU1WjAzMTEwLwYDVQQD EygzYmQ0NzZmZTRmNTIwM2MwMDkwNWI0YjZjMDBkM2I5NDQ3N2I5OThiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtnR7ToDv8RPkRAZB6sGQJaKpmM2G J0J12LBfeJFf2omGPNe+a0djfjSHfXZieOB22onlqhAhD2sxaarXdX4iQs+cGSRf p1dKyT0tqbyUMXljxzIu6uDAHm1VY3PfQzlA4fO6Q8l5q9zbPCtI1DKWL3lPM5uo mAw6c3FCWi6mSgqpMTcDM7IG/XAxAL/JbbeAhlJdSXex/UHebtShqztNXoZbqs/7 G0iKo9kqh43+7Hr5d9aaTbA9hqDQqKhmGMfWD51Fu55BQvBkGwW9TR6f7d221oi5 3cESsIu5NYnv8PxiiW3YeK1MjHpBcIjrK0XwgjHjH9lETyw0wnRPLPAaAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDvUdv5PUgPACQW0tsANO5RHe5mLMB8GA1UdIwQY MBaAFDI4j8900uWVJPTrTZbkTFIi22PhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTWppUHozVFM1WlVrOU90Tmx1Uk1VaUxiWS1FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My9hOWExYzktMzQ0NC00ZTViLWE3MjAt MTgwNDBjOGUyMmVkLzEvTWppUHozVFM1WlVrOU90Tmx1Uk1VaUxiWS1FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83My9hOWExYzktMzQ0NC00ZTViLWE3MjAtMTgwNDBjOGUyMmVk LzEvTWppUHozVFM1WlVrOU90Tmx1Uk1VaUxiWS1FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANQyC1IpH IiyQD4bqpyAqcSRQ6TZ1ZZNsWMlVbGghLStADjKMcsLB5LyA7OStV8rXJ1YBXAbr 1TpmPmYQARSkr1J2iYUc0BHZ/T/BOZxf7B3FV0uej0LZhItKZIHyIgfKB2hwCbqQ xhKoZNjiVJmw5MCauaSsenZJZsnyH5FHdaU+uTjMpTVKjPQGqzKBTrZBP4za8ehb qW4L/b+zdbbO9LMeonBDFoabqGyhI5JOgQ9bvGgQnPvHQjLsrjjkjzDm7ewQDZ8V rPgbB69Nhish+YvJfvZht4UkL/Xn9Qw/fVF75QTZoLit6/cwGOBiY6JUKkj77og4 X4b85ffXeobepQ== -----END CERTIFICATE-----Generated at Sat Dec 6 22:23:40 2025 by rpki-client