This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/29a3d8-fb46-40c5-8f36-371b16e51790/1/MTie9MqM5oHWuD4L5MiGo6dFYCg.mft File: MTie9MqM5oHWuD4L5MiGo6dFYCg.mft (raw, json) Hash identifier: JK6D+Ms3NRbnUpOFuGvO1cWB+GKTQ1yWWkdl4Yg8PLo= Subject key identifier: 8B:DE:55:9E:C1:FC:D7:2B:0E:AC:28:0E:E4:6B:57:7C:D5:CE:30:1A Authority key identifier: 31:38:9E:F4:CA:8C:E6:81:D6:B8:3E:0B:E4:C8:86:A3:A7:45:60:28 Certificate issuer: /CN=31389ef4ca8ce681d6b83e0be4c886a3a7456028 Certificate serial: 019AF12E2C94A060682EF630F22AFEE968A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MTie9MqM5oHWuD4L5MiGo6dFYCg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/29a3d8-fb46-40c5-8f36-371b16e51790/1/MTie9MqM5oHWuD4L5MiGo6dFYCg.mft Manifest number: C8 Signing time: Sat 06 Dec 2025 01:02:06 +0000 Manifest this update: Sat 06 Dec 2025 01:02:06 +0000 Manifest next update: Sun 07 Dec 2025 01:02:06 +0000 Files and hashes: 1: MTie9MqM5oHWuD4L5MiGo6dFYCg.crl (hash: C1fITZw+M1VyMy8bCGm/UgJ31iQOKjoodDaVUQe5kdA=) 2: QhmGkcRygSZ5ihQLsVW91SIUW9s.roa (hash: YN0HNJUwhKmoGvr9Z1SSlKCl4sVnuUTF191h7YfoZmg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/29a3d8-fb46-40c5-8f36-371b16e51790/1/MTie9MqM5oHWuD4L5MiGo6dFYCg.crl rsync://rpki.ripe.net/repository/DEFAULT/74/29a3d8-fb46-40c5-8f36-371b16e51790/1/MTie9MqM5oHWuD4L5MiGo6dFYCg.mft rsync://rpki.ripe.net/repository/DEFAULT/MTie9MqM5oHWuD4L5MiGo6dFYCg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:2c:94:a0:60:68:2e:f6:30:f2:2a:fe:e9:68:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31389ef4ca8ce681d6b83e0be4c886a3a7456028 Validity Not Before: Dec 6 01:02:06 2025 GMT Not After : Dec 7 01:02:06 2025 GMT Subject: CN=8bde559ec1fcd72b0eac280ee46b577cd5ce301a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:28:d3:9c:d9:ef:31:f7:cf:5e:df:12:a3:b3: c3:d2:0f:7e:f3:9d:aa:16:fe:8f:dd:9a:69:be:a1: 30:36:19:98:77:25:82:00:49:81:fb:88:86:bd:f6: da:24:ab:61:7d:79:ea:60:32:9f:20:94:f4:e0:cc: 4b:30:fd:c3:1f:7a:3e:0b:e3:70:d9:de:ac:84:dd: 81:bd:ba:82:9d:7e:5f:68:42:2c:99:cb:c4:f7:df: f8:f8:0e:2c:cd:7b:2a:32:bd:be:34:05:40:81:67: bc:96:97:b3:cf:19:4f:a0:79:99:7d:a3:d5:79:e2: 1f:23:07:68:c8:8b:7f:21:9c:c1:a2:4f:ae:3f:99: 99:00:02:9d:c7:47:c1:e4:fa:02:bd:eb:cc:76:2a: a5:95:78:4b:64:9d:39:29:da:03:68:3e:3b:b9:4f: 60:83:6f:3d:5f:65:13:85:b4:54:7a:7b:9f:78:42: cc:6b:8a:4c:14:f5:a6:91:b2:64:73:a2:30:ff:01: 91:1c:74:65:1e:49:fd:e7:d2:39:91:d6:33:98:38: 69:5a:c9:53:4d:0d:34:d2:f8:d2:cc:35:31:fa:99: 69:19:9f:f2:0d:c3:56:8d:36:43:ad:80:20:0d:42: c6:81:ff:7d:e9:dc:54:1d:a1:7f:c8:ea:c4:1b:af: 39:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:DE:55:9E:C1:FC:D7:2B:0E:AC:28:0E:E4:6B:57:7C:D5:CE:30:1A X509v3 Authority Key Identifier: keyid:31:38:9E:F4:CA:8C:E6:81:D6:B8:3E:0B:E4:C8:86:A3:A7:45:60:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MTie9MqM5oHWuD4L5MiGo6dFYCg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/29a3d8-fb46-40c5-8f36-371b16e51790/1/MTie9MqM5oHWuD4L5MiGo6dFYCg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/74/29a3d8-fb46-40c5-8f36-371b16e51790/1/MTie9MqM5oHWuD4L5MiGo6dFYCg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:9e:75:10:ae:5a:50:c6:e5:19:28:f7:9d:c2:a0:13:de:65: 7c:42:42:60:e2:0b:74:2a:50:32:c5:8d:be:0a:43:de:f8:20: c8:e5:5e:b2:dd:3d:88:d9:7f:f8:f7:cb:5f:0c:ec:32:fc:af: 82:1a:2d:b0:b3:ce:88:05:cb:e5:28:a7:fd:91:b5:8b:2c:25: 15:ae:01:1e:56:e4:42:7a:e7:c9:44:49:0d:12:ad:f9:e9:9c: 5c:9d:b9:c8:0b:71:d9:6a:7f:6a:5a:03:8c:27:e3:e8:68:90: 1a:56:ab:99:81:1b:b0:7d:63:ad:37:b9:a5:35:f8:80:8f:bb: 38:91:a9:ac:8e:08:79:20:d3:d5:c6:6c:6c:ff:b4:0c:4e:cc: 09:04:d6:58:6a:f5:0a:0c:04:39:11:85:59:d5:1a:11:26:45: 87:ee:10:5c:81:6f:67:30:23:35:5b:66:c8:7c:50:ce:97:59: 44:cf:f2:62:a4:62:5d:54:82:89:07:d0:d0:66:ed:c3:2e:ec: 1b:f4:66:8e:4c:84:b0:32:93:c5:6d:5e:ab:ad:38:07:ff:32: d2:df:9d:e3:10:de:18:c6:d1:b1:51:7b:e6:00:a9:4d:96:8f: 26:84:71:dc:11:c0:20:f3:57:1e:41:61:83:cd:01:ce:03:92: d7:76:be:54 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLiyUoGBoLvYw8ir+6WihMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxMzg5ZWY0Y2E4Y2U2ODFkNmI4M2UwYmU0Yzg4NmEzYTc0 NTYwMjgwHhcNMjUxMjA2MDEwMjA2WhcNMjUxMjA3MDEwMjA2WjAzMTEwLwYDVQQD Eyg4YmRlNTU5ZWMxZmNkNzJiMGVhYzI4MGVlNDZiNTc3Y2Q1Y2UzMDFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtijTnNnvMffPXt8So7PD0g9+852q Fv6P3ZppvqEwNhmYdyWCAEmB+4iGvfbaJKthfXnqYDKfIJT04MxLMP3DH3o+C+Nw 2d6shN2BvbqCnX5faEIsmcvE99/4+A4szXsqMr2+NAVAgWe8lpezzxlPoHmZfaPV eeIfIwdoyIt/IZzBok+uP5mZAAKdx0fB5PoCvevMdiqllXhLZJ05KdoDaD47uU9g g289X2UThbRUenufeELMa4pMFPWmkbJkc6Iw/wGRHHRlHkn959I5kdYzmDhpWslT TQ000vjSzDUx+plpGZ/yDcNWjTZDrYAgDULGgf996dxUHaF/yOrEG685mwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIveVZ7B/NcrDqwoDuRrV3zVzjAaMB8GA1UdIwQY MBaAFDE4nvTKjOaB1rg+C+TIhqOnRWAoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTVRpZTlNcU01b0hXdUQ0TDVNaUdvNmRGWUNnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC8yOWEzZDgtZmI0Ni00MGM1LThmMzYt MzcxYjE2ZTUxNzkwLzEvTVRpZTlNcU01b0hXdUQ0TDVNaUdvNmRGWUNnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NC8yOWEzZDgtZmI0Ni00MGM1LThmMzYtMzcxYjE2ZTUxNzkw LzEvTVRpZTlNcU01b0hXdUQ0TDVNaUdvNmRGWUNnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUp51EK5a UMblGSj3ncKgE95lfEJCYOILdCpQMsWNvgpD3vggyOVest09iNl/+PfLXwzsMvyv ghotsLPOiAXL5Sin/ZG1iywlFa4BHlbkQnrnyURJDRKt+emcXJ25yAtx2Wp/aloD jCfj6GiQGlarmYEbsH1jrTe5pTX4gI+7OJGprI4IeSDT1cZsbP+0DE7MCQTWWGr1 CgwEORGFWdUaESZFh+4QXIFvZzAjNVtmyHxQzpdZRM/yYqRiXVSCiQfQ0Gbtwy7s G/RmjkyEsDKTxW1eq604B/8y0t+d4xDeGMbRsVF75gCpTZaPJoRx3BHAIPNXHkFh g80BzgOS13a+VA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:18:50 2025 by rpki-client