This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/9622a3-94f1-4fbc-a46b-2b248f2f12a7/1/MJ5IuCgx_5y7wL99r9fUZLMSwZE.mft File: MJ5IuCgx_5y7wL99r9fUZLMSwZE.mft (raw, json) Hash identifier: le6fUEvC6K72HI0MQaK6eQRuWdNJwilA4irroStZTmQ= Subject key identifier: BE:AA:40:EA:8A:59:9A:1B:FB:58:3F:87:71:E1:24:2F:6F:31:29:C5 Authority key identifier: 30:9E:48:B8:28:31:FF:9C:BB:C0:BF:7D:AF:D7:D4:64:B3:12:C1:91 Certificate issuer: /CN=309e48b82831ff9cbbc0bf7dafd7d464b312c191 Certificate serial: 019AF2767AD1EB1DFB24333B5E2384C3E5EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MJ5IuCgx_5y7wL99r9fUZLMSwZE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/9622a3-94f1-4fbc-a46b-2b248f2f12a7/1/MJ5IuCgx_5y7wL99r9fUZLMSwZE.mft Manifest number: 017D Signing time: Sat 06 Dec 2025 07:00:42 +0000 Manifest this update: Sat 06 Dec 2025 07:00:42 +0000 Manifest next update: Sun 07 Dec 2025 07:00:42 +0000 Files and hashes: 1: MJ5IuCgx_5y7wL99r9fUZLMSwZE.crl (hash: inqB985l98Fyuhin7Too5LFgiz+AUvEsNDy1dcugXto=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/9622a3-94f1-4fbc-a46b-2b248f2f12a7/1/MJ5IuCgx_5y7wL99r9fUZLMSwZE.crl rsync://rpki.ripe.net/repository/DEFAULT/78/9622a3-94f1-4fbc-a46b-2b248f2f12a7/1/MJ5IuCgx_5y7wL99r9fUZLMSwZE.mft rsync://rpki.ripe.net/repository/DEFAULT/MJ5IuCgx_5y7wL99r9fUZLMSwZE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:7a:d1:eb:1d:fb:24:33:3b:5e:23:84:c3:e5:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=309e48b82831ff9cbbc0bf7dafd7d464b312c191 Validity Not Before: Dec 6 07:00:42 2025 GMT Not After : Dec 7 07:00:42 2025 GMT Subject: CN=beaa40ea8a599a1bfb583f8771e1242f6f3129c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:b8:2c:2b:9c:b2:f7:f4:c2:0b:79:75:2a:4d: 22:e6:81:a7:73:f0:9e:da:1d:17:9f:75:a0:a2:39: 0c:74:cd:df:3e:51:ff:5d:06:d0:48:db:87:50:2b: 43:7f:c2:d9:d7:ea:61:e1:3b:4e:d8:a7:cd:74:b6: d3:f2:6b:40:0c:73:0f:4e:f5:e8:ee:fb:2b:10:94: 37:74:ba:96:31:02:30:d5:4b:a0:50:e6:4a:db:da: 18:d3:03:4e:0a:00:24:cf:ab:24:6c:a4:9f:ab:31: 4a:bd:5d:36:0e:63:72:16:33:2e:71:d2:6d:9e:4c: ff:01:e8:65:86:65:f3:45:8a:7a:64:4f:df:b1:4a: 9e:54:b9:00:91:b8:bc:1c:a4:e7:74:a8:5c:a0:0c: 97:67:e8:58:83:ed:57:14:d7:94:92:18:3e:31:bf: b7:e2:33:5c:08:d6:c6:f3:7a:19:87:8a:22:18:9a: 96:df:c4:79:05:ed:cf:11:fe:72:1b:b5:40:fa:9c: 81:7c:e2:0c:ac:84:26:a8:b4:ac:22:b5:0e:db:65: e1:c6:41:05:76:f5:1e:58:23:a5:51:a2:c5:fe:d0: 0c:90:5a:49:f7:05:01:5c:22:ac:d0:68:3c:35:21: 54:9d:89:9e:dc:e4:f1:40:ed:1f:f5:23:bd:1d:e9: 13:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:AA:40:EA:8A:59:9A:1B:FB:58:3F:87:71:E1:24:2F:6F:31:29:C5 X509v3 Authority Key Identifier: keyid:30:9E:48:B8:28:31:FF:9C:BB:C0:BF:7D:AF:D7:D4:64:B3:12:C1:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MJ5IuCgx_5y7wL99r9fUZLMSwZE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/9622a3-94f1-4fbc-a46b-2b248f2f12a7/1/MJ5IuCgx_5y7wL99r9fUZLMSwZE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/9622a3-94f1-4fbc-a46b-2b248f2f12a7/1/MJ5IuCgx_5y7wL99r9fUZLMSwZE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:ed:e7:84:dc:4a:29:4e:72:b0:f8:d4:46:8e:42:fc:ed:52: 28:f1:2e:d9:8c:9d:a2:cc:71:77:6f:82:5f:aa:c8:d4:df:f0: b0:2d:d6:ef:98:d4:29:d3:12:f3:b9:97:07:40:56:39:ad:0c: 47:ad:1d:a0:be:16:d3:af:40:40:6b:02:10:ef:b3:0d:51:a7: 72:51:7c:e5:e5:0e:e8:c1:b6:a1:d9:45:c7:8a:fc:97:04:79: a9:f0:0d:b3:40:3e:bf:cc:69:51:8c:4b:ce:4f:26:30:9f:24: 46:46:28:ad:8b:23:5b:f2:cf:4a:d4:1f:45:f8:90:be:be:e1: 0a:9c:03:cc:5c:53:5c:e7:a3:fd:ca:6a:81:bd:21:3a:ff:1e: fc:ed:ef:8c:7d:57:e1:76:64:d6:67:8b:2c:9f:b7:37:13:2a: 60:a4:63:3c:49:7c:2e:36:de:63:a0:7f:d4:52:f3:28:1a:55: fd:6c:4c:2b:94:4a:80:31:27:4d:d1:c8:33:53:02:ea:68:b9: 3e:f4:51:4b:13:0b:39:39:85:04:92:35:15:38:26:cf:2e:dd: 05:7f:c0:02:fb:89:c4:dd:31:53:7c:93:3a:58:7c:f9:aa:a8: 59:96:df:bb:b7:7c:25:ca:1a:7e:e5:9e:02:a1:41:c1:aa:98: b7:f0:68:c9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydnrR6x37JDM7XiOEw+XqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwOWU0OGI4MjgzMWZmOWNiYmMwYmY3ZGFmZDdkNDY0YjMx MmMxOTEwHhcNMjUxMjA2MDcwMDQyWhcNMjUxMjA3MDcwMDQyWjAzMTEwLwYDVQQD EyhiZWFhNDBlYThhNTk5YTFiZmI1ODNmODc3MWUxMjQyZjZmMzEyOWM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo7gsK5yy9/TCC3l1Kk0i5oGnc/Ce 2h0Xn3WgojkMdM3fPlH/XQbQSNuHUCtDf8LZ1+ph4TtO2KfNdLbT8mtADHMPTvXo 7vsrEJQ3dLqWMQIw1UugUOZK29oY0wNOCgAkz6skbKSfqzFKvV02DmNyFjMucdJt nkz/AehlhmXzRYp6ZE/fsUqeVLkAkbi8HKTndKhcoAyXZ+hYg+1XFNeUkhg+Mb+3 4jNcCNbG83oZh4oiGJqW38R5Be3PEf5yG7VA+pyBfOIMrIQmqLSsIrUO22XhxkEF dvUeWCOlUaLF/tAMkFpJ9wUBXCKs0Gg8NSFUnYme3OTxQO0f9SO9HekTLwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL6qQOqKWZob+1g/h3HhJC9vMSnFMB8GA1UdIwQY MBaAFDCeSLgoMf+cu8C/fa/X1GSzEsGRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTUo1SXVDZ3hfNXk3d0w5OXI5ZlVaTE1Td1pFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC85NjIyYTMtOTRmMS00ZmJjLWE0NmIt MmIyNDhmMmYxMmE3LzEvTUo1SXVDZ3hfNXk3d0w5OXI5ZlVaTE1Td1pFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OC85NjIyYTMtOTRmMS00ZmJjLWE0NmItMmIyNDhmMmYxMmE3 LzEvTUo1SXVDZ3hfNXk3d0w5OXI5ZlVaTE1Td1pFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq+3nhNxK KU5ysPjURo5C/O1SKPEu2Yydosxxd2+CX6rI1N/wsC3W75jUKdMS87mXB0BWOa0M R60doL4W069AQGsCEO+zDVGnclF85eUO6MG2odlFx4r8lwR5qfANs0A+v8xpUYxL zk8mMJ8kRkYorYsjW/LPStQfRfiQvr7hCpwDzFxTXOej/cpqgb0hOv8e/O3vjH1X 4XZk1meLLJ+3NxMqYKRjPEl8LjbeY6B/1FLzKBpV/WxMK5RKgDEnTdHIM1MC6mi5 PvRRSxMLOTmFBJI1FTgmzy7dBX/AAvuJxN0xU3yTOlh8+aqoWZbfu7d8JcoafuWe AqFBwaqYt/BoyQ== -----END CERTIFICATE-----Generated at Sat Dec 6 14:57:58 2025 by rpki-client