This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/bd8cf6-1db8-4ac0-8dd6-17be417e94dc/1/MryjKc1OJWX_DRPoNVpuxMwXlOE.mft File: MryjKc1OJWX_DRPoNVpuxMwXlOE.mft (raw, json) Hash identifier: dLBghTqrBveFZNz+1JRYB6Yf0iSVu8BxdEZ1/GnTZmg= Subject key identifier: 3D:48:2D:F0:FF:6E:48:00:7C:C1:10:0E:53:38:85:16:A6:06:4F:BA Authority key identifier: 32:BC:A3:29:CD:4E:25:65:FF:0D:13:E8:35:5A:6E:C4:CC:17:94:E1 Certificate issuer: /CN=32bca329cd4e2565ff0d13e8355a6ec4cc1794e1 Certificate serial: 019B3D5A42F6013642874D88180EBB8A9F0E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MryjKc1OJWX_DRPoNVpuxMwXlOE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/bd8cf6-1db8-4ac0-8dd6-17be417e94dc/1/MryjKc1OJWX_DRPoNVpuxMwXlOE.mft Manifest number: 0E3C Signing time: Sat 20 Dec 2025 20:01:24 +0000 Manifest this update: Sat 20 Dec 2025 20:01:24 +0000 Manifest next update: Sun 21 Dec 2025 20:01:24 +0000 Files and hashes: 1: MryjKc1OJWX_DRPoNVpuxMwXlOE.crl (hash: XZhN1JaUjJUbdMa+LS4jeYDMKlc7ev354sHl4CrKGoQ=) 2: SrK-vjiDl0xs99Gd2cCyjeQdDic.roa (hash: 9BoGna4mMc990bImuJR3rw32j27JfV1QUyOoXmJi2O8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/bd8cf6-1db8-4ac0-8dd6-17be417e94dc/1/MryjKc1OJWX_DRPoNVpuxMwXlOE.crl rsync://rpki.ripe.net/repository/DEFAULT/79/bd8cf6-1db8-4ac0-8dd6-17be417e94dc/1/MryjKc1OJWX_DRPoNVpuxMwXlOE.mft rsync://rpki.ripe.net/repository/DEFAULT/MryjKc1OJWX_DRPoNVpuxMwXlOE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:5a:42:f6:01:36:42:87:4d:88:18:0e:bb:8a:9f:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32bca329cd4e2565ff0d13e8355a6ec4cc1794e1 Validity Not Before: Dec 20 20:01:24 2025 GMT Not After : Dec 21 20:01:24 2025 GMT Subject: CN=3d482df0ff6e48007cc1100e53388516a6064fba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:cf:c5:b1:eb:46:01:3e:49:86:05:7c:f8:79: 95:57:41:41:fc:62:a5:9f:a2:f3:a1:b6:09:04:04: 9f:fc:18:c9:19:01:0d:c7:5c:de:1f:7c:ca:c5:c8: 5e:2c:4c:ea:f7:78:ed:ba:5f:b8:11:02:7b:22:f5: f2:fd:20:f8:6c:d8:48:2b:06:ec:97:53:63:8d:4b: a3:b2:01:77:dc:3d:5b:06:82:9c:e0:00:ef:dd:1e: 23:80:0b:3c:1a:d0:16:0e:40:7b:b4:ce:1e:cf:4f: 1c:86:e4:a7:d2:d9:1d:b2:51:f3:81:83:69:95:73: 60:eb:f5:b8:85:d7:7e:69:d4:6e:5f:eb:5a:7e:1b: c6:53:4e:da:49:02:f8:d0:af:46:d2:1c:3a:33:d7: 3d:c5:e8:b8:34:2a:47:96:c1:0a:3c:cb:52:b6:4f: 60:16:6c:e7:37:6a:bd:34:b1:65:30:f7:a5:0f:66: a3:38:b5:06:d9:a6:da:29:4d:7d:b6:e2:39:9d:28: d5:27:5a:44:c0:48:a4:b5:47:76:1c:18:dd:89:d8: e7:ba:a2:e3:96:c2:11:76:b6:17:01:6e:7c:f9:dd: b9:b9:02:eb:0e:aa:3d:65:df:4b:ea:29:a2:f1:6c: 2d:6f:e6:ef:66:b8:2e:3d:d0:11:be:b7:39:d7:6c: 3a:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:48:2D:F0:FF:6E:48:00:7C:C1:10:0E:53:38:85:16:A6:06:4F:BA X509v3 Authority Key Identifier: keyid:32:BC:A3:29:CD:4E:25:65:FF:0D:13:E8:35:5A:6E:C4:CC:17:94:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MryjKc1OJWX_DRPoNVpuxMwXlOE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/bd8cf6-1db8-4ac0-8dd6-17be417e94dc/1/MryjKc1OJWX_DRPoNVpuxMwXlOE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/79/bd8cf6-1db8-4ac0-8dd6-17be417e94dc/1/MryjKc1OJWX_DRPoNVpuxMwXlOE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:fd:97:01:c4:f2:29:54:97:0c:8c:06:17:70:98:3d:72:0f: b8:53:15:8f:36:a9:5c:e0:cc:0c:d4:c6:5d:89:20:85:18:71: 65:8b:7e:32:d5:80:15:36:dd:96:21:5b:7b:56:9b:04:80:f4: 20:6e:ee:dc:b4:1d:c0:1b:d4:92:3a:cb:c1:ed:63:8e:ee:63: 42:a1:3a:ce:45:5d:36:67:43:2e:ea:f6:a8:81:b9:64:ee:be: a6:83:d8:eb:07:14:50:6d:4a:7c:23:5d:54:72:a2:ec:a2:c4: cf:31:51:a7:cc:e1:6e:52:ae:0b:b9:eb:99:cb:cb:20:4a:84: 58:c6:09:11:fc:80:3b:ef:52:10:8b:d1:b4:5b:95:e2:b9:05: cb:ec:63:a1:2e:8e:dd:26:49:59:3c:b1:be:85:78:8d:1d:0f: 59:32:e7:6a:11:69:a9:eb:49:50:73:57:fe:c5:10:6b:9f:f3: a2:d1:54:77:0a:1c:f7:46:88:43:66:e6:4c:e1:04:99:b8:a0: 86:c2:49:b0:f6:d4:89:0a:5f:c7:64:28:a7:e8:b5:af:46:01: b9:cc:64:3e:c7:92:cd:c2:d5:07:13:94:07:cf:4e:ea:ef:26: 2f:ac:62:a4:9b:02:c5:28:f8:68:8f:1c:5a:07:52:16:2f:64: f5:4e:cc:16 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9WkL2ATZCh02IGA67ip8OMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyYmNhMzI5Y2Q0ZTI1NjVmZjBkMTNlODM1NWE2ZWM0Y2Mx Nzk0ZTEwHhcNMjUxMjIwMjAwMTI0WhcNMjUxMjIxMjAwMTI0WjAzMTEwLwYDVQQD EygzZDQ4MmRmMGZmNmU0ODAwN2NjMTEwMGU1MzM4ODUxNmE2MDY0ZmJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjc/FsetGAT5JhgV8+HmVV0FB/GKl n6LzobYJBASf/BjJGQENx1zeH3zKxcheLEzq93jtul+4EQJ7IvXy/SD4bNhIKwbs l1NjjUujsgF33D1bBoKc4ADv3R4jgAs8GtAWDkB7tM4ez08chuSn0tkdslHzgYNp lXNg6/W4hdd+adRuX+tafhvGU07aSQL40K9G0hw6M9c9xei4NCpHlsEKPMtStk9g FmznN2q9NLFlMPelD2ajOLUG2abaKU19tuI5nSjVJ1pEwEiktUd2HBjdidjnuqLj lsIRdrYXAW58+d25uQLrDqo9Zd9L6imi8Wwtb+bvZrguPdARvrc512w6fwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD1ILfD/bkgAfMEQDlM4hRamBk+6MB8GA1UdIwQY MBaAFDK8oynNTiVl/w0T6DVabsTMF5ThMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTXJ5aktjMU9KV1hfRFJQb05WcHV4TXdYbE9FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS9iZDhjZjYtMWRiOC00YWMwLThkZDYt MTdiZTQxN2U5NGRjLzEvTXJ5aktjMU9KV1hfRFJQb05WcHV4TXdYbE9FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OS9iZDhjZjYtMWRiOC00YWMwLThkZDYtMTdiZTQxN2U5NGRj LzEvTXJ5aktjMU9KV1hfRFJQb05WcHV4TXdYbE9FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUv2XAcTy KVSXDIwGF3CYPXIPuFMVjzapXODMDNTGXYkghRhxZYt+MtWAFTbdliFbe1abBID0 IG7u3LQdwBvUkjrLwe1jju5jQqE6zkVdNmdDLur2qIG5ZO6+poPY6wcUUG1KfCNd VHKi7KLEzzFRp8zhblKuC7nrmcvLIEqEWMYJEfyAO+9SEIvRtFuV4rkFy+xjoS6O 3SZJWTyxvoV4jR0PWTLnahFpqetJUHNX/sUQa5/zotFUdwoc90aIQ2bmTOEEmbig hsJJsPbUiQpfx2Qop+i1r0YBucxkPseSzcLVBxOUB89O6u8mL6xipJsCxSj4aI8c WgdSFi9k9U7MFg== -----END CERTIFICATE-----Generated at Sun Dec 21 01:51:18 2025 by rpki-client