This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/bd3880-fc26-4121-b2e4-e6d6e8aebef8/1/MC0R6FJhV0AHazKBuK_w-sXKLzM.mft File: MC0R6FJhV0AHazKBuK_w-sXKLzM.mft (raw, json) Hash identifier: uPgOCddzsngIKZgVDLiCHn/i1VEO3nYIFV+mpGYrNG0= Subject key identifier: 12:5F:57:92:02:D5:84:47:40:77:A3:47:65:2C:77:8A:B1:F2:64:31 Authority key identifier: 30:2D:11:E8:52:61:57:40:07:6B:32:81:B8:AF:F0:FA:C5:CA:2F:33 Certificate issuer: /CN=302d11e852615740076b3281b8aff0fac5ca2f33 Certificate serial: 019AF19AF5257E9F8BE8D867529A168E1D59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MC0R6FJhV0AHazKBuK_w-sXKLzM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/bd3880-fc26-4121-b2e4-e6d6e8aebef8/1/MC0R6FJhV0AHazKBuK_w-sXKLzM.mft Manifest number: 1276 Signing time: Sat 06 Dec 2025 03:00:55 +0000 Manifest this update: Sat 06 Dec 2025 03:00:55 +0000 Manifest next update: Sun 07 Dec 2025 03:00:55 +0000 Files and hashes: 1: AV_h3jqDqBv8GTowG5NZT83IRVM.roa (hash: 7I92tp7yKWv9nRYHQ0pF0g4dedaK+rFfmKLNQHVUe28=) 2: MC0R6FJhV0AHazKBuK_w-sXKLzM.crl (hash: UVaLf43xI6E2r1zByrLdVTf40iqYmXJSz6YJ8h+CDuE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/bd3880-fc26-4121-b2e4-e6d6e8aebef8/1/MC0R6FJhV0AHazKBuK_w-sXKLzM.crl rsync://rpki.ripe.net/repository/DEFAULT/82/bd3880-fc26-4121-b2e4-e6d6e8aebef8/1/MC0R6FJhV0AHazKBuK_w-sXKLzM.mft rsync://rpki.ripe.net/repository/DEFAULT/MC0R6FJhV0AHazKBuK_w-sXKLzM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:f5:25:7e:9f:8b:e8:d8:67:52:9a:16:8e:1d:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=302d11e852615740076b3281b8aff0fac5ca2f33 Validity Not Before: Dec 6 03:00:55 2025 GMT Not After : Dec 7 03:00:55 2025 GMT Subject: CN=125f579202d584474077a347652c778ab1f26431 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:9e:ab:0c:2c:9e:52:06:58:c0:3a:fc:82:3d: 37:bd:96:82:ac:7e:cb:75:ce:79:9c:85:9f:45:fc: f0:12:bd:39:0a:e3:57:c5:f8:3a:aa:f2:7d:14:fa: 4f:75:5c:b3:81:20:1d:cb:73:c1:6d:42:f5:1b:cd: 96:e2:3e:91:57:57:f8:92:a5:12:b4:6c:21:ae:53: a3:e9:83:87:58:39:1c:b2:9b:83:16:81:46:83:fb: 31:bf:ec:80:bb:15:10:7b:49:c8:5e:b1:3d:76:19: 32:b6:1d:5f:22:15:e1:5d:e2:40:0f:24:5a:04:c3: 62:65:fb:f6:fa:a6:a7:33:8a:50:5d:e7:a4:5f:5f: c6:7e:43:ea:92:92:9f:02:9a:52:c5:69:25:c0:fa: ce:26:5e:b0:66:ee:a6:01:55:13:96:96:b7:e6:6a: 1f:f5:1c:2d:96:f9:35:c5:61:39:bd:73:9f:90:f5: f9:d0:7a:63:97:67:7a:0c:8a:34:f9:b1:61:4b:4b: b8:45:02:9f:14:dc:23:56:47:17:6a:b4:5f:07:cf: e7:72:9b:89:6e:4a:45:51:42:3f:6a:f5:c1:54:db: 67:4b:6c:ec:5e:18:83:2d:5a:fd:6f:37:2c:a3:bb: 15:4c:82:c3:51:32:80:31:cb:8c:9d:f9:84:91:e3: a8:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:5F:57:92:02:D5:84:47:40:77:A3:47:65:2C:77:8A:B1:F2:64:31 X509v3 Authority Key Identifier: keyid:30:2D:11:E8:52:61:57:40:07:6B:32:81:B8:AF:F0:FA:C5:CA:2F:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MC0R6FJhV0AHazKBuK_w-sXKLzM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/bd3880-fc26-4121-b2e4-e6d6e8aebef8/1/MC0R6FJhV0AHazKBuK_w-sXKLzM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/82/bd3880-fc26-4121-b2e4-e6d6e8aebef8/1/MC0R6FJhV0AHazKBuK_w-sXKLzM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:c3:6d:b7:c4:18:99:bb:52:dd:a0:99:26:56:a8:12:b3:fa: 94:4f:ec:11:05:ec:f5:06:47:c8:36:74:c7:b3:f0:f3:0d:91: 15:a7:ee:a2:30:32:f8:b4:ce:fd:af:96:8e:68:9f:75:af:78: 5c:c0:04:5f:68:9a:27:ee:a9:05:0d:ff:95:2d:f3:a7:a0:67: 60:a0:79:b0:6c:d5:19:05:0a:ed:02:60:96:bd:8f:56:97:01: 1d:97:07:aa:c1:3c:3f:bc:c5:1f:f6:cf:a3:d2:7f:cb:50:21: e7:f8:1e:0b:e3:a4:0c:c8:51:e7:6b:41:c3:52:80:f3:a3:78: 54:31:bc:ab:ae:e0:7b:b5:dd:7e:bc:5b:05:c9:4b:c7:04:2b: f8:18:d2:38:3a:1a:38:0d:32:0c:f0:c6:92:e7:c3:f4:08:5a: 61:ab:3e:30:a4:b6:7c:4d:99:c4:3f:e7:22:53:d4:0a:9d:3b: 48:0d:2e:a1:63:a3:44:ed:bd:2e:ef:80:45:2b:44:3b:58:ea: ff:be:62:30:47:49:84:5a:c1:d3:1b:8b:a8:2a:4a:3c:af:12: b6:95:5c:c4:59:c7:0b:1a:4d:7d:a6:44:9b:77:13:de:30:19: 9c:9e:b0:12:06:a2:eb:1e:f3:f5:92:16:9f:58:c6:e0:4c:7a: 0c:b9:02:57 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmvUlfp+L6NhnUpoWjh1ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwMmQxMWU4NTI2MTU3NDAwNzZiMzI4MWI4YWZmMGZhYzVj YTJmMzMwHhcNMjUxMjA2MDMwMDU1WhcNMjUxMjA3MDMwMDU1WjAzMTEwLwYDVQQD EygxMjVmNTc5MjAyZDU4NDQ3NDA3N2EzNDc2NTJjNzc4YWIxZjI2NDMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA156rDCyeUgZYwDr8gj03vZaCrH7L dc55nIWfRfzwEr05CuNXxfg6qvJ9FPpPdVyzgSAdy3PBbUL1G82W4j6RV1f4kqUS tGwhrlOj6YOHWDkcspuDFoFGg/sxv+yAuxUQe0nIXrE9dhkyth1fIhXhXeJADyRa BMNiZfv2+qanM4pQXeekX1/GfkPqkpKfAppSxWklwPrOJl6wZu6mAVUTlpa35mof 9Rwtlvk1xWE5vXOfkPX50Hpjl2d6DIo0+bFhS0u4RQKfFNwjVkcXarRfB8/ncpuJ bkpFUUI/avXBVNtnS2zsXhiDLVr9bzcso7sVTILDUTKAMcuMnfmEkeOoXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBJfV5IC1YRHQHejR2Usd4qx8mQxMB8GA1UdIwQY MBaAFDAtEehSYVdAB2sygbiv8PrFyi8zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTUMwUjZGSmhWMEFIYXpLQnVLX3ctc1hLTHpNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi9iZDM4ODAtZmMyNi00MTIxLWIyZTQt ZTZkNmU4YWViZWY4LzEvTUMwUjZGSmhWMEFIYXpLQnVLX3ctc1hLTHpNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Mi9iZDM4ODAtZmMyNi00MTIxLWIyZTQtZTZkNmU4YWViZWY4 LzEvTUMwUjZGSmhWMEFIYXpLQnVLX3ctc1hLTHpNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcMNtt8QY mbtS3aCZJlaoErP6lE/sEQXs9QZHyDZ0x7Pw8w2RFafuojAy+LTO/a+Wjmifda94 XMAEX2iaJ+6pBQ3/lS3zp6BnYKB5sGzVGQUK7QJglr2PVpcBHZcHqsE8P7zFH/bP o9J/y1Ah5/geC+OkDMhR52tBw1KA86N4VDG8q67ge7XdfrxbBclLxwQr+BjSODoa OA0yDPDGkufD9AhaYas+MKS2fE2ZxD/nIlPUCp07SA0uoWOjRO29Lu+ARStEO1jq /75iMEdJhFrB0xuLqCpKPK8StpVcxFnHCxpNfaZEm3cT3jAZnJ6wEgai6x7z9ZIW n1jG4Ex6DLkCVw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:23:34 2025 by rpki-client