This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/c937be-f5b1-43c6-9587-4e06621bd98a/1/mpLTBwi51OjHwoyX-AN8gCcUTEc.mft File: mpLTBwi51OjHwoyX-AN8gCcUTEc.mft (raw, json) Hash identifier: p5RcH1VNgdYFShb3oznFQOfxyyg14gZUbJ8GWvYmydE= Subject key identifier: 10:A6:61:8F:FC:13:82:EE:A2:D2:9C:B2:25:26:F9:1B:A6:A2:D9:36 Authority key identifier: 9A:92:D3:07:08:B9:D4:E8:C7:C2:8C:97:F8:03:7C:80:27:14:4C:47 Certificate issuer: /CN=9a92d30708b9d4e8c7c28c97f8037c8027144c47 Certificate serial: 019AF2092BA679DB68FA64FDF45080BF3069 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mpLTBwi51OjHwoyX-AN8gCcUTEc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/c937be-f5b1-43c6-9587-4e06621bd98a/1/mpLTBwi51OjHwoyX-AN8gCcUTEc.mft Manifest number: 1768 Signing time: Sat 06 Dec 2025 05:01:18 +0000 Manifest this update: Sat 06 Dec 2025 05:01:18 +0000 Manifest next update: Sun 07 Dec 2025 05:01:18 +0000 Files and hashes: 1: Od-Up9G1FWem-yoSr_pXW5rnVIA.roa (hash: vWn4KDX8+1TqyTBBcDwsTTYdGzuVvyYM5vL1dIvw2nw=) 2: mpLTBwi51OjHwoyX-AN8gCcUTEc.crl (hash: tk4Y5SI7Jg+NpnEZXsaDZ4PDdF9khALCs5hH7gg3BMc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/c937be-f5b1-43c6-9587-4e06621bd98a/1/mpLTBwi51OjHwoyX-AN8gCcUTEc.crl rsync://rpki.ripe.net/repository/DEFAULT/82/c937be-f5b1-43c6-9587-4e06621bd98a/1/mpLTBwi51OjHwoyX-AN8gCcUTEc.mft rsync://rpki.ripe.net/repository/DEFAULT/mpLTBwi51OjHwoyX-AN8gCcUTEc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:2b:a6:79:db:68:fa:64:fd:f4:50:80:bf:30:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a92d30708b9d4e8c7c28c97f8037c8027144c47 Validity Not Before: Dec 6 05:01:18 2025 GMT Not After : Dec 7 05:01:18 2025 GMT Subject: CN=10a6618ffc1382eea2d29cb22526f91ba6a2d936 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:a2:41:b1:52:af:d7:63:de:5c:b0:03:41:50: cc:57:67:1a:a0:aa:e2:5a:1e:e1:af:a6:68:7a:73: 5f:19:a4:07:3f:23:fa:a8:19:b2:04:52:96:2c:55: 9a:bc:b2:0b:29:45:68:3a:40:a3:9e:8b:da:5a:ab: 42:f3:4b:05:7d:16:d9:d0:fb:0f:93:73:54:4c:8e: 28:fa:5e:09:32:78:b1:c9:ac:8f:ee:c5:00:13:2a: a3:5d:f9:f9:d1:d9:b6:b0:65:93:a1:19:8d:e3:f0: b5:6e:96:01:ff:92:e2:4f:59:cd:f3:c4:db:7a:3c: 75:9c:ed:14:0c:c4:c3:8e:6a:bf:0b:01:d0:ef:b6: 8b:fa:f9:4f:b8:36:38:f2:78:1a:4d:56:29:05:80: 76:e5:62:41:63:a0:74:08:30:e3:16:dd:76:ea:da: 9e:3c:d6:6e:16:0e:fe:14:70:3d:5d:f9:31:25:c1: 58:75:7c:90:8e:81:5d:2f:ad:65:e7:16:9f:f6:fa: a6:b3:0e:f9:7f:ed:da:02:c1:53:cf:6d:b5:2c:59: 6c:29:35:4d:26:28:bd:53:5e:1b:db:eb:42:2d:33: e0:8e:17:3a:18:11:24:d0:43:16:99:83:18:c7:37: 26:f2:fc:78:3b:dc:57:75:8a:57:b9:75:8d:60:00: 8c:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:A6:61:8F:FC:13:82:EE:A2:D2:9C:B2:25:26:F9:1B:A6:A2:D9:36 X509v3 Authority Key Identifier: keyid:9A:92:D3:07:08:B9:D4:E8:C7:C2:8C:97:F8:03:7C:80:27:14:4C:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mpLTBwi51OjHwoyX-AN8gCcUTEc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/c937be-f5b1-43c6-9587-4e06621bd98a/1/mpLTBwi51OjHwoyX-AN8gCcUTEc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/82/c937be-f5b1-43c6-9587-4e06621bd98a/1/mpLTBwi51OjHwoyX-AN8gCcUTEc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:1d:e7:d4:42:52:30:70:54:e4:f0:4d:94:af:d6:61:59:24: ec:76:b7:81:c9:7e:20:c4:74:48:46:77:c4:cd:42:7d:b6:5e: f9:75:ee:dd:9e:5f:86:29:22:d3:f4:f3:1e:ae:81:c3:bb:c9: 32:18:8b:72:64:a9:94:b3:f0:f6:d0:32:e1:5a:2b:4c:d8:eb: fa:25:80:32:f3:fb:d5:13:67:6f:51:e4:27:5b:ac:27:69:55: 74:70:19:9d:2d:c7:61:3c:80:96:60:c3:b9:cd:a0:7a:2d:08: 95:9f:a4:a0:8f:ae:59:41:1f:b6:e8:3f:3f:8e:e1:9b:10:41: 19:4c:48:69:4e:8c:9a:02:3d:2a:c2:b8:fb:a9:8e:24:9b:85: f5:6e:b0:e5:4f:0f:51:32:79:fc:cc:00:fb:b9:8c:7b:e5:da: 86:66:51:54:dc:03:ce:a2:dc:82:13:77:25:f9:37:cb:af:1a: 0d:96:34:c9:d2:76:11:cd:23:16:ca:62:06:2e:9f:4a:ff:35: 78:18:61:7a:a5:37:18:d9:33:79:c3:6b:4f:e2:14:aa:d6:ab: cb:be:ba:83:38:da:47:6a:2e:bf:8c:5e:bc:a3:f3:9f:f7:bc: 4b:94:05:f1:81:6d:d8:e6:20:e0:ea:f3:82:b3:d2:53:3d:9f: ce:09:c7:b7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCSumedto+mT99FCAvzBpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhOTJkMzA3MDhiOWQ0ZThjN2MyOGM5N2Y4MDM3YzgwMjcx NDRjNDcwHhcNMjUxMjA2MDUwMTE4WhcNMjUxMjA3MDUwMTE4WjAzMTEwLwYDVQQD EygxMGE2NjE4ZmZjMTM4MmVlYTJkMjljYjIyNTI2ZjkxYmE2YTJkOTM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoqJBsVKv12PeXLADQVDMV2caoKri Wh7hr6ZoenNfGaQHPyP6qBmyBFKWLFWavLILKUVoOkCjnovaWqtC80sFfRbZ0PsP k3NUTI4o+l4JMnixyayP7sUAEyqjXfn50dm2sGWToRmN4/C1bpYB/5LiT1nN88Tb ejx1nO0UDMTDjmq/CwHQ77aL+vlPuDY48ngaTVYpBYB25WJBY6B0CDDjFt126tqe PNZuFg7+FHA9XfkxJcFYdXyQjoFdL61l5xaf9vqmsw75f+3aAsFTz221LFlsKTVN Jii9U14b2+tCLTPgjhc6GBEk0EMWmYMYxzcm8vx4O9xXdYpXuXWNYACMoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBCmYY/8E4LuotKcsiUm+Rumotk2MB8GA1UdIwQY MBaAFJqS0wcIudTox8KMl/gDfIAnFExHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbXBMVEJ3aTUxT2pId295WC1BTjhnQ2NVVEVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi9jOTM3YmUtZjViMS00M2M2LTk1ODct NGUwNjYyMWJkOThhLzEvbXBMVEJ3aTUxT2pId295WC1BTjhnQ2NVVEVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Mi9jOTM3YmUtZjViMS00M2M2LTk1ODctNGUwNjYyMWJkOThh LzEvbXBMVEJ3aTUxT2pId295WC1BTjhnQ2NVVEVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKh3n1EJS MHBU5PBNlK/WYVkk7Ha3gcl+IMR0SEZ3xM1CfbZe+XXu3Z5fhiki0/TzHq6Bw7vJ MhiLcmSplLPw9tAy4VorTNjr+iWAMvP71RNnb1HkJ1usJ2lVdHAZnS3HYTyAlmDD uc2gei0IlZ+koI+uWUEftug/P47hmxBBGUxIaU6MmgI9KsK4+6mOJJuF9W6w5U8P UTJ5/MwA+7mMe+XahmZRVNwDzqLcghN3Jfk3y68aDZY0ydJ2Ec0jFspiBi6fSv81 eBhheqU3GNkzecNrT+IUqtary766gzjaR2ouv4xevKPzn/e8S5QF8YFt2OYg4Orz grPSUz2fzgnHtw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:22:18 2025 by rpki-client