This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/73c829-1518-4d41-92c2-7e0ab8bcae89/1/MW9DO7TO3XLYbETthZmQNSK15PE.mft File: MW9DO7TO3XLYbETthZmQNSK15PE.mft (raw, json) Hash identifier: dRwVFaBM6szDm5cr7SfbKcqJBnFfbN1xnfEiZyTu8ow= Subject key identifier: CD:B9:BB:58:63:62:42:4C:FF:6D:B2:72:E4:7F:57:14:EB:A5:48:C3 Authority key identifier: 31:6F:43:3B:B4:CE:DD:72:D8:6C:44:ED:85:99:90:35:22:B5:E4:F1 Certificate issuer: /CN=316f433bb4cedd72d86c44ed8599903522b5e4f1 Certificate serial: 019AF3C06D2BF7959033036C8D9A9C528163 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MW9DO7TO3XLYbETthZmQNSK15PE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/73c829-1518-4d41-92c2-7e0ab8bcae89/1/MW9DO7TO3XLYbETthZmQNSK15PE.mft Manifest number: 1242 Signing time: Sat 06 Dec 2025 13:01:05 +0000 Manifest this update: Sat 06 Dec 2025 13:01:05 +0000 Manifest next update: Sun 07 Dec 2025 13:01:05 +0000 Files and hashes: 1: MW9DO7TO3XLYbETthZmQNSK15PE.crl (hash: GWtWkC6C5lG93v7Nm6A8iePfJcYcSOtjBiI6i0hl4Cc=) 2: ueb8jWjZsgheztsTNqHl1-Lrnro.roa (hash: bi/jdKM4OGa/0sgftxqgBQAErRWTNtYfIJIP4pXeceo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/73c829-1518-4d41-92c2-7e0ab8bcae89/1/MW9DO7TO3XLYbETthZmQNSK15PE.crl rsync://rpki.ripe.net/repository/DEFAULT/85/73c829-1518-4d41-92c2-7e0ab8bcae89/1/MW9DO7TO3XLYbETthZmQNSK15PE.mft rsync://rpki.ripe.net/repository/DEFAULT/MW9DO7TO3XLYbETthZmQNSK15PE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:c0:6d:2b:f7:95:90:33:03:6c:8d:9a:9c:52:81:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=316f433bb4cedd72d86c44ed8599903522b5e4f1 Validity Not Before: Dec 6 13:01:05 2025 GMT Not After : Dec 7 13:01:05 2025 GMT Subject: CN=cdb9bb586362424cff6db272e47f5714eba548c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:80:b7:1c:02:cd:65:63:81:ae:f4:a5:f2:37: 30:32:04:f5:2a:07:74:30:43:e0:6c:a5:df:94:be: 6e:45:b6:bd:83:73:45:11:5c:4b:35:27:df:9f:2a: a6:e9:a2:2c:fa:67:32:eb:dc:0f:b5:5a:f8:ff:1d: 5d:89:bd:d3:74:5b:26:d7:60:2c:8f:c4:7b:5a:54: 11:92:ac:48:dd:56:33:ae:d3:4b:ae:0b:ee:ff:ab: a2:dd:1d:51:74:57:1f:90:7d:77:54:17:88:7f:e6: e2:b4:14:3e:05:da:bd:e0:dd:5c:05:63:c5:62:e3: f9:ee:06:02:14:c0:30:a2:21:64:d7:b7:6f:6a:4f: 2b:2b:bb:62:02:1d:62:81:a6:c7:c9:22:8e:e9:56: 37:c3:cb:a1:15:ae:33:79:f2:9c:a0:30:a4:fa:7a: 0e:82:50:bf:a3:31:30:8d:8f:2b:6d:0a:b7:4e:a2: 85:9b:93:c9:39:bf:c1:11:cf:25:3a:38:aa:62:19: d1:ec:a6:6c:f8:e4:75:01:b4:b1:76:33:af:89:29: c1:2b:36:f4:4d:e1:93:bf:09:c5:e0:2e:8b:c9:50: b4:fa:e8:69:ef:c5:3b:47:80:08:5f:b1:7e:b5:dc: 1d:38:fb:9a:12:d1:3d:76:34:d7:00:b7:5c:63:d7: cc:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:B9:BB:58:63:62:42:4C:FF:6D:B2:72:E4:7F:57:14:EB:A5:48:C3 X509v3 Authority Key Identifier: keyid:31:6F:43:3B:B4:CE:DD:72:D8:6C:44:ED:85:99:90:35:22:B5:E4:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MW9DO7TO3XLYbETthZmQNSK15PE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/73c829-1518-4d41-92c2-7e0ab8bcae89/1/MW9DO7TO3XLYbETthZmQNSK15PE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/85/73c829-1518-4d41-92c2-7e0ab8bcae89/1/MW9DO7TO3XLYbETthZmQNSK15PE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:39:54:94:46:e9:2e:c3:a7:83:bc:29:af:c9:8e:b6:5c:08: 10:64:38:84:d4:c1:27:1a:57:85:4d:4a:9f:5c:01:9f:d7:28: 0a:52:d8:05:2e:f3:f4:29:17:70:36:82:48:06:39:8b:ec:9a: 49:88:1f:54:1e:cf:19:ac:98:8f:e3:e9:af:db:de:2b:2c:de: 83:7d:ee:60:d9:2d:b7:a4:c1:fb:c9:74:bb:28:53:e0:2c:50: 10:4c:a8:c6:24:60:a4:5f:3e:bb:67:3a:85:b8:48:ef:68:4f: 65:56:7d:83:ee:4c:28:9a:9a:32:da:ff:7f:75:09:69:a3:e4: 37:e6:45:e3:4d:81:d4:af:59:a7:44:f6:b0:27:8e:78:67:65: ab:2c:00:77:c0:7c:06:4b:25:6f:61:26:66:ba:70:f4:4f:25: 51:29:c1:6d:63:17:a7:35:47:b4:f0:32:08:4a:54:88:6f:86: 9d:be:a1:93:4b:9a:20:e9:1f:2e:e7:f1:f1:34:ec:7a:c9:4b: 4f:00:b5:08:f5:d9:a1:3b:e2:d4:97:52:60:37:07:30:e7:02: af:ed:bc:9d:4e:74:06:50:30:07:90:84:d9:9d:c5:d6:b7:aa: 92:15:95:a5:d1:f6:72:08:e0:96:72:c2:19:93:62:5b:3d:c9: 08:47:5d:a6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzwG0r95WQMwNsjZqcUoFjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxNmY0MzNiYjRjZWRkNzJkODZjNDRlZDg1OTk5MDM1MjJi NWU0ZjEwHhcNMjUxMjA2MTMwMTA1WhcNMjUxMjA3MTMwMTA1WjAzMTEwLwYDVQQD EyhjZGI5YmI1ODYzNjI0MjRjZmY2ZGIyNzJlNDdmNTcxNGViYTU0OGMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz4C3HALNZWOBrvSl8jcwMgT1Kgd0 MEPgbKXflL5uRba9g3NFEVxLNSffnyqm6aIs+mcy69wPtVr4/x1dib3TdFsm12As j8R7WlQRkqxI3VYzrtNLrgvu/6ui3R1RdFcfkH13VBeIf+bitBQ+Bdq94N1cBWPF YuP57gYCFMAwoiFk17dvak8rK7tiAh1igabHySKO6VY3w8uhFa4zefKcoDCk+noO glC/ozEwjY8rbQq3TqKFm5PJOb/BEc8lOjiqYhnR7KZs+OR1AbSxdjOviSnBKzb0 TeGTvwnF4C6LyVC0+uhp78U7R4AIX7F+tdwdOPuaEtE9djTXALdcY9fMoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM25u1hjYkJM/22ycuR/VxTrpUjDMB8GA1UdIwQY MBaAFDFvQzu0zt1y2GxE7YWZkDUiteTxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTVc5RE83VE8zWExZYkVUdGhabVFOU0sxNVBFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS83M2M4MjktMTUxOC00ZDQxLTkyYzIt N2UwYWI4YmNhZTg5LzEvTVc5RE83VE8zWExZYkVUdGhabVFOU0sxNVBFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NS83M2M4MjktMTUxOC00ZDQxLTkyYzItN2UwYWI4YmNhZTg5 LzEvTVc5RE83VE8zWExZYkVUdGhabVFOU0sxNVBFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMzlUlEbp LsOng7wpr8mOtlwIEGQ4hNTBJxpXhU1Kn1wBn9coClLYBS7z9CkXcDaCSAY5i+ya SYgfVB7PGayYj+Ppr9veKyzeg33uYNktt6TB+8l0uyhT4CxQEEyoxiRgpF8+u2c6 hbhI72hPZVZ9g+5MKJqaMtr/f3UJaaPkN+ZF402B1K9Zp0T2sCeOeGdlqywAd8B8 Bkslb2EmZrpw9E8lUSnBbWMXpzVHtPAyCEpUiG+Gnb6hk0uaIOkfLufx8TTseslL TwC1CPXZoTvi1JdSYDcHMOcCr+28nU50BlAwB5CE2Z3F1reqkhWVpdH2cgjglnLC GZNiWz3JCEddpg== -----END CERTIFICATE-----Generated at Sat Dec 6 15:40:27 2025 by rpki-client