This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/4a523b-7244-422d-9004-c4aa9db1abb5/1/MCX9M5qmRQTyiaAMQXPFWgAC60Q.mft File: MCX9M5qmRQTyiaAMQXPFWgAC60Q.mft (raw, json) Hash identifier: 7ry8tuteQI+YJssQtf7yaFs4nlQRy8gJ5XLE1sGgzos= Subject key identifier: F5:70:89:F3:B4:E2:76:71:54:68:BA:E8:4D:54:0F:BC:05:CC:87:C5 Authority key identifier: 30:25:FD:33:9A:A6:45:04:F2:89:A0:0C:41:73:C5:5A:00:02:EB:44 Certificate issuer: /CN=3025fd339aa64504f289a00c4173c55a0002eb44 Certificate serial: 019B3FED3564366B7C07F6511B988DD7BEEC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MCX9M5qmRQTyiaAMQXPFWgAC60Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/4a523b-7244-422d-9004-c4aa9db1abb5/1/MCX9M5qmRQTyiaAMQXPFWgAC60Q.mft Manifest number: 1152 Signing time: Sun 21 Dec 2025 08:01:08 +0000 Manifest this update: Sun 21 Dec 2025 08:01:08 +0000 Manifest next update: Mon 22 Dec 2025 08:01:08 +0000 Files and hashes: 1: DPz87dZS9HseddW8gbD-vS7fq9g.roa (hash: 4BW75SF0KzzzYTTCKr54E2E3BA1EBeDyvFumW+QYO5M=) 2: MCX9M5qmRQTyiaAMQXPFWgAC60Q.crl (hash: 2u+m2RVU2T7AHoL81zeIfwEgWypMeSPNe/OZZU5v3fY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/4a523b-7244-422d-9004-c4aa9db1abb5/1/MCX9M5qmRQTyiaAMQXPFWgAC60Q.crl rsync://rpki.ripe.net/repository/DEFAULT/8c/4a523b-7244-422d-9004-c4aa9db1abb5/1/MCX9M5qmRQTyiaAMQXPFWgAC60Q.mft rsync://rpki.ripe.net/repository/DEFAULT/MCX9M5qmRQTyiaAMQXPFWgAC60Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:ed:35:64:36:6b:7c:07:f6:51:1b:98:8d:d7:be:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3025fd339aa64504f289a00c4173c55a0002eb44 Validity Not Before: Dec 21 08:01:08 2025 GMT Not After : Dec 22 08:01:08 2025 GMT Subject: CN=f57089f3b4e276715468bae84d540fbc05cc87c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:72:31:6f:c5:2f:c8:fb:63:9a:d1:24:f5:d8: 7f:96:af:06:6c:c6:f0:57:c5:75:43:93:20:05:df: d3:9b:35:a7:a8:dd:01:69:72:b7:4d:ea:a6:98:0a: b7:e8:8b:06:30:02:33:d3:3e:50:82:8b:25:ae:4a: c5:88:e9:94:ce:b6:bd:ba:a6:8f:21:ab:03:8c:3c: 72:72:79:1b:cf:d3:45:bd:59:22:15:9c:84:d5:a2: 5e:0d:6f:0d:f9:b1:09:61:20:94:fd:99:97:6d:78: f9:ac:b7:5e:cf:42:77:14:71:dd:27:83:a5:9b:9d: 62:c0:74:fd:6c:2b:88:b5:ba:e4:ec:91:64:05:b6: 7c:b6:df:08:7f:b6:93:28:ec:ef:f5:3f:50:c8:6f: 4d:34:f0:f3:9c:4f:cc:01:a3:85:2c:5f:33:11:f1: 5a:79:5b:bf:25:df:55:07:f5:bb:8b:cf:ec:54:a2: 22:44:f3:23:80:4b:7c:a8:c4:4f:73:a8:f5:13:40: 3c:9a:5a:3d:49:9c:b3:99:85:22:02:2f:90:3f:40: 45:cc:18:b9:3f:0f:32:c8:50:62:d0:2b:31:c2:73: 93:1e:9e:5c:3d:4e:3d:07:f4:1b:8a:32:17:6d:44: 91:f0:aa:5c:44:1a:61:6b:9d:72:76:98:98:ef:11: 4e:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:70:89:F3:B4:E2:76:71:54:68:BA:E8:4D:54:0F:BC:05:CC:87:C5 X509v3 Authority Key Identifier: keyid:30:25:FD:33:9A:A6:45:04:F2:89:A0:0C:41:73:C5:5A:00:02:EB:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MCX9M5qmRQTyiaAMQXPFWgAC60Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/4a523b-7244-422d-9004-c4aa9db1abb5/1/MCX9M5qmRQTyiaAMQXPFWgAC60Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/4a523b-7244-422d-9004-c4aa9db1abb5/1/MCX9M5qmRQTyiaAMQXPFWgAC60Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:4b:fd:30:dd:42:37:5c:b6:bd:2f:1a:1d:31:43:df:76:89: 88:5f:5c:9b:ef:67:90:d7:c1:66:5b:7b:48:50:dc:03:e8:2a: fc:d2:6c:9a:c0:1a:bb:05:e4:93:50:75:24:f7:b7:a1:2e:0f: 27:45:1f:af:52:29:83:91:6d:9e:91:49:ff:2c:79:4a:9d:10: 48:f0:f2:8c:ab:c1:26:a6:9b:c3:8a:f2:4f:8c:9b:64:82:fc: fa:d6:f0:48:c3:6c:f6:79:a3:9b:56:d3:bf:7c:62:5a:9a:52: 9c:38:ce:f5:d2:9b:ef:eb:59:87:cc:3b:45:a0:23:1f:b8:ec: ac:9d:ab:51:58:47:97:24:64:18:cb:f3:7e:4f:81:6f:4b:4d: 03:69:7f:74:71:4b:57:76:48:9f:22:ed:5d:eb:ce:cf:02:c0: 70:d0:36:7c:54:13:0d:94:5b:8b:d8:22:63:ed:63:2c:8d:41: f7:60:3f:5e:a8:80:f1:48:c2:ba:9c:64:68:e4:2e:21:04:3b: 04:80:16:e0:64:3f:93:23:f1:a1:a2:56:c1:f6:99:0b:77:9a: 7f:08:20:0b:07:c8:18:75:04:31:d4:55:58:2a:3f:9b:01:9b: e9:e4:c2:3c:44:d5:05:ed:d3:bf:97:a9:2b:27:4e:3a:18:65: b4:80:f5:87 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/7TVkNmt8B/ZRG5iN177sMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwMjVmZDMzOWFhNjQ1MDRmMjg5YTAwYzQxNzNjNTVhMDAw MmViNDQwHhcNMjUxMjIxMDgwMTA4WhcNMjUxMjIyMDgwMTA4WjAzMTEwLwYDVQQD EyhmNTcwODlmM2I0ZTI3NjcxNTQ2OGJhZTg0ZDU0MGZiYzA1Y2M4N2M1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAznIxb8UvyPtjmtEk9dh/lq8GbMbw V8V1Q5MgBd/TmzWnqN0BaXK3TeqmmAq36IsGMAIz0z5QgoslrkrFiOmUzra9uqaP IasDjDxycnkbz9NFvVkiFZyE1aJeDW8N+bEJYSCU/ZmXbXj5rLdez0J3FHHdJ4Ol m51iwHT9bCuItbrk7JFkBbZ8tt8If7aTKOzv9T9QyG9NNPDznE/MAaOFLF8zEfFa eVu/Jd9VB/W7i8/sVKIiRPMjgEt8qMRPc6j1E0A8mlo9SZyzmYUiAi+QP0BFzBi5 Pw8yyFBi0CsxwnOTHp5cPU49B/QbijIXbUSR8KpcRBpha51ydpiY7xFO5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPVwifO04nZxVGi66E1UD7wFzIfFMB8GA1UdIwQY MBaAFDAl/TOapkUE8omgDEFzxVoAAutEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTUNYOU01cW1SUVR5aWFBTVFYUEZXZ0FDNjBRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy80YTUyM2ItNzI0NC00MjJkLTkwMDQt YzRhYTlkYjFhYmI1LzEvTUNYOU01cW1SUVR5aWFBTVFYUEZXZ0FDNjBRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yy80YTUyM2ItNzI0NC00MjJkLTkwMDQtYzRhYTlkYjFhYmI1 LzEvTUNYOU01cW1SUVR5aWFBTVFYUEZXZ0FDNjBRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE0v9MN1C N1y2vS8aHTFD33aJiF9cm+9nkNfBZlt7SFDcA+gq/NJsmsAauwXkk1B1JPe3oS4P J0Ufr1Ipg5FtnpFJ/yx5Sp0QSPDyjKvBJqabw4ryT4ybZIL8+tbwSMNs9nmjm1bT v3xiWppSnDjO9dKb7+tZh8w7RaAjH7jsrJ2rUVhHlyRkGMvzfk+Bb0tNA2l/dHFL V3ZInyLtXevOzwLAcNA2fFQTDZRbi9giY+1jLI1B92A/XqiA8UjCupxkaOQuIQQ7 BIAW4GQ/kyPxoaJWwfaZC3eafwggCwfIGHUEMdRVWCo/mwGb6eTCPETVBe3Tv5ep KydOOhhltID1hw== -----END CERTIFICATE-----Generated at Sun Dec 21 11:15:51 2025 by rpki-client