This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/4a523b-7244-422d-9004-c4aa9db1abb5/1/MCX9M5qmRQTyiaAMQXPFWgAC60Q.mft File: MCX9M5qmRQTyiaAMQXPFWgAC60Q.mft (raw, json) Hash identifier: ag7OQnpXgAK1iIPnNzCwnVl/RBx0HDnmR+ZpvBGsDHQ= Subject key identifier: 83:83:6E:24:77:EE:38:D3:20:F4:FF:5F:75:9A:CD:BD:64:6D:BD:88 Authority key identifier: 30:25:FD:33:9A:A6:45:04:F2:89:A0:0C:41:73:C5:5A:00:02:EB:44 Certificate issuer: /CN=3025fd339aa64504f289a00c4173c55a0002eb44 Certificate serial: 019AF2AD802CC95DA322E176AB5EFF7B726B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MCX9M5qmRQTyiaAMQXPFWgAC60Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/4a523b-7244-422d-9004-c4aa9db1abb5/1/MCX9M5qmRQTyiaAMQXPFWgAC60Q.mft Manifest number: 112A Signing time: Sat 06 Dec 2025 08:00:48 +0000 Manifest this update: Sat 06 Dec 2025 08:00:48 +0000 Manifest next update: Sun 07 Dec 2025 08:00:48 +0000 Files and hashes: 1: DPz87dZS9HseddW8gbD-vS7fq9g.roa (hash: 4BW75SF0KzzzYTTCKr54E2E3BA1EBeDyvFumW+QYO5M=) 2: MCX9M5qmRQTyiaAMQXPFWgAC60Q.crl (hash: GoYojNXLAwefiU0YHbMoENNdqePkPXmgIhcF6t7mPyU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/4a523b-7244-422d-9004-c4aa9db1abb5/1/MCX9M5qmRQTyiaAMQXPFWgAC60Q.crl rsync://rpki.ripe.net/repository/DEFAULT/8c/4a523b-7244-422d-9004-c4aa9db1abb5/1/MCX9M5qmRQTyiaAMQXPFWgAC60Q.mft rsync://rpki.ripe.net/repository/DEFAULT/MCX9M5qmRQTyiaAMQXPFWgAC60Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:80:2c:c9:5d:a3:22:e1:76:ab:5e:ff:7b:72:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3025fd339aa64504f289a00c4173c55a0002eb44 Validity Not Before: Dec 6 08:00:48 2025 GMT Not After : Dec 7 08:00:48 2025 GMT Subject: CN=83836e2477ee38d320f4ff5f759acdbd646dbd88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:29:f5:e0:e5:8c:46:0c:bb:76:3b:93:69:a3: f1:6a:00:f0:5e:71:74:71:44:2f:0e:5f:8e:83:a7: 8c:95:29:fc:fb:80:dc:92:7d:3a:53:bd:af:0f:c4: f1:48:68:6f:cd:85:90:58:ab:fa:18:9c:cf:15:73: cc:e1:ea:e7:7e:a2:83:04:b9:97:37:92:8b:96:5b: 01:ba:05:cd:6f:76:9c:91:75:85:e7:81:51:fa:b4: 10:91:08:de:66:75:d1:d4:e5:b7:a3:0e:f2:a1:42: 66:8d:64:aa:67:0d:1e:0e:a8:ca:90:ea:34:99:c0: a2:9b:78:98:f0:3b:1d:34:50:a4:b5:1a:45:97:dc: 79:9f:3a:b8:4e:e7:a1:8a:b4:95:04:0e:fd:a6:aa: 23:37:04:93:d1:53:06:d1:41:17:65:37:ec:bf:fa: bb:2a:34:78:7c:e8:79:28:53:8a:51:c1:6d:b9:60: 6d:57:90:4c:00:ea:4c:4c:eb:51:0b:9c:bf:7d:ed: fe:01:6b:32:f5:f6:84:ee:f3:95:9c:f0:e1:77:ba: 30:63:74:0f:90:03:56:c5:84:c9:cd:6f:9a:2a:7b: 61:2d:f1:63:d2:9b:84:f5:ea:98:a7:43:f8:cc:0b: a7:19:da:1f:51:06:07:e0:b9:10:12:7e:bf:d9:3f: 30:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:83:6E:24:77:EE:38:D3:20:F4:FF:5F:75:9A:CD:BD:64:6D:BD:88 X509v3 Authority Key Identifier: keyid:30:25:FD:33:9A:A6:45:04:F2:89:A0:0C:41:73:C5:5A:00:02:EB:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MCX9M5qmRQTyiaAMQXPFWgAC60Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/4a523b-7244-422d-9004-c4aa9db1abb5/1/MCX9M5qmRQTyiaAMQXPFWgAC60Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/4a523b-7244-422d-9004-c4aa9db1abb5/1/MCX9M5qmRQTyiaAMQXPFWgAC60Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:f3:ed:e2:06:56:41:ad:ef:9d:eb:d6:88:e7:b6:2f:b0:64: d4:4b:30:26:86:2b:00:f5:89:da:aa:6a:1c:44:ed:a2:60:f8: d5:5b:8c:d4:57:89:b1:46:73:9d:4e:e2:f0:09:76:47:96:7d: e1:2e:f8:3c:1d:6a:a3:4a:91:5a:f7:6e:22:b4:a7:0f:30:0b: 38:93:c6:24:db:66:ff:4b:c1:5a:9f:b5:b6:ff:2a:5d:83:d5: d7:08:aa:f3:ed:7e:2e:61:d4:87:9c:81:f2:a7:45:f7:cd:a2: 1a:be:b5:13:e5:69:1f:44:f1:99:8f:ab:e4:18:b0:31:31:60: e6:81:51:33:3f:53:93:74:97:21:53:f7:32:2e:0e:0d:96:9e: 54:c3:32:a4:b9:64:05:a0:32:cb:ce:e4:8f:0a:86:aa:53:ec: 83:c3:3e:4b:d1:5f:f4:d9:27:65:93:d9:5e:c6:55:e1:ea:a3: 5d:f2:ee:bb:6d:72:b9:13:d6:8c:7a:d5:40:72:58:da:77:08: de:a0:b8:4b:76:68:d7:a0:ea:89:f1:48:f1:c4:f4:3b:c3:e7: 71:c0:e7:95:9a:6f:0d:4d:55:4d:23:3e:ee:02:92:37:71:b1: a3:17:fe:e4:20:b4:ac:72:f4:95:12:ba:26:b8:0a:ec:59:1a: b4:c8:8f:c3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrYAsyV2jIuF2q17/e3JrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwMjVmZDMzOWFhNjQ1MDRmMjg5YTAwYzQxNzNjNTVhMDAw MmViNDQwHhcNMjUxMjA2MDgwMDQ4WhcNMjUxMjA3MDgwMDQ4WjAzMTEwLwYDVQQD Eyg4MzgzNmUyNDc3ZWUzOGQzMjBmNGZmNWY3NTlhY2RiZDY0NmRiZDg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Sn14OWMRgy7djuTaaPxagDwXnF0 cUQvDl+Og6eMlSn8+4Dckn06U72vD8TxSGhvzYWQWKv6GJzPFXPM4ernfqKDBLmX N5KLllsBugXNb3ackXWF54FR+rQQkQjeZnXR1OW3ow7yoUJmjWSqZw0eDqjKkOo0 mcCim3iY8DsdNFCktRpFl9x5nzq4TuehirSVBA79pqojNwST0VMG0UEXZTfsv/q7 KjR4fOh5KFOKUcFtuWBtV5BMAOpMTOtRC5y/fe3+AWsy9faE7vOVnPDhd7owY3QP kANWxYTJzW+aKnthLfFj0puE9eqYp0P4zAunGdofUQYH4LkQEn6/2T8wwwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIODbiR37jjTIPT/X3Wazb1kbb2IMB8GA1UdIwQY MBaAFDAl/TOapkUE8omgDEFzxVoAAutEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTUNYOU01cW1SUVR5aWFBTVFYUEZXZ0FDNjBRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy80YTUyM2ItNzI0NC00MjJkLTkwMDQt YzRhYTlkYjFhYmI1LzEvTUNYOU01cW1SUVR5aWFBTVFYUEZXZ0FDNjBRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yy80YTUyM2ItNzI0NC00MjJkLTkwMDQtYzRhYTlkYjFhYmI1 LzEvTUNYOU01cW1SUVR5aWFBTVFYUEZXZ0FDNjBRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAePPt4gZW Qa3vnevWiOe2L7Bk1EswJoYrAPWJ2qpqHETtomD41VuM1FeJsUZznU7i8Al2R5Z9 4S74PB1qo0qRWvduIrSnDzALOJPGJNtm/0vBWp+1tv8qXYPV1wiq8+1+LmHUh5yB 8qdF982iGr61E+VpH0TxmY+r5BiwMTFg5oFRMz9Tk3SXIVP3Mi4ODZaeVMMypLlk BaAyy87kjwqGqlPsg8M+S9Ff9NknZZPZXsZV4eqjXfLuu21yuRPWjHrVQHJY2ncI 3qC4S3Zo16DqifFI8cT0O8PnccDnlZpvDU1VTSM+7gKSN3Gxoxf+5CC0rHL0lRK6 JrgK7FkatMiPww== -----END CERTIFICATE-----Generated at Sat Dec 6 13:35:41 2025 by rpki-client