This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/bf2bb4-36d3-4b17-8bcf-44a957132639/1/MpgFa4Bqe3zBYzNF3FWDakWiRMc.mft File: MpgFa4Bqe3zBYzNF3FWDakWiRMc.mft (raw, json) Hash identifier: dgJO41Ws/9V7KvyW90TUXl3rPFgHWMlAZkhP4RNlbbE= Subject key identifier: 2F:D0:0D:3D:E0:20:13:F0:27:BB:8B:EE:DC:95:EC:25:BD:E5:33:0F Authority key identifier: 32:98:05:6B:80:6A:7B:7C:C1:63:33:45:DC:55:83:6A:45:A2:44:C7 Certificate issuer: /CN=3298056b806a7b7cc1633345dc55836a45a244c7 Certificate serial: 019AF2766247FE02C8EDA47C7C75D1E2A125 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MpgFa4Bqe3zBYzNF3FWDakWiRMc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/bf2bb4-36d3-4b17-8bcf-44a957132639/1/MpgFa4Bqe3zBYzNF3FWDakWiRMc.mft Manifest number: 16F5 Signing time: Sat 06 Dec 2025 07:00:35 +0000 Manifest this update: Sat 06 Dec 2025 07:00:35 +0000 Manifest next update: Sun 07 Dec 2025 07:00:35 +0000 Files and hashes: 1: MpgFa4Bqe3zBYzNF3FWDakWiRMc.crl (hash: 6K4BWX3s/MO2dTxE1GGHh09NCNz5wPhlAXRBeivW2Qo=) 2: wnCF8G6ZZGnR9zgGNXBDzudbf2o.roa (hash: Wo5vjTxSHNPOFI8oUhIjkfhiLwT8LICLQf6Pc8oi+dU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/bf2bb4-36d3-4b17-8bcf-44a957132639/1/MpgFa4Bqe3zBYzNF3FWDakWiRMc.crl rsync://rpki.ripe.net/repository/DEFAULT/94/bf2bb4-36d3-4b17-8bcf-44a957132639/1/MpgFa4Bqe3zBYzNF3FWDakWiRMc.mft rsync://rpki.ripe.net/repository/DEFAULT/MpgFa4Bqe3zBYzNF3FWDakWiRMc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:62:47:fe:02:c8:ed:a4:7c:7c:75:d1:e2:a1:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3298056b806a7b7cc1633345dc55836a45a244c7 Validity Not Before: Dec 6 07:00:35 2025 GMT Not After : Dec 7 07:00:35 2025 GMT Subject: CN=2fd00d3de02013f027bb8beedc95ec25bde5330f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:18:e1:94:9d:c7:73:f4:7a:f1:20:da:5a:56: ba:ad:73:d6:a3:0b:0b:bc:09:42:3f:43:38:3d:06: ab:64:14:04:57:20:d5:aa:65:23:f3:43:15:7d:e9: 64:e8:4c:9a:6d:d8:ee:7a:27:82:f9:c5:d5:0a:ac: ab:dc:db:49:8b:a0:0a:e7:32:6f:c7:0c:fc:c9:38: a2:9c:3a:bb:2c:4f:e1:aa:54:0a:34:16:5a:5b:76: 08:71:c8:2e:bf:df:a1:25:4a:6a:2e:56:96:f4:0d: 4d:04:cb:b2:e4:fc:73:f5:97:e7:59:0e:ba:21:98: 5e:43:97:dd:ee:fb:cd:11:4d:59:1c:2e:fc:f5:af: f2:49:8f:c6:1f:82:dc:07:b1:7e:3e:88:98:10:a6: ef:8e:8d:60:4c:58:c6:24:4c:a3:a5:49:58:e6:0f: 63:c8:4f:cd:99:02:3d:f5:a7:1f:20:48:d9:2e:a2: fa:bd:af:b0:95:93:94:4b:aa:c5:51:43:3f:42:71: e8:6d:79:26:ad:ea:48:e4:ec:5f:df:39:05:94:5a: b7:09:1f:54:41:5c:f0:8b:e4:65:0f:54:f9:68:43: c0:46:a7:8e:01:0a:f3:a3:12:c6:0e:6b:87:61:2e: c8:37:94:60:6a:d3:e9:4f:48:6f:d4:97:f6:c0:ef: 15:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:D0:0D:3D:E0:20:13:F0:27:BB:8B:EE:DC:95:EC:25:BD:E5:33:0F X509v3 Authority Key Identifier: keyid:32:98:05:6B:80:6A:7B:7C:C1:63:33:45:DC:55:83:6A:45:A2:44:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MpgFa4Bqe3zBYzNF3FWDakWiRMc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/bf2bb4-36d3-4b17-8bcf-44a957132639/1/MpgFa4Bqe3zBYzNF3FWDakWiRMc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/94/bf2bb4-36d3-4b17-8bcf-44a957132639/1/MpgFa4Bqe3zBYzNF3FWDakWiRMc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:80:e3:24:61:d2:56:2d:5c:1e:59:f8:82:1c:02:1f:6c:89: 99:9d:20:98:08:87:7a:5b:cc:a7:09:61:77:41:58:78:44:35: 10:87:b1:e3:d4:e8:c4:75:56:a4:83:e6:ef:28:71:b9:cb:a8: f2:d7:68:f6:a3:24:65:10:e4:56:9d:4e:0c:b7:9a:47:a8:48: 08:d9:52:b1:a5:09:9e:31:10:67:44:e7:39:97:23:64:09:44: 34:61:ad:c1:32:80:20:5a:a4:2f:8e:47:16:ff:cd:2c:15:46: ae:4d:ff:39:34:55:14:cc:7a:96:f0:58:f4:cf:33:c7:36:3a: d4:8b:71:35:59:30:c3:ba:a4:8b:30:7d:27:90:de:10:f9:ea: e2:3b:d8:1e:5c:30:23:29:bd:fc:06:d9:e8:1b:35:88:29:42: 10:66:9d:0d:a0:bd:be:20:2c:2a:6e:a9:42:dd:cf:2d:24:64: ab:22:5d:4c:ff:0c:46:17:2b:9b:e3:22:81:fe:ed:75:76:cd: 8f:0c:ec:fe:e7:b0:45:00:2d:13:36:da:92:2d:e6:28:40:89: 8a:cf:4f:bb:83:47:e1:60:ac:21:69:a7:10:b3:69:7e:fe:0c: 41:b3:01:a7:ed:42:8e:d9:73:6f:eb:5e:ce:24:17:12:d2:36: dc:6b:5e:e8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydmJH/gLI7aR8fHXR4qElMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyOTgwNTZiODA2YTdiN2NjMTYzMzM0NWRjNTU4MzZhNDVh MjQ0YzcwHhcNMjUxMjA2MDcwMDM1WhcNMjUxMjA3MDcwMDM1WjAzMTEwLwYDVQQD EygyZmQwMGQzZGUwMjAxM2YwMjdiYjhiZWVkYzk1ZWMyNWJkZTUzMzBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiRjhlJ3Hc/R68SDaWla6rXPWowsL vAlCP0M4PQarZBQEVyDVqmUj80MVfelk6EyabdjueieC+cXVCqyr3NtJi6AK5zJv xwz8yTiinDq7LE/hqlQKNBZaW3YIccguv9+hJUpqLlaW9A1NBMuy5Pxz9ZfnWQ66 IZheQ5fd7vvNEU1ZHC789a/ySY/GH4LcB7F+PoiYEKbvjo1gTFjGJEyjpUlY5g9j yE/NmQI99acfIEjZLqL6va+wlZOUS6rFUUM/QnHobXkmrepI5Oxf3zkFlFq3CR9U QVzwi+RlD1T5aEPARqeOAQrzoxLGDmuHYS7IN5RgatPpT0hv1Jf2wO8V2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC/QDT3gIBPwJ7uL7tyV7CW95TMPMB8GA1UdIwQY MBaAFDKYBWuAant8wWMzRdxVg2pFokTHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTXBnRmE0QnFlM3pCWXpORjNGV0Rha1dpUk1jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC9iZjJiYjQtMzZkMy00YjE3LThiY2Yt NDRhOTU3MTMyNjM5LzEvTXBnRmE0QnFlM3pCWXpORjNGV0Rha1dpUk1jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NC9iZjJiYjQtMzZkMy00YjE3LThiY2YtNDRhOTU3MTMyNjM5 LzEvTXBnRmE0QnFlM3pCWXpORjNGV0Rha1dpUk1jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJYDjJGHS Vi1cHln4ghwCH2yJmZ0gmAiHelvMpwlhd0FYeEQ1EIex49ToxHVWpIPm7yhxucuo 8tdo9qMkZRDkVp1ODLeaR6hICNlSsaUJnjEQZ0TnOZcjZAlENGGtwTKAIFqkL45H Fv/NLBVGrk3/OTRVFMx6lvBY9M8zxzY61ItxNVkww7qkizB9J5DeEPnq4jvYHlww Iym9/AbZ6Bs1iClCEGadDaC9viAsKm6pQt3PLSRkqyJdTP8MRhcrm+Migf7tdXbN jwzs/uewRQAtEzbaki3mKECJis9Pu4NH4WCsIWmnELNpfv4MQbMBp+1Cjtlzb+te ziQXEtI23Gte6A== -----END CERTIFICATE-----Generated at Sat Dec 6 09:26:44 2025 by rpki-client