This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/972d71-5e7f-4cc9-af87-66ad1dc87363/1/MFMuPcNxjy4bVWppRwsec53TkCI.mft File: MFMuPcNxjy4bVWppRwsec53TkCI.mft (raw, json) Hash identifier: XXq7BwPuI3NozfU1NHq3Qd6L6Za7R0K1v84F9vXchaU= Subject key identifier: DB:B9:F2:7F:F2:08:B6:6D:2E:41:D6:E8:06:FE:BA:DA:53:DE:3D:1B Authority key identifier: 30:53:2E:3D:C3:71:8F:2E:1B:55:6A:69:47:0B:1E:73:9D:D3:90:22 Certificate issuer: /CN=30532e3dc3718f2e1b556a69470b1e739dd39022 Certificate serial: 019AF1D2149EF550E820AFCD25523152CFFA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MFMuPcNxjy4bVWppRwsec53TkCI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/972d71-5e7f-4cc9-af87-66ad1dc87363/1/MFMuPcNxjy4bVWppRwsec53TkCI.mft Manifest number: 0D03 Signing time: Sat 06 Dec 2025 04:01:08 +0000 Manifest this update: Sat 06 Dec 2025 04:01:08 +0000 Manifest next update: Sun 07 Dec 2025 04:01:08 +0000 Files and hashes: 1: MFMuPcNxjy4bVWppRwsec53TkCI.crl (hash: gl9+IIQ7xda8Ui2R5pHZotJzUZOd5psI7hrWkxAxnMs=) 2: gcvZb-H-QkR_u2nZg2XXj4qsub0.roa (hash: eOyY8yl+p8N7UEzFU3Q8jcWAiNPWbKDEoBQqZkxOiME=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/972d71-5e7f-4cc9-af87-66ad1dc87363/1/MFMuPcNxjy4bVWppRwsec53TkCI.crl rsync://rpki.ripe.net/repository/DEFAULT/97/972d71-5e7f-4cc9-af87-66ad1dc87363/1/MFMuPcNxjy4bVWppRwsec53TkCI.mft rsync://rpki.ripe.net/repository/DEFAULT/MFMuPcNxjy4bVWppRwsec53TkCI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:14:9e:f5:50:e8:20:af:cd:25:52:31:52:cf:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30532e3dc3718f2e1b556a69470b1e739dd39022 Validity Not Before: Dec 6 04:01:08 2025 GMT Not After : Dec 7 04:01:08 2025 GMT Subject: CN=dbb9f27ff208b66d2e41d6e806febada53de3d1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:d5:69:8c:9b:62:a5:15:86:df:52:cd:da:d1: b3:f2:6d:19:9c:4e:33:9e:a8:05:ec:56:f9:0d:06: 0a:7c:40:fe:3b:51:7e:62:50:0d:2c:2b:f6:96:72: 81:1a:07:7c:16:c8:69:bc:1c:78:88:78:62:84:d4: c9:8c:3a:c3:73:b2:56:42:a0:30:49:3f:8e:56:c9: ae:d9:9e:ff:2c:61:95:c4:c0:77:ef:54:e4:19:89: d9:84:c2:ab:ac:65:a5:25:13:37:ad:78:16:34:5c: 04:af:2c:6e:d2:bb:b1:dd:b7:2d:75:48:02:87:b4: be:c3:3f:69:3a:ad:4c:cb:07:e2:c4:f6:3b:41:cf: 2f:08:d2:d5:04:1f:76:d1:5e:a5:0a:e2:dd:44:d1: 6c:2a:f3:16:cb:b2:8b:3c:12:d2:fa:8e:cc:e0:3e: 78:eb:96:7a:2f:6a:ab:7d:71:a2:65:62:d6:b9:d8: 8b:10:b6:3e:61:48:01:61:27:eb:e4:ad:c4:dd:fd: 39:73:40:2f:dc:bd:fa:86:c0:34:0c:eb:06:52:48: e7:f2:dc:fe:61:63:03:bb:82:28:5c:f6:4e:2e:e6: 93:33:a2:14:60:cf:a4:6d:8b:97:a9:19:b3:21:24: d2:bf:17:c5:38:16:0a:1e:f8:a3:56:43:b8:e3:2e: e4:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:B9:F2:7F:F2:08:B6:6D:2E:41:D6:E8:06:FE:BA:DA:53:DE:3D:1B X509v3 Authority Key Identifier: keyid:30:53:2E:3D:C3:71:8F:2E:1B:55:6A:69:47:0B:1E:73:9D:D3:90:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MFMuPcNxjy4bVWppRwsec53TkCI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/972d71-5e7f-4cc9-af87-66ad1dc87363/1/MFMuPcNxjy4bVWppRwsec53TkCI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/97/972d71-5e7f-4cc9-af87-66ad1dc87363/1/MFMuPcNxjy4bVWppRwsec53TkCI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:88:56:02:97:e7:64:f6:e9:1a:df:90:80:e4:50:20:f3:eb: 30:10:70:a9:cb:e9:97:93:34:2c:6b:bb:84:23:c1:fd:f5:d8: f3:7e:7e:05:6a:0a:be:f1:f3:d6:ac:bf:b3:9e:81:98:0c:b8: 0d:5c:ef:94:7c:d5:fe:16:94:82:aa:f9:ca:cf:0e:43:3b:af: 91:ca:93:0c:9b:48:0b:6d:43:be:4f:f4:1d:d4:70:9b:2e:d8: a5:9a:c1:71:17:d0:74:06:7c:30:c3:54:03:aa:03:62:99:c4: 34:a6:38:2d:a2:22:a3:02:e4:8b:e0:77:35:44:e0:3e:e8:db: 46:47:c0:39:40:77:23:a5:2e:a3:82:bb:c8:a2:06:02:c4:f7: 5b:13:76:ce:16:8e:a6:b5:44:59:07:89:76:81:06:a7:93:6f: 9b:91:9a:af:e3:0f:4b:04:a1:f7:6b:04:29:29:e4:2b:f0:62: 37:5a:69:22:c5:91:ed:51:c9:b5:d1:a9:d3:7f:cd:93:11:45: 86:db:90:50:3e:0b:5e:fb:bf:ed:0d:a0:04:fe:59:de:9c:47: a2:4e:6f:d2:93:34:04:14:e2:22:04:5b:b4:f5:0a:45:26:e4: 86:b5:2c:02:ad:33:27:60:f8:0d:54:dc:7d:32:58:b1:05:8f: cf:0e:bb:60 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0hSe9VDoIK/NJVIxUs/6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwNTMyZTNkYzM3MThmMmUxYjU1NmE2OTQ3MGIxZTczOWRk MzkwMjIwHhcNMjUxMjA2MDQwMTA4WhcNMjUxMjA3MDQwMTA4WjAzMTEwLwYDVQQD EyhkYmI5ZjI3ZmYyMDhiNjZkMmU0MWQ2ZTgwNmZlYmFkYTUzZGUzZDFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqdVpjJtipRWG31LN2tGz8m0ZnE4z nqgF7Fb5DQYKfED+O1F+YlANLCv2lnKBGgd8FshpvBx4iHhihNTJjDrDc7JWQqAw ST+OVsmu2Z7/LGGVxMB371TkGYnZhMKrrGWlJRM3rXgWNFwEryxu0rux3bctdUgC h7S+wz9pOq1MywfixPY7Qc8vCNLVBB920V6lCuLdRNFsKvMWy7KLPBLS+o7M4D54 65Z6L2qrfXGiZWLWudiLELY+YUgBYSfr5K3E3f05c0Av3L36hsA0DOsGUkjn8tz+ YWMDu4IoXPZOLuaTM6IUYM+kbYuXqRmzISTSvxfFOBYKHvijVkO44y7kNwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNu58n/yCLZtLkHW6Ab+utpT3j0bMB8GA1UdIwQY MBaAFDBTLj3DcY8uG1VqaUcLHnOd05AiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTUZNdVBjTnhqeTRiVldwcFJ3c2VjNTNUa0NJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny85NzJkNzEtNWU3Zi00Y2M5LWFmODct NjZhZDFkYzg3MzYzLzEvTUZNdVBjTnhqeTRiVldwcFJ3c2VjNTNUa0NJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ny85NzJkNzEtNWU3Zi00Y2M5LWFmODctNjZhZDFkYzg3MzYz LzEvTUZNdVBjTnhqeTRiVldwcFJ3c2VjNTNUa0NJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS4hWApfn ZPbpGt+QgORQIPPrMBBwqcvpl5M0LGu7hCPB/fXY835+BWoKvvHz1qy/s56BmAy4 DVzvlHzV/haUgqr5ys8OQzuvkcqTDJtIC21Dvk/0HdRwmy7YpZrBcRfQdAZ8MMNU A6oDYpnENKY4LaIiowLki+B3NUTgPujbRkfAOUB3I6Uuo4K7yKIGAsT3WxN2zhaO prVEWQeJdoEGp5Nvm5Gar+MPSwSh92sEKSnkK/BiN1ppIsWR7VHJtdGp03/NkxFF htuQUD4LXvu/7Q2gBP5Z3pxHok5v0pM0BBTiIgRbtPUKRSbkhrUsAq0zJ2D4DVTc fTJYsQWPzw67YA== -----END CERTIFICATE-----Generated at Sat Dec 6 13:28:57 2025 by rpki-client