This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/0a206e-1788-436b-9728-bed4b99a7bb4/1/MrG5Swc8VHmRwg-ELq3sFn7BnjQ.mft File: MrG5Swc8VHmRwg-ELq3sFn7BnjQ.mft (raw, json) Hash identifier: Yq45iwOkQCqLJbi/6voXjAlsUuuH8MujlJDJg5ZiyDs= Subject key identifier: 80:7C:BD:42:29:04:99:B8:3C:CE:7A:A5:29:D6:22:6C:DC:C8:43:A1 Authority key identifier: 32:B1:B9:4B:07:3C:54:79:91:C2:0F:84:2E:AD:EC:16:7E:C1:9E:34 Certificate issuer: /CN=32b1b94b073c547991c20f842eadec167ec19e34 Certificate serial: 019AF31B9A52BC8445D173D16EB255DB0EE1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MrG5Swc8VHmRwg-ELq3sFn7BnjQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/0a206e-1788-436b-9728-bed4b99a7bb4/1/MrG5Swc8VHmRwg-ELq3sFn7BnjQ.mft Manifest number: 03D8 Signing time: Sat 06 Dec 2025 10:01:03 +0000 Manifest this update: Sat 06 Dec 2025 10:01:03 +0000 Manifest next update: Sun 07 Dec 2025 10:01:03 +0000 Files and hashes: 1: HTiETFMnseisEeoALFIWItsK6gc.roa (hash: iulklaFZv7FQZ4kyFEEaoOlUffIGv7CCXTbtxR93AS4=) 2: MrG5Swc8VHmRwg-ELq3sFn7BnjQ.crl (hash: WApubPn1c29qxEU0WCydTORldq/Fz69FtYFJdLusoSE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/0a206e-1788-436b-9728-bed4b99a7bb4/1/MrG5Swc8VHmRwg-ELq3sFn7BnjQ.crl rsync://rpki.ripe.net/repository/DEFAULT/99/0a206e-1788-436b-9728-bed4b99a7bb4/1/MrG5Swc8VHmRwg-ELq3sFn7BnjQ.mft rsync://rpki.ripe.net/repository/DEFAULT/MrG5Swc8VHmRwg-ELq3sFn7BnjQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:9a:52:bc:84:45:d1:73:d1:6e:b2:55:db:0e:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32b1b94b073c547991c20f842eadec167ec19e34 Validity Not Before: Dec 6 10:01:03 2025 GMT Not After : Dec 7 10:01:03 2025 GMT Subject: CN=807cbd42290499b83cce7aa529d6226cdcc843a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:00:d7:38:85:6f:34:d2:03:f1:0a:5b:b1:87: 48:e5:6e:5f:05:64:c1:e7:b4:fd:00:ba:22:53:59: 2f:c3:bb:a8:eb:c3:58:39:9f:e5:e4:5c:b5:61:9e: 66:66:46:65:ce:74:22:a1:88:13:0e:22:69:96:2a: 1a:3a:a0:bf:62:07:28:3d:dc:51:45:63:15:a5:c9: e1:aa:d0:96:ce:92:89:cc:c0:e8:1a:c2:7a:d2:17: 73:b8:7a:a0:ea:21:8b:6b:ec:90:8e:53:43:56:0d: 07:4f:0f:17:e1:ba:7a:34:91:ee:2e:00:88:f2:84: 0d:5b:d6:3d:ee:32:de:e9:18:a9:12:3f:23:d5:11: d7:45:db:4f:b7:70:00:f7:7f:d4:11:e6:01:3b:08: cc:3b:f8:1a:ff:91:01:cd:cd:53:10:c9:59:9a:c5: 06:63:38:52:85:09:16:c7:aa:f5:23:02:b2:1e:14: be:fd:5e:c1:f2:b0:7b:4f:2f:5a:30:8b:8a:bc:05: f7:17:37:e3:95:4d:cd:83:a8:16:a5:53:b4:68:50: 53:8d:70:f4:73:52:70:22:3d:4a:0f:16:9d:1e:1e: c6:14:7c:2f:c9:dd:0f:b3:d4:87:37:44:ae:24:a7: 7b:f1:9a:27:a3:7e:59:29:67:24:3c:fc:0d:e1:74: d2:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:7C:BD:42:29:04:99:B8:3C:CE:7A:A5:29:D6:22:6C:DC:C8:43:A1 X509v3 Authority Key Identifier: keyid:32:B1:B9:4B:07:3C:54:79:91:C2:0F:84:2E:AD:EC:16:7E:C1:9E:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MrG5Swc8VHmRwg-ELq3sFn7BnjQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/0a206e-1788-436b-9728-bed4b99a7bb4/1/MrG5Swc8VHmRwg-ELq3sFn7BnjQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/99/0a206e-1788-436b-9728-bed4b99a7bb4/1/MrG5Swc8VHmRwg-ELq3sFn7BnjQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:3b:46:67:8a:4d:3b:cf:f7:28:e6:d9:fe:c4:12:bf:42:57: 72:c0:23:c8:67:bf:39:14:3d:52:0c:b7:1b:00:c0:3f:b9:8a: 72:13:b3:a9:7b:d4:9e:3e:0e:f5:6d:9b:e1:9d:c9:14:79:ab: e7:03:df:61:6b:62:a8:99:64:39:1b:d5:c7:26:a7:35:0d:bf: 01:b6:2c:ad:dd:3a:04:54:6a:46:a3:9e:f6:71:4b:d3:0f:7f: 65:8c:fa:12:b9:84:aa:c2:86:a3:45:4b:8c:96:26:06:6d:ac: 64:29:62:b2:81:a9:a0:13:1e:8d:1b:bc:3a:af:bd:a1:9f:cb: fe:22:8f:26:c9:02:b6:cc:8c:32:ad:dd:40:37:d3:9d:60:a4: 62:24:3e:ce:ad:f6:ea:ca:89:de:0d:55:16:6a:57:ec:fa:27: 89:48:a9:f0:e8:4d:b4:12:24:47:2b:a4:c9:08:70:3b:ec:13: 9e:7a:c5:d5:fb:de:01:2e:2a:cd:ed:1c:ba:ea:3b:a3:e4:15: 7b:ef:99:7d:78:0e:5c:b9:f7:dc:6e:c4:b8:9c:cb:90:8f:fe: 51:f5:ee:88:8f:69:68:37:52:74:42:ab:73:e8:09:7e:eb:6e: ae:c3:1e:e4:3b:14:3c:72:4f:7d:b7:b9:15:fb:ec:f4:ab:3e: 85:c1:96:6a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG5pSvIRF0XPRbrJV2w7hMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyYjFiOTRiMDczYzU0Nzk5MWMyMGY4NDJlYWRlYzE2N2Vj MTllMzQwHhcNMjUxMjA2MTAwMTAzWhcNMjUxMjA3MTAwMTAzWjAzMTEwLwYDVQQD Eyg4MDdjYmQ0MjI5MDQ5OWI4M2NjZTdhYTUyOWQ2MjI2Y2RjYzg0M2ExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnQDXOIVvNNID8QpbsYdI5W5fBWTB 57T9ALoiU1kvw7uo68NYOZ/l5Fy1YZ5mZkZlznQioYgTDiJplioaOqC/YgcoPdxR RWMVpcnhqtCWzpKJzMDoGsJ60hdzuHqg6iGLa+yQjlNDVg0HTw8X4bp6NJHuLgCI 8oQNW9Y97jLe6RipEj8j1RHXRdtPt3AA93/UEeYBOwjMO/ga/5EBzc1TEMlZmsUG YzhShQkWx6r1IwKyHhS+/V7B8rB7Ty9aMIuKvAX3FzfjlU3Ng6gWpVO0aFBTjXD0 c1JwIj1KDxadHh7GFHwvyd0Ps9SHN0SuJKd78Zono35ZKWckPPwN4XTSCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIB8vUIpBJm4PM56pSnWImzcyEOhMB8GA1UdIwQY MBaAFDKxuUsHPFR5kcIPhC6t7BZ+wZ40MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTXJHNVN3YzhWSG1Sd2ctRUxxM3NGbjdCbmpRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS8wYTIwNmUtMTc4OC00MzZiLTk3Mjgt YmVkNGI5OWE3YmI0LzEvTXJHNVN3YzhWSG1Sd2ctRUxxM3NGbjdCbmpRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OS8wYTIwNmUtMTc4OC00MzZiLTk3MjgtYmVkNGI5OWE3YmI0 LzEvTXJHNVN3YzhWSG1Sd2ctRUxxM3NGbjdCbmpRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZjtGZ4pN O8/3KObZ/sQSv0JXcsAjyGe/ORQ9Ugy3GwDAP7mKchOzqXvUnj4O9W2b4Z3JFHmr 5wPfYWtiqJlkORvVxyanNQ2/AbYsrd06BFRqRqOe9nFL0w9/ZYz6ErmEqsKGo0VL jJYmBm2sZClisoGpoBMejRu8Oq+9oZ/L/iKPJskCtsyMMq3dQDfTnWCkYiQ+zq32 6sqJ3g1VFmpX7PoniUip8OhNtBIkRyukyQhwO+wTnnrF1fveAS4qze0cuuo7o+QV e++ZfXgOXLn33G7EuJzLkI/+UfXuiI9paDdSdEKrc+gJfutursMe5DsUPHJPfbe5 Ffvs9Ks+hcGWag== -----END CERTIFICATE-----Generated at Sat Dec 6 19:36:43 2025 by rpki-client