This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/99be4d-f8ec-4430-a9cd-7e12b87d06c2/1/MPjiwMh-k3meIyhPNrhhXbeHg6s.mft File: MPjiwMh-k3meIyhPNrhhXbeHg6s.mft (raw, json) Hash identifier: Vc8w3qTZYyxkuG0/8B4KqqvK4BbV8QO64bM2KK8aHGc= Subject key identifier: 4F:A7:6C:8E:0D:48:AF:CF:D5:AD:BE:D2:95:08:1D:05:C0:58:FE:94 Authority key identifier: 30:F8:E2:C0:C8:7E:93:79:9E:23:28:4F:36:B8:61:5D:B7:87:83:AB Certificate issuer: /CN=30f8e2c0c87e93799e23284f36b8615db78783ab Certificate serial: 019AF5E5B07B8A3E0C5F00E27B01BAC7C8BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MPjiwMh-k3meIyhPNrhhXbeHg6s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/99be4d-f8ec-4430-a9cd-7e12b87d06c2/1/MPjiwMh-k3meIyhPNrhhXbeHg6s.mft Manifest number: 1662 Signing time: Sat 06 Dec 2025 23:01:02 +0000 Manifest this update: Sat 06 Dec 2025 23:01:02 +0000 Manifest next update: Sun 07 Dec 2025 23:01:02 +0000 Files and hashes: 1: 1-RWOiprTQ-uVnwhklGyyfsDfjnk.roa (hash: KKoCIqZllKz4mT5mjhqOfo5AkvT5jJCo40l+tooCAf8=) 2: MPjiwMh-k3meIyhPNrhhXbeHg6s.crl (hash: +k0DZ09Yg9v22lTBphZNSfvt/d7zJBMGlbwh52ZyjvM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/99be4d-f8ec-4430-a9cd-7e12b87d06c2/1/MPjiwMh-k3meIyhPNrhhXbeHg6s.crl rsync://rpki.ripe.net/repository/DEFAULT/9b/99be4d-f8ec-4430-a9cd-7e12b87d06c2/1/MPjiwMh-k3meIyhPNrhhXbeHg6s.mft rsync://rpki.ripe.net/repository/DEFAULT/MPjiwMh-k3meIyhPNrhhXbeHg6s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:e5:b0:7b:8a:3e:0c:5f:00:e2:7b:01:ba:c7:c8:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30f8e2c0c87e93799e23284f36b8615db78783ab Validity Not Before: Dec 6 23:01:02 2025 GMT Not After : Dec 7 23:01:02 2025 GMT Subject: CN=4fa76c8e0d48afcfd5adbed295081d05c058fe94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:d8:f0:5c:5e:77:96:49:40:1a:6c:ee:de:84: 7e:1e:b1:62:91:63:8f:31:63:61:3f:f0:01:ca:e7: b1:f7:db:4e:6f:bd:1a:f4:19:b2:a6:6f:39:d2:9e: da:ee:f3:16:b5:68:4a:64:86:0e:e2:f2:16:0a:d6: 8d:f8:64:88:27:1a:88:a4:2e:75:03:ec:94:d1:95: 92:fb:57:03:e7:0f:00:d0:9b:29:68:4b:6c:ea:c5: 7c:70:7d:13:05:f9:13:73:7e:a2:df:ca:f9:3f:8f: f0:a3:a3:b9:8e:32:3f:dd:a5:58:2f:9f:32:77:bd: f4:af:4d:f8:8d:87:71:61:df:c9:d4:1b:d8:39:ac: 41:9a:eb:c4:7e:1b:09:0f:ca:fb:33:7d:22:3b:fa: 01:2c:04:ef:dc:12:06:bc:0d:48:68:6f:cb:35:ab: 6f:5e:dc:4e:61:9c:58:f9:fc:67:f1:5a:b7:a0:f4: a7:64:ff:f3:b0:d5:cb:b8:c5:97:2f:23:74:b6:84: 24:0a:0d:2c:9d:37:35:b2:52:c0:46:45:83:18:03: d9:0e:b0:8c:be:50:4a:12:8f:07:8a:3b:76:9e:3c: 1f:32:ad:a6:05:e5:b8:cf:a1:86:75:c5:20:a8:1b: ee:a9:69:3f:0e:8a:77:7d:87:97:80:37:80:8d:8a: 89:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:A7:6C:8E:0D:48:AF:CF:D5:AD:BE:D2:95:08:1D:05:C0:58:FE:94 X509v3 Authority Key Identifier: keyid:30:F8:E2:C0:C8:7E:93:79:9E:23:28:4F:36:B8:61:5D:B7:87:83:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MPjiwMh-k3meIyhPNrhhXbeHg6s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/99be4d-f8ec-4430-a9cd-7e12b87d06c2/1/MPjiwMh-k3meIyhPNrhhXbeHg6s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/99be4d-f8ec-4430-a9cd-7e12b87d06c2/1/MPjiwMh-k3meIyhPNrhhXbeHg6s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:3d:87:07:c6:5e:be:24:d1:fc:c1:9d:70:16:87:30:69:b7: 9f:99:c3:2c:d7:a8:9e:23:34:73:ca:1c:ea:d7:66:2e:89:82: cb:2a:ad:c7:51:14:bf:cf:e3:a6:58:f6:1d:8e:58:d4:56:63: 92:6c:44:72:29:d1:4a:0d:10:4f:fa:9e:80:93:9c:77:33:65: a0:8f:f2:69:9d:0a:48:71:c8:93:0e:dc:ed:c8:24:29:2e:b7: c0:0e:dc:50:e8:fd:fa:58:44:f1:fb:b1:0e:98:34:fa:c0:6c: 8f:4a:ef:d2:67:04:42:ab:11:88:d8:8e:af:6e:08:b2:8c:ad: f5:9f:b4:61:06:3c:f7:ca:ad:f7:1e:ae:bc:01:f8:11:2c:1d: 51:01:36:bb:3b:f9:dc:b9:b0:49:e2:57:1d:e5:09:c3:47:08: d0:95:9f:a9:27:e8:f9:f2:38:b3:aa:27:dd:5f:d8:03:35:c3: 17:cc:3f:fb:52:cf:10:ff:b5:c0:a5:39:64:bd:0f:40:f8:7f: ab:cf:ea:de:9a:21:39:4a:7b:90:1f:1e:d4:6f:8a:24:1c:5f: de:bb:75:d2:83:f1:c3:60:89:bf:12:c7:9d:94:b0:39:7e:d6: 01:e6:44:e8:c6:d7:1d:aa:8f:fb:18:99:b1:4a:94:e7:b3:d6: 83:2f:b3:c9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr15bB7ij4MXwDiewG6x8i8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwZjhlMmMwYzg3ZTkzNzk5ZTIzMjg0ZjM2Yjg2MTVkYjc4 NzgzYWIwHhcNMjUxMjA2MjMwMTAyWhcNMjUxMjA3MjMwMTAyWjAzMTEwLwYDVQQD Eyg0ZmE3NmM4ZTBkNDhhZmNmZDVhZGJlZDI5NTA4MWQwNWMwNThmZTk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvtjwXF53lklAGmzu3oR+HrFikWOP MWNhP/AByuex99tOb70a9Bmypm850p7a7vMWtWhKZIYO4vIWCtaN+GSIJxqIpC51 A+yU0ZWS+1cD5w8A0JspaEts6sV8cH0TBfkTc36i38r5P4/wo6O5jjI/3aVYL58y d730r034jYdxYd/J1BvYOaxBmuvEfhsJD8r7M30iO/oBLATv3BIGvA1IaG/LNatv XtxOYZxY+fxn8Vq3oPSnZP/zsNXLuMWXLyN0toQkCg0snTc1slLARkWDGAPZDrCM vlBKEo8Hijt2njwfMq2mBeW4z6GGdcUgqBvuqWk/Dop3fYeXgDeAjYqJ+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE+nbI4NSK/P1a2+0pUIHQXAWP6UMB8GA1UdIwQY MBaAFDD44sDIfpN5niMoTza4YV23h4OrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTVBqaXdNaC1rM21lSXloUE5yaGhYYmVIZzZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi85OWJlNGQtZjhlYy00NDMwLWE5Y2Qt N2UxMmI4N2QwNmMyLzEvTVBqaXdNaC1rM21lSXloUE5yaGhYYmVIZzZzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yi85OWJlNGQtZjhlYy00NDMwLWE5Y2QtN2UxMmI4N2QwNmMy LzEvTVBqaXdNaC1rM21lSXloUE5yaGhYYmVIZzZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUj2HB8Ze viTR/MGdcBaHMGm3n5nDLNeoniM0c8oc6tdmLomCyyqtx1EUv8/jplj2HY5Y1FZj kmxEcinRSg0QT/qegJOcdzNloI/yaZ0KSHHIkw7c7cgkKS63wA7cUOj9+lhE8fux Dpg0+sBsj0rv0mcEQqsRiNiOr24Isoyt9Z+0YQY898qt9x6uvAH4ESwdUQE2uzv5 3LmwSeJXHeUJw0cI0JWfqSfo+fI4s6on3V/YAzXDF8w/+1LPEP+1wKU5ZL0PQPh/ q8/q3pohOUp7kB8e1G+KJBxf3rt10oPxw2CJvxLHnZSwOX7WAeZE6MbXHaqP+xiZ sUqU57PWgy+zyQ== -----END CERTIFICATE-----Generated at Sun Dec 7 07:25:13 2025 by rpki-client