This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/269363-b35f-422c-b076-93f486b8b961/1/mpGNfRgPNudlEqQWEaCyiotAxS4.mft File: mpGNfRgPNudlEqQWEaCyiotAxS4.mft (raw, json) Hash identifier: W/l50zm+WXTiT0ba1xGCDCcQ2vq5CqKSU1uAvLsItLI= Subject key identifier: 27:48:DB:84:EA:FA:C7:2B:58:B4:47:E7:8A:6B:C3:7E:14:60:41:B9 Authority key identifier: 9A:91:8D:7D:18:0F:36:E7:65:12:A4:16:11:A0:B2:8A:8B:40:C5:2E Certificate issuer: /CN=9a918d7d180f36e76512a41611a0b28a8b40c52e Certificate serial: 019AF31C9BC34D34DCAE27C0B15BB5D5118A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mpGNfRgPNudlEqQWEaCyiotAxS4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/269363-b35f-422c-b076-93f486b8b961/1/mpGNfRgPNudlEqQWEaCyiotAxS4.mft Manifest number: 115D Signing time: Sat 06 Dec 2025 10:02:09 +0000 Manifest this update: Sat 06 Dec 2025 10:02:09 +0000 Manifest next update: Sun 07 Dec 2025 10:02:09 +0000 Files and hashes: 1: NEqj8BvBPOtkH45qzmLazZkmCpA.roa (hash: 1CSuBVjeUix6GCeWhV3QFu5H8gx07d5za8DUe8nOaxY=) 2: mpGNfRgPNudlEqQWEaCyiotAxS4.crl (hash: wflrF4vbwoU6B0dXj0EyWO5AJBWvXbWysApI+fYfhdY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/269363-b35f-422c-b076-93f486b8b961/1/mpGNfRgPNudlEqQWEaCyiotAxS4.crl rsync://rpki.ripe.net/repository/DEFAULT/9e/269363-b35f-422c-b076-93f486b8b961/1/mpGNfRgPNudlEqQWEaCyiotAxS4.mft rsync://rpki.ripe.net/repository/DEFAULT/mpGNfRgPNudlEqQWEaCyiotAxS4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:9b:c3:4d:34:dc:ae:27:c0:b1:5b:b5:d5:11:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a918d7d180f36e76512a41611a0b28a8b40c52e Validity Not Before: Dec 6 10:02:09 2025 GMT Not After : Dec 7 10:02:09 2025 GMT Subject: CN=2748db84eafac72b58b447e78a6bc37e146041b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:b8:52:02:17:b8:11:08:7f:cf:e7:a8:1f:67: 24:7e:02:21:b3:ab:08:44:40:00:a9:a1:53:91:ba: 5a:9d:4c:fe:6a:2e:23:51:3b:cf:c5:07:9f:b3:cb: 3f:4b:49:9a:1b:b6:c6:6c:08:c1:07:58:6a:8c:f5: b7:1a:39:ae:cd:40:50:32:5b:4c:d7:f4:b2:b7:df: 7c:4b:80:d2:74:9b:56:58:40:61:a9:38:c7:61:31: e8:b1:7f:4c:06:f7:d3:35:1f:48:36:fc:0d:20:1c: 10:03:25:3d:12:ed:11:77:cc:c7:a5:0f:5f:86:09: 02:76:29:75:25:30:b2:7a:e8:a5:36:ba:65:75:1f: 6c:01:68:a1:fe:89:3c:59:42:05:29:58:d7:6a:c6: af:39:2b:66:4a:d3:33:2b:29:bf:00:7d:5e:08:b3: 2d:ab:69:a3:d6:1e:95:24:1c:99:c3:20:d5:c3:d5: 02:72:ce:9f:23:45:ec:da:fe:36:db:95:c4:a2:14: 05:7d:c9:ba:9f:d7:e2:f2:b5:df:f0:d7:c8:28:1c: ec:d2:b5:36:16:23:17:87:36:0e:16:c5:c7:d3:64: 8a:a5:e6:06:a9:c3:73:ee:7a:00:ae:2c:10:aa:54: 3e:83:46:48:67:14:c0:8a:72:8b:47:a2:c4:a7:40: 59:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:48:DB:84:EA:FA:C7:2B:58:B4:47:E7:8A:6B:C3:7E:14:60:41:B9 X509v3 Authority Key Identifier: keyid:9A:91:8D:7D:18:0F:36:E7:65:12:A4:16:11:A0:B2:8A:8B:40:C5:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mpGNfRgPNudlEqQWEaCyiotAxS4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/269363-b35f-422c-b076-93f486b8b961/1/mpGNfRgPNudlEqQWEaCyiotAxS4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/269363-b35f-422c-b076-93f486b8b961/1/mpGNfRgPNudlEqQWEaCyiotAxS4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:eb:e6:ce:5d:60:58:62:ec:fc:ad:90:a1:ff:aa:d1:95:4d: 56:ad:35:2b:0a:3f:55:59:ff:c4:dd:2e:8b:dd:17:d5:5c:8a: 6e:04:21:60:3b:be:47:1b:4a:f5:3f:5d:8c:32:d0:35:55:05: a1:3c:b8:5c:61:65:9d:05:26:c0:60:1e:98:9d:9b:bc:e4:bc: 21:48:c3:b4:e0:41:ca:1a:f9:91:3b:02:78:73:71:b4:e8:2b: e4:1c:62:4a:c9:3b:75:c2:bc:b5:c9:cb:8e:61:11:ad:71:ec: 32:b7:b4:b5:c3:8d:95:ad:63:6b:79:08:0c:f6:9c:f4:fe:9b: 14:59:6b:b5:8e:14:ae:76:f8:3b:e8:26:9a:61:cf:f0:6b:6b: 3d:1d:b3:38:dc:1a:99:8e:21:ed:5a:58:af:a3:f3:04:04:c5: 9b:1c:2f:af:e1:73:e4:0c:8e:10:47:72:ed:3e:9a:aa:9a:70: 87:f3:5e:05:f5:48:1f:2a:d6:31:c7:c2:ec:43:b3:af:6b:64: a5:fa:36:4e:96:4b:ed:15:0e:a6:11:e8:b6:3c:7b:29:91:09: eb:15:b4:fb:79:d4:3b:64:82:67:3e:78:2f:61:34:64:25:d5: ad:68:d2:60:f6:04:1f:e9:2e:e1:9e:a8:6d:62:24:81:56:04: eb:cd:47:79 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHJvDTTTcrifAsVu11RGKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhOTE4ZDdkMTgwZjM2ZTc2NTEyYTQxNjExYTBiMjhhOGI0 MGM1MmUwHhcNMjUxMjA2MTAwMjA5WhcNMjUxMjA3MTAwMjA5WjAzMTEwLwYDVQQD EygyNzQ4ZGI4NGVhZmFjNzJiNThiNDQ3ZTc4YTZiYzM3ZTE0NjA0MWI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn7hSAhe4EQh/z+eoH2ckfgIhs6sI REAAqaFTkbpanUz+ai4jUTvPxQefs8s/S0maG7bGbAjBB1hqjPW3GjmuzUBQMltM 1/Syt998S4DSdJtWWEBhqTjHYTHosX9MBvfTNR9INvwNIBwQAyU9Eu0Rd8zHpQ9f hgkCdil1JTCyeuilNrpldR9sAWih/ok8WUIFKVjXasavOStmStMzKym/AH1eCLMt q2mj1h6VJByZwyDVw9UCcs6fI0Xs2v4225XEohQFfcm6n9fi8rXf8NfIKBzs0rU2 FiMXhzYOFsXH02SKpeYGqcNz7noAriwQqlQ+g0ZIZxTAinKLR6LEp0BZdwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCdI24Tq+scrWLRH54prw34UYEG5MB8GA1UdIwQY MBaAFJqRjX0YDzbnZRKkFhGgsoqLQMUuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbXBHTmZSZ1BOdWRsRXFRV0VhQ3lpb3RBeFM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS8yNjkzNjMtYjM1Zi00MjJjLWIwNzYt OTNmNDg2YjhiOTYxLzEvbXBHTmZSZ1BOdWRsRXFRV0VhQ3lpb3RBeFM0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZS8yNjkzNjMtYjM1Zi00MjJjLWIwNzYtOTNmNDg2YjhiOTYx LzEvbXBHTmZSZ1BOdWRsRXFRV0VhQ3lpb3RBeFM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbevmzl1g WGLs/K2Qof+q0ZVNVq01Kwo/VVn/xN0ui90X1VyKbgQhYDu+RxtK9T9djDLQNVUF oTy4XGFlnQUmwGAemJ2bvOS8IUjDtOBByhr5kTsCeHNxtOgr5BxiSsk7dcK8tcnL jmERrXHsMre0tcONla1ja3kIDPac9P6bFFlrtY4Urnb4O+gmmmHP8GtrPR2zONwa mY4h7VpYr6PzBATFmxwvr+Fz5AyOEEdy7T6aqppwh/NeBfVIHyrWMcfC7EOzr2tk pfo2TpZL7RUOphHotjx7KZEJ6xW0+3nUO2SCZz54L2E0ZCXVrWjSYPYEH+ku4Z6o bWIkgVYE681HeQ== -----END CERTIFICATE-----Generated at Sat Dec 6 12:10:50 2025 by rpki-client