This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/0c954a-ac3f-4860-8cf4-d99ba44db595/1/MwY72VuJG_MxFVfITf6H7PQrGQY.mft File: MwY72VuJG_MxFVfITf6H7PQrGQY.mft (raw, json) Hash identifier: oActftaRhr6sY1xlrYL4qfuj2qsmBeI2mTIkBioIQKo= Subject key identifier: A0:9D:D6:E9:70:BA:9F:C7:94:52:61:F4:C0:8E:88:DD:A5:A0:E0:D9 Authority key identifier: 33:06:3B:D9:5B:89:1B:F3:31:15:57:C8:4D:FE:87:EC:F4:2B:19:06 Certificate issuer: /CN=33063bd95b891bf3311557c84dfe87ecf42b1906 Certificate serial: 019AF23FA4AF1CB0237D5CD1516816FF67F1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MwY72VuJG_MxFVfITf6H7PQrGQY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/0c954a-ac3f-4860-8cf4-d99ba44db595/1/MwY72VuJG_MxFVfITf6H7PQrGQY.mft Manifest number: 0364 Signing time: Sat 06 Dec 2025 06:00:48 +0000 Manifest this update: Sat 06 Dec 2025 06:00:48 +0000 Manifest next update: Sun 07 Dec 2025 06:00:48 +0000 Files and hashes: 1: MwY72VuJG_MxFVfITf6H7PQrGQY.crl (hash: sRYD3HARWpoDjqu5yTirOz5acIY6n8cnaZHqJaxGGSA=) 2: z1aTRBewSJhzUfWWJD41OIsIBo0.roa (hash: qD0OIe2RSaDdKkAmPZcT/wnJhlY0jqIIohwD44CcvP0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/0c954a-ac3f-4860-8cf4-d99ba44db595/1/MwY72VuJG_MxFVfITf6H7PQrGQY.crl rsync://rpki.ripe.net/repository/DEFAULT/9f/0c954a-ac3f-4860-8cf4-d99ba44db595/1/MwY72VuJG_MxFVfITf6H7PQrGQY.mft rsync://rpki.ripe.net/repository/DEFAULT/MwY72VuJG_MxFVfITf6H7PQrGQY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:a4:af:1c:b0:23:7d:5c:d1:51:68:16:ff:67:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33063bd95b891bf3311557c84dfe87ecf42b1906 Validity Not Before: Dec 6 06:00:48 2025 GMT Not After : Dec 7 06:00:48 2025 GMT Subject: CN=a09dd6e970ba9fc7945261f4c08e88dda5a0e0d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:5a:54:2a:01:81:bf:37:3f:b1:c4:c4:c3:c2: f5:f8:fd:73:bf:6d:6c:9a:0d:ba:37:97:ec:25:09: 7a:b6:0d:48:d3:bb:1f:51:bd:b1:80:df:cf:b9:06: 58:fa:9c:56:aa:02:18:f3:cd:96:7a:6f:b0:38:c5: 92:0b:f9:ee:e1:7e:cc:ec:9d:e2:a9:ea:75:e6:ad: ee:be:01:08:6e:d6:9b:de:99:39:ae:47:72:52:89: 25:38:7b:2c:05:8c:49:e9:81:8e:9c:50:17:91:7a: 24:28:dc:31:6f:60:80:d7:92:e3:41:95:59:00:5f: 24:59:52:c9:2b:66:4c:55:8b:60:8b:70:d5:1e:18: 24:61:8a:4d:41:b1:34:09:bf:d5:2f:41:3e:5b:2a: f8:4e:1e:f6:fc:90:a0:d8:c8:4a:24:f9:0a:b3:c6: 6a:e3:53:60:ad:13:60:ef:06:41:0a:d1:56:f3:9c: 46:10:b6:9c:24:ad:22:57:5e:dd:b2:00:15:ae:46: c0:cb:a7:cb:18:bf:40:f4:13:93:0e:b5:84:42:11: fa:53:f1:b6:36:b5:5e:11:75:2a:45:43:1d:65:e5: 2a:19:04:31:f5:65:09:80:bd:49:4d:12:5c:9a:8d: 31:8a:e2:96:cd:7f:d4:54:55:4f:0a:10:9a:ba:3d: cc:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:9D:D6:E9:70:BA:9F:C7:94:52:61:F4:C0:8E:88:DD:A5:A0:E0:D9 X509v3 Authority Key Identifier: keyid:33:06:3B:D9:5B:89:1B:F3:31:15:57:C8:4D:FE:87:EC:F4:2B:19:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MwY72VuJG_MxFVfITf6H7PQrGQY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/0c954a-ac3f-4860-8cf4-d99ba44db595/1/MwY72VuJG_MxFVfITf6H7PQrGQY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/0c954a-ac3f-4860-8cf4-d99ba44db595/1/MwY72VuJG_MxFVfITf6H7PQrGQY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:1e:28:84:7c:75:d9:e6:3e:d4:7d:ae:b5:ee:a2:7a:3a:53: 2f:f0:ea:6a:01:38:2e:de:43:e3:10:54:b3:06:71:a4:cc:a1: 5c:98:8f:6d:4c:1b:05:2f:fe:42:39:43:ac:db:a4:0f:36:51: 72:19:1f:d8:e0:b7:23:1d:86:4b:06:57:03:68:5b:f1:b3:9c: 7a:9b:71:5a:a2:2e:91:b9:24:3c:13:1d:99:51:98:3b:c4:ab: 9c:0c:1b:00:45:85:be:69:84:d2:36:4f:40:15:3d:5e:7d:5f: 8a:ef:80:5d:57:ae:f3:9e:23:d5:4d:95:fb:9a:ef:8b:4d:d6: bc:95:4c:b4:07:a9:2e:90:4a:f4:3d:19:43:15:57:a7:44:a3: 40:1c:a4:5a:79:ca:42:09:48:6f:e8:b9:77:73:96:cf:ef:83: cb:07:5d:e2:1c:95:fe:c5:f5:6a:38:ff:ed:89:eb:c3:53:9d: cf:d4:53:fc:29:dc:18:d3:23:dc:4a:92:66:63:08:d5:51:81: f1:88:54:9d:3b:27:da:8c:99:5e:7b:b4:a1:18:6e:eb:7a:05: c5:e8:91:fc:83:8e:a8:53:39:70:98:bd:03:ba:2b:f7:d6:96: 0c:f6:57:d4:3a:95:75:bc:b7:9e:61:b7:13:ed:30:0f:e7:3e: 5f:23:a7:a2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP6SvHLAjfVzRUWgW/2fxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMzMDYzYmQ5NWI4OTFiZjMzMTE1NTdjODRkZmU4N2VjZjQy YjE5MDYwHhcNMjUxMjA2MDYwMDQ4WhcNMjUxMjA3MDYwMDQ4WjAzMTEwLwYDVQQD EyhhMDlkZDZlOTcwYmE5ZmM3OTQ1MjYxZjRjMDhlODhkZGE1YTBlMGQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoVpUKgGBvzc/scTEw8L1+P1zv21s mg26N5fsJQl6tg1I07sfUb2xgN/PuQZY+pxWqgIY882Wem+wOMWSC/nu4X7M7J3i qep15q3uvgEIbtab3pk5rkdyUoklOHssBYxJ6YGOnFAXkXokKNwxb2CA15LjQZVZ AF8kWVLJK2ZMVYtgi3DVHhgkYYpNQbE0Cb/VL0E+Wyr4Th72/JCg2MhKJPkKs8Zq 41NgrRNg7wZBCtFW85xGELacJK0iV17dsgAVrkbAy6fLGL9A9BOTDrWEQhH6U/G2 NrVeEXUqRUMdZeUqGQQx9WUJgL1JTRJcmo0xiuKWzX/UVFVPChCauj3M9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKCd1ulwup/HlFJh9MCOiN2loODZMB8GA1UdIwQY MBaAFDMGO9lbiRvzMRVXyE3+h+z0KxkGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTXdZNzJWdUpHX014RlZmSVRmNkg3UFFyR1FZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi8wYzk1NGEtYWMzZi00ODYwLThjZjQt ZDk5YmE0NGRiNTk1LzEvTXdZNzJWdUpHX014RlZmSVRmNkg3UFFyR1FZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Zi8wYzk1NGEtYWMzZi00ODYwLThjZjQtZDk5YmE0NGRiNTk1 LzEvTXdZNzJWdUpHX014RlZmSVRmNkg3UFFyR1FZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFx4ohHx1 2eY+1H2ute6iejpTL/DqagE4Lt5D4xBUswZxpMyhXJiPbUwbBS/+QjlDrNukDzZR chkf2OC3Ix2GSwZXA2hb8bOceptxWqIukbkkPBMdmVGYO8SrnAwbAEWFvmmE0jZP QBU9Xn1fiu+AXVeu854j1U2V+5rvi03WvJVMtAepLpBK9D0ZQxVXp0SjQBykWnnK QglIb+i5d3OWz++Dywdd4hyV/sX1ajj/7Ynrw1Odz9RT/CncGNMj3EqSZmMI1VGB 8YhUnTsn2oyZXnu0oRhu63oFxeiR/IOOqFM5cJi9A7or99aWDPZX1DqVdby3nmG3 E+0wD+c+XyOnog== -----END CERTIFICATE-----Generated at Sat Dec 6 12:35:44 2025 by rpki-client