This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/b7cd7c-5795-4146-8477-0da87b51ffac/1/MdMezFS5Dp3_JEK5BRqpVo8wbng.mft File: MdMezFS5Dp3_JEK5BRqpVo8wbng.mft (raw, json) Hash identifier: bNftHwkQ2QMV/nZB+QM8q8D6kVlIcv4PlOkpBbnE6Ao= Subject key identifier: B8:82:55:5D:23:2D:FE:B3:43:53:83:88:26:E0:21:1C:48:84:10:F6 Authority key identifier: 31:D3:1E:CC:54:B9:0E:9D:FF:24:42:B9:05:1A:A9:56:8F:30:6E:78 Certificate issuer: /CN=31d31ecc54b90e9dff2442b9051aa9568f306e78 Certificate serial: 019B24AC73B53A97B3B391C391C53D0CCFDC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdMezFS5Dp3_JEK5BRqpVo8wbng.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/b7cd7c-5795-4146-8477-0da87b51ffac/1/MdMezFS5Dp3_JEK5BRqpVo8wbng.mft Manifest number: 18 Signing time: Tue 16 Dec 2025 01:00:40 +0000 Manifest this update: Tue 16 Dec 2025 01:00:40 +0000 Manifest next update: Wed 17 Dec 2025 01:00:40 +0000 Files and hashes: 1: 3VroMIGW9a2JttxLS_ZpvUy7Y2o.roa (hash: DC6Ab1c940mU76EK7+5P4BKzGG2d6IkCWGpU20nLY2g=) 2: MdMezFS5Dp3_JEK5BRqpVo8wbng.crl (hash: aDsnYVIhBHF1dNPGuN7tiWWqoi/vF3ouHFb8AeCk1gY=) 3: yRudXorxnvueWEv1laK5g0QyggU.asa (hash: uEI7+zajFcoccQxQSO5n5lK2+bMnA5xMY3cPSGH3byc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/b7cd7c-5795-4146-8477-0da87b51ffac/1/MdMezFS5Dp3_JEK5BRqpVo8wbng.crl rsync://rpki.ripe.net/repository/DEFAULT/9f/b7cd7c-5795-4146-8477-0da87b51ffac/1/MdMezFS5Dp3_JEK5BRqpVo8wbng.mft rsync://rpki.ripe.net/repository/DEFAULT/MdMezFS5Dp3_JEK5BRqpVo8wbng.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 22:36:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:24:ac:73:b5:3a:97:b3:b3:91:c3:91:c5:3d:0c:cf:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31d31ecc54b90e9dff2442b9051aa9568f306e78 Validity Not Before: Dec 16 01:00:40 2025 GMT Not After : Dec 17 01:00:40 2025 GMT Subject: CN=b882555d232dfeb34353838826e0211c488410f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:d5:ba:de:48:da:66:8c:7b:b6:80:2a:ec:77: 43:db:7f:90:25:70:3a:ae:8a:a1:82:a8:19:16:5e: 0d:e3:95:2a:47:00:ac:bb:ce:00:4c:2c:35:5e:a1: 36:53:ab:cf:df:3b:88:4f:f1:bb:11:11:25:6b:ce: 60:95:6d:46:f7:94:37:f1:ef:dc:48:b0:1e:fc:1d: b6:ed:07:f4:89:cc:08:82:2e:06:2c:59:dd:6d:6d: aa:bd:cd:09:ef:97:47:44:53:f0:a1:bf:18:e9:73: 67:de:b6:f1:9f:7a:a3:07:e1:7a:f0:41:e8:30:09: ab:e6:69:67:c7:93:c8:15:29:75:8a:b6:f1:aa:fd: bc:81:f1:d1:94:7b:78:21:20:54:d6:d9:d0:01:7f: 44:7b:92:16:5d:f1:70:b6:9a:46:cd:80:d9:99:c8: 4c:f8:5a:8c:3d:34:f8:29:71:06:03:85:c1:7f:8e: a5:c8:f1:12:d1:db:94:68:42:7e:bb:d6:6e:28:0e: 2d:bc:2a:d8:5a:03:9b:a3:24:2e:e2:0f:40:b5:f4: 0f:65:21:e4:7f:ab:2c:46:56:f6:d2:22:da:ca:7b: ae:b0:3b:e0:b5:07:cc:c6:48:e6:b4:32:2c:fc:9b: 61:a6:d8:a3:be:50:c2:19:23:bf:93:0a:f7:a8:cf: 6f:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:82:55:5D:23:2D:FE:B3:43:53:83:88:26:E0:21:1C:48:84:10:F6 X509v3 Authority Key Identifier: keyid:31:D3:1E:CC:54:B9:0E:9D:FF:24:42:B9:05:1A:A9:56:8F:30:6E:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdMezFS5Dp3_JEK5BRqpVo8wbng.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/b7cd7c-5795-4146-8477-0da87b51ffac/1/MdMezFS5Dp3_JEK5BRqpVo8wbng.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/b7cd7c-5795-4146-8477-0da87b51ffac/1/MdMezFS5Dp3_JEK5BRqpVo8wbng.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:f9:7c:98:44:10:12:1c:9c:3f:23:27:91:81:a1:5f:03:c7: c5:a3:59:3e:c9:4a:11:0e:b3:03:fa:de:71:25:78:b8:d7:5f: 80:f7:b2:49:fd:63:a7:7a:01:7b:9e:8b:26:46:44:60:10:16: ff:3e:ca:04:d4:56:f2:53:d2:09:ae:ae:2c:9c:ff:fb:8b:0b: 47:d2:9f:9d:d5:f7:af:eb:47:7f:50:a6:08:cb:1c:96:f8:88: a2:99:9f:65:71:75:87:d2:17:7b:63:2d:1e:89:26:b5:7e:21: 3a:9d:34:66:d5:7f:bd:b1:14:dd:a4:8d:a3:66:92:b6:5e:4a: 37:b8:4e:b9:8b:d6:6a:5e:3d:de:e5:b3:85:3c:af:f5:e5:91: 0d:b7:4c:b3:95:27:ff:f0:23:a3:6d:f6:14:b5:52:57:26:be: bb:3b:33:d6:18:44:8c:b6:85:48:e6:ef:31:92:83:74:38:4e: 42:18:48:6d:24:83:73:8f:8c:32:63:68:d2:5a:7b:22:88:06: 95:ba:12:a5:98:e5:5b:70:7c:94:a5:50:17:2b:8e:d2:f1:4a: e0:48:93:8a:6f:2d:02:27:8c:d4:fe:9b:3b:b8:31:0a:7b:75: 57:14:01:96:84:cc:9a:0c:03:49:88:9f:c1:05:6d:43:3a:8a: 86:2a:eb:75 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZskrHO1Opezs5HDkcU9DM/cMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxZDMxZWNjNTRiOTBlOWRmZjI0NDJiOTA1MWFhOTU2OGYz MDZlNzgwHhcNMjUxMjE2MDEwMDQwWhcNMjUxMjE3MDEwMDQwWjAzMTEwLwYDVQQD EyhiODgyNTU1ZDIzMmRmZWIzNDM1MzgzODgyNmUwMjExYzQ4ODQxMGY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo9W63kjaZox7toAq7HdD23+QJXA6 roqhgqgZFl4N45UqRwCsu84ATCw1XqE2U6vP3zuIT/G7EREla85glW1G95Q38e/c SLAe/B227Qf0icwIgi4GLFndbW2qvc0J75dHRFPwob8Y6XNn3rbxn3qjB+F68EHo MAmr5mlnx5PIFSl1irbxqv28gfHRlHt4ISBU1tnQAX9Ee5IWXfFwtppGzYDZmchM +FqMPTT4KXEGA4XBf46lyPES0duUaEJ+u9ZuKA4tvCrYWgOboyQu4g9AtfQPZSHk f6ssRlb20iLaynuusDvgtQfMxkjmtDIs/JthptijvlDCGSO/kwr3qM9vzQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLiCVV0jLf6zQ1ODiCbgIRxIhBD2MB8GA1UdIwQY MBaAFDHTHsxUuQ6d/yRCuQUaqVaPMG54MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTWRNZXpGUzVEcDNfSkVLNUJScXBWbzh3Ym5nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi9iN2NkN2MtNTc5NS00MTQ2LTg0Nzct MGRhODdiNTFmZmFjLzEvTWRNZXpGUzVEcDNfSkVLNUJScXBWbzh3Ym5nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Zi9iN2NkN2MtNTc5NS00MTQ2LTg0NzctMGRhODdiNTFmZmFj LzEvTWRNZXpGUzVEcDNfSkVLNUJScXBWbzh3Ym5nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALvl8mEQQ EhycPyMnkYGhXwPHxaNZPslKEQ6zA/recSV4uNdfgPeySf1jp3oBe56LJkZEYBAW /z7KBNRW8lPSCa6uLJz/+4sLR9KfndX3r+tHf1CmCMsclviIopmfZXF1h9IXe2Mt HokmtX4hOp00ZtV/vbEU3aSNo2aStl5KN7hOuYvWal493uWzhTyv9eWRDbdMs5Un //Ajo232FLVSVya+uzsz1hhEjLaFSObvMZKDdDhOQhhIbSSDc4+MMmNo0lp7IogG lboSpZjlW3B8lKVQFyuO0vFK4EiTim8tAieM1P6bO7gxCnt1VxQBloTMmgwDSYif wQVtQzqKhirrdQ== -----END CERTIFICATE-----Generated at Tue Dec 16 04:32:37 2025 by rpki-client