This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/e44dea-8d51-440a-bc02-bab576e20393/1/MdTuSv_1XmdETUfUm1Eqg2i_nvY.mft File: MdTuSv_1XmdETUfUm1Eqg2i_nvY.mft (raw, json) Hash identifier: 9tkH3G+hoLEF41/QpXPgGK0/W/7m7vRXiHoK5OnMx1o= Subject key identifier: A3:44:04:7C:56:9B:2E:03:79:A4:CF:FD:B1:2B:F3:E1:71:66:E6:78 Authority key identifier: 31:D4:EE:4A:FF:F5:5E:67:44:4D:47:D4:9B:51:2A:83:68:BF:9E:F6 Certificate issuer: /CN=31d4ee4afff55e67444d47d49b512a8368bf9ef6 Certificate serial: 019AF2098A9C3DE8696FC5BF8402968A73A4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdTuSv_1XmdETUfUm1Eqg2i_nvY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/e44dea-8d51-440a-bc02-bab576e20393/1/MdTuSv_1XmdETUfUm1Eqg2i_nvY.mft Manifest number: 1246 Signing time: Sat 06 Dec 2025 05:01:42 +0000 Manifest this update: Sat 06 Dec 2025 05:01:42 +0000 Manifest next update: Sun 07 Dec 2025 05:01:42 +0000 Files and hashes: 1: 0_5k3Z3yC7Dgba-hxI0f3sWXcrg.roa (hash: WB89xP0WXfzR4P8TznMXEjV3olpCtGvnlUvlrgb2708=) 2: MdTuSv_1XmdETUfUm1Eqg2i_nvY.crl (hash: k3iDJ8WPr3NI5h7fKkmmqU9MOknkqmGY+VZOXp7E6Yk=) 3: ZlJWr-hEOqUqxRC1ufvh4DxAuDM.roa (hash: jx78O4mw6UZw+ac2ij3Kg6QoCkl1hgwVf80ooqVUn5Q=) 4: mouRKK4_Q2E-W7kvAvNPxrpZLhE.roa (hash: ybMAN8gUri6B6wRdRo0fLl/8jSvuyoOJGt4dM0c6HXQ=) 5: oKDIWV_7Y8ktJ4d_lro3RzUpAzE.roa (hash: txEsmpmbkyHZufJHl2J4dFHRxGpSRd6FBOFojmw5rsw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/e44dea-8d51-440a-bc02-bab576e20393/1/MdTuSv_1XmdETUfUm1Eqg2i_nvY.crl rsync://rpki.ripe.net/repository/DEFAULT/a1/e44dea-8d51-440a-bc02-bab576e20393/1/MdTuSv_1XmdETUfUm1Eqg2i_nvY.mft rsync://rpki.ripe.net/repository/DEFAULT/MdTuSv_1XmdETUfUm1Eqg2i_nvY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:8a:9c:3d:e8:69:6f:c5:bf:84:02:96:8a:73:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31d4ee4afff55e67444d47d49b512a8368bf9ef6 Validity Not Before: Dec 6 05:01:42 2025 GMT Not After : Dec 7 05:01:42 2025 GMT Subject: CN=a344047c569b2e0379a4cffdb12bf3e17166e678 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:b9:c6:9b:3e:02:c0:68:0a:63:23:ed:37:5d: 14:53:0e:f0:f0:0f:39:5e:63:29:49:6b:a8:9d:cd: 1c:62:fc:0f:75:c7:d7:e5:a3:12:6c:e5:98:b4:b9: 58:43:1a:e5:cc:b4:d8:f1:a8:14:3c:d0:69:cf:15: c8:83:3f:bc:4b:56:5e:d8:e0:44:7d:61:ad:37:42: 84:bb:e7:62:bb:da:aa:2e:5b:33:ac:63:d1:b8:de: 9f:5c:06:f8:5e:df:78:42:4e:e1:5b:29:9e:e1:50: 80:6f:fc:fd:44:82:f3:97:26:80:80:07:29:1b:2f: a9:be:78:fd:72:20:14:9c:28:e9:ef:cd:74:56:9b: cf:5d:fe:a7:36:b5:25:cd:ec:4d:a6:37:ad:ba:07: f8:5a:5c:a8:e2:10:e9:e0:03:0b:b2:eb:10:41:17: 0b:a8:12:41:a0:36:50:80:31:6b:a3:85:eb:8b:83: b8:2b:20:07:e8:fc:d5:44:69:7b:b7:8a:ab:86:be: ec:4d:79:d4:69:40:ac:5d:b9:10:bb:79:fa:c3:93: 02:84:68:5e:42:11:b2:4c:4b:01:aa:17:55:76:d2: 2e:ee:8e:9e:c5:c6:85:28:93:a1:7f:fe:f4:60:9e: fb:a5:5c:d2:1c:0c:f9:ab:e2:01:ea:d6:40:9b:11: 5e:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:44:04:7C:56:9B:2E:03:79:A4:CF:FD:B1:2B:F3:E1:71:66:E6:78 X509v3 Authority Key Identifier: keyid:31:D4:EE:4A:FF:F5:5E:67:44:4D:47:D4:9B:51:2A:83:68:BF:9E:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdTuSv_1XmdETUfUm1Eqg2i_nvY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/e44dea-8d51-440a-bc02-bab576e20393/1/MdTuSv_1XmdETUfUm1Eqg2i_nvY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/e44dea-8d51-440a-bc02-bab576e20393/1/MdTuSv_1XmdETUfUm1Eqg2i_nvY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:ec:b6:2c:21:92:f4:89:24:b5:07:d2:dd:67:21:7d:73:0f: af:cb:a5:ae:a1:71:24:06:aa:3e:f3:d1:76:2a:2f:f6:f5:10: 13:9a:de:7c:e7:68:49:22:d9:8c:1d:b2:1c:ce:66:6d:dd:68: 16:43:e2:7c:0b:e0:d3:16:87:cf:74:7c:f3:1e:4d:20:50:8d: 46:39:46:4e:bd:bb:45:f1:9e:3e:66:09:e0:8c:4e:50:09:60: 55:26:81:62:ea:39:82:e3:00:74:7d:ec:fe:59:cf:8e:09:d6: 44:99:54:9b:2f:f3:ef:31:18:31:84:0d:bd:a2:00:60:d5:ad: d7:c2:9e:b8:a8:e8:2a:4d:87:c8:4b:27:95:55:92:6b:84:73: 13:29:e2:0c:55:15:0b:8a:6d:d7:f6:bc:35:5f:fa:da:99:09: ce:13:2c:10:ee:15:21:53:e7:92:6f:18:64:ef:71:92:76:98: 00:02:b6:fb:fb:b5:7b:27:81:8c:68:4b:b8:e2:d0:b3:9c:84: 29:c4:93:59:2e:2c:8e:38:a5:8f:b7:81:54:8a:62:e5:85:92: 77:c8:c1:1a:51:30:0b:8b:06:62:1b:df:26:a3:c8:d5:42:ba: 7b:e2:a9:ba:b9:95:cb:a1:4a:ff:1b:42:7b:9f:56:e1:30:85: d9:d9:68:8e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCYqcPehpb8W/hAKWinOkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxZDRlZTRhZmZmNTVlNjc0NDRkNDdkNDliNTEyYTgzNjhi ZjllZjYwHhcNMjUxMjA2MDUwMTQyWhcNMjUxMjA3MDUwMTQyWjAzMTEwLwYDVQQD EyhhMzQ0MDQ3YzU2OWIyZTAzNzlhNGNmZmRiMTJiZjNlMTcxNjZlNjc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsLnGmz4CwGgKYyPtN10UUw7w8A85 XmMpSWuonc0cYvwPdcfX5aMSbOWYtLlYQxrlzLTY8agUPNBpzxXIgz+8S1Ze2OBE fWGtN0KEu+diu9qqLlszrGPRuN6fXAb4Xt94Qk7hWyme4VCAb/z9RILzlyaAgAcp Gy+pvnj9ciAUnCjp7810VpvPXf6nNrUlzexNpjetugf4Wlyo4hDp4AMLsusQQRcL qBJBoDZQgDFro4Xri4O4KyAH6PzVRGl7t4qrhr7sTXnUaUCsXbkQu3n6w5MChGhe QhGyTEsBqhdVdtIu7o6excaFKJOhf/70YJ77pVzSHAz5q+IB6tZAmxFewQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKNEBHxWmy4DeaTP/bEr8+FxZuZ4MB8GA1UdIwQY MBaAFDHU7kr/9V5nRE1H1JtRKoNov572MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTWRUdVN2XzFYbWRFVFVmVW0xRXFnMmlfbnZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS9lNDRkZWEtOGQ1MS00NDBhLWJjMDIt YmFiNTc2ZTIwMzkzLzEvTWRUdVN2XzFYbWRFVFVmVW0xRXFnMmlfbnZZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMS9lNDRkZWEtOGQ1MS00NDBhLWJjMDItYmFiNTc2ZTIwMzkz LzEvTWRUdVN2XzFYbWRFVFVmVW0xRXFnMmlfbnZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArey2LCGS 9IkktQfS3WchfXMPr8ulrqFxJAaqPvPRdiov9vUQE5refOdoSSLZjB2yHM5mbd1o FkPifAvg0xaHz3R88x5NIFCNRjlGTr27RfGePmYJ4IxOUAlgVSaBYuo5guMAdH3s /lnPjgnWRJlUmy/z7zEYMYQNvaIAYNWt18KeuKjoKk2HyEsnlVWSa4RzEyniDFUV C4pt1/a8NV/62pkJzhMsEO4VIVPnkm8YZO9xknaYAAK2+/u1eyeBjGhLuOLQs5yE KcSTWS4sjjilj7eBVIpi5YWSd8jBGlEwC4sGYhvfJqPI1UK6e+KpurmVy6FK/xtC e59W4TCF2dlojg== -----END CERTIFICATE-----Generated at Sat Dec 6 09:18:29 2025 by rpki-client