This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/3dbd39-5f9f-48fb-9c01-bd6e3b026c37/1/MduEfR2x4LLCwlUCIQ_1pxmWehk.mft File: MduEfR2x4LLCwlUCIQ_1pxmWehk.mft (raw, json) Hash identifier: 6qEsUFLuoj5tleZUwcSjECXRoaELuHsicaSOlGtLBik= Subject key identifier: 81:2F:B0:14:78:90:DC:9C:2A:F4:B7:94:11:1A:93:F3:7D:2A:8B:9C Authority key identifier: 31:DB:84:7D:1D:B1:E0:B2:C2:C2:55:02:21:0F:F5:A7:19:96:7A:19 Certificate issuer: /CN=31db847d1db1e0b2c2c25502210ff5a719967a19 Certificate serial: 019AF4651FDD85AABADB52F6C2382DEF0505 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MduEfR2x4LLCwlUCIQ_1pxmWehk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/3dbd39-5f9f-48fb-9c01-bd6e3b026c37/1/MduEfR2x4LLCwlUCIQ_1pxmWehk.mft Manifest number: 0FEA Signing time: Sat 06 Dec 2025 16:00:59 +0000 Manifest this update: Sat 06 Dec 2025 16:00:59 +0000 Manifest next update: Sun 07 Dec 2025 16:00:59 +0000 Files and hashes: 1: 0IHmyTelW8zpO-_QdR9UfSEkXAI.roa (hash: UlYSOxczUbkdfKJ9miYaE+QEa9fb9mQhLOlffEgcsoY=) 2: MduEfR2x4LLCwlUCIQ_1pxmWehk.crl (hash: SG0E8MS8x0dV3DWbyU7IPYupoVPlPftgO8KDrF3V/As=) 3: PQvHlqxPOZ5EcVf6KsUmqrHycoQ.roa (hash: 3ksFdFv/Fa3gpXmdL0Lg1ZLkcfv0kVJRQQQ2mO5ywLk=) 4: ahJNP8kQoasOGfOn59FuyopzzTg.roa (hash: 6vRaJqB5sPcJZ3/fvcKuSD1RiGeRJgHPqC0FIBy6qGg=) 5: al6s6WgAHfcCaxm7dnRoKhGccgc.roa (hash: dELh70vEBgRpyjJwV+u67ZFF6OWlxJRy1hJNSwq3TqA=) 6: cz_i6inXtcUIjcIN9oJWb2HinvM.roa (hash: PQ0BLB4sI2B91vehL/dzDGr3GUpFGQqMElA5h/dx7n8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/3dbd39-5f9f-48fb-9c01-bd6e3b026c37/1/MduEfR2x4LLCwlUCIQ_1pxmWehk.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/3dbd39-5f9f-48fb-9c01-bd6e3b026c37/1/MduEfR2x4LLCwlUCIQ_1pxmWehk.mft rsync://rpki.ripe.net/repository/DEFAULT/MduEfR2x4LLCwlUCIQ_1pxmWehk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:65:1f:dd:85:aa:ba:db:52:f6:c2:38:2d:ef:05:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31db847d1db1e0b2c2c25502210ff5a719967a19 Validity Not Before: Dec 6 16:00:59 2025 GMT Not After : Dec 7 16:00:59 2025 GMT Subject: CN=812fb0147890dc9c2af4b794111a93f37d2a8b9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:01:eb:a0:37:90:d1:19:c0:6a:d2:c5:a7:68: ff:64:ff:59:cf:eb:05:75:3f:f0:f7:68:b3:64:ac: e2:f4:6b:34:d0:96:c1:d1:7d:7d:78:15:cf:9b:ce: 25:cc:50:c6:89:ed:c7:44:f2:33:9c:75:ad:00:21: 19:b8:87:1b:a1:ce:ac:6e:97:3d:0e:28:d4:ee:9f: 30:fa:c4:9a:4d:69:b2:97:e6:22:b9:a4:cf:17:7d: 33:e0:e3:2b:4e:5d:5b:f5:76:65:50:47:73:5d:c5: 28:af:f8:48:ac:2b:bd:de:bc:3e:3a:26:4b:89:55: b3:5a:40:3c:1e:ec:9e:92:b3:d0:90:eb:43:34:05: c2:38:10:00:cd:9b:d4:c9:65:15:5c:9f:4f:0e:14: be:3f:36:43:6f:14:15:9f:b7:55:bc:aa:b4:db:af: 3f:ec:ac:19:e8:96:da:be:94:17:6c:2b:7f:2b:ea: a1:8e:04:43:82:ad:d5:85:10:a5:64:ff:44:5a:fd: 75:44:a6:85:42:4c:52:da:cf:68:c8:f6:32:18:2c: 23:28:1a:d5:f5:cb:64:c2:c4:e7:d0:a8:6a:c9:16: 89:81:1e:fb:ac:11:57:e2:d0:6c:e1:f3:87:7c:a6: 74:2a:30:45:95:fa:ff:c8:4d:62:3a:4c:d3:5b:30: cf:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:2F:B0:14:78:90:DC:9C:2A:F4:B7:94:11:1A:93:F3:7D:2A:8B:9C X509v3 Authority Key Identifier: keyid:31:DB:84:7D:1D:B1:E0:B2:C2:C2:55:02:21:0F:F5:A7:19:96:7A:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MduEfR2x4LLCwlUCIQ_1pxmWehk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/3dbd39-5f9f-48fb-9c01-bd6e3b026c37/1/MduEfR2x4LLCwlUCIQ_1pxmWehk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/3dbd39-5f9f-48fb-9c01-bd6e3b026c37/1/MduEfR2x4LLCwlUCIQ_1pxmWehk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:4f:4b:b5:23:26:a3:1c:9f:3e:91:72:69:04:03:13:78:eb: 69:56:5c:4b:fb:6a:6d:9c:70:4f:75:c2:d7:34:1e:d6:85:fe: 63:f3:36:86:4d:dd:83:cf:b6:84:f5:fc:a9:b1:24:c7:79:59: a5:05:7b:ff:cd:70:65:0d:c7:89:51:86:6b:1e:58:a1:fe:e7: 93:f2:1e:5b:d4:fa:a4:ab:f1:10:33:8b:9a:2c:d3:c0:ec:88: 60:cb:e9:7f:07:4e:6f:49:0d:2a:40:b5:b2:2d:b0:00:02:b3: f9:a4:41:99:5b:54:95:06:df:d2:c3:8f:7c:f6:07:41:53:70: b7:ec:38:9d:9d:2e:56:86:9a:d2:73:12:a9:0d:3e:9c:de:48: ab:fe:20:47:e2:44:c3:9c:19:df:0e:2c:01:c9:61:fa:7f:f1: 07:1c:af:fb:b2:8b:d0:96:b5:42:49:5f:82:aa:4c:f0:05:f9: bb:83:cb:08:91:1b:df:ba:ec:ac:57:db:21:33:ad:6f:00:0c: 01:fc:8a:78:b3:49:a5:7d:74:68:a2:e6:4a:2b:2d:e9:ce:85: fd:80:9e:9c:e3:99:84:7c:c5:83:e1:b3:da:ec:84:2a:18:25: 11:96:d5:80:3d:11:f6:3a:2c:96:f7:07:86:38:f6:ed:7f:f0: 3e:27:7a:ab -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0ZR/dhaq621L2wjgt7wUFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxZGI4NDdkMWRiMWUwYjJjMmMyNTUwMjIxMGZmNWE3MTk5 NjdhMTkwHhcNMjUxMjA2MTYwMDU5WhcNMjUxMjA3MTYwMDU5WjAzMTEwLwYDVQQD Eyg4MTJmYjAxNDc4OTBkYzljMmFmNGI3OTQxMTFhOTNmMzdkMmE4YjljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzwHroDeQ0RnAatLFp2j/ZP9Zz+sF dT/w92izZKzi9Gs00JbB0X19eBXPm84lzFDGie3HRPIznHWtACEZuIcboc6sbpc9 DijU7p8w+sSaTWmyl+YiuaTPF30z4OMrTl1b9XZlUEdzXcUor/hIrCu93rw+OiZL iVWzWkA8HuyekrPQkOtDNAXCOBAAzZvUyWUVXJ9PDhS+PzZDbxQVn7dVvKq0268/ 7KwZ6JbavpQXbCt/K+qhjgRDgq3VhRClZP9EWv11RKaFQkxS2s9oyPYyGCwjKBrV 9ctkwsTn0KhqyRaJgR77rBFX4tBs4fOHfKZ0KjBFlfr/yE1iOkzTWzDPoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIEvsBR4kNycKvS3lBEak/N9KoucMB8GA1UdIwQY MBaAFDHbhH0dseCywsJVAiEP9acZlnoZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTWR1RWZSMng0TExDd2xVQ0lRXzFweG1XZWhrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi8zZGJkMzktNWY5Zi00OGZiLTljMDEt YmQ2ZTNiMDI2YzM3LzEvTWR1RWZSMng0TExDd2xVQ0lRXzFweG1XZWhrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi8zZGJkMzktNWY5Zi00OGZiLTljMDEtYmQ2ZTNiMDI2YzM3 LzEvTWR1RWZSMng0TExDd2xVQ0lRXzFweG1XZWhrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmE9LtSMm oxyfPpFyaQQDE3jraVZcS/tqbZxwT3XC1zQe1oX+Y/M2hk3dg8+2hPX8qbEkx3lZ pQV7/81wZQ3HiVGGax5Yof7nk/IeW9T6pKvxEDOLmizTwOyIYMvpfwdOb0kNKkC1 si2wAAKz+aRBmVtUlQbf0sOPfPYHQVNwt+w4nZ0uVoaa0nMSqQ0+nN5Iq/4gR+JE w5wZ3w4sAclh+n/xBxyv+7KL0Ja1QklfgqpM8AX5u4PLCJEb37rsrFfbITOtbwAM AfyKeLNJpX10aKLmSist6c6F/YCenOOZhHzFg+Gz2uyEKhglEZbVgD0R9joslvcH hjj27X/wPid6qw== -----END CERTIFICATE-----Generated at Sat Dec 6 20:15:32 2025 by rpki-client