This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/233d82-938e-4f35-aa48-d4e9cf26ee10/1/mpVYgYJyucVAD8XaGIE6zOkXWI0.mft File: mpVYgYJyucVAD8XaGIE6zOkXWI0.mft (raw, json) Hash identifier: ppAV8y0mtDCienNFntGWOW5FUVmMfpc5olryO+3Yodo= Subject key identifier: 2D:E5:DB:92:5E:55:FA:3F:7F:1A:77:8E:83:45:C2:01:CF:66:35:55 Authority key identifier: 9A:95:58:81:82:72:B9:C5:40:0F:C5:DA:18:81:3A:CC:E9:17:58:8D Certificate issuer: /CN=9a9558818272b9c5400fc5da18813acce917588d Certificate serial: 019AF12CFFF8629307B39801509922A3904B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mpVYgYJyucVAD8XaGIE6zOkXWI0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/233d82-938e-4f35-aa48-d4e9cf26ee10/1/mpVYgYJyucVAD8XaGIE6zOkXWI0.mft Manifest number: 175D Signing time: Sat 06 Dec 2025 01:00:49 +0000 Manifest this update: Sat 06 Dec 2025 01:00:49 +0000 Manifest next update: Sun 07 Dec 2025 01:00:49 +0000 Files and hashes: 1: mpVYgYJyucVAD8XaGIE6zOkXWI0.crl (hash: urWuyuKa5zbnI/w6ZCpXu0xB36w7rFbjYtVM6R/0PRU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/233d82-938e-4f35-aa48-d4e9cf26ee10/1/mpVYgYJyucVAD8XaGIE6zOkXWI0.crl rsync://rpki.ripe.net/repository/DEFAULT/be/233d82-938e-4f35-aa48-d4e9cf26ee10/1/mpVYgYJyucVAD8XaGIE6zOkXWI0.mft rsync://rpki.ripe.net/repository/DEFAULT/mpVYgYJyucVAD8XaGIE6zOkXWI0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2c:ff:f8:62:93:07:b3:98:01:50:99:22:a3:90:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a9558818272b9c5400fc5da18813acce917588d Validity Not Before: Dec 6 01:00:49 2025 GMT Not After : Dec 7 01:00:49 2025 GMT Subject: CN=2de5db925e55fa3f7f1a778e8345c201cf663555 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:74:cf:28:51:5b:8b:28:eb:60:23:18:cf:13: 8f:dc:4b:45:2d:c3:30:c2:fa:e3:60:ac:cf:aa:c1: e2:7d:60:e5:9f:d5:4e:df:ba:55:e7:17:ff:e3:88: c3:b0:1a:c8:75:10:9e:a5:09:51:a4:36:a5:cc:30: 7e:20:69:33:64:a2:b8:e9:24:6e:85:08:1a:68:6a: 3c:ed:eb:eb:c3:db:62:4d:f3:c5:f9:c9:6e:0d:2c: 18:58:98:ae:61:c3:63:ca:f9:8f:b7:67:6e:cc:80: bf:3c:8f:a7:44:84:23:d1:35:39:dc:4c:71:b1:72: 05:f6:23:df:0d:9c:51:65:c3:ea:e1:4e:4c:30:4e: 8b:cb:99:49:f8:6f:d1:be:ef:54:87:99:48:58:6c: 5b:de:84:ce:9d:48:cb:19:70:3b:eb:7a:08:08:45: a0:41:62:a7:50:c7:d3:5a:20:4b:e6:c3:d5:48:a4: 7a:1f:ad:87:53:8c:4c:fd:57:4e:28:6a:bc:63:40: 05:f0:9a:c3:5b:80:e6:4e:e1:d6:16:9a:e1:37:0f: a8:10:e3:2c:d2:13:b8:b4:85:34:0c:f9:f3:4e:20: 70:48:e3:4b:fd:d6:55:11:e0:d7:28:e4:37:9b:d9: 6c:8b:cc:8a:14:a3:3c:c9:ee:5e:b0:9e:2f:c1:d0: e2:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:E5:DB:92:5E:55:FA:3F:7F:1A:77:8E:83:45:C2:01:CF:66:35:55 X509v3 Authority Key Identifier: keyid:9A:95:58:81:82:72:B9:C5:40:0F:C5:DA:18:81:3A:CC:E9:17:58:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mpVYgYJyucVAD8XaGIE6zOkXWI0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/233d82-938e-4f35-aa48-d4e9cf26ee10/1/mpVYgYJyucVAD8XaGIE6zOkXWI0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/233d82-938e-4f35-aa48-d4e9cf26ee10/1/mpVYgYJyucVAD8XaGIE6zOkXWI0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cb:de:8b:1d:09:27:ff:d9:7d:b9:11:38:a6:45:27:ca:5a:07: 3c:a4:c5:27:36:b1:9d:a2:d1:3b:c3:80:38:25:63:43:eb:1f: 5c:8a:ba:44:9b:f7:93:b1:de:62:b0:36:00:02:1c:e2:d2:68: bd:ec:2d:93:5c:b6:d6:97:a6:00:2d:d7:6f:f3:d2:b4:c4:bd: 24:9a:92:e5:f4:23:64:9e:0f:57:92:ae:2e:09:77:11:87:67: 6f:9e:13:e6:95:9a:47:0c:7a:c7:aa:b9:7f:6a:1c:2d:fd:01: 44:12:a6:da:a5:f4:71:c1:40:ea:58:b7:43:84:c5:46:2a:67: 94:cf:17:38:a7:c2:3d:6c:06:78:18:34:c2:fd:63:c7:fa:a2: d4:8b:8e:bb:ff:78:37:d1:de:09:67:3c:89:61:19:20:37:a1: 85:af:ef:c0:ce:a9:ce:8c:11:37:fa:28:28:b9:73:02:81:40: 61:93:7b:af:66:ba:8b:e4:13:a7:40:b1:9f:c1:d2:a2:e2:4e: 0a:08:d4:f6:79:1e:1c:81:19:25:5b:24:08:d0:d9:be:04:e6: 83:f0:0d:35:1c:8b:33:c3:e8:ec:3b:54:ec:b2:7a:78:56:a8: 0b:4e:63:14:7c:d5:78:65:39:5b:6f:55:2c:0b:3e:f9:f8:a8: f6:8a:0a:8e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLP/4YpMHs5gBUJkio5BLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhOTU1ODgxODI3MmI5YzU0MDBmYzVkYTE4ODEzYWNjZTkx NzU4OGQwHhcNMjUxMjA2MDEwMDQ5WhcNMjUxMjA3MDEwMDQ5WjAzMTEwLwYDVQQD EygyZGU1ZGI5MjVlNTVmYTNmN2YxYTc3OGU4MzQ1YzIwMWNmNjYzNTU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlHTPKFFbiyjrYCMYzxOP3EtFLcMw wvrjYKzPqsHifWDln9VO37pV5xf/44jDsBrIdRCepQlRpDalzDB+IGkzZKK46SRu hQgaaGo87evrw9tiTfPF+cluDSwYWJiuYcNjyvmPt2duzIC/PI+nRIQj0TU53Exx sXIF9iPfDZxRZcPq4U5MME6Ly5lJ+G/Rvu9Uh5lIWGxb3oTOnUjLGXA763oICEWg QWKnUMfTWiBL5sPVSKR6H62HU4xM/VdOKGq8Y0AF8JrDW4DmTuHWFprhNw+oEOMs 0hO4tIU0DPnzTiBwSONL/dZVEeDXKOQ3m9lsi8yKFKM8ye5esJ4vwdDibwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC3l25JeVfo/fxp3joNFwgHPZjVVMB8GA1UdIwQY MBaAFJqVWIGCcrnFQA/F2hiBOszpF1iNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbXBWWWdZSnl1Y1ZBRDhYYUdJRTZ6T2tYV0kwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS8yMzNkODItOTM4ZS00ZjM1LWFhNDgt ZDRlOWNmMjZlZTEwLzEvbXBWWWdZSnl1Y1ZBRDhYYUdJRTZ6T2tYV0kwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS8yMzNkODItOTM4ZS00ZjM1LWFhNDgtZDRlOWNmMjZlZTEw LzEvbXBWWWdZSnl1Y1ZBRDhYYUdJRTZ6T2tYV0kwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAy96LHQkn /9l9uRE4pkUnyloHPKTFJzaxnaLRO8OAOCVjQ+sfXIq6RJv3k7HeYrA2AAIc4tJo vewtk1y21pemAC3Xb/PStMS9JJqS5fQjZJ4PV5KuLgl3EYdnb54T5pWaRwx6x6q5 f2ocLf0BRBKm2qX0ccFA6li3Q4TFRipnlM8XOKfCPWwGeBg0wv1jx/qi1IuOu/94 N9HeCWc8iWEZIDehha/vwM6pzowRN/ooKLlzAoFAYZN7r2a6i+QTp0Cxn8HSouJO CgjU9nkeHIEZJVskCNDZvgTmg/ANNRyLM8Po7DtU7LJ6eFaoC05jFHzVeGU5W29V LAs++fio9ooKjg== -----END CERTIFICATE-----Generated at Sat Dec 6 06:57:01 2025 by rpki-client