This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/f1af90-355c-484b-b923-d31d4cb1b129/1/MDCZQabYT6Tb3a8PTs2Z-fBDz9w.mft File: MDCZQabYT6Tb3a8PTs2Z-fBDz9w.mft (raw, json) Hash identifier: /Aqo9+Zjz67r8pqSGkvN7GaToQNsON0HI45XbuOw1hE= Subject key identifier: 62:D8:D9:10:6E:8D:38:1C:E6:47:0B:13:7C:60:D9:79:93:C8:F3:C5 Authority key identifier: 30:30:99:41:A6:D8:4F:A4:DB:DD:AF:0F:4E:CD:99:F9:F0:43:CF:DC Certificate issuer: /CN=30309941a6d84fa4dbddaf0f4ecd99f9f043cfdc Certificate serial: 019B3155B2F733633719972FE9C493D5265D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MDCZQabYT6Tb3a8PTs2Z-fBDz9w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/f1af90-355c-484b-b923-d31d4cb1b129/1/MDCZQabYT6Tb3a8PTs2Z-fBDz9w.mft Manifest number: 12D4 Signing time: Thu 18 Dec 2025 12:00:58 +0000 Manifest this update: Thu 18 Dec 2025 12:00:58 +0000 Manifest next update: Fri 19 Dec 2025 12:00:58 +0000 Files and hashes: 1: DIrH-kP5nT3HJlZe7jZz_CkvjFY.roa (hash: gKZZgzAyp+INbVPVuZgOHUrKZ9VQYbL1/WwPWyMWDfc=) 2: MDCZQabYT6Tb3a8PTs2Z-fBDz9w.crl (hash: 3mgsSQqx7sLSWKTsbsT/Bii2lErM2tPnhIfzhRvogj4=) 3: gD2PrMpYBnq5bkywvcg86wYgyi0.roa (hash: ZloCpzZ4hxZcPRO4MDOIHc0MdVfMRoHKIu3JaQVOrkU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/f1af90-355c-484b-b923-d31d4cb1b129/1/MDCZQabYT6Tb3a8PTs2Z-fBDz9w.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/f1af90-355c-484b-b923-d31d4cb1b129/1/MDCZQabYT6Tb3a8PTs2Z-fBDz9w.mft rsync://rpki.ripe.net/repository/DEFAULT/MDCZQabYT6Tb3a8PTs2Z-fBDz9w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 12:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:55:b2:f7:33:63:37:19:97:2f:e9:c4:93:d5:26:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30309941a6d84fa4dbddaf0f4ecd99f9f043cfdc Validity Not Before: Dec 18 12:00:58 2025 GMT Not After : Dec 19 12:00:58 2025 GMT Subject: CN=62d8d9106e8d381ce6470b137c60d97993c8f3c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:a2:bd:c8:ca:9b:80:0e:38:6b:b7:f7:e1:6b: dc:48:61:e4:fc:08:42:75:8f:1e:3d:6d:b7:22:1d: b7:4f:3a:99:4b:53:f0:9e:13:49:db:fe:c9:3c:99: ed:c1:83:3b:93:30:b9:5e:e3:f4:05:98:a4:03:39: 58:e2:9c:2c:5e:a5:c8:1b:18:e8:5b:0c:d1:b4:0d: 96:1d:19:41:10:07:bc:18:22:9b:21:b3:cd:50:76: 50:ac:f0:77:da:8c:e1:02:3f:c9:c1:d5:47:84:68: fd:9e:ea:60:04:15:e3:12:67:08:c3:9d:16:0c:22: 54:12:fb:6a:df:2d:77:da:d7:8e:85:d2:79:62:f5: 4e:66:bd:69:cb:9c:ec:62:0a:79:c5:cf:88:3f:49: 3c:f7:69:27:cc:0b:a3:e1:ab:db:34:20:d2:e3:fb: 00:ab:5b:96:ce:6e:5b:ec:8f:54:b4:55:d3:d8:c7: 29:29:67:75:1a:16:ec:c5:34:16:38:49:98:11:26: 5f:15:49:23:c7:c1:bf:dd:26:a2:06:bd:b6:d2:bd: 5f:9f:32:fe:93:21:5d:10:07:2e:9d:c7:9b:a8:9e: 34:87:8f:ec:f1:38:29:08:a0:c4:0b:07:56:b9:eb: b1:d7:67:0c:c2:34:a7:a2:51:63:de:28:4b:4f:aa: 35:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:D8:D9:10:6E:8D:38:1C:E6:47:0B:13:7C:60:D9:79:93:C8:F3:C5 X509v3 Authority Key Identifier: keyid:30:30:99:41:A6:D8:4F:A4:DB:DD:AF:0F:4E:CD:99:F9:F0:43:CF:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MDCZQabYT6Tb3a8PTs2Z-fBDz9w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/f1af90-355c-484b-b923-d31d4cb1b129/1/MDCZQabYT6Tb3a8PTs2Z-fBDz9w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/f1af90-355c-484b-b923-d31d4cb1b129/1/MDCZQabYT6Tb3a8PTs2Z-fBDz9w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:fb:13:5e:84:90:98:8d:c8:f1:3d:c3:ef:d9:1c:1a:34:93: af:68:40:1b:a1:fa:92:5a:e8:d7:e7:05:f0:00:e7:1e:a6:ef: 40:5a:41:ff:40:47:05:b8:39:3f:b2:b4:7a:f6:c7:9d:86:4c: 4a:68:6b:08:9f:96:69:61:96:e4:1d:d0:7e:14:02:f1:37:3f: c6:31:fc:76:fa:b8:f1:ac:cd:59:c3:bf:67:4c:07:e4:5b:8f: 02:6a:6a:c6:6b:ee:0f:6c:bd:36:56:6d:26:52:31:58:8a:7a: a4:7c:c6:1e:14:1f:8a:cb:c2:1b:26:bf:df:f4:2c:3d:d0:ec: 69:6d:4d:12:d0:50:bc:ff:48:a4:ac:41:7d:be:1e:7a:2f:1b: 0d:c6:4a:88:07:2c:ab:71:a7:2d:43:0c:d8:07:95:1f:f7:db: ee:20:53:11:7e:f4:27:90:5d:ef:c2:7f:b4:a8:51:c8:a8:7c: 9e:1f:19:5f:ff:8d:f6:e2:85:36:3e:ef:21:5b:92:c8:ac:ff: 7f:36:b8:86:26:a7:24:ea:06:9a:9f:3f:b5:a9:3f:c9:f0:4d: 04:7e:24:67:e5:dd:92:5c:22:84:b8:da:3e:fc:f2:12:dd:08: 8b:fe:53:08:4c:f7:91:4e:0b:45:31:dd:b7:a9:d0:62:0d:70: bb:65:3b:3c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsxVbL3M2M3GZcv6cST1SZdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwMzA5OTQxYTZkODRmYTRkYmRkYWYwZjRlY2Q5OWY5ZjA0 M2NmZGMwHhcNMjUxMjE4MTIwMDU4WhcNMjUxMjE5MTIwMDU4WjAzMTEwLwYDVQQD Eyg2MmQ4ZDkxMDZlOGQzODFjZTY0NzBiMTM3YzYwZDk3OTkzYzhmM2M1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy6K9yMqbgA44a7f34WvcSGHk/AhC dY8ePW23Ih23TzqZS1PwnhNJ2/7JPJntwYM7kzC5XuP0BZikAzlY4pwsXqXIGxjo WwzRtA2WHRlBEAe8GCKbIbPNUHZQrPB32ozhAj/JwdVHhGj9nupgBBXjEmcIw50W DCJUEvtq3y132teOhdJ5YvVOZr1py5zsYgp5xc+IP0k892knzAuj4avbNCDS4/sA q1uWzm5b7I9UtFXT2McpKWd1GhbsxTQWOEmYESZfFUkjx8G/3SaiBr220r1fnzL+ kyFdEAcuncebqJ40h4/s8TgpCKDECwdWueux12cMwjSnolFj3ihLT6o11QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGLY2RBujTgc5kcLE3xg2XmTyPPFMB8GA1UdIwQY MBaAFDAwmUGm2E+k292vD07NmfnwQ8/cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTURDWlFhYllUNlRiM2E4UFRzMlotZkJEejl3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi9mMWFmOTAtMzU1Yy00ODRiLWI5MjMt ZDMxZDRjYjFiMTI5LzEvTURDWlFhYllUNlRiM2E4UFRzMlotZkJEejl3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi9mMWFmOTAtMzU1Yy00ODRiLWI5MjMtZDMxZDRjYjFiMTI5 LzEvTURDWlFhYllUNlRiM2E4UFRzMlotZkJEejl3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsfsTXoSQ mI3I8T3D79kcGjSTr2hAG6H6klro1+cF8ADnHqbvQFpB/0BHBbg5P7K0evbHnYZM SmhrCJ+WaWGW5B3QfhQC8Tc/xjH8dvq48azNWcO/Z0wH5FuPAmpqxmvuD2y9NlZt JlIxWIp6pHzGHhQfisvCGya/3/QsPdDsaW1NEtBQvP9IpKxBfb4eei8bDcZKiAcs q3GnLUMM2AeVH/fb7iBTEX70J5Bd78J/tKhRyKh8nh8ZX/+N9uKFNj7vIVuSyKz/ fza4hianJOoGmp8/tak/yfBNBH4kZ+XdklwihLjaPvzyEt0Ii/5TCEz3kU4LRTHd t6nQYg1wu2U7PA== -----END CERTIFICATE-----Generated at Thu Dec 18 22:05:33 2025 by rpki-client