This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/380864-2154-47d9-a8b0-1b1c826e7b8e/1/Mwe9udWFUeFJKsQ6I7m2KWac624.mft File: Mwe9udWFUeFJKsQ6I7m2KWac624.mft (raw, json) Hash identifier: M0Mq19aE/5+GKr4jFUau+vSwbpiLuk1UTQ1sYss/0f8= Subject key identifier: 12:D6:DD:F8:15:04:96:34:E8:5E:FA:F2:97:3A:08:B1:F3:08:51:D7 Authority key identifier: 33:07:BD:B9:D5:85:51:E1:49:2A:C4:3A:23:B9:B6:29:66:9C:EB:6E Certificate issuer: /CN=3307bdb9d58551e1492ac43a23b9b629669ceb6e Certificate serial: 019AF208B6115A95E19CEC3A7709E742517A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mwe9udWFUeFJKsQ6I7m2KWac624.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/380864-2154-47d9-a8b0-1b1c826e7b8e/1/Mwe9udWFUeFJKsQ6I7m2KWac624.mft Manifest number: 023F Signing time: Sat 06 Dec 2025 05:00:48 +0000 Manifest this update: Sat 06 Dec 2025 05:00:48 +0000 Manifest next update: Sun 07 Dec 2025 05:00:48 +0000 Files and hashes: 1: Mwe9udWFUeFJKsQ6I7m2KWac624.crl (hash: nrXMEISJzs0Sm3xLMEEviQEFOLSMYkvgS6X/bnRn+gM=) 2: OQ3xapSQQrV-80ArCY291PiiOQ0.roa (hash: OY/in2kPTUsYYOEPlRa8j7m4biw3RBXISzd1HBiTCII=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/380864-2154-47d9-a8b0-1b1c826e7b8e/1/Mwe9udWFUeFJKsQ6I7m2KWac624.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/380864-2154-47d9-a8b0-1b1c826e7b8e/1/Mwe9udWFUeFJKsQ6I7m2KWac624.mft rsync://rpki.ripe.net/repository/DEFAULT/Mwe9udWFUeFJKsQ6I7m2KWac624.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:b6:11:5a:95:e1:9c:ec:3a:77:09:e7:42:51:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3307bdb9d58551e1492ac43a23b9b629669ceb6e Validity Not Before: Dec 6 05:00:48 2025 GMT Not After : Dec 7 05:00:48 2025 GMT Subject: CN=12d6ddf815049634e85efaf2973a08b1f30851d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:23:43:90:14:4d:d2:5e:4f:c0:9b:15:43:92: b0:b8:db:1f:1b:72:78:fb:78:fe:d3:55:62:5f:f8: ff:98:ce:d5:7e:b9:f6:cc:c0:2c:0b:b1:d6:0f:e2: 17:f9:9b:5e:85:e1:1f:e0:10:23:e0:8f:de:c6:32: dd:c8:84:16:bd:ee:e7:74:2e:6c:dc:c9:cd:38:8a: 8c:0e:d7:3f:fa:1a:ba:2e:c5:8b:81:ad:34:2a:4e: 94:ef:03:e5:7c:6a:1b:e5:f1:f4:d7:04:51:27:4c: 47:e0:d0:45:31:42:d9:24:c7:82:d2:84:ed:ab:1e: 09:32:88:e5:46:ca:d2:df:18:71:28:94:a7:94:6e: 81:84:62:da:c3:59:f4:a8:36:f2:19:bb:a3:2a:79: a8:d1:75:3c:ee:01:27:ef:0b:6e:41:9a:88:15:2b: 43:cb:9d:3c:55:bc:5f:e9:de:51:af:6f:9d:0c:93: 75:c7:08:72:6f:fd:2d:84:79:6b:cd:00:2c:7f:40: fc:b7:fd:35:9f:d2:c9:c0:07:a8:eb:40:1f:df:e1: e1:86:c6:b2:68:82:4e:fc:79:0a:de:52:e4:9d:e9: 44:a4:27:7d:3b:af:ac:53:be:9a:90:df:22:a5:c1: 6d:07:55:f9:54:a1:8e:66:b1:b6:6e:79:9c:18:9d: 39:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:D6:DD:F8:15:04:96:34:E8:5E:FA:F2:97:3A:08:B1:F3:08:51:D7 X509v3 Authority Key Identifier: keyid:33:07:BD:B9:D5:85:51:E1:49:2A:C4:3A:23:B9:B6:29:66:9C:EB:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mwe9udWFUeFJKsQ6I7m2KWac624.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/380864-2154-47d9-a8b0-1b1c826e7b8e/1/Mwe9udWFUeFJKsQ6I7m2KWac624.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/380864-2154-47d9-a8b0-1b1c826e7b8e/1/Mwe9udWFUeFJKsQ6I7m2KWac624.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:cd:27:c7:ca:70:62:fa:20:7b:30:5c:14:3f:46:fd:9e:2b: 74:52:f6:65:61:a7:50:6f:43:3f:fb:c6:7b:58:ac:3a:af:62: a3:cb:7e:d3:6d:2c:0b:4e:89:b8:8d:5a:0f:26:79:8a:90:c4: 22:80:36:42:e3:5f:52:ad:f5:57:a3:45:29:7b:2b:ac:00:72: 69:8e:1d:56:98:1e:57:4a:f6:72:0f:1d:f4:5a:ce:10:6f:44: a1:93:8e:53:f1:3e:3c:6b:9a:76:cf:ae:89:cf:bb:5c:bf:6b: 15:e6:20:dd:72:75:1f:29:a0:8c:b4:25:91:0a:97:10:16:79: 8d:ed:ec:47:35:75:ed:e4:b5:0a:ec:32:98:eb:aa:e3:52:e6: 7c:c9:0f:81:64:f7:5c:ae:a2:68:06:71:85:35:06:03:40:23: 80:68:58:e0:45:8a:a5:bf:22:44:52:d7:f6:af:c2:0b:45:78: cf:eb:71:5a:24:f0:a9:e5:da:da:c4:03:61:6b:8e:6e:81:6f: 1c:9d:e5:a4:5f:1e:9b:5e:9a:5a:1d:ff:8e:83:f9:bb:bd:d8: fa:9e:6b:18:1a:41:7e:8b:66:ea:bf:6b:7e:b3:56:17:23:cf: 79:ae:46:8e:d1:d7:18:b4:a9:40:be:43:a8:76:76:24:b7:2e: 08:e2:5d:b0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCLYRWpXhnOw6dwnnQlF6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMzMDdiZGI5ZDU4NTUxZTE0OTJhYzQzYTIzYjliNjI5NjY5 Y2ViNmUwHhcNMjUxMjA2MDUwMDQ4WhcNMjUxMjA3MDUwMDQ4WjAzMTEwLwYDVQQD EygxMmQ2ZGRmODE1MDQ5NjM0ZTg1ZWZhZjI5NzNhMDhiMWYzMDg1MWQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyCNDkBRN0l5PwJsVQ5KwuNsfG3J4 +3j+01ViX/j/mM7Vfrn2zMAsC7HWD+IX+ZteheEf4BAj4I/exjLdyIQWve7ndC5s 3MnNOIqMDtc/+hq6LsWLga00Kk6U7wPlfGob5fH01wRRJ0xH4NBFMULZJMeC0oTt qx4JMojlRsrS3xhxKJSnlG6BhGLaw1n0qDbyGbujKnmo0XU87gEn7wtuQZqIFStD y508Vbxf6d5Rr2+dDJN1xwhyb/0thHlrzQAsf0D8t/01n9LJwAeo60Af3+Hhhsay aIJO/HkK3lLknelEpCd9O6+sU76akN8ipcFtB1X5VKGOZrG2bnmcGJ05DQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBLW3fgVBJY06F768pc6CLHzCFHXMB8GA1UdIwQY MBaAFDMHvbnVhVHhSSrEOiO5tilmnOtuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTXdlOXVkV0ZVZUZKS3NRNkk3bTJLV2FjNjI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC8zODA4NjQtMjE1NC00N2Q5LWE4YjAt MWIxYzgyNmU3YjhlLzEvTXdlOXVkV0ZVZUZKS3NRNkk3bTJLV2FjNjI0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC8zODA4NjQtMjE1NC00N2Q5LWE4YjAtMWIxYzgyNmU3Yjhl LzEvTXdlOXVkV0ZVZUZKS3NRNkk3bTJLV2FjNjI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARs0nx8pw YvogezBcFD9G/Z4rdFL2ZWGnUG9DP/vGe1isOq9io8t+020sC06JuI1aDyZ5ipDE IoA2QuNfUq31V6NFKXsrrAByaY4dVpgeV0r2cg8d9FrOEG9EoZOOU/E+PGuads+u ic+7XL9rFeYg3XJ1HymgjLQlkQqXEBZ5je3sRzV17eS1CuwymOuq41LmfMkPgWT3 XK6iaAZxhTUGA0AjgGhY4EWKpb8iRFLX9q/CC0V4z+txWiTwqeXa2sQDYWuOboFv HJ3lpF8em16aWh3/joP5u73Y+p5rGBpBfotm6r9rfrNWFyPPea5GjtHXGLSpQL5D qHZ2JLcuCOJdsA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:57:31 2025 by rpki-client