This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/ad0351-006f-47aa-ab19-19c05f4f4a7b/1/MtXJyF_7dGOUXoEmVwt-KFGz-3o.mft File: MtXJyF_7dGOUXoEmVwt-KFGz-3o.mft (raw, json) Hash identifier: JV8JmPSqPodJK5Ng6mUxwGV3nl0lNGQXXi5EJQSMwWc= Subject key identifier: 60:58:27:58:BD:98:78:8A:DD:B6:CC:25:D3:F3:07:4D:F7:54:80:9C Authority key identifier: 32:D5:C9:C8:5F:FB:74:63:94:5E:81:26:57:0B:7E:28:51:B3:FB:7A Certificate issuer: /CN=32d5c9c85ffb7463945e8126570b7e2851b3fb7a Certificate serial: 019AF088A0ECBFF5ACE01ECE441C094168CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MtXJyF_7dGOUXoEmVwt-KFGz-3o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/ad0351-006f-47aa-ab19-19c05f4f4a7b/1/MtXJyF_7dGOUXoEmVwt-KFGz-3o.mft Manifest number: 099C Signing time: Fri 05 Dec 2025 22:01:17 +0000 Manifest this update: Fri 05 Dec 2025 22:01:17 +0000 Manifest next update: Sat 06 Dec 2025 22:01:17 +0000 Files and hashes: 1: 6csp2LeD7vly2n1j-VpIEsucAhQ.roa (hash: WR+qcQQTkccFoOguSbUEIuw7HhStcNOST97gvk9zp7k=) 2: MtXJyF_7dGOUXoEmVwt-KFGz-3o.crl (hash: HLPNlIw2yFMghq0ahYZXjqxge55LTvJK05yG61cSC0k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/ad0351-006f-47aa-ab19-19c05f4f4a7b/1/MtXJyF_7dGOUXoEmVwt-KFGz-3o.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/ad0351-006f-47aa-ab19-19c05f4f4a7b/1/MtXJyF_7dGOUXoEmVwt-KFGz-3o.mft rsync://rpki.ripe.net/repository/DEFAULT/MtXJyF_7dGOUXoEmVwt-KFGz-3o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:88:a0:ec:bf:f5:ac:e0:1e:ce:44:1c:09:41:68:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32d5c9c85ffb7463945e8126570b7e2851b3fb7a Validity Not Before: Dec 5 22:01:17 2025 GMT Not After : Dec 6 22:01:17 2025 GMT Subject: CN=60582758bd98788addb6cc25d3f3074df754809c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:21:db:7b:7d:ec:59:ad:e5:05:a7:87:3e:be: 11:7b:bf:d3:7f:5f:55:72:1c:e4:37:76:9c:22:8e: 41:f8:88:51:30:34:40:ec:16:c1:c7:25:c4:4f:e4: 8c:59:32:7a:2c:4c:a0:a5:96:0e:4d:e2:d2:6b:46: 0c:87:f5:6e:6b:82:18:93:fe:df:27:f4:54:c0:01: 24:55:a2:c1:7b:47:ba:28:52:90:7a:16:6c:0b:95: 4e:c9:4a:7c:87:e1:fc:65:45:25:91:f6:82:1e:5e: 14:37:06:9b:1d:30:a0:08:81:a4:34:da:ea:08:a9: bc:82:ba:88:40:1a:79:71:28:85:e7:82:c4:94:31: 5c:ce:75:27:98:2d:e5:a4:59:1b:9e:90:cb:3b:a0: 26:23:3c:4c:35:98:ea:de:81:61:dd:7f:98:58:d1: 7a:46:42:c9:63:6c:41:0c:20:dd:73:92:59:40:4f: 70:35:9a:83:bf:c3:8c:8b:a1:65:a3:de:a4:74:f8: 72:67:8f:88:05:ea:b3:c0:d0:bc:d8:13:4f:5a:35: 2c:87:0c:14:dc:68:cb:b7:da:22:81:4b:b7:ff:b1: 4d:97:2f:f1:15:6a:73:f8:03:5f:b7:0b:8c:a0:2e: 4c:1d:b4:8d:05:32:8f:5e:78:de:f1:ed:41:66:cb: f1:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:58:27:58:BD:98:78:8A:DD:B6:CC:25:D3:F3:07:4D:F7:54:80:9C X509v3 Authority Key Identifier: keyid:32:D5:C9:C8:5F:FB:74:63:94:5E:81:26:57:0B:7E:28:51:B3:FB:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MtXJyF_7dGOUXoEmVwt-KFGz-3o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ad0351-006f-47aa-ab19-19c05f4f4a7b/1/MtXJyF_7dGOUXoEmVwt-KFGz-3o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ad0351-006f-47aa-ab19-19c05f4f4a7b/1/MtXJyF_7dGOUXoEmVwt-KFGz-3o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:7c:ae:f5:43:ab:ca:68:b9:a1:6a:9e:38:fb:80:64:c4:53: 9f:e2:6e:87:07:a9:f1:e2:ce:0e:9f:fc:58:66:a9:b3:e6:25: 83:48:b2:c1:1e:54:df:ce:a0:59:cd:d8:0b:4e:8b:40:6c:f7: 64:5d:39:31:35:8c:52:a6:d2:ca:48:a7:a5:59:68:63:3a:1d: 01:54:ad:02:16:6d:4d:9d:fb:61:b7:08:f4:e5:ce:16:61:ea: 32:6f:ee:b9:4a:fa:76:e3:6a:3d:7a:ef:e6:a2:85:99:4a:f2: fb:0f:9a:33:98:9d:ee:3e:ff:8a:ae:76:6a:de:48:b4:0f:56: 13:71:8a:25:04:93:32:5d:a9:b6:6a:88:ae:21:0c:98:6b:36: 7a:f6:04:fa:95:d3:65:8c:fe:ef:ba:d1:d3:5a:33:bd:44:b7: 33:88:79:90:fb:4b:06:a8:e8:b0:19:a5:f5:a7:e7:bb:b2:55: 15:1c:37:67:12:bd:36:4a:d6:43:85:44:3c:54:eb:f9:8a:9a: d3:78:b2:29:77:ab:79:ce:9e:06:35:e2:68:78:03:13:fe:fe: b3:4a:bf:02:d9:6e:c3:bf:5a:42:5e:84:5d:a9:9e:ea:14:8b: c1:aa:7e:e6:ff:41:31:c4:25:a8:45:5d:3e:75:c4:42:b5:44: 1d:87:91:8c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwiKDsv/Ws4B7ORBwJQWjMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyZDVjOWM4NWZmYjc0NjM5NDVlODEyNjU3MGI3ZTI4NTFi M2ZiN2EwHhcNMjUxMjA1MjIwMTE3WhcNMjUxMjA2MjIwMTE3WjAzMTEwLwYDVQQD Eyg2MDU4Mjc1OGJkOTg3ODhhZGRiNmNjMjVkM2YzMDc0ZGY3NTQ4MDljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnyHbe33sWa3lBaeHPr4Re7/Tf19V chzkN3acIo5B+IhRMDRA7BbBxyXET+SMWTJ6LEygpZYOTeLSa0YMh/Vua4IYk/7f J/RUwAEkVaLBe0e6KFKQehZsC5VOyUp8h+H8ZUUlkfaCHl4UNwabHTCgCIGkNNrq CKm8grqIQBp5cSiF54LElDFcznUnmC3lpFkbnpDLO6AmIzxMNZjq3oFh3X+YWNF6 RkLJY2xBDCDdc5JZQE9wNZqDv8OMi6Flo96kdPhyZ4+IBeqzwNC82BNPWjUshwwU 3GjLt9oigUu3/7FNly/xFWpz+ANftwuMoC5MHbSNBTKPXnje8e1BZsvxkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGBYJ1i9mHiK3bbMJdPzB033VICcMB8GA1UdIwQY MBaAFDLVychf+3RjlF6BJlcLfihRs/t6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTXRYSnlGXzdkR09VWG9FbVZ3dC1LRkd6LTNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9hZDAzNTEtMDA2Zi00N2FhLWFiMTkt MTljMDVmNGY0YTdiLzEvTXRYSnlGXzdkR09VWG9FbVZ3dC1LRkd6LTNvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy9hZDAzNTEtMDA2Zi00N2FhLWFiMTktMTljMDVmNGY0YTdi LzEvTXRYSnlGXzdkR09VWG9FbVZ3dC1LRkd6LTNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbHyu9UOr ymi5oWqeOPuAZMRTn+Juhwep8eLODp/8WGaps+Ylg0iywR5U386gWc3YC06LQGz3 ZF05MTWMUqbSykinpVloYzodAVStAhZtTZ37YbcI9OXOFmHqMm/uuUr6duNqPXrv 5qKFmUry+w+aM5id7j7/iq52at5ItA9WE3GKJQSTMl2ptmqIriEMmGs2evYE+pXT ZYz+77rR01ozvUS3M4h5kPtLBqjosBml9afnu7JVFRw3ZxK9NkrWQ4VEPFTr+Yqa 03iyKXerec6eBjXiaHgDE/7+s0q/Atluw79aQl6EXame6hSLwap+5v9BMcQlqEVd PnXEQrVEHYeRjA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:06:48 2025 by rpki-client