This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/7bf9ad-3591-4ca5-b2fd-cdb5c0e2d75d/1/McNWgQ1FrfUs8Z-wsNIPfzRooOk.mft File: McNWgQ1FrfUs8Z-wsNIPfzRooOk.mft (raw, json) Hash identifier: ji3eZGeQFx/rVQdkGJTBeya7By8e7hbt0qi9M5sLXag= Subject key identifier: EE:BE:BB:8B:08:32:8E:73:AD:F4:EF:B5:B9:8B:17:28:57:4D:D1:E0 Authority key identifier: 31:C3:56:81:0D:45:AD:F5:2C:F1:9F:B0:B0:D2:0F:7F:34:68:A0:E9 Certificate issuer: /CN=31c356810d45adf52cf19fb0b0d20f7f3468a0e9 Certificate serial: 019AF23FB75943A79E66FFE5640EFABDDAD0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/McNWgQ1FrfUs8Z-wsNIPfzRooOk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/7bf9ad-3591-4ca5-b2fd-cdb5c0e2d75d/1/McNWgQ1FrfUs8Z-wsNIPfzRooOk.mft Manifest number: 017D Signing time: Sat 06 Dec 2025 06:00:53 +0000 Manifest this update: Sat 06 Dec 2025 06:00:53 +0000 Manifest next update: Sun 07 Dec 2025 06:00:53 +0000 Files and hashes: 1: McNWgQ1FrfUs8Z-wsNIPfzRooOk.crl (hash: 82J0bXMFxzDofg4vI8KKPhGHE9iKn+86ZEIB+XKQuzY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/7bf9ad-3591-4ca5-b2fd-cdb5c0e2d75d/1/McNWgQ1FrfUs8Z-wsNIPfzRooOk.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/7bf9ad-3591-4ca5-b2fd-cdb5c0e2d75d/1/McNWgQ1FrfUs8Z-wsNIPfzRooOk.mft rsync://rpki.ripe.net/repository/DEFAULT/McNWgQ1FrfUs8Z-wsNIPfzRooOk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:b7:59:43:a7:9e:66:ff:e5:64:0e:fa:bd:da:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31c356810d45adf52cf19fb0b0d20f7f3468a0e9 Validity Not Before: Dec 6 06:00:53 2025 GMT Not After : Dec 7 06:00:53 2025 GMT Subject: CN=eebebb8b08328e73adf4efb5b98b1728574dd1e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:83:18:bd:52:a0:94:39:ee:c2:b1:21:2c:b1: de:b6:ee:4c:e9:9d:28:00:dd:44:74:6c:30:05:d9: e4:c6:1d:f0:51:40:b6:5d:a4:ed:14:18:ab:f4:c6: cb:c6:35:00:0e:00:9e:24:b6:84:20:a6:1f:af:34: ce:86:76:f3:7c:05:c2:68:0d:db:50:c9:1e:6f:67: 0f:bc:c0:17:d1:e7:36:88:1f:43:3a:2c:91:7d:de: f9:5c:03:7d:72:ae:eb:1b:04:a3:5d:b6:d7:0d:fa: 36:ad:d4:29:a1:75:02:a8:a8:85:fe:d0:24:b1:5d: 78:0e:f6:23:72:a4:c7:0c:99:a3:57:8b:d6:5e:a3: fd:92:d2:9e:8b:71:88:9c:5b:4f:a6:33:29:f4:b1: f7:e1:d4:c8:20:55:01:4f:42:b4:a8:13:80:21:a5: 1d:4f:35:40:cc:09:14:10:37:4e:2a:ac:3c:65:de: 1b:a6:14:ef:84:0c:36:05:b8:38:17:96:33:93:bf: 83:04:ea:fe:ab:c3:92:80:ed:27:83:ce:af:65:2b: 92:64:4a:72:4f:6b:9d:4c:c8:26:46:3b:b9:1b:d9: ac:6b:6f:94:8b:b0:98:58:13:d6:a2:0c:97:d3:0d: 5e:d7:94:43:b8:49:ff:9e:6b:12:82:7f:e5:9f:4f: 3a:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:BE:BB:8B:08:32:8E:73:AD:F4:EF:B5:B9:8B:17:28:57:4D:D1:E0 X509v3 Authority Key Identifier: keyid:31:C3:56:81:0D:45:AD:F5:2C:F1:9F:B0:B0:D2:0F:7F:34:68:A0:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/McNWgQ1FrfUs8Z-wsNIPfzRooOk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/7bf9ad-3591-4ca5-b2fd-cdb5c0e2d75d/1/McNWgQ1FrfUs8Z-wsNIPfzRooOk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/7bf9ad-3591-4ca5-b2fd-cdb5c0e2d75d/1/McNWgQ1FrfUs8Z-wsNIPfzRooOk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:ea:88:eb:30:95:62:3a:6d:bf:f4:82:33:97:5e:08:62:2d: e1:f1:d3:3a:5f:96:38:8c:2a:d2:09:52:1e:a6:dc:5a:d4:fb: d5:58:9a:17:6d:c8:ac:09:52:00:80:d8:1f:ff:48:c3:85:a7: 50:14:dd:cf:8b:6a:ec:fe:90:e9:c4:26:65:52:ba:b6:bf:40: 16:fe:60:7f:fa:9a:5c:9d:a8:10:ca:84:30:b0:18:25:91:bc: b9:e3:ee:a2:e3:03:df:32:6d:18:56:2c:a4:11:ee:ea:26:ce: 28:0c:6a:77:79:b6:a1:5c:e6:11:e6:0f:09:b3:9b:54:ae:c6: 5d:06:d4:90:95:74:d8:1f:cb:c4:2c:77:c6:35:6e:bc:f5:fa: 6d:61:15:3b:cb:b3:54:8a:59:0b:b1:e5:c7:7e:08:58:81:c5: ce:ee:93:0b:72:0c:7f:ef:07:4d:1d:e9:6b:d2:74:91:b3:da: 27:eb:0e:d5:96:60:3a:ef:58:7f:df:9d:8d:50:99:e1:af:9b: 98:11:49:aa:5d:60:2a:44:da:39:f5:34:fe:b8:5b:99:50:0d: c7:75:b9:5b:00:91:78:f4:3a:38:df:9a:2e:a6:cc:b0:5e:45: 1b:15:5b:cb:c4:ae:59:38:d7:c8:82:b2:3f:9d:dd:14:4a:35: 34:fe:5f:de -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP7dZQ6eeZv/lZA76vdrQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxYzM1NjgxMGQ0NWFkZjUyY2YxOWZiMGIwZDIwZjdmMzQ2 OGEwZTkwHhcNMjUxMjA2MDYwMDUzWhcNMjUxMjA3MDYwMDUzWjAzMTEwLwYDVQQD EyhlZWJlYmI4YjA4MzI4ZTczYWRmNGVmYjViOThiMTcyODU3NGRkMWUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuIMYvVKglDnuwrEhLLHetu5M6Z0o AN1EdGwwBdnkxh3wUUC2XaTtFBir9MbLxjUADgCeJLaEIKYfrzTOhnbzfAXCaA3b UMkeb2cPvMAX0ec2iB9DOiyRfd75XAN9cq7rGwSjXbbXDfo2rdQpoXUCqKiF/tAk sV14DvYjcqTHDJmjV4vWXqP9ktKei3GInFtPpjMp9LH34dTIIFUBT0K0qBOAIaUd TzVAzAkUEDdOKqw8Zd4bphTvhAw2Bbg4F5Yzk7+DBOr+q8OSgO0ng86vZSuSZEpy T2udTMgmRju5G9msa2+Ui7CYWBPWogyX0w1e15RDuEn/nmsSgn/ln086twIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO6+u4sIMo5zrfTvtbmLFyhXTdHgMB8GA1UdIwQY MBaAFDHDVoENRa31LPGfsLDSD380aKDpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTWNOV2dRMUZyZlVzOFotd3NOSVBmelJvb09rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy83YmY5YWQtMzU5MS00Y2E1LWIyZmQt Y2RiNWMwZTJkNzVkLzEvTWNOV2dRMUZyZlVzOFotd3NOSVBmelJvb09rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy83YmY5YWQtMzU5MS00Y2E1LWIyZmQtY2RiNWMwZTJkNzVk LzEvTWNOV2dRMUZyZlVzOFotd3NOSVBmelJvb09rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE+qI6zCV Yjptv/SCM5deCGIt4fHTOl+WOIwq0glSHqbcWtT71ViaF23IrAlSAIDYH/9Iw4Wn UBTdz4tq7P6Q6cQmZVK6tr9AFv5gf/qaXJ2oEMqEMLAYJZG8uePuouMD3zJtGFYs pBHu6ibOKAxqd3m2oVzmEeYPCbObVK7GXQbUkJV02B/LxCx3xjVuvPX6bWEVO8uz VIpZC7Hlx34IWIHFzu6TC3IMf+8HTR3pa9J0kbPaJ+sO1ZZgOu9Yf9+djVCZ4a+b mBFJql1gKkTaOfU0/rhbmVANx3W5WwCRePQ6ON+aLqbMsF5FGxVby8SuWTjXyIKy P53dFEo1NP5f3g== -----END CERTIFICATE-----Generated at Sat Dec 6 10:17:14 2025 by rpki-client