This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/b09f74-179b-4ed2-acf8-56e6e2dc8885/1/mpdRVlcXWpRsyNthlsobIVTjgRQ.mft File: mpdRVlcXWpRsyNthlsobIVTjgRQ.mft (raw, json) Hash identifier: eGRH6OGY+Dm10/DTnH51JyQRBd/WA3goRjLDWcpIhcE= Subject key identifier: E3:E0:5C:12:F1:1C:EE:BF:63:08:20:F3:55:3A:4A:55:F3:F1:9A:A4 Authority key identifier: 9A:97:51:56:57:17:5A:94:6C:C8:DB:61:96:CA:1B:21:54:E3:81:14 Certificate issuer: /CN=9a97515657175a946cc8db6196ca1b2154e38114 Certificate serial: 019AF27725E13A909C17556EFCE13D74AF81 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mpdRVlcXWpRsyNthlsobIVTjgRQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/b09f74-179b-4ed2-acf8-56e6e2dc8885/1/mpdRVlcXWpRsyNthlsobIVTjgRQ.mft Manifest number: 068F Signing time: Sat 06 Dec 2025 07:01:26 +0000 Manifest this update: Sat 06 Dec 2025 07:01:26 +0000 Manifest next update: Sun 07 Dec 2025 07:01:26 +0000 Files and hashes: 1: WPYKhYBx_0YjrlD531nkz5OoDB8.roa (hash: 8lq77z4120Ei3YTGCXsXJwbPy3DaoXpzADVeOT5P0UM=) 2: mpdRVlcXWpRsyNthlsobIVTjgRQ.crl (hash: 6Y/HzKMgN/+6Ci+GKaKJAj9I98278wqzwb5daOipNjA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/b09f74-179b-4ed2-acf8-56e6e2dc8885/1/mpdRVlcXWpRsyNthlsobIVTjgRQ.crl rsync://rpki.ripe.net/repository/DEFAULT/d6/b09f74-179b-4ed2-acf8-56e6e2dc8885/1/mpdRVlcXWpRsyNthlsobIVTjgRQ.mft rsync://rpki.ripe.net/repository/DEFAULT/mpdRVlcXWpRsyNthlsobIVTjgRQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:77:25:e1:3a:90:9c:17:55:6e:fc:e1:3d:74:af:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a97515657175a946cc8db6196ca1b2154e38114 Validity Not Before: Dec 6 07:01:26 2025 GMT Not After : Dec 7 07:01:26 2025 GMT Subject: CN=e3e05c12f11ceebf630820f3553a4a55f3f19aa4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:37:f1:2a:f7:68:06:ff:e1:02:99:55:3d:dc: b9:c7:21:e7:c3:85:11:08:4a:46:99:13:b3:0f:0a: 9f:01:d4:d2:72:00:f4:41:fc:aa:d0:4c:22:9e:01: 4d:57:f0:cb:e5:f6:50:94:5a:4d:dc:04:44:5d:d0: 21:59:91:0d:75:03:9f:fb:49:d4:87:f6:89:77:c3: 7d:26:05:4e:29:af:f3:8f:67:6a:7d:6a:ec:5f:f4: 87:9b:23:42:42:bd:e5:88:96:1b:82:8f:9f:cb:77: c0:75:f2:43:cf:56:f0:96:ca:f4:81:06:14:c4:37: dc:e9:ab:22:bc:f5:5e:e6:3e:6c:39:f4:43:29:17: 2b:57:55:28:85:62:df:2a:9e:e1:51:49:9e:60:31: cc:ae:5d:4d:78:6d:21:5e:d0:58:2e:52:2c:84:45: 58:ec:e7:3b:31:f1:2c:8b:4d:46:5c:11:9d:fc:6c: c2:3a:30:ac:bf:ff:9c:28:dd:65:5d:ef:f9:83:e1: ae:77:55:25:99:a1:aa:d2:25:1c:d7:ae:cd:84:8d: c4:49:40:58:91:2f:0a:28:e9:84:23:b7:be:84:09: ff:7d:75:ff:a5:c2:b8:b9:e0:6e:9f:25:23:0e:6f: 2b:9e:d9:5d:01:10:83:ab:77:8c:79:9f:3d:58:c1: 5a:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:E0:5C:12:F1:1C:EE:BF:63:08:20:F3:55:3A:4A:55:F3:F1:9A:A4 X509v3 Authority Key Identifier: keyid:9A:97:51:56:57:17:5A:94:6C:C8:DB:61:96:CA:1B:21:54:E3:81:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mpdRVlcXWpRsyNthlsobIVTjgRQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/b09f74-179b-4ed2-acf8-56e6e2dc8885/1/mpdRVlcXWpRsyNthlsobIVTjgRQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/b09f74-179b-4ed2-acf8-56e6e2dc8885/1/mpdRVlcXWpRsyNthlsobIVTjgRQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:d6:64:20:ff:97:f0:34:98:25:ff:a6:f3:12:8d:bf:bc:06: a6:60:34:1f:d1:15:6b:ec:c9:b1:0b:65:52:f6:2e:fa:00:6c: 68:9f:37:2a:57:4b:84:ad:2a:60:4b:d6:b2:43:61:b0:43:b1: ed:2b:64:f2:67:e9:a6:bb:1a:4e:b0:e1:6b:3b:c8:69:32:66: dc:5a:77:62:08:e5:45:b2:93:c7:64:92:9a:dc:23:67:db:29: 39:ee:d3:79:52:5d:f4:19:24:75:b5:c1:3c:8c:f3:6f:70:02: 2b:e7:f4:68:be:7f:3a:d5:e0:e0:36:a1:73:df:89:8b:d4:61: b1:4f:17:2f:23:84:5f:ec:4a:8a:3e:f6:19:7a:5a:89:0f:00: 14:bb:65:42:d4:eb:33:01:09:9d:01:b1:e0:bc:21:f3:2d:f0: 6b:f1:fb:55:fe:de:d4:be:b0:eb:a3:73:6b:36:32:ff:8f:a4: c4:1f:56:ae:05:77:2d:40:86:ba:50:4b:5a:63:9b:35:de:9d: 77:49:c8:cc:3f:27:4f:06:21:f8:e7:1d:c8:8c:e2:28:f8:be: a2:36:1b:1e:b3:c5:2a:f5:43:9e:d2:9b:d5:54:d1:04:2b:9f: bd:97:ed:71:38:b9:51:14:99:66:1a:01:27:c4:f4:2f:01:1c: a2:bf:77:fa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydyXhOpCcF1Vu/OE9dK+BMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhOTc1MTU2NTcxNzVhOTQ2Y2M4ZGI2MTk2Y2ExYjIxNTRl MzgxMTQwHhcNMjUxMjA2MDcwMTI2WhcNMjUxMjA3MDcwMTI2WjAzMTEwLwYDVQQD EyhlM2UwNWMxMmYxMWNlZWJmNjMwODIwZjM1NTNhNGE1NWYzZjE5YWE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqjfxKvdoBv/hAplVPdy5xyHnw4UR CEpGmROzDwqfAdTScgD0Qfyq0EwingFNV/DL5fZQlFpN3AREXdAhWZENdQOf+0nU h/aJd8N9JgVOKa/zj2dqfWrsX/SHmyNCQr3liJYbgo+fy3fAdfJDz1bwlsr0gQYU xDfc6asivPVe5j5sOfRDKRcrV1UohWLfKp7hUUmeYDHMrl1NeG0hXtBYLlIshEVY 7Oc7MfEsi01GXBGd/GzCOjCsv/+cKN1lXe/5g+Gud1UlmaGq0iUc167NhI3ESUBY kS8KKOmEI7e+hAn/fXX/pcK4ueBunyUjDm8rntldARCDq3eMeZ89WMFaewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOPgXBLxHO6/Ywgg81U6SlXz8ZqkMB8GA1UdIwQY MBaAFJqXUVZXF1qUbMjbYZbKGyFU44EUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbXBkUlZsY1hXcFJzeU50aGxzb2JJVlRqZ1JRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi9iMDlmNzQtMTc5Yi00ZWQyLWFjZjgt NTZlNmUyZGM4ODg1LzEvbXBkUlZsY1hXcFJzeU50aGxzb2JJVlRqZ1JRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNi9iMDlmNzQtMTc5Yi00ZWQyLWFjZjgtNTZlNmUyZGM4ODg1 LzEvbXBkUlZsY1hXcFJzeU50aGxzb2JJVlRqZ1JRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZtZkIP+X 8DSYJf+m8xKNv7wGpmA0H9EVa+zJsQtlUvYu+gBsaJ83KldLhK0qYEvWskNhsEOx 7Stk8mfpprsaTrDhazvIaTJm3Fp3YgjlRbKTx2SSmtwjZ9spOe7TeVJd9BkkdbXB PIzzb3ACK+f0aL5/OtXg4Dahc9+Ji9RhsU8XLyOEX+xKij72GXpaiQ8AFLtlQtTr MwEJnQGx4Lwh8y3wa/H7Vf7e1L6w66NzazYy/4+kxB9WrgV3LUCGulBLWmObNd6d d0nIzD8nTwYh+OcdyIziKPi+ojYbHrPFKvVDntKb1VTRBCufvZftcTi5URSZZhoB J8T0LwEcor93+g== -----END CERTIFICATE-----Generated at Sat Dec 6 11:58:08 2025 by rpki-client