This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/471e89-d6a5-4933-a3e3-802630516f09/1/mjfe_wVaUdk-HtL3xzIX12B6jPI.mft File: mjfe_wVaUdk-HtL3xzIX12B6jPI.mft (raw, json) Hash identifier: qarGi7HCXz/PqmAUrJkz7QGQo3PCxMIvTHP/4zPVK6E= Subject key identifier: 8C:66:3D:3D:05:78:03:45:7A:3A:3E:F3:FC:51:B8:11:8A:9D:2C:65 Authority key identifier: 9A:37:DE:FF:05:5A:51:D9:3E:1E:D2:F7:C7:32:17:D7:60:7A:8C:F2 Certificate issuer: /CN=9a37deff055a51d93e1ed2f7c73217d7607a8cf2 Certificate serial: 019B2C9D9A9A8E307B9E10025DB40082D6C9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mjfe_wVaUdk-HtL3xzIX12B6jPI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/471e89-d6a5-4933-a3e3-802630516f09/1/mjfe_wVaUdk-HtL3xzIX12B6jPI.mft Manifest number: 054B Signing time: Wed 17 Dec 2025 14:01:24 +0000 Manifest this update: Wed 17 Dec 2025 14:01:24 +0000 Manifest next update: Thu 18 Dec 2025 14:01:24 +0000 Files and hashes: 1: YxveI4ih6pTB1sKFupGdm18Smzc.roa (hash: dR429rKnleksdPGeSDctkW6MMPKSaofQtmcnafzS7xs=) 2: mjfe_wVaUdk-HtL3xzIX12B6jPI.crl (hash: q6S6sOQfsljsCt4wJP6VbpUo4wmlsz2vrlxku34qsEk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/471e89-d6a5-4933-a3e3-802630516f09/1/mjfe_wVaUdk-HtL3xzIX12B6jPI.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/471e89-d6a5-4933-a3e3-802630516f09/1/mjfe_wVaUdk-HtL3xzIX12B6jPI.mft rsync://rpki.ripe.net/repository/DEFAULT/mjfe_wVaUdk-HtL3xzIX12B6jPI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2c:9d:9a:9a:8e:30:7b:9e:10:02:5d:b4:00:82:d6:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a37deff055a51d93e1ed2f7c73217d7607a8cf2 Validity Not Before: Dec 17 14:01:24 2025 GMT Not After : Dec 18 14:01:24 2025 GMT Subject: CN=8c663d3d057803457a3a3ef3fc51b8118a9d2c65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:16:90:d3:4f:23:e2:1e:8a:4b:b4:ca:5e:b1: 47:6a:f9:19:52:a6:b0:ad:76:2e:83:23:f0:74:45: a4:e7:8b:82:7b:4d:c6:a5:1b:68:8f:fc:26:18:be: bb:bb:88:67:b7:2e:ce:74:65:0b:31:7a:dd:59:45: 65:0e:b5:d6:60:34:f4:08:d6:2e:0f:ee:f7:9a:65: b6:a6:8e:3c:b3:55:21:92:c2:6c:95:da:8e:af:89: d7:5e:8c:97:3a:00:57:27:55:39:38:14:1d:7b:d0: 51:99:14:1e:79:c5:58:45:fd:bb:e8:c5:4f:6a:5c: 07:74:44:10:a8:68:0e:17:79:ae:32:65:86:8a:5f: a1:53:93:72:a5:36:86:f2:c0:42:ba:2f:d3:02:a2: 1f:a0:79:ef:a7:16:08:50:e2:6c:1f:35:9c:9a:0d: 3f:1f:68:55:0f:10:b3:c8:af:81:3b:7d:28:cf:d2: ec:95:a9:14:df:33:b6:9c:35:25:ba:e6:b5:e0:d8: 69:94:cf:a0:35:1d:d5:89:10:ea:ed:4e:9f:b7:5a: e5:ba:c0:26:e9:aa:af:2b:38:ee:94:b7:11:5f:60: 77:08:12:51:99:4b:3a:7a:1d:90:09:e8:ea:f9:70: cd:a7:f1:e4:2a:a4:fd:cc:94:92:16:29:0e:21:e7: 5f:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:66:3D:3D:05:78:03:45:7A:3A:3E:F3:FC:51:B8:11:8A:9D:2C:65 X509v3 Authority Key Identifier: keyid:9A:37:DE:FF:05:5A:51:D9:3E:1E:D2:F7:C7:32:17:D7:60:7A:8C:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mjfe_wVaUdk-HtL3xzIX12B6jPI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/471e89-d6a5-4933-a3e3-802630516f09/1/mjfe_wVaUdk-HtL3xzIX12B6jPI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/471e89-d6a5-4933-a3e3-802630516f09/1/mjfe_wVaUdk-HtL3xzIX12B6jPI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:ca:6e:d6:d4:a0:4f:d1:6e:81:15:94:8a:21:16:03:19:c6: ec:5e:2c:35:55:78:df:e9:10:76:bc:fb:70:61:c8:9b:19:f6: 3b:d6:15:75:60:a4:63:b6:b6:11:e6:ae:65:d2:ee:48:7a:40: 28:56:35:94:a5:09:eb:fa:8a:82:61:56:32:48:d0:4d:ed:5f: 35:6d:21:84:f5:f2:df:a6:97:07:50:43:79:ec:01:d8:9c:ee: cd:3b:6a:56:6b:3a:4e:5f:66:61:c3:c0:e5:e9:20:9b:a5:47: 79:33:23:67:da:fe:44:73:01:b6:2d:3e:84:a4:81:3d:e4:e8: 8c:b6:b6:98:9c:93:f2:5f:52:1e:d7:2c:c7:00:70:65:c8:9e: 81:ab:65:47:9a:58:7d:38:78:bd:ab:ec:53:75:8c:db:e2:b7: 19:e8:34:40:34:93:6b:98:ad:42:02:94:db:1e:58:af:d0:f6: 5a:8a:6f:32:0a:98:73:59:9c:a6:80:d0:02:f6:4e:b0:42:d6: 3f:73:34:25:64:7f:17:6b:f3:01:fc:99:64:80:93:16:60:0a: 9d:14:8e:38:7d:62:42:81:a7:65:8c:2f:35:f1:bb:d9:f0:15: 9c:65:c2:0c:ee:b3:e0:29:c2:9c:34:bc:d8:75:9f:58:ab:8b: 54:ee:90:e2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZssnZqajjB7nhACXbQAgtbJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhMzdkZWZmMDU1YTUxZDkzZTFlZDJmN2M3MzIxN2Q3NjA3 YThjZjIwHhcNMjUxMjE3MTQwMTI0WhcNMjUxMjE4MTQwMTI0WjAzMTEwLwYDVQQD Eyg4YzY2M2QzZDA1NzgwMzQ1N2EzYTNlZjNmYzUxYjgxMThhOWQyYzY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1xaQ008j4h6KS7TKXrFHavkZUqaw rXYugyPwdEWk54uCe03GpRtoj/wmGL67u4hnty7OdGULMXrdWUVlDrXWYDT0CNYu D+73mmW2po48s1UhksJsldqOr4nXXoyXOgBXJ1U5OBQde9BRmRQeecVYRf276MVP alwHdEQQqGgOF3muMmWGil+hU5NypTaG8sBCui/TAqIfoHnvpxYIUOJsHzWcmg0/ H2hVDxCzyK+BO30oz9LslakU3zO2nDUluua14NhplM+gNR3ViRDq7U6ft1rlusAm 6aqvKzjulLcRX2B3CBJRmUs6eh2QCejq+XDNp/HkKqT9zJSSFikOIedfEQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIxmPT0FeANFejo+8/xRuBGKnSxlMB8GA1UdIwQY MBaAFJo33v8FWlHZPh7S98cyF9dgeozyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbWpmZV93VmFVZGstSHRMM3h6SVgxMkI2alBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS80NzFlODktZDZhNS00OTMzLWEzZTMt ODAyNjMwNTE2ZjA5LzEvbWpmZV93VmFVZGstSHRMM3h6SVgxMkI2alBJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS80NzFlODktZDZhNS00OTMzLWEzZTMtODAyNjMwNTE2ZjA5 LzEvbWpmZV93VmFVZGstSHRMM3h6SVgxMkI2alBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi8pu1tSg T9FugRWUiiEWAxnG7F4sNVV43+kQdrz7cGHImxn2O9YVdWCkY7a2EeauZdLuSHpA KFY1lKUJ6/qKgmFWMkjQTe1fNW0hhPXy36aXB1BDeewB2JzuzTtqVms6Tl9mYcPA 5ekgm6VHeTMjZ9r+RHMBti0+hKSBPeTojLa2mJyT8l9SHtcsxwBwZciegatlR5pY fTh4vavsU3WM2+K3Geg0QDSTa5itQgKU2x5Yr9D2WopvMgqYc1mcpoDQAvZOsELW P3M0JWR/F2vzAfyZZICTFmAKnRSOOH1iQoGnZYwvNfG72fAVnGXCDO6z4CnCnDS8 2HWfWKuLVO6Q4g== -----END CERTIFICATE-----Generated at Wed Dec 17 20:12:57 2025 by rpki-client