This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/07560a-062b-4802-89af-19192e81b831/1/MfePPgBBCSbb2JyOj1xACxArA3k.mft File: MfePPgBBCSbb2JyOj1xACxArA3k.mft (raw, json) Hash identifier: /bDyB+OvAy3eucqhxgaP6GT8zCFzDYuYtT3SK1arMC8= Subject key identifier: 38:B1:A6:75:04:7A:58:84:66:88:D5:D6:8C:A3:F3:E7:C5:07:3F:07 Authority key identifier: 31:F7:8F:3E:00:41:09:26:DB:D8:9C:8E:8F:5C:40:0B:10:2B:03:79 Certificate issuer: /CN=31f78f3e00410926dbd89c8e8f5c400b102b0379 Certificate serial: 019AF0889965D949D4889BFFECE4D944ED8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MfePPgBBCSbb2JyOj1xACxArA3k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/07560a-062b-4802-89af-19192e81b831/1/MfePPgBBCSbb2JyOj1xACxArA3k.mft Manifest number: 098B Signing time: Fri 05 Dec 2025 22:01:15 +0000 Manifest this update: Fri 05 Dec 2025 22:01:15 +0000 Manifest next update: Sat 06 Dec 2025 22:01:15 +0000 Files and hashes: 1: MfePPgBBCSbb2JyOj1xACxArA3k.crl (hash: Qu/ewnUc2sk6bF3bWMMwhYjrtqP4jHYho/H0YI42GEU=) 2: eUlaq5gS3GI6r3fmoZPaba7Dfho.roa (hash: PBjrFIbcmCvN1hWwmYdZLCa28CsdtHFqI3Efr5fS4Bg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/07560a-062b-4802-89af-19192e81b831/1/MfePPgBBCSbb2JyOj1xACxArA3k.crl rsync://rpki.ripe.net/repository/DEFAULT/db/07560a-062b-4802-89af-19192e81b831/1/MfePPgBBCSbb2JyOj1xACxArA3k.mft rsync://rpki.ripe.net/repository/DEFAULT/MfePPgBBCSbb2JyOj1xACxArA3k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:88:99:65:d9:49:d4:88:9b:ff:ec:e4:d9:44:ed:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31f78f3e00410926dbd89c8e8f5c400b102b0379 Validity Not Before: Dec 5 22:01:15 2025 GMT Not After : Dec 6 22:01:15 2025 GMT Subject: CN=38b1a675047a58846688d5d68ca3f3e7c5073f07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:b6:de:9c:12:9f:a9:d2:81:97:00:78:d4:ea: 4e:34:9b:5b:37:46:f3:03:43:42:2a:cf:8e:91:23: d0:f7:1c:e3:b5:66:f0:dd:77:9b:78:5e:4e:34:29: e1:0d:45:ec:04:a9:1f:1f:c6:81:b6:b4:87:e2:07: 4d:ed:40:5f:74:71:e2:af:96:f9:47:44:5d:b7:6a: 68:e2:6d:ee:20:6b:2a:29:37:bf:93:bf:14:f3:c6: 07:ec:b4:0d:0c:cd:6b:51:94:aa:5b:37:c0:64:fe: 14:71:5e:3b:52:f7:1f:3e:59:5a:63:45:62:66:3d: 33:09:f5:b4:b0:a7:96:c6:38:34:0e:c8:f0:21:ed: 88:46:d7:81:53:42:a2:e0:21:ed:51:cc:c0:95:3e: 02:20:ed:98:6e:94:9d:c2:bd:d3:49:62:7b:9d:74: 39:ec:f5:8d:cf:ca:c5:55:1d:dd:a2:1f:d0:8f:f9: 22:de:26:8a:af:a6:87:60:7a:7e:ed:dd:a9:16:ca: f3:42:75:70:c4:c6:57:65:63:61:69:4f:4c:cb:49: 7c:1a:c2:62:42:6c:bd:aa:e0:72:11:f6:a3:cb:fa: 64:87:89:b0:55:41:ec:fa:f8:81:fc:b0:57:b1:be: 5b:e3:4b:86:b4:af:4d:bc:b2:8f:e1:d4:4c:2b:8b: 6f:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:B1:A6:75:04:7A:58:84:66:88:D5:D6:8C:A3:F3:E7:C5:07:3F:07 X509v3 Authority Key Identifier: keyid:31:F7:8F:3E:00:41:09:26:DB:D8:9C:8E:8F:5C:40:0B:10:2B:03:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MfePPgBBCSbb2JyOj1xACxArA3k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/07560a-062b-4802-89af-19192e81b831/1/MfePPgBBCSbb2JyOj1xACxArA3k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/07560a-062b-4802-89af-19192e81b831/1/MfePPgBBCSbb2JyOj1xACxArA3k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:9b:dd:4f:89:b5:01:50:f4:47:9f:49:54:cd:99:ee:42:b4: 6b:a4:fa:5a:67:cd:40:f1:8e:23:f5:7c:91:9a:09:03:79:cc: ed:0a:be:c2:20:fd:86:d5:f5:27:b0:c2:e3:7d:86:5c:48:c8: 92:9c:c6:0d:02:45:b5:2e:09:35:df:74:6e:58:f0:fd:be:34: c9:65:b8:48:5d:9c:53:4d:a8:5a:8a:bb:ca:24:c6:a4:dc:53: bd:e7:25:7f:2a:3d:1f:f9:5b:6b:b6:7f:8c:bd:d2:9d:6b:e9: 68:79:be:0c:ad:75:2a:de:59:82:33:c6:6f:80:ff:11:0b:b8: 81:61:c3:89:87:c3:96:3f:14:7b:8f:87:b7:19:5e:04:92:60: 0d:5d:5b:b6:20:13:89:f0:71:60:c2:fc:bb:8a:0f:be:74:b9: 4c:09:6b:74:7a:ed:df:05:21:36:fd:eb:ca:d3:e6:29:a5:54: 60:78:91:31:13:92:63:f2:b6:d1:3e:25:48:da:f2:34:3b:e8: 4a:d8:42:81:66:e4:4d:7e:d3:46:fe:49:22:ae:86:80:0f:cb: dd:60:01:eb:2c:42:6c:ed:5e:5d:ba:63:cb:57:33:36:c8:b4: 32:57:37:78:da:37:7f:fd:b3:31:2e:fa:0e:7d:09:be:fb:86: b2:d1:1e:82 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwiJll2UnUiJv/7OTZRO2NMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxZjc4ZjNlMDA0MTA5MjZkYmQ4OWM4ZThmNWM0MDBiMTAy YjAzNzkwHhcNMjUxMjA1MjIwMTE1WhcNMjUxMjA2MjIwMTE1WjAzMTEwLwYDVQQD EygzOGIxYTY3NTA0N2E1ODg0NjY4OGQ1ZDY4Y2EzZjNlN2M1MDczZjA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0rbenBKfqdKBlwB41OpONJtbN0bz A0NCKs+OkSPQ9xzjtWbw3XebeF5ONCnhDUXsBKkfH8aBtrSH4gdN7UBfdHHir5b5 R0Rdt2po4m3uIGsqKTe/k78U88YH7LQNDM1rUZSqWzfAZP4UcV47UvcfPllaY0Vi Zj0zCfW0sKeWxjg0DsjwIe2IRteBU0Ki4CHtUczAlT4CIO2YbpSdwr3TSWJ7nXQ5 7PWNz8rFVR3doh/Qj/ki3iaKr6aHYHp+7d2pFsrzQnVwxMZXZWNhaU9My0l8GsJi Qmy9quByEfajy/pkh4mwVUHs+viB/LBXsb5b40uGtK9NvLKP4dRMK4tvWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDixpnUEeliEZojV1oyj8+fFBz8HMB8GA1UdIwQY MBaAFDH3jz4AQQkm29icjo9cQAsQKwN5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTWZlUFBnQkJDU2JiMkp5T2oxeEFDeEFyQTNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi8wNzU2MGEtMDYyYi00ODAyLTg5YWYt MTkxOTJlODFiODMxLzEvTWZlUFBnQkJDU2JiMkp5T2oxeEFDeEFyQTNrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi8wNzU2MGEtMDYyYi00ODAyLTg5YWYtMTkxOTJlODFiODMx LzEvTWZlUFBnQkJDU2JiMkp5T2oxeEFDeEFyQTNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmZvdT4m1 AVD0R59JVM2Z7kK0a6T6WmfNQPGOI/V8kZoJA3nM7Qq+wiD9htX1J7DC432GXEjI kpzGDQJFtS4JNd90bljw/b40yWW4SF2cU02oWoq7yiTGpNxTveclfyo9H/lba7Z/ jL3SnWvpaHm+DK11Kt5ZgjPGb4D/EQu4gWHDiYfDlj8Ue4+HtxleBJJgDV1btiAT ifBxYML8u4oPvnS5TAlrdHrt3wUhNv3rytPmKaVUYHiRMROSY/K20T4lSNryNDvo SthCgWbkTX7TRv5JIq6GgA/L3WAB6yxCbO1eXbpjy1czNsi0Mlc3eNo3f/2zMS76 Dn0JvvuGstEegg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:14:55 2025 by rpki-client