This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/ea3528-45b9-47a4-9612-2a456fd096ab/1/MWg4BbI9i3h9aSEFPX666XBAihk.mft File: MWg4BbI9i3h9aSEFPX666XBAihk.mft (raw, json) Hash identifier: X8AxOs62nDyUc28Mg6hibPCZZsdUlA31e/d9WSaq+8c= Subject key identifier: 06:CD:91:0E:45:AB:CE:65:06:E9:1D:76:B2:72:A0:C0:D0:B6:9C:45 Authority key identifier: 31:68:38:05:B2:3D:8B:78:7D:69:21:05:3D:7E:BA:E9:70:40:8A:19 Certificate issuer: /CN=31683805b23d8b787d6921053d7ebae970408a19 Certificate serial: 019AF2775B385BA900111AA7791A31AD2E24 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MWg4BbI9i3h9aSEFPX666XBAihk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/ea3528-45b9-47a4-9612-2a456fd096ab/1/MWg4BbI9i3h9aSEFPX666XBAihk.mft Manifest number: 05A9 Signing time: Sat 06 Dec 2025 07:01:39 +0000 Manifest this update: Sat 06 Dec 2025 07:01:39 +0000 Manifest next update: Sun 07 Dec 2025 07:01:39 +0000 Files and hashes: 1: MWg4BbI9i3h9aSEFPX666XBAihk.crl (hash: SbC+p//lKPJTgUOKsZ7NY7vXtmsg1mWff6cV+kz5Xbc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/ea3528-45b9-47a4-9612-2a456fd096ab/1/MWg4BbI9i3h9aSEFPX666XBAihk.crl rsync://rpki.ripe.net/repository/DEFAULT/ee/ea3528-45b9-47a4-9612-2a456fd096ab/1/MWg4BbI9i3h9aSEFPX666XBAihk.mft rsync://rpki.ripe.net/repository/DEFAULT/MWg4BbI9i3h9aSEFPX666XBAihk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:77:5b:38:5b:a9:00:11:1a:a7:79:1a:31:ad:2e:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31683805b23d8b787d6921053d7ebae970408a19 Validity Not Before: Dec 6 07:01:39 2025 GMT Not After : Dec 7 07:01:39 2025 GMT Subject: CN=06cd910e45abce6506e91d76b272a0c0d0b69c45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:3f:21:41:8e:07:21:46:d5:67:16:9f:2d:a0: b3:2f:2f:9c:f9:fd:77:65:4e:1e:7c:8f:8a:a8:e8: 88:7c:a4:93:07:d5:eb:49:24:98:11:f4:d6:7b:26: 42:09:a7:2a:29:74:31:47:61:07:7d:9a:78:d8:98: ed:e7:56:e8:97:e8:01:09:c0:72:bd:36:40:9f:a2: 79:1f:68:e3:61:fc:aa:63:c8:54:49:a0:1a:81:61: 2d:2e:55:e7:af:23:d0:0a:d8:92:36:4c:e2:1b:f1: b7:ef:20:44:8e:96:fd:97:6e:33:57:bb:ea:ea:ac: 0e:41:86:70:cb:2b:81:e3:7f:10:dd:23:a8:e6:c4: f9:d4:d5:3b:3f:99:d6:8a:29:de:a2:f1:51:1e:a1: a5:ba:80:14:ce:3d:0f:3d:83:24:6f:a4:7f:83:29: 9a:f7:43:03:f8:36:60:a5:bd:4a:b2:f7:3b:74:b2: b6:ff:c0:7c:b2:63:ca:83:0c:24:cd:63:fe:fe:61: c8:c1:f1:06:4c:01:8d:b7:a6:fb:fa:bd:b3:0f:f6: 86:e7:09:93:aa:2d:dd:65:ed:84:b1:25:eb:12:f6: e6:c6:a5:05:b0:fa:c0:4c:03:84:89:de:2c:5e:da: 2a:6f:be:ce:3f:87:ad:8b:bc:72:34:12:97:ff:42: 6a:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:CD:91:0E:45:AB:CE:65:06:E9:1D:76:B2:72:A0:C0:D0:B6:9C:45 X509v3 Authority Key Identifier: keyid:31:68:38:05:B2:3D:8B:78:7D:69:21:05:3D:7E:BA:E9:70:40:8A:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MWg4BbI9i3h9aSEFPX666XBAihk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/ea3528-45b9-47a4-9612-2a456fd096ab/1/MWg4BbI9i3h9aSEFPX666XBAihk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/ea3528-45b9-47a4-9612-2a456fd096ab/1/MWg4BbI9i3h9aSEFPX666XBAihk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:d0:35:79:02:02:be:ba:ae:a7:3f:20:09:53:75:64:8e:c0: fb:11:6c:a4:37:fc:4a:a7:1f:d3:b7:87:ef:f0:95:af:c4:cb: 90:83:ca:70:3a:ca:83:ec:cc:9c:79:52:8f:c9:1b:a5:aa:63: e2:66:64:7e:fe:7e:22:29:2b:c8:72:b9:1a:ab:db:56:ef:b7: ea:66:22:ea:a4:bf:9e:65:e1:0b:65:bc:c7:19:71:d4:f3:52: aa:aa:02:db:07:61:b4:b4:39:77:32:ec:b8:8f:33:0a:20:92: ac:3e:e9:06:02:29:f2:c9:77:e2:26:d1:c3:b4:78:ec:7b:2b: c6:2b:95:ca:a3:92:b2:20:a7:5f:e0:15:ef:4f:9f:3b:f9:02: bd:a4:1e:c2:69:83:53:32:73:d4:a2:47:4a:0d:2f:e9:fe:cd: 6c:7a:a1:99:65:1f:fd:5a:0d:4c:a5:5e:ed:aa:6e:23:e0:ae: 44:8a:29:5d:e7:e5:49:6b:dc:c5:2b:70:b0:8a:81:1a:52:74: 37:20:45:be:3d:e6:da:c0:5e:e3:29:8d:1f:91:1d:7a:50:02: ba:39:f6:0d:d6:c8:74:92:14:51:68:1c:4f:99:7c:f1:01:66: e8:ea:b5:c7:45:6e:4a:03:d1:af:a3:7c:67:a7:78:d7:f7:c3: db:16:62:9c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryd1s4W6kAERqneRoxrS4kMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxNjgzODA1YjIzZDhiNzg3ZDY5MjEwNTNkN2ViYWU5NzA0 MDhhMTkwHhcNMjUxMjA2MDcwMTM5WhcNMjUxMjA3MDcwMTM5WjAzMTEwLwYDVQQD EygwNmNkOTEwZTQ1YWJjZTY1MDZlOTFkNzZiMjcyYTBjMGQwYjY5YzQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvj8hQY4HIUbVZxafLaCzLy+c+f13 ZU4efI+KqOiIfKSTB9XrSSSYEfTWeyZCCacqKXQxR2EHfZp42Jjt51bol+gBCcBy vTZAn6J5H2jjYfyqY8hUSaAagWEtLlXnryPQCtiSNkziG/G37yBEjpb9l24zV7vq 6qwOQYZwyyuB438Q3SOo5sT51NU7P5nWiineovFRHqGluoAUzj0PPYMkb6R/gyma 90MD+DZgpb1Ksvc7dLK2/8B8smPKgwwkzWP+/mHIwfEGTAGNt6b7+r2zD/aG5wmT qi3dZe2EsSXrEvbmxqUFsPrATAOEid4sXtoqb77OP4eti7xyNBKX/0JqAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAbNkQ5Fq85lBukddrJyoMDQtpxFMB8GA1UdIwQY MBaAFDFoOAWyPYt4fWkhBT1+uulwQIoZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTVdnNEJiSTlpM2g5YVNFRlBYNjY2WEJBaWhrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS9lYTM1MjgtNDViOS00N2E0LTk2MTIt MmE0NTZmZDA5NmFiLzEvTVdnNEJiSTlpM2g5YVNFRlBYNjY2WEJBaWhrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZS9lYTM1MjgtNDViOS00N2E0LTk2MTItMmE0NTZmZDA5NmFi LzEvTVdnNEJiSTlpM2g5YVNFRlBYNjY2WEJBaWhrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGtA1eQIC vrqupz8gCVN1ZI7A+xFspDf8Sqcf07eH7/CVr8TLkIPKcDrKg+zMnHlSj8kbpapj 4mZkfv5+IikryHK5GqvbVu+36mYi6qS/nmXhC2W8xxlx1PNSqqoC2wdhtLQ5dzLs uI8zCiCSrD7pBgIp8sl34ibRw7R47HsrxiuVyqOSsiCnX+AV70+fO/kCvaQewmmD UzJz1KJHSg0v6f7NbHqhmWUf/VoNTKVe7apuI+CuRIopXeflSWvcxStwsIqBGlJ0 NyBFvj3m2sBe4ymNH5EdelACujn2DdbIdJIUUWgcT5l88QFm6Oq1x0VuSgPRr6N8 Z6d41/fD2xZinA== -----END CERTIFICATE-----Generated at Sat Dec 6 09:26:42 2025 by rpki-client