This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/34995f-8a45-45fb-81f2-2001779926cf/1/MenbQitjczJSiuYo2dpQ5AOX-2Q.mft File: MenbQitjczJSiuYo2dpQ5AOX-2Q.mft (raw, json) Hash identifier: usfYXjba6/c661aHHI7A+etR2RXYp0e+nYM6Wfo9VtE= Subject key identifier: CE:84:B5:08:A3:AD:23:F0:4E:FE:71:72:DC:EB:65:33:F2:0B:4E:DC Authority key identifier: 31:E9:DB:42:2B:63:73:32:52:8A:E6:28:D9:DA:50:E4:03:97:FB:64 Certificate issuer: /CN=31e9db422b637332528ae628d9da50e40397fb64 Certificate serial: 019AF19B545AAD5734BEDBFF87634E868664 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MenbQitjczJSiuYo2dpQ5AOX-2Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/34995f-8a45-45fb-81f2-2001779926cf/1/MenbQitjczJSiuYo2dpQ5AOX-2Q.mft Manifest number: 036F Signing time: Sat 06 Dec 2025 03:01:19 +0000 Manifest this update: Sat 06 Dec 2025 03:01:19 +0000 Manifest next update: Sun 07 Dec 2025 03:01:19 +0000 Files and hashes: 1: MenbQitjczJSiuYo2dpQ5AOX-2Q.crl (hash: g2PxRlwsopWIUbNq1MSHtge/DKXKGdT2cSUQeW8ghLs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/34995f-8a45-45fb-81f2-2001779926cf/1/MenbQitjczJSiuYo2dpQ5AOX-2Q.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/34995f-8a45-45fb-81f2-2001779926cf/1/MenbQitjczJSiuYo2dpQ5AOX-2Q.mft rsync://rpki.ripe.net/repository/DEFAULT/MenbQitjczJSiuYo2dpQ5AOX-2Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:54:5a:ad:57:34:be:db:ff:87:63:4e:86:86:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31e9db422b637332528ae628d9da50e40397fb64 Validity Not Before: Dec 6 03:01:19 2025 GMT Not After : Dec 7 03:01:19 2025 GMT Subject: CN=ce84b508a3ad23f04efe7172dceb6533f20b4edc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:04:ba:70:b0:87:29:3d:39:a4:64:70:28:30: f5:16:d1:fa:74:b3:73:57:b8:96:a3:9a:6f:34:9b: 40:93:ec:84:8a:25:41:64:70:75:53:6a:28:2d:83: 31:a4:23:f8:fb:9f:f0:72:74:b9:6f:96:49:fc:d8: f0:d7:f1:a1:7e:35:ee:61:b2:d8:7c:dd:b5:40:3e: 38:34:31:bc:05:3c:88:65:01:2f:eb:14:06:3f:1c: ed:dc:31:d6:97:02:b3:6c:ef:5c:f3:fb:9d:48:0c: e5:fa:89:14:18:29:a3:8d:62:18:da:20:12:1a:58: e4:d4:63:15:81:a3:aa:37:b2:aa:20:95:50:88:d8: 80:9b:58:d5:af:92:48:c7:cc:e6:ff:f1:14:53:1c: 85:e8:91:fa:48:37:57:d2:f4:0c:c0:eb:da:3c:a3: 54:22:0c:44:bb:d5:f1:d2:fd:a7:86:07:2f:d8:e0: 45:e4:64:5d:17:4b:de:3f:7a:f2:ac:6b:0d:68:75: ed:ec:a3:eb:87:f2:ce:d9:6c:32:79:67:be:b6:30: ac:0c:34:98:e9:25:16:65:08:11:db:0c:17:58:19: f7:86:43:20:4c:4b:5e:5f:23:d9:ed:99:c1:f0:51: f8:62:1c:7a:b1:c5:28:40:b9:f8:43:c5:76:cc:42: f2:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:84:B5:08:A3:AD:23:F0:4E:FE:71:72:DC:EB:65:33:F2:0B:4E:DC X509v3 Authority Key Identifier: keyid:31:E9:DB:42:2B:63:73:32:52:8A:E6:28:D9:DA:50:E4:03:97:FB:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MenbQitjczJSiuYo2dpQ5AOX-2Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/34995f-8a45-45fb-81f2-2001779926cf/1/MenbQitjczJSiuYo2dpQ5AOX-2Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/34995f-8a45-45fb-81f2-2001779926cf/1/MenbQitjczJSiuYo2dpQ5AOX-2Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:51:78:cb:34:af:78:be:ac:7c:22:1e:47:84:61:9d:d5:d2: 04:31:8d:f8:d1:82:63:44:95:38:6f:5f:66:25:66:a7:43:0e: c0:c6:41:27:a0:de:9f:6f:a2:3e:bc:b7:1e:bf:65:0a:0b:e5: a1:cc:40:bd:79:3e:87:7a:ba:c1:44:72:b4:71:22:f0:56:49: e3:c1:ca:fe:33:fe:d2:41:65:18:86:55:39:ab:39:ac:8a:5d: 24:b5:73:d0:6f:45:98:c2:22:74:72:b3:cd:c6:ef:70:fa:98: 75:5b:cf:1d:d2:e7:5c:0c:6b:7c:dc:d4:51:2d:24:0e:cc:f8: ac:4c:47:7c:e2:01:d6:93:17:ff:d9:1a:dd:ea:06:9c:62:d6: 37:6e:45:a5:99:3b:3a:dc:73:06:85:f8:89:6c:88:3a:d7:23: e1:73:10:48:81:6a:90:26:0d:9a:05:f6:99:93:65:49:e4:d5: 30:d3:08:cb:52:a3:45:87:3d:dd:b9:5b:79:22:c0:49:f1:ea: f0:04:4a:22:e2:67:2d:97:32:7a:30:d3:d7:3c:68:16:dd:69: 4d:de:98:fd:3d:56:60:32:8c:d6:7f:01:88:2d:1d:9f:74:26: 94:c6:e1:9e:5e:92:f9:62:e5:21:f4:d9:1b:cc:b8:b2:4d:0d: 43:1f:5d:c0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm1RarVc0vtv/h2NOhoZkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxZTlkYjQyMmI2MzczMzI1MjhhZTYyOGQ5ZGE1MGU0MDM5 N2ZiNjQwHhcNMjUxMjA2MDMwMTE5WhcNMjUxMjA3MDMwMTE5WjAzMTEwLwYDVQQD EyhjZTg0YjUwOGEzYWQyM2YwNGVmZTcxNzJkY2ViNjUzM2YyMGI0ZWRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyQS6cLCHKT05pGRwKDD1FtH6dLNz V7iWo5pvNJtAk+yEiiVBZHB1U2ooLYMxpCP4+5/wcnS5b5ZJ/Njw1/GhfjXuYbLY fN21QD44NDG8BTyIZQEv6xQGPxzt3DHWlwKzbO9c8/udSAzl+okUGCmjjWIY2iAS Gljk1GMVgaOqN7KqIJVQiNiAm1jVr5JIx8zm//EUUxyF6JH6SDdX0vQMwOvaPKNU IgxEu9Xx0v2nhgcv2OBF5GRdF0veP3ryrGsNaHXt7KPrh/LO2WwyeWe+tjCsDDSY 6SUWZQgR2wwXWBn3hkMgTEteXyPZ7ZnB8FH4Yhx6scUoQLn4Q8V2zELyDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM6EtQijrSPwTv5xctzrZTPyC07cMB8GA1UdIwQY MBaAFDHp20IrY3MyUormKNnaUOQDl/tkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTWVuYlFpdGpjekpTaXVZbzJkcFE1QU9YLTJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS8zNDk5NWYtOGE0NS00NWZiLTgxZjIt MjAwMTc3OTkyNmNmLzEvTWVuYlFpdGpjekpTaXVZbzJkcFE1QU9YLTJRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS8zNDk5NWYtOGE0NS00NWZiLTgxZjItMjAwMTc3OTkyNmNm LzEvTWVuYlFpdGpjekpTaXVZbzJkcFE1QU9YLTJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjlF4yzSv eL6sfCIeR4RhndXSBDGN+NGCY0SVOG9fZiVmp0MOwMZBJ6Den2+iPry3Hr9lCgvl ocxAvXk+h3q6wURytHEi8FZJ48HK/jP+0kFlGIZVOas5rIpdJLVz0G9FmMIidHKz zcbvcPqYdVvPHdLnXAxrfNzUUS0kDsz4rExHfOIB1pMX/9ka3eoGnGLWN25FpZk7 OtxzBoX4iWyIOtcj4XMQSIFqkCYNmgX2mZNlSeTVMNMIy1KjRYc93blbeSLASfHq 8ARKIuJnLZcyejDT1zxoFt1pTd6Y/T1WYDKM1n8BiC0dn3QmlMbhnl6S+WLlIfTZ G8y4sk0NQx9dwA== -----END CERTIFICATE-----Generated at Sat Dec 6 09:49:30 2025 by rpki-client