This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/de4740-d34e-42a7-8968-464b8f3b8363/1/MXqSdCYInzuMUACDIhp5ip0uhGY.mft File: MXqSdCYInzuMUACDIhp5ip0uhGY.mft (raw, json) Hash identifier: A3zl3VyrVfmk2X+2uO/Du1oxzGOxvvIiM/eH7HlC6M4= Subject key identifier: FB:EC:41:C6:49:78:57:2B:C9:71:36:AE:50:BC:D6:CF:8A:96:67:66 Authority key identifier: 31:7A:92:74:26:08:9F:3B:8C:50:00:83:22:1A:79:8A:9D:2E:84:66 Certificate issuer: /CN=317a927426089f3b8c500083221a798a9d2e8466 Certificate serial: 019AF19BBC0E08A2DF6CAE1B60FB1AFB3122 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MXqSdCYInzuMUACDIhp5ip0uhGY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/de4740-d34e-42a7-8968-464b8f3b8363/1/MXqSdCYInzuMUACDIhp5ip0uhGY.mft Manifest number: 148B Signing time: Sat 06 Dec 2025 03:01:46 +0000 Manifest this update: Sat 06 Dec 2025 03:01:46 +0000 Manifest next update: Sun 07 Dec 2025 03:01:46 +0000 Files and hashes: 1: 9eN9v_hmY4BXhqwgwPbmdRtwaxg.roa (hash: /I1wfagsAtpLvGcRUkgr5rbaITh/yY12WpQcMZ73aQ0=) 2: MXqSdCYInzuMUACDIhp5ip0uhGY.crl (hash: sirbFPs2nszC0ny/GZit/xpP5Qpk0DuAR/Lcy5mCDho=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/de4740-d34e-42a7-8968-464b8f3b8363/1/MXqSdCYInzuMUACDIhp5ip0uhGY.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/de4740-d34e-42a7-8968-464b8f3b8363/1/MXqSdCYInzuMUACDIhp5ip0uhGY.mft rsync://rpki.ripe.net/repository/DEFAULT/MXqSdCYInzuMUACDIhp5ip0uhGY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:bc:0e:08:a2:df:6c:ae:1b:60:fb:1a:fb:31:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=317a927426089f3b8c500083221a798a9d2e8466 Validity Not Before: Dec 6 03:01:46 2025 GMT Not After : Dec 7 03:01:46 2025 GMT Subject: CN=fbec41c64978572bc97136ae50bcd6cf8a966766 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:ed:7f:ff:bd:6f:a4:36:ec:1b:f5:18:d4:4a: 28:be:9f:89:21:cd:7a:48:3e:30:2b:13:e8:ad:80: 47:7d:e6:90:1a:65:95:3c:02:62:e6:59:c1:dd:74: d8:37:72:58:a5:a5:b1:64:cb:f5:7e:4e:fc:10:0f: ef:47:ec:9e:22:74:88:18:bb:ff:fc:e4:b4:c9:34: d9:35:45:3a:d1:5e:2b:b5:e3:b5:8b:d0:85:47:b0: 67:62:ca:99:2b:38:de:6d:df:d8:51:b2:d7:5d:87: 79:d7:27:c2:ec:aa:f4:9a:8a:4a:14:61:2c:58:91: 40:ef:78:6c:64:47:1b:3d:cd:0a:bd:3d:2e:c8:3d: 42:f9:d7:a9:e2:ab:01:f3:34:cd:5f:11:d4:7b:42: a9:9c:5b:77:4b:9c:4c:af:8a:2e:04:24:8e:92:d9: c8:6f:bb:a9:94:6d:96:29:a3:b1:87:84:ef:a2:69: 64:77:50:8c:c7:12:99:c2:10:c6:17:cc:b4:05:94: 1d:39:79:25:b4:c1:b4:08:5b:00:80:48:32:38:90: 5e:37:94:3e:2c:1a:c5:7d:d8:00:56:f4:66:4c:16: 77:7b:df:01:e4:c5:a1:34:c1:7c:95:ff:c4:80:6c: c3:3d:f5:1b:c7:f4:84:ca:2d:a9:8f:59:9a:54:07: 30:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:EC:41:C6:49:78:57:2B:C9:71:36:AE:50:BC:D6:CF:8A:96:67:66 X509v3 Authority Key Identifier: keyid:31:7A:92:74:26:08:9F:3B:8C:50:00:83:22:1A:79:8A:9D:2E:84:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MXqSdCYInzuMUACDIhp5ip0uhGY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/de4740-d34e-42a7-8968-464b8f3b8363/1/MXqSdCYInzuMUACDIhp5ip0uhGY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/de4740-d34e-42a7-8968-464b8f3b8363/1/MXqSdCYInzuMUACDIhp5ip0uhGY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:0e:96:3d:a3:b9:f0:57:27:ca:e1:17:cc:78:7d:8f:73:7b: e5:5d:42:dc:5e:bf:10:2a:dc:fb:ca:49:38:a6:4a:bc:88:99: 6f:a4:27:73:e2:aa:a9:cf:cc:5d:45:6b:34:de:23:41:b9:46: d5:18:ac:88:6d:74:5a:c7:6a:15:b4:27:8b:97:70:e2:d8:d8: 3c:5a:8e:bf:ac:1d:f5:73:cb:e1:20:c8:9b:72:3b:7e:7d:1e: fa:c9:17:25:90:bc:05:3b:2a:75:e1:26:46:2e:f5:86:c2:1b: 65:44:ff:a7:54:55:bc:d1:9d:8d:98:d3:e5:f8:53:6c:c0:0b: 7d:e6:05:63:0c:80:80:2c:f7:ee:4b:68:19:3d:5b:1c:50:fb: 61:9c:2d:96:76:7d:71:d9:2f:c3:33:20:7b:41:57:7b:00:79: 20:a4:93:21:65:6f:11:7d:dc:01:4d:cb:da:dd:e3:ca:ad:65: 7b:7c:ba:d1:70:8a:43:98:6a:f2:6e:1b:b8:34:82:0c:62:da: 76:12:09:09:d7:2a:bb:3b:0e:ae:09:fe:be:5d:17:77:55:ab: 9f:0d:0f:b1:b5:30:4d:5f:88:08:ae:87:77:6a:b0:1d:b0:7d: 32:0e:4b:b8:41:46:96:a7:48:a4:7c:74:e4:57:c2:7f:c2:74: 1b:84:7a:71 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm7wOCKLfbK4bYPsa+zEiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxN2E5Mjc0MjYwODlmM2I4YzUwMDA4MzIyMWE3OThhOWQy ZTg0NjYwHhcNMjUxMjA2MDMwMTQ2WhcNMjUxMjA3MDMwMTQ2WjAzMTEwLwYDVQQD EyhmYmVjNDFjNjQ5Nzg1NzJiYzk3MTM2YWU1MGJjZDZjZjhhOTY2NzY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvu1//71vpDbsG/UY1Eoovp+JIc16 SD4wKxPorYBHfeaQGmWVPAJi5lnB3XTYN3JYpaWxZMv1fk78EA/vR+yeInSIGLv/ /OS0yTTZNUU60V4rteO1i9CFR7BnYsqZKzjebd/YUbLXXYd51yfC7Kr0mopKFGEs WJFA73hsZEcbPc0KvT0uyD1C+dep4qsB8zTNXxHUe0KpnFt3S5xMr4ouBCSOktnI b7uplG2WKaOxh4Tvomlkd1CMxxKZwhDGF8y0BZQdOXkltMG0CFsAgEgyOJBeN5Q+ LBrFfdgAVvRmTBZ3e98B5MWhNMF8lf/EgGzDPfUbx/SEyi2pj1maVAcwTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPvsQcZJeFcryXE2rlC81s+KlmdmMB8GA1UdIwQY MBaAFDF6knQmCJ87jFAAgyIaeYqdLoRmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTVhxU2RDWUluenVNVUFDRElocDVpcDB1aEdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9kZTQ3NDAtZDM0ZS00MmE3LTg5Njgt NDY0YjhmM2I4MzYzLzEvTVhxU2RDWUluenVNVUFDRElocDVpcDB1aEdZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi9kZTQ3NDAtZDM0ZS00MmE3LTg5NjgtNDY0YjhmM2I4MzYz LzEvTVhxU2RDWUluenVNVUFDRElocDVpcDB1aEdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUQ6WPaO5 8FcnyuEXzHh9j3N75V1C3F6/ECrc+8pJOKZKvIiZb6Qnc+Kqqc/MXUVrNN4jQblG 1RisiG10WsdqFbQni5dw4tjYPFqOv6wd9XPL4SDIm3I7fn0e+skXJZC8BTsqdeEm Ri71hsIbZUT/p1RVvNGdjZjT5fhTbMALfeYFYwyAgCz37ktoGT1bHFD7YZwtlnZ9 cdkvwzMge0FXewB5IKSTIWVvEX3cAU3L2t3jyq1le3y60XCKQ5hq8m4buDSCDGLa dhIJCdcquzsOrgn+vl0Xd1Wrnw0PsbUwTV+ICK6Hd2qwHbB9Mg5LuEFGlqdIpHx0 5FfCf8J0G4R6cQ== -----END CERTIFICATE-----Generated at Sat Dec 6 09:06:32 2025 by rpki-client