This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/b900ee-0007-47a3-9f6f-8670fbea3989/1/x_MfTFLp6rWIMOOH0LOQkwaExBo.mft File: x_MfTFLp6rWIMOOH0LOQkwaExBo.mft (raw, json) Hash identifier: nqwnImbl0P0PalY4y/XJzPLHWslaPRelDbF/k0jNQ7Y= Subject key identifier: 40:6F:82:65:A1:6E:A4:DE:8E:CD:13:DD:EE:84:22:B8:0D:98:CD:14 Authority key identifier: C7:F3:1F:4C:52:E9:EA:B5:88:30:E3:87:D0:B3:90:93:06:84:C4:1A Certificate issuer: /CN=c7f31f4c52e9eab58830e387d0b390930684c41a Certificate serial: 019AF208CFA3D9F8E007E4D84873823FB3EF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x_MfTFLp6rWIMOOH0LOQkwaExBo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/b900ee-0007-47a3-9f6f-8670fbea3989/1/x_MfTFLp6rWIMOOH0LOQkwaExBo.mft Manifest number: 175D Signing time: Sat 06 Dec 2025 05:00:54 +0000 Manifest this update: Sat 06 Dec 2025 05:00:54 +0000 Manifest next update: Sun 07 Dec 2025 05:00:54 +0000 Files and hashes: 1: x_MfTFLp6rWIMOOH0LOQkwaExBo.crl (hash: E0C28KPP26fOQu0uXh/PHJXnj+E0apycSRwlBhG4Mvw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/b900ee-0007-47a3-9f6f-8670fbea3989/1/x_MfTFLp6rWIMOOH0LOQkwaExBo.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/b900ee-0007-47a3-9f6f-8670fbea3989/1/x_MfTFLp6rWIMOOH0LOQkwaExBo.mft rsync://rpki.ripe.net/repository/DEFAULT/x_MfTFLp6rWIMOOH0LOQkwaExBo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:cf:a3:d9:f8:e0:07:e4:d8:48:73:82:3f:b3:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c7f31f4c52e9eab58830e387d0b390930684c41a Validity Not Before: Dec 6 05:00:54 2025 GMT Not After : Dec 7 05:00:54 2025 GMT Subject: CN=406f8265a16ea4de8ecd13ddee8422b80d98cd14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:1f:63:c2:d8:0c:91:7c:e2:72:53:9f:86:21: 90:96:b6:e9:b4:8a:4d:c8:44:8f:f3:87:13:3d:f9: 5d:9b:4a:95:82:1b:11:94:ed:68:89:f2:98:f9:60: d0:24:a4:86:9d:33:33:74:3f:8d:ba:3d:20:ef:1e: 8a:59:2b:96:7b:a2:2f:92:c2:20:ec:d3:c9:fe:1f: 36:13:86:e3:82:b4:e8:75:bc:ca:8e:a7:c6:ea:6c: 73:ec:db:92:3f:84:2e:b2:e6:b0:1b:f9:30:ad:43: 11:29:79:05:46:7c:9c:58:03:c1:d7:1c:6e:c3:5a: a0:9d:92:0f:29:e5:3a:b9:3f:1a:a4:96:65:ee:01: 4f:a0:49:cc:b3:38:ca:32:b9:ea:c5:d2:77:e8:51: d3:3a:6f:09:6c:5b:f5:64:4d:7d:fd:97:e0:8a:7b: fb:3c:a3:9c:35:f6:f2:6d:44:e3:1e:2d:d7:f3:b4: 7d:c7:74:82:da:5f:20:5a:89:7a:f2:84:9c:c9:3d: 11:dc:6a:0b:9b:5a:d5:ef:7c:d4:55:7f:72:d4:50: b7:7e:72:e2:23:19:26:17:4a:05:2c:55:32:d5:a2: 12:71:37:0a:a0:13:04:ec:ea:ef:71:38:d6:3c:35: 28:55:9a:b0:da:db:ae:8b:96:dd:45:8b:62:b5:d4: 15:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:6F:82:65:A1:6E:A4:DE:8E:CD:13:DD:EE:84:22:B8:0D:98:CD:14 X509v3 Authority Key Identifier: keyid:C7:F3:1F:4C:52:E9:EA:B5:88:30:E3:87:D0:B3:90:93:06:84:C4:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x_MfTFLp6rWIMOOH0LOQkwaExBo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/b900ee-0007-47a3-9f6f-8670fbea3989/1/x_MfTFLp6rWIMOOH0LOQkwaExBo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/b900ee-0007-47a3-9f6f-8670fbea3989/1/x_MfTFLp6rWIMOOH0LOQkwaExBo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:46:d0:46:91:ca:b6:5c:c5:e0:e0:91:26:30:c7:ca:6c:5c: f6:52:8d:98:16:1f:ea:49:86:df:64:e0:58:f3:f7:ec:a7:e5: f1:58:28:a7:44:85:94:e6:6b:92:8b:13:78:47:68:04:32:32: 91:94:3a:f5:ee:44:43:96:e7:d2:fc:7d:1f:2e:ec:88:e0:dc: ba:06:0a:a6:98:88:c1:4c:45:af:18:1e:c8:f2:23:ef:72:0a: 18:cd:dc:07:61:d2:c9:c7:47:5d:6a:2f:af:34:fc:fa:20:63: c0:a7:cf:b7:0d:1e:7c:84:c8:70:39:d1:4c:a8:9b:d5:f9:d8: 00:1c:90:cf:0a:33:e5:3a:db:e6:bd:b1:02:b4:8c:ff:ac:bb: d1:c1:d5:b3:32:b2:e3:4c:80:c0:61:bf:9d:1a:c1:3d:a0:3d: 35:86:ce:7f:24:c7:01:d1:e0:90:d5:9c:53:40:73:14:39:7f: 3f:67:74:16:9d:2a:f7:fb:a0:9e:43:f1:0a:d1:ba:40:dc:a9: 7e:f1:be:d8:89:a8:1c:87:37:61:b5:cd:14:4f:72:db:94:bd: 4d:49:29:80:0a:b1:24:29:50:60:47:c7:77:91:ea:b7:88:0b: 79:e3:d7:a5:9b:cf:35:5b:23:15:a7:9d:1d:b2:8d:11:7e:f2: 1c:9c:31:e1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCM+j2fjgB+TYSHOCP7PvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM3ZjMxZjRjNTJlOWVhYjU4ODMwZTM4N2QwYjM5MDkzMDY4 NGM0MWEwHhcNMjUxMjA2MDUwMDU0WhcNMjUxMjA3MDUwMDU0WjAzMTEwLwYDVQQD Eyg0MDZmODI2NWExNmVhNGRlOGVjZDEzZGRlZTg0MjJiODBkOThjZDE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApB9jwtgMkXziclOfhiGQlrbptIpN yESP84cTPfldm0qVghsRlO1oifKY+WDQJKSGnTMzdD+Nuj0g7x6KWSuWe6IvksIg 7NPJ/h82E4bjgrTodbzKjqfG6mxz7NuSP4QusuawG/kwrUMRKXkFRnycWAPB1xxu w1qgnZIPKeU6uT8apJZl7gFPoEnMszjKMrnqxdJ36FHTOm8JbFv1ZE19/Zfginv7 PKOcNfbybUTjHi3X87R9x3SC2l8gWol68oScyT0R3GoLm1rV73zUVX9y1FC3fnLi IxkmF0oFLFUy1aIScTcKoBME7OrvcTjWPDUoVZqw2tuui5bdRYtitdQV1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEBvgmWhbqTejs0T3e6EIrgNmM0UMB8GA1UdIwQY MBaAFMfzH0xS6eq1iDDjh9CzkJMGhMQaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveF9NZlRGTHA2cldJTU9PSDBMT1Frd2FFeEJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9iOTAwZWUtMDAwNy00N2EzLTlmNmYt ODY3MGZiZWEzOTg5LzEveF9NZlRGTHA2cldJTU9PSDBMT1Frd2FFeEJvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi9iOTAwZWUtMDAwNy00N2EzLTlmNmYtODY3MGZiZWEzOTg5 LzEveF9NZlRGTHA2cldJTU9PSDBMT1Frd2FFeEJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ0bQRpHK tlzF4OCRJjDHymxc9lKNmBYf6kmG32TgWPP37Kfl8Vgop0SFlOZrkosTeEdoBDIy kZQ69e5EQ5bn0vx9Hy7siODcugYKppiIwUxFrxgeyPIj73IKGM3cB2HSycdHXWov rzT8+iBjwKfPtw0efITIcDnRTKib1fnYAByQzwoz5Trb5r2xArSM/6y70cHVszKy 40yAwGG/nRrBPaA9NYbOfyTHAdHgkNWcU0BzFDl/P2d0Fp0q9/ugnkPxCtG6QNyp fvG+2ImoHIc3YbXNFE9y25S9TUkpgAqxJClQYEfHd5Hqt4gLeePXpZvPNVsjFaed HbKNEX7yHJwx4Q== -----END CERTIFICATE-----Generated at Sat Dec 6 11:31:50 2025 by rpki-client