This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/34995f-8a45-45fb-81f2-2001779926cf/1/MenbQitjczJSiuYo2dpQ5AOX-2Q.mft File: MenbQitjczJSiuYo2dpQ5AOX-2Q.mft (raw, json) Hash identifier: QhfYZ0keaSZ1HDp8qRJoAJ2zx8EmpRcyXzsBx91cnNk= Subject key identifier: 21:41:40:84:BD:57:32:69:08:7F:D7:EA:7C:E7:76:5D:10:7F:EB:FE Authority key identifier: 31:E9:DB:42:2B:63:73:32:52:8A:E6:28:D9:DA:50:E4:03:97:FB:64 Certificate issuer: /CN=31e9db422b637332528ae628d9da50e40397fb64 Certificate serial: 019B1A28D2BF77DB778021B1CAFF723477AE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MenbQitjczJSiuYo2dpQ5AOX-2Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/34995f-8a45-45fb-81f2-2001779926cf/1/MenbQitjczJSiuYo2dpQ5AOX-2Q.mft Manifest number: 0384 Signing time: Sun 14 Dec 2025 00:00:41 +0000 Manifest this update: Sun 14 Dec 2025 00:00:41 +0000 Manifest next update: Mon 15 Dec 2025 00:00:41 +0000 Files and hashes: 1: MenbQitjczJSiuYo2dpQ5AOX-2Q.crl (hash: NLpjeqF3MHLWbaSm6vDh6lp3HowRG3D3kOjYKyMzd9o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/34995f-8a45-45fb-81f2-2001779926cf/1/MenbQitjczJSiuYo2dpQ5AOX-2Q.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/34995f-8a45-45fb-81f2-2001779926cf/1/MenbQitjczJSiuYo2dpQ5AOX-2Q.mft rsync://rpki.ripe.net/repository/DEFAULT/MenbQitjczJSiuYo2dpQ5AOX-2Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 17:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1a:28:d2:bf:77:db:77:80:21:b1:ca:ff:72:34:77:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31e9db422b637332528ae628d9da50e40397fb64 Validity Not Before: Dec 14 00:00:41 2025 GMT Not After : Dec 15 00:00:41 2025 GMT Subject: CN=21414084bd573269087fd7ea7ce7765d107febfe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:24:30:3e:f1:1f:02:d7:69:77:fc:bc:d3:78: 59:60:ee:3c:ee:6f:87:b6:95:83:ff:6f:50:99:0d: b3:5d:35:7b:ac:fe:de:9e:d5:92:c7:fe:8c:dd:b0: 7a:6d:80:67:bd:6b:d2:dd:e4:48:62:0e:4a:7b:04: 41:e7:a6:a9:2a:4d:56:4e:a3:9e:21:f8:c1:8d:26: ba:17:2e:63:e1:a8:d2:ee:bd:99:62:f7:e3:2b:39: 6f:f2:d2:93:c5:6f:e5:67:66:a8:e4:07:b3:9c:af: eb:6a:36:fd:41:14:de:6b:4d:9f:89:fb:6c:20:f4: 09:0d:90:e9:f2:93:68:b4:22:cc:ff:18:d9:1c:db: df:9c:f6:ef:f4:6b:66:e3:00:89:b5:fd:ae:40:4e: 04:c4:f8:ba:2b:6a:ab:96:a2:f3:cd:6d:65:c2:3f: e7:dd:da:4f:25:c0:6d:94:ca:75:b0:15:44:b5:75: e8:18:1b:37:3c:be:0a:b0:15:e4:cd:8a:8f:5a:1f: 20:01:42:9b:2f:4f:80:a2:59:6a:7a:a0:63:8d:68: 0d:84:dd:f6:1b:77:f6:a3:66:22:d8:5e:59:6c:b1: 4b:ad:56:5e:92:10:8d:c6:54:cd:f4:18:89:4c:0d: 92:96:9e:47:fb:09:d3:b0:81:42:11:ce:93:7e:6a: 9c:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:41:40:84:BD:57:32:69:08:7F:D7:EA:7C:E7:76:5D:10:7F:EB:FE X509v3 Authority Key Identifier: keyid:31:E9:DB:42:2B:63:73:32:52:8A:E6:28:D9:DA:50:E4:03:97:FB:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MenbQitjczJSiuYo2dpQ5AOX-2Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/34995f-8a45-45fb-81f2-2001779926cf/1/MenbQitjczJSiuYo2dpQ5AOX-2Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/34995f-8a45-45fb-81f2-2001779926cf/1/MenbQitjczJSiuYo2dpQ5AOX-2Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:f3:b7:81:f8:bf:cd:a3:1a:45:f7:97:cc:26:91:aa:64:be: 9d:3f:f5:f0:f2:3d:00:aa:b3:73:54:99:b5:c3:f1:8c:aa:35: 50:10:ac:37:c8:d5:26:c9:37:c3:c4:ea:2f:33:1b:0d:aa:de: 97:af:41:bb:87:f0:d9:18:d1:2c:9e:fb:04:a2:1c:7c:31:02: c9:ea:99:c0:5c:fa:4f:9c:67:ee:0e:7d:d5:a8:fb:4f:1b:a0: 9c:98:bc:96:7a:3a:b1:80:41:43:b6:f9:9d:4c:4c:b8:96:2c: a7:42:4f:cd:2d:d0:02:2b:b8:79:07:c8:59:1f:fe:66:1f:7d: b7:d8:e9:64:72:ad:ed:b6:7b:e9:d9:57:10:7c:54:f7:33:10: 36:7a:40:8b:e6:d1:52:d2:92:23:2a:f3:38:82:cd:c9:e1:5e: 5e:61:e9:29:cb:64:18:6c:9f:36:82:8c:44:0b:2d:a0:bf:8e: 62:d2:93:85:ed:f7:b1:c1:df:02:e8:54:c6:61:af:25:f8:33: ed:7c:63:02:6d:c3:f3:2c:ee:67:8b:42:50:2d:a9:ec:c0:2e: 25:57:b0:82:dd:a0:86:02:d8:c8:a4:d6:8f:3a:23:35:e6:6c: 08:30:6f:82:f5:76:aa:d6:88:3d:f4:cd:f1:5e:cf:5d:cf:72: e9:bd:61:d1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsaKNK/d9t3gCGxyv9yNHeuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxZTlkYjQyMmI2MzczMzI1MjhhZTYyOGQ5ZGE1MGU0MDM5 N2ZiNjQwHhcNMjUxMjE0MDAwMDQxWhcNMjUxMjE1MDAwMDQxWjAzMTEwLwYDVQQD EygyMTQxNDA4NGJkNTczMjY5MDg3ZmQ3ZWE3Y2U3NzY1ZDEwN2ZlYmZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAziQwPvEfAtdpd/y803hZYO487m+H tpWD/29QmQ2zXTV7rP7entWSx/6M3bB6bYBnvWvS3eRIYg5KewRB56apKk1WTqOe IfjBjSa6Fy5j4ajS7r2ZYvfjKzlv8tKTxW/lZ2ao5AeznK/rajb9QRTea02fifts IPQJDZDp8pNotCLM/xjZHNvfnPbv9Gtm4wCJtf2uQE4ExPi6K2qrlqLzzW1lwj/n 3dpPJcBtlMp1sBVEtXXoGBs3PL4KsBXkzYqPWh8gAUKbL0+AollqeqBjjWgNhN32 G3f2o2Yi2F5ZbLFLrVZekhCNxlTN9BiJTA2Slp5H+wnTsIFCEc6TfmqcDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCFBQIS9VzJpCH/X6nzndl0Qf+v+MB8GA1UdIwQY MBaAFDHp20IrY3MyUormKNnaUOQDl/tkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTWVuYlFpdGpjekpTaXVZbzJkcFE1QU9YLTJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS8zNDk5NWYtOGE0NS00NWZiLTgxZjIt MjAwMTc3OTkyNmNmLzEvTWVuYlFpdGpjekpTaXVZbzJkcFE1QU9YLTJRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS8zNDk5NWYtOGE0NS00NWZiLTgxZjItMjAwMTc3OTkyNmNm LzEvTWVuYlFpdGpjekpTaXVZbzJkcFE1QU9YLTJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH/O3gfi/ zaMaRfeXzCaRqmS+nT/18PI9AKqzc1SZtcPxjKo1UBCsN8jVJsk3w8TqLzMbDare l69Bu4fw2RjRLJ77BKIcfDECyeqZwFz6T5xn7g591aj7TxugnJi8lno6sYBBQ7b5 nUxMuJYsp0JPzS3QAiu4eQfIWR/+Zh99t9jpZHKt7bZ76dlXEHxU9zMQNnpAi+bR UtKSIyrzOILNyeFeXmHpKctkGGyfNoKMRAstoL+OYtKThe33scHfAuhUxmGvJfgz 7XxjAm3D8yzuZ4tCUC2p7MAuJVewgt2ghgLYyKTWjzojNeZsCDBvgvV2qtaIPfTN 8V7PXc9y6b1h0Q== -----END CERTIFICATE-----Generated at Sun Dec 14 01:34:45 2025 by rpki-client