This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/6f8f43-1a19-410f-a2f3-e4ac706da148/1/MRhMnotqpAfA1z7QugYwdfYxTjY.mft File: MRhMnotqpAfA1z7QugYwdfYxTjY.mft (raw, json) Hash identifier: VfkfTMD3YAaUZjC2qYLtWrvcrLw2JoKEnL64SwNorKA= Subject key identifier: 4D:6B:B7:FA:01:FE:F5:A2:EF:77:CB:05:8A:5D:6A:77:8A:1E:48:5E Authority key identifier: 31:18:4C:9E:8B:6A:A4:07:C0:D7:3E:D0:BA:06:30:75:F6:31:4E:36 Certificate issuer: /CN=31184c9e8b6aa407c0d73ed0ba063075f6314e36 Certificate serial: 019B24764638AF84EE21941C638805088401 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MRhMnotqpAfA1z7QugYwdfYxTjY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/6f8f43-1a19-410f-a2f3-e4ac706da148/1/MRhMnotqpAfA1z7QugYwdfYxTjY.mft Manifest number: 0851 Signing time: Tue 16 Dec 2025 00:01:29 +0000 Manifest this update: Tue 16 Dec 2025 00:01:29 +0000 Manifest next update: Wed 17 Dec 2025 00:01:29 +0000 Files and hashes: 1: M16uuK8RBAhq-G4iUMFVGeS4VOA.roa (hash: Tzmv8XvI8c70nplaF0O7on0dN4ghnMF0KoTaadCmRAo=) 2: MRhMnotqpAfA1z7QugYwdfYxTjY.crl (hash: VijGEgpdnrMBbvGrgNHjwv9lEIoY8ccubWtLMfUQbUY=) 3: j0wVGA_XYNpaj0gdPVnYetQ4kdo.roa (hash: LDoymRkSd4Uoyu5Lf7qh9Z/0YCixabChwL/74B3fLbA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/6f8f43-1a19-410f-a2f3-e4ac706da148/1/MRhMnotqpAfA1z7QugYwdfYxTjY.crl rsync://rpki.ripe.net/repository/DEFAULT/03/6f8f43-1a19-410f-a2f3-e4ac706da148/1/MRhMnotqpAfA1z7QugYwdfYxTjY.mft rsync://rpki.ripe.net/repository/DEFAULT/MRhMnotqpAfA1z7QugYwdfYxTjY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 22:36:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:24:76:46:38:af:84:ee:21:94:1c:63:88:05:08:84:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31184c9e8b6aa407c0d73ed0ba063075f6314e36 Validity Not Before: Dec 16 00:01:29 2025 GMT Not After : Dec 17 00:01:29 2025 GMT Subject: CN=4d6bb7fa01fef5a2ef77cb058a5d6a778a1e485e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:47:7b:d9:32:ae:0c:5e:dc:10:af:dd:2c:5d: d8:c1:dd:a2:0d:4e:74:f6:95:3c:5d:3d:12:da:47: f2:7e:26:ab:cc:d3:e9:d1:72:1d:88:03:7b:42:74: a7:19:33:d8:1c:21:28:da:de:dd:58:1f:53:e8:a3: 34:05:c1:35:0c:bb:c8:9a:b5:8b:71:38:4b:8f:76: ae:f9:a9:62:18:13:60:10:25:e7:e8:24:6a:a8:7c: 2b:75:21:d9:75:c5:eb:92:7f:57:5b:c0:b0:ed:55: 79:ba:33:52:fc:ca:8b:23:b9:e2:fd:53:ea:89:70: ac:1c:ed:f7:9b:0b:33:20:c5:97:27:54:db:fa:17: 30:59:66:68:ba:95:7e:f0:f2:de:73:78:2f:c2:da: b9:c0:64:4a:5a:e5:c4:c6:a5:5d:fb:06:c6:89:bd: c1:56:b1:86:42:5c:03:1f:5d:5c:ac:b2:15:53:38: 73:50:87:00:a2:c1:d2:b6:f4:67:61:61:36:50:f2: fb:ab:51:68:70:1a:29:93:4f:dc:59:d9:2c:bd:3d: 70:45:39:60:b5:c3:4d:c1:5b:e8:53:1e:a3:d6:59: aa:a4:82:d8:ee:2a:5b:2a:d6:a9:8c:21:8f:66:42: f0:85:46:1d:c6:76:97:1b:cb:99:42:42:5e:30:5a: bd:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:6B:B7:FA:01:FE:F5:A2:EF:77:CB:05:8A:5D:6A:77:8A:1E:48:5E X509v3 Authority Key Identifier: keyid:31:18:4C:9E:8B:6A:A4:07:C0:D7:3E:D0:BA:06:30:75:F6:31:4E:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MRhMnotqpAfA1z7QugYwdfYxTjY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/6f8f43-1a19-410f-a2f3-e4ac706da148/1/MRhMnotqpAfA1z7QugYwdfYxTjY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/6f8f43-1a19-410f-a2f3-e4ac706da148/1/MRhMnotqpAfA1z7QugYwdfYxTjY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:db:4e:24:2f:06:0e:f0:fe:bb:c6:21:a3:21:26:0a:bd:e8: 0e:a2:fc:c2:d6:f4:5e:ae:3c:70:4d:1f:0d:d2:62:9e:d6:d9: c9:82:f0:99:b5:f9:07:8b:45:73:76:25:28:58:35:24:4c:d2: ac:90:9b:b5:70:83:35:2a:c4:ea:48:ce:03:a5:06:34:f4:a9: 80:1e:83:50:b3:85:13:b9:e6:b0:c5:a6:38:8c:58:0c:31:25: 7b:10:ac:49:a6:41:6b:24:fd:2b:6e:97:8d:ef:59:74:44:d6: f4:7f:c1:3d:ce:5b:cb:39:3d:8f:e8:39:82:13:42:ff:25:d8: 2f:9f:c1:17:76:50:62:63:88:1f:33:61:f6:5d:79:b4:99:ad: 9d:7f:41:be:5d:d8:19:bb:cf:b0:00:5f:f9:4c:35:8b:5f:49: 4a:11:b1:75:b1:3a:bc:d6:10:5d:4b:bc:74:06:a9:65:76:d0: 69:f8:22:bb:9b:91:0f:12:1d:7c:8e:8a:66:5b:3e:04:d0:cf: d8:67:5e:09:3d:4f:d5:71:be:b7:31:71:c7:04:bf:d9:a3:3c: 3e:2e:3c:a0:c8:c4:83:35:7c:67:7b:2e:25:91:49:2c:0e:a6: 81:20:de:ef:c4:80:49:71:cd:1d:9d:61:4b:f3:5e:0e:4b:65: b5:a2:21:37 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZskdkY4r4TuIZQcY4gFCIQBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxMTg0YzllOGI2YWE0MDdjMGQ3M2VkMGJhMDYzMDc1ZjYz MTRlMzYwHhcNMjUxMjE2MDAwMTI5WhcNMjUxMjE3MDAwMTI5WjAzMTEwLwYDVQQD Eyg0ZDZiYjdmYTAxZmVmNWEyZWY3N2NiMDU4YTVkNmE3NzhhMWU0ODVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0kd72TKuDF7cEK/dLF3Ywd2iDU50 9pU8XT0S2kfyfiarzNPp0XIdiAN7QnSnGTPYHCEo2t7dWB9T6KM0BcE1DLvImrWL cThLj3au+aliGBNgECXn6CRqqHwrdSHZdcXrkn9XW8Cw7VV5ujNS/MqLI7ni/VPq iXCsHO33mwszIMWXJ1Tb+hcwWWZoupV+8PLec3gvwtq5wGRKWuXExqVd+wbGib3B VrGGQlwDH11crLIVUzhzUIcAosHStvRnYWE2UPL7q1FocBopk0/cWdksvT1wRTlg tcNNwVvoUx6j1lmqpILY7ipbKtapjCGPZkLwhUYdxnaXG8uZQkJeMFq9IwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE1rt/oB/vWi73fLBYpdaneKHkheMB8GA1UdIwQY MBaAFDEYTJ6LaqQHwNc+0LoGMHX2MU42MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTVJoTW5vdHFwQWZBMXo3UXVnWXdkZll4VGpZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy82ZjhmNDMtMWExOS00MTBmLWEyZjMt ZTRhYzcwNmRhMTQ4LzEvTVJoTW5vdHFwQWZBMXo3UXVnWXdkZll4VGpZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy82ZjhmNDMtMWExOS00MTBmLWEyZjMtZTRhYzcwNmRhMTQ4 LzEvTVJoTW5vdHFwQWZBMXo3UXVnWXdkZll4VGpZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXttOJC8G DvD+u8YhoyEmCr3oDqL8wtb0Xq48cE0fDdJintbZyYLwmbX5B4tFc3YlKFg1JEzS rJCbtXCDNSrE6kjOA6UGNPSpgB6DULOFE7nmsMWmOIxYDDElexCsSaZBayT9K26X je9ZdETW9H/BPc5byzk9j+g5ghNC/yXYL5/BF3ZQYmOIHzNh9l15tJmtnX9Bvl3Y GbvPsABf+Uw1i19JShGxdbE6vNYQXUu8dAapZXbQafgiu5uRDxIdfI6KZls+BNDP 2GdeCT1P1XG+tzFxxwS/2aM8Pi48oMjEgzV8Z3suJZFJLA6mgSDe78SASXHNHZ1h S/NeDktltaIhNw== -----END CERTIFICATE-----Generated at Tue Dec 16 04:40:04 2025 by rpki-client