This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/ee9519-ff61-4679-9015-80e427596b5d/1/McsA0vhEAYEMMgC1L6OI6TZR3fM.mft File: McsA0vhEAYEMMgC1L6OI6TZR3fM.mft (raw, json) Hash identifier: ok/r7CxoStdb4kUmfIuE+9VCo76QZ6P33VS3KHTpPm0= Subject key identifier: 5D:CA:BB:6E:A8:34:BE:37:71:1A:AD:FB:D3:A7:83:9F:1D:63:7C:EF Authority key identifier: 31:CB:00:D2:F8:44:01:81:0C:32:00:B5:2F:A3:88:E9:36:51:DD:F3 Certificate issuer: /CN=31cb00d2f84401810c3200b52fa388e93651ddf3 Certificate serial: 019B08FECF5D2C459AE8DB8F8659B28A237D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/McsA0vhEAYEMMgC1L6OI6TZR3fM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/ee9519-ff61-4679-9015-80e427596b5d/1/McsA0vhEAYEMMgC1L6OI6TZR3fM.mft Manifest number: 06F3 Signing time: Wed 10 Dec 2025 16:01:15 +0000 Manifest this update: Wed 10 Dec 2025 16:01:15 +0000 Manifest next update: Thu 11 Dec 2025 16:01:15 +0000 Files and hashes: 1: 6QZXrPa3sBN80OwKH97Qmpz11-w.roa (hash: UdHrwly/eXNnDWvZzXVWVnCJ0eO0DldyC6uMO4NJQeg=) 2: McsA0vhEAYEMMgC1L6OI6TZR3fM.crl (hash: PzaPFc5sUgtrq1XwF14wE2XanySm/xf1ngsD7XxZS4w=) 3: Q4ARpo7c_FOTpND5OOktY5HSyqo.roa (hash: ILsFUwZlsj6McFw7LlD/gZjYBWIJxR6ph/CcN+j5KSY=) 4: hyttk-VciYASeJhwhte3fbo6duo.roa (hash: 7BwJiVdV5v0GFak7++7KK6Hv1MdzUEXFe+dIhNvsD1A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/ee9519-ff61-4679-9015-80e427596b5d/1/McsA0vhEAYEMMgC1L6OI6TZR3fM.crl rsync://rpki.ripe.net/repository/DEFAULT/11/ee9519-ff61-4679-9015-80e427596b5d/1/McsA0vhEAYEMMgC1L6OI6TZR3fM.mft rsync://rpki.ripe.net/repository/DEFAULT/McsA0vhEAYEMMgC1L6OI6TZR3fM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:08:fe:cf:5d:2c:45:9a:e8:db:8f:86:59:b2:8a:23:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31cb00d2f84401810c3200b52fa388e93651ddf3 Validity Not Before: Dec 10 16:01:15 2025 GMT Not After : Dec 11 16:01:15 2025 GMT Subject: CN=5dcabb6ea834be37711aadfbd3a7839f1d637cef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:42:4e:70:c9:da:d8:ea:d2:21:5d:fd:2f:c8: 35:fc:75:de:52:c8:29:ea:c5:5d:e6:92:81:a7:24: c2:99:f8:d6:cc:43:02:ca:50:15:a6:09:ec:bb:a2: 1b:97:6c:1d:b9:6b:c3:28:ad:7d:f3:ed:06:cb:9d: 7c:50:14:d3:d3:85:d5:12:f9:18:6c:46:be:24:03: 78:af:e0:ca:a3:93:3a:e7:1e:46:4c:8c:41:f3:2b: 58:c8:bc:15:6c:ba:da:c8:c0:74:47:28:b9:86:ee: ee:61:17:e5:40:a2:e9:8f:e5:5b:f1:17:f0:e9:a4: a9:1a:60:1c:da:de:51:96:b7:95:d5:2c:5e:f3:b7: b0:b2:e2:a9:37:f6:69:b3:e9:32:03:10:e6:d0:f3: d3:a8:6f:0d:91:7a:b4:29:cf:36:f0:2b:35:43:e3: 1c:c1:53:51:86:7a:d5:bb:da:2e:35:b7:9f:fb:87: da:d6:9c:26:60:2d:cd:a7:a0:0a:b2:e0:f4:6b:29: ea:88:d3:f0:a3:35:53:a8:8f:99:ca:89:b0:e3:32: ea:1d:25:50:ab:3f:05:b3:86:d1:2e:36:03:d6:24: fd:ec:05:ae:80:21:b2:77:70:54:07:b1:69:01:45: 05:e4:c2:77:31:35:84:a0:c9:c4:d8:0e:90:91:5e: 4e:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:CA:BB:6E:A8:34:BE:37:71:1A:AD:FB:D3:A7:83:9F:1D:63:7C:EF X509v3 Authority Key Identifier: keyid:31:CB:00:D2:F8:44:01:81:0C:32:00:B5:2F:A3:88:E9:36:51:DD:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/McsA0vhEAYEMMgC1L6OI6TZR3fM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/ee9519-ff61-4679-9015-80e427596b5d/1/McsA0vhEAYEMMgC1L6OI6TZR3fM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/ee9519-ff61-4679-9015-80e427596b5d/1/McsA0vhEAYEMMgC1L6OI6TZR3fM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:43:f0:39:1c:c8:37:5d:44:6b:24:f0:10:16:e5:c5:a7:30: 4c:8e:ba:d6:b2:0f:7e:a4:be:26:61:70:19:af:3d:ee:7d:42: 83:e1:e6:c8:b5:a9:59:32:e1:8c:9c:54:63:c1:70:34:33:0b: a7:dc:e3:2f:47:38:cb:18:48:1d:c2:f8:7e:d8:58:3b:d9:fd: 0b:e1:1a:5e:55:79:a5:e4:59:98:ee:4c:f3:cd:91:a9:f5:3b: fa:16:a7:c3:01:a8:8b:6f:dc:77:38:50:85:2c:85:a4:d3:9e: 8a:b5:02:c2:fd:c8:d7:60:12:cf:94:9a:4c:61:db:43:00:23: a3:ad:cb:69:49:d5:06:47:f3:10:67:18:7c:71:7e:2c:18:bb: 5a:69:98:0f:05:b6:77:d6:33:9d:93:e7:3f:3a:5d:70:8e:11: 28:d2:c8:52:cf:4f:e5:e1:fd:0d:06:f9:19:41:d6:08:98:43: 0d:6d:9b:cc:a5:6e:c6:82:9d:57:94:53:1e:fc:55:04:25:10: d7:4c:c8:4b:55:7e:ca:7d:5a:c4:d8:29:53:c4:16:71:49:89: 39:fb:7a:a8:ac:2d:35:23:4b:81:59:33:35:b8:0e:50:f9:ba: 10:81:59:39:d6:78:cd:26:9e:a2:2e:21:02:da:23:da:4a:5a: 79:d3:44:9b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsI/s9dLEWa6NuPhlmyiiN9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxY2IwMGQyZjg0NDAxODEwYzMyMDBiNTJmYTM4OGU5MzY1 MWRkZjMwHhcNMjUxMjEwMTYwMTE1WhcNMjUxMjExMTYwMTE1WjAzMTEwLwYDVQQD Eyg1ZGNhYmI2ZWE4MzRiZTM3NzExYWFkZmJkM2E3ODM5ZjFkNjM3Y2VmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA20JOcMna2OrSIV39L8g1/HXeUsgp 6sVd5pKBpyTCmfjWzEMCylAVpgnsu6Ibl2wduWvDKK198+0Gy518UBTT04XVEvkY bEa+JAN4r+DKo5M65x5GTIxB8ytYyLwVbLrayMB0Ryi5hu7uYRflQKLpj+Vb8Rfw 6aSpGmAc2t5RlreV1Sxe87ewsuKpN/Zps+kyAxDm0PPTqG8NkXq0Kc828Cs1Q+Mc wVNRhnrVu9ouNbef+4fa1pwmYC3Np6AKsuD0aynqiNPwozVTqI+Zyomw4zLqHSVQ qz8Fs4bRLjYD1iT97AWugCGyd3BUB7FpAUUF5MJ3MTWEoMnE2A6QkV5OBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF3Ku26oNL43cRqt+9Ong58dY3zvMB8GA1UdIwQY MBaAFDHLANL4RAGBDDIAtS+jiOk2Ud3zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTWNzQTB2aEVBWUVNTWdDMUw2T0k2VFpSM2ZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9lZTk1MTktZmY2MS00Njc5LTkwMTUt ODBlNDI3NTk2YjVkLzEvTWNzQTB2aEVBWUVNTWdDMUw2T0k2VFpSM2ZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS9lZTk1MTktZmY2MS00Njc5LTkwMTUtODBlNDI3NTk2YjVk LzEvTWNzQTB2aEVBWUVNTWdDMUw2T0k2VFpSM2ZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUkPwORzI N11EayTwEBblxacwTI661rIPfqS+JmFwGa897n1Cg+HmyLWpWTLhjJxUY8FwNDML p9zjL0c4yxhIHcL4fthYO9n9C+EaXlV5peRZmO5M882RqfU7+hanwwGoi2/cdzhQ hSyFpNOeirUCwv3I12ASz5SaTGHbQwAjo63LaUnVBkfzEGcYfHF+LBi7WmmYDwW2 d9YznZPnPzpdcI4RKNLIUs9P5eH9DQb5GUHWCJhDDW2bzKVuxoKdV5RTHvxVBCUQ 10zIS1V+yn1axNgpU8QWcUmJOft6qKwtNSNLgVkzNbgOUPm6EIFZOdZ4zSaeoi4h Atoj2kpaedNEmw== -----END CERTIFICATE-----Generated at Wed Dec 10 17:42:35 2025 by rpki-client