This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/adc0fe-a24f-4736-afb8-796b38796f69/1/MPCPhA4xfpUgW6E0l9nbxzd7nlc.mft File: MPCPhA4xfpUgW6E0l9nbxzd7nlc.mft (raw, json) Hash identifier: Kt09y/EWa3vS+pi6JXqULdrjKk3ttehAdJf95Iv0ZtE= Subject key identifier: 66:66:A6:FB:51:5C:42:77:1E:42:B5:35:30:AE:A3:52:21:35:3B:84 Authority key identifier: 30:F0:8F:84:0E:31:7E:95:20:5B:A1:34:97:D9:DB:C7:37:7B:9E:57 Certificate issuer: /CN=30f08f840e317e95205ba13497d9dbc7377b9e57 Certificate serial: 019B0E24D2208C63901E2A1DC651815DC453 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MPCPhA4xfpUgW6E0l9nbxzd7nlc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/adc0fe-a24f-4736-afb8-796b38796f69/1/MPCPhA4xfpUgW6E0l9nbxzd7nlc.mft Manifest number: 07EB Signing time: Thu 11 Dec 2025 16:00:52 +0000 Manifest this update: Thu 11 Dec 2025 16:00:52 +0000 Manifest next update: Fri 12 Dec 2025 16:00:52 +0000 Files and hashes: 1: MPCPhA4xfpUgW6E0l9nbxzd7nlc.crl (hash: 2Cbicfy4xmeLrbSqFWSlCneNjrseUBatwxfTqMeBy3c=) 2: w63CtVkaTB-I3bLthiRIKcHJ1z0.roa (hash: PphDOFm6VhjC/oLMpXqjasemzNyOPtAOJruxm2WGQGk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/adc0fe-a24f-4736-afb8-796b38796f69/1/MPCPhA4xfpUgW6E0l9nbxzd7nlc.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/adc0fe-a24f-4736-afb8-796b38796f69/1/MPCPhA4xfpUgW6E0l9nbxzd7nlc.mft rsync://rpki.ripe.net/repository/DEFAULT/MPCPhA4xfpUgW6E0l9nbxzd7nlc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:24:d2:20:8c:63:90:1e:2a:1d:c6:51:81:5d:c4:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30f08f840e317e95205ba13497d9dbc7377b9e57 Validity Not Before: Dec 11 16:00:52 2025 GMT Not After : Dec 12 16:00:52 2025 GMT Subject: CN=6666a6fb515c42771e42b53530aea35221353b84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:cd:17:82:e9:fb:a9:09:fe:84:44:d6:05:eb: 76:12:8e:5a:74:a6:d2:c5:5e:21:b0:d4:8a:00:d2: 77:67:c8:f4:66:27:a9:d8:e0:5c:2a:1b:1a:88:9a: 77:41:f0:e8:5a:3e:5f:b2:99:4b:2f:c2:29:0d:0c: 18:56:f0:8b:0f:66:b8:70:b4:61:de:7a:e0:de:00: 2e:bd:22:30:e5:2e:73:81:13:e1:47:f3:6c:11:e7: 31:1c:11:10:06:30:11:02:51:48:ce:12:ba:c2:57: 3e:b1:7d:5d:06:cf:59:35:9f:95:d9:46:69:42:b2: 7b:c8:97:b7:13:b7:98:d6:4c:87:89:19:16:be:a8: 6e:fb:a0:d0:a4:af:c5:08:e7:d6:e2:76:d8:06:0b: 10:0c:a6:5d:f5:fa:b5:bb:d9:c2:5e:f1:94:75:5a: 28:c6:a2:e3:41:13:5b:47:db:62:a8:ce:fc:69:3a: 49:19:ad:d5:ae:30:f3:b1:f5:18:31:90:3b:0a:f7: 03:b9:20:a5:c1:10:8f:8c:b5:6f:2a:6d:b3:45:10: 68:27:d8:f3:14:6b:95:3a:a8:57:58:0a:3c:96:8c: f9:38:70:5a:48:ce:88:00:19:3d:07:0b:bb:97:39: a8:12:d5:07:2b:bd:13:57:73:63:aa:30:7f:34:ab: f6:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:66:A6:FB:51:5C:42:77:1E:42:B5:35:30:AE:A3:52:21:35:3B:84 X509v3 Authority Key Identifier: keyid:30:F0:8F:84:0E:31:7E:95:20:5B:A1:34:97:D9:DB:C7:37:7B:9E:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MPCPhA4xfpUgW6E0l9nbxzd7nlc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/adc0fe-a24f-4736-afb8-796b38796f69/1/MPCPhA4xfpUgW6E0l9nbxzd7nlc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/adc0fe-a24f-4736-afb8-796b38796f69/1/MPCPhA4xfpUgW6E0l9nbxzd7nlc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:89:a9:e2:fc:28:58:2d:6a:e9:01:b3:6d:43:b7:60:61:88: 7c:b2:dd:89:cc:07:32:0a:cd:fb:e3:00:c9:78:e0:30:fe:c6: 74:45:b7:c6:9b:4b:de:f4:5f:0d:86:ad:2b:6f:b5:73:c5:aa: 16:5f:e6:86:3c:36:bc:70:53:e8:3c:f8:e2:85:f0:95:00:f1: f2:21:25:b2:4c:87:4f:50:dd:a1:b9:97:58:ec:16:bb:a5:e0: 2c:fa:74:3d:e2:d7:e4:67:c1:b4:55:27:39:60:d5:0d:54:ac: 1e:52:50:7f:c5:27:3c:98:81:a8:4b:56:43:11:42:0b:ad:b9: 7f:3a:52:3f:36:55:48:ff:a4:2b:06:3a:87:e0:f6:3f:b6:bc: b0:51:0b:75:27:59:68:20:83:02:20:a8:33:b3:ab:d1:e7:e2: de:a0:f4:92:cf:d2:2c:1a:72:b0:7b:37:a2:8d:b0:ae:03:19: 58:1c:e1:88:09:bd:2c:f4:19:69:d7:33:2c:3d:25:4f:ad:f4: bc:08:8a:ec:d3:4e:97:a7:cc:97:77:cc:f4:8f:da:ee:93:ff: 83:ca:44:8a:fb:8d:8b:d3:39:cb:bd:0c:15:a5:f8:0f:bd:3e: ac:6f:59:2c:6f:ff:d3:18:83:af:65:de:e5:ee:14:d9:09:d0: fa:bb:60:26 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOJNIgjGOQHiodxlGBXcRTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwZjA4Zjg0MGUzMTdlOTUyMDViYTEzNDk3ZDlkYmM3Mzc3 YjllNTcwHhcNMjUxMjExMTYwMDUyWhcNMjUxMjEyMTYwMDUyWjAzMTEwLwYDVQQD Eyg2NjY2YTZmYjUxNWM0Mjc3MWU0MmI1MzUzMGFlYTM1MjIxMzUzYjg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAps0Xgun7qQn+hETWBet2Eo5adKbS xV4hsNSKANJ3Z8j0Ziep2OBcKhsaiJp3QfDoWj5fsplLL8IpDQwYVvCLD2a4cLRh 3nrg3gAuvSIw5S5zgRPhR/NsEecxHBEQBjARAlFIzhK6wlc+sX1dBs9ZNZ+V2UZp QrJ7yJe3E7eY1kyHiRkWvqhu+6DQpK/FCOfW4nbYBgsQDKZd9fq1u9nCXvGUdVoo xqLjQRNbR9tiqM78aTpJGa3VrjDzsfUYMZA7CvcDuSClwRCPjLVvKm2zRRBoJ9jz FGuVOqhXWAo8loz5OHBaSM6IABk9Bwu7lzmoEtUHK70TV3NjqjB/NKv2qwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGZmpvtRXEJ3HkK1NTCuo1IhNTuEMB8GA1UdIwQY MBaAFDDwj4QOMX6VIFuhNJfZ28c3e55XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTVBDUGhBNHhmcFVnVzZFMGw5bmJ4emQ3bmxjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9hZGMwZmUtYTI0Zi00NzM2LWFmYjgt Nzk2YjM4Nzk2ZjY5LzEvTVBDUGhBNHhmcFVnVzZFMGw5bmJ4emQ3bmxjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS9hZGMwZmUtYTI0Zi00NzM2LWFmYjgtNzk2YjM4Nzk2ZjY5 LzEvTVBDUGhBNHhmcFVnVzZFMGw5bmJ4emQ3bmxjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASYmp4vwo WC1q6QGzbUO3YGGIfLLdicwHMgrN++MAyXjgMP7GdEW3xptL3vRfDYatK2+1c8Wq Fl/mhjw2vHBT6Dz44oXwlQDx8iElskyHT1DdobmXWOwWu6XgLPp0PeLX5GfBtFUn OWDVDVSsHlJQf8UnPJiBqEtWQxFCC625fzpSPzZVSP+kKwY6h+D2P7a8sFELdSdZ aCCDAiCoM7Or0efi3qD0ks/SLBpysHs3oo2wrgMZWBzhiAm9LPQZadczLD0lT630 vAiK7NNOl6fMl3fM9I/a7pP/g8pEivuNi9M5y70MFaX4D70+rG9ZLG//0xiDr2Xe 5e4U2QnQ+rtgJg== -----END CERTIFICATE-----Generated at Thu Dec 11 23:54:45 2025 by rpki-client