This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/e0925e-47bf-4907-bcbc-fd9f36a8ba6e/1/Mx53hPYKyNlpuBz1IxzZ3Ah87TI.mft File: Mx53hPYKyNlpuBz1IxzZ3Ah87TI.mft (raw, json) Hash identifier: aFouJHPS6JkLFCAjBmN5eNanGsS9EkJj+PhmbUGieZ4= Subject key identifier: 9A:67:8A:E0:90:00:91:59:07:8A:AA:4E:B9:9C:2A:F9:32:8D:4D:AB Authority key identifier: 33:1E:77:84:F6:0A:C8:D9:69:B8:1C:F5:23:1C:D9:DC:08:7C:ED:32 Certificate issuer: /CN=331e7784f60ac8d969b81cf5231cd9dc087ced32 Certificate serial: 019B2F9E7D05492C998BC20393A21324DAEC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mx53hPYKyNlpuBz1IxzZ3Ah87TI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/e0925e-47bf-4907-bcbc-fd9f36a8ba6e/1/Mx53hPYKyNlpuBz1IxzZ3Ah87TI.mft Manifest number: 1786 Signing time: Thu 18 Dec 2025 04:01:14 +0000 Manifest this update: Thu 18 Dec 2025 04:01:14 +0000 Manifest next update: Fri 19 Dec 2025 04:01:14 +0000 Files and hashes: 1: Mx53hPYKyNlpuBz1IxzZ3Ah87TI.crl (hash: VQXoJmZxt/4VFRSvbGZ1qwy7ntltJK4VyqVf9CWb8VE=) 2: qzYfqleKMXziWfjI2OhKWSLGXWI.roa (hash: TK9bijwIRNWSf6A7SMNJb8WGXN3cTGP9yogtHb8815I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/e0925e-47bf-4907-bcbc-fd9f36a8ba6e/1/Mx53hPYKyNlpuBz1IxzZ3Ah87TI.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/e0925e-47bf-4907-bcbc-fd9f36a8ba6e/1/Mx53hPYKyNlpuBz1IxzZ3Ah87TI.mft rsync://rpki.ripe.net/repository/DEFAULT/Mx53hPYKyNlpuBz1IxzZ3Ah87TI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:9e:7d:05:49:2c:99:8b:c2:03:93:a2:13:24:da:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=331e7784f60ac8d969b81cf5231cd9dc087ced32 Validity Not Before: Dec 18 04:01:14 2025 GMT Not After : Dec 19 04:01:14 2025 GMT Subject: CN=9a678ae090009159078aaa4eb99c2af9328d4dab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:49:6a:8e:32:39:02:d1:d6:ce:70:e1:35:4d: 9d:a0:75:44:fa:a6:71:a5:7c:b8:ce:f5:be:39:a3: df:01:c6:bc:0c:63:ff:44:ee:9a:b2:98:2a:bc:1e: 65:85:75:c1:55:17:f5:52:9a:9e:5f:1a:b2:49:31: e6:8d:cd:f1:88:0d:b6:7c:bd:f1:61:ae:96:c2:88: a9:2a:ff:63:e0:69:c4:8d:18:20:a2:4e:8f:bb:49: 69:e2:cd:18:4b:cf:7b:46:19:3b:46:49:86:e1:9f: 4a:7d:9d:88:20:47:2d:a7:8d:30:20:5f:a5:50:cf: 6c:5e:0f:32:55:43:bf:18:bd:6c:1a:7a:ce:da:ac: 70:51:0d:b2:61:6a:15:4e:5a:d2:37:40:5c:5c:67: 54:85:98:e6:88:f1:c5:95:9a:a2:8d:39:79:93:ca: d9:d1:99:ca:b3:92:a6:15:f3:7e:16:cc:e0:49:c5: 1c:78:f5:70:0e:dc:7b:ca:b7:76:13:d5:84:ce:c9: ee:e9:8b:e4:90:03:e2:a2:40:a7:ff:81:09:71:2e: f6:31:b6:04:33:58:d6:51:81:1b:f2:86:1d:92:a3: ea:12:51:35:6b:3c:e9:69:c7:8c:a9:7e:02:1d:59: 2e:03:2b:22:43:a0:1f:7f:00:94:b3:fa:cc:a2:63: 9c:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:67:8A:E0:90:00:91:59:07:8A:AA:4E:B9:9C:2A:F9:32:8D:4D:AB X509v3 Authority Key Identifier: keyid:33:1E:77:84:F6:0A:C8:D9:69:B8:1C:F5:23:1C:D9:DC:08:7C:ED:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mx53hPYKyNlpuBz1IxzZ3Ah87TI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/e0925e-47bf-4907-bcbc-fd9f36a8ba6e/1/Mx53hPYKyNlpuBz1IxzZ3Ah87TI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/e0925e-47bf-4907-bcbc-fd9f36a8ba6e/1/Mx53hPYKyNlpuBz1IxzZ3Ah87TI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ba:68:7f:34:1e:90:de:9a:79:cc:29:9b:c4:d5:d6:d2:53:ee: 58:f4:ff:69:02:ea:03:bb:95:c6:00:2c:9a:68:4e:0b:fe:d0: 83:1c:a4:7c:c0:58:0c:fc:e5:46:b9:f7:36:ce:9c:e9:36:ee: fb:60:7f:a6:78:cf:9c:f7:dc:92:b8:ae:a8:07:a1:86:c4:35: ab:cd:cb:49:d1:7c:92:a4:06:d7:7f:6b:4f:db:fe:9e:b9:dc: b9:c2:76:4d:7f:94:ba:f3:21:93:1c:e7:8d:7f:73:af:58:e8: b1:fb:54:2b:6b:32:b4:31:b0:86:2f:f9:4d:10:c3:2f:8c:9a: 6e:4a:e7:0b:a4:40:b3:a3:96:de:04:83:84:d0:54:c4:8a:b9: d8:cf:43:c0:17:a3:17:2b:17:bc:dd:30:97:fb:74:00:a8:f2: 25:c2:2b:c4:f0:0d:9b:2f:64:94:8f:4f:6c:7b:e8:06:ae:d5: f3:8a:11:58:e2:dc:8d:51:33:5d:f7:73:f5:c6:79:d9:bc:b0: c1:7b:f3:90:c8:08:34:27:77:08:3f:1a:7b:f8:17:02:72:a6: 7a:96:30:b0:9f:68:11:a7:f7:4f:42:3e:ba:65:4f:0f:85:81: 87:cb:25:8a:f0:fb:15:70:39:26:62:59:7b:dd:4e:04:5e:33: e6:76:07:44 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsvnn0FSSyZi8IDk6ITJNrsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMzMWU3Nzg0ZjYwYWM4ZDk2OWI4MWNmNTIzMWNkOWRjMDg3 Y2VkMzIwHhcNMjUxMjE4MDQwMTE0WhcNMjUxMjE5MDQwMTE0WjAzMTEwLwYDVQQD Eyg5YTY3OGFlMDkwMDA5MTU5MDc4YWFhNGViOTljMmFmOTMyOGQ0ZGFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr0lqjjI5AtHWznDhNU2doHVE+qZx pXy4zvW+OaPfAca8DGP/RO6aspgqvB5lhXXBVRf1UpqeXxqySTHmjc3xiA22fL3x Ya6WwoipKv9j4GnEjRggok6Pu0lp4s0YS897Rhk7RkmG4Z9KfZ2IIEctp40wIF+l UM9sXg8yVUO/GL1sGnrO2qxwUQ2yYWoVTlrSN0BcXGdUhZjmiPHFlZqijTl5k8rZ 0ZnKs5KmFfN+FszgScUcePVwDtx7yrd2E9WEzsnu6YvkkAPiokCn/4EJcS72MbYE M1jWUYEb8oYdkqPqElE1azzpaceMqX4CHVkuAysiQ6AffwCUs/rMomOcCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJpniuCQAJFZB4qqTrmcKvkyjU2rMB8GA1UdIwQY MBaAFDMed4T2CsjZabgc9SMc2dwIfO0yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTXg1M2hQWUt5TmxwdUJ6MUl4elozQWg4N1RJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi9lMDkyNWUtNDdiZi00OTA3LWJjYmMt ZmQ5ZjM2YThiYTZlLzEvTXg1M2hQWUt5TmxwdUJ6MUl4elozQWg4N1RJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Zi9lMDkyNWUtNDdiZi00OTA3LWJjYmMtZmQ5ZjM2YThiYTZl LzEvTXg1M2hQWUt5TmxwdUJ6MUl4elozQWg4N1RJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAumh/NB6Q 3pp5zCmbxNXW0lPuWPT/aQLqA7uVxgAsmmhOC/7QgxykfMBYDPzlRrn3Ns6c6Tbu +2B/pnjPnPfckriuqAehhsQ1q83LSdF8kqQG139rT9v+nrncucJ2TX+UuvMhkxzn jX9zr1josftUK2sytDGwhi/5TRDDL4yabkrnC6RAs6OW3gSDhNBUxIq52M9DwBej FysXvN0wl/t0AKjyJcIrxPANmy9klI9PbHvoBq7V84oRWOLcjVEzXfdz9cZ52byw wXvzkMgINCd3CD8ae/gXAnKmepYwsJ9oEaf3T0I+umVPD4WBh8slivD7FXA5JmJZ e91OBF4z5nYHRA== -----END CERTIFICATE-----Generated at Thu Dec 18 07:58:21 2025 by rpki-client