This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/c5c233-b478-44bc-ae9e-48bc8cb3cdaa/1/mpYaEhxSAFTfTOWeVZKsaLBQa-8.mft File: mpYaEhxSAFTfTOWeVZKsaLBQa-8.mft (raw, json) Hash identifier: fEARtRpEXZhpydu6qDiPCu1WNhKuG83hXXNQ7D8+2rk= Subject key identifier: 16:79:CF:6A:C3:F6:11:60:60:DE:BE:59:A7:FD:B6:25:0C:B1:79:43 Authority key identifier: 9A:96:1A:12:1C:52:00:54:DF:4C:E5:9E:55:92:AC:68:B0:50:6B:EF Certificate issuer: /CN=9a961a121c520054df4ce59e5592ac68b0506bef Certificate serial: 019B59E39EF3C871B258AF5AEF3E5B87316A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mpYaEhxSAFTfTOWeVZKsaLBQa-8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/c5c233-b478-44bc-ae9e-48bc8cb3cdaa/1/mpYaEhxSAFTfTOWeVZKsaLBQa-8.mft Manifest number: 078C Signing time: Fri 26 Dec 2025 09:00:48 +0000 Manifest this update: Fri 26 Dec 2025 09:00:48 +0000 Manifest next update: Sat 27 Dec 2025 09:00:48 +0000 Files and hashes: 1: mpYaEhxSAFTfTOWeVZKsaLBQa-8.crl (hash: tGOJpk8PQPheXciNtiozVchBWbX7lVlpbQtf6XojP8M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/c5c233-b478-44bc-ae9e-48bc8cb3cdaa/1/mpYaEhxSAFTfTOWeVZKsaLBQa-8.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/c5c233-b478-44bc-ae9e-48bc8cb3cdaa/1/mpYaEhxSAFTfTOWeVZKsaLBQa-8.mft rsync://rpki.ripe.net/repository/DEFAULT/mpYaEhxSAFTfTOWeVZKsaLBQa-8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:e3:9e:f3:c8:71:b2:58:af:5a:ef:3e:5b:87:31:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a961a121c520054df4ce59e5592ac68b0506bef Validity Not Before: Dec 26 09:00:48 2025 GMT Not After : Dec 27 09:00:48 2025 GMT Subject: CN=1679cf6ac3f6116060debe59a7fdb6250cb17943 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:d9:e5:5c:c7:2a:bf:ea:04:77:82:7b:bc:0e: 6b:de:7b:25:83:14:e6:26:f6:25:af:30:8b:f3:23: 40:61:2d:1e:3b:29:d6:64:91:c7:d8:a5:e2:71:ad: 82:d3:d5:1f:d5:c6:cf:e0:01:b9:39:42:3b:75:7c: fa:d3:e4:34:42:a7:8b:79:f9:66:af:6d:7e:f4:15: 5a:0e:7e:f3:47:f7:15:12:49:af:b7:13:a6:ac:de: d5:2b:f0:af:f7:38:5b:3b:fd:36:b2:1a:53:6b:fd: 76:ac:ca:7f:26:5d:7a:c5:6b:49:92:5b:11:77:3c: 3c:5c:0e:48:0a:b7:6b:b0:16:0b:f2:23:7b:4c:19: eb:57:a9:01:cc:b4:85:9e:6a:42:d0:06:db:74:59: f4:d7:d9:2e:04:d5:a9:43:ae:0a:65:26:d8:89:e6: 6f:b1:cb:61:57:4e:77:04:79:fe:71:ee:26:02:38: ef:5b:9d:5c:9f:3d:15:76:4d:b7:62:e4:b2:fd:6d: 13:f9:9d:c6:27:c3:bf:ea:af:6e:63:f5:54:63:6c: 93:fc:a2:f4:78:ec:c8:6a:71:83:74:c8:35:42:2e: c3:4b:8a:22:bd:eb:8e:76:15:79:51:5d:c7:c8:e5: f5:4d:f0:8b:1d:fe:41:e0:2a:c8:db:e7:48:18:e3: 0c:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:79:CF:6A:C3:F6:11:60:60:DE:BE:59:A7:FD:B6:25:0C:B1:79:43 X509v3 Authority Key Identifier: keyid:9A:96:1A:12:1C:52:00:54:DF:4C:E5:9E:55:92:AC:68:B0:50:6B:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mpYaEhxSAFTfTOWeVZKsaLBQa-8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/c5c233-b478-44bc-ae9e-48bc8cb3cdaa/1/mpYaEhxSAFTfTOWeVZKsaLBQa-8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/c5c233-b478-44bc-ae9e-48bc8cb3cdaa/1/mpYaEhxSAFTfTOWeVZKsaLBQa-8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:1e:ba:18:db:a4:d0:1e:ba:5b:64:9e:ca:c1:1e:b9:92:06: 27:db:90:7f:28:08:5b:39:37:a1:c2:37:fe:74:f7:ff:1b:89: 24:03:82:d8:a6:15:ab:5d:7a:23:86:d2:b1:6c:c6:36:c4:cd: d5:24:14:bf:09:99:42:29:ad:18:c7:61:eb:06:4d:c9:95:25: c2:a2:a4:07:81:cc:82:dd:05:50:25:c5:34:4e:4f:0b:40:10: ba:ab:e2:e6:ee:41:f3:8b:7a:a8:5a:0d:21:cd:1f:a3:9b:9e: eb:3c:9c:32:6d:13:94:a9:cd:26:02:b7:12:a4:6a:06:7d:2e: 3b:12:57:0a:28:07:60:24:c7:74:04:7f:f9:cb:a1:80:d4:f3: 26:cb:8e:b4:c0:c5:c1:50:02:cd:0a:6c:d7:89:b9:8b:0d:30: 9b:a2:3d:25:c6:98:18:0e:58:e4:fe:2b:81:34:2c:1b:20:33: af:c3:04:2d:bc:21:e8:56:14:2e:ce:e8:11:3b:e6:ed:6c:89: 61:31:f3:21:8f:74:f1:7d:c8:4a:c8:4f:14:88:01:b8:56:ca: 52:7f:bf:fe:b1:4c:eb:58:2a:6a:91:d2:35:d9:8b:49:d3:02: 5f:33:91:37:6e:6a:48:68:d6:37:7e:10:3c:52:35:0e:af:13: 83:67:bc:a3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZ457zyHGyWK9a7z5bhzFqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhOTYxYTEyMWM1MjAwNTRkZjRjZTU5ZTU1OTJhYzY4YjA1 MDZiZWYwHhcNMjUxMjI2MDkwMDQ4WhcNMjUxMjI3MDkwMDQ4WjAzMTEwLwYDVQQD EygxNjc5Y2Y2YWMzZjYxMTYwNjBkZWJlNTlhN2ZkYjYyNTBjYjE3OTQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApdnlXMcqv+oEd4J7vA5r3nslgxTm JvYlrzCL8yNAYS0eOynWZJHH2KXica2C09Uf1cbP4AG5OUI7dXz60+Q0QqeLeflm r21+9BVaDn7zR/cVEkmvtxOmrN7VK/Cv9zhbO/02shpTa/12rMp/Jl16xWtJklsR dzw8XA5ICrdrsBYL8iN7TBnrV6kBzLSFnmpC0AbbdFn019kuBNWpQ64KZSbYieZv scthV053BHn+ce4mAjjvW51cnz0Vdk23YuSy/W0T+Z3GJ8O/6q9uY/VUY2yT/KL0 eOzIanGDdMg1Qi7DS4oiveuOdhV5UV3HyOX1TfCLHf5B4CrI2+dIGOMMDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBZ5z2rD9hFgYN6+Waf9tiUMsXlDMB8GA1UdIwQY MBaAFJqWGhIcUgBU30zlnlWSrGiwUGvvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbXBZYUVoeFNBRlRmVE9XZVZaS3NhTEJRYS04LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS9jNWMyMzMtYjQ3OC00NGJjLWFlOWUt NDhiYzhjYjNjZGFhLzEvbXBZYUVoeFNBRlRmVE9XZVZaS3NhTEJRYS04Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS9jNWMyMzMtYjQ3OC00NGJjLWFlOWUtNDhiYzhjYjNjZGFh LzEvbXBZYUVoeFNBRlRmVE9XZVZaS3NhTEJRYS04LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlx66GNuk 0B66W2SeysEeuZIGJ9uQfygIWzk3ocI3/nT3/xuJJAOC2KYVq116I4bSsWzGNsTN 1SQUvwmZQimtGMdh6wZNyZUlwqKkB4HMgt0FUCXFNE5PC0AQuqvi5u5B84t6qFoN Ic0fo5ue6zycMm0TlKnNJgK3EqRqBn0uOxJXCigHYCTHdAR/+cuhgNTzJsuOtMDF wVACzQps14m5iw0wm6I9JcaYGA5Y5P4rgTQsGyAzr8MELbwh6FYULs7oETvm7WyJ YTHzIY908X3ISshPFIgBuFbKUn+//rFM61gqapHSNdmLSdMCXzORN25qSGjWN34Q PFI1Dq8Tg2e8ow== -----END CERTIFICATE-----Generated at Fri Dec 26 15:44:26 2025 by rpki-client