This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/b54e9c-ba92-4e8b-a09e-4f9332a2a71e/1/MWKbwb0al4TaHlsLjV4I4r5n3kA.mft File: MWKbwb0al4TaHlsLjV4I4r5n3kA.mft (raw, json) Hash identifier: lm8tisuTwJDkDJmbdoEumqgiI3uGSYPDjqp4JJ9FWsE= Subject key identifier: F2:38:FE:EA:1E:40:CD:71:F0:33:5E:96:34:78:C8:49:79:AE:64:CC Authority key identifier: 31:62:9B:C1:BD:1A:97:84:DA:1E:5B:0B:8D:5E:08:E2:BE:67:DE:40 Certificate issuer: /CN=31629bc1bd1a9784da1e5b0b8d5e08e2be67de40 Certificate serial: 019B5A1AD7372170D8F055F45A44CBD2531E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MWKbwb0al4TaHlsLjV4I4r5n3kA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/b54e9c-ba92-4e8b-a09e-4f9332a2a71e/1/MWKbwb0al4TaHlsLjV4I4r5n3kA.mft Manifest number: AC Signing time: Fri 26 Dec 2025 10:01:06 +0000 Manifest this update: Fri 26 Dec 2025 10:01:06 +0000 Manifest next update: Sat 27 Dec 2025 10:01:06 +0000 Files and hashes: 1: MWKbwb0al4TaHlsLjV4I4r5n3kA.crl (hash: E80suIi6Y9cKd4jjljjZTOF422838yUVQ0rEnJ/9y0c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/b54e9c-ba92-4e8b-a09e-4f9332a2a71e/1/MWKbwb0al4TaHlsLjV4I4r5n3kA.crl rsync://rpki.ripe.net/repository/DEFAULT/64/b54e9c-ba92-4e8b-a09e-4f9332a2a71e/1/MWKbwb0al4TaHlsLjV4I4r5n3kA.mft rsync://rpki.ripe.net/repository/DEFAULT/MWKbwb0al4TaHlsLjV4I4r5n3kA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:1a:d7:37:21:70:d8:f0:55:f4:5a:44:cb:d2:53:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31629bc1bd1a9784da1e5b0b8d5e08e2be67de40 Validity Not Before: Dec 26 10:01:06 2025 GMT Not After : Dec 27 10:01:06 2025 GMT Subject: CN=f238feea1e40cd71f0335e963478c84979ae64cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:3a:20:ac:78:7d:7b:5b:20:ca:74:a0:02:47: 22:62:52:43:4a:4c:d7:0a:f9:23:c4:b6:1b:f9:27: 84:59:ed:a0:ac:8c:88:79:cc:5d:6d:d5:ea:2f:63: 43:da:f5:ec:46:1b:a8:e8:e5:83:a2:58:ef:db:72: a3:b2:24:52:6a:fe:6d:71:e1:44:54:a7:63:19:d4: 3c:ca:bb:60:5e:e6:62:82:26:d3:dd:02:86:77:70: 7b:35:a6:37:e7:44:20:ed:4b:a6:50:67:73:95:20: ce:df:69:e4:a0:05:24:72:e6:46:8f:05:07:99:c0: 11:b6:4e:b8:f8:8f:20:6a:bb:b2:35:36:e0:6d:7f: c4:1b:fd:2e:71:4e:c4:d6:dc:35:79:e0:bf:05:a4: 5c:63:eb:19:70:37:9e:87:e2:b9:55:ff:8d:3d:a2: e5:ef:91:05:29:5f:fd:ed:66:3a:3e:ea:4e:a0:9d: 47:bd:83:51:bd:0d:3e:13:51:00:70:52:9a:0c:57: e7:da:05:87:12:8f:57:1a:7b:2c:d9:8f:64:8d:cf: af:9d:22:3b:ff:21:d5:aa:1d:c8:81:89:73:0a:05: 7e:de:be:e5:f7:b2:d4:d8:4b:26:b0:b0:3c:71:98: 01:ff:60:20:be:84:1c:b2:ca:8e:f5:b0:d2:dc:99: 67:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:38:FE:EA:1E:40:CD:71:F0:33:5E:96:34:78:C8:49:79:AE:64:CC X509v3 Authority Key Identifier: keyid:31:62:9B:C1:BD:1A:97:84:DA:1E:5B:0B:8D:5E:08:E2:BE:67:DE:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MWKbwb0al4TaHlsLjV4I4r5n3kA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/b54e9c-ba92-4e8b-a09e-4f9332a2a71e/1/MWKbwb0al4TaHlsLjV4I4r5n3kA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/b54e9c-ba92-4e8b-a09e-4f9332a2a71e/1/MWKbwb0al4TaHlsLjV4I4r5n3kA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:5d:07:16:3e:e7:3a:fd:f7:f8:c3:1d:d9:8b:0e:95:cd:28: 96:84:4b:ea:ef:26:93:4a:2b:64:c1:79:c7:22:47:ac:cd:9f: 61:36:7f:2a:4d:09:92:18:70:ad:07:4b:5e:92:ee:da:9f:7c: 9f:8d:d8:13:96:a9:ac:79:6b:4e:41:42:18:48:8f:e9:d8:f8: a7:a5:22:a5:f4:25:60:d9:72:77:9c:c1:53:f6:a4:e9:1c:da: 56:b7:a0:71:49:ef:ac:54:44:fe:6b:d6:83:c3:9e:4e:a7:cc: 00:09:65:b2:a3:8d:aa:8d:7b:5a:e4:44:13:5f:79:ed:62:72: f8:44:c8:e3:ab:c7:42:20:4e:ac:dd:e4:8b:d9:42:dd:d9:a4: ec:d8:b4:37:91:61:41:f5:18:91:e0:6d:b5:f3:0c:03:a9:13: 93:e4:03:d9:2d:85:b8:bb:0f:e8:99:ff:13:f3:e1:c8:20:62: 66:1f:4a:ea:28:75:51:f6:aa:d3:53:a1:4b:c6:a6:cb:f7:5a: 85:82:0e:ca:b8:89:5b:f7:8f:b4:39:3f:90:15:be:e4:cb:dc: 79:f1:9e:fd:a2:d3:7f:4c:91:c4:02:82:28:24:5d:64:1f:e0: 2b:90:f5:9e:e3:7a:b8:03:31:e6:d7:b9:e8:6b:22:ec:93:14: f6:59:f4:03 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaGtc3IXDY8FX0WkTL0lMeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxNjI5YmMxYmQxYTk3ODRkYTFlNWIwYjhkNWUwOGUyYmU2 N2RlNDAwHhcNMjUxMjI2MTAwMTA2WhcNMjUxMjI3MTAwMTA2WjAzMTEwLwYDVQQD EyhmMjM4ZmVlYTFlNDBjZDcxZjAzMzVlOTYzNDc4Yzg0OTc5YWU2NGNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwDogrHh9e1sgynSgAkciYlJDSkzX CvkjxLYb+SeEWe2grIyIecxdbdXqL2ND2vXsRhuo6OWDoljv23KjsiRSav5tceFE VKdjGdQ8yrtgXuZigibT3QKGd3B7NaY350Qg7UumUGdzlSDO32nkoAUkcuZGjwUH mcARtk64+I8garuyNTbgbX/EG/0ucU7E1tw1eeC/BaRcY+sZcDeeh+K5Vf+NPaLl 75EFKV/97WY6PupOoJ1HvYNRvQ0+E1EAcFKaDFfn2gWHEo9XGnss2Y9kjc+vnSI7 /yHVqh3IgYlzCgV+3r7l97LU2EsmsLA8cZgB/2AgvoQcssqO9bDS3JlnbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPI4/uoeQM1x8DNeljR4yEl5rmTMMB8GA1UdIwQY MBaAFDFim8G9GpeE2h5bC41eCOK+Z95AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTVdLYndiMGFsNFRhSGxzTGpWNEk0cjVuM2tBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC9iNTRlOWMtYmE5Mi00ZThiLWEwOWUt NGY5MzMyYTJhNzFlLzEvTVdLYndiMGFsNFRhSGxzTGpWNEk0cjVuM2tBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC9iNTRlOWMtYmE5Mi00ZThiLWEwOWUtNGY5MzMyYTJhNzFl LzEvTVdLYndiMGFsNFRhSGxzTGpWNEk0cjVuM2tBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb10HFj7n Ov33+MMd2YsOlc0oloRL6u8mk0orZMF5xyJHrM2fYTZ/Kk0JkhhwrQdLXpLu2p98 n43YE5aprHlrTkFCGEiP6dj4p6UipfQlYNlyd5zBU/ak6RzaVregcUnvrFRE/mvW g8OeTqfMAAllsqONqo17WuREE1957WJy+ETI46vHQiBOrN3ki9lC3dmk7Ni0N5Fh QfUYkeBttfMMA6kTk+QD2S2FuLsP6Jn/E/PhyCBiZh9K6ih1Ufaq01OhS8amy/da hYIOyriJW/ePtDk/kBW+5MvcefGe/aLTf0yRxAKCKCRdZB/gK5D1nuN6uAMx5te5 6Gsi7JMU9ln0Aw== -----END CERTIFICATE-----Generated at Fri Dec 26 15:45:06 2025 by rpki-client