This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/29a3d8-fb46-40c5-8f36-371b16e51790/1/MTie9MqM5oHWuD4L5MiGo6dFYCg.mft File: MTie9MqM5oHWuD4L5MiGo6dFYCg.mft (raw, json) Hash identifier: xdHNuxfCgLuqBBe1ugIrkeD6tu0v1ATo+g1RUPOmVAU= Subject key identifier: 42:27:57:56:D8:5B:27:56:D1:2E:2B:7B:46:F0:88:8F:60:A9:ED:FA Authority key identifier: 31:38:9E:F4:CA:8C:E6:81:D6:B8:3E:0B:E4:C8:86:A3:A7:45:60:28 Certificate issuer: /CN=31389ef4ca8ce681d6b83e0be4c886a3a7456028 Certificate serial: 019B1BAB37335DBD8D7291DDB03A04C47DE0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MTie9MqM5oHWuD4L5MiGo6dFYCg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/29a3d8-fb46-40c5-8f36-371b16e51790/1/MTie9MqM5oHWuD4L5MiGo6dFYCg.mft Manifest number: DE Signing time: Sun 14 Dec 2025 07:02:44 +0000 Manifest this update: Sun 14 Dec 2025 07:02:44 +0000 Manifest next update: Mon 15 Dec 2025 07:02:44 +0000 Files and hashes: 1: MTie9MqM5oHWuD4L5MiGo6dFYCg.crl (hash: XfS8pyXCof+lZQob0mhwYeTwYtwUJVmlftOhN+lmx5A=) 2: QhmGkcRygSZ5ihQLsVW91SIUW9s.roa (hash: YN0HNJUwhKmoGvr9Z1SSlKCl4sVnuUTF191h7YfoZmg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/29a3d8-fb46-40c5-8f36-371b16e51790/1/MTie9MqM5oHWuD4L5MiGo6dFYCg.crl rsync://rpki.ripe.net/repository/DEFAULT/74/29a3d8-fb46-40c5-8f36-371b16e51790/1/MTie9MqM5oHWuD4L5MiGo6dFYCg.mft rsync://rpki.ripe.net/repository/DEFAULT/MTie9MqM5oHWuD4L5MiGo6dFYCg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1b:ab:37:33:5d:bd:8d:72:91:dd:b0:3a:04:c4:7d:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31389ef4ca8ce681d6b83e0be4c886a3a7456028 Validity Not Before: Dec 14 07:02:44 2025 GMT Not After : Dec 15 07:02:44 2025 GMT Subject: CN=42275756d85b2756d12e2b7b46f0888f60a9edfa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:f3:a1:2e:26:37:17:86:25:f2:c5:ad:d4:02: 54:12:0d:ce:a9:ba:50:11:96:ed:15:1f:6c:b5:b6: 66:e1:40:c1:8d:21:ea:20:47:5e:e3:75:7b:e8:d3: 7f:f7:23:45:62:fc:f0:9a:bc:92:df:51:f1:e3:e0: 2a:70:30:3f:8a:e3:81:9c:b7:2a:94:88:a3:fa:2e: 23:72:26:87:29:2e:94:b0:f3:ab:cc:6d:6b:36:27: c9:ea:81:f3:74:1f:53:9f:9a:e6:b4:e1:46:53:47: 6f:91:f5:4d:68:07:16:4c:1e:24:f4:6f:93:6d:0c: 50:a8:a0:de:47:9c:b4:46:ce:ab:f7:f7:d0:af:49: f4:6e:e7:5f:70:f2:35:e3:42:e0:e8:4c:74:92:e8: 9c:f6:17:f5:22:e0:42:aa:98:36:f7:42:9e:4e:cb: 02:9d:05:cc:a6:88:4c:10:fd:38:c7:bb:cb:22:08: a8:15:29:80:e4:00:f1:92:86:d7:64:3b:ad:d9:be: f0:2c:7e:35:da:85:b5:f8:04:8c:00:05:77:98:d0: 5a:9e:85:54:39:24:11:84:4f:22:67:f8:65:42:92: c8:f9:8f:65:22:58:9c:b5:03:19:98:af:1a:b6:8f: 9a:cb:56:d2:18:2b:7e:b1:47:a4:1d:94:e3:7f:83: dd:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:27:57:56:D8:5B:27:56:D1:2E:2B:7B:46:F0:88:8F:60:A9:ED:FA X509v3 Authority Key Identifier: keyid:31:38:9E:F4:CA:8C:E6:81:D6:B8:3E:0B:E4:C8:86:A3:A7:45:60:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MTie9MqM5oHWuD4L5MiGo6dFYCg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/29a3d8-fb46-40c5-8f36-371b16e51790/1/MTie9MqM5oHWuD4L5MiGo6dFYCg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/74/29a3d8-fb46-40c5-8f36-371b16e51790/1/MTie9MqM5oHWuD4L5MiGo6dFYCg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:ab:1b:d0:11:a6:95:0e:a7:91:86:3b:27:5f:98:a3:7f:66: fb:03:b2:ca:8c:36:60:88:b5:2d:56:0e:b5:1d:35:2a:af:84: 41:c2:e7:e1:6b:c5:23:0a:52:19:ac:82:1f:bf:8f:b6:91:a4: ce:57:bc:1f:08:a1:f3:3f:a8:d2:ed:da:4b:fe:69:bf:bf:ca: e2:d8:0a:33:db:d4:9c:fa:83:a2:2b:d7:de:e3:1d:ca:61:3a: bf:3f:f9:81:ef:5e:35:e7:77:93:aa:8f:0a:49:cc:4c:af:8d: 46:46:53:17:1e:c4:cd:d3:ae:e6:05:22:63:76:94:bc:9d:8d: f1:47:98:14:db:2d:10:a2:d9:45:25:70:9c:05:ed:97:5f:f2: 02:1a:ac:c2:66:18:90:10:0f:fe:f4:98:57:02:8d:8d:62:d7: 9f:d7:3d:c2:e5:3f:15:ee:14:d3:46:9e:70:1e:64:10:43:71: a1:a9:26:dd:b3:e8:ee:f5:6e:f6:9c:43:ba:49:56:31:e9:5a: c5:b3:91:43:13:b4:44:12:7f:b0:fc:de:dd:e5:1e:87:0c:01: 35:37:65:cf:45:19:a0:03:10:94:3c:0a:ce:5d:a6:bb:84:1f: 16:eb:95:00:dc:4b:3a:7a:8c:a6:7f:1a:d2:f1:86:01:e7:5d: 34:17:49:df -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsbqzczXb2NcpHdsDoExH3gMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxMzg5ZWY0Y2E4Y2U2ODFkNmI4M2UwYmU0Yzg4NmEzYTc0 NTYwMjgwHhcNMjUxMjE0MDcwMjQ0WhcNMjUxMjE1MDcwMjQ0WjAzMTEwLwYDVQQD Eyg0MjI3NTc1NmQ4NWIyNzU2ZDEyZTJiN2I0NmYwODg4ZjYwYTllZGZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnPOhLiY3F4Yl8sWt1AJUEg3OqbpQ EZbtFR9stbZm4UDBjSHqIEde43V76NN/9yNFYvzwmryS31Hx4+AqcDA/iuOBnLcq lIij+i4jciaHKS6UsPOrzG1rNifJ6oHzdB9Tn5rmtOFGU0dvkfVNaAcWTB4k9G+T bQxQqKDeR5y0Rs6r9/fQr0n0budfcPI140Lg6Ex0kuic9hf1IuBCqpg290KeTssC nQXMpohMEP04x7vLIgioFSmA5ADxkobXZDut2b7wLH412oW1+ASMAAV3mNBanoVU OSQRhE8iZ/hlQpLI+Y9lIlictQMZmK8ato+ay1bSGCt+sUekHZTjf4PddwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEInV1bYWydW0S4re0bwiI9gqe36MB8GA1UdIwQY MBaAFDE4nvTKjOaB1rg+C+TIhqOnRWAoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTVRpZTlNcU01b0hXdUQ0TDVNaUdvNmRGWUNnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC8yOWEzZDgtZmI0Ni00MGM1LThmMzYt MzcxYjE2ZTUxNzkwLzEvTVRpZTlNcU01b0hXdUQ0TDVNaUdvNmRGWUNnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NC8yOWEzZDgtZmI0Ni00MGM1LThmMzYtMzcxYjE2ZTUxNzkw LzEvTVRpZTlNcU01b0hXdUQ0TDVNaUdvNmRGWUNnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaKsb0BGm lQ6nkYY7J1+Yo39m+wOyyow2YIi1LVYOtR01Kq+EQcLn4WvFIwpSGayCH7+PtpGk zle8Hwih8z+o0u3aS/5pv7/K4tgKM9vUnPqDoivX3uMdymE6vz/5ge9eNed3k6qP CknMTK+NRkZTFx7EzdOu5gUiY3aUvJ2N8UeYFNstEKLZRSVwnAXtl1/yAhqswmYY kBAP/vSYVwKNjWLXn9c9wuU/Fe4U00aecB5kEENxoakm3bPo7vVu9pxDuklWMela xbORQxO0RBJ/sPze3eUehwwBNTdlz0UZoAMQlDwKzl2mu4QfFuuVANxLOnqMpn8a 0vGGAeddNBdJ3w== -----END CERTIFICATE-----Generated at Sun Dec 14 15:01:14 2025 by rpki-client