This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/bd3880-fc26-4121-b2e4-e6d6e8aebef8/1/MC0R6FJhV0AHazKBuK_w-sXKLzM.mft File: MC0R6FJhV0AHazKBuK_w-sXKLzM.mft (raw, json) Hash identifier: 6HbaJqpDq4XsfYiDOkG2AntLghmZCaPegAw4sXsJwUk= Subject key identifier: 31:5B:F8:83:5A:A3:2D:49:70:CF:C4:A0:8A:4A:70:17:84:54:CA:63 Authority key identifier: 30:2D:11:E8:52:61:57:40:07:6B:32:81:B8:AF:F0:FA:C5:CA:2F:33 Certificate issuer: /CN=302d11e852615740076b3281b8aff0fac5ca2f33 Certificate serial: 019B0E9357AEB2D47B4842A18E2E249F4566 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MC0R6FJhV0AHazKBuK_w-sXKLzM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/bd3880-fc26-4121-b2e4-e6d6e8aebef8/1/MC0R6FJhV0AHazKBuK_w-sXKLzM.mft Manifest number: 1285 Signing time: Thu 11 Dec 2025 18:01:35 +0000 Manifest this update: Thu 11 Dec 2025 18:01:35 +0000 Manifest next update: Fri 12 Dec 2025 18:01:35 +0000 Files and hashes: 1: AV_h3jqDqBv8GTowG5NZT83IRVM.roa (hash: 7I92tp7yKWv9nRYHQ0pF0g4dedaK+rFfmKLNQHVUe28=) 2: MC0R6FJhV0AHazKBuK_w-sXKLzM.crl (hash: WFenxT/yXqcRTU7Gf99MRXSIP9c0dZ9PfPBCGy78Iqs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/bd3880-fc26-4121-b2e4-e6d6e8aebef8/1/MC0R6FJhV0AHazKBuK_w-sXKLzM.crl rsync://rpki.ripe.net/repository/DEFAULT/82/bd3880-fc26-4121-b2e4-e6d6e8aebef8/1/MC0R6FJhV0AHazKBuK_w-sXKLzM.mft rsync://rpki.ripe.net/repository/DEFAULT/MC0R6FJhV0AHazKBuK_w-sXKLzM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 18:01:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:93:57:ae:b2:d4:7b:48:42:a1:8e:2e:24:9f:45:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=302d11e852615740076b3281b8aff0fac5ca2f33 Validity Not Before: Dec 11 18:01:35 2025 GMT Not After : Dec 12 18:01:35 2025 GMT Subject: CN=315bf8835aa32d4970cfc4a08a4a70178454ca63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:cb:96:f4:8a:3e:fe:ea:30:45:bb:c8:c9:31: 23:ee:a0:b6:6c:db:d5:cc:4a:fb:3f:b5:9a:02:23: 55:a2:01:20:9e:3e:e2:4a:62:1f:4e:0c:de:3b:ad: b0:aa:62:86:a8:c7:b5:93:07:16:88:5b:9f:b5:39: 26:c5:bf:0c:2d:bf:b1:ac:b4:46:60:a1:7a:e6:f9: ed:ea:83:7d:3b:6e:5c:64:af:87:d8:7f:55:ec:a0: 6c:77:86:c7:f2:ab:ff:35:12:1e:4f:7a:40:92:71: 0e:79:95:37:47:cc:61:2a:32:04:b6:74:90:ba:ae: 9d:39:15:82:39:80:7d:7c:dd:df:3d:c2:e6:0f:c1: c8:d5:31:fd:c0:9c:34:46:26:65:93:9b:c0:70:59: e1:25:94:8f:30:5c:ca:eb:21:99:df:4d:bb:9e:d1: 48:2c:19:00:69:43:c7:28:b7:a5:78:7a:7d:cd:cc: 1e:d7:7a:b8:f7:45:8b:7b:f1:ea:9c:6d:22:0b:82: 75:bf:ad:b3:fc:92:1c:8a:6b:bf:ee:e4:8d:b0:ff: 9b:6f:01:b9:12:86:98:f0:6b:ef:d7:d7:c5:e3:42: 65:bd:4d:4e:42:19:17:af:ba:60:b0:be:b9:af:4f: e3:75:f3:a6:d4:99:ad:eb:72:ae:6b:8e:91:5f:cf: d6:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:5B:F8:83:5A:A3:2D:49:70:CF:C4:A0:8A:4A:70:17:84:54:CA:63 X509v3 Authority Key Identifier: keyid:30:2D:11:E8:52:61:57:40:07:6B:32:81:B8:AF:F0:FA:C5:CA:2F:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MC0R6FJhV0AHazKBuK_w-sXKLzM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/bd3880-fc26-4121-b2e4-e6d6e8aebef8/1/MC0R6FJhV0AHazKBuK_w-sXKLzM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/82/bd3880-fc26-4121-b2e4-e6d6e8aebef8/1/MC0R6FJhV0AHazKBuK_w-sXKLzM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:2a:b5:96:53:7b:06:02:36:df:c9:b1:af:26:b3:0e:0a:b9: da:68:49:f4:22:3b:11:8a:55:02:12:fc:a2:5b:18:2a:ff:af: de:3b:6a:a3:bd:1b:96:51:b2:4f:4d:bb:a9:ec:59:eb:fd:00: 1f:db:fb:a8:29:8e:a9:f1:31:a0:92:7b:4e:d3:6f:ad:8c:bf: 2f:16:cc:26:70:f1:f1:3e:78:43:d8:c3:dd:14:96:6d:67:d6: a9:2f:fc:2a:18:f2:a1:0b:c7:10:33:a5:d7:d4:b8:f3:68:b3: 41:59:1a:68:da:04:2b:d7:40:00:6d:80:44:90:75:f4:51:93: e3:f4:f5:46:a0:d4:4f:43:db:8b:dd:45:14:3c:c4:6e:d6:c3: 3a:6d:f6:b4:af:fa:90:74:0b:52:30:39:8c:41:1d:5b:16:10: 83:93:4c:c8:2f:6c:f0:03:12:12:42:59:c7:b6:f5:02:fb:b9: e1:9f:d9:66:7b:bc:84:b7:59:76:36:bc:f4:3c:2d:41:1e:8c: 71:e4:f0:78:f6:12:fa:46:87:67:7a:5a:53:a8:27:3f:4b:2f: 01:d0:0f:a1:d8:8b:61:04:86:3b:04:22:3e:9b:a1:e6:75:f1: 4b:1e:24:43:d9:4f:96:92:92:58:73:31:16:d7:55:60:45:82: c6:28:ae:ca -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOk1eustR7SEKhji4kn0VmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwMmQxMWU4NTI2MTU3NDAwNzZiMzI4MWI4YWZmMGZhYzVj YTJmMzMwHhcNMjUxMjExMTgwMTM1WhcNMjUxMjEyMTgwMTM1WjAzMTEwLwYDVQQD EygzMTViZjg4MzVhYTMyZDQ5NzBjZmM0YTA4YTRhNzAxNzg0NTRjYTYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl8uW9Io+/uowRbvIyTEj7qC2bNvV zEr7P7WaAiNVogEgnj7iSmIfTgzeO62wqmKGqMe1kwcWiFuftTkmxb8MLb+xrLRG YKF65vnt6oN9O25cZK+H2H9V7KBsd4bH8qv/NRIeT3pAknEOeZU3R8xhKjIEtnSQ uq6dORWCOYB9fN3fPcLmD8HI1TH9wJw0RiZlk5vAcFnhJZSPMFzK6yGZ3027ntFI LBkAaUPHKLeleHp9zcwe13q490WLe/HqnG0iC4J1v62z/JIcimu/7uSNsP+bbwG5 EoaY8Gvv19fF40JlvU1OQhkXr7pgsL65r0/jdfOm1Jmt63Kua46RX8/WqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDFb+INaoy1JcM/EoIpKcBeEVMpjMB8GA1UdIwQY MBaAFDAtEehSYVdAB2sygbiv8PrFyi8zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTUMwUjZGSmhWMEFIYXpLQnVLX3ctc1hLTHpNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi9iZDM4ODAtZmMyNi00MTIxLWIyZTQt ZTZkNmU4YWViZWY4LzEvTUMwUjZGSmhWMEFIYXpLQnVLX3ctc1hLTHpNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Mi9iZDM4ODAtZmMyNi00MTIxLWIyZTQtZTZkNmU4YWViZWY4 LzEvTUMwUjZGSmhWMEFIYXpLQnVLX3ctc1hLTHpNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaCq1llN7 BgI238mxryazDgq52mhJ9CI7EYpVAhL8olsYKv+v3jtqo70bllGyT027qexZ6/0A H9v7qCmOqfExoJJ7TtNvrYy/LxbMJnDx8T54Q9jD3RSWbWfWqS/8KhjyoQvHEDOl 19S482izQVkaaNoEK9dAAG2ARJB19FGT4/T1RqDUT0Pbi91FFDzEbtbDOm32tK/6 kHQLUjA5jEEdWxYQg5NMyC9s8AMSEkJZx7b1Avu54Z/ZZnu8hLdZdja89DwtQR6M ceTwePYS+kaHZ3paU6gnP0svAdAPodiLYQSGOwQiPpuh5nXxSx4kQ9lPlpKSWHMx FtdVYEWCxiiuyg== -----END CERTIFICATE-----Generated at Fri Dec 12 02:49:39 2025 by rpki-client