This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/73c829-1518-4d41-92c2-7e0ab8bcae89/1/MW9DO7TO3XLYbETthZmQNSK15PE.mft File: MW9DO7TO3XLYbETthZmQNSK15PE.mft (raw, json) Hash identifier: cz0GYdGM2hofNqqNY5OAkTcIiF0a0vyb4pA8dh188kA= Subject key identifier: FB:F2:7D:08:0F:DE:53:D9:BF:A0:D6:56:9B:71:3D:57:4C:7F:63:57 Authority key identifier: 31:6F:43:3B:B4:CE:DD:72:D8:6C:44:ED:85:99:90:35:22:B5:E4:F1 Certificate issuer: /CN=316f433bb4cedd72d86c44ed8599903522b5e4f1 Certificate serial: 019B08FE9FE9BA728DC2F2662BC2D96B35B2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MW9DO7TO3XLYbETthZmQNSK15PE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/73c829-1518-4d41-92c2-7e0ab8bcae89/1/MW9DO7TO3XLYbETthZmQNSK15PE.mft Manifest number: 124D Signing time: Wed 10 Dec 2025 16:01:03 +0000 Manifest this update: Wed 10 Dec 2025 16:01:03 +0000 Manifest next update: Thu 11 Dec 2025 16:01:03 +0000 Files and hashes: 1: MW9DO7TO3XLYbETthZmQNSK15PE.crl (hash: BJiB1sLjPJ1kUuPFP4SyMDwZTERzFo41naY9og5eDr0=) 2: ueb8jWjZsgheztsTNqHl1-Lrnro.roa (hash: bi/jdKM4OGa/0sgftxqgBQAErRWTNtYfIJIP4pXeceo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/73c829-1518-4d41-92c2-7e0ab8bcae89/1/MW9DO7TO3XLYbETthZmQNSK15PE.crl rsync://rpki.ripe.net/repository/DEFAULT/85/73c829-1518-4d41-92c2-7e0ab8bcae89/1/MW9DO7TO3XLYbETthZmQNSK15PE.mft rsync://rpki.ripe.net/repository/DEFAULT/MW9DO7TO3XLYbETthZmQNSK15PE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 16:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:08:fe:9f:e9:ba:72:8d:c2:f2:66:2b:c2:d9:6b:35:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=316f433bb4cedd72d86c44ed8599903522b5e4f1 Validity Not Before: Dec 10 16:01:03 2025 GMT Not After : Dec 11 16:01:03 2025 GMT Subject: CN=fbf27d080fde53d9bfa0d6569b713d574c7f6357 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:c9:d9:cc:4f:53:3a:15:f6:36:a9:92:8b:4b: 52:ac:45:b5:89:be:2d:d9:c2:2a:6d:2f:c6:5a:5d: b2:ad:a2:24:74:94:18:91:a0:30:d4:dd:cc:61:ab: b5:e8:e8:d0:e9:7e:10:f8:4c:fc:f8:be:70:55:da: a5:d6:76:d9:2c:41:52:c6:4f:61:e9:65:5f:7d:fb: ad:07:3d:11:c6:a1:4b:c3:0f:23:a0:32:aa:61:b7: 22:ad:fa:19:86:e6:d3:30:dd:3a:8e:dd:18:11:9d: d7:58:d1:59:7b:0a:42:88:0f:9b:2b:73:a6:9e:f1: 69:42:ea:52:0c:c4:6c:3b:92:4c:65:9e:28:3f:e0: 44:10:fb:cc:34:f6:7d:73:ad:c6:d6:b8:9d:2f:f7: 5e:58:45:80:f0:22:3b:e6:b8:3f:71:76:ca:b9:53: 72:7f:1b:01:4e:1f:de:92:6a:a9:b9:7f:37:d0:17: fe:e5:7a:bc:96:e4:23:90:b8:00:62:88:c9:da:14: ec:bd:c9:3f:1e:14:d1:d5:22:0c:91:da:fc:be:42: 35:cb:b9:a5:79:b6:7f:19:89:37:4f:af:2e:6e:13: bd:ce:43:79:d6:8c:fe:28:e4:69:07:62:c3:5c:f0: aa:ba:f6:30:39:70:2f:34:ab:2c:be:5f:6e:fe:2a: 88:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:F2:7D:08:0F:DE:53:D9:BF:A0:D6:56:9B:71:3D:57:4C:7F:63:57 X509v3 Authority Key Identifier: keyid:31:6F:43:3B:B4:CE:DD:72:D8:6C:44:ED:85:99:90:35:22:B5:E4:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MW9DO7TO3XLYbETthZmQNSK15PE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/73c829-1518-4d41-92c2-7e0ab8bcae89/1/MW9DO7TO3XLYbETthZmQNSK15PE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/85/73c829-1518-4d41-92c2-7e0ab8bcae89/1/MW9DO7TO3XLYbETthZmQNSK15PE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:e5:ee:a1:2a:5e:d2:c5:1f:97:10:8a:26:cc:22:00:bb:d5: 83:b0:3e:7c:b2:21:6e:73:d3:19:bf:c8:03:51:3f:4d:6a:4f: 48:d6:81:f4:b8:d4:d2:75:dd:98:6f:63:71:a1:81:0d:59:8b: 16:d6:70:78:26:be:09:60:c6:63:e3:8e:2c:93:1a:66:1c:4d: ba:33:ee:00:44:76:a1:fb:cb:aa:0b:79:0f:76:90:9c:a2:f4: 5d:0b:2e:62:0d:41:42:63:c0:4a:fc:96:e0:95:77:f5:cc:7c: 03:9c:17:fa:0a:6a:69:18:e8:9f:d8:39:05:5b:72:44:a7:e2: 20:ed:86:0a:c4:85:33:67:7d:02:13:03:63:85:89:32:21:ea: 34:84:37:e3:e6:65:16:0f:98:51:94:47:72:dd:55:f9:a3:59: 85:a5:55:2e:a8:36:cf:a8:6a:71:fa:ea:8b:28:7e:69:a5:7b: d9:a3:f6:e5:29:a3:5a:f8:9e:0b:52:cb:39:f1:ec:4d:c1:7b: 75:b9:6f:0d:88:0c:8a:f2:92:70:68:57:ec:97:0d:2d:a4:1a: 06:42:fa:49:85:5c:61:55:7a:40:b2:28:51:3b:de:91:92:37: b4:87:5b:a2:51:1a:84:3b:33:94:ca:ef:11:f9:42:6c:b8:16: 66:f8:91:5c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsI/p/punKNwvJmK8LZazWyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxNmY0MzNiYjRjZWRkNzJkODZjNDRlZDg1OTk5MDM1MjJi NWU0ZjEwHhcNMjUxMjEwMTYwMTAzWhcNMjUxMjExMTYwMTAzWjAzMTEwLwYDVQQD EyhmYmYyN2QwODBmZGU1M2Q5YmZhMGQ2NTY5YjcxM2Q1NzRjN2Y2MzU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmsnZzE9TOhX2NqmSi0tSrEW1ib4t 2cIqbS/GWl2yraIkdJQYkaAw1N3MYau16OjQ6X4Q+Ez8+L5wVdql1nbZLEFSxk9h 6WVfffutBz0RxqFLww8joDKqYbcirfoZhubTMN06jt0YEZ3XWNFZewpCiA+bK3Om nvFpQupSDMRsO5JMZZ4oP+BEEPvMNPZ9c63G1ridL/deWEWA8CI75rg/cXbKuVNy fxsBTh/ekmqpuX830Bf+5Xq8luQjkLgAYojJ2hTsvck/HhTR1SIMkdr8vkI1y7ml ebZ/GYk3T68ubhO9zkN51oz+KORpB2LDXPCquvYwOXAvNKssvl9u/iqIIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPvyfQgP3lPZv6DWVptxPVdMf2NXMB8GA1UdIwQY MBaAFDFvQzu0zt1y2GxE7YWZkDUiteTxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTVc5RE83VE8zWExZYkVUdGhabVFOU0sxNVBFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS83M2M4MjktMTUxOC00ZDQxLTkyYzIt N2UwYWI4YmNhZTg5LzEvTVc5RE83VE8zWExZYkVUdGhabVFOU0sxNVBFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NS83M2M4MjktMTUxOC00ZDQxLTkyYzItN2UwYWI4YmNhZTg5 LzEvTVc5RE83VE8zWExZYkVUdGhabVFOU0sxNVBFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArOXuoSpe 0sUflxCKJswiALvVg7A+fLIhbnPTGb/IA1E/TWpPSNaB9LjU0nXdmG9jcaGBDVmL FtZweCa+CWDGY+OOLJMaZhxNujPuAER2ofvLqgt5D3aQnKL0XQsuYg1BQmPASvyW 4JV39cx8A5wX+gpqaRjon9g5BVtyRKfiIO2GCsSFM2d9AhMDY4WJMiHqNIQ34+Zl Fg+YUZRHct1V+aNZhaVVLqg2z6hqcfrqiyh+aaV72aP25SmjWvieC1LLOfHsTcF7 dblvDYgMivKScGhX7JcNLaQaBkL6SYVcYVV6QLIoUTvekZI3tIdbolEahDszlMrv EflCbLgWZviRXA== -----END CERTIFICATE-----Generated at Wed Dec 10 21:44:28 2025 by rpki-client