This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/bf2bb4-36d3-4b17-8bcf-44a957132639/1/MpgFa4Bqe3zBYzNF3FWDakWiRMc.mft File: MpgFa4Bqe3zBYzNF3FWDakWiRMc.mft (raw, json) Hash identifier: n5+wkieaXHKU78Gf5+AZiZz9L7XAmFmIVQYvWAi+74s= Subject key identifier: FA:01:ED:F5:89:32:9B:31:0F:C9:6A:33:68:04:D0:F1:30:01:6B:57 Authority key identifier: 32:98:05:6B:80:6A:7B:7C:C1:63:33:45:DC:55:83:6A:45:A2:44:C7 Certificate issuer: /CN=3298056b806a7b7cc1633345dc55836a45a244c7 Certificate serial: 019AFA2FEF62BEA70C9A9ECDC6D4A5F51DAF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MpgFa4Bqe3zBYzNF3FWDakWiRMc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/bf2bb4-36d3-4b17-8bcf-44a957132639/1/MpgFa4Bqe3zBYzNF3FWDakWiRMc.mft Manifest number: 16F9 Signing time: Sun 07 Dec 2025 19:00:36 +0000 Manifest this update: Sun 07 Dec 2025 19:00:36 +0000 Manifest next update: Mon 08 Dec 2025 19:00:36 +0000 Files and hashes: 1: MpgFa4Bqe3zBYzNF3FWDakWiRMc.crl (hash: oS7C+FNxofPv7v6pWuUrhfP+60v9xjvqX2mn6uouh4g=) 2: wnCF8G6ZZGnR9zgGNXBDzudbf2o.roa (hash: Wo5vjTxSHNPOFI8oUhIjkfhiLwT8LICLQf6Pc8oi+dU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/bf2bb4-36d3-4b17-8bcf-44a957132639/1/MpgFa4Bqe3zBYzNF3FWDakWiRMc.crl rsync://rpki.ripe.net/repository/DEFAULT/94/bf2bb4-36d3-4b17-8bcf-44a957132639/1/MpgFa4Bqe3zBYzNF3FWDakWiRMc.mft rsync://rpki.ripe.net/repository/DEFAULT/MpgFa4Bqe3zBYzNF3FWDakWiRMc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Dec 2025 19:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:fa:2f:ef:62:be:a7:0c:9a:9e:cd:c6:d4:a5:f5:1d:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3298056b806a7b7cc1633345dc55836a45a244c7 Validity Not Before: Dec 7 19:00:36 2025 GMT Not After : Dec 8 19:00:36 2025 GMT Subject: CN=fa01edf589329b310fc96a336804d0f130016b57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:04:52:c3:0d:3b:57:d2:c4:1a:44:8a:09:e1: 4a:8a:49:05:03:5a:cd:1d:d4:7f:dc:8e:0e:1f:67: a7:fc:4a:3a:0d:bf:88:a1:10:ee:19:17:e9:0c:33: f2:71:52:3c:c9:d1:7c:89:f7:b4:0c:f5:fa:de:74: 49:6b:4f:16:98:12:ba:35:70:2c:1f:d1:b0:ff:ac: ef:97:bb:ec:d2:4e:3a:be:a2:8d:21:4c:a5:5c:c7: cb:2e:7f:d8:6a:36:84:7c:d3:02:e7:af:0f:c2:4c: 1c:15:02:6f:e6:b2:59:a9:95:48:6f:4b:65:4f:3e: d2:40:d2:72:9c:53:ed:e2:66:0f:4e:66:0c:99:da: b8:63:15:a1:82:06:e4:6e:e2:7e:c7:e2:92:65:d2: 6b:e2:90:19:93:9d:57:c3:11:b8:8d:ca:7a:55:34: d5:8f:14:08:24:5c:e9:92:e6:0f:00:4e:83:54:0f: b3:50:02:b2:c3:8b:e4:77:61:a3:c8:7c:56:6d:2b: 89:b8:4a:69:ae:19:6b:43:e8:83:9d:af:b3:cc:af: f6:82:45:6d:e8:53:37:d7:d2:ea:82:98:3d:cd:e4: 8c:f9:11:2c:d4:2c:32:9c:21:d8:84:f9:9e:30:0f: d9:a5:4b:80:75:34:e4:d7:73:c7:4e:79:1a:91:38: 98:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:01:ED:F5:89:32:9B:31:0F:C9:6A:33:68:04:D0:F1:30:01:6B:57 X509v3 Authority Key Identifier: keyid:32:98:05:6B:80:6A:7B:7C:C1:63:33:45:DC:55:83:6A:45:A2:44:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MpgFa4Bqe3zBYzNF3FWDakWiRMc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/bf2bb4-36d3-4b17-8bcf-44a957132639/1/MpgFa4Bqe3zBYzNF3FWDakWiRMc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/94/bf2bb4-36d3-4b17-8bcf-44a957132639/1/MpgFa4Bqe3zBYzNF3FWDakWiRMc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:50:a9:b3:73:66:ca:36:b9:f4:41:71:05:45:7f:3d:68:9c: 02:c1:bd:16:68:8f:a2:b4:bd:b0:fc:00:84:b4:aa:59:38:da: 27:85:2a:af:f5:a3:69:be:3e:4b:ca:8d:9d:f1:b1:de:74:9f: 7c:49:be:f3:d0:c6:40:4e:05:2c:e3:f8:0d:2d:1f:e1:94:7d: 17:c6:9e:bd:c5:7b:e5:69:a6:31:97:57:a2:c6:c3:69:75:55: da:30:d5:65:43:1d:bc:be:d7:b8:b4:70:a4:6f:af:e1:a7:1e: 84:4d:cb:a4:43:91:8d:2e:52:62:8a:03:91:2a:02:8f:90:22: 41:e3:ef:b6:56:51:c2:7d:2b:86:ea:d1:9e:27:76:45:68:6a: 17:6e:b4:b9:40:67:93:8f:e3:53:fe:96:6d:05:f2:c5:ed:90: 6e:12:6e:6e:26:0c:ed:c8:e6:75:0d:d2:f7:41:74:a5:00:8e: 48:2b:1b:98:f9:6e:5d:3f:2e:b2:6f:4b:db:be:f2:ba:c0:0b: 44:c6:7e:09:80:11:b3:c0:0a:f4:2a:f4:21:79:1d:4c:b0:8a: 1a:0e:80:7d:05:17:47:c4:73:bf:b8:30:fb:48:b4:34:8a:05: 5f:bc:af:4b:84:35:37:64:b3:c7:6c:2d:bd:6d:1b:97:6b:60: b0:5b:41:e6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr6L+9ivqcMmp7NxtSl9R2vMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyOTgwNTZiODA2YTdiN2NjMTYzMzM0NWRjNTU4MzZhNDVh MjQ0YzcwHhcNMjUxMjA3MTkwMDM2WhcNMjUxMjA4MTkwMDM2WjAzMTEwLwYDVQQD EyhmYTAxZWRmNTg5MzI5YjMxMGZjOTZhMzM2ODA0ZDBmMTMwMDE2YjU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyARSww07V9LEGkSKCeFKikkFA1rN HdR/3I4OH2en/Eo6Db+IoRDuGRfpDDPycVI8ydF8ife0DPX63nRJa08WmBK6NXAs H9Gw/6zvl7vs0k46vqKNIUylXMfLLn/YajaEfNMC568PwkwcFQJv5rJZqZVIb0tl Tz7SQNJynFPt4mYPTmYMmdq4YxWhggbkbuJ+x+KSZdJr4pAZk51XwxG4jcp6VTTV jxQIJFzpkuYPAE6DVA+zUAKyw4vkd2GjyHxWbSuJuEpprhlrQ+iDna+zzK/2gkVt 6FM319Lqgpg9zeSM+REs1CwynCHYhPmeMA/ZpUuAdTTk13PHTnkakTiYNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPoB7fWJMpsxD8lqM2gE0PEwAWtXMB8GA1UdIwQY MBaAFDKYBWuAant8wWMzRdxVg2pFokTHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTXBnRmE0QnFlM3pCWXpORjNGV0Rha1dpUk1jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC9iZjJiYjQtMzZkMy00YjE3LThiY2Yt NDRhOTU3MTMyNjM5LzEvTXBnRmE0QnFlM3pCWXpORjNGV0Rha1dpUk1jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NC9iZjJiYjQtMzZkMy00YjE3LThiY2YtNDRhOTU3MTMyNjM5 LzEvTXBnRmE0QnFlM3pCWXpORjNGV0Rha1dpUk1jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD1Cps3Nm yja59EFxBUV/PWicAsG9FmiPorS9sPwAhLSqWTjaJ4Uqr/Wjab4+S8qNnfGx3nSf fEm+89DGQE4FLOP4DS0f4ZR9F8aevcV75WmmMZdXosbDaXVV2jDVZUMdvL7XuLRw pG+v4acehE3LpEORjS5SYooDkSoCj5AiQePvtlZRwn0rhurRnid2RWhqF260uUBn k4/jU/6WbQXyxe2QbhJubiYM7cjmdQ3S90F0pQCOSCsbmPluXT8usm9L277yusAL RMZ+CYARs8AK9Cr0IXkdTLCKGg6AfQUXR8Rzv7gw+0i0NIoFX7yvS4Q1N2Szx2wt vW0bl2tgsFtB5g== -----END CERTIFICATE-----Generated at Mon Dec 8 03:57:28 2025 by rpki-client