This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/0c954a-ac3f-4860-8cf4-d99ba44db595/1/MwY72VuJG_MxFVfITf6H7PQrGQY.mft File: MwY72VuJG_MxFVfITf6H7PQrGQY.mft (raw, json) Hash identifier: E5BPlzWQVfn3IR4YPDM2Q2oUJt5NRdQEilu+Y6Y2Lew= Subject key identifier: 61:DF:41:BF:56:9B:C0:6F:55:86:38:30:9A:8E:FB:67:68:AC:85:BD Authority key identifier: 33:06:3B:D9:5B:89:1B:F3:31:15:57:C8:4D:FE:87:EC:F4:2B:19:06 Certificate issuer: /CN=33063bd95b891bf3311557c84dfe87ecf42b1906 Certificate serial: 019B5A8869CB8F68583174AFABA71E849213 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MwY72VuJG_MxFVfITf6H7PQrGQY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/0c954a-ac3f-4860-8cf4-d99ba44db595/1/MwY72VuJG_MxFVfITf6H7PQrGQY.mft Manifest number: 039A Signing time: Fri 26 Dec 2025 12:00:47 +0000 Manifest this update: Fri 26 Dec 2025 12:00:47 +0000 Manifest next update: Sat 27 Dec 2025 12:00:47 +0000 Files and hashes: 1: MwY72VuJG_MxFVfITf6H7PQrGQY.crl (hash: QxVpFioQWdg6512+PGq5LQAteOdxK7DoVwzxJE0zCsA=) 2: z1aTRBewSJhzUfWWJD41OIsIBo0.roa (hash: qD0OIe2RSaDdKkAmPZcT/wnJhlY0jqIIohwD44CcvP0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/0c954a-ac3f-4860-8cf4-d99ba44db595/1/MwY72VuJG_MxFVfITf6H7PQrGQY.crl rsync://rpki.ripe.net/repository/DEFAULT/9f/0c954a-ac3f-4860-8cf4-d99ba44db595/1/MwY72VuJG_MxFVfITf6H7PQrGQY.mft rsync://rpki.ripe.net/repository/DEFAULT/MwY72VuJG_MxFVfITf6H7PQrGQY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:88:69:cb:8f:68:58:31:74:af:ab:a7:1e:84:92:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33063bd95b891bf3311557c84dfe87ecf42b1906 Validity Not Before: Dec 26 12:00:47 2025 GMT Not After : Dec 27 12:00:47 2025 GMT Subject: CN=61df41bf569bc06f558638309a8efb6768ac85bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:67:8a:e7:88:d8:61:1c:a5:ed:19:0c:0b:b5: 76:45:dd:0e:f4:64:6d:f4:76:86:6e:40:59:cd:11: 9d:f0:13:1c:34:85:75:d8:38:10:9a:fe:f2:11:ce: fb:b1:d3:60:34:17:0b:3e:c7:ad:9f:42:bf:6a:f6: 4f:52:63:ff:e6:e6:ca:a7:87:df:1b:47:78:94:43: 8a:1e:58:0a:85:ec:43:a0:68:c6:1f:66:34:fc:47: 8e:3a:d1:1c:f7:b4:1c:8e:13:cb:d2:bb:22:fb:c6: a6:47:1c:71:7e:3c:33:eb:5d:90:6d:bd:51:93:47: e6:ca:c4:ae:98:33:bf:df:50:05:f9:98:3f:0b:d4: e9:8b:80:af:6f:16:c7:59:d2:f6:ab:b7:74:98:db: a9:cc:23:8c:d3:87:18:32:16:5e:60:97:48:c6:a9: 3d:ca:01:30:ff:8e:19:14:a2:c6:d3:e7:84:72:08: cd:4b:c8:7b:1e:87:5e:f9:7e:7f:39:e1:fb:82:d8: 48:57:b4:00:3e:4e:48:04:df:a7:0e:bc:f5:25:b2: ef:6f:07:5f:ad:1b:b9:8b:02:87:2a:50:dd:38:9a: bb:8f:66:b6:e6:d1:42:e7:04:9b:de:74:14:41:e2: f5:12:01:c8:f6:cd:18:9a:8d:b5:c6:ef:c8:02:f7: 34:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:DF:41:BF:56:9B:C0:6F:55:86:38:30:9A:8E:FB:67:68:AC:85:BD X509v3 Authority Key Identifier: keyid:33:06:3B:D9:5B:89:1B:F3:31:15:57:C8:4D:FE:87:EC:F4:2B:19:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MwY72VuJG_MxFVfITf6H7PQrGQY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/0c954a-ac3f-4860-8cf4-d99ba44db595/1/MwY72VuJG_MxFVfITf6H7PQrGQY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/0c954a-ac3f-4860-8cf4-d99ba44db595/1/MwY72VuJG_MxFVfITf6H7PQrGQY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:65:e0:5d:e0:ce:56:a8:7c:54:d7:31:78:9f:a0:c3:c3:24: 2f:43:d3:c7:fa:38:54:62:ee:83:c3:0f:68:ce:bc:ab:be:56: ed:7c:c5:7b:c5:ef:d1:55:e7:2c:6b:dd:6f:9a:ce:52:34:e5: 18:d9:28:60:b1:bc:d3:3f:1a:78:ad:6e:0f:d2:c4:c3:98:35: 00:27:3a:d5:1f:5c:c8:8e:e4:e6:be:43:28:b1:c8:b3:0e:d1: b7:f2:04:9a:9f:13:a3:37:a1:84:98:25:da:86:a7:5b:be:c6: 0e:7e:4b:98:13:dc:ec:41:18:19:5c:ba:5c:f7:dc:90:af:5e: 5c:ca:83:09:14:b7:da:49:0f:45:6f:76:60:7a:f6:e5:2e:02: 68:89:1c:b8:e7:f1:4e:d1:6c:e4:c1:c7:2a:9f:00:7b:c2:ab: 8d:94:f2:28:6c:49:de:67:e1:d2:db:b5:fc:84:70:f0:f5:77: 91:1a:6b:20:ba:9f:b6:2a:0d:61:e4:ca:3c:aa:bd:4c:0d:71: 84:a4:33:73:cb:63:99:67:80:44:a5:42:1f:a1:68:b9:d0:35: 90:6d:7a:6d:9c:a9:69:29:ec:af:c5:61:38:97:d6:60:09:34: c1:40:7d:c1:d9:7c:1c:3b:59:50:0e:fa:cf:58:ed:99:2c:15: a7:52:11:67 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaiGnLj2hYMXSvq6cehJITMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMzMDYzYmQ5NWI4OTFiZjMzMTE1NTdjODRkZmU4N2VjZjQy YjE5MDYwHhcNMjUxMjI2MTIwMDQ3WhcNMjUxMjI3MTIwMDQ3WjAzMTEwLwYDVQQD Eyg2MWRmNDFiZjU2OWJjMDZmNTU4NjM4MzA5YThlZmI2NzY4YWM4NWJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2meK54jYYRyl7RkMC7V2Rd0O9GRt 9HaGbkBZzRGd8BMcNIV12DgQmv7yEc77sdNgNBcLPsetn0K/avZPUmP/5ubKp4ff G0d4lEOKHlgKhexDoGjGH2Y0/EeOOtEc97QcjhPL0rsi+8amRxxxfjwz612Qbb1R k0fmysSumDO/31AF+Zg/C9Tpi4CvbxbHWdL2q7d0mNupzCOM04cYMhZeYJdIxqk9 ygEw/44ZFKLG0+eEcgjNS8h7Hode+X5/OeH7gthIV7QAPk5IBN+nDrz1JbLvbwdf rRu5iwKHKlDdOJq7j2a25tFC5wSb3nQUQeL1EgHI9s0Ymo21xu/IAvc0QwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGHfQb9Wm8BvVYY4MJqO+2dorIW9MB8GA1UdIwQY MBaAFDMGO9lbiRvzMRVXyE3+h+z0KxkGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTXdZNzJWdUpHX014RlZmSVRmNkg3UFFyR1FZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi8wYzk1NGEtYWMzZi00ODYwLThjZjQt ZDk5YmE0NGRiNTk1LzEvTXdZNzJWdUpHX014RlZmSVRmNkg3UFFyR1FZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Zi8wYzk1NGEtYWMzZi00ODYwLThjZjQtZDk5YmE0NGRiNTk1 LzEvTXdZNzJWdUpHX014RlZmSVRmNkg3UFFyR1FZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc2XgXeDO Vqh8VNcxeJ+gw8MkL0PTx/o4VGLug8MPaM68q75W7XzFe8Xv0VXnLGvdb5rOUjTl GNkoYLG80z8aeK1uD9LEw5g1ACc61R9cyI7k5r5DKLHIsw7Rt/IEmp8TozehhJgl 2oanW77GDn5LmBPc7EEYGVy6XPfckK9eXMqDCRS32kkPRW92YHr25S4CaIkcuOfx TtFs5MHHKp8Ae8KrjZTyKGxJ3mfh0tu1/IRw8PV3kRprILqftioNYeTKPKq9TA1x hKQzc8tjmWeARKVCH6FoudA1kG16bZypaSnsr8VhOJfWYAk0wUB9wdl8HDtZUA76 z1jtmSwVp1IRZw== -----END CERTIFICATE-----Generated at Fri Dec 26 16:02:20 2025 by rpki-client