This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/b7cd7c-5795-4146-8477-0da87b51ffac/1/MdMezFS5Dp3_JEK5BRqpVo8wbng.mft File: MdMezFS5Dp3_JEK5BRqpVo8wbng.mft (raw, json) Hash identifier: v2Om11rEbXwHvvQMIwl9Xpa96b0VnJ85czT1qGyFFts= Subject key identifier: 0A:14:F0:1F:F9:BB:65:9B:E0:CB:31:01:C1:7C:45:1C:F9:A5:87:87 Authority key identifier: 31:D3:1E:CC:54:B9:0E:9D:FF:24:42:B9:05:1A:A9:56:8F:30:6E:78 Certificate issuer: /CN=31d31ecc54b90e9dff2442b9051aa9568f306e78 Certificate serial: 019B2A77D986D1CBFC82CCDB99B3C550239C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdMezFS5Dp3_JEK5BRqpVo8wbng.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/b7cd7c-5795-4146-8477-0da87b51ffac/1/MdMezFS5Dp3_JEK5BRqpVo8wbng.mft Manifest number: 1B Signing time: Wed 17 Dec 2025 04:00:55 +0000 Manifest this update: Wed 17 Dec 2025 04:00:55 +0000 Manifest next update: Thu 18 Dec 2025 04:00:55 +0000 Files and hashes: 1: 3VroMIGW9a2JttxLS_ZpvUy7Y2o.roa (hash: DC6Ab1c940mU76EK7+5P4BKzGG2d6IkCWGpU20nLY2g=) 2: MdMezFS5Dp3_JEK5BRqpVo8wbng.crl (hash: GRhlOARhmqZmsL2nh940EPHOFGnpJCMyk3qD/Vuha50=) 3: yRudXorxnvueWEv1laK5g0QyggU.asa (hash: uEI7+zajFcoccQxQSO5n5lK2+bMnA5xMY3cPSGH3byc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/b7cd7c-5795-4146-8477-0da87b51ffac/1/MdMezFS5Dp3_JEK5BRqpVo8wbng.crl rsync://rpki.ripe.net/repository/DEFAULT/9f/b7cd7c-5795-4146-8477-0da87b51ffac/1/MdMezFS5Dp3_JEK5BRqpVo8wbng.mft rsync://rpki.ripe.net/repository/DEFAULT/MdMezFS5Dp3_JEK5BRqpVo8wbng.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2a:77:d9:86:d1:cb:fc:82:cc:db:99:b3:c5:50:23:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31d31ecc54b90e9dff2442b9051aa9568f306e78 Validity Not Before: Dec 17 04:00:55 2025 GMT Not After : Dec 18 04:00:55 2025 GMT Subject: CN=0a14f01ff9bb659be0cb3101c17c451cf9a58787 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:df:9d:87:12:82:85:6a:47:7e:4d:a6:cc:04: 9c:54:53:e7:56:cb:84:af:9f:59:67:93:b5:ba:da: 7b:7f:5a:bb:41:01:da:cd:8b:5b:ec:f7:13:5e:9d: b8:22:4b:35:90:4a:28:78:05:2c:3b:16:95:84:00: d3:d3:66:57:75:d4:13:45:97:3e:31:d7:9d:db:a2: bd:c8:e9:cf:4d:c0:63:96:72:36:65:3d:b2:51:48: 5f:21:07:15:f3:f2:ed:73:c6:93:6e:91:27:2f:28: 10:c0:57:39:e9:65:32:a7:06:6e:89:b6:d9:09:20: 53:72:c9:a6:3b:09:ac:6d:38:d2:b0:30:83:4d:cd: 03:c9:51:1e:70:f0:e1:de:f2:8e:33:81:3c:46:2f: 75:0d:c4:6c:bf:9d:78:fe:d5:81:b9:d7:38:b3:b8: 85:c5:b7:14:f5:15:a0:8d:f2:ef:6b:12:95:63:c5: 7a:fe:dd:18:97:4b:e3:a9:1e:b9:2a:25:71:e4:cb: e0:5b:c9:b6:55:1d:98:fc:b1:42:32:ac:c8:68:e6: fd:4c:56:be:61:40:a6:09:6d:df:17:c6:94:b4:c4: 6a:87:0d:61:16:ee:7e:26:78:ff:5d:c1:d5:8b:1d: 1f:62:3d:b3:96:d1:b1:06:e4:5c:3b:d5:df:d9:7c: ff:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:14:F0:1F:F9:BB:65:9B:E0:CB:31:01:C1:7C:45:1C:F9:A5:87:87 X509v3 Authority Key Identifier: keyid:31:D3:1E:CC:54:B9:0E:9D:FF:24:42:B9:05:1A:A9:56:8F:30:6E:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdMezFS5Dp3_JEK5BRqpVo8wbng.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/b7cd7c-5795-4146-8477-0da87b51ffac/1/MdMezFS5Dp3_JEK5BRqpVo8wbng.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/b7cd7c-5795-4146-8477-0da87b51ffac/1/MdMezFS5Dp3_JEK5BRqpVo8wbng.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:f9:6f:88:82:65:95:32:31:93:69:e7:16:f4:02:1d:cc:8b: ec:ad:ba:80:ef:53:38:84:5e:4b:78:43:f3:a0:e1:71:11:5f: 1e:48:35:b7:03:d4:d8:12:ce:07:d6:27:4c:4b:b8:54:05:8e: c3:1d:ab:9f:6d:c1:52:31:47:a1:fd:d3:a4:5f:24:11:c2:c6: 19:31:ae:fc:cd:d7:8b:47:35:e3:90:98:12:d5:c7:d4:f8:0a: e3:6e:f7:2b:b9:c2:08:b1:16:bf:bc:57:f4:e2:3c:f8:85:07: 0d:46:a0:c6:1f:72:ac:28:99:26:44:c2:29:60:40:ac:c8:9a: f4:35:a3:2b:9d:ac:37:82:7f:e0:d4:52:72:41:a0:6a:63:08: 20:69:b0:a8:e4:ed:2c:d6:16:7e:ed:97:29:da:4a:d7:70:01: bb:a4:79:09:ee:72:80:84:8f:48:c4:e7:56:8a:38:b0:cb:a2: c7:4b:b4:6d:93:e7:34:87:39:b2:23:31:77:4d:37:b7:62:6c: 2b:a1:94:7b:af:dd:5e:d7:4a:16:52:e9:7a:f3:10:66:9d:50: 06:d7:19:9c:98:9c:12:a4:dd:a8:86:72:0b:d7:33:18:6a:a3: 20:9d:73:c6:43:02:16:b3:50:74:96:3e:24:a0:1b:37:f1:75: 08:5d:b2:07 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsqd9mG0cv8gszbmbPFUCOcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxZDMxZWNjNTRiOTBlOWRmZjI0NDJiOTA1MWFhOTU2OGYz MDZlNzgwHhcNMjUxMjE3MDQwMDU1WhcNMjUxMjE4MDQwMDU1WjAzMTEwLwYDVQQD EygwYTE0ZjAxZmY5YmI2NTliZTBjYjMxMDFjMTdjNDUxY2Y5YTU4Nzg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgt+dhxKChWpHfk2mzAScVFPnVsuE r59ZZ5O1utp7f1q7QQHazYtb7PcTXp24Iks1kEooeAUsOxaVhADT02ZXddQTRZc+ Mded26K9yOnPTcBjlnI2ZT2yUUhfIQcV8/Ltc8aTbpEnLygQwFc56WUypwZuibbZ CSBTcsmmOwmsbTjSsDCDTc0DyVEecPDh3vKOM4E8Ri91DcRsv514/tWBudc4s7iF xbcU9RWgjfLvaxKVY8V6/t0Yl0vjqR65KiVx5MvgW8m2VR2Y/LFCMqzIaOb9TFa+ YUCmCW3fF8aUtMRqhw1hFu5+Jnj/XcHVix0fYj2zltGxBuRcO9Xf2Xz/lQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAoU8B/5u2Wb4MsxAcF8RRz5pYeHMB8GA1UdIwQY MBaAFDHTHsxUuQ6d/yRCuQUaqVaPMG54MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTWRNZXpGUzVEcDNfSkVLNUJScXBWbzh3Ym5nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi9iN2NkN2MtNTc5NS00MTQ2LTg0Nzct MGRhODdiNTFmZmFjLzEvTWRNZXpGUzVEcDNfSkVLNUJScXBWbzh3Ym5nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Zi9iN2NkN2MtNTc5NS00MTQ2LTg0NzctMGRhODdiNTFmZmFj LzEvTWRNZXpGUzVEcDNfSkVLNUJScXBWbzh3Ym5nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAivlviIJl lTIxk2nnFvQCHcyL7K26gO9TOIReS3hD86DhcRFfHkg1twPU2BLOB9YnTEu4VAWO wx2rn23BUjFHof3TpF8kEcLGGTGu/M3Xi0c145CYEtXH1PgK4273K7nCCLEWv7xX 9OI8+IUHDUagxh9yrCiZJkTCKWBArMia9DWjK52sN4J/4NRSckGgamMIIGmwqOTt LNYWfu2XKdpK13ABu6R5Ce5ygISPSMTnVoo4sMuix0u0bZPnNIc5siMxd003t2Js K6GUe6/dXtdKFlLpevMQZp1QBtcZnJicEqTdqIZyC9czGGqjIJ1zxkMCFrNQdJY+ JKAbN/F1CF2yBw== -----END CERTIFICATE-----Generated at Wed Dec 17 06:27:09 2025 by rpki-client