This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/e44dea-8d51-440a-bc02-bab576e20393/1/MdTuSv_1XmdETUfUm1Eqg2i_nvY.mft File: MdTuSv_1XmdETUfUm1Eqg2i_nvY.mft (raw, json) Hash identifier: Aktx0BbPUosRk2F6gpzUM7JLwhXfOA00wfc+VeSA3Xc= Subject key identifier: D3:08:E8:0F:0F:17:9B:31:25:5D:5B:AB:9C:EE:C0:6F:0F:16:3E:78 Authority key identifier: 31:D4:EE:4A:FF:F5:5E:67:44:4D:47:D4:9B:51:2A:83:68:BF:9E:F6 Certificate issuer: /CN=31d4ee4afff55e67444d47d49b512a8368bf9ef6 Certificate serial: 019AAC82D87D48B1A9D278BD8B46F3D31936 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdTuSv_1XmdETUfUm1Eqg2i_nvY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/e44dea-8d51-440a-bc02-bab576e20393/1/MdTuSv_1XmdETUfUm1Eqg2i_nvY.mft Manifest number: 1222 Signing time: Sat 22 Nov 2025 17:00:47 +0000 Manifest this update: Sat 22 Nov 2025 17:00:47 +0000 Manifest next update: Sun 23 Nov 2025 17:00:47 +0000 Files and hashes: 1: 0_5k3Z3yC7Dgba-hxI0f3sWXcrg.roa (hash: WB89xP0WXfzR4P8TznMXEjV3olpCtGvnlUvlrgb2708=) 2: MdTuSv_1XmdETUfUm1Eqg2i_nvY.crl (hash: Ro+z7FEzLvB9knQqxYMYs322Pi0u54fhbGTuaDVAvhY=) 3: ZlJWr-hEOqUqxRC1ufvh4DxAuDM.roa (hash: jx78O4mw6UZw+ac2ij3Kg6QoCkl1hgwVf80ooqVUn5Q=) 4: mouRKK4_Q2E-W7kvAvNPxrpZLhE.roa (hash: ybMAN8gUri6B6wRdRo0fLl/8jSvuyoOJGt4dM0c6HXQ=) 5: oKDIWV_7Y8ktJ4d_lro3RzUpAzE.roa (hash: txEsmpmbkyHZufJHl2J4dFHRxGpSRd6FBOFojmw5rsw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/e44dea-8d51-440a-bc02-bab576e20393/1/MdTuSv_1XmdETUfUm1Eqg2i_nvY.crl rsync://rpki.ripe.net/repository/DEFAULT/a1/e44dea-8d51-440a-bc02-bab576e20393/1/MdTuSv_1XmdETUfUm1Eqg2i_nvY.mft rsync://rpki.ripe.net/repository/DEFAULT/MdTuSv_1XmdETUfUm1Eqg2i_nvY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 23 Nov 2025 12:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ac:82:d8:7d:48:b1:a9:d2:78:bd:8b:46:f3:d3:19:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31d4ee4afff55e67444d47d49b512a8368bf9ef6 Validity Not Before: Nov 22 17:00:47 2025 GMT Not After : Nov 23 17:00:47 2025 GMT Subject: CN=d308e80f0f179b31255d5bab9ceec06f0f163e78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:35:b9:0c:75:80:97:08:4a:9d:40:d0:48:49: 95:8e:ec:68:d4:be:ef:96:26:07:8d:63:78:3a:af: 3f:48:a3:79:7d:b6:e0:4c:7a:67:ba:bc:f1:17:66: 14:9e:33:62:f6:17:ea:88:35:f6:bc:2f:4f:f5:f2: 15:d6:dc:c3:5f:e3:7f:77:ca:4b:73:9c:b1:f1:1e: 45:27:ec:e5:41:02:54:a1:cf:a5:9a:82:ab:7f:47: 7c:09:b7:89:54:90:31:9a:19:de:99:b9:01:89:3a: 1b:b3:ce:ea:88:7b:3b:7e:a2:be:82:d4:59:ff:d6: d7:3f:de:b4:fd:f7:07:7b:a4:82:7a:5d:69:8e:05: 50:32:f4:0a:29:c3:03:af:78:e2:19:c0:ad:c0:72: af:82:84:8a:4e:09:70:c7:9f:3c:fb:e8:38:8e:bd: f2:dd:be:3d:76:46:ba:1d:a6:9c:6b:55:12:1e:cc: 1d:41:26:eb:b5:50:3f:96:a8:72:60:8c:0b:18:74: 7f:7f:ee:df:fa:65:e4:57:f0:4d:d3:93:21:18:9f: 56:c0:b8:0e:49:f6:88:57:5f:31:b8:c2:e2:2d:47: 6c:ca:c8:af:ad:33:c0:20:27:22:f4:80:b7:ec:ed: 91:4c:24:6f:49:02:49:5e:1a:3b:c4:a1:ee:20:aa: ee:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:08:E8:0F:0F:17:9B:31:25:5D:5B:AB:9C:EE:C0:6F:0F:16:3E:78 X509v3 Authority Key Identifier: keyid:31:D4:EE:4A:FF:F5:5E:67:44:4D:47:D4:9B:51:2A:83:68:BF:9E:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdTuSv_1XmdETUfUm1Eqg2i_nvY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/e44dea-8d51-440a-bc02-bab576e20393/1/MdTuSv_1XmdETUfUm1Eqg2i_nvY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/e44dea-8d51-440a-bc02-bab576e20393/1/MdTuSv_1XmdETUfUm1Eqg2i_nvY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:fa:3d:51:8b:f6:10:33:9d:2a:60:d4:d3:0d:4a:85:3e:10: 96:d4:58:61:a1:61:cb:b5:91:bc:89:71:d5:47:fb:3e:32:9a: 36:44:da:60:48:8c:74:d2:67:21:67:61:33:8f:a5:ff:20:32: d9:32:96:9f:11:2f:51:22:eb:66:c7:d8:b3:75:4a:4e:ac:7b: c5:13:ae:b8:e0:42:49:2b:63:1a:7f:fe:e7:84:c2:48:83:fb: 17:db:50:62:20:53:7a:3f:6e:0a:59:ea:aa:a5:b5:33:2b:2c: 0b:6a:91:24:93:d5:40:59:c0:62:9c:0a:0b:6d:d4:43:5d:a1: 22:7f:8c:37:a8:c0:77:cb:ce:5f:35:6f:e4:0e:c1:05:f3:16: 82:31:79:85:78:63:0c:01:70:8b:c3:d5:69:71:cd:05:08:ed: 70:f5:17:99:b3:16:eb:6c:ef:b6:02:b9:9b:f9:13:4f:7c:34: a0:15:5b:10:66:51:e8:ca:15:01:62:81:27:cd:93:92:a4:9a: 57:a0:c5:d4:57:a0:6e:86:f6:38:ed:42:13:6e:47:37:0a:cf: a4:f6:4c:32:e7:d0:3d:12:94:53:fd:a9:38:4b:cd:0c:d8:c1: ec:68:30:a1:47:5a:c4:68:8f:6c:98:31:62:09:32:6d:73:c7: 4b:65:d7:c1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZqsgth9SLGp0ni9i0bz0xk2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxZDRlZTRhZmZmNTVlNjc0NDRkNDdkNDliNTEyYTgzNjhi ZjllZjYwHhcNMjUxMTIyMTcwMDQ3WhcNMjUxMTIzMTcwMDQ3WjAzMTEwLwYDVQQD EyhkMzA4ZTgwZjBmMTc5YjMxMjU1ZDViYWI5Y2VlYzA2ZjBmMTYzZTc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxDW5DHWAlwhKnUDQSEmVjuxo1L7v liYHjWN4Oq8/SKN5fbbgTHpnurzxF2YUnjNi9hfqiDX2vC9P9fIV1tzDX+N/d8pL c5yx8R5FJ+zlQQJUoc+lmoKrf0d8CbeJVJAxmhnembkBiTobs87qiHs7fqK+gtRZ /9bXP960/fcHe6SCel1pjgVQMvQKKcMDr3jiGcCtwHKvgoSKTglwx588++g4jr3y 3b49dka6Haaca1USHswdQSbrtVA/lqhyYIwLGHR/f+7f+mXkV/BN05MhGJ9WwLgO SfaIV18xuMLiLUdsysivrTPAICci9IC37O2RTCRvSQJJXho7xKHuIKrumQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNMI6A8PF5sxJV1bq5zuwG8PFj54MB8GA1UdIwQY MBaAFDHU7kr/9V5nRE1H1JtRKoNov572MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTWRUdVN2XzFYbWRFVFVmVW0xRXFnMmlfbnZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS9lNDRkZWEtOGQ1MS00NDBhLWJjMDIt YmFiNTc2ZTIwMzkzLzEvTWRUdVN2XzFYbWRFVFVmVW0xRXFnMmlfbnZZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMS9lNDRkZWEtOGQ1MS00NDBhLWJjMDItYmFiNTc2ZTIwMzkz LzEvTWRUdVN2XzFYbWRFVFVmVW0xRXFnMmlfbnZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYPo9UYv2 EDOdKmDU0w1KhT4QltRYYaFhy7WRvIlx1Uf7PjKaNkTaYEiMdNJnIWdhM4+l/yAy 2TKWnxEvUSLrZsfYs3VKTqx7xROuuOBCSStjGn/+54TCSIP7F9tQYiBTej9uClnq qqW1MyssC2qRJJPVQFnAYpwKC23UQ12hIn+MN6jAd8vOXzVv5A7BBfMWgjF5hXhj DAFwi8PVaXHNBQjtcPUXmbMW62zvtgK5m/kTT3w0oBVbEGZR6MoVAWKBJ82TkqSa V6DF1Fegbob2OO1CE25HNwrPpPZMMufQPRKUU/2pOEvNDNjB7GgwoUdaxGiPbJgx YgkybXPHS2XXwQ== -----END CERTIFICATE-----Generated at Sat Nov 22 21:40:35 2025 by rpki-client