This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/3dbd39-5f9f-48fb-9c01-bd6e3b026c37/1/MduEfR2x4LLCwlUCIQ_1pxmWehk.mft File: MduEfR2x4LLCwlUCIQ_1pxmWehk.mft (raw, json) Hash identifier: aJh/DVw8b4MwW1rCE7w3CiY9gHaSFJTYp4JbPEOTZJc= Subject key identifier: C9:BF:1B:71:EA:26:A4:A6:F9:97:D0:63:88:60:5C:C2:3A:0F:F1:9B Authority key identifier: 31:DB:84:7D:1D:B1:E0:B2:C2:C2:55:02:21:0F:F5:A7:19:96:7A:19 Certificate issuer: /CN=31db847d1db1e0b2c2c25502210ff5a719967a19 Certificate serial: 019B1CF326CC85D48398A3BF11A8982D27E8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MduEfR2x4LLCwlUCIQ_1pxmWehk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/3dbd39-5f9f-48fb-9c01-bd6e3b026c37/1/MduEfR2x4LLCwlUCIQ_1pxmWehk.mft Manifest number: 0FFF Signing time: Sun 14 Dec 2025 13:00:55 +0000 Manifest this update: Sun 14 Dec 2025 13:00:55 +0000 Manifest next update: Mon 15 Dec 2025 13:00:55 +0000 Files and hashes: 1: 0IHmyTelW8zpO-_QdR9UfSEkXAI.roa (hash: UlYSOxczUbkdfKJ9miYaE+QEa9fb9mQhLOlffEgcsoY=) 2: MduEfR2x4LLCwlUCIQ_1pxmWehk.crl (hash: QlhUZxKf/Bgy0XwCgSrtuJZdrWgP8ypvpd2W8NrumK4=) 3: PQvHlqxPOZ5EcVf6KsUmqrHycoQ.roa (hash: 3ksFdFv/Fa3gpXmdL0Lg1ZLkcfv0kVJRQQQ2mO5ywLk=) 4: ahJNP8kQoasOGfOn59FuyopzzTg.roa (hash: 6vRaJqB5sPcJZ3/fvcKuSD1RiGeRJgHPqC0FIBy6qGg=) 5: al6s6WgAHfcCaxm7dnRoKhGccgc.roa (hash: dELh70vEBgRpyjJwV+u67ZFF6OWlxJRy1hJNSwq3TqA=) 6: cz_i6inXtcUIjcIN9oJWb2HinvM.roa (hash: PQ0BLB4sI2B91vehL/dzDGr3GUpFGQqMElA5h/dx7n8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/3dbd39-5f9f-48fb-9c01-bd6e3b026c37/1/MduEfR2x4LLCwlUCIQ_1pxmWehk.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/3dbd39-5f9f-48fb-9c01-bd6e3b026c37/1/MduEfR2x4LLCwlUCIQ_1pxmWehk.mft rsync://rpki.ripe.net/repository/DEFAULT/MduEfR2x4LLCwlUCIQ_1pxmWehk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1c:f3:26:cc:85:d4:83:98:a3:bf:11:a8:98:2d:27:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31db847d1db1e0b2c2c25502210ff5a719967a19 Validity Not Before: Dec 14 13:00:55 2025 GMT Not After : Dec 15 13:00:55 2025 GMT Subject: CN=c9bf1b71ea26a4a6f997d06388605cc23a0ff19b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:53:78:2d:9b:e7:c3:0c:3e:52:e3:a0:d3:9d: 6f:45:9d:bf:5c:42:e8:7a:85:7c:73:ad:11:36:a5: 07:7f:09:94:d6:e8:98:58:b3:4d:c1:37:48:48:a3: 59:28:75:14:84:f7:4d:f7:6a:9b:fd:98:ec:6d:3d: 5c:71:f6:07:0a:19:84:3a:37:1f:b6:48:a1:c9:00: 6b:76:4f:a8:21:68:1a:94:c3:85:47:e8:be:c6:c1: ed:34:02:dc:2d:08:40:ad:8c:27:d3:ed:6a:f3:ca: 67:34:80:b7:4c:1c:93:15:07:3e:fc:fd:37:30:42: a4:ac:73:26:59:2f:13:41:5f:12:bb:c5:c2:a2:26: a6:5c:97:8b:66:ad:dd:f6:3a:e3:ec:09:55:01:dd: 1a:ec:ee:bd:9f:34:55:51:6e:f3:72:12:6a:e1:2b: 35:b8:e9:66:f0:d8:b3:6b:09:ec:bc:4b:0b:18:ba: 3c:ce:4a:ed:a1:69:ae:59:97:2a:78:40:e2:a2:49: c7:88:54:02:8e:e8:cd:3a:dc:46:12:cc:3e:0b:e9: 9d:83:82:ff:17:20:53:9f:e0:ac:1e:38:d0:f7:50: 4f:32:ac:5e:d4:16:99:9d:b2:27:be:b7:a6:49:e2: 4c:a4:ed:df:85:ad:1a:ac:87:1f:7c:80:ba:37:da: 38:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:BF:1B:71:EA:26:A4:A6:F9:97:D0:63:88:60:5C:C2:3A:0F:F1:9B X509v3 Authority Key Identifier: keyid:31:DB:84:7D:1D:B1:E0:B2:C2:C2:55:02:21:0F:F5:A7:19:96:7A:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MduEfR2x4LLCwlUCIQ_1pxmWehk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/3dbd39-5f9f-48fb-9c01-bd6e3b026c37/1/MduEfR2x4LLCwlUCIQ_1pxmWehk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/3dbd39-5f9f-48fb-9c01-bd6e3b026c37/1/MduEfR2x4LLCwlUCIQ_1pxmWehk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:b7:c3:53:f1:ba:76:e8:f3:f8:26:3f:b2:bb:82:75:e3:15: df:20:f8:88:db:93:29:18:69:0b:cc:d6:5d:20:38:8d:c1:a9: ad:a8:bc:7f:b8:43:35:7b:a2:17:52:fe:00:84:80:7b:f9:f3: 64:a3:49:9e:a5:6f:07:ec:cc:c7:8f:33:46:b0:43:df:39:6f: d6:b4:a7:80:b9:28:ab:42:39:49:02:8c:12:e6:f9:c6:c7:b6: 02:71:14:1b:1a:76:dd:98:ec:76:74:0d:26:84:fe:75:36:dc: 29:88:74:e4:42:23:6b:b7:06:7e:95:2e:7f:3f:ea:03:d8:73: c0:1d:b7:35:80:d7:c0:ef:d5:70:cd:a2:da:61:db:1c:c7:02: d6:16:77:e9:04:93:98:31:9d:d1:a8:36:54:c9:0a:10:aa:3a: 5b:5e:d1:2a:94:ed:6f:97:f6:0d:a9:7f:59:6e:a5:b7:b2:48: 85:69:24:c8:21:e5:2c:7c:da:24:0c:be:2c:bd:fa:b6:69:dc: c8:24:4f:d1:09:3b:ac:a9:36:6a:05:5d:e5:f1:46:ce:4e:88: b3:40:67:b0:4f:14:6d:c5:82:4e:93:ff:6f:1b:63:99:0d:f6: f9:e7:c3:0c:43:6c:1f:72:09:88:38:54:11:54:87:ea:e8:1a: 90:3b:b3:49 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsc8ybMhdSDmKO/EaiYLSfoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxZGI4NDdkMWRiMWUwYjJjMmMyNTUwMjIxMGZmNWE3MTk5 NjdhMTkwHhcNMjUxMjE0MTMwMDU1WhcNMjUxMjE1MTMwMDU1WjAzMTEwLwYDVQQD EyhjOWJmMWI3MWVhMjZhNGE2Zjk5N2QwNjM4ODYwNWNjMjNhMGZmMTliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwlN4LZvnwww+UuOg051vRZ2/XELo eoV8c60RNqUHfwmU1uiYWLNNwTdISKNZKHUUhPdN92qb/ZjsbT1ccfYHChmEOjcf tkihyQBrdk+oIWgalMOFR+i+xsHtNALcLQhArYwn0+1q88pnNIC3TByTFQc+/P03 MEKkrHMmWS8TQV8Su8XCoiamXJeLZq3d9jrj7AlVAd0a7O69nzRVUW7zchJq4Ss1 uOlm8NizawnsvEsLGLo8zkrtoWmuWZcqeEDioknHiFQCjujNOtxGEsw+C+mdg4L/ FyBTn+CsHjjQ91BPMqxe1BaZnbInvremSeJMpO3fha0arIcffIC6N9o4xQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMm/G3HqJqSm+ZfQY4hgXMI6D/GbMB8GA1UdIwQY MBaAFDHbhH0dseCywsJVAiEP9acZlnoZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTWR1RWZSMng0TExDd2xVQ0lRXzFweG1XZWhrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi8zZGJkMzktNWY5Zi00OGZiLTljMDEt YmQ2ZTNiMDI2YzM3LzEvTWR1RWZSMng0TExDd2xVQ0lRXzFweG1XZWhrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi8zZGJkMzktNWY5Zi00OGZiLTljMDEtYmQ2ZTNiMDI2YzM3 LzEvTWR1RWZSMng0TExDd2xVQ0lRXzFweG1XZWhrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgLfDU/G6 dujz+CY/sruCdeMV3yD4iNuTKRhpC8zWXSA4jcGprai8f7hDNXuiF1L+AISAe/nz ZKNJnqVvB+zMx48zRrBD3zlv1rSngLkoq0I5SQKMEub5xse2AnEUGxp23ZjsdnQN JoT+dTbcKYh05EIja7cGfpUufz/qA9hzwB23NYDXwO/VcM2i2mHbHMcC1hZ36QST mDGd0ag2VMkKEKo6W17RKpTtb5f2Dal/WW6lt7JIhWkkyCHlLHzaJAy+LL36tmnc yCRP0Qk7rKk2agVd5fFGzk6Is0BnsE8UbcWCTpP/bxtjmQ32+efDDENsH3IJiDhU EVSH6ugakDuzSQ== -----END CERTIFICATE-----Generated at Sun Dec 14 15:16:25 2025 by rpki-client