This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/f0358f-0d50-4704-85cf-262da883c8e2/1/MjFs1IgVYto785JbSRi24R12UUw.mft File: MjFs1IgVYto785JbSRi24R12UUw.mft (raw, json) Hash identifier: R8tpb5jgnhGLKwSwrhzqpWFWWONv1Tsm+mCPQrIU2z8= Subject key identifier: 8F:1D:AC:28:A1:2B:C0:57:FE:CB:7F:6A:AC:44:BC:A9:FF:EE:D8:CD Authority key identifier: 32:31:6C:D4:88:15:62:DA:3B:F3:92:5B:49:18:B6:E1:1D:76:51:4C Certificate issuer: /CN=32316cd4881562da3bf3925b4918b6e11d76514c Certificate serial: 019B36B2A3901E30A630FDA5DC2387D19937 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MjFs1IgVYto785JbSRi24R12UUw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/f0358f-0d50-4704-85cf-262da883c8e2/1/MjFs1IgVYto785JbSRi24R12UUw.mft Manifest number: 0EE1 Signing time: Fri 19 Dec 2025 13:00:35 +0000 Manifest this update: Fri 19 Dec 2025 13:00:35 +0000 Manifest next update: Sat 20 Dec 2025 13:00:35 +0000 Files and hashes: 1: MjFs1IgVYto785JbSRi24R12UUw.crl (hash: K2M+9opd+F+Kr0ILJ8X9c6wRYsNis1hkGhKMmmv7084=) 2: O3osI0EMQ6lE3X_ye8aviCt4iTA.roa (hash: 9DOrDt/vfxy297yCahpwE4Xa/8MH6AlQc6vnFQ987B0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/f0358f-0d50-4704-85cf-262da883c8e2/1/MjFs1IgVYto785JbSRi24R12UUw.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/f0358f-0d50-4704-85cf-262da883c8e2/1/MjFs1IgVYto785JbSRi24R12UUw.mft rsync://rpki.ripe.net/repository/DEFAULT/MjFs1IgVYto785JbSRi24R12UUw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:b2:a3:90:1e:30:a6:30:fd:a5:dc:23:87:d1:99:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32316cd4881562da3bf3925b4918b6e11d76514c Validity Not Before: Dec 19 13:00:35 2025 GMT Not After : Dec 20 13:00:35 2025 GMT Subject: CN=8f1dac28a12bc057fecb7f6aac44bca9ffeed8cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:21:46:dc:b1:b2:f5:18:0e:b7:a6:bb:91:1e: 7e:11:8a:c0:7f:90:68:9d:84:87:d4:78:1c:b2:02: 8c:1d:ca:06:eb:ec:8f:41:89:f7:21:8d:04:d2:7b: fd:e9:bd:21:73:fc:5d:9f:4b:be:8a:2a:d9:4a:75: d2:71:c3:44:10:a6:2d:d3:0a:31:9a:47:89:e4:7b: c2:4d:4c:69:66:fc:64:30:6d:76:7b:05:4c:9b:42: 8f:0e:13:ff:40:0a:34:39:1f:5c:07:26:b1:18:3b: 59:6e:40:a7:a3:4b:53:01:67:8c:ec:39:0a:5d:ce: 86:3f:d9:bc:e5:73:31:2f:a7:55:1b:c7:94:a3:06: 9a:2d:94:8f:e0:34:68:10:e0:56:da:c5:35:ae:de: 9b:9c:a4:df:5e:38:d5:21:a3:20:36:f8:03:9e:65: 48:63:34:1a:e7:92:b5:97:7a:09:66:57:a0:f8:13: 73:72:1d:58:65:17:3c:1c:9b:2e:bd:39:84:71:33: d4:08:1b:94:78:60:f6:07:fe:0f:f4:f4:ba:e9:68: a6:1d:de:f6:00:56:a8:70:59:13:60:2d:87:ef:6c: ac:02:60:ef:61:ed:a6:39:8b:a1:b5:02:f8:2d:96: 29:93:a7:f5:fc:39:d6:20:30:8a:12:9c:90:04:36: 8b:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:1D:AC:28:A1:2B:C0:57:FE:CB:7F:6A:AC:44:BC:A9:FF:EE:D8:CD X509v3 Authority Key Identifier: keyid:32:31:6C:D4:88:15:62:DA:3B:F3:92:5B:49:18:B6:E1:1D:76:51:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MjFs1IgVYto785JbSRi24R12UUw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f0358f-0d50-4704-85cf-262da883c8e2/1/MjFs1IgVYto785JbSRi24R12UUw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f0358f-0d50-4704-85cf-262da883c8e2/1/MjFs1IgVYto785JbSRi24R12UUw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:e2:b5:ef:1a:5e:fd:e6:3a:81:a1:d7:ab:fd:cd:8c:40:8e: 77:23:a0:6c:b6:91:66:3b:d0:e7:98:ce:bf:41:59:28:b9:e4: 77:04:21:64:85:18:99:aa:cc:80:d2:73:5e:5f:70:3b:db:38: 83:2a:2c:8c:ce:a0:a2:72:27:08:89:d5:f0:9c:44:66:a3:50: a6:63:0c:79:5d:15:63:33:34:d3:40:83:0d:e9:40:f4:1d:5a: b6:7b:19:10:79:20:17:f8:d4:9d:44:0b:11:3e:e5:90:bd:82: 4d:42:2d:4a:e6:48:7c:19:4d:25:d9:24:e7:52:c2:3a:9a:fa: c6:71:57:32:f9:26:1d:79:9e:73:5c:8d:bd:70:2d:79:93:71: 43:b6:7a:2a:fe:df:c1:27:cf:6c:ce:fc:20:56:e2:39:7e:62: 6a:f7:48:e6:07:e2:9a:5c:b0:0c:e6:38:ff:37:2a:11:a2:0b: a6:85:53:43:f2:6b:54:ff:f7:75:f6:50:e0:11:b0:27:c3:c2: 35:19:99:b5:0e:60:10:18:b2:ac:3b:d2:67:56:57:04:4d:11: 06:08:fd:79:98:ab:fe:20:3b:70:b8:5c:a8:d2:e8:58:bb:3a: cb:9b:7e:74:2e:e9:99:0a:cf:0a:09:86:05:0c:37:bc:12:cb: a8:fb:4a:2c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs2sqOQHjCmMP2l3COH0Zk3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyMzE2Y2Q0ODgxNTYyZGEzYmYzOTI1YjQ5MThiNmUxMWQ3 NjUxNGMwHhcNMjUxMjE5MTMwMDM1WhcNMjUxMjIwMTMwMDM1WjAzMTEwLwYDVQQD Eyg4ZjFkYWMyOGExMmJjMDU3ZmVjYjdmNmFhYzQ0YmNhOWZmZWVkOGNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1iFG3LGy9RgOt6a7kR5+EYrAf5Bo nYSH1HgcsgKMHcoG6+yPQYn3IY0E0nv96b0hc/xdn0u+iirZSnXSccNEEKYt0wox mkeJ5HvCTUxpZvxkMG12ewVMm0KPDhP/QAo0OR9cByaxGDtZbkCno0tTAWeM7DkK Xc6GP9m85XMxL6dVG8eUowaaLZSP4DRoEOBW2sU1rt6bnKTfXjjVIaMgNvgDnmVI YzQa55K1l3oJZleg+BNzch1YZRc8HJsuvTmEcTPUCBuUeGD2B/4P9PS66WimHd72 AFaocFkTYC2H72ysAmDvYe2mOYuhtQL4LZYpk6f1/DnWIDCKEpyQBDaLOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI8drCihK8BX/st/aqxEvKn/7tjNMB8GA1UdIwQY MBaAFDIxbNSIFWLaO/OSW0kYtuEddlFMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTWpGczFJZ1ZZdG83ODVKYlNSaTI0UjEyVVV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9mMDM1OGYtMGQ1MC00NzA0LTg1Y2Yt MjYyZGE4ODNjOGUyLzEvTWpGczFJZ1ZZdG83ODVKYlNSaTI0UjEyVVV3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC9mMDM1OGYtMGQ1MC00NzA0LTg1Y2YtMjYyZGE4ODNjOGUy LzEvTWpGczFJZ1ZZdG83ODVKYlNSaTI0UjEyVVV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYOK17xpe /eY6gaHXq/3NjECOdyOgbLaRZjvQ55jOv0FZKLnkdwQhZIUYmarMgNJzXl9wO9s4 gyosjM6gonInCInV8JxEZqNQpmMMeV0VYzM000CDDelA9B1atnsZEHkgF/jUnUQL ET7lkL2CTUItSuZIfBlNJdkk51LCOpr6xnFXMvkmHXmec1yNvXAteZNxQ7Z6Kv7f wSfPbM78IFbiOX5iavdI5gfimlywDOY4/zcqEaILpoVTQ/JrVP/3dfZQ4BGwJ8PC NRmZtQ5gEBiyrDvSZ1ZXBE0RBgj9eZir/iA7cLhcqNLoWLs6y5t+dC7pmQrPCgmG BQw3vBLLqPtKLA== -----END CERTIFICATE-----Generated at Fri Dec 19 16:03:33 2025 by rpki-client