This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/869f64-02b6-4603-987d-9c36c222d8dc/1/MWAAQeTs-YwxVdSPSXz20UNoMj4.mft File: MWAAQeTs-YwxVdSPSXz20UNoMj4.mft (raw, json) Hash identifier: kMPsKLjT/WUWFWyG+ccrJgDwLdOUcI7Gcx8AtYQHsM8= Subject key identifier: 8C:FE:9F:5C:A7:8A:8C:A3:28:B0:36:37:4C:19:2D:E6:7B:0D:B7:FD Authority key identifier: 31:60:00:41:E4:EC:F9:8C:31:55:D4:8F:49:7C:F6:D1:43:68:32:3E Certificate issuer: /CN=31600041e4ecf98c3155d48f497cf6d14368323e Certificate serial: 019B47022EF3158B3D6D07DE7A21F3169C50 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MWAAQeTs-YwxVdSPSXz20UNoMj4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/869f64-02b6-4603-987d-9c36c222d8dc/1/MWAAQeTs-YwxVdSPSXz20UNoMj4.mft Manifest number: 034A Signing time: Mon 22 Dec 2025 17:01:23 +0000 Manifest this update: Mon 22 Dec 2025 17:01:23 +0000 Manifest next update: Tue 23 Dec 2025 17:01:23 +0000 Files and hashes: 1: MWAAQeTs-YwxVdSPSXz20UNoMj4.crl (hash: C7Z+5j8hY19wf7ZSAlur/wAmsPnj4D3SbiUFmTSROs4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/869f64-02b6-4603-987d-9c36c222d8dc/1/MWAAQeTs-YwxVdSPSXz20UNoMj4.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/869f64-02b6-4603-987d-9c36c222d8dc/1/MWAAQeTs-YwxVdSPSXz20UNoMj4.mft rsync://rpki.ripe.net/repository/DEFAULT/MWAAQeTs-YwxVdSPSXz20UNoMj4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 15:30:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:47:02:2e:f3:15:8b:3d:6d:07:de:7a:21:f3:16:9c:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31600041e4ecf98c3155d48f497cf6d14368323e Validity Not Before: Dec 22 17:01:23 2025 GMT Not After : Dec 23 17:01:23 2025 GMT Subject: CN=8cfe9f5ca78a8ca328b036374c192de67b0db7fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:23:8d:75:91:33:92:4e:18:5d:a8:b1:c0:d6: b5:f6:b9:b1:39:f9:98:f8:45:de:26:8d:60:09:20: 5d:da:e7:19:af:ce:82:d6:1a:b2:09:97:a3:dc:4d: 9a:eb:03:c6:55:65:e2:25:9c:6b:45:59:18:f5:b0: e7:e9:36:1e:f6:03:4a:ce:43:a9:4c:4f:d9:c9:32: 91:79:3a:3a:f4:59:39:66:bf:01:eb:d6:d4:95:a5: 87:5f:f2:e9:ea:86:64:98:26:6a:72:94:38:d1:3d: 41:19:26:5e:62:89:81:f3:d2:4e:39:c1:a5:1a:4d: bf:d3:6a:e7:54:89:9c:4a:3b:da:91:e3:0e:01:65: 32:c3:5a:0c:c2:7c:47:55:f9:ff:49:6e:23:08:1b: 6b:6f:fc:40:66:49:c8:34:13:b8:f4:43:d9:78:4f: 27:95:d4:4c:0d:57:d9:f0:48:91:a3:1e:d5:14:3a: b7:4e:cc:90:18:ac:b3:e6:43:e8:f4:7b:52:65:7f: 21:83:42:09:11:8e:53:42:40:d7:8e:4d:4e:61:05: 72:63:8d:d8:1a:c7:77:77:df:df:0d:55:8f:9e:9b: af:0f:77:08:79:63:b9:5a:2e:bf:d3:30:bd:a5:1c: 4b:95:f4:41:2f:c5:04:67:e9:74:2d:28:0c:3a:64: be:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:FE:9F:5C:A7:8A:8C:A3:28:B0:36:37:4C:19:2D:E6:7B:0D:B7:FD X509v3 Authority Key Identifier: keyid:31:60:00:41:E4:EC:F9:8C:31:55:D4:8F:49:7C:F6:D1:43:68:32:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MWAAQeTs-YwxVdSPSXz20UNoMj4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/869f64-02b6-4603-987d-9c36c222d8dc/1/MWAAQeTs-YwxVdSPSXz20UNoMj4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/869f64-02b6-4603-987d-9c36c222d8dc/1/MWAAQeTs-YwxVdSPSXz20UNoMj4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:fb:bf:7b:fc:fd:3a:fa:4b:4a:7e:7e:84:43:8a:2b:ac:e3: 6b:a4:62:12:ec:53:5a:23:d6:c4:f3:1a:d9:44:8c:19:1c:93: 98:3d:32:6f:fc:cd:13:5b:47:69:fc:4d:84:57:2b:78:e7:6f: 29:d0:c9:98:ce:7d:85:dc:c2:a2:bc:81:99:1d:25:27:ee:c8: 95:54:f5:97:31:ca:ed:66:6d:8c:d4:d8:3b:8e:36:2d:de:64: 46:2f:41:b8:22:11:91:6b:f0:78:fa:02:9d:45:0d:87:7b:6f: 9e:c0:59:54:50:80:c1:81:7e:b7:6a:a0:f8:fd:ea:bc:33:0f: 9c:5a:7c:98:99:b0:ef:0c:1e:cd:5c:88:1e:d1:1e:62:84:64: ef:72:0a:e8:ee:0b:bf:1d:66:07:61:06:7d:b5:04:52:ec:28: ad:0f:d5:bf:b1:3f:3d:7a:40:ca:61:69:a9:82:48:9e:e3:a4: 2d:0e:59:32:b2:e3:10:00:62:1a:e3:72:fb:d5:49:e1:7d:c6: c7:ce:fb:6b:7d:6f:e1:cc:ed:c2:1e:7e:5b:73:5c:98:5f:65: 5b:0a:9d:d0:46:b8:5a:80:7f:5b:ab:19:1f:74:31:2e:81:2c: 6a:4e:9e:07:28:b2:34:59:64:0b:67:46:8a:5d:c9:0d:7a:29: d9:ef:88:99 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtHAi7zFYs9bQfeeiHzFpxQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxNjAwMDQxZTRlY2Y5OGMzMTU1ZDQ4ZjQ5N2NmNmQxNDM2 ODMyM2UwHhcNMjUxMjIyMTcwMTIzWhcNMjUxMjIzMTcwMTIzWjAzMTEwLwYDVQQD Eyg4Y2ZlOWY1Y2E3OGE4Y2EzMjhiMDM2Mzc0YzE5MmRlNjdiMGRiN2ZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyCONdZEzkk4YXaixwNa19rmxOfmY +EXeJo1gCSBd2ucZr86C1hqyCZej3E2a6wPGVWXiJZxrRVkY9bDn6TYe9gNKzkOp TE/ZyTKReTo69Fk5Zr8B69bUlaWHX/Lp6oZkmCZqcpQ40T1BGSZeYomB89JOOcGl Gk2/02rnVImcSjvakeMOAWUyw1oMwnxHVfn/SW4jCBtrb/xAZknINBO49EPZeE8n ldRMDVfZ8EiRox7VFDq3TsyQGKyz5kPo9HtSZX8hg0IJEY5TQkDXjk1OYQVyY43Y Gsd3d9/fDVWPnpuvD3cIeWO5Wi6/0zC9pRxLlfRBL8UEZ+l0LSgMOmS+iQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIz+n1ynioyjKLA2N0wZLeZ7Dbf9MB8GA1UdIwQY MBaAFDFgAEHk7PmMMVXUj0l89tFDaDI+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTVdBQVFlVHMtWXd4VmRTUFNYejIwVU5vTWo0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy84NjlmNjQtMDJiNi00NjAzLTk4N2Qt OWMzNmMyMjJkOGRjLzEvTVdBQVFlVHMtWXd4VmRTUFNYejIwVU5vTWo0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy84NjlmNjQtMDJiNi00NjAzLTk4N2QtOWMzNmMyMjJkOGRj LzEvTVdBQVFlVHMtWXd4VmRTUFNYejIwVU5vTWo0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjfu/e/z9 OvpLSn5+hEOKK6zja6RiEuxTWiPWxPMa2USMGRyTmD0yb/zNE1tHafxNhFcreOdv KdDJmM59hdzCoryBmR0lJ+7IlVT1lzHK7WZtjNTYO442Ld5kRi9BuCIRkWvwePoC nUUNh3tvnsBZVFCAwYF+t2qg+P3qvDMPnFp8mJmw7wwezVyIHtEeYoRk73IK6O4L vx1mB2EGfbUEUuworQ/Vv7E/PXpAymFpqYJInuOkLQ5ZMrLjEABiGuNy+9VJ4X3G x877a31v4cztwh5+W3NcmF9lWwqd0Ea4WoB/W6sZH3QxLoEsak6eByiyNFlkC2dG il3JDXop2e+ImQ== -----END CERTIFICATE-----Generated at Mon Dec 22 20:31:06 2025 by rpki-client