This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/869f64-02b6-4603-987d-9c36c222d8dc/1/MWAAQeTs-YwxVdSPSXz20UNoMj4.mft File: MWAAQeTs-YwxVdSPSXz20UNoMj4.mft (raw, json) Hash identifier: LJ8padRUY/o/q+Dx0SYbqhZrq3ldKLgoKpiI0hs+G/I= Subject key identifier: 40:76:25:8F:A5:4A:6E:26:5F:2C:5D:61:2A:29:DC:6E:B3:FB:E5:74 Authority key identifier: 31:60:00:41:E4:EC:F9:8C:31:55:D4:8F:49:7C:F6:D1:43:68:32:3E Certificate issuer: /CN=31600041e4ecf98c3155d48f497cf6d14368323e Certificate serial: 019B397D66A21C9C8D2C2E0E29DD85792D84 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MWAAQeTs-YwxVdSPSXz20UNoMj4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/869f64-02b6-4603-987d-9c36c222d8dc/1/MWAAQeTs-YwxVdSPSXz20UNoMj4.mft Manifest number: 0343 Signing time: Sat 20 Dec 2025 02:01:18 +0000 Manifest this update: Sat 20 Dec 2025 02:01:18 +0000 Manifest next update: Sun 21 Dec 2025 02:01:18 +0000 Files and hashes: 1: MWAAQeTs-YwxVdSPSXz20UNoMj4.crl (hash: zKKwozUSc7iU5Wk9u/tmldeei++OTYUV2NVO4RrubC4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/869f64-02b6-4603-987d-9c36c222d8dc/1/MWAAQeTs-YwxVdSPSXz20UNoMj4.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/869f64-02b6-4603-987d-9c36c222d8dc/1/MWAAQeTs-YwxVdSPSXz20UNoMj4.mft rsync://rpki.ripe.net/repository/DEFAULT/MWAAQeTs-YwxVdSPSXz20UNoMj4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:7d:66:a2:1c:9c:8d:2c:2e:0e:29:dd:85:79:2d:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31600041e4ecf98c3155d48f497cf6d14368323e Validity Not Before: Dec 20 02:01:18 2025 GMT Not After : Dec 21 02:01:18 2025 GMT Subject: CN=4076258fa54a6e265f2c5d612a29dc6eb3fbe574 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:98:29:18:fa:a7:a6:48:7c:32:eb:9d:a8:72: 93:35:a6:16:4b:db:f1:79:c3:3e:3a:57:0a:cd:98: ed:9c:69:9d:e5:4d:36:71:ca:08:fd:f3:d4:be:7a: 85:87:9a:76:1c:43:40:e5:5f:f1:d7:c4:9b:46:46: 23:ca:dc:c9:f2:2d:35:e3:25:38:3f:78:e2:81:0c: 48:4e:b3:9f:7f:36:bf:35:cf:a1:20:f7:1f:e7:87: 60:24:31:80:e0:e5:a9:d6:86:fe:2d:85:a4:71:eb: 6e:3a:c7:5f:07:c1:85:a0:cb:be:ba:ab:64:a3:9c: f2:6b:72:d5:92:80:3e:03:83:db:7d:6d:f4:72:a6: d8:c3:3c:e0:c2:65:8f:23:0f:09:30:ab:ba:7d:6a: 16:92:22:47:7a:ba:51:b8:fc:f2:ee:ae:e3:4e:95: ba:f1:43:3c:04:0e:84:72:2e:59:47:c1:ca:cb:c0: d2:af:0e:0b:60:52:df:a8:b3:69:24:58:69:3c:89: 8f:23:15:b1:df:76:14:fc:55:d9:62:b8:ee:3d:65: ac:9d:1d:ea:ff:88:4f:81:48:af:fa:64:56:d9:ed: 0f:55:b2:a1:c4:b6:b9:47:65:2e:1f:11:39:b8:52: 64:4b:fc:be:2a:46:ec:7c:27:e1:e8:18:ae:72:cf: d4:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:76:25:8F:A5:4A:6E:26:5F:2C:5D:61:2A:29:DC:6E:B3:FB:E5:74 X509v3 Authority Key Identifier: keyid:31:60:00:41:E4:EC:F9:8C:31:55:D4:8F:49:7C:F6:D1:43:68:32:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MWAAQeTs-YwxVdSPSXz20UNoMj4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/869f64-02b6-4603-987d-9c36c222d8dc/1/MWAAQeTs-YwxVdSPSXz20UNoMj4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/869f64-02b6-4603-987d-9c36c222d8dc/1/MWAAQeTs-YwxVdSPSXz20UNoMj4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:0e:80:a1:43:c1:81:b1:fc:f1:4f:f3:79:bb:09:a1:11:7a: 05:a3:0f:9f:fa:fc:1f:a5:a2:7a:23:be:03:bd:0d:80:fe:71: 1e:0f:a4:bd:a5:3a:e2:a7:62:f7:58:1f:ae:69:fc:3b:b6:6e: 94:85:83:11:c8:35:65:1d:20:dd:ec:39:35:0e:0f:91:e2:4a: 1c:7b:30:07:c3:3e:35:6e:7b:a3:45:41:c9:84:72:23:0e:02: fe:8f:09:7c:5e:4d:9b:8b:7b:21:ec:d2:3a:22:89:8f:36:63: 7f:3e:51:86:64:9a:ab:3c:ac:64:95:ca:9c:f5:e0:ee:7f:7c: af:7d:0f:64:d2:ce:81:d2:c8:f4:71:96:98:a0:c0:32:97:99: 37:25:be:27:c6:fb:db:fb:3c:f1:73:60:64:26:80:33:8e:e6: 20:e9:fa:47:e5:d2:b1:a0:ca:09:60:f9:ba:34:bc:db:66:3e: 6d:bf:c4:6d:d6:ab:13:b9:6b:e6:4f:35:e2:3c:40:d8:29:4e: bd:3c:de:d9:26:7e:01:19:f2:36:51:12:48:14:c0:66:41:f3: 0a:47:72:e2:37:31:aa:41:6b:dd:e9:f3:78:3b:03:9b:4f:58: ef:50:9c:41:96:e3:b3:d4:f3:ce:84:bc:54:eb:51:fc:1d:bc: 7e:d9:e3:1d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5fWaiHJyNLC4OKd2FeS2EMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxNjAwMDQxZTRlY2Y5OGMzMTU1ZDQ4ZjQ5N2NmNmQxNDM2 ODMyM2UwHhcNMjUxMjIwMDIwMTE4WhcNMjUxMjIxMDIwMTE4WjAzMTEwLwYDVQQD Eyg0MDc2MjU4ZmE1NGE2ZTI2NWYyYzVkNjEyYTI5ZGM2ZWIzZmJlNTc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ZgpGPqnpkh8MuudqHKTNaYWS9vx ecM+OlcKzZjtnGmd5U02ccoI/fPUvnqFh5p2HENA5V/x18SbRkYjytzJ8i014yU4 P3jigQxITrOffza/Nc+hIPcf54dgJDGA4OWp1ob+LYWkcetuOsdfB8GFoMu+uqtk o5zya3LVkoA+A4PbfW30cqbYwzzgwmWPIw8JMKu6fWoWkiJHerpRuPzy7q7jTpW6 8UM8BA6Eci5ZR8HKy8DSrw4LYFLfqLNpJFhpPImPIxWx33YU/FXZYrjuPWWsnR3q /4hPgUiv+mRW2e0PVbKhxLa5R2UuHxE5uFJkS/y+KkbsfCfh6Biucs/UhQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEB2JY+lSm4mXyxdYSop3G6z++V0MB8GA1UdIwQY MBaAFDFgAEHk7PmMMVXUj0l89tFDaDI+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTVdBQVFlVHMtWXd4VmRTUFNYejIwVU5vTWo0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy84NjlmNjQtMDJiNi00NjAzLTk4N2Qt OWMzNmMyMjJkOGRjLzEvTVdBQVFlVHMtWXd4VmRTUFNYejIwVU5vTWo0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy84NjlmNjQtMDJiNi00NjAzLTk4N2QtOWMzNmMyMjJkOGRj LzEvTVdBQVFlVHMtWXd4VmRTUFNYejIwVU5vTWo0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZw6AoUPB gbH88U/zebsJoRF6BaMPn/r8H6WieiO+A70NgP5xHg+kvaU64qdi91gfrmn8O7Zu lIWDEcg1ZR0g3ew5NQ4PkeJKHHswB8M+NW57o0VByYRyIw4C/o8JfF5Nm4t7IezS OiKJjzZjfz5RhmSaqzysZJXKnPXg7n98r30PZNLOgdLI9HGWmKDAMpeZNyW+J8b7 2/s88XNgZCaAM47mIOn6R+XSsaDKCWD5ujS822Y+bb/EbdarE7lr5k814jxA2ClO vTze2SZ+ARnyNlESSBTAZkHzCkdy4jcxqkFr3enzeDsDm09Y71CcQZbjs9TzzoS8 VOtR/B28ftnjHQ== -----END CERTIFICATE-----Generated at Sat Dec 20 05:34:35 2025 by rpki-client