This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/07560a-062b-4802-89af-19192e81b831/1/MfePPgBBCSbb2JyOj1xACxArA3k.mft File: MfePPgBBCSbb2JyOj1xACxArA3k.mft (raw, json) Hash identifier: QLkOnDb6YT3CWPpkCj+w2ZIYFxsaF5jW4gN7IcTqyY4= Subject key identifier: F0:EA:F6:B5:BB:D1:82:F8:8A:A5:98:1E:00:B6:0E:7F:F0:38:23:01 Authority key identifier: 31:F7:8F:3E:00:41:09:26:DB:D8:9C:8E:8F:5C:40:0B:10:2B:03:79 Certificate issuer: /CN=31f78f3e00410926dbd89c8e8f5c400b102b0379 Certificate serial: 019B5ABF22B3D4A18CEBFD708FD8A732AEA6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MfePPgBBCSbb2JyOj1xACxArA3k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/07560a-062b-4802-89af-19192e81b831/1/MfePPgBBCSbb2JyOj1xACxArA3k.mft Manifest number: 09C2 Signing time: Fri 26 Dec 2025 13:00:34 +0000 Manifest this update: Fri 26 Dec 2025 13:00:34 +0000 Manifest next update: Sat 27 Dec 2025 13:00:34 +0000 Files and hashes: 1: MfePPgBBCSbb2JyOj1xACxArA3k.crl (hash: Z6hTtiswdjXocwHjW+z3bWLkycs/mKudtdMys7FCxMA=) 2: eUlaq5gS3GI6r3fmoZPaba7Dfho.roa (hash: PBjrFIbcmCvN1hWwmYdZLCa28CsdtHFqI3Efr5fS4Bg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/07560a-062b-4802-89af-19192e81b831/1/MfePPgBBCSbb2JyOj1xACxArA3k.crl rsync://rpki.ripe.net/repository/DEFAULT/db/07560a-062b-4802-89af-19192e81b831/1/MfePPgBBCSbb2JyOj1xACxArA3k.mft rsync://rpki.ripe.net/repository/DEFAULT/MfePPgBBCSbb2JyOj1xACxArA3k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:bf:22:b3:d4:a1:8c:eb:fd:70:8f:d8:a7:32:ae:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31f78f3e00410926dbd89c8e8f5c400b102b0379 Validity Not Before: Dec 26 13:00:34 2025 GMT Not After : Dec 27 13:00:34 2025 GMT Subject: CN=f0eaf6b5bbd182f88aa5981e00b60e7ff0382301 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:b2:dc:f0:ac:1c:d6:3b:c4:f9:4b:34:07:43: e0:9b:ff:26:8a:66:ea:02:cf:4b:83:83:21:07:8c: f2:9d:fe:29:9a:a0:91:8e:e6:e7:23:f4:72:5a:67: 38:1e:fb:3c:99:42:1b:a4:b1:a7:2f:0e:54:d7:e1: 05:16:50:54:2d:51:b3:6a:26:46:8b:91:41:28:e1: 8b:4d:eb:fe:61:8d:d8:65:72:76:6e:aa:d6:1c:51: 42:a4:67:e3:e2:42:8a:dd:2e:8b:2b:db:08:af:18: b8:22:b8:e1:54:93:e0:fa:82:3e:bb:80:fb:b1:d2: 4e:21:ac:91:9c:bc:17:2b:06:e3:80:63:7d:3e:ac: 83:6c:88:18:58:a9:3e:16:d6:b8:2b:e4:3d:6b:2f: 2c:7e:71:83:65:ee:9b:12:ca:d9:57:9d:1b:38:21: 6f:0e:be:bf:07:f3:9b:a1:f2:06:5a:b6:10:0b:db: 3a:ae:74:dd:80:b9:55:75:76:f5:b8:96:0d:24:02: 80:5d:8b:bf:64:29:1b:a7:d3:29:65:3b:28:9d:02: bb:af:65:bf:ca:f1:33:9a:0d:bf:74:96:8a:35:bf: 45:45:ea:b3:e0:5c:17:34:74:80:27:51:fa:0a:92: 53:39:a0:1e:67:82:85:92:b3:78:0b:a6:6e:1c:26: 29:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:EA:F6:B5:BB:D1:82:F8:8A:A5:98:1E:00:B6:0E:7F:F0:38:23:01 X509v3 Authority Key Identifier: keyid:31:F7:8F:3E:00:41:09:26:DB:D8:9C:8E:8F:5C:40:0B:10:2B:03:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MfePPgBBCSbb2JyOj1xACxArA3k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/07560a-062b-4802-89af-19192e81b831/1/MfePPgBBCSbb2JyOj1xACxArA3k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/07560a-062b-4802-89af-19192e81b831/1/MfePPgBBCSbb2JyOj1xACxArA3k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:a2:f2:9d:67:f8:0d:af:3d:8c:2e:52:f2:e6:e1:d6:45:cf: 3c:b2:92:8e:8f:85:4b:13:cf:66:ac:1c:6c:40:62:2f:5a:ce: b3:c3:e4:4c:56:9a:76:e2:71:81:b0:7c:b1:6c:1c:43:bf:ba: 1b:a4:e2:28:c9:9b:bd:80:73:0e:01:59:7c:27:21:ec:69:4b: 8f:84:66:d5:d5:14:16:43:9d:23:93:49:ce:c0:fa:cb:dd:a6: 66:28:88:0b:68:8a:fd:f3:f6:87:1c:11:00:6d:cf:ae:61:f1: bd:a2:2a:1a:f6:88:09:52:cc:9d:03:14:ab:e4:08:db:4e:01: 99:5e:a7:75:f8:ca:de:8e:62:02:31:ef:2e:3f:c2:9c:16:d3: 1a:25:2e:b3:d7:c1:f7:3b:d5:23:3f:7c:e8:88:04:7a:49:e6: 30:28:ea:26:c0:2e:3c:ef:b7:e3:52:74:35:e0:78:b7:7e:ed: 33:0b:e3:c6:95:be:4f:91:e1:70:4e:83:9a:e6:2c:de:3a:e0: ba:42:9e:ab:66:6a:dd:6e:5a:e1:7e:a6:81:d0:84:34:12:80: ed:3c:4c:96:ea:d1:d9:c8:b6:87:f0:4a:e4:67:3a:d5:89:c0: 5e:15:99:ab:40:50:47:6d:7e:26:f6:c6:c4:e9:3a:7e:f1:84: f1:4f:cd:c2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtavyKz1KGM6/1wj9inMq6mMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxZjc4ZjNlMDA0MTA5MjZkYmQ4OWM4ZThmNWM0MDBiMTAy YjAzNzkwHhcNMjUxMjI2MTMwMDM0WhcNMjUxMjI3MTMwMDM0WjAzMTEwLwYDVQQD EyhmMGVhZjZiNWJiZDE4MmY4OGFhNTk4MWUwMGI2MGU3ZmYwMzgyMzAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyrLc8Kwc1jvE+Us0B0Pgm/8mimbq As9Lg4MhB4zynf4pmqCRjubnI/RyWmc4Hvs8mUIbpLGnLw5U1+EFFlBULVGzaiZG i5FBKOGLTev+YY3YZXJ2bqrWHFFCpGfj4kKK3S6LK9sIrxi4IrjhVJPg+oI+u4D7 sdJOIayRnLwXKwbjgGN9PqyDbIgYWKk+Fta4K+Q9ay8sfnGDZe6bEsrZV50bOCFv Dr6/B/ObofIGWrYQC9s6rnTdgLlVdXb1uJYNJAKAXYu/ZCkbp9MpZTsonQK7r2W/ yvEzmg2/dJaKNb9FReqz4FwXNHSAJ1H6CpJTOaAeZ4KFkrN4C6ZuHCYpiwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPDq9rW70YL4iqWYHgC2Dn/wOCMBMB8GA1UdIwQY MBaAFDH3jz4AQQkm29icjo9cQAsQKwN5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTWZlUFBnQkJDU2JiMkp5T2oxeEFDeEFyQTNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi8wNzU2MGEtMDYyYi00ODAyLTg5YWYt MTkxOTJlODFiODMxLzEvTWZlUFBnQkJDU2JiMkp5T2oxeEFDeEFyQTNrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi8wNzU2MGEtMDYyYi00ODAyLTg5YWYtMTkxOTJlODFiODMx LzEvTWZlUFBnQkJDU2JiMkp5T2oxeEFDeEFyQTNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALqLynWf4 Da89jC5S8ubh1kXPPLKSjo+FSxPPZqwcbEBiL1rOs8PkTFaaduJxgbB8sWwcQ7+6 G6TiKMmbvYBzDgFZfCch7GlLj4Rm1dUUFkOdI5NJzsD6y92mZiiIC2iK/fP2hxwR AG3PrmHxvaIqGvaICVLMnQMUq+QI204BmV6ndfjK3o5iAjHvLj/CnBbTGiUus9fB 9zvVIz986IgEeknmMCjqJsAuPO+341J0NeB4t37tMwvjxpW+T5HhcE6DmuYs3jrg ukKeq2Zq3W5a4X6mgdCENBKA7TxMlurR2ci2h/BK5Gc61YnAXhWZq0BQR21+JvbG xOk6fvGE8U/Nwg== -----END CERTIFICATE-----Generated at Fri Dec 26 14:07:50 2025 by rpki-client