This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/1cdbb1-e265-44c5-b980-4a566add54b2/1/MxpRr9TLZoLCMN7WQGWMETxWL9I.mft File: MxpRr9TLZoLCMN7WQGWMETxWL9I.mft (raw, json) Hash identifier: Ys/EmFW3PuD7KubTN6eLePbj0fVQ0YcSVuNONXIwtOI= Subject key identifier: 20:40:53:8B:5A:80:B7:4E:49:2B:7F:B9:85:C7:76:F1:E3:E2:D1:53 Authority key identifier: 33:1A:51:AF:D4:CB:66:82:C2:30:DE:D6:40:65:8C:11:3C:56:2F:D2 Certificate issuer: /CN=331a51afd4cb6682c230ded640658c113c562fd2 Certificate serial: 019B59ACDB8CB8640BE03AE48B681375278C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MxpRr9TLZoLCMN7WQGWMETxWL9I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/1cdbb1-e265-44c5-b980-4a566add54b2/1/MxpRr9TLZoLCMN7WQGWMETxWL9I.mft Manifest number: 09E5 Signing time: Fri 26 Dec 2025 08:00:59 +0000 Manifest this update: Fri 26 Dec 2025 08:00:59 +0000 Manifest next update: Sat 27 Dec 2025 08:00:59 +0000 Files and hashes: 1: MxpRr9TLZoLCMN7WQGWMETxWL9I.crl (hash: OeUO0sM0LfS/WZN6Dzzt0Ipopv6Afna02iA1y+tTngE=) 2: TS9TQNQnmKCUyfNW3iHSrKN4kHU.roa (hash: FKmub+udVUMJc6SCu1H3/G3fAnw8GwGXkDsFmXaZ8+8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/1cdbb1-e265-44c5-b980-4a566add54b2/1/MxpRr9TLZoLCMN7WQGWMETxWL9I.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/1cdbb1-e265-44c5-b980-4a566add54b2/1/MxpRr9TLZoLCMN7WQGWMETxWL9I.mft rsync://rpki.ripe.net/repository/DEFAULT/MxpRr9TLZoLCMN7WQGWMETxWL9I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:ac:db:8c:b8:64:0b:e0:3a:e4:8b:68:13:75:27:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=331a51afd4cb6682c230ded640658c113c562fd2 Validity Not Before: Dec 26 08:00:59 2025 GMT Not After : Dec 27 08:00:59 2025 GMT Subject: CN=2040538b5a80b74e492b7fb985c776f1e3e2d153 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:f3:f5:50:ad:d2:5d:31:70:5f:79:c6:82:5d: c5:f6:80:27:46:d8:f1:b9:ea:2b:0b:78:5a:3f:d2: 3e:af:8f:e7:1f:4c:0d:f9:67:61:07:38:1b:91:86: d5:77:aa:5b:a9:5d:76:18:3c:3e:0f:d3:c0:bc:50: d2:68:b3:d4:d6:fd:8f:ff:c2:11:41:83:36:8e:08: fe:10:e3:26:3c:13:bf:07:49:b5:f4:94:39:b9:76: 52:c2:1f:ff:ab:b7:cd:64:e3:1d:76:f6:50:50:81: 97:b9:c3:6d:cf:4a:c1:87:0e:68:97:9f:50:41:06: cb:a5:7d:4b:d5:c2:55:78:eb:3a:db:d2:16:9a:e3: 3e:46:ef:e8:af:cd:31:77:fc:4e:1e:26:03:4a:07: 5f:0a:c4:86:3a:1f:52:e3:61:bc:43:55:0b:2f:dd: 97:4b:78:57:95:28:e9:e7:10:43:f5:62:dd:42:8f: bf:52:21:67:f8:35:5c:c8:c1:1d:4d:b6:3e:e5:a3: ef:23:b4:e6:d8:17:32:19:4b:6a:e9:c3:3c:33:6f: d0:d2:f0:75:c3:ae:b5:0b:18:56:7a:55:6f:0c:9a: c3:0a:ed:3e:31:4b:55:1f:48:a4:20:f2:49:d6:c7: ed:31:df:7e:96:72:d0:90:f7:8e:65:44:0d:43:fe: 56:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:40:53:8B:5A:80:B7:4E:49:2B:7F:B9:85:C7:76:F1:E3:E2:D1:53 X509v3 Authority Key Identifier: keyid:33:1A:51:AF:D4:CB:66:82:C2:30:DE:D6:40:65:8C:11:3C:56:2F:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MxpRr9TLZoLCMN7WQGWMETxWL9I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/1cdbb1-e265-44c5-b980-4a566add54b2/1/MxpRr9TLZoLCMN7WQGWMETxWL9I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/1cdbb1-e265-44c5-b980-4a566add54b2/1/MxpRr9TLZoLCMN7WQGWMETxWL9I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:30:c6:a0:b3:de:cc:68:1b:75:56:3d:b3:fd:5c:dc:87:8f: fe:92:aa:09:25:dd:a8:a8:74:5f:e8:92:83:ec:91:27:d7:db: 92:ef:78:85:42:55:ce:a7:ad:0a:2d:1c:c5:18:c5:3a:eb:ce: 53:50:a4:58:20:98:13:d2:72:e4:84:92:9e:99:f4:24:0a:05: cc:8e:a2:ee:1c:2e:3f:e0:59:3b:81:b8:50:22:72:af:61:2e: 37:77:d0:d1:2a:93:1d:88:1d:d6:0f:d9:4c:e3:c1:55:78:42: d5:34:c2:f8:3d:10:9e:5b:fc:a0:f9:5c:a4:bd:1f:ee:df:a5: f0:5e:7c:e7:16:15:9a:9c:ce:c0:eb:42:46:df:fe:aa:04:f2: f1:79:83:14:64:e8:1b:77:b6:14:1a:53:5c:60:ba:a8:1b:9e: de:6d:6e:77:6c:77:57:d7:99:16:20:6b:d8:f1:cd:2a:72:9c: 82:53:84:67:89:36:19:db:6e:1b:de:0e:99:d1:14:51:6e:9f: b8:6d:ef:57:68:d9:87:90:20:84:0f:45:3b:9f:da:02:a7:59: 4b:d6:86:d6:d1:3c:77:5e:4a:5f:73:f2:b8:aa:63:91:8f:ac: d3:03:31:19:5d:54:18:7d:7f:d3:db:f9:15:df:e9:ed:5a:18: 75:a1:ec:82 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZrNuMuGQL4Drki2gTdSeMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMzMWE1MWFmZDRjYjY2ODJjMjMwZGVkNjQwNjU4YzExM2M1 NjJmZDIwHhcNMjUxMjI2MDgwMDU5WhcNMjUxMjI3MDgwMDU5WjAzMTEwLwYDVQQD EygyMDQwNTM4YjVhODBiNzRlNDkyYjdmYjk4NWM3NzZmMWUzZTJkMTUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt/P1UK3SXTFwX3nGgl3F9oAnRtjx ueorC3haP9I+r4/nH0wN+WdhBzgbkYbVd6pbqV12GDw+D9PAvFDSaLPU1v2P/8IR QYM2jgj+EOMmPBO/B0m19JQ5uXZSwh//q7fNZOMddvZQUIGXucNtz0rBhw5ol59Q QQbLpX1L1cJVeOs629IWmuM+Ru/or80xd/xOHiYDSgdfCsSGOh9S42G8Q1ULL92X S3hXlSjp5xBD9WLdQo+/UiFn+DVcyMEdTbY+5aPvI7Tm2BcyGUtq6cM8M2/Q0vB1 w661CxhWelVvDJrDCu0+MUtVH0ikIPJJ1sftMd9+lnLQkPeOZUQNQ/5WAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCBAU4tagLdOSSt/uYXHdvHj4tFTMB8GA1UdIwQY MBaAFDMaUa/Uy2aCwjDe1kBljBE8Vi/SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTXhwUnI5VExab0xDTU43V1FHV01FVHhXTDlJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy8xY2RiYjEtZTI2NS00NGM1LWI5ODAt NGE1NjZhZGQ1NGIyLzEvTXhwUnI5VExab0xDTU43V1FHV01FVHhXTDlJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy8xY2RiYjEtZTI2NS00NGM1LWI5ODAtNGE1NjZhZGQ1NGIy LzEvTXhwUnI5VExab0xDTU43V1FHV01FVHhXTDlJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYzDGoLPe zGgbdVY9s/1c3IeP/pKqCSXdqKh0X+iSg+yRJ9fbku94hUJVzqetCi0cxRjFOuvO U1CkWCCYE9Jy5ISSnpn0JAoFzI6i7hwuP+BZO4G4UCJyr2EuN3fQ0SqTHYgd1g/Z TOPBVXhC1TTC+D0Qnlv8oPlcpL0f7t+l8F585xYVmpzOwOtCRt/+qgTy8XmDFGTo G3e2FBpTXGC6qBue3m1ud2x3V9eZFiBr2PHNKnKcglOEZ4k2GdtuG94OmdEUUW6f uG3vV2jZh5AghA9FO5/aAqdZS9aG1tE8d15KX3PyuKpjkY+s0wMxGV1UGH1/09v5 Fd/p7VoYdaHsgg== -----END CERTIFICATE-----Generated at Fri Dec 26 14:15:37 2025 by rpki-client