This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/eaeb83-a20c-4fd8-9314-25d30ebcfcad/1/Mq_f-s-cNpjvejay5gvne4DmLQE.mft File: Mq_f-s-cNpjvejay5gvne4DmLQE.mft (raw, json) Hash identifier: ka1Yqyeh2CmyKFYjay9IYfZ6xd8kEgJi5zTGZjv+FLg= Subject key identifier: ED:2D:E1:17:15:AD:88:F3:68:28:56:70:16:D1:31:DE:4B:C0:40:80 Authority key identifier: 32:AF:DF:FA:CF:9C:36:98:EF:7A:36:B2:E6:0B:E7:7B:80:E6:2D:01 Certificate issuer: /CN=32afdffacf9c3698ef7a36b2e60be77b80e62d01 Certificate serial: 019B17CCCDF371772B8687B8CD4F4A0E4B29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mq_f-s-cNpjvejay5gvne4DmLQE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/eaeb83-a20c-4fd8-9314-25d30ebcfcad/1/Mq_f-s-cNpjvejay5gvne4DmLQE.mft Manifest number: 1777 Signing time: Sat 13 Dec 2025 13:00:56 +0000 Manifest this update: Sat 13 Dec 2025 13:00:56 +0000 Manifest next update: Sun 14 Dec 2025 13:00:56 +0000 Files and hashes: 1: Mq_f-s-cNpjvejay5gvne4DmLQE.crl (hash: otU06RP9YHngLNqJsqgJ3ATkYw/8rGgdPVbogv3Gm7A=) 2: m-mgeij2s-izZmoG2EJOGobZRbs.roa (hash: 50Vl722SlJE3RG+BG14L6AWHGFv4OwGxsav/vScZL0M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/eaeb83-a20c-4fd8-9314-25d30ebcfcad/1/Mq_f-s-cNpjvejay5gvne4DmLQE.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/eaeb83-a20c-4fd8-9314-25d30ebcfcad/1/Mq_f-s-cNpjvejay5gvne4DmLQE.mft rsync://rpki.ripe.net/repository/DEFAULT/Mq_f-s-cNpjvejay5gvne4DmLQE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 11:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:17:cc:cd:f3:71:77:2b:86:87:b8:cd:4f:4a:0e:4b:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32afdffacf9c3698ef7a36b2e60be77b80e62d01 Validity Not Before: Dec 13 13:00:56 2025 GMT Not After : Dec 14 13:00:56 2025 GMT Subject: CN=ed2de11715ad88f36828567016d131de4bc04080 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:29:7f:5c:09:fb:29:3f:c3:f0:bc:5d:d2:10: 36:67:ec:93:1e:ca:1c:22:58:30:dd:62:03:97:9f: a3:7c:55:14:1d:6c:e4:55:e1:07:09:96:14:65:e7: d7:eb:9f:2e:80:c2:64:a5:95:28:18:81:2d:35:73: 7f:ba:27:9d:9c:5e:f4:1c:95:5b:99:36:a2:9b:9f: f6:08:a7:7f:1e:d4:45:62:6c:bb:de:28:d6:4f:ac: b8:15:bc:59:43:80:0e:c5:84:a8:b3:52:cb:f5:c4: 04:28:f5:40:97:32:ed:79:0e:10:76:70:8f:a9:68: 1b:ba:9e:67:70:b1:3d:08:d9:35:73:ee:cf:e7:f2: b4:b0:41:19:f8:ae:a3:e6:e1:4b:a3:16:20:6a:9c: 0e:d0:9d:90:80:1c:c3:98:33:43:00:bc:63:0e:d6: cd:40:60:ab:4d:8d:ed:95:07:f4:5c:3e:ab:5c:ee: 88:a3:c9:9f:6a:e4:ad:eb:e1:00:7a:13:b2:4e:16: 4c:ee:64:46:43:bb:05:0b:91:cb:71:8d:5b:e7:0f: 0d:95:c9:86:7f:f8:c5:d9:03:ce:ab:85:07:2c:82: bc:b2:83:f4:74:a7:7b:09:78:c2:62:2b:78:52:46: 62:61:cd:f7:15:13:0f:06:1f:ae:40:ca:b3:34:a8: 90:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:2D:E1:17:15:AD:88:F3:68:28:56:70:16:D1:31:DE:4B:C0:40:80 X509v3 Authority Key Identifier: keyid:32:AF:DF:FA:CF:9C:36:98:EF:7A:36:B2:E6:0B:E7:7B:80:E6:2D:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mq_f-s-cNpjvejay5gvne4DmLQE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/eaeb83-a20c-4fd8-9314-25d30ebcfcad/1/Mq_f-s-cNpjvejay5gvne4DmLQE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/eaeb83-a20c-4fd8-9314-25d30ebcfcad/1/Mq_f-s-cNpjvejay5gvne4DmLQE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:99:31:9a:9f:73:db:0c:a4:96:50:9c:b0:e4:b5:ee:1d:f8: 59:f6:01:3c:76:f9:0e:90:73:e9:ce:2e:d9:56:00:8b:28:b2: 5e:e8:89:5e:1f:cf:4d:22:d3:73:47:4b:a4:ca:58:76:d5:df: fe:f0:be:d7:7e:d5:70:d6:9f:c3:ee:72:87:fb:27:4e:7d:c1: 80:69:e8:1f:18:44:47:8e:a1:e2:2c:0e:1b:7b:e0:6c:0e:22: 28:e1:72:ac:0d:fa:65:9d:72:e2:50:bd:26:f4:b9:ef:e1:06: b9:94:f7:b8:8f:2b:8d:69:fa:d5:17:09:b3:06:0d:eb:fb:d3: af:c1:c6:f4:67:57:e5:0f:7d:05:12:da:bc:9a:42:9e:58:b1: 12:59:16:f0:bc:cc:19:78:73:68:06:b8:cf:5d:0e:cd:91:8b: d8:b1:72:88:46:7b:5f:34:40:0a:ad:ac:9b:20:74:bc:96:2e: 47:e3:d0:ad:e5:a7:cd:dd:19:40:57:8c:72:ca:ec:16:2e:66: 10:43:8f:7d:62:53:b6:a7:54:00:5a:d0:e6:e6:99:24:44:0b: 64:67:2c:f8:50:5e:42:4c:72:43:72:cd:b6:30:eb:cc:99:36: e4:99:5a:be:03:db:bd:65:65:59:1e:9d:53:6b:de:32:1b:1f: 87:10:5a:47 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsXzM3zcXcrhoe4zU9KDkspMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyYWZkZmZhY2Y5YzM2OThlZjdhMzZiMmU2MGJlNzdiODBl NjJkMDEwHhcNMjUxMjEzMTMwMDU2WhcNMjUxMjE0MTMwMDU2WjAzMTEwLwYDVQQD EyhlZDJkZTExNzE1YWQ4OGYzNjgyODU2NzAxNmQxMzFkZTRiYzA0MDgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoCl/XAn7KT/D8Lxd0hA2Z+yTHsoc Ilgw3WIDl5+jfFUUHWzkVeEHCZYUZefX658ugMJkpZUoGIEtNXN/uiednF70HJVb mTaim5/2CKd/HtRFYmy73ijWT6y4FbxZQ4AOxYSos1LL9cQEKPVAlzLteQ4QdnCP qWgbup5ncLE9CNk1c+7P5/K0sEEZ+K6j5uFLoxYgapwO0J2QgBzDmDNDALxjDtbN QGCrTY3tlQf0XD6rXO6Io8mfauSt6+EAehOyThZM7mRGQ7sFC5HLcY1b5w8NlcmG f/jF2QPOq4UHLIK8soP0dKd7CXjCYit4UkZiYc33FRMPBh+uQMqzNKiQXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO0t4RcVrYjzaChWcBbRMd5LwECAMB8GA1UdIwQY MBaAFDKv3/rPnDaY73o2suYL53uA5i0BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTXFfZi1zLWNOcGp2ZWpheTVndm5lNERtTFFFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS9lYWViODMtYTIwYy00ZmQ4LTkzMTQt MjVkMzBlYmNmY2FkLzEvTXFfZi1zLWNOcGp2ZWpheTVndm5lNERtTFFFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS9lYWViODMtYTIwYy00ZmQ4LTkzMTQtMjVkMzBlYmNmY2Fk LzEvTXFfZi1zLWNOcGp2ZWpheTVndm5lNERtTFFFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbpkxmp9z 2wykllCcsOS17h34WfYBPHb5DpBz6c4u2VYAiyiyXuiJXh/PTSLTc0dLpMpYdtXf /vC+137VcNafw+5yh/snTn3BgGnoHxhER46h4iwOG3vgbA4iKOFyrA36ZZ1y4lC9 JvS57+EGuZT3uI8rjWn61RcJswYN6/vTr8HG9GdX5Q99BRLavJpCnlixElkW8LzM GXhzaAa4z10OzZGL2LFyiEZ7XzRACq2smyB0vJYuR+PQreWnzd0ZQFeMcsrsFi5m EEOPfWJTtqdUAFrQ5uaZJEQLZGcs+FBeQkxyQ3LNtjDrzJk25JlavgPbvWVlWR6d U2veMhsfhxBaRw== -----END CERTIFICATE-----Generated at Sat Dec 13 18:54:31 2025 by rpki-client