This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/bcb87f-2c17-4207-962b-98072936c518/1/MAsvRrpXChZ3v9WExygirZ2f5bA.mft File: MAsvRrpXChZ3v9WExygirZ2f5bA.mft (raw, json) Hash identifier: QhkbL44nv+D7ad4hbaSvZIQugdAUyuf3QMQp22VmrS0= Subject key identifier: A7:9F:06:0D:25:C2:5E:31:4F:2B:34:A6:E1:6E:6D:53:95:10:C9:66 Authority key identifier: 30:0B:2F:46:BA:57:0A:16:77:BF:D5:84:C7:28:22:AD:9D:9F:E5:B0 Certificate issuer: /CN=300b2f46ba570a1677bfd584c72822ad9d9fe5b0 Certificate serial: 019B126FFFE7B750A821C99CF76745766C79 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MAsvRrpXChZ3v9WExygirZ2f5bA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/bcb87f-2c17-4207-962b-98072936c518/1/MAsvRrpXChZ3v9WExygirZ2f5bA.mft Manifest number: 1773 Signing time: Fri 12 Dec 2025 12:01:28 +0000 Manifest this update: Fri 12 Dec 2025 12:01:28 +0000 Manifest next update: Sat 13 Dec 2025 12:01:28 +0000 Files and hashes: 1: 1-OVd2lrgp3V2rXsCVF3GooeWhcE.roa (hash: KipoSrKFnoRi0oHmHkcFIq8GeOt3ELUBmEPs2x8pv/4=) 2: KR7i1VGMfp6wOUHzM68qa6NoxyE.roa (hash: ndyzcu48CDHqz3NgyXeDet5mZyI1DmpInGav6pQo5SI=) 3: MAsvRrpXChZ3v9WExygirZ2f5bA.crl (hash: bmP6bJ6sOYPDPO4OSOG8pckzOdJKWx7hmN4Rss+0Wps=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/bcb87f-2c17-4207-962b-98072936c518/1/MAsvRrpXChZ3v9WExygirZ2f5bA.crl rsync://rpki.ripe.net/repository/DEFAULT/ee/bcb87f-2c17-4207-962b-98072936c518/1/MAsvRrpXChZ3v9WExygirZ2f5bA.mft rsync://rpki.ripe.net/repository/DEFAULT/MAsvRrpXChZ3v9WExygirZ2f5bA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 12:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:12:6f:ff:e7:b7:50:a8:21:c9:9c:f7:67:45:76:6c:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=300b2f46ba570a1677bfd584c72822ad9d9fe5b0 Validity Not Before: Dec 12 12:01:28 2025 GMT Not After : Dec 13 12:01:28 2025 GMT Subject: CN=a79f060d25c25e314f2b34a6e16e6d539510c966 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:05:e9:1e:4c:bc:f8:7d:2d:63:cc:e8:a4:df: ba:3e:fc:1d:4f:eb:8d:24:33:66:66:04:7e:3d:a2: 14:77:ee:d3:ee:f1:24:b9:a8:e7:f3:3e:fa:e6:d4: d7:52:f7:ab:24:c4:57:7c:c9:39:3a:44:68:d4:fb: 02:a4:7c:f3:65:04:d9:9a:91:2b:f3:11:2b:e0:c0: 50:fa:f4:95:09:f1:9f:a9:af:05:34:24:a3:80:16: e6:75:db:3e:49:7e:dc:dd:31:79:66:a6:17:07:f2: ee:45:4d:4f:22:f4:a8:e8:73:af:42:9c:7f:02:81: a2:5f:00:36:90:97:d5:51:03:75:34:ff:da:04:34: 7b:b7:f6:09:b9:31:af:04:ca:aa:58:d0:45:6b:1b: ed:34:ae:39:74:22:e9:29:af:2b:7a:85:b6:e2:5e: 38:b5:32:f3:c7:d7:8f:29:18:20:7c:bd:b5:79:b8: e8:55:20:f4:1c:ff:67:c4:17:5f:aa:a6:79:e4:b0: 95:a2:63:0b:70:a7:d7:32:1f:a0:d5:f9:b3:63:19: 2a:48:ed:65:d4:e0:dc:55:ff:a2:27:81:c8:1c:ba: 8c:b4:3c:e8:0a:4a:c9:2a:e8:8d:9b:74:f1:93:b2: 9d:4b:69:3b:bc:4b:54:01:6b:41:44:e0:7a:9e:97: 00:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:9F:06:0D:25:C2:5E:31:4F:2B:34:A6:E1:6E:6D:53:95:10:C9:66 X509v3 Authority Key Identifier: keyid:30:0B:2F:46:BA:57:0A:16:77:BF:D5:84:C7:28:22:AD:9D:9F:E5:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MAsvRrpXChZ3v9WExygirZ2f5bA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/bcb87f-2c17-4207-962b-98072936c518/1/MAsvRrpXChZ3v9WExygirZ2f5bA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/bcb87f-2c17-4207-962b-98072936c518/1/MAsvRrpXChZ3v9WExygirZ2f5bA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:2c:80:c7:aa:34:70:31:f0:4c:71:4d:cf:26:8d:21:ba:0f: 52:df:d9:1a:c8:0e:e5:6c:a1:26:5b:14:6f:38:24:00:79:30: 89:e4:74:86:b9:ff:37:ba:b3:b3:3e:0a:75:ed:83:ac:2c:d5: 36:9d:4d:84:ef:f9:f2:99:3e:81:37:3a:5e:33:07:61:84:c5: 1b:d7:48:7b:6e:58:38:a7:af:ec:c8:06:b4:64:e2:4f:da:28: ab:27:66:e6:6e:bb:ac:4d:b8:a7:16:60:f2:b8:f8:7d:d7:8e: 4d:fe:47:c6:1c:24:37:d0:a2:91:1d:bb:d8:30:65:e5:5a:27: fe:15:46:83:a7:6c:85:8d:32:56:05:73:f7:38:4c:f9:43:47: 0d:8c:f5:33:e3:d9:b2:d8:80:00:42:8f:f3:80:2d:2d:0b:73: 89:b1:3b:e4:8e:df:92:30:aa:26:34:6f:3f:eb:8f:0e:8f:6a: 40:fc:9b:52:58:77:09:5a:dc:eb:1b:2d:5c:9a:8c:ea:05:1e: d5:c3:5f:2a:72:30:57:1d:f2:38:da:c7:6c:d2:d2:92:20:5a: b6:3f:b8:cb:b4:4f:90:4d:94:ad:b4:e3:2f:ae:4f:44:06:f2: 2b:f4:b1:f8:b2:4a:25:ea:3c:11:0d:93:50:86:62:d0:38:03: 71:9f:7e:f1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsSb//nt1CoIcmc92dFdmx5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwMGIyZjQ2YmE1NzBhMTY3N2JmZDU4NGM3MjgyMmFkOWQ5 ZmU1YjAwHhcNMjUxMjEyMTIwMTI4WhcNMjUxMjEzMTIwMTI4WjAzMTEwLwYDVQQD EyhhNzlmMDYwZDI1YzI1ZTMxNGYyYjM0YTZlMTZlNmQ1Mzk1MTBjOTY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzAXpHky8+H0tY8zopN+6PvwdT+uN JDNmZgR+PaIUd+7T7vEkuajn8z765tTXUverJMRXfMk5OkRo1PsCpHzzZQTZmpEr 8xEr4MBQ+vSVCfGfqa8FNCSjgBbmdds+SX7c3TF5ZqYXB/LuRU1PIvSo6HOvQpx/ AoGiXwA2kJfVUQN1NP/aBDR7t/YJuTGvBMqqWNBFaxvtNK45dCLpKa8reoW24l44 tTLzx9ePKRggfL21ebjoVSD0HP9nxBdfqqZ55LCVomMLcKfXMh+g1fmzYxkqSO1l 1ODcVf+iJ4HIHLqMtDzoCkrJKuiNm3Txk7KdS2k7vEtUAWtBROB6npcAEQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKefBg0lwl4xTys0puFubVOVEMlmMB8GA1UdIwQY MBaAFDALL0a6VwoWd7/VhMcoIq2dn+WwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTUFzdlJycFhDaFozdjlXRXh5Z2lyWjJmNWJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS9iY2I4N2YtMmMxNy00MjA3LTk2MmIt OTgwNzI5MzZjNTE4LzEvTUFzdlJycFhDaFozdjlXRXh5Z2lyWjJmNWJBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZS9iY2I4N2YtMmMxNy00MjA3LTk2MmItOTgwNzI5MzZjNTE4 LzEvTUFzdlJycFhDaFozdjlXRXh5Z2lyWjJmNWJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVCyAx6o0 cDHwTHFNzyaNIboPUt/ZGsgO5WyhJlsUbzgkAHkwieR0hrn/N7qzsz4Kde2DrCzV Np1NhO/58pk+gTc6XjMHYYTFG9dIe25YOKev7MgGtGTiT9ooqydm5m67rE24pxZg 8rj4fdeOTf5HxhwkN9CikR272DBl5Von/hVGg6dshY0yVgVz9zhM+UNHDYz1M+PZ stiAAEKP84AtLQtzibE75I7fkjCqJjRvP+uPDo9qQPybUlh3CVrc6xstXJqM6gUe 1cNfKnIwVx3yONrHbNLSkiBatj+4y7RPkE2UrbTjL65PRAbyK/Sx+LJKJeo8EQ2T UIZi0DgDcZ9+8Q== -----END CERTIFICATE-----Generated at Fri Dec 12 19:06:31 2025 by rpki-client