This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/de4740-d34e-42a7-8968-464b8f3b8363/1/MXqSdCYInzuMUACDIhp5ip0uhGY.mft File: MXqSdCYInzuMUACDIhp5ip0uhGY.mft (raw, json) Hash identifier: lfPIprAjbmz7qOEEzPv9mkrW6n4mc1d+FTrVzKLoZ00= Subject key identifier: 76:CA:3B:40:EF:D3:E1:85:4E:C2:40:B1:38:61:1B:41:43:5E:84:18 Authority key identifier: 31:7A:92:74:26:08:9F:3B:8C:50:00:83:22:1A:79:8A:9D:2E:84:66 Certificate issuer: /CN=317a927426089f3b8c500083221a798a9d2e8466 Certificate serial: 019B390F379549B3BBD53156AF64B9534543 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MXqSdCYInzuMUACDIhp5ip0uhGY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/de4740-d34e-42a7-8968-464b8f3b8363/1/MXqSdCYInzuMUACDIhp5ip0uhGY.mft Manifest number: 14B0 Signing time: Sat 20 Dec 2025 00:00:57 +0000 Manifest this update: Sat 20 Dec 2025 00:00:57 +0000 Manifest next update: Sun 21 Dec 2025 00:00:57 +0000 Files and hashes: 1: 9eN9v_hmY4BXhqwgwPbmdRtwaxg.roa (hash: /I1wfagsAtpLvGcRUkgr5rbaITh/yY12WpQcMZ73aQ0=) 2: MXqSdCYInzuMUACDIhp5ip0uhGY.crl (hash: UlH9D26C8bOEny4MZw3ifPIyR/iA/d4gprYobvNpbIE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/de4740-d34e-42a7-8968-464b8f3b8363/1/MXqSdCYInzuMUACDIhp5ip0uhGY.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/de4740-d34e-42a7-8968-464b8f3b8363/1/MXqSdCYInzuMUACDIhp5ip0uhGY.mft rsync://rpki.ripe.net/repository/DEFAULT/MXqSdCYInzuMUACDIhp5ip0uhGY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 00:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:0f:37:95:49:b3:bb:d5:31:56:af:64:b9:53:45:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=317a927426089f3b8c500083221a798a9d2e8466 Validity Not Before: Dec 20 00:00:57 2025 GMT Not After : Dec 21 00:00:57 2025 GMT Subject: CN=76ca3b40efd3e1854ec240b138611b41435e8418 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:83:aa:f6:e9:81:f7:e6:57:04:e8:e5:b6:7a: f2:46:6a:53:72:d3:cc:e0:29:e9:5b:7d:80:cc:bf: 24:a5:76:30:2c:0b:9b:48:98:e6:7e:af:66:c9:ef: 7b:6e:b7:0e:46:76:da:71:e3:a2:c8:5b:94:6c:e6: 17:7c:54:0b:e3:5c:91:6f:4e:b4:63:7f:58:da:7b: a3:f9:4e:88:40:68:44:7b:7f:b7:7e:a5:51:e6:18: 9e:0b:ce:65:dd:72:fd:de:29:bd:1c:58:a9:75:58: 42:78:65:ed:2f:bc:d1:db:f1:ae:61:5f:c8:d5:5d: 43:90:92:da:1d:84:37:af:3e:d2:5e:aa:22:ea:2b: 6e:08:c0:22:62:9c:b8:43:17:54:82:a0:ff:f6:32: a6:97:eb:68:50:a4:29:bf:0d:28:d4:02:ba:b5:d3: 8e:51:ee:d4:8f:2f:1e:38:44:63:ff:35:00:91:88: dc:b9:ea:bc:42:59:ba:3c:2a:9b:33:d4:4a:e7:0a: a2:71:22:0e:cc:11:97:c0:ac:1f:cb:69:04:36:0c: 9c:aa:6a:3f:14:3f:0c:a9:81:72:47:3b:8b:53:58: 18:5e:00:21:9e:d3:e3:ad:4d:af:5f:6c:40:02:5b: 24:83:9c:8d:6e:12:1a:7f:96:37:aa:20:db:9e:9d: 6c:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:CA:3B:40:EF:D3:E1:85:4E:C2:40:B1:38:61:1B:41:43:5E:84:18 X509v3 Authority Key Identifier: keyid:31:7A:92:74:26:08:9F:3B:8C:50:00:83:22:1A:79:8A:9D:2E:84:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MXqSdCYInzuMUACDIhp5ip0uhGY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/de4740-d34e-42a7-8968-464b8f3b8363/1/MXqSdCYInzuMUACDIhp5ip0uhGY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/de4740-d34e-42a7-8968-464b8f3b8363/1/MXqSdCYInzuMUACDIhp5ip0uhGY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:d5:e9:75:51:c9:59:d0:aa:67:ad:e5:23:31:b2:90:f0:0e: ee:76:da:8b:17:35:eb:d0:2d:47:a7:b8:79:b7:e1:d3:1f:60: 8e:81:83:d1:a6:c0:48:69:55:09:f6:0c:a7:94:e0:e3:63:40: b4:04:02:fd:6d:c6:fb:e9:28:0d:a8:f3:bf:6e:17:cb:54:88: 29:7f:c2:a1:c0:08:74:3a:00:a5:01:4a:92:c0:7b:98:42:d1: 68:6e:b3:a7:30:cd:8b:5d:44:1d:3f:df:76:bd:df:f5:25:ba: 32:1a:7e:9b:78:c3:65:46:f2:de:9d:41:53:bb:37:c7:65:98: d5:fe:61:9c:c5:dc:ff:f1:f4:2e:e4:49:d2:4d:ea:a7:51:fa: b7:9c:74:af:ba:ea:36:8b:05:1a:85:b7:95:4f:19:61:22:5b: ed:39:a0:60:28:fd:36:fe:12:a4:9f:66:96:6c:51:72:d1:2c: c2:c3:e5:66:2c:83:9e:00:84:8d:13:c5:a3:f9:cc:26:96:97: 74:b0:3a:0d:13:de:79:33:86:17:f0:fa:e5:75:5d:a1:aa:e8: b2:85:59:55:b0:85:00:4b:20:d0:bf:50:35:14:b9:10:00:9b: 83:24:5c:b1:96:14:1e:84:50:c7:11:cf:10:06:0f:8a:7b:43: 63:d1:be:8e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5DzeVSbO71TFWr2S5U0VDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxN2E5Mjc0MjYwODlmM2I4YzUwMDA4MzIyMWE3OThhOWQy ZTg0NjYwHhcNMjUxMjIwMDAwMDU3WhcNMjUxMjIxMDAwMDU3WjAzMTEwLwYDVQQD Eyg3NmNhM2I0MGVmZDNlMTg1NGVjMjQwYjEzODYxMWI0MTQzNWU4NDE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsIOq9umB9+ZXBOjltnryRmpTctPM 4CnpW32AzL8kpXYwLAubSJjmfq9mye97brcORnbaceOiyFuUbOYXfFQL41yRb060 Y39Y2nuj+U6IQGhEe3+3fqVR5hieC85l3XL93im9HFipdVhCeGXtL7zR2/GuYV/I 1V1DkJLaHYQ3rz7SXqoi6ituCMAiYpy4QxdUgqD/9jKml+toUKQpvw0o1AK6tdOO Ue7Ujy8eOERj/zUAkYjcueq8Qlm6PCqbM9RK5wqicSIOzBGXwKwfy2kENgycqmo/ FD8MqYFyRzuLU1gYXgAhntPjrU2vX2xAAlskg5yNbhIaf5Y3qiDbnp1sswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHbKO0Dv0+GFTsJAsThhG0FDXoQYMB8GA1UdIwQY MBaAFDF6knQmCJ87jFAAgyIaeYqdLoRmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTVhxU2RDWUluenVNVUFDRElocDVpcDB1aEdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9kZTQ3NDAtZDM0ZS00MmE3LTg5Njgt NDY0YjhmM2I4MzYzLzEvTVhxU2RDWUluenVNVUFDRElocDVpcDB1aEdZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi9kZTQ3NDAtZDM0ZS00MmE3LTg5NjgtNDY0YjhmM2I4MzYz LzEvTVhxU2RDWUluenVNVUFDRElocDVpcDB1aEdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjdXpdVHJ WdCqZ63lIzGykPAO7nbaixc169AtR6e4ebfh0x9gjoGD0abASGlVCfYMp5Tg42NA tAQC/W3G++koDajzv24Xy1SIKX/CocAIdDoApQFKksB7mELRaG6zpzDNi11EHT/f dr3f9SW6Mhp+m3jDZUby3p1BU7s3x2WY1f5hnMXc//H0LuRJ0k3qp1H6t5x0r7rq NosFGoW3lU8ZYSJb7TmgYCj9Nv4SpJ9mlmxRctEswsPlZiyDngCEjRPFo/nMJpaX dLA6DRPeeTOGF/D65XVdoarosoVZVbCFAEsg0L9QNRS5EACbgyRcsZYUHoRQxxHP EAYPintDY9G+jg== -----END CERTIFICATE-----Generated at Sat Dec 20 08:51:51 2025 by rpki-client