This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/6f8f43-1a19-410f-a2f3-e4ac706da148/1/MRhMnotqpAfA1z7QugYwdfYxTjY.mft File: MRhMnotqpAfA1z7QugYwdfYxTjY.mft (raw, json) Hash identifier: OXa7Pjo0aJ9SxLS1zb5CnQ5XClatnlgHASBjvH/CmpM= Subject key identifier: 03:DA:4B:07:93:BB:51:DE:7C:B6:3C:BB:BB:0B:D5:E3:FA:2D:15:FB Authority key identifier: 31:18:4C:9E:8B:6A:A4:07:C0:D7:3E:D0:BA:06:30:75:F6:31:4E:36 Certificate issuer: /CN=31184c9e8b6aa407c0d73ed0ba063075f6314e36 Certificate serial: 019B3BA1FE712B302069A6572E95ADBFCB59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MRhMnotqpAfA1z7QugYwdfYxTjY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/6f8f43-1a19-410f-a2f3-e4ac706da148/1/MRhMnotqpAfA1z7QugYwdfYxTjY.mft Manifest number: 085D Signing time: Sat 20 Dec 2025 12:00:30 +0000 Manifest this update: Sat 20 Dec 2025 12:00:30 +0000 Manifest next update: Sun 21 Dec 2025 12:00:30 +0000 Files and hashes: 1: M16uuK8RBAhq-G4iUMFVGeS4VOA.roa (hash: Tzmv8XvI8c70nplaF0O7on0dN4ghnMF0KoTaadCmRAo=) 2: MRhMnotqpAfA1z7QugYwdfYxTjY.crl (hash: 214FWHApn/IoQG1jyIDzir+7yXQC4ZtEl1/EI1EkePQ=) 3: j0wVGA_XYNpaj0gdPVnYetQ4kdo.roa (hash: LDoymRkSd4Uoyu5Lf7qh9Z/0YCixabChwL/74B3fLbA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/6f8f43-1a19-410f-a2f3-e4ac706da148/1/MRhMnotqpAfA1z7QugYwdfYxTjY.crl rsync://rpki.ripe.net/repository/DEFAULT/03/6f8f43-1a19-410f-a2f3-e4ac706da148/1/MRhMnotqpAfA1z7QugYwdfYxTjY.mft rsync://rpki.ripe.net/repository/DEFAULT/MRhMnotqpAfA1z7QugYwdfYxTjY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:a1:fe:71:2b:30:20:69:a6:57:2e:95:ad:bf:cb:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31184c9e8b6aa407c0d73ed0ba063075f6314e36 Validity Not Before: Dec 20 12:00:30 2025 GMT Not After : Dec 21 12:00:30 2025 GMT Subject: CN=03da4b0793bb51de7cb63cbbbb0bd5e3fa2d15fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:55:26:d7:cf:be:9c:43:1e:df:06:2f:68:12: 3f:dc:df:d5:e4:1e:4c:4e:9c:e0:29:ab:f0:47:81: 81:d1:e7:7b:9a:8e:86:60:aa:33:ae:47:93:13:90: 99:49:ab:15:55:54:9d:8b:77:e9:04:4b:3d:0b:d7: 88:b9:03:45:9a:52:84:88:1f:cd:dc:11:6d:1a:f6: 24:d6:c9:56:b2:48:e3:69:b6:92:6e:f5:13:eb:61: ea:52:81:9d:d8:99:2a:ff:d0:59:ff:2b:e2:d6:26: 28:b1:54:b4:65:51:73:3a:99:4e:70:2f:f7:a1:87: 59:ad:90:67:74:f3:5b:be:15:01:bc:fb:18:51:52: 99:0d:62:f7:d3:23:1a:9b:da:1f:b6:2b:f7:b5:bc: 3c:b8:16:fd:4e:48:1c:a7:75:01:22:d6:8e:2f:3f: 98:50:89:7a:90:fd:ef:ee:5a:c5:e8:2c:03:49:59: a5:25:ad:bf:a2:a5:6e:13:9c:64:ac:76:d3:6f:e1: 31:d3:da:61:86:21:96:6c:63:2f:7a:0d:80:40:f9: aa:5b:25:62:9d:de:e1:91:de:3f:b2:4f:ea:af:50: 8b:2e:f2:c4:9f:3c:c9:ba:cf:46:9f:93:1d:db:59: 44:dc:ff:f7:6f:2d:db:bd:e2:75:a6:ee:17:d9:ba: 06:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:DA:4B:07:93:BB:51:DE:7C:B6:3C:BB:BB:0B:D5:E3:FA:2D:15:FB X509v3 Authority Key Identifier: keyid:31:18:4C:9E:8B:6A:A4:07:C0:D7:3E:D0:BA:06:30:75:F6:31:4E:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MRhMnotqpAfA1z7QugYwdfYxTjY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/6f8f43-1a19-410f-a2f3-e4ac706da148/1/MRhMnotqpAfA1z7QugYwdfYxTjY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/6f8f43-1a19-410f-a2f3-e4ac706da148/1/MRhMnotqpAfA1z7QugYwdfYxTjY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:40:e3:3e:22:e2:e0:18:cf:e6:22:de:dd:70:58:81:0f:e3: 27:76:e0:9d:62:12:11:72:7c:1d:26:0f:8d:6f:28:57:bb:84: 08:9d:49:4f:db:6a:0e:f8:0a:b5:67:d6:3a:f9:09:ef:77:32: 98:83:49:be:55:0a:74:a0:52:2e:3d:a8:df:aa:79:20:9a:f4: 63:c6:aa:ae:3c:8e:aa:af:db:2f:fb:14:b8:41:80:5e:20:1f: 54:b6:1f:6a:69:b7:dd:52:0f:1c:b8:c5:2b:bd:6e:ec:0a:eb: c7:6e:71:be:ae:5b:d1:f5:18:90:28:04:91:1d:be:eb:e4:1c: bd:90:5a:82:78:30:a6:d3:e2:05:0f:3c:d3:f4:48:ba:91:74: ea:d8:e7:b2:41:1b:be:de:19:2a:48:1b:6a:60:db:9a:f6:1c: be:b1:1f:2c:14:04:08:4f:3d:7b:db:6d:56:2e:45:f9:bb:84: 84:27:a9:36:32:f3:04:25:81:4e:1f:e5:b9:d0:5b:07:4f:2f: 7e:2d:e8:9e:b4:c5:62:48:e7:27:6b:e4:cd:53:73:6e:91:da: a4:67:b9:6b:02:85:83:60:49:db:07:fc:09:c1:94:d6:69:53: f6:4d:2d:ef:56:17:3a:58:31:bc:a3:b0:15:e3:6d:e8:2a:0b: ab:60:12:2f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7of5xKzAgaaZXLpWtv8tZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxMTg0YzllOGI2YWE0MDdjMGQ3M2VkMGJhMDYzMDc1ZjYz MTRlMzYwHhcNMjUxMjIwMTIwMDMwWhcNMjUxMjIxMTIwMDMwWjAzMTEwLwYDVQQD EygwM2RhNGIwNzkzYmI1MWRlN2NiNjNjYmJiYjBiZDVlM2ZhMmQxNWZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0lUm18++nEMe3wYvaBI/3N/V5B5M TpzgKavwR4GB0ed7mo6GYKozrkeTE5CZSasVVVSdi3fpBEs9C9eIuQNFmlKEiB/N 3BFtGvYk1slWskjjabaSbvUT62HqUoGd2Jkq/9BZ/yvi1iYosVS0ZVFzOplOcC/3 oYdZrZBndPNbvhUBvPsYUVKZDWL30yMam9oftiv3tbw8uBb9Tkgcp3UBItaOLz+Y UIl6kP3v7lrF6CwDSVmlJa2/oqVuE5xkrHbTb+Ex09phhiGWbGMveg2AQPmqWyVi nd7hkd4/sk/qr1CLLvLEnzzJus9Gn5Md21lE3P/3by3bveJ1pu4X2boGXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAPaSweTu1HefLY8u7sL1eP6LRX7MB8GA1UdIwQY MBaAFDEYTJ6LaqQHwNc+0LoGMHX2MU42MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTVJoTW5vdHFwQWZBMXo3UXVnWXdkZll4VGpZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy82ZjhmNDMtMWExOS00MTBmLWEyZjMt ZTRhYzcwNmRhMTQ4LzEvTVJoTW5vdHFwQWZBMXo3UXVnWXdkZll4VGpZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy82ZjhmNDMtMWExOS00MTBmLWEyZjMtZTRhYzcwNmRhMTQ4 LzEvTVJoTW5vdHFwQWZBMXo3UXVnWXdkZll4VGpZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgkDjPiLi 4BjP5iLe3XBYgQ/jJ3bgnWISEXJ8HSYPjW8oV7uECJ1JT9tqDvgKtWfWOvkJ73cy mINJvlUKdKBSLj2o36p5IJr0Y8aqrjyOqq/bL/sUuEGAXiAfVLYfamm33VIPHLjF K71u7Arrx25xvq5b0fUYkCgEkR2+6+QcvZBagngwptPiBQ880/RIupF06tjnskEb vt4ZKkgbamDbmvYcvrEfLBQECE89e9ttVi5F+buEhCepNjLzBCWBTh/ludBbB08v fi3onrTFYkjnJ2vkzVNzbpHapGe5awKFg2BJ2wf8CcGU1mlT9k0t71YXOlgxvKOw FeNt6CoLq2ASLw== -----END CERTIFICATE-----Generated at Sat Dec 20 17:00:11 2025 by rpki-client