This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/a70e5f-0480-415c-8512-921a2e7a5608/1/MdsPiDz5RJFFHpCMbmgqzjaxNgI.mft File: MdsPiDz5RJFFHpCMbmgqzjaxNgI.mft (raw, json) Hash identifier: SN6UJfFk1/P9FtaZVfXQvp44nLF9cr0UzzNkRrfj4M8= Subject key identifier: D4:45:6C:60:87:9E:4F:EA:31:84:4F:D3:49:77:91:7D:DD:D3:FA:B7 Authority key identifier: 31:DB:0F:88:3C:F9:44:91:45:1E:90:8C:6E:68:2A:CE:36:B1:36:02 Certificate issuer: /CN=31db0f883cf94491451e908c6e682ace36b13602 Certificate serial: 019B4513A45BC5C3B57DA5DB13BC27F91ECF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdsPiDz5RJFFHpCMbmgqzjaxNgI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/a70e5f-0480-415c-8512-921a2e7a5608/1/MdsPiDz5RJFFHpCMbmgqzjaxNgI.mft Manifest number: 099C Signing time: Mon 22 Dec 2025 08:01:13 +0000 Manifest this update: Mon 22 Dec 2025 08:01:13 +0000 Manifest next update: Tue 23 Dec 2025 08:01:13 +0000 Files and hashes: 1: MdsPiDz5RJFFHpCMbmgqzjaxNgI.crl (hash: S5hQ41qLVH4uRx/379tnGKddPfTXcH6o3cP7df3EJYg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/a70e5f-0480-415c-8512-921a2e7a5608/1/MdsPiDz5RJFFHpCMbmgqzjaxNgI.crl rsync://rpki.ripe.net/repository/DEFAULT/04/a70e5f-0480-415c-8512-921a2e7a5608/1/MdsPiDz5RJFFHpCMbmgqzjaxNgI.mft rsync://rpki.ripe.net/repository/DEFAULT/MdsPiDz5RJFFHpCMbmgqzjaxNgI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 08:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:45:13:a4:5b:c5:c3:b5:7d:a5:db:13:bc:27:f9:1e:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31db0f883cf94491451e908c6e682ace36b13602 Validity Not Before: Dec 22 08:01:13 2025 GMT Not After : Dec 23 08:01:13 2025 GMT Subject: CN=d4456c60879e4fea31844fd34977917dddd3fab7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:3a:c1:5c:a6:9e:64:fa:91:a1:09:65:1e:68: 88:7d:3c:5e:d5:c7:00:91:42:2f:84:85:c9:b1:2c: 0e:b9:a4:09:dd:8a:f9:99:2d:9c:37:de:18:bb:20: e3:67:84:05:f1:f1:03:54:8b:51:50:5b:7d:20:fc: 8a:a1:2a:41:7b:ad:ca:4a:3e:a6:3c:d4:e3:b2:34: fe:86:6c:de:76:cf:f2:94:44:f9:63:ab:f0:32:ad: 18:15:b9:4d:b6:a5:32:21:d0:d3:01:bb:d0:8a:2f: 07:df:b5:c7:0a:c7:be:e5:d2:5e:71:8a:48:d0:28: c6:80:c2:62:85:71:ff:b1:b3:85:75:72:ce:30:af: 2c:66:e8:88:9c:72:64:d0:3b:9a:8f:0b:85:ee:e0: c5:cb:46:dc:55:cb:36:d9:65:ea:17:38:30:4c:e3: 0c:c0:37:39:d6:2d:8d:48:de:86:7f:92:c2:e0:be: 4f:02:77:74:cf:fa:41:77:68:a0:9e:00:88:90:5d: da:29:0c:25:c8:34:77:a6:23:45:87:bd:01:8b:9d: 94:8d:80:e4:f9:78:f8:7e:17:22:61:ad:c1:7e:9a: c9:ac:ed:0a:df:4f:c5:be:3a:5c:08:e8:df:d9:77: 75:6d:e3:93:84:39:9d:75:37:3b:2c:9f:5f:b5:11: e7:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:45:6C:60:87:9E:4F:EA:31:84:4F:D3:49:77:91:7D:DD:D3:FA:B7 X509v3 Authority Key Identifier: keyid:31:DB:0F:88:3C:F9:44:91:45:1E:90:8C:6E:68:2A:CE:36:B1:36:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdsPiDz5RJFFHpCMbmgqzjaxNgI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/a70e5f-0480-415c-8512-921a2e7a5608/1/MdsPiDz5RJFFHpCMbmgqzjaxNgI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/04/a70e5f-0480-415c-8512-921a2e7a5608/1/MdsPiDz5RJFFHpCMbmgqzjaxNgI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:37:c9:65:f4:8c:52:80:b9:f4:03:5d:09:aa:bb:23:db:59: 21:4b:ce:8f:1e:35:a7:5b:dc:ac:64:0d:83:cd:0c:00:11:f6: 3b:33:bf:9f:d7:a7:56:f8:67:68:8e:ad:03:d8:9b:83:f2:3a: 16:61:55:42:13:43:27:3c:26:4d:6f:ba:76:e9:19:97:47:7d: 27:9c:54:6d:08:bf:32:de:f0:23:95:f6:36:17:b8:86:e1:61: 06:58:16:fb:1d:43:c0:b9:42:98:d6:f5:d4:a6:93:be:2f:5a: e5:57:b6:e6:19:72:26:53:d3:0c:2d:c9:e6:f3:c2:ab:34:5e: 69:1d:c7:47:98:aa:2f:b3:c6:65:8d:f6:e6:76:94:dd:3f:f5: 8d:4a:fa:73:23:a8:fd:f2:b8:11:81:17:e7:98:6c:65:4b:7b: 26:43:ff:e9:4e:4c:e0:35:df:ea:db:f1:4c:e3:49:b5:5c:9b: 14:52:1a:9f:40:91:b1:45:c2:49:3c:05:d3:85:ea:74:a6:78: 80:ab:77:2f:3c:bb:de:39:17:1a:a3:17:88:2c:2b:7d:aa:16: dd:66:6f:c4:52:b8:9b:28:1e:a7:be:b6:86:1b:b7:c4:3f:5f: 0f:d7:80:74:30:1c:d2:77:0c:bb:10:59:9b:22:3d:e7:52:2e: 31:2f:8b:09 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtFE6RbxcO1faXbE7wn+R7PMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxZGIwZjg4M2NmOTQ0OTE0NTFlOTA4YzZlNjgyYWNlMzZi MTM2MDIwHhcNMjUxMjIyMDgwMTEzWhcNMjUxMjIzMDgwMTEzWjAzMTEwLwYDVQQD EyhkNDQ1NmM2MDg3OWU0ZmVhMzE4NDRmZDM0OTc3OTE3ZGRkZDNmYWI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtzrBXKaeZPqRoQllHmiIfTxe1ccA kUIvhIXJsSwOuaQJ3Yr5mS2cN94YuyDjZ4QF8fEDVItRUFt9IPyKoSpBe63KSj6m PNTjsjT+hmzeds/ylET5Y6vwMq0YFblNtqUyIdDTAbvQii8H37XHCse+5dJecYpI 0CjGgMJihXH/sbOFdXLOMK8sZuiInHJk0DuajwuF7uDFy0bcVcs22WXqFzgwTOMM wDc51i2NSN6Gf5LC4L5PAnd0z/pBd2igngCIkF3aKQwlyDR3piNFh70Bi52UjYDk +Xj4fhciYa3BfprJrO0K30/FvjpcCOjf2Xd1beOThDmddTc7LJ9ftRHnKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNRFbGCHnk/qMYRP00l3kX3d0/q3MB8GA1UdIwQY MBaAFDHbD4g8+USRRR6QjG5oKs42sTYCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTWRzUGlEejVSSkZGSHBDTWJtZ3F6amF4TmdJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC9hNzBlNWYtMDQ4MC00MTVjLTg1MTIt OTIxYTJlN2E1NjA4LzEvTWRzUGlEejVSSkZGSHBDTWJtZ3F6amF4TmdJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNC9hNzBlNWYtMDQ4MC00MTVjLTg1MTItOTIxYTJlN2E1NjA4 LzEvTWRzUGlEejVSSkZGSHBDTWJtZ3F6amF4TmdJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcDfJZfSM UoC59ANdCaq7I9tZIUvOjx41p1vcrGQNg80MABH2OzO/n9enVvhnaI6tA9ibg/I6 FmFVQhNDJzwmTW+6dukZl0d9J5xUbQi/Mt7wI5X2Nhe4huFhBlgW+x1DwLlCmNb1 1KaTvi9a5Ve25hlyJlPTDC3J5vPCqzReaR3HR5iqL7PGZY325naU3T/1jUr6cyOo /fK4EYEX55hsZUt7JkP/6U5M4DXf6tvxTONJtVybFFIan0CRsUXCSTwF04XqdKZ4 gKt3Lzy73jkXGqMXiCwrfaoW3WZvxFK4mygep762hhu3xD9fD9eAdDAc0ncMuxBZ myI951IuMS+LCQ== -----END CERTIFICATE-----Generated at Mon Dec 22 13:56:55 2025 by rpki-client