This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/8fc395-b674-4137-bc75-9bbd1eebe33e/1/MR-FGI0IL9VkC1w_4SIfYMUB7bU.mft File: MR-FGI0IL9VkC1w_4SIfYMUB7bU.mft (raw, json) Hash identifier: JqEVw8Cucd/hzNG+DWkjGm1R7A3fv9VRGvKleE3ey/w= Subject key identifier: ED:E0:4D:DF:42:99:EF:12:07:FF:6A:85:9F:9C:BC:C9:A6:81:4C:94 Authority key identifier: 31:1F:85:18:8D:08:2F:D5:64:0B:5C:3F:E1:22:1F:60:C5:01:ED:B5 Certificate issuer: /CN=311f85188d082fd5640b5c3fe1221f60c501edb5 Certificate serial: 019B3DFE976C72271FF6C941EFAB1D3705AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MR-FGI0IL9VkC1w_4SIfYMUB7bU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/8fc395-b674-4137-bc75-9bbd1eebe33e/1/MR-FGI0IL9VkC1w_4SIfYMUB7bU.mft Manifest number: 1403 Signing time: Sat 20 Dec 2025 23:00:53 +0000 Manifest this update: Sat 20 Dec 2025 23:00:53 +0000 Manifest next update: Sun 21 Dec 2025 23:00:53 +0000 Files and hashes: 1: 1-VHrNTKPE5li_5D6_S7bqwdp74.roa (hash: D8+eyIa/n1dX91YGJmeaTQ892LZ6O4dV4y7sAsmFXOY=) 2: MR-FGI0IL9VkC1w_4SIfYMUB7bU.crl (hash: wrfaw35sK8My15OOvRcyf1a6G97z8OO5SasO6u4D9QU=) 3: aJNwYmFgr6ViKkuqW5xEof9PXUo.roa (hash: G3zXA4vf4Y9OKHnEoVuD2Dc38Mxm/gXmn8/iv6aZLz0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/8fc395-b674-4137-bc75-9bbd1eebe33e/1/MR-FGI0IL9VkC1w_4SIfYMUB7bU.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/8fc395-b674-4137-bc75-9bbd1eebe33e/1/MR-FGI0IL9VkC1w_4SIfYMUB7bU.mft rsync://rpki.ripe.net/repository/DEFAULT/MR-FGI0IL9VkC1w_4SIfYMUB7bU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:fe:97:6c:72:27:1f:f6:c9:41:ef:ab:1d:37:05:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=311f85188d082fd5640b5c3fe1221f60c501edb5 Validity Not Before: Dec 20 23:00:53 2025 GMT Not After : Dec 21 23:00:53 2025 GMT Subject: CN=ede04ddf4299ef1207ff6a859f9cbcc9a6814c94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:07:6d:3d:2c:30:f8:de:59:b8:66:4a:46:81: a3:fc:14:0d:3c:c4:ee:df:a2:b4:0f:70:bc:81:3d: 18:8b:60:2c:7f:d7:88:87:b9:44:f4:97:10:3a:a9: 2e:db:f7:26:a3:f3:48:9d:62:59:41:c0:2a:17:eb: bd:de:41:5a:6e:fe:cd:f2:aa:c9:4b:4c:02:86:4d: 01:49:54:e1:a0:69:c6:74:9a:f8:d8:59:06:4a:24: e5:c3:46:90:55:0d:b8:43:53:a7:ef:5b:e2:2f:b8: fd:27:0c:0a:5e:43:ee:9f:54:d8:d6:b6:3b:82:55: 12:cf:01:71:f2:c4:27:d4:75:8d:26:c2:e7:34:8d: 74:62:2e:dc:8e:ab:3d:e7:96:36:6f:3d:96:6a:95: 18:28:c7:9a:f3:d5:1f:4a:90:93:25:15:3b:d1:0d: d9:2c:22:c4:35:0d:5a:35:84:b1:01:07:f8:8d:d4: 02:9b:45:e6:4c:b7:cd:22:c1:3d:55:27:e5:b4:a2: d3:9d:a8:bd:3b:b2:24:4f:b0:f4:b9:4d:8e:d7:6a: f3:ac:b5:50:53:6b:da:0f:79:26:f0:da:9f:3f:97: 6a:cf:cd:81:78:a1:36:fd:64:83:e3:62:ad:6c:69: 65:46:60:b9:b5:64:8f:cc:98:82:cf:6c:3e:5e:b8: 23:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:E0:4D:DF:42:99:EF:12:07:FF:6A:85:9F:9C:BC:C9:A6:81:4C:94 X509v3 Authority Key Identifier: keyid:31:1F:85:18:8D:08:2F:D5:64:0B:5C:3F:E1:22:1F:60:C5:01:ED:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MR-FGI0IL9VkC1w_4SIfYMUB7bU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/8fc395-b674-4137-bc75-9bbd1eebe33e/1/MR-FGI0IL9VkC1w_4SIfYMUB7bU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/8fc395-b674-4137-bc75-9bbd1eebe33e/1/MR-FGI0IL9VkC1w_4SIfYMUB7bU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c5:1f:83:35:10:80:f7:28:4b:4b:7c:a5:50:57:47:19:53:89: b8:ab:9b:be:96:b0:00:51:41:1e:7f:31:ac:fa:9a:82:c3:02: 84:ef:45:4b:67:90:a4:b0:68:c7:68:ee:3a:cf:1a:44:7b:a8: 60:4f:16:af:4a:33:a9:43:42:eb:38:22:a6:96:2d:75:e0:31: ee:50:54:7e:89:44:36:a4:bb:16:6d:25:84:d9:d4:a5:de:e9: bc:9f:48:2c:fb:f9:21:0c:35:44:9b:48:02:67:69:17:ee:d2: 9c:36:76:72:c9:c9:0a:c3:f5:23:45:1b:90:06:74:6e:eb:f2: f7:3b:be:73:24:e1:47:b6:66:37:30:be:3c:c8:05:4f:88:02: 35:f6:0f:ca:1f:23:19:1e:16:27:da:ec:53:44:ac:9a:47:3d: 7f:7d:31:b7:97:4b:f3:23:f0:ac:62:df:22:1d:eb:bb:ac:49: 55:57:bc:b1:2b:77:bf:e0:bc:14:d2:15:74:31:0e:e6:76:a5: 93:f0:e4:c1:08:82:ec:44:5a:bd:d6:f4:ad:3a:1e:0f:0b:cf: 3e:f5:7c:5a:aa:d3:ee:5e:84:8f:b5:49:30:d5:06:d9:2b:87: db:57:6a:71:ac:09:0b:e6:92:49:97:4d:82:99:03:dd:42:5e: 49:31:3f:2c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9/pdscicf9slB76sdNwWqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxMWY4NTE4OGQwODJmZDU2NDBiNWMzZmUxMjIxZjYwYzUw MWVkYjUwHhcNMjUxMjIwMjMwMDUzWhcNMjUxMjIxMjMwMDUzWjAzMTEwLwYDVQQD EyhlZGUwNGRkZjQyOTllZjEyMDdmZjZhODU5ZjljYmNjOWE2ODE0Yzk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0wdtPSww+N5ZuGZKRoGj/BQNPMTu 36K0D3C8gT0Yi2Asf9eIh7lE9JcQOqku2/cmo/NInWJZQcAqF+u93kFabv7N8qrJ S0wChk0BSVThoGnGdJr42FkGSiTlw0aQVQ24Q1On71viL7j9JwwKXkPun1TY1rY7 glUSzwFx8sQn1HWNJsLnNI10Yi7cjqs955Y2bz2WapUYKMea89UfSpCTJRU70Q3Z LCLENQ1aNYSxAQf4jdQCm0XmTLfNIsE9VSfltKLTnai9O7IkT7D0uU2O12rzrLVQ U2vaD3km8NqfP5dqz82BeKE2/WSD42KtbGllRmC5tWSPzJiCz2w+Xrgj1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO3gTd9Cme8SB/9qhZ+cvMmmgUyUMB8GA1UdIwQY MBaAFDEfhRiNCC/VZAtcP+EiH2DFAe21MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTVItRkdJMElMOVZrQzF3XzRTSWZZTVVCN2JVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi84ZmMzOTUtYjY3NC00MTM3LWJjNzUt OWJiZDFlZWJlMzNlLzEvTVItRkdJMElMOVZrQzF3XzRTSWZZTVVCN2JVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi84ZmMzOTUtYjY3NC00MTM3LWJjNzUtOWJiZDFlZWJlMzNl LzEvTVItRkdJMElMOVZrQzF3XzRTSWZZTVVCN2JVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxR+DNRCA 9yhLS3ylUFdHGVOJuKubvpawAFFBHn8xrPqagsMChO9FS2eQpLBox2juOs8aRHuo YE8Wr0ozqUNC6zgippYtdeAx7lBUfolENqS7Fm0lhNnUpd7pvJ9ILPv5IQw1RJtI AmdpF+7SnDZ2csnJCsP1I0UbkAZ0buvy9zu+cyThR7ZmNzC+PMgFT4gCNfYPyh8j GR4WJ9rsU0Ssmkc9f30xt5dL8yPwrGLfIh3ru6xJVVe8sSt3v+C8FNIVdDEO5nal k/DkwQiC7ERavdb0rToeDwvPPvV8WqrT7l6Ej7VJMNUG2SuH21dqcawJC+aSSZdN gpkD3UJeSTE/LA== -----END CERTIFICATE-----Generated at Sun Dec 21 04:10:53 2025 by rpki-client