This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/5c36f7-9fca-4896-ab72-05e7fa630bbc/1/mpj-vDPk1ReuPZyj6TLi1Lpohaw.mft File: mpj-vDPk1ReuPZyj6TLi1Lpohaw.mft (raw, json) Hash identifier: L4r8yfEfJZPWk1AJX9qrcorvAF95EjmA/A3EblTrnTQ= Subject key identifier: FB:30:20:1A:13:BF:1C:4E:06:D9:68:32:7B:E1:99:31:B0:F2:0E:D8 Authority key identifier: 9A:98:FE:BC:33:E4:D5:17:AE:3D:9C:A3:E9:32:E2:D4:BA:68:85:AC Certificate issuer: /CN=9a98febc33e4d517ae3d9ca3e932e2d4ba6885ac Certificate serial: 019B4C95CB05398ACBC5C6B1115F67CFE3D8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mpj-vDPk1ReuPZyj6TLi1Lpohaw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/5c36f7-9fca-4896-ab72-05e7fa630bbc/1/mpj-vDPk1ReuPZyj6TLi1Lpohaw.mft Manifest number: 0BF4 Signing time: Tue 23 Dec 2025 19:00:43 +0000 Manifest this update: Tue 23 Dec 2025 19:00:43 +0000 Manifest next update: Wed 24 Dec 2025 19:00:43 +0000 Files and hashes: 1: mpj-vDPk1ReuPZyj6TLi1Lpohaw.crl (hash: sXAQ5iNntTG74gIoEro8Jl0Yf1BEf0aLZFhAuUTsPEE=) 2: yetABbyl2MadBOs3otjwQ2Snhiw.roa (hash: QjHSeYtiJ8ed7+XFEV/Jho222/lz+EVhX5TG4jAr6Y4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/5c36f7-9fca-4896-ab72-05e7fa630bbc/1/mpj-vDPk1ReuPZyj6TLi1Lpohaw.crl rsync://rpki.ripe.net/repository/DEFAULT/3e/5c36f7-9fca-4896-ab72-05e7fa630bbc/1/mpj-vDPk1ReuPZyj6TLi1Lpohaw.mft rsync://rpki.ripe.net/repository/DEFAULT/mpj-vDPk1ReuPZyj6TLi1Lpohaw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 15:46:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4c:95:cb:05:39:8a:cb:c5:c6:b1:11:5f:67:cf:e3:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a98febc33e4d517ae3d9ca3e932e2d4ba6885ac Validity Not Before: Dec 23 19:00:43 2025 GMT Not After : Dec 24 19:00:43 2025 GMT Subject: CN=fb30201a13bf1c4e06d968327be19931b0f20ed8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:73:87:c4:36:77:4e:f5:40:50:37:cf:0f:7f: f2:d2:2d:46:23:c9:b8:26:f5:a5:ff:b3:72:56:b5: 2e:aa:a0:9c:3a:fa:aa:f9:9e:93:3b:92:0c:5c:8c: 9b:f6:89:db:14:11:45:01:e4:f5:76:b9:5d:c9:fa: c7:53:b5:97:98:dc:89:26:2e:8f:a4:40:5e:63:e8: b4:e8:25:1a:af:94:94:1b:ee:e2:54:c1:7a:7f:eb: 86:a7:ab:4e:cb:b3:55:fd:1d:54:c3:b0:ff:f9:b3: f3:20:1b:c1:2c:3f:32:40:94:10:18:3a:0c:71:86: 25:29:35:bb:dd:f9:fd:ad:a9:4b:01:8e:39:33:08: ff:59:7f:38:2a:12:6b:c7:55:4f:14:20:74:2d:55: 1c:37:c2:cc:bb:bf:51:c6:2c:69:56:b5:dc:d4:7c: f6:a9:c6:94:2b:ab:43:61:45:59:9e:e8:f7:43:58: 2e:b8:71:ba:49:95:3b:ff:eb:d6:94:f8:08:f5:d4: 25:c0:32:b5:27:85:8e:85:91:8e:be:b3:91:ce:9c: 70:d9:d5:e6:3a:fb:e9:5b:df:0a:14:49:36:d4:58: 0a:d2:a7:a7:9f:cf:1f:f7:df:a5:36:52:9c:4b:ce: fd:58:4f:cb:61:85:df:fe:7c:0d:38:59:49:a3:2f: bf:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:30:20:1A:13:BF:1C:4E:06:D9:68:32:7B:E1:99:31:B0:F2:0E:D8 X509v3 Authority Key Identifier: keyid:9A:98:FE:BC:33:E4:D5:17:AE:3D:9C:A3:E9:32:E2:D4:BA:68:85:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mpj-vDPk1ReuPZyj6TLi1Lpohaw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/5c36f7-9fca-4896-ab72-05e7fa630bbc/1/mpj-vDPk1ReuPZyj6TLi1Lpohaw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/5c36f7-9fca-4896-ab72-05e7fa630bbc/1/mpj-vDPk1ReuPZyj6TLi1Lpohaw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:02:a0:16:e0:1f:67:85:75:69:e0:ad:4b:94:0d:73:f4:e6: 78:18:30:03:a2:9c:2f:11:5c:26:39:11:83:12:2a:a0:45:51: 5d:5b:09:fd:f2:19:a2:43:16:69:4e:4b:9e:48:c9:a9:39:33: 31:ce:e1:7c:18:0b:1c:fd:a0:89:41:02:9f:75:19:80:aa:ef: ed:69:39:df:5d:e9:bd:80:2c:b1:c5:65:f7:fc:03:d4:cb:90: 01:e7:b9:da:f5:71:a3:9b:75:46:0a:f2:f0:c0:49:85:90:ea: 76:19:ba:0a:0d:f8:be:f3:7e:5c:7d:b4:c5:33:6f:40:eb:4a: 78:c8:b0:90:68:f7:e4:b8:3a:59:67:06:0c:b0:9b:31:c8:d4: 49:6a:50:fc:ec:98:36:8d:63:6d:98:62:95:fc:7a:59:19:66: 25:e9:6f:bc:2d:6a:df:94:7d:fc:91:5f:96:e6:b0:e9:5d:74: ed:7e:e8:63:87:c5:e7:72:14:20:9c:5b:c1:da:13:09:9e:6d: 83:fb:ea:0d:4e:55:4c:61:74:bb:03:e3:31:6f:9b:d3:2b:bc: c2:f1:e8:82:e5:95:fa:d8:09:e5:f1:5b:37:f5:73:54:8a:d9: fe:7b:79:aa:ad:8d:12:0b:8e:e0:d6:c9:43:0d:9d:78:58:4d: 28:4f:e0:b8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtMlcsFOYrLxcaxEV9nz+PYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhOThmZWJjMzNlNGQ1MTdhZTNkOWNhM2U5MzJlMmQ0YmE2 ODg1YWMwHhcNMjUxMjIzMTkwMDQzWhcNMjUxMjI0MTkwMDQzWjAzMTEwLwYDVQQD EyhmYjMwMjAxYTEzYmYxYzRlMDZkOTY4MzI3YmUxOTkzMWIwZjIwZWQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl3OHxDZ3TvVAUDfPD3/y0i1GI8m4 JvWl/7NyVrUuqqCcOvqq+Z6TO5IMXIyb9onbFBFFAeT1drldyfrHU7WXmNyJJi6P pEBeY+i06CUar5SUG+7iVMF6f+uGp6tOy7NV/R1Uw7D/+bPzIBvBLD8yQJQQGDoM cYYlKTW73fn9ralLAY45Mwj/WX84KhJrx1VPFCB0LVUcN8LMu79RxixpVrXc1Hz2 qcaUK6tDYUVZnuj3Q1guuHG6SZU7/+vWlPgI9dQlwDK1J4WOhZGOvrORzpxw2dXm OvvpW98KFEk21FgK0qenn88f99+lNlKcS879WE/LYYXf/nwNOFlJoy+/BQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPswIBoTvxxOBtloMnvhmTGw8g7YMB8GA1UdIwQY MBaAFJqY/rwz5NUXrj2co+ky4tS6aIWsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbXBqLXZEUGsxUmV1UFp5ajZUTGkxTHBvaGF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS81YzM2ZjctOWZjYS00ODk2LWFiNzIt MDVlN2ZhNjMwYmJjLzEvbXBqLXZEUGsxUmV1UFp5ajZUTGkxTHBvaGF3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZS81YzM2ZjctOWZjYS00ODk2LWFiNzItMDVlN2ZhNjMwYmJj LzEvbXBqLXZEUGsxUmV1UFp5ajZUTGkxTHBvaGF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeAKgFuAf Z4V1aeCtS5QNc/TmeBgwA6KcLxFcJjkRgxIqoEVRXVsJ/fIZokMWaU5LnkjJqTkz Mc7hfBgLHP2giUECn3UZgKrv7Wk5313pvYAsscVl9/wD1MuQAee52vVxo5t1Rgry 8MBJhZDqdhm6Cg34vvN+XH20xTNvQOtKeMiwkGj35Lg6WWcGDLCbMcjUSWpQ/OyY No1jbZhilfx6WRlmJelvvC1q35R9/JFfluaw6V107X7oY4fF53IUIJxbwdoTCZ5t g/vqDU5VTGF0uwPjMW+b0yu8wvHoguWV+tgJ5fFbN/VzVIrZ/nt5qq2NEguO4NbJ Qw2deFhNKE/guA== -----END CERTIFICATE-----Generated at Tue Dec 23 20:34:46 2025 by rpki-client