This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/38eee8-7b5b-4323-8fa5-4cac2c20753a/1/MfEkvY8Uu5ikiEnFIFg3Mjv8-Ew.mft File: MfEkvY8Uu5ikiEnFIFg3Mjv8-Ew.mft (raw, json) Hash identifier: YXfhvm9+giL7LYcVqHxlEsLpUQqpAumagWcI/6PUF2k= Subject key identifier: 40:4F:52:AD:57:DD:94:28:CD:DC:45:CE:19:02:F9:71:57:0B:1F:57 Authority key identifier: 31:F1:24:BD:8F:14:BB:98:A4:88:49:C5:20:58:37:32:3B:FC:F8:4C Certificate issuer: /CN=31f124bd8f14bb98a48849c5205837323bfcf84c Certificate serial: 019B397D54F226E30B69B7D07A08EE623430 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MfEkvY8Uu5ikiEnFIFg3Mjv8-Ew.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/38eee8-7b5b-4323-8fa5-4cac2c20753a/1/MfEkvY8Uu5ikiEnFIFg3Mjv8-Ew.mft Manifest number: 05A7 Signing time: Sat 20 Dec 2025 02:01:13 +0000 Manifest this update: Sat 20 Dec 2025 02:01:13 +0000 Manifest next update: Sun 21 Dec 2025 02:01:13 +0000 Files and hashes: 1: MfEkvY8Uu5ikiEnFIFg3Mjv8-Ew.crl (hash: QbAy4x5g2aYPlqn4mw+esbPupZqh5geCovi30pgs6PQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/38eee8-7b5b-4323-8fa5-4cac2c20753a/1/MfEkvY8Uu5ikiEnFIFg3Mjv8-Ew.crl rsync://rpki.ripe.net/repository/DEFAULT/42/38eee8-7b5b-4323-8fa5-4cac2c20753a/1/MfEkvY8Uu5ikiEnFIFg3Mjv8-Ew.mft rsync://rpki.ripe.net/repository/DEFAULT/MfEkvY8Uu5ikiEnFIFg3Mjv8-Ew.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:7d:54:f2:26:e3:0b:69:b7:d0:7a:08:ee:62:34:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31f124bd8f14bb98a48849c5205837323bfcf84c Validity Not Before: Dec 20 02:01:13 2025 GMT Not After : Dec 21 02:01:13 2025 GMT Subject: CN=404f52ad57dd9428cddc45ce1902f971570b1f57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:53:c5:86:ef:c1:0b:09:c1:07:36:66:43:c0: 1d:e7:34:63:b7:19:3d:a0:05:f2:f3:b1:7c:56:87: b7:3e:c0:c1:0d:63:47:4f:21:67:19:e3:0c:9c:73: 6c:3f:47:13:b4:74:ec:ad:75:a8:19:a3:58:6c:e0: 7e:36:d8:4b:f5:bb:42:97:ee:4b:b9:a5:84:f9:ec: df:a6:3c:70:68:eb:ec:5d:30:28:61:60:dc:ee:cd: 46:60:d6:aa:89:a9:b2:8f:84:68:35:40:45:05:99: e0:61:75:de:4e:a3:e4:46:54:35:ed:65:c0:f3:54: 1c:c8:e1:f7:ac:2c:61:44:aa:30:b3:1c:db:ec:95: df:e1:51:ca:15:a6:10:27:bd:a9:2c:e2:bd:f9:e4: d2:b3:d4:2e:6e:4b:37:bf:1e:85:ed:4f:5b:44:74: 92:66:76:8c:e5:4c:b2:c5:2d:13:3e:89:fd:92:ed: 56:a8:03:48:43:c0:d1:8b:bc:40:70:a0:d0:ce:2b: 93:f5:e3:01:11:a3:a2:08:cd:9d:8e:e5:4a:d9:2b: ae:ef:36:f7:81:67:45:49:be:86:e8:ac:b7:87:c1: 89:83:62:b3:04:15:78:2b:50:c2:f4:7d:cc:95:87: b3:cc:33:db:50:1e:b8:84:5f:cc:e0:20:d7:9e:8e: 09:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:4F:52:AD:57:DD:94:28:CD:DC:45:CE:19:02:F9:71:57:0B:1F:57 X509v3 Authority Key Identifier: keyid:31:F1:24:BD:8F:14:BB:98:A4:88:49:C5:20:58:37:32:3B:FC:F8:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MfEkvY8Uu5ikiEnFIFg3Mjv8-Ew.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/38eee8-7b5b-4323-8fa5-4cac2c20753a/1/MfEkvY8Uu5ikiEnFIFg3Mjv8-Ew.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/38eee8-7b5b-4323-8fa5-4cac2c20753a/1/MfEkvY8Uu5ikiEnFIFg3Mjv8-Ew.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:6a:9e:64:fd:8a:2c:69:4f:41:cd:60:9b:c2:fb:6d:e9:74: 0d:41:4c:ca:14:cc:b7:f7:f1:49:7a:ae:ec:00:21:7e:ba:ac: 08:97:b8:f4:94:1c:28:98:a3:7b:6c:2e:95:14:58:6b:44:0a: 75:f3:71:82:f8:ba:fa:5c:3c:be:55:72:77:e0:a6:1a:f0:f8: 81:33:1a:89:4d:77:34:41:66:ad:29:d5:24:6c:96:79:58:c3: c2:61:50:09:18:a9:d5:70:44:9f:b7:d1:8e:12:38:5d:87:a4: 24:d0:94:f9:45:7b:e1:5a:cf:7e:48:bb:58:0c:12:b9:95:b0: f7:f7:4e:e8:ff:19:ca:a0:d9:6e:1d:8d:8a:c0:06:b3:27:8c: 17:2c:36:84:1e:cd:04:fd:51:04:da:3d:df:14:7c:5b:47:73: 45:e4:86:0c:fd:ea:ba:08:80:87:9a:7a:5b:45:cc:d4:5b:2c: 00:28:aa:72:0d:05:98:e1:5c:28:6b:b2:36:e6:d3:c5:b5:9f: 50:7c:21:d7:0a:e5:78:5e:55:9c:44:b7:fb:18:5f:f0:62:98: 09:86:60:bb:80:6c:17:70:78:06:f7:5e:d9:d8:2d:2b:52:6c: e8:35:9c:94:2b:00:d2:15:66:f1:02:3c:93:22:53:05:91:15: 4c:09:6e:85 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5fVTyJuMLabfQegjuYjQwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxZjEyNGJkOGYxNGJiOThhNDg4NDljNTIwNTgzNzMyM2Jm Y2Y4NGMwHhcNMjUxMjIwMDIwMTEzWhcNMjUxMjIxMDIwMTEzWjAzMTEwLwYDVQQD Eyg0MDRmNTJhZDU3ZGQ5NDI4Y2RkYzQ1Y2UxOTAyZjk3MTU3MGIxZjU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArFPFhu/BCwnBBzZmQ8Ad5zRjtxk9 oAXy87F8Voe3PsDBDWNHTyFnGeMMnHNsP0cTtHTsrXWoGaNYbOB+NthL9btCl+5L uaWE+ezfpjxwaOvsXTAoYWDc7s1GYNaqiamyj4RoNUBFBZngYXXeTqPkRlQ17WXA 81QcyOH3rCxhRKowsxzb7JXf4VHKFaYQJ72pLOK9+eTSs9Qubks3vx6F7U9bRHSS ZnaM5UyyxS0TPon9ku1WqANIQ8DRi7xAcKDQziuT9eMBEaOiCM2djuVK2Suu7zb3 gWdFSb6G6Ky3h8GJg2KzBBV4K1DC9H3MlYezzDPbUB64hF/M4CDXno4JuwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEBPUq1X3ZQozdxFzhkC+XFXCx9XMB8GA1UdIwQY MBaAFDHxJL2PFLuYpIhJxSBYNzI7/PhMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTWZFa3ZZOFV1NWlraUVuRklGZzNNanY4LUV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi8zOGVlZTgtN2I1Yi00MzIzLThmYTUt NGNhYzJjMjA3NTNhLzEvTWZFa3ZZOFV1NWlraUVuRklGZzNNanY4LUV3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi8zOGVlZTgtN2I1Yi00MzIzLThmYTUtNGNhYzJjMjA3NTNh LzEvTWZFa3ZZOFV1NWlraUVuRklGZzNNanY4LUV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZWqeZP2K LGlPQc1gm8L7bel0DUFMyhTMt/fxSXqu7AAhfrqsCJe49JQcKJije2wulRRYa0QK dfNxgvi6+lw8vlVyd+CmGvD4gTMaiU13NEFmrSnVJGyWeVjDwmFQCRip1XBEn7fR jhI4XYekJNCU+UV74VrPfki7WAwSuZWw9/dO6P8ZyqDZbh2NisAGsyeMFyw2hB7N BP1RBNo93xR8W0dzReSGDP3qugiAh5p6W0XM1FssACiqcg0FmOFcKGuyNubTxbWf UHwh1wrleF5VnES3+xhf8GKYCYZgu4BsF3B4Bvde2dgtK1Js6DWclCsA0hVm8QI8 kyJTBZEVTAluhQ== -----END CERTIFICATE-----Generated at Sat Dec 20 10:42:51 2025 by rpki-client