This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/adc0fe-a24f-4736-afb8-796b38796f69/1/MPCPhA4xfpUgW6E0l9nbxzd7nlc.mft File: MPCPhA4xfpUgW6E0l9nbxzd7nlc.mft (raw, json) Hash identifier: EedMH/mT8lkOzAhkcdDwjfKO2hUFw3EshicBd0wg15w= Subject key identifier: 37:F3:55:62:12:0F:1F:C9:F6:11:B9:20:68:64:9E:1F:5A:7C:D4:9D Authority key identifier: 30:F0:8F:84:0E:31:7E:95:20:5B:A1:34:97:D9:DB:C7:37:7B:9E:57 Certificate issuer: /CN=30f08f840e317e95205ba13497d9dbc7377b9e57 Certificate serial: 019B5F40FB4E7B0B5953395F5DD252E14E6A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MPCPhA4xfpUgW6E0l9nbxzd7nlc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/adc0fe-a24f-4736-afb8-796b38796f69/1/MPCPhA4xfpUgW6E0l9nbxzd7nlc.mft Manifest number: 0815 Signing time: Sat 27 Dec 2025 10:00:52 +0000 Manifest this update: Sat 27 Dec 2025 10:00:52 +0000 Manifest next update: Sun 28 Dec 2025 10:00:52 +0000 Files and hashes: 1: MPCPhA4xfpUgW6E0l9nbxzd7nlc.crl (hash: O9K+80+E7AxlrxLrjYXhheWObnILXwReUcKgsV6DVsY=) 2: w63CtVkaTB-I3bLthiRIKcHJ1z0.roa (hash: PphDOFm6VhjC/oLMpXqjasemzNyOPtAOJruxm2WGQGk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/adc0fe-a24f-4736-afb8-796b38796f69/1/MPCPhA4xfpUgW6E0l9nbxzd7nlc.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/adc0fe-a24f-4736-afb8-796b38796f69/1/MPCPhA4xfpUgW6E0l9nbxzd7nlc.mft rsync://rpki.ripe.net/repository/DEFAULT/MPCPhA4xfpUgW6E0l9nbxzd7nlc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 08:42:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5f:40:fb:4e:7b:0b:59:53:39:5f:5d:d2:52:e1:4e:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30f08f840e317e95205ba13497d9dbc7377b9e57 Validity Not Before: Dec 27 10:00:52 2025 GMT Not After : Dec 28 10:00:52 2025 GMT Subject: CN=37f35562120f1fc9f611b92068649e1f5a7cd49d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:50:db:1a:7c:8f:ab:4e:06:f8:55:ca:78:20: 94:25:e1:a3:24:fa:0d:09:2b:aa:5f:ff:06:65:80: 0c:96:5d:61:a4:a0:cb:09:76:a4:5e:1f:85:df:4d: 98:13:53:0a:ab:90:db:60:d8:ad:ca:c8:46:54:2d: 02:ff:ae:b5:74:a2:00:da:35:4e:97:3c:f9:48:b4: a4:70:bd:58:24:8d:d7:87:48:a7:85:39:f0:c4:ce: 59:00:27:76:c7:7a:2c:a3:db:15:1b:f7:06:89:a5: 57:7d:6c:73:44:d0:50:09:b8:98:7b:cd:d0:3d:4f: ac:15:c3:74:0d:44:b2:f3:ac:e5:36:e5:03:67:80: 50:c7:5b:cd:41:cc:1a:60:9b:95:00:70:13:f5:e3: 66:b9:c9:c4:6b:9e:28:c4:5c:51:df:56:5e:98:31: 69:f6:e6:e1:73:55:7f:43:65:3c:ed:56:74:2e:e0: da:c5:70:3d:e2:00:17:88:67:61:cf:ad:4f:db:aa: 33:4c:8d:a6:71:50:58:ba:09:3d:3c:e0:b5:81:e7: 19:83:8a:3f:e7:82:66:78:39:50:f2:f9:1e:e1:98: d7:c8:67:6c:bb:a6:4b:ed:20:79:c5:34:62:4d:4d: 14:95:14:63:74:43:1f:a8:c1:79:75:f1:5c:28:05: 6c:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:F3:55:62:12:0F:1F:C9:F6:11:B9:20:68:64:9E:1F:5A:7C:D4:9D X509v3 Authority Key Identifier: keyid:30:F0:8F:84:0E:31:7E:95:20:5B:A1:34:97:D9:DB:C7:37:7B:9E:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MPCPhA4xfpUgW6E0l9nbxzd7nlc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/adc0fe-a24f-4736-afb8-796b38796f69/1/MPCPhA4xfpUgW6E0l9nbxzd7nlc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/adc0fe-a24f-4736-afb8-796b38796f69/1/MPCPhA4xfpUgW6E0l9nbxzd7nlc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:db:78:93:7c:2f:8d:d5:48:d0:68:3a:a3:3a:c8:cc:cf:39: 7f:43:f9:af:0b:ee:99:8d:fe:48:4d:54:ed:ab:2c:c1:bb:09: 57:74:f2:27:46:da:88:79:fc:3a:52:ee:1b:18:ca:db:5a:e9: 43:11:de:4c:41:fd:bd:6d:86:40:81:f2:6c:50:97:f6:65:40: be:cf:a8:77:ad:1c:dd:a2:f0:97:9d:be:72:69:bb:9f:58:a1: 42:86:20:0a:a9:88:31:0b:7c:c8:ca:53:25:fc:aa:03:95:a9: bd:54:05:e0:0b:9f:1a:a5:60:0a:da:81:e8:c8:f0:13:14:e5: a8:84:e3:03:ce:5a:d7:1e:70:4a:23:ae:71:f0:94:7e:0f:42: d1:c0:4b:b9:c6:86:2b:e4:9c:93:14:2b:80:7c:6a:2e:4e:e1: fb:47:17:11:9b:97:7b:22:e2:6c:3a:c4:69:1a:2e:f1:21:ff: 17:84:da:35:0f:24:66:25:a5:30:47:d9:0c:5f:44:b8:c2:55: 91:a4:1a:0f:95:c6:9c:c1:83:28:aa:9b:88:f7:58:14:19:ca: ff:93:59:43:d7:26:3b:b3:8e:ca:a2:c2:25:45:94:af:3d:3a: a3:97:8b:f2:95:0f:16:50:6a:eb:1e:f7:eb:33:df:ec:a3:32: a3:0a:8d:86 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtfQPtOewtZUzlfXdJS4U5qMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwZjA4Zjg0MGUzMTdlOTUyMDViYTEzNDk3ZDlkYmM3Mzc3 YjllNTcwHhcNMjUxMjI3MTAwMDUyWhcNMjUxMjI4MTAwMDUyWjAzMTEwLwYDVQQD EygzN2YzNTU2MjEyMGYxZmM5ZjYxMWI5MjA2ODY0OWUxZjVhN2NkNDlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsVDbGnyPq04G+FXKeCCUJeGjJPoN CSuqX/8GZYAMll1hpKDLCXakXh+F302YE1MKq5DbYNityshGVC0C/661dKIA2jVO lzz5SLSkcL1YJI3Xh0inhTnwxM5ZACd2x3oso9sVG/cGiaVXfWxzRNBQCbiYe83Q PU+sFcN0DUSy86zlNuUDZ4BQx1vNQcwaYJuVAHAT9eNmucnEa54oxFxR31ZemDFp 9ubhc1V/Q2U87VZ0LuDaxXA94gAXiGdhz61P26ozTI2mcVBYugk9POC1gecZg4o/ 54JmeDlQ8vke4ZjXyGdsu6ZL7SB5xTRiTU0UlRRjdEMfqMF5dfFcKAVsUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDfzVWISDx/J9hG5IGhknh9afNSdMB8GA1UdIwQY MBaAFDDwj4QOMX6VIFuhNJfZ28c3e55XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTVBDUGhBNHhmcFVnVzZFMGw5bmJ4emQ3bmxjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9hZGMwZmUtYTI0Zi00NzM2LWFmYjgt Nzk2YjM4Nzk2ZjY5LzEvTVBDUGhBNHhmcFVnVzZFMGw5bmJ4emQ3bmxjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS9hZGMwZmUtYTI0Zi00NzM2LWFmYjgtNzk2YjM4Nzk2ZjY5 LzEvTVBDUGhBNHhmcFVnVzZFMGw5bmJ4emQ3bmxjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAItt4k3wv jdVI0Gg6ozrIzM85f0P5rwvumY3+SE1U7asswbsJV3TyJ0baiHn8OlLuGxjK21rp QxHeTEH9vW2GQIHybFCX9mVAvs+od60c3aLwl52+cmm7n1ihQoYgCqmIMQt8yMpT JfyqA5WpvVQF4AufGqVgCtqB6MjwExTlqITjA85a1x5wSiOucfCUfg9C0cBLucaG K+SckxQrgHxqLk7h+0cXEZuXeyLibDrEaRou8SH/F4TaNQ8kZiWlMEfZDF9EuMJV kaQaD5XGnMGDKKqbiPdYFBnK/5NZQ9cmO7OOyqLCJUWUrz06o5eL8pUPFlBq6x73 6zPf7KMyowqNhg== -----END CERTIFICATE-----Generated at Sat Dec 27 16:09:20 2025 by rpki-client