This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/adc0fe-a24f-4736-afb8-796b38796f69/1/MPCPhA4xfpUgW6E0l9nbxzd7nlc.mft File: MPCPhA4xfpUgW6E0l9nbxzd7nlc.mft (raw, json) Hash identifier: SKerQYWm2Q61dRvBRMvXB6lmDG6tQP1OUAv1yFc5uas= Subject key identifier: EB:B2:78:2A:63:3D:9F:64:84:6F:D2:A8:0D:D3:86:B8:AC:34:6C:E2 Authority key identifier: 30:F0:8F:84:0E:31:7E:95:20:5B:A1:34:97:D9:DB:C7:37:7B:9E:57 Certificate issuer: /CN=30f08f840e317e95205ba13497d9dbc7377b9e57 Certificate serial: 019B405A9BE9EA9611E10CD07EAEF6133581 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MPCPhA4xfpUgW6E0l9nbxzd7nlc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/adc0fe-a24f-4736-afb8-796b38796f69/1/MPCPhA4xfpUgW6E0l9nbxzd7nlc.mft Manifest number: 0805 Signing time: Sun 21 Dec 2025 10:00:38 +0000 Manifest this update: Sun 21 Dec 2025 10:00:38 +0000 Manifest next update: Mon 22 Dec 2025 10:00:38 +0000 Files and hashes: 1: MPCPhA4xfpUgW6E0l9nbxzd7nlc.crl (hash: TjgKAA/TzVu0e8feNs8zI/Er3+xJVwBYbtnoX1i2WnY=) 2: w63CtVkaTB-I3bLthiRIKcHJ1z0.roa (hash: PphDOFm6VhjC/oLMpXqjasemzNyOPtAOJruxm2WGQGk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/adc0fe-a24f-4736-afb8-796b38796f69/1/MPCPhA4xfpUgW6E0l9nbxzd7nlc.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/adc0fe-a24f-4736-afb8-796b38796f69/1/MPCPhA4xfpUgW6E0l9nbxzd7nlc.mft rsync://rpki.ripe.net/repository/DEFAULT/MPCPhA4xfpUgW6E0l9nbxzd7nlc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:5a:9b:e9:ea:96:11:e1:0c:d0:7e:ae:f6:13:35:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30f08f840e317e95205ba13497d9dbc7377b9e57 Validity Not Before: Dec 21 10:00:38 2025 GMT Not After : Dec 22 10:00:38 2025 GMT Subject: CN=ebb2782a633d9f64846fd2a80dd386b8ac346ce2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:39:5f:4f:5b:11:ec:04:9a:fe:b3:cf:75:a9: ad:aa:a2:d1:06:62:48:90:ae:e6:db:55:f9:7a:9b: 40:76:3e:8c:1e:46:d9:6d:7d:46:68:a5:9f:22:76: f2:a4:2f:e9:28:14:e3:4f:a1:29:b9:34:b6:92:ec: 32:7d:ad:5a:d2:45:fc:92:2d:70:04:cb:17:e0:1c: cb:1b:f9:1b:55:10:cc:b4:af:26:05:86:d9:3d:ef: bb:ef:23:3b:7b:c8:e6:32:d8:48:78:53:b0:11:20: cc:ff:ab:6e:68:14:05:c8:69:ae:f6:1f:1a:7f:b3: 55:10:fa:3e:74:33:25:d5:52:19:6e:e6:b2:b7:69: ec:d4:da:27:cf:12:19:4d:d8:a9:d7:88:4a:1c:f2: 38:74:b4:f6:23:f3:7c:5e:8d:73:6b:86:cb:74:d6: fd:26:b6:42:f6:3a:18:60:cf:d8:bb:94:6f:1f:96: 4c:b9:1b:3a:09:07:35:8f:9a:54:da:f2:ce:d1:6c: b2:14:09:a9:33:99:7f:ba:22:06:03:d2:34:9c:21: f6:67:92:f8:0d:79:d1:2e:35:16:82:c1:e1:0d:71: 81:a3:08:a9:7b:71:72:69:2e:c5:68:9d:80:85:63: 9f:1f:93:8a:55:1c:21:66:5a:06:02:f3:37:44:5d: b7:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:B2:78:2A:63:3D:9F:64:84:6F:D2:A8:0D:D3:86:B8:AC:34:6C:E2 X509v3 Authority Key Identifier: keyid:30:F0:8F:84:0E:31:7E:95:20:5B:A1:34:97:D9:DB:C7:37:7B:9E:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MPCPhA4xfpUgW6E0l9nbxzd7nlc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/adc0fe-a24f-4736-afb8-796b38796f69/1/MPCPhA4xfpUgW6E0l9nbxzd7nlc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/adc0fe-a24f-4736-afb8-796b38796f69/1/MPCPhA4xfpUgW6E0l9nbxzd7nlc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:c6:c1:a8:55:3d:98:9b:88:27:23:16:5b:8b:a4:d3:29:eb: 47:7b:fd:94:60:7f:a7:c7:56:a6:fc:21:6e:8a:f1:5b:1f:c1: 7b:42:63:0f:6e:1c:ee:9b:f3:a7:a2:d6:57:48:48:c7:8d:a3: 3f:f4:d0:9d:6e:71:34:21:a4:42:e5:44:00:ec:3f:18:d6:c2: 26:9a:ee:69:5c:f0:ad:da:27:8d:92:69:2f:bb:6c:60:f8:03: 9f:2d:de:04:ca:c8:3c:54:fb:25:8c:0a:04:41:2b:90:ef:8a: a0:39:be:b8:d5:09:9e:33:d4:9e:ad:66:32:6e:09:06:64:99: 55:3f:90:3d:6c:f5:84:85:7c:4b:49:a9:a1:18:d4:0b:05:7f: 3e:b0:f8:b7:8f:0f:fe:37:4c:36:fa:ad:d2:34:9e:3a:77:d4: 44:a0:27:0e:ed:f6:07:c3:28:04:b4:c9:e5:22:bc:e9:dd:06: 69:80:d0:6f:a6:b2:cf:b3:fb:94:cf:33:75:4d:c1:9e:89:39: 87:bf:eb:91:c9:d9:0e:1f:47:4d:4b:c2:c4:a4:43:00:f6:4a: 59:d3:69:67:8d:36:e8:97:20:da:0a:6c:90:c4:b1:50:f3:04: 0d:79:25:7f:f0:da:c1:a0:68:e2:d9:79:bb:25:8a:1b:c5:a7: ff:14:b1:ac -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAWpvp6pYR4QzQfq72EzWBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwZjA4Zjg0MGUzMTdlOTUyMDViYTEzNDk3ZDlkYmM3Mzc3 YjllNTcwHhcNMjUxMjIxMTAwMDM4WhcNMjUxMjIyMTAwMDM4WjAzMTEwLwYDVQQD EyhlYmIyNzgyYTYzM2Q5ZjY0ODQ2ZmQyYTgwZGQzODZiOGFjMzQ2Y2UyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnDlfT1sR7ASa/rPPdamtqqLRBmJI kK7m21X5eptAdj6MHkbZbX1GaKWfInbypC/pKBTjT6EpuTS2kuwyfa1a0kX8ki1w BMsX4BzLG/kbVRDMtK8mBYbZPe+77yM7e8jmMthIeFOwESDM/6tuaBQFyGmu9h8a f7NVEPo+dDMl1VIZbuayt2ns1NonzxIZTdip14hKHPI4dLT2I/N8Xo1za4bLdNb9 JrZC9joYYM/Yu5RvH5ZMuRs6CQc1j5pU2vLO0WyyFAmpM5l/uiIGA9I0nCH2Z5L4 DXnRLjUWgsHhDXGBowipe3FyaS7FaJ2AhWOfH5OKVRwhZloGAvM3RF23AQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOuyeCpjPZ9khG/SqA3ThrisNGziMB8GA1UdIwQY MBaAFDDwj4QOMX6VIFuhNJfZ28c3e55XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTVBDUGhBNHhmcFVnVzZFMGw5bmJ4emQ3bmxjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9hZGMwZmUtYTI0Zi00NzM2LWFmYjgt Nzk2YjM4Nzk2ZjY5LzEvTVBDUGhBNHhmcFVnVzZFMGw5bmJ4emQ3bmxjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS9hZGMwZmUtYTI0Zi00NzM2LWFmYjgtNzk2YjM4Nzk2ZjY5 LzEvTVBDUGhBNHhmcFVnVzZFMGw5bmJ4emQ3bmxjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnsbBqFU9 mJuIJyMWW4uk0ynrR3v9lGB/p8dWpvwhborxWx/Be0JjD24c7pvzp6LWV0hIx42j P/TQnW5xNCGkQuVEAOw/GNbCJpruaVzwrdonjZJpL7tsYPgDny3eBMrIPFT7JYwK BEErkO+KoDm+uNUJnjPUnq1mMm4JBmSZVT+QPWz1hIV8S0mpoRjUCwV/PrD4t48P /jdMNvqt0jSeOnfURKAnDu32B8MoBLTJ5SK86d0GaYDQb6ayz7P7lM8zdU3Bnok5 h7/rkcnZDh9HTUvCxKRDAPZKWdNpZ4026Jcg2gpskMSxUPMEDXklf/DawaBo4tl5 uyWKG8Wn/xSxrA== -----END CERTIFICATE-----Generated at Sun Dec 21 11:41:06 2025 by rpki-client