This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/e0925e-47bf-4907-bcbc-fd9f36a8ba6e/1/Mx53hPYKyNlpuBz1IxzZ3Ah87TI.mft File: Mx53hPYKyNlpuBz1IxzZ3Ah87TI.mft (raw, json) Hash identifier: e3LXD4XpZx369xeb7bObp8ULfvsnp1nMpdgH6niK2MQ= Subject key identifier: 88:C7:2B:60:FD:1D:9E:10:0A:7C:3B:E2:D4:9F:9E:1B:C7:02:21:2C Authority key identifier: 33:1E:77:84:F6:0A:C8:D9:69:B8:1C:F5:23:1C:D9:DC:08:7C:ED:32 Certificate issuer: /CN=331e7784f60ac8d969b81cf5231cd9dc087ced32 Certificate serial: 019B44DC73793E688DB0BE19EF38C551177B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mx53hPYKyNlpuBz1IxzZ3Ah87TI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/e0925e-47bf-4907-bcbc-fd9f36a8ba6e/1/Mx53hPYKyNlpuBz1IxzZ3Ah87TI.mft Manifest number: 1791 Signing time: Mon 22 Dec 2025 07:00:56 +0000 Manifest this update: Mon 22 Dec 2025 07:00:56 +0000 Manifest next update: Tue 23 Dec 2025 07:00:56 +0000 Files and hashes: 1: Mx53hPYKyNlpuBz1IxzZ3Ah87TI.crl (hash: MIZ2zaJ8B0Tikkdq/Tb1tIMgwFKydKnp3smznKCVxbo=) 2: qzYfqleKMXziWfjI2OhKWSLGXWI.roa (hash: TK9bijwIRNWSf6A7SMNJb8WGXN3cTGP9yogtHb8815I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/e0925e-47bf-4907-bcbc-fd9f36a8ba6e/1/Mx53hPYKyNlpuBz1IxzZ3Ah87TI.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/e0925e-47bf-4907-bcbc-fd9f36a8ba6e/1/Mx53hPYKyNlpuBz1IxzZ3Ah87TI.mft rsync://rpki.ripe.net/repository/DEFAULT/Mx53hPYKyNlpuBz1IxzZ3Ah87TI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 07:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:dc:73:79:3e:68:8d:b0:be:19:ef:38:c5:51:17:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=331e7784f60ac8d969b81cf5231cd9dc087ced32 Validity Not Before: Dec 22 07:00:56 2025 GMT Not After : Dec 23 07:00:56 2025 GMT Subject: CN=88c72b60fd1d9e100a7c3be2d49f9e1bc702212c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:10:72:5c:90:d0:79:12:a0:81:8d:ee:9c:31: 19:d4:d7:43:eb:d8:f7:8e:85:fe:83:cf:6b:eb:90: 63:f2:66:74:89:89:82:e2:4d:9d:f9:cd:42:bd:f5: 41:a8:62:3d:23:12:b4:a4:8c:54:89:06:3d:89:91: 7f:c3:ad:fa:6a:9a:0e:e7:a9:df:2c:3f:71:2e:56: 33:ee:1a:60:17:5b:26:87:c0:04:62:a8:8c:0e:36: e5:82:ca:50:e6:14:37:c0:55:9b:49:75:28:29:48: 92:f6:22:a2:46:f0:a0:e5:1b:2d:2c:90:91:fc:82: c0:95:ae:df:8b:df:5e:a7:47:7a:92:66:db:9e:8e: b6:7e:a6:dc:d2:3d:68:ce:ee:7d:68:78:cf:cc:b3: 72:e6:cb:8b:da:7a:24:78:ee:58:6c:57:8a:cb:33: d4:8e:0a:55:9b:8c:28:76:14:3a:75:58:b4:bf:f1: 46:6f:f4:bf:20:3f:a4:16:fd:a2:e0:36:3a:d8:11: 1b:19:ea:0f:81:48:50:62:0d:f8:80:50:b6:53:5c: cb:b9:4b:52:b1:e2:ca:c7:c8:6c:65:fc:59:df:55: 3c:cc:0e:78:b4:6c:6b:90:45:40:aa:4f:61:b9:10: 45:36:65:ae:d1:03:28:cb:6a:1e:c0:fe:15:c5:25: b0:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:C7:2B:60:FD:1D:9E:10:0A:7C:3B:E2:D4:9F:9E:1B:C7:02:21:2C X509v3 Authority Key Identifier: keyid:33:1E:77:84:F6:0A:C8:D9:69:B8:1C:F5:23:1C:D9:DC:08:7C:ED:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mx53hPYKyNlpuBz1IxzZ3Ah87TI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/e0925e-47bf-4907-bcbc-fd9f36a8ba6e/1/Mx53hPYKyNlpuBz1IxzZ3Ah87TI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/e0925e-47bf-4907-bcbc-fd9f36a8ba6e/1/Mx53hPYKyNlpuBz1IxzZ3Ah87TI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:8c:0c:06:d2:01:4b:e0:d5:b3:00:23:69:6b:24:fe:65:4c: 67:24:5e:06:2d:d3:f1:f8:48:8d:28:5b:37:88:47:2b:ce:26: 3f:07:70:5e:aa:51:3a:2e:b2:68:ad:8f:f9:86:c8:f4:47:da: b8:c8:69:6f:13:f1:0d:16:c0:4e:cc:1a:45:27:3c:b9:0b:25: 23:0f:cc:e8:63:46:b9:2f:03:51:d5:81:86:5f:97:45:60:71: 23:33:48:1a:1e:b4:56:35:ac:88:9c:79:e0:0e:2f:71:79:b8: 08:12:9d:9d:c4:fd:97:e7:9a:42:bc:d8:5e:11:ff:1e:c2:2e: db:17:2d:6a:7a:9c:64:0c:53:81:04:6e:d2:ef:5b:fb:23:4f: 8c:7e:ea:84:af:cc:1c:cd:20:47:5a:46:22:07:2e:ec:25:4a: 18:8a:c5:88:a0:68:db:87:17:0f:7b:89:46:b0:dd:74:34:58: 26:21:8f:80:81:bd:7d:c5:71:d3:a7:b6:75:46:86:1a:76:ba: b7:2e:3d:73:af:29:b6:2f:b7:3f:47:01:d3:cc:6c:99:58:f3: 58:e9:92:68:8f:f9:e7:c1:04:fd:14:45:a1:9e:c6:f4:21:7c: 81:dc:0c:b4:e9:f5:f4:7d:d5:0d:89:57:d7:df:b1:cd:18:73: 16:cb:df:9e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtE3HN5PmiNsL4Z7zjFURd7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMzMWU3Nzg0ZjYwYWM4ZDk2OWI4MWNmNTIzMWNkOWRjMDg3 Y2VkMzIwHhcNMjUxMjIyMDcwMDU2WhcNMjUxMjIzMDcwMDU2WjAzMTEwLwYDVQQD Eyg4OGM3MmI2MGZkMWQ5ZTEwMGE3YzNiZTJkNDlmOWUxYmM3MDIyMTJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvRByXJDQeRKggY3unDEZ1NdD69j3 joX+g89r65Bj8mZ0iYmC4k2d+c1CvfVBqGI9IxK0pIxUiQY9iZF/w636apoO56nf LD9xLlYz7hpgF1smh8AEYqiMDjblgspQ5hQ3wFWbSXUoKUiS9iKiRvCg5RstLJCR /ILAla7fi99ep0d6kmbbno62fqbc0j1ozu59aHjPzLNy5suL2nokeO5YbFeKyzPU jgpVm4wodhQ6dVi0v/FGb/S/ID+kFv2i4DY62BEbGeoPgUhQYg34gFC2U1zLuUtS seLKx8hsZfxZ31U8zA54tGxrkEVAqk9huRBFNmWu0QMoy2oewP4VxSWw+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIjHK2D9HZ4QCnw74tSfnhvHAiEsMB8GA1UdIwQY MBaAFDMed4T2CsjZabgc9SMc2dwIfO0yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTXg1M2hQWUt5TmxwdUJ6MUl4elozQWg4N1RJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi9lMDkyNWUtNDdiZi00OTA3LWJjYmMt ZmQ5ZjM2YThiYTZlLzEvTXg1M2hQWUt5TmxwdUJ6MUl4elozQWg4N1RJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Zi9lMDkyNWUtNDdiZi00OTA3LWJjYmMtZmQ5ZjM2YThiYTZl LzEvTXg1M2hQWUt5TmxwdUJ6MUl4elozQWg4N1RJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ4wMBtIB S+DVswAjaWsk/mVMZyReBi3T8fhIjShbN4hHK84mPwdwXqpROi6yaK2P+YbI9Efa uMhpbxPxDRbATswaRSc8uQslIw/M6GNGuS8DUdWBhl+XRWBxIzNIGh60VjWsiJx5 4A4vcXm4CBKdncT9l+eaQrzYXhH/HsIu2xctanqcZAxTgQRu0u9b+yNPjH7qhK/M HM0gR1pGIgcu7CVKGIrFiKBo24cXD3uJRrDddDRYJiGPgIG9fcVx06e2dUaGGna6 ty49c68pti+3P0cB08xsmVjzWOmSaI/558EE/RRFoZ7G9CF8gdwMtOn19H3VDYlX 19+xzRhzFsvfng== -----END CERTIFICATE-----Generated at Mon Dec 22 12:14:51 2025 by rpki-client