This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/c5c233-b478-44bc-ae9e-48bc8cb3cdaa/1/mpYaEhxSAFTfTOWeVZKsaLBQa-8.mft File: mpYaEhxSAFTfTOWeVZKsaLBQa-8.mft (raw, json) Hash identifier: v5kxkKt3gB6c8iSaPKPh8L+Wc6Ly5btMAu4NZmW/HC0= Subject key identifier: 79:83:21:C3:91:0D:64:2A:52:1E:A3:3E:5B:A4:8C:54:AD:D6:B2:0B Authority key identifier: 9A:96:1A:12:1C:52:00:54:DF:4C:E5:9E:55:92:AC:68:B0:50:6B:EF Certificate issuer: /CN=9a961a121c520054df4ce59e5592ac68b0506bef Certificate serial: 019B2F6780F0C58A6B8A84130B68F988151E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mpYaEhxSAFTfTOWeVZKsaLBQa-8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/c5c233-b478-44bc-ae9e-48bc8cb3cdaa/1/mpYaEhxSAFTfTOWeVZKsaLBQa-8.mft Manifest number: 0776 Signing time: Thu 18 Dec 2025 03:01:10 +0000 Manifest this update: Thu 18 Dec 2025 03:01:10 +0000 Manifest next update: Fri 19 Dec 2025 03:01:10 +0000 Files and hashes: 1: mpYaEhxSAFTfTOWeVZKsaLBQa-8.crl (hash: FczJsgrgsA1HIGVhPmb0mjPT9BCXSa/j9wfjFgHtWGA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/c5c233-b478-44bc-ae9e-48bc8cb3cdaa/1/mpYaEhxSAFTfTOWeVZKsaLBQa-8.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/c5c233-b478-44bc-ae9e-48bc8cb3cdaa/1/mpYaEhxSAFTfTOWeVZKsaLBQa-8.mft rsync://rpki.ripe.net/repository/DEFAULT/mpYaEhxSAFTfTOWeVZKsaLBQa-8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 01:18:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:67:80:f0:c5:8a:6b:8a:84:13:0b:68:f9:88:15:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a961a121c520054df4ce59e5592ac68b0506bef Validity Not Before: Dec 18 03:01:10 2025 GMT Not After : Dec 19 03:01:10 2025 GMT Subject: CN=798321c3910d642a521ea33e5ba48c54add6b20b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:ab:2a:dd:d8:d7:83:43:93:9b:82:a8:5c:27: e3:cb:8c:ae:e1:c3:0e:95:0a:29:fb:d2:3b:93:a3: 5e:e1:5d:05:fb:4e:18:0e:ef:21:ac:b5:98:85:43: 60:ac:cf:58:6e:27:03:5d:61:e8:65:46:f2:c6:ee: 5c:34:ae:c3:79:88:f1:f0:fa:9f:17:2d:6b:ed:03: c7:0f:2f:9d:ac:3a:08:98:0a:a3:11:de:64:46:62: 3b:cc:8e:85:00:06:16:96:5d:9f:11:c6:d6:d5:14: 4a:7b:ad:d6:ea:9c:6a:e4:73:54:8a:c3:63:f4:48: 0d:ee:c6:a7:82:3c:36:45:6a:71:f3:bc:0f:93:26: 4c:ff:e4:59:b8:2a:58:42:9c:a4:6c:97:08:c4:a4: 7e:86:45:7c:da:17:37:fb:76:ce:1b:ba:48:ef:51: 77:30:35:5b:12:ac:20:a8:2a:9c:0a:dd:f4:ba:4c: a3:34:c1:be:b4:e1:87:59:0a:2d:68:57:9e:ec:c7: 39:77:7f:9f:3f:00:07:5e:fb:0f:3a:4d:33:85:38: c7:d2:08:84:96:ec:bb:2f:f5:5a:2e:54:67:12:1f: f3:ca:ed:ed:72:2c:6a:e3:f0:1d:6a:cb:79:b2:23: 37:bf:6d:bc:07:db:bf:72:01:56:17:00:bf:f5:02: b3:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:83:21:C3:91:0D:64:2A:52:1E:A3:3E:5B:A4:8C:54:AD:D6:B2:0B X509v3 Authority Key Identifier: keyid:9A:96:1A:12:1C:52:00:54:DF:4C:E5:9E:55:92:AC:68:B0:50:6B:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mpYaEhxSAFTfTOWeVZKsaLBQa-8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/c5c233-b478-44bc-ae9e-48bc8cb3cdaa/1/mpYaEhxSAFTfTOWeVZKsaLBQa-8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/c5c233-b478-44bc-ae9e-48bc8cb3cdaa/1/mpYaEhxSAFTfTOWeVZKsaLBQa-8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:df:06:a8:d2:79:89:ef:8b:b2:ad:e8:d8:53:08:ce:9e:ae: 95:fe:c2:a5:56:16:4a:39:eb:25:71:74:b1:df:c8:a1:b6:44: 12:54:27:1b:66:ec:6c:0b:d9:9a:b7:be:36:c8:48:b4:35:23: ea:75:bf:57:08:e6:53:f7:cc:1e:f3:4f:a1:41:c7:10:fa:94: d7:03:c8:b6:17:fe:f0:70:3d:e0:33:62:30:82:2d:a9:46:d3: 87:5f:0b:1d:ab:71:59:b8:26:2e:76:b0:2d:af:b2:96:d7:eb: c9:a7:e4:40:1c:b7:24:72:5e:40:00:ba:d2:dd:34:50:c0:2e: fb:eb:58:d8:54:97:31:e2:c0:fc:2c:30:cc:85:d7:cd:14:76: a2:64:2f:b7:73:42:22:90:21:d7:98:0c:d3:46:62:36:bf:c7: ef:22:8d:46:ef:fa:0c:0f:71:23:5b:ad:1d:2f:38:1a:f1:50: 70:6d:b0:94:09:56:ca:53:60:6f:8e:6c:42:e0:ec:9e:66:e9: 3b:8a:30:11:16:fb:03:5f:64:ba:5f:57:2d:6e:bd:a8:f1:64: 5b:66:a0:53:0c:80:2c:29:01:1f:43:ba:93:28:e1:6b:8c:4a: 0e:dc:10:80:9f:db:1d:a4:8d:17:5f:b1:61:6f:8c:48:a0:44: 07:71:b7:5c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsvZ4DwxYprioQTC2j5iBUeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhOTYxYTEyMWM1MjAwNTRkZjRjZTU5ZTU1OTJhYzY4YjA1 MDZiZWYwHhcNMjUxMjE4MDMwMTEwWhcNMjUxMjE5MDMwMTEwWjAzMTEwLwYDVQQD Eyg3OTgzMjFjMzkxMGQ2NDJhNTIxZWEzM2U1YmE0OGM1NGFkZDZiMjBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoasq3djXg0OTm4KoXCfjy4yu4cMO lQop+9I7k6Ne4V0F+04YDu8hrLWYhUNgrM9YbicDXWHoZUbyxu5cNK7DeYjx8Pqf Fy1r7QPHDy+drDoImAqjEd5kRmI7zI6FAAYWll2fEcbW1RRKe63W6pxq5HNUisNj 9EgN7sangjw2RWpx87wPkyZM/+RZuCpYQpykbJcIxKR+hkV82hc3+3bOG7pI71F3 MDVbEqwgqCqcCt30ukyjNMG+tOGHWQotaFee7Mc5d3+fPwAHXvsPOk0zhTjH0giE luy7L/VaLlRnEh/zyu3tcixq4/Adast5siM3v228B9u/cgFWFwC/9QKzAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHmDIcORDWQqUh6jPlukjFSt1rILMB8GA1UdIwQY MBaAFJqWGhIcUgBU30zlnlWSrGiwUGvvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbXBZYUVoeFNBRlRmVE9XZVZaS3NhTEJRYS04LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS9jNWMyMzMtYjQ3OC00NGJjLWFlOWUt NDhiYzhjYjNjZGFhLzEvbXBZYUVoeFNBRlRmVE9XZVZaS3NhTEJRYS04Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS9jNWMyMzMtYjQ3OC00NGJjLWFlOWUtNDhiYzhjYjNjZGFh LzEvbXBZYUVoeFNBRlRmVE9XZVZaS3NhTEJRYS04LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAat8GqNJ5 ie+Lsq3o2FMIzp6ulf7CpVYWSjnrJXF0sd/IobZEElQnG2bsbAvZmre+NshItDUj 6nW/VwjmU/fMHvNPoUHHEPqU1wPIthf+8HA94DNiMIItqUbTh18LHatxWbgmLnaw La+yltfryafkQBy3JHJeQAC60t00UMAu++tY2FSXMeLA/CwwzIXXzRR2omQvt3NC IpAh15gM00ZiNr/H7yKNRu/6DA9xI1utHS84GvFQcG2wlAlWylNgb45sQuDsnmbp O4owERb7A19kul9XLW69qPFkW2agUwyALCkBH0O6kyjha4xKDtwQgJ/bHaSNF1+x YW+MSKBEB3G3XA== -----END CERTIFICATE-----Generated at Thu Dec 18 06:51:10 2025 by rpki-client