This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/84f86e-4ea7-4db3-aa30-c2c9e2393a32/1/MX71WudtQiUE6uWyBnJNNkQzEcc.mft File: MX71WudtQiUE6uWyBnJNNkQzEcc.mft (raw, json) Hash identifier: QuuDAMlK1yVdgGi4xts5FX+uoDjiiMB3xg8LOhoysZ8= Subject key identifier: 01:7D:E3:85:C0:EB:AE:32:76:F3:DF:A1:EC:7D:FB:CC:66:41:1D:06 Authority key identifier: 31:7E:F5:5A:E7:6D:42:25:04:EA:E5:B2:06:72:4D:36:44:33:11:C7 Certificate issuer: /CN=317ef55ae76d422504eae5b206724d36443311c7 Certificate serial: 019B687B889A9B86F4F3D47B0205703ECFDB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MX71WudtQiUE6uWyBnJNNkQzEcc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/84f86e-4ea7-4db3-aa30-c2c9e2393a32/1/MX71WudtQiUE6uWyBnJNNkQzEcc.mft Manifest number: 179F Signing time: Mon 29 Dec 2025 05:01:24 +0000 Manifest this update: Mon 29 Dec 2025 05:01:24 +0000 Manifest next update: Tue 30 Dec 2025 05:01:24 +0000 Files and hashes: 1: 6KI42LA3k4Z423gzE8zSlIe9RA4.roa (hash: MywiSVripv33Y3DFEx1AfwLFpUpd5icicODvhSpR2Lc=) 2: MX71WudtQiUE6uWyBnJNNkQzEcc.crl (hash: dMcKdB42agWJDDw3iABJD0teZPA2tNZV4ZsnQkTtTlY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/84f86e-4ea7-4db3-aa30-c2c9e2393a32/1/MX71WudtQiUE6uWyBnJNNkQzEcc.crl rsync://rpki.ripe.net/repository/DEFAULT/65/84f86e-4ea7-4db3-aa30-c2c9e2393a32/1/MX71WudtQiUE6uWyBnJNNkQzEcc.mft rsync://rpki.ripe.net/repository/DEFAULT/MX71WudtQiUE6uWyBnJNNkQzEcc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 21:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:68:7b:88:9a:9b:86:f4:f3:d4:7b:02:05:70:3e:cf:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=317ef55ae76d422504eae5b206724d36443311c7 Validity Not Before: Dec 29 05:01:24 2025 GMT Not After : Dec 30 05:01:24 2025 GMT Subject: CN=017de385c0ebae3276f3dfa1ec7dfbcc66411d06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:5a:ce:ef:48:a9:64:24:fe:16:d8:b1:51:2f: cd:35:05:f2:b4:95:a1:fb:33:5e:f6:92:cb:48:5e: c5:40:cb:c7:b8:1b:8c:95:14:d6:b8:05:6c:36:74: b9:9c:e9:59:ca:33:70:5b:6b:15:20:30:e3:b4:7e: dd:ba:34:ab:4f:bd:0d:a9:0c:71:7c:ae:17:32:69: ac:c1:b4:07:f7:10:98:ff:2e:8a:0f:73:ec:3a:0e: 77:f5:d8:c0:55:ca:c1:96:53:c1:30:f3:ef:08:28: d2:4a:97:1e:3f:30:e1:54:43:64:d5:35:4e:d7:81: 84:4d:ad:b6:5d:3c:6a:df:d3:09:51:09:16:94:e7: 7c:f7:ec:4d:e8:3c:ee:ac:56:49:cd:53:22:0d:a9: f3:15:cb:61:9c:0e:81:cc:87:b1:26:a8:99:52:fc: dc:65:fc:91:be:90:48:e4:66:be:5c:09:25:d0:e8: 0b:25:5c:5c:d5:2c:3b:62:d3:aa:2e:2e:dd:09:1f: 6b:d6:7b:98:bc:e9:83:c1:4b:2a:f1:ae:c9:2a:f7: c4:01:82:68:fa:39:dd:87:03:28:e3:53:9a:5b:e2: c2:b0:e7:14:f0:da:8e:5f:a2:96:e6:52:85:34:16: 68:4f:29:db:5e:5e:2d:48:ca:e5:30:3a:6c:ea:4c: 9f:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:7D:E3:85:C0:EB:AE:32:76:F3:DF:A1:EC:7D:FB:CC:66:41:1D:06 X509v3 Authority Key Identifier: keyid:31:7E:F5:5A:E7:6D:42:25:04:EA:E5:B2:06:72:4D:36:44:33:11:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MX71WudtQiUE6uWyBnJNNkQzEcc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/84f86e-4ea7-4db3-aa30-c2c9e2393a32/1/MX71WudtQiUE6uWyBnJNNkQzEcc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/84f86e-4ea7-4db3-aa30-c2c9e2393a32/1/MX71WudtQiUE6uWyBnJNNkQzEcc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:db:46:69:e1:db:23:37:66:6d:e8:61:4e:a8:1c:5f:d3:97: a7:7d:30:14:cb:76:17:9f:05:d8:b8:4c:77:7f:f5:c1:7f:81: ca:f4:4d:0d:81:0b:c6:02:e7:30:de:fd:f2:0a:98:30:3e:50: 79:bb:66:d9:06:dc:71:e8:90:50:67:1d:a9:37:10:27:4b:bd: ce:24:02:35:2a:51:37:00:a2:58:26:32:ec:d4:2b:68:a2:4b: ea:5f:51:e9:30:47:e1:d2:16:84:a7:09:2a:08:93:23:8f:ac: 8d:2a:16:24:8f:7a:86:89:ac:4e:46:81:66:09:3b:c8:5e:d8: e4:5c:34:6d:4a:5a:a7:04:71:1c:8f:a6:40:c6:44:d5:f9:99: 43:14:5b:07:ca:41:62:26:36:9a:a7:b9:71:50:12:ee:e9:75: 35:02:75:b1:87:2e:90:9a:ad:3a:c5:10:e7:a1:ac:b0:d0:62: fc:e6:7d:b7:7e:24:0b:8d:3c:ee:0d:ee:24:c2:fb:81:3d:86: 4b:af:be:d9:f2:d6:db:be:ee:da:ea:2f:ad:3d:6a:ee:83:89: ae:3d:7d:4f:c4:c7:fb:7a:28:58:63:29:01:07:5d:d6:23:6a: 4f:90:67:10:b6:ee:cb:60:f2:8c:69:15:12:a9:d9:75:7d:09: 21:bd:2f:c3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtoe4iam4b089R7AgVwPs/bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxN2VmNTVhZTc2ZDQyMjUwNGVhZTViMjA2NzI0ZDM2NDQz MzExYzcwHhcNMjUxMjI5MDUwMTI0WhcNMjUxMjMwMDUwMTI0WjAzMTEwLwYDVQQD EygwMTdkZTM4NWMwZWJhZTMyNzZmM2RmYTFlYzdkZmJjYzY2NDExZDA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz1rO70ipZCT+FtixUS/NNQXytJWh +zNe9pLLSF7FQMvHuBuMlRTWuAVsNnS5nOlZyjNwW2sVIDDjtH7dujSrT70NqQxx fK4XMmmswbQH9xCY/y6KD3PsOg539djAVcrBllPBMPPvCCjSSpcePzDhVENk1TVO 14GETa22XTxq39MJUQkWlOd89+xN6DzurFZJzVMiDanzFcthnA6BzIexJqiZUvzc ZfyRvpBI5Ga+XAkl0OgLJVxc1Sw7YtOqLi7dCR9r1nuYvOmDwUsq8a7JKvfEAYJo +jndhwMo41OaW+LCsOcU8NqOX6KW5lKFNBZoTynbXl4tSMrlMDps6kyfJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAF944XA664ydvPfoex9+8xmQR0GMB8GA1UdIwQY MBaAFDF+9VrnbUIlBOrlsgZyTTZEMxHHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTVg3MVd1ZHRRaVVFNnVXeUJuSk5Oa1F6RWNjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS84NGY4NmUtNGVhNy00ZGIzLWFhMzAt YzJjOWUyMzkzYTMyLzEvTVg3MVd1ZHRRaVVFNnVXeUJuSk5Oa1F6RWNjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS84NGY4NmUtNGVhNy00ZGIzLWFhMzAtYzJjOWUyMzkzYTMy LzEvTVg3MVd1ZHRRaVVFNnVXeUJuSk5Oa1F6RWNjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH9tGaeHb IzdmbehhTqgcX9OXp30wFMt2F58F2LhMd3/1wX+ByvRNDYELxgLnMN798gqYMD5Q ebtm2QbcceiQUGcdqTcQJ0u9ziQCNSpRNwCiWCYy7NQraKJL6l9R6TBH4dIWhKcJ KgiTI4+sjSoWJI96homsTkaBZgk7yF7Y5Fw0bUpapwRxHI+mQMZE1fmZQxRbB8pB YiY2mqe5cVAS7ul1NQJ1sYcukJqtOsUQ56GssNBi/OZ9t34kC4087g3uJML7gT2G S6++2fLW277u2uovrT1q7oOJrj19T8TH+3ooWGMpAQdd1iNqT5BnELbuy2DyjGkV EqnZdX0JIb0vww== -----END CERTIFICATE-----Generated at Mon Dec 29 07:07:41 2025 by rpki-client