This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/84f86e-4ea7-4db3-aa30-c2c9e2393a32/1/MX71WudtQiUE6uWyBnJNNkQzEcc.mft File: MX71WudtQiUE6uWyBnJNNkQzEcc.mft (raw, json) Hash identifier: GlMmx8zhrtqTfzT0D9j+QTLODXM8rqY6JaSrwxZsUg4= Subject key identifier: 4B:6C:3C:E1:72:2D:65:6E:4A:0B:AB:BB:C2:C8:49:25:AE:EE:CD:AD Authority key identifier: 31:7E:F5:5A:E7:6D:42:25:04:EA:E5:B2:06:72:4D:36:44:33:11:C7 Certificate issuer: /CN=317ef55ae76d422504eae5b206724d36443311c7 Certificate serial: 019B668CA9F71CAB318DEE85B3CBEE9221FD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MX71WudtQiUE6uWyBnJNNkQzEcc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/84f86e-4ea7-4db3-aa30-c2c9e2393a32/1/MX71WudtQiUE6uWyBnJNNkQzEcc.mft Manifest number: 179E Signing time: Sun 28 Dec 2025 20:00:52 +0000 Manifest this update: Sun 28 Dec 2025 20:00:52 +0000 Manifest next update: Mon 29 Dec 2025 20:00:52 +0000 Files and hashes: 1: 6KI42LA3k4Z423gzE8zSlIe9RA4.roa (hash: MywiSVripv33Y3DFEx1AfwLFpUpd5icicODvhSpR2Lc=) 2: MX71WudtQiUE6uWyBnJNNkQzEcc.crl (hash: f7Vpwv378glS5wt9CLdid96bOXO5G0a+EurHgMtLWAE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/84f86e-4ea7-4db3-aa30-c2c9e2393a32/1/MX71WudtQiUE6uWyBnJNNkQzEcc.crl rsync://rpki.ripe.net/repository/DEFAULT/65/84f86e-4ea7-4db3-aa30-c2c9e2393a32/1/MX71WudtQiUE6uWyBnJNNkQzEcc.mft rsync://rpki.ripe.net/repository/DEFAULT/MX71WudtQiUE6uWyBnJNNkQzEcc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 20:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:66:8c:a9:f7:1c:ab:31:8d:ee:85:b3:cb:ee:92:21:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=317ef55ae76d422504eae5b206724d36443311c7 Validity Not Before: Dec 28 20:00:52 2025 GMT Not After : Dec 29 20:00:52 2025 GMT Subject: CN=4b6c3ce1722d656e4a0babbbc2c84925aeeecdad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:88:56:cb:62:8f:14:16:ce:1d:df:bd:9c:1d: 97:61:34:e1:92:28:c8:ef:72:e2:c2:0a:83:21:3e: 2d:5d:69:1e:61:dc:0e:93:02:e4:fc:3e:2a:95:ae: 4d:01:f3:73:f5:56:13:55:f3:89:c7:79:19:3c:37: 4d:dd:12:a7:a6:4a:3e:5e:9a:86:17:1c:df:14:74: 41:c9:1c:0c:df:73:a4:f5:78:93:ef:54:17:c8:37: 27:fb:48:43:2f:64:aa:8a:15:1c:ed:4e:58:36:91: 52:76:fc:14:8a:54:a8:5b:b2:ab:f8:b6:2a:a4:4f: 6b:e2:9b:2f:1e:a2:89:92:fc:8c:53:e0:18:b4:e2: 37:ce:c6:b0:d6:6f:5e:45:74:9a:18:c7:f0:ae:46: fe:46:f6:6e:19:30:20:09:74:31:da:60:b4:b9:f6: 44:07:92:85:70:5b:b9:03:56:cd:52:46:f5:f0:da: 04:01:38:0b:f0:36:c2:8c:4f:fc:8c:43:c7:58:40: 69:6d:94:3d:d6:32:e2:4a:7a:29:05:57:f5:11:7c: 2d:66:92:3f:41:aa:c7:cd:61:f6:77:65:1a:e5:43: 35:2f:79:59:68:9a:de:f5:20:6f:ad:3e:9c:1e:92: 48:cd:72:b9:e5:e0:7d:be:7e:28:69:00:35:fe:82: 4b:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:6C:3C:E1:72:2D:65:6E:4A:0B:AB:BB:C2:C8:49:25:AE:EE:CD:AD X509v3 Authority Key Identifier: keyid:31:7E:F5:5A:E7:6D:42:25:04:EA:E5:B2:06:72:4D:36:44:33:11:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MX71WudtQiUE6uWyBnJNNkQzEcc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/84f86e-4ea7-4db3-aa30-c2c9e2393a32/1/MX71WudtQiUE6uWyBnJNNkQzEcc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/84f86e-4ea7-4db3-aa30-c2c9e2393a32/1/MX71WudtQiUE6uWyBnJNNkQzEcc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:e7:49:e5:3e:13:0c:59:1e:f0:0b:6a:bd:9c:0c:2b:3f:77: e9:2b:74:86:80:4f:40:aa:87:83:62:52:92:33:b3:72:40:29: a3:52:86:66:b2:47:fd:ec:38:b5:ae:ba:32:5b:a7:fd:85:7a: c9:4c:a9:e6:09:69:49:72:07:ee:12:0c:b0:73:ee:7f:dd:c1: 53:1f:c1:c7:93:3f:ae:a4:2c:1a:a7:eb:1b:13:85:d8:b7:ca: fd:fb:aa:3e:fc:aa:a7:1b:f9:53:b4:9a:bc:47:b6:13:e3:c8: 31:81:9b:e2:5c:95:5b:c0:ca:39:3f:8f:fe:4e:0e:62:21:28: 44:27:c0:9f:52:88:26:7d:7f:93:e8:33:3f:2b:a5:f1:10:95: ed:c8:25:7d:3b:7f:86:11:b5:f5:ed:37:01:ef:cd:ca:36:9d: 9f:ff:b4:61:30:de:34:b2:02:3b:a6:35:70:ad:8a:55:ac:7f: 96:ba:fa:6e:46:84:48:cb:0a:21:95:be:c0:d3:4a:09:0f:87: d2:a0:01:0f:ee:53:49:f6:8c:c1:7b:f8:51:db:6c:7c:4a:32: 0e:af:78:a5:fe:19:53:f1:bf:03:10:31:d6:44:46:2e:f2:87: 2a:b3:23:10:fa:a3:ec:d6:f2:33:fb:18:2e:9a:38:05:bb:88: 39:cb:cb:d5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtmjKn3HKsxje6Fs8vukiH9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxN2VmNTVhZTc2ZDQyMjUwNGVhZTViMjA2NzI0ZDM2NDQz MzExYzcwHhcNMjUxMjI4MjAwMDUyWhcNMjUxMjI5MjAwMDUyWjAzMTEwLwYDVQQD Eyg0YjZjM2NlMTcyMmQ2NTZlNGEwYmFiYmJjMmM4NDkyNWFlZWVjZGFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3IhWy2KPFBbOHd+9nB2XYTThkijI 73LiwgqDIT4tXWkeYdwOkwLk/D4qla5NAfNz9VYTVfOJx3kZPDdN3RKnpko+XpqG FxzfFHRByRwM33Ok9XiT71QXyDcn+0hDL2SqihUc7U5YNpFSdvwUilSoW7Kr+LYq pE9r4psvHqKJkvyMU+AYtOI3zsaw1m9eRXSaGMfwrkb+RvZuGTAgCXQx2mC0ufZE B5KFcFu5A1bNUkb18NoEATgL8DbCjE/8jEPHWEBpbZQ91jLiSnopBVf1EXwtZpI/ QarHzWH2d2Ua5UM1L3lZaJre9SBvrT6cHpJIzXK55eB9vn4oaQA1/oJLewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEtsPOFyLWVuSguru8LISSWu7s2tMB8GA1UdIwQY MBaAFDF+9VrnbUIlBOrlsgZyTTZEMxHHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTVg3MVd1ZHRRaVVFNnVXeUJuSk5Oa1F6RWNjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS84NGY4NmUtNGVhNy00ZGIzLWFhMzAt YzJjOWUyMzkzYTMyLzEvTVg3MVd1ZHRRaVVFNnVXeUJuSk5Oa1F6RWNjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS84NGY4NmUtNGVhNy00ZGIzLWFhMzAtYzJjOWUyMzkzYTMy LzEvTVg3MVd1ZHRRaVVFNnVXeUJuSk5Oa1F6RWNjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAROdJ5T4T DFke8AtqvZwMKz936St0hoBPQKqHg2JSkjOzckApo1KGZrJH/ew4ta66Mlun/YV6 yUyp5glpSXIH7hIMsHPuf93BUx/Bx5M/rqQsGqfrGxOF2LfK/fuqPvyqpxv5U7Sa vEe2E+PIMYGb4lyVW8DKOT+P/k4OYiEoRCfAn1KIJn1/k+gzPyul8RCV7cglfTt/ hhG19e03Ae/Nyjadn/+0YTDeNLICO6Y1cK2KVax/lrr6bkaESMsKIZW+wNNKCQ+H 0qABD+5TSfaMwXv4UdtsfEoyDq94pf4ZU/G/AxAx1kRGLvKHKrMjEPqj7NbyM/sY Lpo4BbuIOcvL1Q== -----END CERTIFICATE-----Generated at Mon Dec 29 05:26:27 2025 by rpki-client