This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/e75ad2-1e30-455e-9787-3b55f2327b34/1/MC8J8mXpsnj4Bz1pgv8XVxOloPo.mft File: MC8J8mXpsnj4Bz1pgv8XVxOloPo.mft (raw, json) Hash identifier: D607Xp948wrGUagsq3o2XSdMY8Kv5p1MipBJKu9N228= Subject key identifier: AE:76:51:90:02:F5:8E:5B:D8:CB:05:19:C4:1F:92:5D:A8:27:C0:10 Authority key identifier: 30:2F:09:F2:65:E9:B2:78:F8:07:3D:69:82:FF:17:57:13:A5:A0:FA Certificate issuer: /CN=302f09f265e9b278f8073d6982ff175713a5a0fa Certificate serial: 019B6278B05170ABED23366FA0D84131D7CD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MC8J8mXpsnj4Bz1pgv8XVxOloPo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/e75ad2-1e30-455e-9787-3b55f2327b34/1/MC8J8mXpsnj4Bz1pgv8XVxOloPo.mft Manifest number: 0911 Signing time: Sun 28 Dec 2025 01:00:35 +0000 Manifest this update: Sun 28 Dec 2025 01:00:35 +0000 Manifest next update: Mon 29 Dec 2025 01:00:35 +0000 Files and hashes: 1: Dz49aMuKRlKMoJhdInbOpT8odb0.roa (hash: eGQZ4ljYZGoi2bWlhPeueYms1SjbBMBvU/96IhPjXeA=) 2: ESyXldKwtms-9as-fPqZA06oJF8.roa (hash: ux8w7uiQ2u3yqvfbtVufiAk64n37yIym0ehvJixmaFU=) 3: MC8J8mXpsnj4Bz1pgv8XVxOloPo.crl (hash: 7+CNpamR7fe2EcD46E65ZZzE2e25Xt623S99wbmRwHY=) 4: PmMRDG9xx1iegEvlwTgY94xn0uY.roa (hash: rnYe+7KnzmmrVpmGGJ0sYn/ALtPwvcJTUyQU0nsWM1w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/e75ad2-1e30-455e-9787-3b55f2327b34/1/MC8J8mXpsnj4Bz1pgv8XVxOloPo.crl rsync://rpki.ripe.net/repository/DEFAULT/65/e75ad2-1e30-455e-9787-3b55f2327b34/1/MC8J8mXpsnj4Bz1pgv8XVxOloPo.mft rsync://rpki.ripe.net/repository/DEFAULT/MC8J8mXpsnj4Bz1pgv8XVxOloPo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:62:78:b0:51:70:ab:ed:23:36:6f:a0:d8:41:31:d7:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=302f09f265e9b278f8073d6982ff175713a5a0fa Validity Not Before: Dec 28 01:00:35 2025 GMT Not After : Dec 29 01:00:35 2025 GMT Subject: CN=ae76519002f58e5bd8cb0519c41f925da827c010 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:f9:3f:ad:c7:6d:16:e2:ce:4b:49:08:29:7e: 39:8a:0c:e3:55:8b:bc:61:64:40:fb:8e:54:0f:66: 54:9b:e1:73:2f:d4:8c:ef:f5:77:63:ea:d8:b9:b8: 45:3b:48:fc:86:6e:31:77:23:92:c8:e4:86:75:6e: af:b4:05:68:4e:05:ca:f4:a7:a7:29:5a:5c:d3:3d: 98:60:3b:0a:27:58:18:00:d0:dc:45:96:a5:cf:80: 11:a4:ad:3d:70:b9:22:af:ec:d4:3b:18:5c:b4:b3: 7d:bf:43:e2:29:70:a2:35:98:7f:35:75:74:a7:79: 7e:da:0a:96:2a:f0:b4:33:7c:6b:7f:c9:f8:73:1d: b2:bd:46:15:1a:8f:8a:cb:b6:ab:2c:13:34:9a:c3: 1c:88:a8:34:32:61:4c:de:7e:fb:a5:38:27:7b:34: d3:ce:01:ca:88:09:48:7c:7f:e6:9e:48:f9:11:46: 7e:92:02:49:eb:d2:71:36:59:78:2d:de:9c:82:03: f5:6a:97:a3:45:41:da:fb:c4:17:ae:2d:56:f3:c6: f7:c7:1e:59:45:52:ed:ea:ca:d7:a8:5c:1c:54:24: de:e1:f5:21:b2:c6:3c:c6:60:c0:02:26:b1:93:eb: 8e:3a:9a:d1:d2:75:ef:6a:67:12:93:23:fe:10:41: a7:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:76:51:90:02:F5:8E:5B:D8:CB:05:19:C4:1F:92:5D:A8:27:C0:10 X509v3 Authority Key Identifier: keyid:30:2F:09:F2:65:E9:B2:78:F8:07:3D:69:82:FF:17:57:13:A5:A0:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MC8J8mXpsnj4Bz1pgv8XVxOloPo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/e75ad2-1e30-455e-9787-3b55f2327b34/1/MC8J8mXpsnj4Bz1pgv8XVxOloPo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/e75ad2-1e30-455e-9787-3b55f2327b34/1/MC8J8mXpsnj4Bz1pgv8XVxOloPo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:71:20:7d:bb:86:02:9b:48:8b:29:e4:80:c1:12:78:93:42: 4c:e3:c9:23:46:f1:57:4d:f8:d8:98:01:c6:01:bb:f3:50:79: df:d7:97:c3:5f:bb:f2:dc:65:3e:6c:04:da:b5:22:45:e6:cf: 66:fc:3e:0a:6c:49:cd:75:9f:ea:d9:2c:0c:3a:9f:0e:08:b5: eb:f0:a0:80:03:21:e4:9c:c8:2b:02:24:b9:2c:bd:7a:39:2d: 6b:43:bd:a8:4a:9c:c6:97:40:8b:14:e8:78:c2:d6:55:1a:81: 5b:30:59:9b:51:88:8f:3f:e8:32:cd:30:6b:16:39:c7:25:13: 30:2e:72:53:8e:b7:a1:a9:0f:9d:64:3b:d5:f4:6e:b2:9c:5a: d5:68:a3:5e:eb:d9:4a:18:06:bf:b3:f6:88:7b:1a:ca:6d:68: d9:48:4c:9b:16:81:41:18:12:62:a2:08:a0:da:2e:06:1b:14: 31:5c:b9:3e:86:35:09:ad:18:53:e7:f2:7d:f5:9f:32:cb:64: c2:09:30:d2:b2:70:18:15:d0:22:64:ca:fa:60:4f:b3:cc:6c: b4:03:c2:41:47:dc:ff:7a:61:49:25:b0:f1:f7:c4:29:b3:25: 0e:97:b2:7d:2e:21:a1:ce:a8:be:d7:36:61:5e:05:5b:df:c4: b7:ab:8d:61 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtieLBRcKvtIzZvoNhBMdfNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwMmYwOWYyNjVlOWIyNzhmODA3M2Q2OTgyZmYxNzU3MTNh NWEwZmEwHhcNMjUxMjI4MDEwMDM1WhcNMjUxMjI5MDEwMDM1WjAzMTEwLwYDVQQD EyhhZTc2NTE5MDAyZjU4ZTViZDhjYjA1MTljNDFmOTI1ZGE4MjdjMDEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnfk/rcdtFuLOS0kIKX45igzjVYu8 YWRA+45UD2ZUm+FzL9SM7/V3Y+rYubhFO0j8hm4xdyOSyOSGdW6vtAVoTgXK9Ken KVpc0z2YYDsKJ1gYANDcRZalz4ARpK09cLkir+zUOxhctLN9v0PiKXCiNZh/NXV0 p3l+2gqWKvC0M3xrf8n4cx2yvUYVGo+Ky7arLBM0msMciKg0MmFM3n77pTgnezTT zgHKiAlIfH/mnkj5EUZ+kgJJ69JxNll4Ld6cggP1apejRUHa+8QXri1W88b3xx5Z RVLt6srXqFwcVCTe4fUhssY8xmDAAiaxk+uOOprR0nXvamcSkyP+EEGndQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK52UZAC9Y5b2MsFGcQfkl2oJ8AQMB8GA1UdIwQY MBaAFDAvCfJl6bJ4+Ac9aYL/F1cTpaD6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTUM4SjhtWHBzbmo0QnoxcGd2OFhWeE9sb1BvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS9lNzVhZDItMWUzMC00NTVlLTk3ODct M2I1NWYyMzI3YjM0LzEvTUM4SjhtWHBzbmo0QnoxcGd2OFhWeE9sb1BvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS9lNzVhZDItMWUzMC00NTVlLTk3ODctM2I1NWYyMzI3YjM0 LzEvTUM4SjhtWHBzbmo0QnoxcGd2OFhWeE9sb1BvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA3EgfbuG AptIiynkgMESeJNCTOPJI0bxV0342JgBxgG781B539eXw1+78txlPmwE2rUiRebP Zvw+CmxJzXWf6tksDDqfDgi16/CggAMh5JzIKwIkuSy9ejkta0O9qEqcxpdAixTo eMLWVRqBWzBZm1GIjz/oMs0waxY5xyUTMC5yU463oakPnWQ71fRuspxa1WijXuvZ ShgGv7P2iHsaym1o2UhMmxaBQRgSYqIIoNouBhsUMVy5PoY1Ca0YU+fyffWfMstk wgkw0rJwGBXQImTK+mBPs8xstAPCQUfc/3phSSWw8ffEKbMlDpeyfS4hoc6ovtc2 YV4FW9/Et6uNYQ== -----END CERTIFICATE-----Generated at Sun Dec 28 05:03:59 2025 by rpki-client