This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/b7cd7c-5795-4146-8477-0da87b51ffac/1/MdMezFS5Dp3_JEK5BRqpVo8wbng.mft File: MdMezFS5Dp3_JEK5BRqpVo8wbng.mft (raw, json) Hash identifier: IC67d3qSlbgC8bblYYQXrhLtqPnU2fnoLeFYUoBzYzM= Subject key identifier: 55:EC:FA:4A:2D:8B:CE:6D:DF:0B:6D:FF:9B:E9:72:7A:BC:E9:F9:E8 Authority key identifier: 31:D3:1E:CC:54:B9:0E:9D:FF:24:42:B9:05:1A:A9:56:8F:30:6E:78 Certificate issuer: /CN=31d31ecc54b90e9dff2442b9051aa9568f306e78 Certificate serial: 019B269B51FB68E2990F77D53AE19AFE5685 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdMezFS5Dp3_JEK5BRqpVo8wbng.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/b7cd7c-5795-4146-8477-0da87b51ffac/1/MdMezFS5Dp3_JEK5BRqpVo8wbng.mft Manifest number: 19 Signing time: Tue 16 Dec 2025 10:01:11 +0000 Manifest this update: Tue 16 Dec 2025 10:01:11 +0000 Manifest next update: Wed 17 Dec 2025 10:01:11 +0000 Files and hashes: 1: 3VroMIGW9a2JttxLS_ZpvUy7Y2o.roa (hash: DC6Ab1c940mU76EK7+5P4BKzGG2d6IkCWGpU20nLY2g=) 2: MdMezFS5Dp3_JEK5BRqpVo8wbng.crl (hash: r/0aIbOyHOe5n83gC4mNJaHd0sga4lvRa4TN6Q+IWcc=) 3: yRudXorxnvueWEv1laK5g0QyggU.asa (hash: uEI7+zajFcoccQxQSO5n5lK2+bMnA5xMY3cPSGH3byc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/b7cd7c-5795-4146-8477-0da87b51ffac/1/MdMezFS5Dp3_JEK5BRqpVo8wbng.crl rsync://rpki.ripe.net/repository/DEFAULT/9f/b7cd7c-5795-4146-8477-0da87b51ffac/1/MdMezFS5Dp3_JEK5BRqpVo8wbng.mft rsync://rpki.ripe.net/repository/DEFAULT/MdMezFS5Dp3_JEK5BRqpVo8wbng.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 09:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:26:9b:51:fb:68:e2:99:0f:77:d5:3a:e1:9a:fe:56:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31d31ecc54b90e9dff2442b9051aa9568f306e78 Validity Not Before: Dec 16 10:01:11 2025 GMT Not After : Dec 17 10:01:11 2025 GMT Subject: CN=55ecfa4a2d8bce6ddf0b6dff9be9727abce9f9e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:78:18:07:7b:88:29:06:5a:6b:63:d5:47:fe: 18:a5:64:22:3a:9e:65:d8:18:29:f8:8f:b7:fb:09: ff:44:68:f8:24:d7:4d:ce:ef:61:fd:74:8c:41:2e: 64:6a:40:53:25:af:7b:39:6f:b1:c7:e2:f0:10:a9: 9e:31:ef:ed:af:3f:04:27:4c:9e:c8:40:05:7e:07: 5b:33:33:cd:63:16:0f:89:6d:4f:df:2b:51:8a:e0: 76:0d:42:0b:a9:4e:b9:ba:4c:bc:51:f8:8e:24:7a: 0c:35:be:e7:07:b6:a5:c3:27:cd:66:31:b5:3d:69: 38:1b:25:15:d7:89:b2:60:04:ff:48:a3:c3:59:57: de:f0:0a:43:24:d2:84:11:4c:6b:d2:35:a8:c3:6b: b5:32:38:a3:0a:04:83:cb:74:c4:41:92:54:a7:2a: d6:90:90:34:fb:87:2f:82:80:a8:c9:a9:e1:12:3f: 7a:48:66:b2:3c:74:74:f8:62:75:c9:d5:fc:e1:6d: d4:ab:86:2f:8a:e0:75:b1:c4:22:e7:3d:cc:b6:0c: df:9c:3f:49:c6:20:ad:65:4e:6c:11:b7:1f:21:85: f6:0b:0c:7b:7a:e0:57:7a:5a:85:14:93:7b:7c:be: 06:53:85:c9:b0:20:ac:0e:a6:47:58:6b:d6:b7:f5: 0f:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:EC:FA:4A:2D:8B:CE:6D:DF:0B:6D:FF:9B:E9:72:7A:BC:E9:F9:E8 X509v3 Authority Key Identifier: keyid:31:D3:1E:CC:54:B9:0E:9D:FF:24:42:B9:05:1A:A9:56:8F:30:6E:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdMezFS5Dp3_JEK5BRqpVo8wbng.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/b7cd7c-5795-4146-8477-0da87b51ffac/1/MdMezFS5Dp3_JEK5BRqpVo8wbng.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/b7cd7c-5795-4146-8477-0da87b51ffac/1/MdMezFS5Dp3_JEK5BRqpVo8wbng.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:0f:51:3e:25:87:e9:1b:35:72:7c:0f:1d:fa:31:ba:8b:0b: 3f:fa:ec:dc:f5:61:e4:b7:e7:ab:e9:1c:7f:6d:c4:9f:4b:cd: 1a:f9:4c:4d:41:97:9f:f6:55:15:e7:bc:d3:7d:c2:07:36:87: e7:11:2e:0f:da:a9:e3:d8:9d:f0:65:fb:93:3e:54:81:64:6b: c9:d3:52:6a:7c:3e:87:8f:22:40:f3:85:3c:68:54:c2:6a:68: 09:0e:6f:9c:fd:df:ff:47:7e:f9:b5:2b:cc:34:09:d6:69:70: ef:1d:bc:59:98:a5:fb:ed:90:85:9b:ea:83:cd:02:c0:3a:7c: 5f:e5:a2:a2:ce:49:63:05:fc:93:76:3f:00:d3:31:e1:ff:7c: 1d:e5:4f:d4:6c:11:30:35:e3:0b:ec:64:87:45:0e:4e:44:a9: 00:90:b8:74:8f:3b:a3:db:4f:7a:f5:90:16:c9:89:16:bb:d0: 44:72:2a:08:47:63:12:8e:b3:16:2f:7d:14:61:1b:70:69:64: ca:c3:0d:b5:42:6c:3c:9c:c9:c0:e9:fe:54:bc:fb:02:c7:38: 02:92:bf:52:19:19:86:b2:c0:6f:05:fa:95:c9:15:b3:24:b9: b2:1c:93:b9:87:fb:e5:88:5f:ba:62:ed:28:df:73:03:e4:59: 48:39:be:58 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsmm1H7aOKZD3fVOuGa/laFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxZDMxZWNjNTRiOTBlOWRmZjI0NDJiOTA1MWFhOTU2OGYz MDZlNzgwHhcNMjUxMjE2MTAwMTExWhcNMjUxMjE3MTAwMTExWjAzMTEwLwYDVQQD Eyg1NWVjZmE0YTJkOGJjZTZkZGYwYjZkZmY5YmU5NzI3YWJjZTlmOWU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr3gYB3uIKQZaa2PVR/4YpWQiOp5l 2Bgp+I+3+wn/RGj4JNdNzu9h/XSMQS5kakBTJa97OW+xx+LwEKmeMe/trz8EJ0ye yEAFfgdbMzPNYxYPiW1P3ytRiuB2DUILqU65uky8UfiOJHoMNb7nB7alwyfNZjG1 PWk4GyUV14myYAT/SKPDWVfe8ApDJNKEEUxr0jWow2u1MjijCgSDy3TEQZJUpyrW kJA0+4cvgoCoyanhEj96SGayPHR0+GJ1ydX84W3Uq4YviuB1scQi5z3MtgzfnD9J xiCtZU5sEbcfIYX2Cwx7euBXelqFFJN7fL4GU4XJsCCsDqZHWGvWt/UPsQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFXs+koti85t3wtt/5vpcnq86fnoMB8GA1UdIwQY MBaAFDHTHsxUuQ6d/yRCuQUaqVaPMG54MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTWRNZXpGUzVEcDNfSkVLNUJScXBWbzh3Ym5nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi9iN2NkN2MtNTc5NS00MTQ2LTg0Nzct MGRhODdiNTFmZmFjLzEvTWRNZXpGUzVEcDNfSkVLNUJScXBWbzh3Ym5nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Zi9iN2NkN2MtNTc5NS00MTQ2LTg0NzctMGRhODdiNTFmZmFj LzEvTWRNZXpGUzVEcDNfSkVLNUJScXBWbzh3Ym5nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnA9RPiWH 6Rs1cnwPHfoxuosLP/rs3PVh5Lfnq+kcf23En0vNGvlMTUGXn/ZVFee8033CBzaH 5xEuD9qp49id8GX7kz5UgWRrydNSanw+h48iQPOFPGhUwmpoCQ5vnP3f/0d++bUr zDQJ1mlw7x28WZil++2QhZvqg80CwDp8X+Wios5JYwX8k3Y/ANMx4f98HeVP1GwR MDXjC+xkh0UOTkSpAJC4dI87o9tPevWQFsmJFrvQRHIqCEdjEo6zFi99FGEbcGlk ysMNtUJsPJzJwOn+VLz7Asc4ApK/UhkZhrLAbwX6lckVsyS5shyTuYf75YhfumLt KN9zA+RZSDm+WA== -----END CERTIFICATE-----Generated at Tue Dec 16 12:37:21 2025 by rpki-client