This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/22ad4c-0b05-474d-919f-3b540a6bc3dc/1/MMRfwxRxAoJPnS1Ud2aoCa6vJFo.mft File: MMRfwxRxAoJPnS1Ud2aoCa6vJFo.mft (raw, json) Hash identifier: vqvJGtfzHnwcP/6dpIopeSl7f+uZuAja0/HRsNPT1wc= Subject key identifier: 4E:E4:C0:45:C6:32:1F:C5:DE:47:88:4A:69:50:51:D6:7F:48:63:BA Authority key identifier: 30:C4:5F:C3:14:71:02:82:4F:9D:2D:54:77:66:A8:09:AE:AF:24:5A Certificate issuer: /CN=30c45fc3147102824f9d2d547766a809aeaf245a Certificate serial: 019B3CEBA41837F623347486A087E12D121C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MMRfwxRxAoJPnS1Ud2aoCa6vJFo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/22ad4c-0b05-474d-919f-3b540a6bc3dc/1/MMRfwxRxAoJPnS1Ud2aoCa6vJFo.mft Manifest number: 0932 Signing time: Sat 20 Dec 2025 18:00:34 +0000 Manifest this update: Sat 20 Dec 2025 18:00:34 +0000 Manifest next update: Sun 21 Dec 2025 18:00:34 +0000 Files and hashes: 1: 57B-StK2AQ9sl4U1coOqd8wTgag.roa (hash: n83L+DsDXWJdoYcHoR653OskwlFSlFS/GtJPH3Goy+M=) 2: MMRfwxRxAoJPnS1Ud2aoCa6vJFo.crl (hash: damV3LG37sSHCf/nkBKs0cpuIvisYRHUNdaJEE5cd/c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/22ad4c-0b05-474d-919f-3b540a6bc3dc/1/MMRfwxRxAoJPnS1Ud2aoCa6vJFo.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/22ad4c-0b05-474d-919f-3b540a6bc3dc/1/MMRfwxRxAoJPnS1Ud2aoCa6vJFo.mft rsync://rpki.ripe.net/repository/DEFAULT/MMRfwxRxAoJPnS1Ud2aoCa6vJFo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:eb:a4:18:37:f6:23:34:74:86:a0:87:e1:2d:12:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30c45fc3147102824f9d2d547766a809aeaf245a Validity Not Before: Dec 20 18:00:34 2025 GMT Not After : Dec 21 18:00:34 2025 GMT Subject: CN=4ee4c045c6321fc5de47884a695051d67f4863ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:cd:b7:a5:8e:15:87:97:c2:17:b4:68:d2:e0: 88:8b:a2:6f:31:66:7f:a4:b8:2b:7b:5a:34:ed:10: 39:f2:be:61:37:0b:65:81:1e:14:93:58:e3:f9:96: 91:f0:c6:b3:d8:2b:75:76:92:22:03:69:a2:a3:27: 97:7c:cf:9b:f8:66:ae:a9:0c:f2:3c:a1:d0:25:22: 6e:13:27:6c:dd:5a:6e:50:0d:d8:2b:df:57:b3:f8: 88:d5:92:af:b0:10:b7:98:3f:4e:2b:9a:e9:57:9b: 22:af:5e:e2:40:17:4d:b5:7a:da:65:57:0f:37:e3: db:28:80:22:92:ef:59:ae:16:64:79:3d:ca:c8:68: 8c:28:da:1f:0f:34:85:9d:61:d2:f3:23:fd:aa:fc: 63:b8:b0:7e:d0:20:1b:f6:4f:c2:ca:84:37:00:2e: 61:d9:19:be:5a:fc:bb:8a:f2:91:75:76:7a:94:11: fd:45:4a:70:0b:d5:7a:53:6d:95:5b:3a:10:35:32: af:4f:b8:0c:e6:13:a2:db:36:4e:e9:a4:6e:e0:89: 9c:7e:c1:ed:f1:55:38:c5:26:d5:36:b1:82:c1:cc: d3:39:6f:cb:5b:72:9f:7c:72:04:18:54:5f:d0:a4: 12:52:87:a0:a4:cd:7e:cf:52:5a:99:1a:d9:69:c5: 93:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:E4:C0:45:C6:32:1F:C5:DE:47:88:4A:69:50:51:D6:7F:48:63:BA X509v3 Authority Key Identifier: keyid:30:C4:5F:C3:14:71:02:82:4F:9D:2D:54:77:66:A8:09:AE:AF:24:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MMRfwxRxAoJPnS1Ud2aoCa6vJFo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/22ad4c-0b05-474d-919f-3b540a6bc3dc/1/MMRfwxRxAoJPnS1Ud2aoCa6vJFo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/22ad4c-0b05-474d-919f-3b540a6bc3dc/1/MMRfwxRxAoJPnS1Ud2aoCa6vJFo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:6b:d6:f6:d5:2a:04:d3:2a:f0:2a:a6:9b:9a:62:b1:ac:40: 03:3d:fc:2a:b5:27:2c:c5:4c:a1:b4:d3:41:df:5c:78:d9:d1: 44:0b:72:35:a7:e9:d1:7b:57:e0:43:50:7b:1f:d9:6e:4c:fb: b5:a8:08:27:d7:3a:91:6c:b4:7b:a3:56:cd:53:96:08:45:39: a2:07:90:58:0f:36:9c:8a:dd:66:89:19:34:1d:af:cb:c6:0e: 3a:7d:82:9b:ce:6e:62:14:b0:d0:7d:fd:fb:9e:19:f3:03:fe: ce:b6:1e:79:e4:af:8b:a6:f0:b1:6e:90:5c:3b:ac:80:6a:b7: 4c:a2:a1:aa:d1:15:5d:89:5e:09:69:45:6f:74:81:e0:67:78: 94:5d:e7:19:58:ce:25:13:1d:c9:55:fe:63:59:2e:27:b4:81: ff:b8:d2:6a:41:70:29:df:c1:bd:0f:5f:2e:5b:7a:e0:c5:09: 7d:21:d9:09:b0:22:98:c6:20:ad:f0:0b:f2:97:97:b8:43:21: f8:fe:bb:7b:6c:11:f5:6b:9b:b3:60:bd:f6:e2:10:dc:dc:9b: a4:df:bb:4b:b2:75:56:55:4c:d4:7d:a2:f8:b2:be:d8:b3:92: b3:5d:39:b4:da:bc:14:77:87:d4:b0:c9:54:18:27:6a:1d:18: 39:80:63:b3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs866QYN/YjNHSGoIfhLRIcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwYzQ1ZmMzMTQ3MTAyODI0ZjlkMmQ1NDc3NjZhODA5YWVh ZjI0NWEwHhcNMjUxMjIwMTgwMDM0WhcNMjUxMjIxMTgwMDM0WjAzMTEwLwYDVQQD Eyg0ZWU0YzA0NWM2MzIxZmM1ZGU0Nzg4NGE2OTUwNTFkNjdmNDg2M2JhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAss23pY4Vh5fCF7Ro0uCIi6JvMWZ/ pLgre1o07RA58r5hNwtlgR4Uk1jj+ZaR8Maz2Ct1dpIiA2mioyeXfM+b+GauqQzy PKHQJSJuEyds3VpuUA3YK99Xs/iI1ZKvsBC3mD9OK5rpV5sir17iQBdNtXraZVcP N+PbKIAiku9ZrhZkeT3KyGiMKNofDzSFnWHS8yP9qvxjuLB+0CAb9k/CyoQ3AC5h 2Rm+Wvy7ivKRdXZ6lBH9RUpwC9V6U22VWzoQNTKvT7gM5hOi2zZO6aRu4ImcfsHt 8VU4xSbVNrGCwczTOW/LW3KffHIEGFRf0KQSUoegpM1+z1JamRrZacWTdQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE7kwEXGMh/F3keISmlQUdZ/SGO6MB8GA1UdIwQY MBaAFDDEX8MUcQKCT50tVHdmqAmuryRaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTU1SZnd4UnhBb0pQblMxVWQyYW9DYTZ2SkZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy8yMmFkNGMtMGIwNS00NzRkLTkxOWYt M2I1NDBhNmJjM2RjLzEvTU1SZnd4UnhBb0pQblMxVWQyYW9DYTZ2SkZvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy8yMmFkNGMtMGIwNS00NzRkLTkxOWYtM2I1NDBhNmJjM2Rj LzEvTU1SZnd4UnhBb0pQblMxVWQyYW9DYTZ2SkZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArGvW9tUq BNMq8Cqmm5pisaxAAz38KrUnLMVMobTTQd9ceNnRRAtyNafp0XtX4ENQex/Zbkz7 tagIJ9c6kWy0e6NWzVOWCEU5ogeQWA82nIrdZokZNB2vy8YOOn2Cm85uYhSw0H39 +54Z8wP+zrYeeeSvi6bwsW6QXDusgGq3TKKhqtEVXYleCWlFb3SB4Gd4lF3nGVjO JRMdyVX+Y1kuJ7SB/7jSakFwKd/BvQ9fLlt64MUJfSHZCbAimMYgrfAL8peXuEMh +P67e2wR9Wubs2C99uIQ3NybpN+7S7J1VlVM1H2i+LK+2LOSs105tNq8FHeH1LDJ VBgnah0YOYBjsw== -----END CERTIFICATE-----Generated at Sat Dec 20 21:06:01 2025 by rpki-client