This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/b79ee0-d4d1-4869-a62d-fd96ffebcfa1/1/MdqeNbdw4uaB91bNfSCBKoLhFhE.mft File: MdqeNbdw4uaB91bNfSCBKoLhFhE.mft (raw, json) Hash identifier: Ku8SugCv9dQCoZHfKQRhj9VtWtEHamMKcSePI/fN+ew= Subject key identifier: B8:C2:F6:D8:A9:67:90:62:96:89:B1:5F:E9:BE:1A:A5:BB:63:E1:C6 Authority key identifier: 31:DA:9E:35:B7:70:E2:E6:81:F7:56:CD:7D:20:81:2A:82:E1:16:11 Certificate issuer: /CN=31da9e35b770e2e681f756cd7d20812a82e11611 Certificate serial: 019B28C02DE868A0FFE729F1321B8089553A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdqeNbdw4uaB91bNfSCBKoLhFhE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/b79ee0-d4d1-4869-a62d-fd96ffebcfa1/1/MdqeNbdw4uaB91bNfSCBKoLhFhE.mft Manifest number: 177E Signing time: Tue 16 Dec 2025 20:00:41 +0000 Manifest this update: Tue 16 Dec 2025 20:00:41 +0000 Manifest next update: Wed 17 Dec 2025 20:00:41 +0000 Files and hashes: 1: 5cSVF2_nio6952U-LXaO6EaByvM.roa (hash: W1RYT1KINzg4/aDaZcRwx3Kyxg4anoPRdOWZGqifkgo=) 2: MdqeNbdw4uaB91bNfSCBKoLhFhE.crl (hash: 3ZqDAWZr/zFg2NgSdQWGVtsQkzx4XiRzInZCVWwLNOY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/b79ee0-d4d1-4869-a62d-fd96ffebcfa1/1/MdqeNbdw4uaB91bNfSCBKoLhFhE.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/b79ee0-d4d1-4869-a62d-fd96ffebcfa1/1/MdqeNbdw4uaB91bNfSCBKoLhFhE.mft rsync://rpki.ripe.net/repository/DEFAULT/MdqeNbdw4uaB91bNfSCBKoLhFhE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 14:45:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:28:c0:2d:e8:68:a0:ff:e7:29:f1:32:1b:80:89:55:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31da9e35b770e2e681f756cd7d20812a82e11611 Validity Not Before: Dec 16 20:00:41 2025 GMT Not After : Dec 17 20:00:41 2025 GMT Subject: CN=b8c2f6d8a96790629689b15fe9be1aa5bb63e1c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:ad:64:ce:be:31:08:f6:a1:d0:f3:d3:62:7a: 6d:2f:c5:64:21:9c:24:b5:63:93:e2:39:c4:c0:0a: fa:9f:60:5c:9e:a8:2d:1d:bb:a4:2d:15:3c:ad:7c: 53:07:3e:fe:01:a9:74:9f:99:ce:82:64:c3:86:6f: 86:bc:dc:4c:5f:86:62:a5:8b:1c:54:0e:35:3f:4d: ac:ae:c6:5e:93:1e:05:72:3c:8f:0e:9f:39:15:7c: 16:e2:4d:c4:09:c3:f8:1c:cf:66:f0:1b:00:5b:e2: 6f:46:51:02:d4:af:ee:c3:4b:5e:1f:41:6e:65:0a: 98:97:ef:e6:f3:5f:54:c6:5a:af:8c:96:ed:63:74: 33:77:6c:91:65:0e:64:b4:32:a9:3a:a1:3d:dd:69: d8:d7:24:61:18:76:c9:ca:c3:02:db:fb:65:c1:96: e6:bf:62:0b:9d:28:06:29:36:a7:94:8e:4a:94:58: 90:21:0c:bf:49:76:28:9d:bb:32:ca:c2:e5:5e:72: 2b:d0:dd:37:37:ad:56:51:e1:6d:b6:b2:89:fe:4f: 96:c3:37:f6:cb:eb:6a:ed:79:2f:fe:e4:ce:2f:7b: 2e:da:0e:9c:5f:e8:36:24:2e:2e:99:14:cb:53:e2: 39:83:aa:65:20:b1:ba:86:87:fa:2c:20:f5:24:19: f2:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:C2:F6:D8:A9:67:90:62:96:89:B1:5F:E9:BE:1A:A5:BB:63:E1:C6 X509v3 Authority Key Identifier: keyid:31:DA:9E:35:B7:70:E2:E6:81:F7:56:CD:7D:20:81:2A:82:E1:16:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdqeNbdw4uaB91bNfSCBKoLhFhE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/b79ee0-d4d1-4869-a62d-fd96ffebcfa1/1/MdqeNbdw4uaB91bNfSCBKoLhFhE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/b79ee0-d4d1-4869-a62d-fd96ffebcfa1/1/MdqeNbdw4uaB91bNfSCBKoLhFhE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:c5:df:18:2b:4c:99:c4:64:f7:c8:9c:45:5b:37:c9:16:7f: a9:37:65:4b:33:fe:0f:8a:ac:1a:82:ec:af:8a:6a:c3:9d:ff: 31:41:22:05:6f:b4:0d:fe:63:6c:5a:36:ac:a1:4b:d9:da:82: 5f:1d:6d:3c:97:e0:79:1d:16:31:24:a9:d7:88:10:24:1f:e6: 5b:d6:20:49:4a:13:19:63:f4:89:fc:d2:7f:43:2d:26:3c:80: 59:8a:27:e3:fe:14:02:24:84:77:10:6d:fa:65:e7:47:34:10: 70:f0:ec:67:d4:ad:c1:b0:7a:1e:fe:28:95:d9:d6:a5:b7:dd: 82:71:23:e6:27:8f:73:9a:ba:14:90:bb:ce:b9:f0:9e:db:fe: a9:98:f0:a3:9a:b0:eb:63:56:4f:fa:be:de:71:8e:b1:be:1f: 96:b7:36:3c:a2:30:64:e2:7b:e6:81:24:1a:36:eb:4b:65:77: 91:4d:8e:00:8c:e0:f8:3b:24:08:6a:c2:58:4b:7c:2f:30:94: 09:0c:e2:34:f1:46:e3:da:97:0d:f4:6d:0b:95:20:09:53:fa: 94:44:18:02:ae:e4:e5:2c:4f:d2:a6:b3:d5:80:1d:db:71:af: 14:98:e0:89:ce:3a:3a:b4:cd:d9:ec:b9:c0:ad:88:54:82:27: 75:2e:ec:9e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsowC3oaKD/5ynxMhuAiVU6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxZGE5ZTM1Yjc3MGUyZTY4MWY3NTZjZDdkMjA4MTJhODJl MTE2MTEwHhcNMjUxMjE2MjAwMDQxWhcNMjUxMjE3MjAwMDQxWjAzMTEwLwYDVQQD EyhiOGMyZjZkOGE5Njc5MDYyOTY4OWIxNWZlOWJlMWFhNWJiNjNlMWM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmK1kzr4xCPah0PPTYnptL8VkIZwk tWOT4jnEwAr6n2BcnqgtHbukLRU8rXxTBz7+Aal0n5nOgmTDhm+GvNxMX4ZipYsc VA41P02srsZekx4FcjyPDp85FXwW4k3ECcP4HM9m8BsAW+JvRlEC1K/uw0teH0Fu ZQqYl+/m819UxlqvjJbtY3Qzd2yRZQ5ktDKpOqE93WnY1yRhGHbJysMC2/tlwZbm v2ILnSgGKTanlI5KlFiQIQy/SXYonbsyysLlXnIr0N03N61WUeFttrKJ/k+Wwzf2 y+tq7Xkv/uTOL3su2g6cX+g2JC4umRTLU+I5g6plILG6hof6LCD1JBny2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLjC9tipZ5BilomxX+m+GqW7Y+HGMB8GA1UdIwQY MBaAFDHanjW3cOLmgfdWzX0ggSqC4RYRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTWRxZU5iZHc0dWFCOTFiTmZTQ0JLb0xoRmhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS9iNzllZTAtZDRkMS00ODY5LWE2MmQt ZmQ5NmZmZWJjZmExLzEvTWRxZU5iZHc0dWFCOTFiTmZTQ0JLb0xoRmhFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS9iNzllZTAtZDRkMS00ODY5LWE2MmQtZmQ5NmZmZWJjZmEx LzEvTWRxZU5iZHc0dWFCOTFiTmZTQ0JLb0xoRmhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAesXfGCtM mcRk98icRVs3yRZ/qTdlSzP+D4qsGoLsr4pqw53/MUEiBW+0Df5jbFo2rKFL2dqC Xx1tPJfgeR0WMSSp14gQJB/mW9YgSUoTGWP0ifzSf0MtJjyAWYon4/4UAiSEdxBt +mXnRzQQcPDsZ9StwbB6Hv4oldnWpbfdgnEj5iePc5q6FJC7zrnwntv+qZjwo5qw 62NWT/q+3nGOsb4flrc2PKIwZOJ75oEkGjbrS2V3kU2OAIzg+DskCGrCWEt8LzCU CQziNPFG49qXDfRtC5UgCVP6lEQYAq7k5SxP0qaz1YAd23GvFJjgic46OrTN2ey5 wK2IVIIndS7sng== -----END CERTIFICATE-----Generated at Tue Dec 16 23:15:33 2025 by rpki-client