This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/f1af90-355c-484b-b923-d31d4cb1b129/1/MDCZQabYT6Tb3a8PTs2Z-fBDz9w.mft File: MDCZQabYT6Tb3a8PTs2Z-fBDz9w.mft (raw, json) Hash identifier: AsyTlqrx6MB4h8ChGagh20UhoCwLyVpjVxnBJ08XMz4= Subject key identifier: 74:C4:5C:0E:15:A0:4D:14:0F:4C:80:83:67:AE:27:5E:AB:B7:D1:82 Authority key identifier: 30:30:99:41:A6:D8:4F:A4:DB:DD:AF:0F:4E:CD:99:F9:F0:43:CF:DC Certificate issuer: /CN=30309941a6d84fa4dbddaf0f4ecd99f9f043cfdc Certificate serial: 019B4E4D2C19E9F5F4598901FB40C5F81E61 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MDCZQabYT6Tb3a8PTs2Z-fBDz9w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/f1af90-355c-484b-b923-d31d4cb1b129/1/MDCZQabYT6Tb3a8PTs2Z-fBDz9w.mft Manifest number: 12E3 Signing time: Wed 24 Dec 2025 03:00:38 +0000 Manifest this update: Wed 24 Dec 2025 03:00:38 +0000 Manifest next update: Thu 25 Dec 2025 03:00:38 +0000 Files and hashes: 1: DIrH-kP5nT3HJlZe7jZz_CkvjFY.roa (hash: gKZZgzAyp+INbVPVuZgOHUrKZ9VQYbL1/WwPWyMWDfc=) 2: MDCZQabYT6Tb3a8PTs2Z-fBDz9w.crl (hash: HmeTkZFmPLS1ryBNo2ffdyWAcUiAICuVj1BSpQXKeVg=) 3: gD2PrMpYBnq5bkywvcg86wYgyi0.roa (hash: ZloCpzZ4hxZcPRO4MDOIHc0MdVfMRoHKIu3JaQVOrkU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/f1af90-355c-484b-b923-d31d4cb1b129/1/MDCZQabYT6Tb3a8PTs2Z-fBDz9w.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/f1af90-355c-484b-b923-d31d4cb1b129/1/MDCZQabYT6Tb3a8PTs2Z-fBDz9w.mft rsync://rpki.ripe.net/repository/DEFAULT/MDCZQabYT6Tb3a8PTs2Z-fBDz9w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 03:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4e:4d:2c:19:e9:f5:f4:59:89:01:fb:40:c5:f8:1e:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30309941a6d84fa4dbddaf0f4ecd99f9f043cfdc Validity Not Before: Dec 24 03:00:38 2025 GMT Not After : Dec 25 03:00:38 2025 GMT Subject: CN=74c45c0e15a04d140f4c808367ae275eabb7d182 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:d9:77:68:1f:57:8e:c3:df:e4:ad:11:bf:6c: 73:a3:63:3d:b8:34:33:df:c9:58:2c:12:50:ae:61: 91:e2:2b:50:1d:0e:22:f0:5f:01:6e:40:25:04:22: 81:6a:72:62:1c:e4:12:0f:aa:27:83:30:b3:b5:5c: 57:72:5b:9c:2e:50:c9:4d:ef:d8:31:3f:1f:cb:50: 7b:c5:4c:86:3c:1e:18:f6:d3:6d:3e:c2:ad:59:8a: 08:f7:01:38:8d:5a:30:18:4a:ba:f8:11:d1:d6:03: 82:b2:4b:d3:9c:d5:f4:27:f4:5b:5a:29:35:1a:2d: 01:9b:6c:2e:3d:42:2f:c8:14:9c:8b:80:f8:67:00: 80:f0:ff:1d:d5:16:08:01:81:a3:50:a1:74:e5:db: ff:a3:43:87:df:f9:da:31:0e:8c:dc:80:2d:c6:a4: 47:46:3a:4d:97:77:f4:f0:06:05:2f:79:9e:79:04: ce:22:40:60:1e:26:73:a5:e7:22:19:fb:48:2a:a9: 10:8a:96:68:54:2a:75:f3:0c:6b:20:4e:03:d6:d5: 72:82:e0:7a:d4:00:87:f0:10:3a:71:77:ff:4a:54: c0:c3:ec:98:29:f9:97:71:27:a0:b9:5c:67:f0:46: 3c:37:cd:9e:4c:98:1d:1b:bc:f2:9e:b4:1c:97:cb: 67:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:C4:5C:0E:15:A0:4D:14:0F:4C:80:83:67:AE:27:5E:AB:B7:D1:82 X509v3 Authority Key Identifier: keyid:30:30:99:41:A6:D8:4F:A4:DB:DD:AF:0F:4E:CD:99:F9:F0:43:CF:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MDCZQabYT6Tb3a8PTs2Z-fBDz9w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/f1af90-355c-484b-b923-d31d4cb1b129/1/MDCZQabYT6Tb3a8PTs2Z-fBDz9w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/f1af90-355c-484b-b923-d31d4cb1b129/1/MDCZQabYT6Tb3a8PTs2Z-fBDz9w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:c7:b1:3a:da:9c:02:29:74:ae:cd:61:7f:a2:48:94:63:09: 9a:f1:56:03:08:f7:01:39:ae:1b:7b:b7:61:96:6f:86:30:60: 32:d7:1d:c4:45:69:85:d9:70:6e:86:62:b3:ba:9b:6e:af:05: 11:cc:fa:cf:2a:b2:24:31:6c:5d:3e:4f:74:0f:44:74:c7:c5: fa:39:6e:9b:a5:0f:81:49:56:34:a5:6a:5a:52:10:cc:48:06: e0:1f:25:c9:da:8c:ee:fd:f6:af:17:94:8f:ec:d8:5f:6b:49: 29:ed:23:d9:d1:86:22:f0:7d:ef:7c:90:3e:c8:a9:f3:86:7a: 07:6a:df:36:81:dd:28:51:73:66:34:18:f1:2c:3b:b7:32:dd: 3d:d2:71:43:0b:28:ea:a9:c5:ed:a9:ab:2e:c4:39:e8:d7:53: 09:17:e8:d1:49:ce:d4:ea:8a:85:8c:c1:cd:ff:2c:30:86:fe: 15:14:af:b0:76:8e:ae:29:b4:a2:4b:59:50:90:42:30:f5:da: b2:e5:e4:76:1b:41:0c:0b:8a:9d:a9:78:c7:da:1b:cb:47:6e: fc:69:2a:77:15:c5:c6:20:bf:b4:73:f0:49:ff:aa:d3:28:fd: 22:01:5e:7c:86:24:df:d1:b2:1d:f5:16:03:19:c5:96:a0:74: e6:57:44:30 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtOTSwZ6fX0WYkB+0DF+B5hMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwMzA5OTQxYTZkODRmYTRkYmRkYWYwZjRlY2Q5OWY5ZjA0 M2NmZGMwHhcNMjUxMjI0MDMwMDM4WhcNMjUxMjI1MDMwMDM4WjAzMTEwLwYDVQQD Eyg3NGM0NWMwZTE1YTA0ZDE0MGY0YzgwODM2N2FlMjc1ZWFiYjdkMTgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm9l3aB9XjsPf5K0Rv2xzo2M9uDQz 38lYLBJQrmGR4itQHQ4i8F8BbkAlBCKBanJiHOQSD6ongzCztVxXclucLlDJTe/Y MT8fy1B7xUyGPB4Y9tNtPsKtWYoI9wE4jVowGEq6+BHR1gOCskvTnNX0J/RbWik1 Gi0Bm2wuPUIvyBSci4D4ZwCA8P8d1RYIAYGjUKF05dv/o0OH3/naMQ6M3IAtxqRH RjpNl3f08AYFL3meeQTOIkBgHiZzpeciGftIKqkQipZoVCp18wxrIE4D1tVyguB6 1ACH8BA6cXf/SlTAw+yYKfmXcSeguVxn8EY8N82eTJgdG7zynrQcl8tnSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHTEXA4VoE0UD0yAg2euJ16rt9GCMB8GA1UdIwQY MBaAFDAwmUGm2E+k292vD07NmfnwQ8/cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTURDWlFhYllUNlRiM2E4UFRzMlotZkJEejl3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi9mMWFmOTAtMzU1Yy00ODRiLWI5MjMt ZDMxZDRjYjFiMTI5LzEvTURDWlFhYllUNlRiM2E4UFRzMlotZkJEejl3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi9mMWFmOTAtMzU1Yy00ODRiLWI5MjMtZDMxZDRjYjFiMTI5 LzEvTURDWlFhYllUNlRiM2E4UFRzMlotZkJEejl3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeMexOtqc Ail0rs1hf6JIlGMJmvFWAwj3ATmuG3u3YZZvhjBgMtcdxEVphdlwboZis7qbbq8F Ecz6zyqyJDFsXT5PdA9EdMfF+jlum6UPgUlWNKVqWlIQzEgG4B8lydqM7v32rxeU j+zYX2tJKe0j2dGGIvB973yQPsip84Z6B2rfNoHdKFFzZjQY8Sw7tzLdPdJxQwso 6qnF7amrLsQ56NdTCRfo0UnO1OqKhYzBzf8sMIb+FRSvsHaOrim0oktZUJBCMPXa suXkdhtBDAuKnal4x9oby0du/GkqdxXFxiC/tHPwSf+q0yj9IgFefIYk39GyHfUW AxnFlqB05ldEMA== -----END CERTIFICATE-----Generated at Wed Dec 24 12:27:10 2025 by rpki-client