This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/380864-2154-47d9-a8b0-1b1c826e7b8e/1/Mwe9udWFUeFJKsQ6I7m2KWac624.mft File: Mwe9udWFUeFJKsQ6I7m2KWac624.mft (raw, json) Hash identifier: cwXugkr3gnH7S5er8r+0MHGw2oSkbxFhhFIxTvm7rVI= Subject key identifier: 28:99:84:4F:FA:FE:78:65:F1:3D:D7:13:01:87:DF:A0:C8:C2:BA:67 Authority key identifier: 33:07:BD:B9:D5:85:51:E1:49:2A:C4:3A:23:B9:B6:29:66:9C:EB:6E Certificate issuer: /CN=3307bdb9d58551e1492ac43a23b9b629669ceb6e Certificate serial: 019B3F484942F0152AFEB9291377714751F1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mwe9udWFUeFJKsQ6I7m2KWac624.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/380864-2154-47d9-a8b0-1b1c826e7b8e/1/Mwe9udWFUeFJKsQ6I7m2KWac624.mft Manifest number: 0267 Signing time: Sun 21 Dec 2025 05:01:00 +0000 Manifest this update: Sun 21 Dec 2025 05:01:00 +0000 Manifest next update: Mon 22 Dec 2025 05:01:00 +0000 Files and hashes: 1: Mwe9udWFUeFJKsQ6I7m2KWac624.crl (hash: mKxJ9CGbJqEcL5dbcrlw/xX38Bd/vmgHBL2QDIg29pQ=) 2: OQ3xapSQQrV-80ArCY291PiiOQ0.roa (hash: OY/in2kPTUsYYOEPlRa8j7m4biw3RBXISzd1HBiTCII=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/380864-2154-47d9-a8b0-1b1c826e7b8e/1/Mwe9udWFUeFJKsQ6I7m2KWac624.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/380864-2154-47d9-a8b0-1b1c826e7b8e/1/Mwe9udWFUeFJKsQ6I7m2KWac624.mft rsync://rpki.ripe.net/repository/DEFAULT/Mwe9udWFUeFJKsQ6I7m2KWac624.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:48:49:42:f0:15:2a:fe:b9:29:13:77:71:47:51:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3307bdb9d58551e1492ac43a23b9b629669ceb6e Validity Not Before: Dec 21 05:01:00 2025 GMT Not After : Dec 22 05:01:00 2025 GMT Subject: CN=2899844ffafe7865f13dd7130187dfa0c8c2ba67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:4c:d2:4b:75:69:8f:a7:63:80:b6:9d:85:e4: fa:32:73:4f:01:98:88:c0:4b:c6:55:01:23:3b:8c: b6:75:03:35:cb:b6:ac:b8:c7:78:a9:20:72:54:72: ef:a7:0c:88:d0:cb:c3:88:ce:54:fe:a1:f7:89:c6: 5e:13:76:fc:15:c7:a4:cc:97:c6:93:48:94:3b:fe: 38:4a:32:b5:4b:0e:68:ae:31:b5:1e:93:0f:7c:68: 9b:8f:6b:9e:d5:bb:47:1f:44:46:b7:9d:8f:d2:19: b0:81:32:d3:7a:55:a4:1a:6a:fc:68:2f:f9:44:6e: 62:74:82:60:94:f0:d4:28:a0:be:e3:df:61:02:55: c9:c2:4c:94:27:fc:8f:38:2a:e3:b0:90:25:d8:60: 53:24:a2:7e:f1:7a:58:f3:20:33:15:77:9e:1e:14: a3:ef:cc:5b:ec:8d:de:72:79:b0:fa:1a:a6:82:55: 5f:94:50:4f:6d:84:54:2b:7c:7e:a4:14:69:8f:b2: 3a:f8:16:5e:fa:85:4a:ec:0f:a2:6a:87:16:7a:bc: 04:29:bd:18:c1:32:54:57:48:52:21:2a:35:4a:99: b8:19:15:cd:0b:bd:73:4b:60:bb:0f:3a:9a:81:fe: a4:46:fa:ba:26:a4:79:61:77:82:df:dc:d4:7c:de: fc:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:99:84:4F:FA:FE:78:65:F1:3D:D7:13:01:87:DF:A0:C8:C2:BA:67 X509v3 Authority Key Identifier: keyid:33:07:BD:B9:D5:85:51:E1:49:2A:C4:3A:23:B9:B6:29:66:9C:EB:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mwe9udWFUeFJKsQ6I7m2KWac624.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/380864-2154-47d9-a8b0-1b1c826e7b8e/1/Mwe9udWFUeFJKsQ6I7m2KWac624.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/380864-2154-47d9-a8b0-1b1c826e7b8e/1/Mwe9udWFUeFJKsQ6I7m2KWac624.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:66:f1:b8:a0:1c:a8:10:75:87:2e:6a:4e:64:f1:2a:6f:22: 14:3f:45:01:ce:98:ae:db:f5:db:3d:b7:6c:c1:c5:2c:a8:6a: d6:af:38:7c:bc:43:7f:51:b7:07:00:40:96:14:54:51:86:d8: 54:4d:a6:4e:1b:ef:9c:a0:3b:d9:03:03:ca:9c:a8:82:fb:45: 4a:01:23:98:58:57:63:3f:1a:ea:33:4e:4f:a5:91:79:f7:09: 2c:35:dd:54:97:34:7f:91:90:00:51:7b:c7:47:3a:ce:79:7c: 6b:65:3d:91:59:63:91:8f:9d:fb:f6:8e:f0:ee:2c:4a:52:1d: 39:30:c5:f0:3e:c0:37:f8:8a:78:82:3e:ec:b8:9b:02:4c:aa: ed:5b:fa:ad:ae:bf:9d:c3:3b:4d:54:fe:4d:bc:65:a7:15:5d: 9b:3a:80:b6:f8:a5:e2:11:e8:5d:83:c6:cd:9f:30:a8:d8:09: 53:3b:a5:a8:b8:42:8a:fa:31:e8:cb:01:5e:3e:be:58:e4:32: 1c:08:8c:8b:a9:a3:09:5b:06:05:74:02:3a:e6:55:a7:bb:d9: 1a:19:b5:b4:f0:a5:2c:69:fc:60:c1:5f:1c:38:e5:7b:3a:b8: 66:a8:47:ca:e3:92:f5:b0:50:45:5f:18:17:8f:d0:a0:c4:8c: fb:1b:94:44 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/SElC8BUq/rkpE3dxR1HxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMzMDdiZGI5ZDU4NTUxZTE0OTJhYzQzYTIzYjliNjI5NjY5 Y2ViNmUwHhcNMjUxMjIxMDUwMTAwWhcNMjUxMjIyMDUwMTAwWjAzMTEwLwYDVQQD EygyODk5ODQ0ZmZhZmU3ODY1ZjEzZGQ3MTMwMTg3ZGZhMGM4YzJiYTY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwkzSS3Vpj6djgLadheT6MnNPAZiI wEvGVQEjO4y2dQM1y7asuMd4qSByVHLvpwyI0MvDiM5U/qH3icZeE3b8FcekzJfG k0iUO/44SjK1Sw5orjG1HpMPfGibj2ue1btHH0RGt52P0hmwgTLTelWkGmr8aC/5 RG5idIJglPDUKKC+499hAlXJwkyUJ/yPOCrjsJAl2GBTJKJ+8XpY8yAzFXeeHhSj 78xb7I3ecnmw+hqmglVflFBPbYRUK3x+pBRpj7I6+BZe+oVK7A+iaocWerwEKb0Y wTJUV0hSISo1Spm4GRXNC71zS2C7Dzqagf6kRvq6JqR5YXeC39zUfN78mQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCiZhE/6/nhl8T3XEwGH36DIwrpnMB8GA1UdIwQY MBaAFDMHvbnVhVHhSSrEOiO5tilmnOtuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTXdlOXVkV0ZVZUZKS3NRNkk3bTJLV2FjNjI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC8zODA4NjQtMjE1NC00N2Q5LWE4YjAt MWIxYzgyNmU3YjhlLzEvTXdlOXVkV0ZVZUZKS3NRNkk3bTJLV2FjNjI0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC8zODA4NjQtMjE1NC00N2Q5LWE4YjAtMWIxYzgyNmU3Yjhl LzEvTXdlOXVkV0ZVZUZKS3NRNkk3bTJLV2FjNjI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAembxuKAc qBB1hy5qTmTxKm8iFD9FAc6Yrtv12z23bMHFLKhq1q84fLxDf1G3BwBAlhRUUYbY VE2mThvvnKA72QMDypyogvtFSgEjmFhXYz8a6jNOT6WRefcJLDXdVJc0f5GQAFF7 x0c6znl8a2U9kVljkY+d+/aO8O4sSlIdOTDF8D7AN/iKeII+7LibAkyq7Vv6ra6/ ncM7TVT+TbxlpxVdmzqAtvil4hHoXYPGzZ8wqNgJUzulqLhCivox6MsBXj6+WOQy HAiMi6mjCVsGBXQCOuZVp7vZGhm1tPClLGn8YMFfHDjlezq4ZqhHyuOS9bBQRV8Y F4/QoMSM+xuURA== -----END CERTIFICATE-----Generated at Sun Dec 21 08:16:31 2025 by rpki-client