This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/471e89-d6a5-4933-a3e3-802630516f09/1/mjfe_wVaUdk-HtL3xzIX12B6jPI.mft File: mjfe_wVaUdk-HtL3xzIX12B6jPI.mft (raw, json) Hash identifier: 9JY5Gq3nT6G6OQiY9Ggwe9lfEnNm5RY41l0j7gseE9Y= Subject key identifier: 81:B6:61:78:DA:8E:73:4D:AB:82:E5:E8:A7:21:4D:9E:0B:40:50:A3 Authority key identifier: 9A:37:DE:FF:05:5A:51:D9:3E:1E:D2:F7:C7:32:17:D7:60:7A:8C:F2 Certificate issuer: /CN=9a37deff055a51d93e1ed2f7c73217d7607a8cf2 Certificate serial: 019B3FED453AED80A00C28E2733008A89C36 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mjfe_wVaUdk-HtL3xzIX12B6jPI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/471e89-d6a5-4933-a3e3-802630516f09/1/mjfe_wVaUdk-HtL3xzIX12B6jPI.mft Manifest number: 0555 Signing time: Sun 21 Dec 2025 08:01:12 +0000 Manifest this update: Sun 21 Dec 2025 08:01:12 +0000 Manifest next update: Mon 22 Dec 2025 08:01:12 +0000 Files and hashes: 1: YxveI4ih6pTB1sKFupGdm18Smzc.roa (hash: dR429rKnleksdPGeSDctkW6MMPKSaofQtmcnafzS7xs=) 2: mjfe_wVaUdk-HtL3xzIX12B6jPI.crl (hash: jHhHqclgO4tJXQc91YToM+V5eSIM+3+3QnaGqTMT9Ls=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/471e89-d6a5-4933-a3e3-802630516f09/1/mjfe_wVaUdk-HtL3xzIX12B6jPI.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/471e89-d6a5-4933-a3e3-802630516f09/1/mjfe_wVaUdk-HtL3xzIX12B6jPI.mft rsync://rpki.ripe.net/repository/DEFAULT/mjfe_wVaUdk-HtL3xzIX12B6jPI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 08:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:ed:45:3a:ed:80:a0:0c:28:e2:73:30:08:a8:9c:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a37deff055a51d93e1ed2f7c73217d7607a8cf2 Validity Not Before: Dec 21 08:01:12 2025 GMT Not After : Dec 22 08:01:12 2025 GMT Subject: CN=81b66178da8e734dab82e5e8a7214d9e0b4050a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:22:a8:8e:b4:d3:4b:c8:2f:fd:46:d7:87:4e: 87:27:63:4c:f0:76:b9:d5:21:8f:2e:b5:a6:0d:73: f4:68:55:ef:bd:9c:77:23:2f:44:d5:1a:9e:8a:54: a8:52:4d:34:25:d3:1e:6c:85:c4:fb:22:72:94:02: ee:66:4f:d9:c5:2b:25:a6:9b:3e:9f:51:4c:e2:c2: 86:ea:ca:81:34:e4:e2:13:f9:4b:84:38:65:0b:37: 9b:17:e6:f0:31:d5:5d:ab:83:1b:23:08:52:25:16: 2b:c5:23:02:34:fa:8b:09:a5:38:0e:33:a6:ee:b0: 81:f6:bc:f1:b0:a6:f0:dc:86:84:48:76:68:84:af: 01:93:a8:52:fd:d9:5a:36:ec:b6:32:a0:7f:21:3a: 22:4b:04:d5:1c:2f:3c:e1:97:ad:4e:a7:e2:ba:74: 18:34:06:52:bb:cf:90:49:01:f7:6e:5e:71:29:2d: 2f:41:e7:ff:a7:07:15:7c:99:2a:88:fb:32:40:45: 54:7e:6e:55:d4:f7:e6:57:8a:71:ec:03:51:43:91: 03:65:4b:f7:8c:46:74:1e:91:92:29:60:43:29:5f: 26:a4:dd:8c:29:2f:0c:53:b6:2a:50:bc:32:10:0b: 66:c2:41:ae:6d:24:e3:55:64:6c:9f:4d:09:6a:fb: c1:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:B6:61:78:DA:8E:73:4D:AB:82:E5:E8:A7:21:4D:9E:0B:40:50:A3 X509v3 Authority Key Identifier: keyid:9A:37:DE:FF:05:5A:51:D9:3E:1E:D2:F7:C7:32:17:D7:60:7A:8C:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mjfe_wVaUdk-HtL3xzIX12B6jPI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/471e89-d6a5-4933-a3e3-802630516f09/1/mjfe_wVaUdk-HtL3xzIX12B6jPI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/471e89-d6a5-4933-a3e3-802630516f09/1/mjfe_wVaUdk-HtL3xzIX12B6jPI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c2:bd:42:b9:7d:d8:8b:23:8b:dd:83:29:51:39:5b:80:2a:98: ef:7a:d6:7c:59:f4:21:35:c0:54:c0:f6:89:b0:ba:9d:0a:38: 99:fc:10:57:1d:e7:64:01:53:10:40:05:46:c8:df:70:5f:2f: 78:33:47:f8:05:e9:27:c1:9e:95:c8:64:1d:9d:b1:1f:97:14: e4:bd:65:5f:3b:9c:c9:29:2d:59:d3:b5:b0:80:a2:e4:f3:93: 91:bb:30:1c:75:d0:6c:66:a7:9c:b8:d7:39:d9:17:c9:ce:a8: ce:5b:a4:8f:90:0c:28:36:41:38:e6:6c:52:b6:cd:0e:87:ff: cd:7e:59:b3:48:ca:e9:d2:4c:21:8b:2f:c7:a3:77:1d:f5:9f: c2:91:f0:56:07:64:40:e7:06:2d:eb:cf:9c:5f:a5:1c:5c:e2: 71:8b:61:83:b5:ad:1d:95:53:61:03:f0:d7:68:b1:c4:b7:d7: 80:be:93:c0:60:43:72:e1:31:48:af:ba:84:f8:08:2c:49:7e: 0a:45:61:03:d0:f1:d4:eb:5f:6c:ac:75:80:17:40:ad:a3:bc: 95:88:dc:01:15:2e:06:c0:74:45:25:b5:f4:29:a2:b0:c6:73: d3:2e:5e:b7:22:fc:9a:2a:de:3e:57:35:4e:6a:d9:8d:2c:58: 0f:b2:25:a6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/7UU67YCgDCjiczAIqJw2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhMzdkZWZmMDU1YTUxZDkzZTFlZDJmN2M3MzIxN2Q3NjA3 YThjZjIwHhcNMjUxMjIxMDgwMTEyWhcNMjUxMjIyMDgwMTEyWjAzMTEwLwYDVQQD Eyg4MWI2NjE3OGRhOGU3MzRkYWI4MmU1ZThhNzIxNGQ5ZTBiNDA1MGEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAryKojrTTS8gv/UbXh06HJ2NM8Ha5 1SGPLrWmDXP0aFXvvZx3Iy9E1RqeilSoUk00JdMebIXE+yJylALuZk/ZxSslpps+ n1FM4sKG6sqBNOTiE/lLhDhlCzebF+bwMdVdq4MbIwhSJRYrxSMCNPqLCaU4DjOm 7rCB9rzxsKbw3IaESHZohK8Bk6hS/dlaNuy2MqB/IToiSwTVHC884ZetTqfiunQY NAZSu8+QSQH3bl5xKS0vQef/pwcVfJkqiPsyQEVUfm5V1PfmV4px7ANRQ5EDZUv3 jEZ0HpGSKWBDKV8mpN2MKS8MU7YqULwyEAtmwkGubSTjVWRsn00JavvBPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIG2YXjajnNNq4Ll6KchTZ4LQFCjMB8GA1UdIwQY MBaAFJo33v8FWlHZPh7S98cyF9dgeozyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbWpmZV93VmFVZGstSHRMM3h6SVgxMkI2alBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS80NzFlODktZDZhNS00OTMzLWEzZTMt ODAyNjMwNTE2ZjA5LzEvbWpmZV93VmFVZGstSHRMM3h6SVgxMkI2alBJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS80NzFlODktZDZhNS00OTMzLWEzZTMtODAyNjMwNTE2ZjA5 LzEvbWpmZV93VmFVZGstSHRMM3h6SVgxMkI2alBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwr1CuX3Y iyOL3YMpUTlbgCqY73rWfFn0ITXAVMD2ibC6nQo4mfwQVx3nZAFTEEAFRsjfcF8v eDNH+AXpJ8GelchkHZ2xH5cU5L1lXzucySktWdO1sICi5POTkbswHHXQbGannLjX OdkXyc6ozlukj5AMKDZBOOZsUrbNDof/zX5Zs0jK6dJMIYsvx6N3HfWfwpHwVgdk QOcGLevPnF+lHFzicYthg7WtHZVTYQPw12ixxLfXgL6TwGBDcuExSK+6hPgILEl+ CkVhA9Dx1OtfbKx1gBdAraO8lYjcARUuBsB0RSW19CmisMZz0y5etyL8mirePlc1 TmrZjSxYD7Ilpg== -----END CERTIFICATE-----Generated at Sun Dec 21 17:12:02 2025 by rpki-client