This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/07560a-062b-4802-89af-19192e81b831/1/MfePPgBBCSbb2JyOj1xACxArA3k.mft File: MfePPgBBCSbb2JyOj1xACxArA3k.mft (raw, json) Hash identifier: Kw0cs+u0i+xN+31monHOxPzNChIB0OM2RQV62sIZ+LA= Subject key identifier: B8:60:FA:0B:AE:F4:B3:D3:4A:B7:28:65:1D:E7:01:87:84:DB:26:8A Authority key identifier: 31:F7:8F:3E:00:41:09:26:DB:D8:9C:8E:8F:5C:40:0B:10:2B:03:79 Certificate issuer: /CN=31f78f3e00410926dbd89c8e8f5c400b102b0379 Certificate serial: 019B5117C18D65CEE07AD2E7CA74CA6013F6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MfePPgBBCSbb2JyOj1xACxArA3k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/07560a-062b-4802-89af-19192e81b831/1/MfePPgBBCSbb2JyOj1xACxArA3k.mft Manifest number: 09BD Signing time: Wed 24 Dec 2025 16:01:09 +0000 Manifest this update: Wed 24 Dec 2025 16:01:09 +0000 Manifest next update: Thu 25 Dec 2025 16:01:09 +0000 Files and hashes: 1: MfePPgBBCSbb2JyOj1xACxArA3k.crl (hash: ZNduSByqEnshEYqHg38MgYJ5Hf6b62J4/HIzwBiGSzs=) 2: eUlaq5gS3GI6r3fmoZPaba7Dfho.roa (hash: PBjrFIbcmCvN1hWwmYdZLCa28CsdtHFqI3Efr5fS4Bg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/07560a-062b-4802-89af-19192e81b831/1/MfePPgBBCSbb2JyOj1xACxArA3k.crl rsync://rpki.ripe.net/repository/DEFAULT/db/07560a-062b-4802-89af-19192e81b831/1/MfePPgBBCSbb2JyOj1xACxArA3k.mft rsync://rpki.ripe.net/repository/DEFAULT/MfePPgBBCSbb2JyOj1xACxArA3k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 14:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:51:17:c1:8d:65:ce:e0:7a:d2:e7:ca:74:ca:60:13:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31f78f3e00410926dbd89c8e8f5c400b102b0379 Validity Not Before: Dec 24 16:01:09 2025 GMT Not After : Dec 25 16:01:09 2025 GMT Subject: CN=b860fa0baef4b3d34ab728651de7018784db268a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:8b:ea:df:12:c9:30:af:c1:2b:08:18:ec:81: f3:4a:1d:37:50:02:bb:30:af:5a:82:3a:39:80:b6: e4:66:05:2b:ab:89:2b:8c:52:d6:62:c1:fd:20:cd: c5:51:20:2a:5a:fb:22:f4:5e:42:e5:43:4c:5f:8b: 75:1e:c0:f4:01:d4:b6:64:81:02:cf:75:c8:29:f2: ed:bb:d2:9b:82:bb:71:ea:72:74:2b:52:93:c7:e8: 6e:8d:06:43:ad:f1:3e:f8:33:fb:a1:71:e2:61:fb: f2:8b:de:9e:1d:b3:bc:b5:ec:ab:f1:51:47:74:07: c9:11:79:77:0a:ad:bc:9d:8f:c3:d6:a1:87:c2:b9: ea:49:f3:ea:88:85:52:7d:c6:da:2f:8b:35:dd:c9: 68:fd:52:81:31:8f:69:20:15:0b:b5:60:28:29:03: 1d:f8:d8:49:1e:a9:ea:37:8b:b8:29:7c:aa:d9:5b: 79:f1:78:30:9d:80:a0:4b:10:fe:a3:65:e6:e8:e0: 3b:ed:36:ac:ef:fe:e4:e5:27:de:2b:9d:ee:9e:24: f2:2b:ef:3d:e8:65:41:17:b5:eb:0e:41:19:ea:71: 22:7a:c9:20:6c:83:10:6c:11:ef:d4:1c:38:8e:04: 75:ba:58:da:00:88:10:20:90:90:dc:49:ea:0b:48: 88:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:60:FA:0B:AE:F4:B3:D3:4A:B7:28:65:1D:E7:01:87:84:DB:26:8A X509v3 Authority Key Identifier: keyid:31:F7:8F:3E:00:41:09:26:DB:D8:9C:8E:8F:5C:40:0B:10:2B:03:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MfePPgBBCSbb2JyOj1xACxArA3k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/07560a-062b-4802-89af-19192e81b831/1/MfePPgBBCSbb2JyOj1xACxArA3k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/07560a-062b-4802-89af-19192e81b831/1/MfePPgBBCSbb2JyOj1xACxArA3k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ba:fe:80:f8:c4:a7:2d:95:b9:71:49:99:73:21:76:57:e5:a5: 45:c7:ce:bb:5e:79:44:23:d6:a9:49:89:84:75:cb:71:d0:70: f3:5a:47:e4:65:3e:92:d7:fa:8e:fb:85:10:99:84:fa:e6:37: 36:17:49:6c:52:1e:56:8e:29:45:38:cc:31:90:cf:13:4a:49: 83:c7:a6:6e:d6:01:a6:e3:5f:4c:c1:e6:e3:1f:9c:01:25:a2: cb:d6:1c:77:87:e5:98:75:ce:7a:fb:cc:d2:2b:20:79:7c:a5: 0d:22:96:46:94:99:ac:84:00:9b:8f:47:4f:c1:0d:ba:85:92: c5:70:d6:b6:77:b2:b1:7b:1a:56:dc:a9:e0:f3:18:cd:61:28: f4:52:8e:9a:c7:78:89:51:35:13:4f:f7:a5:41:e3:a8:ba:26: 25:e0:55:4d:e1:9e:af:9e:03:58:ba:45:f8:c3:3c:c1:75:53: 02:87:d2:18:13:a5:8d:c5:04:64:b3:be:38:51:a7:ba:28:85: c8:83:c4:3d:50:08:81:09:84:0d:da:06:63:4c:84:8e:6a:69: ac:29:83:b2:83:ee:16:eb:1c:c9:91:3b:b8:6e:0d:ed:10:3e: 00:fe:fb:91:bd:05:e7:e0:29:b0:ec:e9:7a:da:5c:fe:22:e3: 7d:1b:79:10 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtRF8GNZc7getLnynTKYBP2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxZjc4ZjNlMDA0MTA5MjZkYmQ4OWM4ZThmNWM0MDBiMTAy YjAzNzkwHhcNMjUxMjI0MTYwMTA5WhcNMjUxMjI1MTYwMTA5WjAzMTEwLwYDVQQD EyhiODYwZmEwYmFlZjRiM2QzNGFiNzI4NjUxZGU3MDE4Nzg0ZGIyNjhhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt4vq3xLJMK/BKwgY7IHzSh03UAK7 MK9agjo5gLbkZgUrq4krjFLWYsH9IM3FUSAqWvsi9F5C5UNMX4t1HsD0AdS2ZIEC z3XIKfLtu9Kbgrtx6nJ0K1KTx+hujQZDrfE++DP7oXHiYfvyi96eHbO8teyr8VFH dAfJEXl3Cq28nY/D1qGHwrnqSfPqiIVSfcbaL4s13clo/VKBMY9pIBULtWAoKQMd +NhJHqnqN4u4KXyq2Vt58XgwnYCgSxD+o2Xm6OA77Tas7/7k5SfeK53uniTyK+89 6GVBF7XrDkEZ6nEieskgbIMQbBHv1Bw4jgR1uljaAIgQIJCQ3EnqC0iIiQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLhg+guu9LPTSrcoZR3nAYeE2yaKMB8GA1UdIwQY MBaAFDH3jz4AQQkm29icjo9cQAsQKwN5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTWZlUFBnQkJDU2JiMkp5T2oxeEFDeEFyQTNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi8wNzU2MGEtMDYyYi00ODAyLTg5YWYt MTkxOTJlODFiODMxLzEvTWZlUFBnQkJDU2JiMkp5T2oxeEFDeEFyQTNrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi8wNzU2MGEtMDYyYi00ODAyLTg5YWYtMTkxOTJlODFiODMx LzEvTWZlUFBnQkJDU2JiMkp5T2oxeEFDeEFyQTNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuv6A+MSn LZW5cUmZcyF2V+WlRcfOu155RCPWqUmJhHXLcdBw81pH5GU+ktf6jvuFEJmE+uY3 NhdJbFIeVo4pRTjMMZDPE0pJg8embtYBpuNfTMHm4x+cASWiy9Ycd4flmHXOevvM 0isgeXylDSKWRpSZrIQAm49HT8ENuoWSxXDWtneysXsaVtyp4PMYzWEo9FKOmsd4 iVE1E0/3pUHjqLomJeBVTeGer54DWLpF+MM8wXVTAofSGBOljcUEZLO+OFGnuiiF yIPEPVAIgQmEDdoGY0yEjmpprCmDsoPuFuscyZE7uG4N7RA+AP77kb0F5+ApsOzp etpc/iLjfRt5EA== -----END CERTIFICATE-----Generated at Wed Dec 24 23:52:20 2025 by rpki-client