This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/1cdbb1-e265-44c5-b980-4a566add54b2/1/MxpRr9TLZoLCMN7WQGWMETxWL9I.mft File: MxpRr9TLZoLCMN7WQGWMETxWL9I.mft (raw, json) Hash identifier: bdgt07XlGMYi0G1sXkGjPSrOoWTrsMAieARhgW/4o54= Subject key identifier: 9A:AB:5A:6A:B3:B4:81:15:54:D3:9F:4E:75:F3:71:9A:F9:05:19:9D Authority key identifier: 33:1A:51:AF:D4:CB:66:82:C2:30:DE:D6:40:65:8C:11:3C:56:2F:D2 Certificate issuer: /CN=331a51afd4cb6682c230ded640658c113c562fd2 Certificate serial: 019B5D899CF259E80EF16788E1756194F72C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MxpRr9TLZoLCMN7WQGWMETxWL9I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/1cdbb1-e265-44c5-b980-4a566add54b2/1/MxpRr9TLZoLCMN7WQGWMETxWL9I.mft Manifest number: 09E7 Signing time: Sat 27 Dec 2025 02:00:57 +0000 Manifest this update: Sat 27 Dec 2025 02:00:57 +0000 Manifest next update: Sun 28 Dec 2025 02:00:57 +0000 Files and hashes: 1: MxpRr9TLZoLCMN7WQGWMETxWL9I.crl (hash: b2bMQJV0IR3XYcUA1DbONbaBBn5MQpXdBb2rqaFYOnA=) 2: TS9TQNQnmKCUyfNW3iHSrKN4kHU.roa (hash: FKmub+udVUMJc6SCu1H3/G3fAnw8GwGXkDsFmXaZ8+8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/1cdbb1-e265-44c5-b980-4a566add54b2/1/MxpRr9TLZoLCMN7WQGWMETxWL9I.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/1cdbb1-e265-44c5-b980-4a566add54b2/1/MxpRr9TLZoLCMN7WQGWMETxWL9I.mft rsync://rpki.ripe.net/repository/DEFAULT/MxpRr9TLZoLCMN7WQGWMETxWL9I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5d:89:9c:f2:59:e8:0e:f1:67:88:e1:75:61:94:f7:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=331a51afd4cb6682c230ded640658c113c562fd2 Validity Not Before: Dec 27 02:00:57 2025 GMT Not After : Dec 28 02:00:57 2025 GMT Subject: CN=9aab5a6ab3b4811554d39f4e75f3719af905199d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:54:e7:ba:a3:5c:db:68:bb:8a:6e:84:87:b5: a8:86:20:c5:89:65:d7:b6:6a:ed:37:f3:0d:ba:95: 05:d0:7e:28:2c:33:f3:99:54:71:9d:99:4a:2f:8f: 8a:25:21:fa:f7:05:6f:de:4e:fd:b7:c0:c6:4b:bc: 1a:d0:56:78:05:e4:26:2f:81:7d:99:22:29:c6:8e: 1e:f6:ef:67:06:4e:81:53:68:53:b5:71:e8:0d:49: d9:ab:d9:70:7c:8f:f1:33:6b:3b:15:dc:d9:97:66: 4e:e6:5a:2f:54:b1:8c:fe:c6:d8:36:57:07:d8:09: 7e:68:46:a4:2c:49:20:ad:d9:3c:ef:fe:50:10:5a: 4c:95:07:5a:c6:e2:4b:e3:db:16:ff:e5:60:24:8f: e6:f1:05:d9:bf:a7:90:a6:0b:f3:cb:7a:1b:ea:bd: 16:7b:0d:c7:bb:e7:49:53:59:ec:e8:da:d0:f9:0f: 09:24:55:5b:17:48:df:cb:61:54:59:45:10:ee:2f: 48:a6:f8:04:81:37:2b:3e:fa:01:aa:46:0d:41:77: 77:06:fb:7b:af:ad:78:c6:49:6d:2a:20:10:d5:f8: f2:74:7a:4c:ff:49:e8:57:84:35:c3:5a:7e:b1:cd: 4f:1e:8e:07:4c:e0:6d:4a:5a:c1:70:0c:3b:c7:d6: 42:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:AB:5A:6A:B3:B4:81:15:54:D3:9F:4E:75:F3:71:9A:F9:05:19:9D X509v3 Authority Key Identifier: keyid:33:1A:51:AF:D4:CB:66:82:C2:30:DE:D6:40:65:8C:11:3C:56:2F:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MxpRr9TLZoLCMN7WQGWMETxWL9I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/1cdbb1-e265-44c5-b980-4a566add54b2/1/MxpRr9TLZoLCMN7WQGWMETxWL9I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/1cdbb1-e265-44c5-b980-4a566add54b2/1/MxpRr9TLZoLCMN7WQGWMETxWL9I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:f5:10:f8:01:a7:12:f9:dd:ef:f5:13:6c:f7:34:1c:d6:e2: 3c:29:6a:4d:e6:06:30:35:36:43:8f:fd:05:aa:cd:f5:6d:9a: 50:47:4f:67:32:88:a4:77:8c:6d:ac:76:72:2f:a8:ef:34:a2: e1:bd:fa:74:bd:ff:9f:d4:73:a5:9e:90:37:ba:1f:0f:00:b2: ee:92:4f:80:2f:81:fa:78:f9:8d:e1:0a:86:81:58:b9:7b:f0: 70:da:f0:04:ca:25:e7:a1:85:65:45:1c:ab:0d:6e:ba:f3:16: d0:6e:bb:55:04:bd:7d:bd:58:81:66:c5:23:57:c2:12:ed:32: a2:d8:96:28:a6:8d:dd:e8:eb:79:41:ea:c9:71:92:65:39:e6: 82:ff:ed:20:9c:24:e3:f7:ac:17:14:54:a5:3e:ea:47:78:72: 13:ca:a5:21:3a:98:4a:9f:87:92:7e:fc:ab:38:47:1c:08:28: a6:bd:98:95:77:ea:32:36:65:00:44:52:ca:df:1d:d6:35:18: f1:e4:d0:0e:22:3e:4d:54:8c:cb:62:d1:ed:4a:8d:04:ed:1d: c4:af:27:b5:59:4b:12:79:75:9b:48:ab:b4:82:ae:e0:0f:49: aa:10:89:5c:61:4d:01:cd:18:27:2c:05:0b:84:fa:c4:fb:37: 31:5e:30:02 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtdiZzyWegO8WeI4XVhlPcsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMzMWE1MWFmZDRjYjY2ODJjMjMwZGVkNjQwNjU4YzExM2M1 NjJmZDIwHhcNMjUxMjI3MDIwMDU3WhcNMjUxMjI4MDIwMDU3WjAzMTEwLwYDVQQD Eyg5YWFiNWE2YWIzYjQ4MTE1NTRkMzlmNGU3NWYzNzE5YWY5MDUxOTlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqlTnuqNc22i7im6Eh7WohiDFiWXX tmrtN/MNupUF0H4oLDPzmVRxnZlKL4+KJSH69wVv3k79t8DGS7wa0FZ4BeQmL4F9 mSIpxo4e9u9nBk6BU2hTtXHoDUnZq9lwfI/xM2s7FdzZl2ZO5lovVLGM/sbYNlcH 2Al+aEakLEkgrdk87/5QEFpMlQdaxuJL49sW/+VgJI/m8QXZv6eQpgvzy3ob6r0W ew3Hu+dJU1ns6NrQ+Q8JJFVbF0jfy2FUWUUQ7i9IpvgEgTcrPvoBqkYNQXd3Bvt7 r614xkltKiAQ1fjydHpM/0noV4Q1w1p+sc1PHo4HTOBtSlrBcAw7x9ZCmQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJqrWmqztIEVVNOfTnXzcZr5BRmdMB8GA1UdIwQY MBaAFDMaUa/Uy2aCwjDe1kBljBE8Vi/SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTXhwUnI5VExab0xDTU43V1FHV01FVHhXTDlJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy8xY2RiYjEtZTI2NS00NGM1LWI5ODAt NGE1NjZhZGQ1NGIyLzEvTXhwUnI5VExab0xDTU43V1FHV01FVHhXTDlJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy8xY2RiYjEtZTI2NS00NGM1LWI5ODAtNGE1NjZhZGQ1NGIy LzEvTXhwUnI5VExab0xDTU43V1FHV01FVHhXTDlJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjvUQ+AGn Evnd7/UTbPc0HNbiPClqTeYGMDU2Q4/9BarN9W2aUEdPZzKIpHeMbax2ci+o7zSi 4b36dL3/n9RzpZ6QN7ofDwCy7pJPgC+B+nj5jeEKhoFYuXvwcNrwBMol56GFZUUc qw1uuvMW0G67VQS9fb1YgWbFI1fCEu0yotiWKKaN3ejreUHqyXGSZTnmgv/tIJwk 4/esFxRUpT7qR3hyE8qlITqYSp+Hkn78qzhHHAgopr2YlXfqMjZlAERSyt8d1jUY 8eTQDiI+TVSMy2LR7UqNBO0dxK8ntVlLEnl1m0irtIKu4A9JqhCJXGFNAc0YJywF C4T6xPs3MV4wAg== -----END CERTIFICATE-----Generated at Sat Dec 27 05:39:37 2025 by rpki-client