This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/bcb87f-2c17-4207-962b-98072936c518/1/MAsvRrpXChZ3v9WExygirZ2f5bA.mft File: MAsvRrpXChZ3v9WExygirZ2f5bA.mft (raw, json) Hash identifier: iDyxXBRJGljnaFp8jx/ReTaP1OfkgkRgnrldkkr0c0w= Subject key identifier: B2:2E:1B:5F:05:DC:7A:A0:81:96:A0:C7:FF:85:BA:69:D3:91:FD:04 Authority key identifier: 30:0B:2F:46:BA:57:0A:16:77:BF:D5:84:C7:28:22:AD:9D:9F:E5:B0 Certificate issuer: /CN=300b2f46ba570a1677bfd584c72822ad9d9fe5b0 Certificate serial: 019B372184BC1ED3516E4A0B3F9AE79C10AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MAsvRrpXChZ3v9WExygirZ2f5bA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/bcb87f-2c17-4207-962b-98072936c518/1/MAsvRrpXChZ3v9WExygirZ2f5bA.mft Manifest number: 1786 Signing time: Fri 19 Dec 2025 15:01:41 +0000 Manifest this update: Fri 19 Dec 2025 15:01:41 +0000 Manifest next update: Sat 20 Dec 2025 15:01:41 +0000 Files and hashes: 1: 1-OVd2lrgp3V2rXsCVF3GooeWhcE.roa (hash: KipoSrKFnoRi0oHmHkcFIq8GeOt3ELUBmEPs2x8pv/4=) 2: KR7i1VGMfp6wOUHzM68qa6NoxyE.roa (hash: ndyzcu48CDHqz3NgyXeDet5mZyI1DmpInGav6pQo5SI=) 3: MAsvRrpXChZ3v9WExygirZ2f5bA.crl (hash: gYeC/V0GmLg6k2YSzWIqFvXleUnS8scutRAn+qvnpVw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/bcb87f-2c17-4207-962b-98072936c518/1/MAsvRrpXChZ3v9WExygirZ2f5bA.crl rsync://rpki.ripe.net/repository/DEFAULT/ee/bcb87f-2c17-4207-962b-98072936c518/1/MAsvRrpXChZ3v9WExygirZ2f5bA.mft rsync://rpki.ripe.net/repository/DEFAULT/MAsvRrpXChZ3v9WExygirZ2f5bA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 15:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:21:84:bc:1e:d3:51:6e:4a:0b:3f:9a:e7:9c:10:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=300b2f46ba570a1677bfd584c72822ad9d9fe5b0 Validity Not Before: Dec 19 15:01:41 2025 GMT Not After : Dec 20 15:01:41 2025 GMT Subject: CN=b22e1b5f05dc7aa08196a0c7ff85ba69d391fd04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:2c:ec:65:f3:f0:ab:58:f9:b8:9c:0d:f3:69: 53:68:d4:11:e4:4e:6f:a4:94:f9:2e:4a:e6:e9:a2: 10:ab:f4:4a:04:f3:05:ca:b6:c7:bf:10:ad:8d:91: 4f:2e:43:79:c5:f3:47:8a:06:cf:f3:3b:1d:cf:d5: 4a:e6:27:5e:07:e8:72:63:fc:35:3f:50:59:ca:da: 32:2f:71:a3:af:76:3c:e1:05:4b:de:b5:b3:5a:fd: 3c:d4:25:6f:99:04:71:b2:ae:93:82:d9:eb:01:2f: 39:2c:ee:af:60:be:7b:9c:f9:64:97:42:49:89:6c: 05:29:46:25:19:c0:5a:60:b4:16:d3:22:b3:bd:e6: 95:80:27:67:af:0e:99:1f:c7:34:d3:6e:53:b4:ca: 11:e5:9f:4f:94:09:9b:75:6e:13:d9:fa:b1:51:60: 57:6a:14:5f:70:9d:13:6f:d3:c2:27:fc:e6:12:f7: 80:d4:53:39:0f:fb:7c:e4:10:25:58:82:7a:71:e0: e2:fb:f6:c4:99:56:44:78:0b:08:6f:ee:10:fe:87: f4:44:35:ea:ea:a3:5f:8c:26:11:f8:6d:83:4a:4c: d8:7a:7a:3f:eb:95:6c:f6:d0:bc:90:62:bf:31:a8: 70:00:a1:d6:97:8a:81:8d:6d:77:93:9a:ae:e2:93: 49:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:2E:1B:5F:05:DC:7A:A0:81:96:A0:C7:FF:85:BA:69:D3:91:FD:04 X509v3 Authority Key Identifier: keyid:30:0B:2F:46:BA:57:0A:16:77:BF:D5:84:C7:28:22:AD:9D:9F:E5:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MAsvRrpXChZ3v9WExygirZ2f5bA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/bcb87f-2c17-4207-962b-98072936c518/1/MAsvRrpXChZ3v9WExygirZ2f5bA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/bcb87f-2c17-4207-962b-98072936c518/1/MAsvRrpXChZ3v9WExygirZ2f5bA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:22:62:9c:41:d7:68:b3:eb:e1:5a:25:e1:7d:69:2b:e4:80: 3d:a3:8e:8e:f4:c2:39:ce:6d:d1:69:6b:fc:a4:0c:54:18:e8: 2f:5d:3a:f1:ae:35:96:aa:55:09:ce:ad:63:f6:40:e4:41:c0: c1:b8:cb:90:3a:79:3a:1e:e5:af:c2:10:c7:16:ab:d2:f6:6f: b3:ff:73:63:20:9a:e7:45:49:3c:1f:4c:a6:1d:f4:7e:86:e9: 25:eb:23:0a:63:65:bb:35:9f:ef:3b:f9:fa:5c:50:3a:30:5c: 09:67:89:a0:03:a7:02:b5:b9:54:2d:f8:84:b6:e7:8d:6c:df: 02:0d:c6:d1:34:17:d2:65:90:10:1a:03:3c:5b:94:0b:79:34: af:0f:8e:97:e5:02:d8:96:c4:68:7d:67:d0:25:61:f5:81:ce: 38:28:eb:06:33:4d:aa:1f:e3:32:4d:4b:76:71:33:cd:dc:b4: da:ac:e6:7c:6a:82:e7:96:2b:66:23:25:8d:29:e6:98:ee:61: 2a:0f:ca:dc:13:0c:2b:cf:d0:c8:31:17:ba:0c:3a:07:50:eb: a7:b5:2d:67:d5:71:d1:64:ca:b0:e4:ce:0c:90:36:22:ed:16: 6c:2c:b5:ae:ed:64:d7:09:5e:9c:1b:4a:6a:87:57:73:98:86: 3b:43:17:43 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3IYS8HtNRbkoLP5rnnBCqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwMGIyZjQ2YmE1NzBhMTY3N2JmZDU4NGM3MjgyMmFkOWQ5 ZmU1YjAwHhcNMjUxMjE5MTUwMTQxWhcNMjUxMjIwMTUwMTQxWjAzMTEwLwYDVQQD EyhiMjJlMWI1ZjA1ZGM3YWEwODE5NmEwYzdmZjg1YmE2OWQzOTFmZDA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlizsZfPwq1j5uJwN82lTaNQR5E5v pJT5Lkrm6aIQq/RKBPMFyrbHvxCtjZFPLkN5xfNHigbP8zsdz9VK5ideB+hyY/w1 P1BZytoyL3Gjr3Y84QVL3rWzWv081CVvmQRxsq6TgtnrAS85LO6vYL57nPlkl0JJ iWwFKUYlGcBaYLQW0yKzveaVgCdnrw6ZH8c0025TtMoR5Z9PlAmbdW4T2fqxUWBX ahRfcJ0Tb9PCJ/zmEveA1FM5D/t85BAlWIJ6ceDi+/bEmVZEeAsIb+4Q/of0RDXq 6qNfjCYR+G2DSkzYeno/65Vs9tC8kGK/MahwAKHWl4qBjW13k5qu4pNJ0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLIuG18F3HqggZagx/+FumnTkf0EMB8GA1UdIwQY MBaAFDALL0a6VwoWd7/VhMcoIq2dn+WwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTUFzdlJycFhDaFozdjlXRXh5Z2lyWjJmNWJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS9iY2I4N2YtMmMxNy00MjA3LTk2MmIt OTgwNzI5MzZjNTE4LzEvTUFzdlJycFhDaFozdjlXRXh5Z2lyWjJmNWJBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZS9iY2I4N2YtMmMxNy00MjA3LTk2MmItOTgwNzI5MzZjNTE4 LzEvTUFzdlJycFhDaFozdjlXRXh5Z2lyWjJmNWJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjiJinEHX aLPr4Vol4X1pK+SAPaOOjvTCOc5t0Wlr/KQMVBjoL1068a41lqpVCc6tY/ZA5EHA wbjLkDp5Oh7lr8IQxxar0vZvs/9zYyCa50VJPB9Mph30fobpJesjCmNluzWf7zv5 +lxQOjBcCWeJoAOnArW5VC34hLbnjWzfAg3G0TQX0mWQEBoDPFuUC3k0rw+Ol+UC 2JbEaH1n0CVh9YHOOCjrBjNNqh/jMk1LdnEzzdy02qzmfGqC55YrZiMljSnmmO5h Kg/K3BMMK8/QyDEXugw6B1Drp7UtZ9Vx0WTKsOTODJA2Iu0WbCy1ru1k1wlenBtK aodXc5iGO0MXQw== -----END CERTIFICATE-----Generated at Fri Dec 19 18:48:53 2025 by rpki-client