This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/bcb87f-2c17-4207-962b-98072936c518/1/MAsvRrpXChZ3v9WExygirZ2f5bA.mft File: MAsvRrpXChZ3v9WExygirZ2f5bA.mft (raw, json) Hash identifier: cb6YkWpAPecfMY9xavrxjXH4qchb4hBeGk2LJQ2kNu4= Subject key identifier: BD:6C:4D:79:68:02:26:35:F2:69:BD:79:96:58:B4:0C:EE:C3:2C:E4 Authority key identifier: 30:0B:2F:46:BA:57:0A:16:77:BF:D5:84:C7:28:22:AD:9D:9F:E5:B0 Certificate issuer: /CN=300b2f46ba570a1677bfd584c72822ad9d9fe5b0 Certificate serial: 019B4C5F614390996BD7FC598B66A343EF45 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MAsvRrpXChZ3v9WExygirZ2f5bA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/bcb87f-2c17-4207-962b-98072936c518/1/MAsvRrpXChZ3v9WExygirZ2f5bA.mft Manifest number: 1791 Signing time: Tue 23 Dec 2025 18:01:17 +0000 Manifest this update: Tue 23 Dec 2025 18:01:17 +0000 Manifest next update: Wed 24 Dec 2025 18:01:17 +0000 Files and hashes: 1: 1-OVd2lrgp3V2rXsCVF3GooeWhcE.roa (hash: KipoSrKFnoRi0oHmHkcFIq8GeOt3ELUBmEPs2x8pv/4=) 2: KR7i1VGMfp6wOUHzM68qa6NoxyE.roa (hash: ndyzcu48CDHqz3NgyXeDet5mZyI1DmpInGav6pQo5SI=) 3: MAsvRrpXChZ3v9WExygirZ2f5bA.crl (hash: x2Xsi+2NeFWcjF18jWvaYhxvB7BSH4zenkb0ZOmhJ2s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/bcb87f-2c17-4207-962b-98072936c518/1/MAsvRrpXChZ3v9WExygirZ2f5bA.crl rsync://rpki.ripe.net/repository/DEFAULT/ee/bcb87f-2c17-4207-962b-98072936c518/1/MAsvRrpXChZ3v9WExygirZ2f5bA.mft rsync://rpki.ripe.net/repository/DEFAULT/MAsvRrpXChZ3v9WExygirZ2f5bA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 15:46:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4c:5f:61:43:90:99:6b:d7:fc:59:8b:66:a3:43:ef:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=300b2f46ba570a1677bfd584c72822ad9d9fe5b0 Validity Not Before: Dec 23 18:01:17 2025 GMT Not After : Dec 24 18:01:17 2025 GMT Subject: CN=bd6c4d7968022635f269bd799658b40ceec32ce4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:a7:d8:a5:2d:b6:78:86:1f:0c:60:0e:6b:b1: 0c:d8:1c:8f:ab:2f:6a:21:4a:7e:b0:80:1b:09:53: 6b:5a:d1:33:f3:c7:9e:1a:13:4d:56:ef:71:2d:bc: 15:2c:50:be:02:0a:ab:6e:11:ac:46:30:de:5d:cb: 3a:ae:8a:92:27:6b:98:bc:8d:bc:c4:5e:e3:ea:a7: 42:df:a4:52:b3:31:2b:5f:25:77:09:1c:fb:57:7e: 51:2d:c0:35:4e:c5:69:3c:d0:28:eb:d0:83:32:0a: a5:f2:a9:2c:0e:46:45:28:56:88:2e:cb:8b:74:ff: f0:2a:b7:8b:9f:f6:a4:f4:d5:76:3d:43:d8:40:24: ff:82:44:4e:7e:d0:6f:c9:1e:26:d9:f1:93:2b:6f: 2d:d5:c2:97:fd:ef:97:52:f7:f1:dd:ff:ca:87:b1: 92:a1:5c:6a:7d:aa:ef:5f:7f:ec:15:2a:e0:2f:5b: 20:3b:fb:e4:10:18:15:c6:a2:24:fe:20:eb:e0:45: 56:bb:57:c2:64:c3:dc:d7:b3:9c:7d:c8:75:73:58: 4f:6c:84:34:55:06:b6:9b:f1:d7:4f:ff:09:c9:21: 3a:4e:24:6f:4d:52:30:c9:12:a8:d2:24:f3:52:fd: dc:59:5f:de:0e:ee:21:66:51:a8:01:29:25:7c:f8: 17:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:6C:4D:79:68:02:26:35:F2:69:BD:79:96:58:B4:0C:EE:C3:2C:E4 X509v3 Authority Key Identifier: keyid:30:0B:2F:46:BA:57:0A:16:77:BF:D5:84:C7:28:22:AD:9D:9F:E5:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MAsvRrpXChZ3v9WExygirZ2f5bA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/bcb87f-2c17-4207-962b-98072936c518/1/MAsvRrpXChZ3v9WExygirZ2f5bA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/bcb87f-2c17-4207-962b-98072936c518/1/MAsvRrpXChZ3v9WExygirZ2f5bA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:bd:03:2b:99:e6:4e:c8:c6:8f:ea:84:25:61:ed:49:7e:9e: bc:e3:11:71:ae:b8:1c:71:dc:bb:94:f1:f8:be:7a:c9:17:c8: c3:19:4c:bb:ad:f1:26:d4:e8:a3:c8:65:3f:a7:21:7c:30:eb: 9d:05:c4:f8:ce:f1:d7:ca:ec:bd:b7:54:a9:fd:49:3a:ce:3b: 61:39:2a:cf:d1:7b:36:c5:b9:71:29:9f:f6:bc:30:82:b8:80: 1c:09:44:ef:bb:ab:69:b1:b9:56:bd:a4:8c:5f:c2:f3:8f:5a: 92:54:16:87:ae:27:cb:6b:36:46:28:39:78:c7:8c:94:3f:1c: f9:18:d9:72:38:c5:a6:6a:fd:eb:6f:83:47:f6:7c:dd:57:1c: de:0e:d2:77:a3:d7:5b:99:9f:66:6b:ee:75:6f:93:e8:6d:ad: d1:d6:3e:44:04:66:a3:ca:31:ea:ed:36:e5:84:25:d7:ce:69: 17:67:fb:a8:62:e4:1f:66:98:e3:24:f0:58:de:89:32:c6:d6: 82:84:b6:8b:30:5e:4e:ad:67:1a:b0:92:ee:73:f8:23:6f:48: 06:fc:93:04:d3:d2:d6:91:75:dd:02:a0:0f:84:5f:05:b8:28: 49:5b:df:06:59:0c:81:c1:04:c5:07:9e:bb:06:cb:32:3e:ae: 43:98:3f:cc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtMX2FDkJlr1/xZi2ajQ+9FMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwMGIyZjQ2YmE1NzBhMTY3N2JmZDU4NGM3MjgyMmFkOWQ5 ZmU1YjAwHhcNMjUxMjIzMTgwMTE3WhcNMjUxMjI0MTgwMTE3WjAzMTEwLwYDVQQD EyhiZDZjNGQ3OTY4MDIyNjM1ZjI2OWJkNzk5NjU4YjQwY2VlYzMyY2U0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr6fYpS22eIYfDGAOa7EM2ByPqy9q IUp+sIAbCVNrWtEz88eeGhNNVu9xLbwVLFC+AgqrbhGsRjDeXcs6roqSJ2uYvI28 xF7j6qdC36RSszErXyV3CRz7V35RLcA1TsVpPNAo69CDMgql8qksDkZFKFaILsuL dP/wKreLn/ak9NV2PUPYQCT/gkROftBvyR4m2fGTK28t1cKX/e+XUvfx3f/Kh7GS oVxqfarvX3/sFSrgL1sgO/vkEBgVxqIk/iDr4EVWu1fCZMPc17Ocfch1c1hPbIQ0 VQa2m/HXT/8JySE6TiRvTVIwyRKo0iTzUv3cWV/eDu4hZlGoASklfPgXIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL1sTXloAiY18mm9eZZYtAzuwyzkMB8GA1UdIwQY MBaAFDALL0a6VwoWd7/VhMcoIq2dn+WwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTUFzdlJycFhDaFozdjlXRXh5Z2lyWjJmNWJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS9iY2I4N2YtMmMxNy00MjA3LTk2MmIt OTgwNzI5MzZjNTE4LzEvTUFzdlJycFhDaFozdjlXRXh5Z2lyWjJmNWJBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZS9iY2I4N2YtMmMxNy00MjA3LTk2MmItOTgwNzI5MzZjNTE4 LzEvTUFzdlJycFhDaFozdjlXRXh5Z2lyWjJmNWJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADr0DK5nm TsjGj+qEJWHtSX6evOMRca64HHHcu5Tx+L56yRfIwxlMu63xJtToo8hlP6chfDDr nQXE+M7x18rsvbdUqf1JOs47YTkqz9F7NsW5cSmf9rwwgriAHAlE77urabG5Vr2k jF/C849aklQWh64ny2s2Rig5eMeMlD8c+RjZcjjFpmr962+DR/Z83Vcc3g7Sd6PX W5mfZmvudW+T6G2t0dY+RARmo8ox6u025YQl185pF2f7qGLkH2aY4yTwWN6JMsbW goS2izBeTq1nGrCS7nP4I29IBvyTBNPS1pF13QKgD4RfBbgoSVvfBlkMgcEExQee uwbLMj6uQ5g/zA== -----END CERTIFICATE-----Generated at Tue Dec 23 20:25:44 2025 by rpki-client