This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/c934da-978a-46f9-87a7-4f219db78508/1/MDeJJY5gnz5VjXezv9CKzzUV-pI.mft File: MDeJJY5gnz5VjXezv9CKzzUV-pI.mft (raw, json) Hash identifier: A2IYhopAXeVIRx/xFC91BanaIwCY7sq9cF4+M8zTWn4= Subject key identifier: 6B:54:A5:2C:CE:39:0D:AD:9D:BD:E7:43:4E:F7:3D:81:B2:BC:D5:03 Authority key identifier: 30:37:89:25:8E:60:9F:3E:55:8D:77:B3:BF:D0:8A:CF:35:15:FA:92 Certificate issuer: /CN=303789258e609f3e558d77b3bfd08acf3515fa92 Certificate serial: 019B4BF2B2213EBAD1DB58E39E7797472CAB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MDeJJY5gnz5VjXezv9CKzzUV-pI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/c934da-978a-46f9-87a7-4f219db78508/1/MDeJJY5gnz5VjXezv9CKzzUV-pI.mft Manifest number: 116A Signing time: Tue 23 Dec 2025 16:02:34 +0000 Manifest this update: Tue 23 Dec 2025 16:02:34 +0000 Manifest next update: Wed 24 Dec 2025 16:02:34 +0000 Files and hashes: 1: CxgP4WGmDc-j3ZUPD_Rcb4uV8ns.roa (hash: XodVBcVXpLoQd1C4J0bRPfMq7vIVpbrh7r32+gpZkVk=) 2: MDeJJY5gnz5VjXezv9CKzzUV-pI.crl (hash: mXQZbPt0JXVzni0dlBsbYbkfbtCwWsg45jGxIhQt0/o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/c934da-978a-46f9-87a7-4f219db78508/1/MDeJJY5gnz5VjXezv9CKzzUV-pI.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/c934da-978a-46f9-87a7-4f219db78508/1/MDeJJY5gnz5VjXezv9CKzzUV-pI.mft rsync://rpki.ripe.net/repository/DEFAULT/MDeJJY5gnz5VjXezv9CKzzUV-pI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 15:46:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4b:f2:b2:21:3e:ba:d1:db:58:e3:9e:77:97:47:2c:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=303789258e609f3e558d77b3bfd08acf3515fa92 Validity Not Before: Dec 23 16:02:34 2025 GMT Not After : Dec 24 16:02:34 2025 GMT Subject: CN=6b54a52cce390dad9dbde7434ef73d81b2bcd503 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:c8:af:d3:e9:56:8d:8b:9a:1b:6a:28:7c:00: d0:c5:74:9e:a3:6b:1c:91:c0:33:2a:cb:44:d2:36: a0:be:64:46:f0:a7:b8:4c:89:b5:3a:4e:52:64:a4: 68:71:28:7c:9f:a5:3c:8d:0a:3c:80:b3:89:0e:c1: 3e:9a:5f:b5:7d:f8:71:06:37:1e:2f:40:f0:ba:fc: 10:d2:ac:4b:ca:e8:60:f4:83:5e:b2:5c:7d:e7:60: bb:8c:fd:21:42:c9:c1:66:95:0f:5c:0b:a7:ea:a0: bb:43:02:6f:11:9d:1b:ae:0b:9e:da:82:f4:f1:d0: 7b:24:4e:c1:c9:4e:ab:f9:8f:b5:b4:48:d5:14:bd: ff:7c:2f:c2:aa:d7:bb:9b:46:b0:57:53:09:9a:bb: e1:28:8b:31:3a:4c:24:c2:bc:e6:e6:6a:39:27:95: dd:a9:5a:a8:83:6e:ff:4a:2a:11:be:2d:63:0e:a9: e0:e3:e8:f3:50:6a:9b:1c:df:52:8e:9d:0e:37:09: 4e:ef:57:68:ec:77:91:f4:e1:0f:8e:3d:27:06:13: 6e:79:25:4d:fb:dd:df:73:00:47:8e:33:8c:a7:d6: 98:8b:66:04:10:ca:1c:a8:ae:9d:14:80:f0:13:e1: 96:a9:c9:6b:72:61:ff:a3:97:8a:f5:2d:c7:5b:b4: ee:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:54:A5:2C:CE:39:0D:AD:9D:BD:E7:43:4E:F7:3D:81:B2:BC:D5:03 X509v3 Authority Key Identifier: keyid:30:37:89:25:8E:60:9F:3E:55:8D:77:B3:BF:D0:8A:CF:35:15:FA:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MDeJJY5gnz5VjXezv9CKzzUV-pI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/c934da-978a-46f9-87a7-4f219db78508/1/MDeJJY5gnz5VjXezv9CKzzUV-pI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/c934da-978a-46f9-87a7-4f219db78508/1/MDeJJY5gnz5VjXezv9CKzzUV-pI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:5e:8f:be:c0:0c:f4:08:a2:2f:83:ba:e3:db:eb:07:00:c7: d3:18:f5:b5:89:d3:18:e5:34:4f:14:aa:d0:35:e2:db:8c:07: c3:9d:f1:84:f6:dd:91:46:db:db:68:b5:a3:6f:4b:58:45:06: 8c:50:ce:37:c4:4a:63:a3:51:5e:55:c0:ac:0d:f7:59:dd:8d: 71:fa:6d:24:ac:09:8e:fd:00:6f:93:ae:ae:39:0e:31:5b:94: 86:e9:80:12:ee:8b:fc:c6:05:8d:7f:ac:c6:7e:62:48:eb:26: 62:eb:00:27:6c:32:2b:67:b9:09:a2:db:ce:43:c0:fc:9a:5c: 31:f7:18:cd:f5:4e:0f:fd:cd:fd:2a:a3:8b:8d:57:ad:fc:dc: 78:a0:45:8d:d2:5e:a1:88:a2:43:d6:c6:38:b0:0c:15:8f:d9: 8f:af:b6:58:7b:2d:14:87:14:0b:ce:79:ab:56:13:b6:42:79: 3f:2f:39:f5:a0:90:12:e4:ab:eb:0d:5f:04:32:0d:4e:59:0b: 68:a3:db:1e:bf:ee:6d:af:86:c8:e7:8d:54:63:ea:f0:3f:da: 3c:66:64:70:06:3a:50:5e:29:c1:f4:d3:4b:8f:bd:fa:f4:10: 70:12:b6:ce:a8:48:b8:87:57:e6:7e:da:ee:2c:9d:d3:5b:80: 48:65:9e:0c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtL8rIhPrrR21jjnneXRyyrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwMzc4OTI1OGU2MDlmM2U1NThkNzdiM2JmZDA4YWNmMzUx NWZhOTIwHhcNMjUxMjIzMTYwMjM0WhcNMjUxMjI0MTYwMjM0WjAzMTEwLwYDVQQD Eyg2YjU0YTUyY2NlMzkwZGFkOWRiZGU3NDM0ZWY3M2Q4MWIyYmNkNTAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmsiv0+lWjYuaG2oofADQxXSeo2sc kcAzKstE0jagvmRG8Ke4TIm1Ok5SZKRocSh8n6U8jQo8gLOJDsE+ml+1ffhxBjce L0DwuvwQ0qxLyuhg9INeslx952C7jP0hQsnBZpUPXAun6qC7QwJvEZ0brgue2oL0 8dB7JE7ByU6r+Y+1tEjVFL3/fC/Cqte7m0awV1MJmrvhKIsxOkwkwrzm5mo5J5Xd qVqog27/SioRvi1jDqng4+jzUGqbHN9Sjp0ONwlO71do7HeR9OEPjj0nBhNueSVN +93fcwBHjjOMp9aYi2YEEMocqK6dFIDwE+GWqclrcmH/o5eK9S3HW7TuBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGtUpSzOOQ2tnb3nQ073PYGyvNUDMB8GA1UdIwQY MBaAFDA3iSWOYJ8+VY13s7/Qis81FfqSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTURlSkpZNWduejVWalhlenY5Q0t6elVWLXBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9jOTM0ZGEtOTc4YS00NmY5LTg3YTct NGYyMTlkYjc4NTA4LzEvTURlSkpZNWduejVWalhlenY5Q0t6elVWLXBJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi9jOTM0ZGEtOTc4YS00NmY5LTg3YTctNGYyMTlkYjc4NTA4 LzEvTURlSkpZNWduejVWalhlenY5Q0t6elVWLXBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsF6PvsAM 9AiiL4O649vrBwDH0xj1tYnTGOU0TxSq0DXi24wHw53xhPbdkUbb22i1o29LWEUG jFDON8RKY6NRXlXArA33Wd2NcfptJKwJjv0Ab5OurjkOMVuUhumAEu6L/MYFjX+s xn5iSOsmYusAJ2wyK2e5CaLbzkPA/JpcMfcYzfVOD/3N/Sqji41XrfzceKBFjdJe oYiiQ9bGOLAMFY/Zj6+2WHstFIcUC855q1YTtkJ5Py859aCQEuSr6w1fBDINTlkL aKPbHr/uba+GyOeNVGPq8D/aPGZkcAY6UF4pwfTTS4+9+vQQcBK2zqhIuIdX5n7a 7iyd01uASGWeDA== -----END CERTIFICATE-----Generated at Wed Dec 24 00:15:06 2025 by rpki-client