This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/de4740-d34e-42a7-8968-464b8f3b8363/1/MXqSdCYInzuMUACDIhp5ip0uhGY.mft File: MXqSdCYInzuMUACDIhp5ip0uhGY.mft (raw, json) Hash identifier: wlhO+JTvbqhy1mDjo4cC09LkLQwXAMuvKzsJoGRuA5o= Subject key identifier: 1F:D1:FB:B1:B7:E4:D2:2A:01:CF:6B:E2:60:0F:D5:C1:0B:53:A8:69 Authority key identifier: 31:7A:92:74:26:08:9F:3B:8C:50:00:83:22:1A:79:8A:9D:2E:84:66 Certificate issuer: /CN=317a927426089f3b8c500083221a798a9d2e8466 Certificate serial: 019B3CEBC198B9AE4852B41154CAC99BB84A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MXqSdCYInzuMUACDIhp5ip0uhGY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/de4740-d34e-42a7-8968-464b8f3b8363/1/MXqSdCYInzuMUACDIhp5ip0uhGY.mft Manifest number: 14B2 Signing time: Sat 20 Dec 2025 18:00:41 +0000 Manifest this update: Sat 20 Dec 2025 18:00:41 +0000 Manifest next update: Sun 21 Dec 2025 18:00:41 +0000 Files and hashes: 1: 9eN9v_hmY4BXhqwgwPbmdRtwaxg.roa (hash: /I1wfagsAtpLvGcRUkgr5rbaITh/yY12WpQcMZ73aQ0=) 2: MXqSdCYInzuMUACDIhp5ip0uhGY.crl (hash: RyIXXkRWTcO+JIWePS/aEfZBrn+MLofFlb9U4TAqd0A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/de4740-d34e-42a7-8968-464b8f3b8363/1/MXqSdCYInzuMUACDIhp5ip0uhGY.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/de4740-d34e-42a7-8968-464b8f3b8363/1/MXqSdCYInzuMUACDIhp5ip0uhGY.mft rsync://rpki.ripe.net/repository/DEFAULT/MXqSdCYInzuMUACDIhp5ip0uhGY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:eb:c1:98:b9:ae:48:52:b4:11:54:ca:c9:9b:b8:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=317a927426089f3b8c500083221a798a9d2e8466 Validity Not Before: Dec 20 18:00:41 2025 GMT Not After : Dec 21 18:00:41 2025 GMT Subject: CN=1fd1fbb1b7e4d22a01cf6be2600fd5c10b53a869 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:e0:34:19:33:06:08:2e:f8:a9:28:e1:23:59: 8a:fa:45:5b:13:76:ec:5d:3d:6f:0c:7a:29:6a:45: 6e:66:e7:a8:15:ec:a1:1f:19:c2:11:12:30:51:59: 4b:ab:09:d7:9a:d9:ca:86:16:1c:b6:c4:f8:4f:62: 07:b8:dd:58:60:2d:8a:d8:e0:0d:a4:85:be:25:cd: 9b:f7:1d:60:c3:77:29:70:bf:09:0d:ad:2c:ee:36: 94:ff:35:e0:f5:78:99:e8:f5:47:8e:8e:97:f8:6f: 18:c4:e8:4d:e9:5f:35:53:d8:b1:c8:d1:b8:88:ba: d1:f8:f1:64:5f:f2:d6:eb:f5:17:6f:a7:0a:ca:75: 57:6c:4b:d7:e5:c5:66:d6:e8:b5:aa:09:6e:a5:6a: a3:83:5f:44:13:06:43:4c:95:bd:71:59:a7:6a:e5: ad:bb:a8:8f:79:b9:81:ca:2d:36:12:f1:ff:e3:40: 75:78:b6:34:bb:ba:b8:1b:bb:8f:2b:8a:77:82:0b: 0c:61:2a:97:8c:64:84:a4:f1:0e:61:df:1e:e6:7f: d5:9b:db:e5:3d:e8:ca:a6:62:c8:f4:7e:67:91:de: c0:d2:e8:82:fb:fa:cb:09:26:29:36:ea:66:2e:5e: 20:d5:25:10:3a:b3:dd:fc:b0:e9:02:af:ba:aa:40: 38:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:D1:FB:B1:B7:E4:D2:2A:01:CF:6B:E2:60:0F:D5:C1:0B:53:A8:69 X509v3 Authority Key Identifier: keyid:31:7A:92:74:26:08:9F:3B:8C:50:00:83:22:1A:79:8A:9D:2E:84:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MXqSdCYInzuMUACDIhp5ip0uhGY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/de4740-d34e-42a7-8968-464b8f3b8363/1/MXqSdCYInzuMUACDIhp5ip0uhGY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/de4740-d34e-42a7-8968-464b8f3b8363/1/MXqSdCYInzuMUACDIhp5ip0uhGY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:3d:22:df:0a:35:8b:22:ea:03:c4:eb:84:a7:fc:ab:b5:2b: d8:dc:9e:6c:df:26:40:80:8b:e2:ce:48:f5:d4:e0:c2:9c:09: e5:8a:dc:07:7c:42:84:6b:41:9f:1d:25:3c:96:2b:04:ea:f2: e7:35:30:f2:87:a5:0b:be:32:2b:c5:01:76:ed:91:48:8b:c6: ce:8c:7e:02:ee:6b:f4:29:3e:b2:d5:2c:d8:42:6e:28:69:59: f9:f3:a4:ea:7c:74:9f:b7:2d:c2:b8:aa:8b:aa:fa:16:ce:f1: 75:a5:34:cd:a9:7b:30:5c:97:80:dc:20:10:ba:a0:e7:e2:dd: fd:21:02:62:7c:3e:ab:93:a2:ce:1a:0c:59:72:96:f5:a8:86: 11:5b:94:78:da:b7:38:bd:6a:b1:09:e3:90:84:b8:a4:0b:90: 8c:eb:70:3f:8d:55:ac:bb:e5:d8:d7:89:18:2e:cc:82:c9:10: d8:fb:a3:7e:0b:82:26:d2:fd:dc:6b:51:d5:67:9c:78:60:a1: 88:95:29:a8:98:5e:ff:77:2e:a6:11:c2:d4:9a:12:a5:b0:21: 94:aa:08:f9:bd:03:a0:72:58:0e:73:83:f7:cf:31:d1:c4:85: a8:1c:27:08:a1:49:c7:b5:cf:be:fb:dd:a4:b9:6a:7d:4a:36: 10:97:d2:c8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs868GYua5IUrQRVMrJm7hKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxN2E5Mjc0MjYwODlmM2I4YzUwMDA4MzIyMWE3OThhOWQy ZTg0NjYwHhcNMjUxMjIwMTgwMDQxWhcNMjUxMjIxMTgwMDQxWjAzMTEwLwYDVQQD EygxZmQxZmJiMWI3ZTRkMjJhMDFjZjZiZTI2MDBmZDVjMTBiNTNhODY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApuA0GTMGCC74qSjhI1mK+kVbE3bs XT1vDHopakVuZueoFeyhHxnCERIwUVlLqwnXmtnKhhYctsT4T2IHuN1YYC2K2OAN pIW+Jc2b9x1gw3cpcL8JDa0s7jaU/zXg9XiZ6PVHjo6X+G8YxOhN6V81U9ixyNG4 iLrR+PFkX/LW6/UXb6cKynVXbEvX5cVm1ui1qglupWqjg19EEwZDTJW9cVmnauWt u6iPebmByi02EvH/40B1eLY0u7q4G7uPK4p3ggsMYSqXjGSEpPEOYd8e5n/Vm9vl PejKpmLI9H5nkd7A0uiC+/rLCSYpNupmLl4g1SUQOrPd/LDpAq+6qkA4xQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB/R+7G35NIqAc9r4mAP1cELU6hpMB8GA1UdIwQY MBaAFDF6knQmCJ87jFAAgyIaeYqdLoRmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTVhxU2RDWUluenVNVUFDRElocDVpcDB1aEdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9kZTQ3NDAtZDM0ZS00MmE3LTg5Njgt NDY0YjhmM2I4MzYzLzEvTVhxU2RDWUluenVNVUFDRElocDVpcDB1aEdZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi9kZTQ3NDAtZDM0ZS00MmE3LTg5NjgtNDY0YjhmM2I4MzYz LzEvTVhxU2RDWUluenVNVUFDRElocDVpcDB1aEdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlj0i3wo1 iyLqA8TrhKf8q7Ur2NyebN8mQICL4s5I9dTgwpwJ5YrcB3xChGtBnx0lPJYrBOry 5zUw8oelC74yK8UBdu2RSIvGzox+Au5r9Ck+stUs2EJuKGlZ+fOk6nx0n7ctwriq i6r6Fs7xdaU0zal7MFyXgNwgELqg5+Ld/SECYnw+q5OizhoMWXKW9aiGEVuUeNq3 OL1qsQnjkIS4pAuQjOtwP41VrLvl2NeJGC7MgskQ2PujfguCJtL93GtR1WeceGCh iJUpqJhe/3cuphHC1JoSpbAhlKoI+b0DoHJYDnOD988x0cSFqBwnCKFJx7XPvvvd pLlqfUo2EJfSyA== -----END CERTIFICATE-----Generated at Sat Dec 20 19:47:35 2025 by rpki-client