This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/c0ea88-7592-4e84-9a9a-4335670f6b7e/1/mta_Eq1aKTJ7xve2YCbwVGhs2Vk.mft File: mta_Eq1aKTJ7xve2YCbwVGhs2Vk.mft (raw, json) Hash identifier: 3rnAigKV5ZFL75Fw0L7Q3oPw6fgr7cyT8/JmdLGYYZM= Subject key identifier: 20:42:76:2E:4C:0C:5F:4A:A9:28:EB:F6:2C:97:69:9C:5F:AF:8D:0A Authority key identifier: 9A:D6:BF:12:AD:5A:29:32:7B:C6:F7:B6:60:26:F0:54:68:6C:D9:59 Certificate issuer: /CN=9ad6bf12ad5a29327bc6f7b66026f054686cd959 Certificate serial: 019B3C7ECBCF3DC16220962E0A50071DFB00 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mta_Eq1aKTJ7xve2YCbwVGhs2Vk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/c0ea88-7592-4e84-9a9a-4335670f6b7e/1/mta_Eq1aKTJ7xve2YCbwVGhs2Vk.mft Manifest number: 0D9B Signing time: Sat 20 Dec 2025 16:01:41 +0000 Manifest this update: Sat 20 Dec 2025 16:01:41 +0000 Manifest next update: Sun 21 Dec 2025 16:01:41 +0000 Files and hashes: 1: 2SOKJdtN9bMMMVnN7XnVjTb3ui0.roa (hash: 72GA0BgMQTTnlKlYqdGi0oxjId4FdqmjlR9jbXjscag=) 2: mta_Eq1aKTJ7xve2YCbwVGhs2Vk.crl (hash: zE1S0fo8KU7gIBLjlI7zM1je493H7RynsOdUpmGIVrc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/c0ea88-7592-4e84-9a9a-4335670f6b7e/1/mta_Eq1aKTJ7xve2YCbwVGhs2Vk.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/c0ea88-7592-4e84-9a9a-4335670f6b7e/1/mta_Eq1aKTJ7xve2YCbwVGhs2Vk.mft rsync://rpki.ripe.net/repository/DEFAULT/mta_Eq1aKTJ7xve2YCbwVGhs2Vk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7e:cb:cf:3d:c1:62:20:96:2e:0a:50:07:1d:fb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ad6bf12ad5a29327bc6f7b66026f054686cd959 Validity Not Before: Dec 20 16:01:41 2025 GMT Not After : Dec 21 16:01:41 2025 GMT Subject: CN=2042762e4c0c5f4aa928ebf62c97699c5faf8d0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:fe:e8:f9:92:6f:16:d0:f1:10:87:ce:31:79: e9:bc:dc:3c:0a:cf:f4:17:78:97:72:56:95:a3:61: d9:75:db:55:bb:df:fd:43:70:08:9c:72:aa:ac:47: 6f:d0:ae:c6:7c:0f:b9:a2:a8:cb:1f:c3:87:fa:19: 50:33:33:e9:d0:39:43:35:52:77:1c:2a:f9:d9:ee: b6:8f:d9:47:93:d6:c2:86:de:c4:fd:9a:f1:ed:54: 9a:c2:6b:b2:5c:44:a5:12:f1:48:dc:35:59:06:ab: d0:d7:3d:6a:02:fe:6e:9c:5a:e2:dc:1d:33:a1:3b: fb:65:fb:3a:90:a0:21:30:a3:99:ba:16:b9:ca:96: 91:8f:b0:7a:79:56:6c:f8:3c:01:99:4d:4b:1e:35: dc:7c:de:ff:52:d7:fd:97:53:13:74:cb:28:32:35: 47:38:4e:a3:10:56:99:36:af:b0:8e:39:89:2d:0b: ae:ed:9d:24:e0:de:46:a1:55:3f:f7:b1:37:a3:cf: dc:a9:e1:df:79:60:fb:78:4e:5f:a9:fa:da:ac:39: f9:e1:98:54:0a:79:fe:99:95:ce:b2:da:8b:82:e8: 8a:d1:9a:62:ed:2a:84:30:c4:ed:2d:ab:4a:ef:16: 02:5f:c5:48:06:18:ff:9c:ac:9b:b5:60:b5:db:d9: 55:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:42:76:2E:4C:0C:5F:4A:A9:28:EB:F6:2C:97:69:9C:5F:AF:8D:0A X509v3 Authority Key Identifier: keyid:9A:D6:BF:12:AD:5A:29:32:7B:C6:F7:B6:60:26:F0:54:68:6C:D9:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mta_Eq1aKTJ7xve2YCbwVGhs2Vk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/c0ea88-7592-4e84-9a9a-4335670f6b7e/1/mta_Eq1aKTJ7xve2YCbwVGhs2Vk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/c0ea88-7592-4e84-9a9a-4335670f6b7e/1/mta_Eq1aKTJ7xve2YCbwVGhs2Vk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:e8:03:d3:6e:a9:a9:4c:1f:ed:c2:19:47:66:62:09:62:14: 45:0d:66:b8:40:ce:df:d2:be:11:ee:e9:2c:26:d4:9c:5f:ee: c6:b1:a1:b0:76:41:22:82:18:41:75:32:56:b6:c2:bf:78:92: fe:4f:09:6c:25:d3:f0:00:57:7e:b2:ab:8d:e3:d2:3f:2e:60: 9a:1a:f6:f8:e3:f3:92:20:a2:53:41:a4:d4:49:2c:a8:bc:6d: ff:f8:58:8d:77:63:e8:23:ea:7c:7d:de:86:b9:60:15:b3:ae: 52:ac:2d:42:7a:3a:fe:21:a0:3b:ac:8c:42:e1:47:62:a1:61: 86:d4:1d:00:11:f2:6d:9a:45:75:92:d6:5e:b6:c7:72:65:49: d1:5e:ec:73:6e:52:b7:3d:e3:72:fd:02:7d:99:4d:7d:01:53: e8:4c:e8:63:71:d3:d4:fe:f5:f1:d0:d2:3f:df:9f:ac:a4:73: 88:da:c4:08:78:f9:26:22:95:15:57:42:3d:16:b9:44:20:10: 68:3b:40:21:cc:e8:7e:c3:3f:d8:1c:e1:3e:e5:f9:d4:a8:c3: 9b:3c:93:08:81:8d:e3:4a:a4:74:3f:07:01:78:6c:5c:07:22: 62:77:b3:5c:71:55:07:bd:74:a4:d2:31:6e:5e:82:a7:a8:c3: 54:b0:4b:8b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8fsvPPcFiIJYuClAHHfsAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhZDZiZjEyYWQ1YTI5MzI3YmM2ZjdiNjYwMjZmMDU0Njg2 Y2Q5NTkwHhcNMjUxMjIwMTYwMTQxWhcNMjUxMjIxMTYwMTQxWjAzMTEwLwYDVQQD EygyMDQyNzYyZTRjMGM1ZjRhYTkyOGViZjYyYzk3Njk5YzVmYWY4ZDBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvf7o+ZJvFtDxEIfOMXnpvNw8Cs/0 F3iXclaVo2HZddtVu9/9Q3AInHKqrEdv0K7GfA+5oqjLH8OH+hlQMzPp0DlDNVJ3 HCr52e62j9lHk9bCht7E/Zrx7VSawmuyXESlEvFI3DVZBqvQ1z1qAv5unFri3B0z oTv7Zfs6kKAhMKOZuha5ypaRj7B6eVZs+DwBmU1LHjXcfN7/Utf9l1MTdMsoMjVH OE6jEFaZNq+wjjmJLQuu7Z0k4N5GoVU/97E3o8/cqeHfeWD7eE5fqfrarDn54ZhU Cnn+mZXOstqLguiK0Zpi7SqEMMTtLatK7xYCX8VIBhj/nKybtWC129lVgwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCBCdi5MDF9KqSjr9iyXaZxfr40KMB8GA1UdIwQY MBaAFJrWvxKtWikye8b3tmAm8FRobNlZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbXRhX0VxMWFLVEo3eHZlMllDYndWR2hzMlZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi9jMGVhODgtNzU5Mi00ZTg0LTlhOWEt NDMzNTY3MGY2YjdlLzEvbXRhX0VxMWFLVEo3eHZlMllDYndWR2hzMlZrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi9jMGVhODgtNzU5Mi00ZTg0LTlhOWEtNDMzNTY3MGY2Yjdl LzEvbXRhX0VxMWFLVEo3eHZlMllDYndWR2hzMlZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANugD026p qUwf7cIZR2ZiCWIURQ1muEDO39K+Ee7pLCbUnF/uxrGhsHZBIoIYQXUyVrbCv3iS /k8JbCXT8ABXfrKrjePSPy5gmhr2+OPzkiCiU0Gk1EksqLxt//hYjXdj6CPqfH3e hrlgFbOuUqwtQno6/iGgO6yMQuFHYqFhhtQdABHybZpFdZLWXrbHcmVJ0V7sc25S tz3jcv0CfZlNfQFT6EzoY3HT1P718dDSP9+frKRziNrECHj5JiKVFVdCPRa5RCAQ aDtAIczofsM/2BzhPuX51KjDmzyTCIGN40qkdD8HAXhsXAciYnezXHFVB710pNIx bl6Cp6jDVLBLiw== -----END CERTIFICATE-----Generated at Sat Dec 20 21:18:14 2025 by rpki-client