This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/07d146-ef22-4e5c-bd5c-42ed3e373679/1/MXvyYLzaMCviwgdijPsWRHhhT-U.mft File: MXvyYLzaMCviwgdijPsWRHhhT-U.mft (raw, json) Hash identifier: x9Cib/CjD9i+qh9X83CXkxn+4AGXAzd88jpoM2AWCoI= Subject key identifier: 32:8D:93:E6:72:23:35:B6:06:3A:70:77:D0:73:6F:42:B0:54:6F:27 Authority key identifier: 31:7B:F2:60:BC:DA:30:2B:E2:C2:07:62:8C:FB:16:44:78:61:4F:E5 Certificate issuer: /CN=317bf260bcda302be2c207628cfb164478614fe5 Certificate serial: 019B4E4E27A51957F7DE68A363717599C263 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MXvyYLzaMCviwgdijPsWRHhhT-U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/07d146-ef22-4e5c-bd5c-42ed3e373679/1/MXvyYLzaMCviwgdijPsWRHhhT-U.mft Manifest number: 0F05 Signing time: Wed 24 Dec 2025 03:01:43 +0000 Manifest this update: Wed 24 Dec 2025 03:01:43 +0000 Manifest next update: Thu 25 Dec 2025 03:01:43 +0000 Files and hashes: 1: MXvyYLzaMCviwgdijPsWRHhhT-U.crl (hash: cceoLGZCIWZ4M5iCFQliHjoySNIWakJ5Q+hku76OEb8=) 2: penXvalgbMBLZqcx96rUayqK3NQ.roa (hash: vb/Iw29Kb6TCjGenAwHcr/Ra62ZOMD3/iU+HDEP/27c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/07d146-ef22-4e5c-bd5c-42ed3e373679/1/MXvyYLzaMCviwgdijPsWRHhhT-U.crl rsync://rpki.ripe.net/repository/DEFAULT/03/07d146-ef22-4e5c-bd5c-42ed3e373679/1/MXvyYLzaMCviwgdijPsWRHhhT-U.mft rsync://rpki.ripe.net/repository/DEFAULT/MXvyYLzaMCviwgdijPsWRHhhT-U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4e:4e:27:a5:19:57:f7:de:68:a3:63:71:75:99:c2:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=317bf260bcda302be2c207628cfb164478614fe5 Validity Not Before: Dec 24 03:01:43 2025 GMT Not After : Dec 25 03:01:43 2025 GMT Subject: CN=328d93e6722335b6063a7077d0736f42b0546f27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:8b:ac:31:6c:3e:05:3a:87:49:35:45:1c:4c: 65:af:43:5f:1f:47:40:a1:eb:69:a2:8b:48:f7:c5: 55:0d:17:16:61:4d:22:cb:97:13:dc:2c:fd:bd:46: 98:90:64:87:de:b4:47:98:31:07:61:61:26:e6:db: df:5a:c6:40:cd:40:7f:91:2b:60:bf:2a:c9:02:39: e3:e2:0c:5f:a1:af:e0:19:4e:ce:a4:48:d3:8e:f0: 37:85:39:ed:87:13:96:e1:59:a9:fa:2d:1c:6d:16: 50:e8:d8:fd:8a:4d:7a:97:f1:2a:9e:e8:8e:c0:b7: 60:99:71:09:f8:d6:d2:15:9a:be:2d:9a:86:58:63: fa:9d:f9:39:4d:e1:78:c2:23:ef:95:2e:6e:ea:93: e2:b6:75:8c:dc:95:64:dd:40:6b:0a:c0:6c:4f:b7: 10:33:6c:de:f8:37:81:3b:d5:e1:f7:37:9e:b7:b1: b4:bc:23:f2:b6:6e:ca:39:94:af:b3:62:5f:c3:5a: 3f:c2:c0:3f:8e:e0:71:34:58:55:f3:63:00:9b:8d: 17:ca:a9:fa:2f:b0:5f:94:9e:8c:a2:e3:fa:26:19: 78:f1:3f:9a:f1:30:0a:57:24:20:6d:df:86:be:35: 6f:2f:12:fa:68:bc:c0:e9:0a:31:f5:d6:ed:a8:42: 09:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:8D:93:E6:72:23:35:B6:06:3A:70:77:D0:73:6F:42:B0:54:6F:27 X509v3 Authority Key Identifier: keyid:31:7B:F2:60:BC:DA:30:2B:E2:C2:07:62:8C:FB:16:44:78:61:4F:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MXvyYLzaMCviwgdijPsWRHhhT-U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/07d146-ef22-4e5c-bd5c-42ed3e373679/1/MXvyYLzaMCviwgdijPsWRHhhT-U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/07d146-ef22-4e5c-bd5c-42ed3e373679/1/MXvyYLzaMCviwgdijPsWRHhhT-U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:ab:a9:02:47:98:bc:1d:f1:79:31:27:24:ac:40:97:8b:e6: 07:d0:43:f6:7e:07:89:a3:38:9f:c8:89:ed:04:51:77:3e:fb: 2b:4d:55:50:4e:c4:65:0a:be:1e:3e:4b:96:e8:eb:8a:2f:ff: 90:57:c0:ee:12:d2:b5:be:80:f4:c5:cc:20:77:14:f7:4f:25: 61:cc:aa:16:54:ac:49:53:2f:a6:a0:15:99:e2:9e:4e:77:ca: 58:6b:b7:b4:97:b7:c4:4f:6c:7c:3c:af:06:bd:f1:95:5e:30: d6:bf:b1:14:35:eb:80:bb:82:ab:db:dc:00:0f:83:11:e4:d0: e2:49:df:7b:7c:e0:5c:1c:11:73:e9:c6:4e:42:7a:77:e6:f6: 0a:7b:07:3d:2f:40:ed:94:32:2c:2f:51:59:47:d3:a4:28:ff: 1d:7c:98:90:4e:e5:1a:28:7b:a3:b2:0a:6e:35:30:43:06:d7: f1:c0:b0:40:09:1c:b8:81:0f:97:5d:33:2a:83:91:98:d3:78: 9e:02:8f:88:0f:17:fc:a2:86:88:2f:95:46:85:f7:6d:56:b2: 8f:c1:2b:65:57:c6:c1:d4:6f:00:20:eb:af:44:8a:22:96:f3: 75:aa:f3:4f:75:e4:54:2e:4b:1f:b9:22:fa:fe:75:c7:e1:df: 01:8a:46:b9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtOTielGVf33mijY3F1mcJjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxN2JmMjYwYmNkYTMwMmJlMmMyMDc2MjhjZmIxNjQ0Nzg2 MTRmZTUwHhcNMjUxMjI0MDMwMTQzWhcNMjUxMjI1MDMwMTQzWjAzMTEwLwYDVQQD EygzMjhkOTNlNjcyMjMzNWI2MDYzYTcwNzdkMDczNmY0MmIwNTQ2ZjI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwIusMWw+BTqHSTVFHExlr0NfH0dA oetpootI98VVDRcWYU0iy5cT3Cz9vUaYkGSH3rRHmDEHYWEm5tvfWsZAzUB/kStg vyrJAjnj4gxfoa/gGU7OpEjTjvA3hTnthxOW4Vmp+i0cbRZQ6Nj9ik16l/EqnuiO wLdgmXEJ+NbSFZq+LZqGWGP6nfk5TeF4wiPvlS5u6pPitnWM3JVk3UBrCsBsT7cQ M2ze+DeBO9Xh9zeet7G0vCPytm7KOZSvs2Jfw1o/wsA/juBxNFhV82MAm40Xyqn6 L7BflJ6MouP6Jhl48T+a8TAKVyQgbd+GvjVvLxL6aLzA6Qox9dbtqEIJtQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDKNk+ZyIzW2Bjpwd9Bzb0KwVG8nMB8GA1UdIwQY MBaAFDF78mC82jAr4sIHYoz7FkR4YU/lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTVh2eVlMemFNQ3Zpd2dkaWpQc1dSSGhoVC1VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy8wN2QxNDYtZWYyMi00ZTVjLWJkNWMt NDJlZDNlMzczNjc5LzEvTVh2eVlMemFNQ3Zpd2dkaWpQc1dSSGhoVC1VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy8wN2QxNDYtZWYyMi00ZTVjLWJkNWMtNDJlZDNlMzczNjc5 LzEvTVh2eVlMemFNQ3Zpd2dkaWpQc1dSSGhoVC1VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnaupAkeY vB3xeTEnJKxAl4vmB9BD9n4HiaM4n8iJ7QRRdz77K01VUE7EZQq+Hj5Llujrii// kFfA7hLStb6A9MXMIHcU908lYcyqFlSsSVMvpqAVmeKeTnfKWGu3tJe3xE9sfDyv Br3xlV4w1r+xFDXrgLuCq9vcAA+DEeTQ4knfe3zgXBwRc+nGTkJ6d+b2CnsHPS9A 7ZQyLC9RWUfTpCj/HXyYkE7lGih7o7IKbjUwQwbX8cCwQAkcuIEPl10zKoORmNN4 ngKPiA8X/KKGiC+VRoX3bVayj8ErZVfGwdRvACDrr0SKIpbzdarzT3XkVC5LH7ki +v51x+HfAYpGuQ== -----END CERTIFICATE-----Generated at Wed Dec 24 09:16:42 2025 by rpki-client