This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/3bc707-76e7-4987-befa-981184dee131/1/00-mvj9cOPS7fgYrZwd0f0lhoEg.mft File: 00-mvj9cOPS7fgYrZwd0f0lhoEg.mft (raw, json) Hash identifier: CQoh7W91nftUK7gELHz8uuojZfm2aGF0UpPtDO616Mc= Subject key identifier: 48:03:C8:83:01:CB:91:21:32:02:82:C6:B7:FD:BD:9D:22:C8:04:AF Authority key identifier: D3:4F:A6:BE:3F:5C:38:F4:BB:7E:06:2B:67:07:74:7F:49:61:A0:48 Certificate issuer: /CN=d34fa6be3f5c38f4bb7e062b6707747f4961a048 Certificate serial: 019B503C8E6C2742B2BC1301F3508951DC87 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/00-mvj9cOPS7fgYrZwd0f0lhoEg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/3bc707-76e7-4987-befa-981184dee131/1/00-mvj9cOPS7fgYrZwd0f0lhoEg.mft Manifest number: 1117 Signing time: Wed 24 Dec 2025 12:01:44 +0000 Manifest this update: Wed 24 Dec 2025 12:01:44 +0000 Manifest next update: Thu 25 Dec 2025 12:01:44 +0000 Files and hashes: 1: 00-mvj9cOPS7fgYrZwd0f0lhoEg.crl (hash: pRzKYapjKHdycRIGayFFkN0mkK3YpnuOP/EDogDmzvs=) 2: NqFx58VddClRGkaq4vH0spxB4sY.roa (hash: +1mQ81/UVGy7/f9fmdLWXPkvY0wtPU2QaCzUYGQfgPM=) 3: l-051BYsRCxKE3vQ5NqqDTviFr4.roa (hash: zt5p627DRZYw9RNnukf8GDpw31GizuJMWnR2o5lMps4=) 4: lrUiZniRQz-h8c2XhwOWkweOdEA.roa (hash: d49AW/uRjxvRRJYubTh5j7tar5tvmS5hfgjaKWxZ/ps=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/3bc707-76e7-4987-befa-981184dee131/1/00-mvj9cOPS7fgYrZwd0f0lhoEg.crl rsync://rpki.ripe.net/repository/DEFAULT/04/3bc707-76e7-4987-befa-981184dee131/1/00-mvj9cOPS7fgYrZwd0f0lhoEg.mft rsync://rpki.ripe.net/repository/DEFAULT/00-mvj9cOPS7fgYrZwd0f0lhoEg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 12:01:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:50:3c:8e:6c:27:42:b2:bc:13:01:f3:50:89:51:dc:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d34fa6be3f5c38f4bb7e062b6707747f4961a048 Validity Not Before: Dec 24 12:01:44 2025 GMT Not After : Dec 25 12:01:44 2025 GMT Subject: CN=4803c88301cb9121320282c6b7fdbd9d22c804af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:a8:ea:fb:3c:5d:da:2b:07:57:90:37:1a:1c: ad:80:fb:d8:d7:e5:52:dc:8a:c8:d9:ed:33:58:f9: 17:f1:14:11:9c:15:ec:b5:80:62:b4:aa:ab:66:e8: 4f:ef:61:89:6c:25:66:69:95:b0:a9:b8:dd:98:be: 71:df:95:af:86:36:01:c5:fe:93:c0:1d:08:a9:17: 24:e4:22:91:10:dc:4b:5c:5a:65:c9:8f:3b:6d:84: e7:12:f9:4d:bd:5b:84:8c:76:73:cc:20:e7:5d:b1: 0b:63:d4:45:96:f2:bc:11:c0:98:52:2c:93:19:5a: b4:86:4f:7c:6f:bc:a5:97:e9:56:c4:1a:a8:f6:ef: 8e:b3:0b:74:68:2d:f6:f6:40:70:8b:54:e8:93:05: 79:d3:34:a4:b9:1b:1e:a2:78:2f:fe:20:80:c6:0e: ef:5a:e3:58:43:b7:68:45:bb:5d:16:20:b1:15:09: f3:b8:bd:ee:7d:26:d3:73:a9:dc:d1:74:11:50:a1: 27:05:c9:56:07:f8:5c:a7:68:f3:34:e2:b9:c7:2e: 2e:96:48:b9:26:49:4d:9c:22:50:e5:9c:c5:d8:83: f0:c5:60:d7:56:43:76:5f:13:8d:a7:d8:75:0d:bf: 03:22:9b:60:f2:36:76:80:9e:16:38:00:fe:20:f8: 8e:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:03:C8:83:01:CB:91:21:32:02:82:C6:B7:FD:BD:9D:22:C8:04:AF X509v3 Authority Key Identifier: keyid:D3:4F:A6:BE:3F:5C:38:F4:BB:7E:06:2B:67:07:74:7F:49:61:A0:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/00-mvj9cOPS7fgYrZwd0f0lhoEg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/3bc707-76e7-4987-befa-981184dee131/1/00-mvj9cOPS7fgYrZwd0f0lhoEg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/04/3bc707-76e7-4987-befa-981184dee131/1/00-mvj9cOPS7fgYrZwd0f0lhoEg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:27:ff:96:b4:f4:01:e5:2e:f2:0d:15:eb:c0:8f:13:06:99: ed:d0:2b:89:b2:3f:d2:7a:05:fd:4c:0d:f1:80:a8:61:0d:62: 06:f7:9c:4a:5a:57:82:ce:85:3a:dc:e8:a4:ce:f0:a9:1e:55: b4:21:ac:b0:43:64:45:88:b6:b2:a4:d5:94:e3:0b:cf:b1:f0: 89:f0:dd:30:27:b2:99:79:f1:6c:93:48:51:37:2f:a9:09:1f: a1:8b:bf:88:c0:1b:f3:ba:3f:b8:0c:66:70:c1:cf:26:95:eb: 51:8d:89:2d:e9:46:ee:7e:2f:65:54:4f:12:58:e1:a6:4b:61: 29:68:f2:5f:88:17:f4:b2:a1:5d:25:bd:9a:59:47:ed:b4:bc: c4:b4:24:bf:e0:2e:a8:58:de:3d:5b:d4:d1:f0:7f:69:c3:57: 88:51:cd:4d:6b:05:fa:53:6f:11:44:99:aa:c4:63:2c:29:af: 0a:fb:65:b2:6a:2a:de:0c:f7:dc:c3:f0:23:4f:34:98:2c:cc: f0:b1:8d:00:2a:19:2a:db:ec:89:4f:99:04:64:b6:c1:45:1b: be:eb:e5:89:a1:4e:01:a9:eb:e0:40:64:5c:cb:2c:1d:d8:3b: b9:bf:c0:f9:05:5e:3f:d1:1b:0b:6e:94:58:29:84:e7:23:3f: 0b:0c:b3:ee -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtQPI5sJ0KyvBMB81CJUdyHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzNGZhNmJlM2Y1YzM4ZjRiYjdlMDYyYjY3MDc3NDdmNDk2 MWEwNDgwHhcNMjUxMjI0MTIwMTQ0WhcNMjUxMjI1MTIwMTQ0WjAzMTEwLwYDVQQD Eyg0ODAzYzg4MzAxY2I5MTIxMzIwMjgyYzZiN2ZkYmQ5ZDIyYzgwNGFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3qjq+zxd2isHV5A3GhytgPvY1+VS 3IrI2e0zWPkX8RQRnBXstYBitKqrZuhP72GJbCVmaZWwqbjdmL5x35WvhjYBxf6T wB0IqRck5CKRENxLXFplyY87bYTnEvlNvVuEjHZzzCDnXbELY9RFlvK8EcCYUiyT GVq0hk98b7yll+lWxBqo9u+Oswt0aC329kBwi1TokwV50zSkuRseongv/iCAxg7v WuNYQ7doRbtdFiCxFQnzuL3ufSbTc6nc0XQRUKEnBclWB/hcp2jzNOK5xy4ulki5 JklNnCJQ5ZzF2IPwxWDXVkN2XxONp9h1Db8DIptg8jZ2gJ4WOAD+IPiO1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEgDyIMBy5EhMgKCxrf9vZ0iyASvMB8GA1UdIwQY MBaAFNNPpr4/XDj0u34GK2cHdH9JYaBIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMDAtbXZqOWNPUFM3ZmdZclp3ZDBmMGxob0VnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC8zYmM3MDctNzZlNy00OTg3LWJlZmEt OTgxMTg0ZGVlMTMxLzEvMDAtbXZqOWNPUFM3ZmdZclp3ZDBmMGxob0VnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNC8zYmM3MDctNzZlNy00OTg3LWJlZmEtOTgxMTg0ZGVlMTMx LzEvMDAtbXZqOWNPUFM3ZmdZclp3ZDBmMGxob0VnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFCf/lrT0 AeUu8g0V68CPEwaZ7dAribI/0noF/UwN8YCoYQ1iBvecSlpXgs6FOtzopM7wqR5V tCGssENkRYi2sqTVlOMLz7HwifDdMCeymXnxbJNIUTcvqQkfoYu/iMAb87o/uAxm cMHPJpXrUY2JLelG7n4vZVRPEljhpkthKWjyX4gX9LKhXSW9mllH7bS8xLQkv+Au qFjePVvU0fB/acNXiFHNTWsF+lNvEUSZqsRjLCmvCvtlsmoq3gz33MPwI080mCzM 8LGNACoZKtvsiU+ZBGS2wUUbvuvliaFOAanr4EBkXMssHdg7ub/A+QVeP9EbC26U WCmE5yM/Cwyz7g== -----END CERTIFICATE-----Generated at Wed Dec 24 21:34:39 2025 by rpki-client