This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/fc251e-259c-47f5-ae30-3724535ecc1a/1/mrVxtpr4VlCv_tzv5X0qc_1ubKk.mft File: mrVxtpr4VlCv_tzv5X0qc_1ubKk.mft (raw, json) Hash identifier: lflsHSBBc1iVwLl2OjZpEjDAapETlSuPehEKymokVyY= Subject key identifier: D9:E8:41:3C:5F:37:60:8F:04:9C:E0:A9:55:70:9F:FA:EA:68:88:67 Authority key identifier: 9A:B5:71:B6:9A:F8:56:50:AF:FE:DC:EF:E5:7D:2A:73:FD:6E:6C:A9 Certificate issuer: /CN=9ab571b69af85650affedcefe57d2a73fd6e6ca9 Certificate serial: 019B4A0453438D7AF2F60C7C20F3FA0AF5D3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mrVxtpr4VlCv_tzv5X0qc_1ubKk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/fc251e-259c-47f5-ae30-3724535ecc1a/1/mrVxtpr4VlCv_tzv5X0qc_1ubKk.mft Manifest number: 0D7B Signing time: Tue 23 Dec 2025 07:02:35 +0000 Manifest this update: Tue 23 Dec 2025 07:02:35 +0000 Manifest next update: Wed 24 Dec 2025 07:02:35 +0000 Files and hashes: 1: mrVxtpr4VlCv_tzv5X0qc_1ubKk.crl (hash: jX8VoGr+IRCsCZbujlDgtez9UhFEFMocHDJWVmsxAU4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/fc251e-259c-47f5-ae30-3724535ecc1a/1/mrVxtpr4VlCv_tzv5X0qc_1ubKk.crl rsync://rpki.ripe.net/repository/DEFAULT/19/fc251e-259c-47f5-ae30-3724535ecc1a/1/mrVxtpr4VlCv_tzv5X0qc_1ubKk.mft rsync://rpki.ripe.net/repository/DEFAULT/mrVxtpr4VlCv_tzv5X0qc_1ubKk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 07:02:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4a:04:53:43:8d:7a:f2:f6:0c:7c:20:f3:fa:0a:f5:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab571b69af85650affedcefe57d2a73fd6e6ca9 Validity Not Before: Dec 23 07:02:35 2025 GMT Not After : Dec 24 07:02:35 2025 GMT Subject: CN=d9e8413c5f37608f049ce0a955709ffaea688867 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:42:4c:49:84:24:95:cc:8c:e9:68:2e:0c:fb: 8c:86:27:26:ff:bd:37:ca:46:db:f2:4c:06:5b:18: 48:f2:56:d3:5e:24:e3:b6:00:1f:f0:90:39:26:ab: ce:d7:0e:5c:90:2f:b5:3c:ed:54:a4:b2:a6:12:06: 1b:05:85:c9:87:e8:74:99:3b:5b:56:d1:91:e0:53: f9:29:17:c3:9e:51:9b:98:e9:02:fe:4d:ee:d3:03: e8:96:9d:eb:6c:25:f2:b1:65:e2:65:a3:3d:f0:e9: 25:b3:bb:71:33:bd:67:df:bf:f2:4e:e4:f9:93:76: d7:72:4c:c3:3e:9f:89:71:b9:6a:55:9f:ea:5a:ff: ea:e0:c7:05:86:c7:5c:6c:ae:eb:34:2d:31:c8:69: 22:7d:eb:ff:9f:76:7f:fd:eb:fb:dd:99:88:8b:da: 2c:e1:df:70:e3:cd:2d:49:ce:9c:13:a8:5f:73:1d: 8b:1c:fd:49:9f:11:db:29:6e:10:86:83:62:f1:5f: 8f:cf:80:ba:d2:05:d7:20:a1:e1:b1:87:a9:3d:54: 46:d6:a8:27:ca:10:fa:4e:a7:04:d9:12:19:d5:05: ba:80:4c:22:88:a6:d8:bd:04:fc:65:27:f3:d7:44: 20:2a:77:6d:bc:cd:5c:c7:9a:aa:9d:02:b0:a8:d1: 9e:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:E8:41:3C:5F:37:60:8F:04:9C:E0:A9:55:70:9F:FA:EA:68:88:67 X509v3 Authority Key Identifier: keyid:9A:B5:71:B6:9A:F8:56:50:AF:FE:DC:EF:E5:7D:2A:73:FD:6E:6C:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mrVxtpr4VlCv_tzv5X0qc_1ubKk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/fc251e-259c-47f5-ae30-3724535ecc1a/1/mrVxtpr4VlCv_tzv5X0qc_1ubKk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/fc251e-259c-47f5-ae30-3724535ecc1a/1/mrVxtpr4VlCv_tzv5X0qc_1ubKk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:1c:67:ab:8f:c1:22:b8:b2:89:c8:ea:d9:06:e0:76:5f:fa: 09:c4:d8:38:4c:aa:9e:e5:90:26:ff:f1:84:9e:9a:d8:89:ed: ea:2a:d7:d6:09:fa:c9:e0:84:ed:b7:06:db:8a:69:37:79:d7: 65:79:f6:69:d4:79:06:44:b7:19:f6:6e:9f:8f:92:39:b5:56: ad:3b:c7:24:e0:87:52:84:a3:d2:ce:21:b8:47:fb:2b:1c:26: 73:65:88:df:b6:de:2b:c3:43:1e:05:ff:4a:14:6a:38:e2:05: 83:ed:ca:69:58:b0:10:8f:4e:84:24:6a:25:20:a3:70:4b:14: 22:41:59:f8:b1:6c:cb:e8:6a:e8:ff:55:95:da:0a:a4:5a:cb: fb:be:eb:90:d4:ce:89:78:8f:5d:5f:cc:dc:72:a2:c6:7f:5e: f8:d6:a9:ec:a4:cc:fe:69:df:d0:86:c8:3b:55:49:cd:87:71: eb:51:f2:d8:fe:e6:5a:07:6c:ee:2f:f9:36:95:c5:f5:3c:90: e9:3e:47:c7:aa:a5:d4:bb:5e:79:8f:d3:85:4a:92:98:20:68: 5b:bd:18:fc:c2:3d:c4:1e:3a:a8:6a:89:bc:50:27:97:e8:c6: 35:c7:1c:bb:51:8f:b5:74:5a:59:a1:2e:87:db:91:46:38:f6: ab:dd:bc:8f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtKBFNDjXry9gx8IPP6CvXTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhYjU3MWI2OWFmODU2NTBhZmZlZGNlZmU1N2QyYTczZmQ2 ZTZjYTkwHhcNMjUxMjIzMDcwMjM1WhcNMjUxMjI0MDcwMjM1WjAzMTEwLwYDVQQD EyhkOWU4NDEzYzVmMzc2MDhmMDQ5Y2UwYTk1NTcwOWZmYWVhNjg4ODY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1UJMSYQklcyM6WguDPuMhicm/703 ykbb8kwGWxhI8lbTXiTjtgAf8JA5JqvO1w5ckC+1PO1UpLKmEgYbBYXJh+h0mTtb VtGR4FP5KRfDnlGbmOkC/k3u0wPolp3rbCXysWXiZaM98Okls7txM71n37/yTuT5 k3bXckzDPp+JcblqVZ/qWv/q4McFhsdcbK7rNC0xyGkifev/n3Z//ev73ZmIi9os 4d9w480tSc6cE6hfcx2LHP1JnxHbKW4QhoNi8V+Pz4C60gXXIKHhsYepPVRG1qgn yhD6TqcE2RIZ1QW6gEwiiKbYvQT8ZSfz10QgKndtvM1cx5qqnQKwqNGenwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNnoQTxfN2CPBJzgqVVwn/rqaIhnMB8GA1UdIwQY MBaAFJq1cbaa+FZQr/7c7+V9KnP9bmypMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbXJWeHRwcjRWbEN2X3R6djVYMHFjXzF1YktrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9mYzI1MWUtMjU5Yy00N2Y1LWFlMzAt MzcyNDUzNWVjYzFhLzEvbXJWeHRwcjRWbEN2X3R6djVYMHFjXzF1YktrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS9mYzI1MWUtMjU5Yy00N2Y1LWFlMzAtMzcyNDUzNWVjYzFh LzEvbXJWeHRwcjRWbEN2X3R6djVYMHFjXzF1YktrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAphxnq4/B Iriyicjq2Qbgdl/6CcTYOEyqnuWQJv/xhJ6a2Int6irX1gn6yeCE7bcG24ppN3nX ZXn2adR5BkS3GfZun4+SObVWrTvHJOCHUoSj0s4huEf7Kxwmc2WI37beK8NDHgX/ ShRqOOIFg+3KaViwEI9OhCRqJSCjcEsUIkFZ+LFsy+hq6P9VldoKpFrL+77rkNTO iXiPXV/M3HKixn9e+Nap7KTM/mnf0IbIO1VJzYdx61Hy2P7mWgds7i/5NpXF9TyQ 6T5Hx6ql1LteeY/ThUqSmCBoW70Y/MI9xB46qGqJvFAnl+jGNcccu1GPtXRaWaEu h9uRRjj2q928jw== -----END CERTIFICATE-----Generated at Tue Dec 23 17:15:42 2025 by rpki-client