This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/2a7472-cbb8-4c99-be21-11b4afbede19/1/MAVrA3XYlLk8sOJtm01koIxYNx4.mft File: MAVrA3XYlLk8sOJtm01koIxYNx4.mft (raw, json) Hash identifier: L59QWH4GqMYVBZi0q0uhgxb8I3uzclcHhMZc8NR+GGI= Subject key identifier: D6:CD:B9:2F:C7:FE:E8:12:30:F2:2F:50:32:F1:B0:C4:84:16:2C:73 Authority key identifier: 30:05:6B:03:75:D8:94:B9:3C:B0:E2:6D:9B:4D:64:A0:8C:58:37:1E Certificate issuer: /CN=30056b0375d894b93cb0e26d9b4d64a08c58371e Certificate serial: 019B3BA25C1F8F45B726E96E7EBA191383D3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MAVrA3XYlLk8sOJtm01koIxYNx4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/2a7472-cbb8-4c99-be21-11b4afbede19/1/MAVrA3XYlLk8sOJtm01koIxYNx4.mft Manifest number: 0D11 Signing time: Sat 20 Dec 2025 12:00:54 +0000 Manifest this update: Sat 20 Dec 2025 12:00:54 +0000 Manifest next update: Sun 21 Dec 2025 12:00:54 +0000 Files and hashes: 1: 3O6Y3eQ5OpGsAft35AyeyfVjQ6o.roa (hash: u+uYD6/L10KdiWIH/nhFz7IkGG28050DGlwgSDFBhnk=) 2: MAVrA3XYlLk8sOJtm01koIxYNx4.crl (hash: OJisoMVQhLRakZgXzQ/uztRPRDfP0M2kB7N0GaaNouQ=) 3: vQwx6cGSIAT7m9K8R35GzUVPtvc.roa (hash: zbCFg7Xh1dqpHRv2DApSfzHkCmAjvg9jJtigoE/GHhk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/2a7472-cbb8-4c99-be21-11b4afbede19/1/MAVrA3XYlLk8sOJtm01koIxYNx4.crl rsync://rpki.ripe.net/repository/DEFAULT/21/2a7472-cbb8-4c99-be21-11b4afbede19/1/MAVrA3XYlLk8sOJtm01koIxYNx4.mft rsync://rpki.ripe.net/repository/DEFAULT/MAVrA3XYlLk8sOJtm01koIxYNx4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:a2:5c:1f:8f:45:b7:26:e9:6e:7e:ba:19:13:83:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30056b0375d894b93cb0e26d9b4d64a08c58371e Validity Not Before: Dec 20 12:00:54 2025 GMT Not After : Dec 21 12:00:54 2025 GMT Subject: CN=d6cdb92fc7fee81230f22f5032f1b0c484162c73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:6d:61:26:18:d7:83:b0:2e:0a:a5:77:91:f4: 17:cb:02:be:3a:1d:e1:9e:65:0a:05:45:11:34:87: 41:a2:4b:85:a4:4d:e8:15:75:50:33:78:8a:c2:14: eb:16:19:b5:53:d1:a7:64:6e:53:e1:ba:22:6e:03: 96:f9:fc:d6:21:87:10:08:5d:c7:f7:17:f7:7c:a5: 1f:df:c8:06:6a:a5:54:ac:db:d9:5c:a2:5b:8e:5c: 27:22:a0:bb:ce:57:93:68:2f:de:f3:90:49:7e:c1: 77:d8:48:ae:a1:a9:03:5f:05:49:d0:7a:3f:78:ab: 8e:0a:af:85:17:b8:e3:9d:eb:3f:62:7d:10:02:95: 1e:40:d3:3f:bd:16:1e:6f:b9:98:38:ba:e3:10:34: 20:fb:d3:4e:16:45:f9:e7:95:89:cc:ea:ba:6b:12: 66:ee:3b:55:c8:b1:ac:ab:8a:9f:c8:c5:8e:86:ab: 87:5f:82:b5:87:9f:5f:33:35:ec:71:f6:79:21:59: a2:90:81:0f:4a:03:8e:af:d1:b0:f6:68:f7:2a:8d: fb:26:35:09:c1:d0:d7:bb:58:0e:dd:21:b0:2f:d4: 5d:bb:71:0e:d3:99:c5:1f:85:ed:4e:a3:f6:d8:de: 7c:08:92:48:73:36:26:9c:16:69:2f:60:d2:95:09: 6c:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:CD:B9:2F:C7:FE:E8:12:30:F2:2F:50:32:F1:B0:C4:84:16:2C:73 X509v3 Authority Key Identifier: keyid:30:05:6B:03:75:D8:94:B9:3C:B0:E2:6D:9B:4D:64:A0:8C:58:37:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MAVrA3XYlLk8sOJtm01koIxYNx4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2a7472-cbb8-4c99-be21-11b4afbede19/1/MAVrA3XYlLk8sOJtm01koIxYNx4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2a7472-cbb8-4c99-be21-11b4afbede19/1/MAVrA3XYlLk8sOJtm01koIxYNx4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:ed:77:86:7c:15:7f:e9:05:6b:e3:dc:66:32:fc:17:22:f1: 25:5f:17:5a:44:80:d0:1b:32:68:16:de:9b:26:bd:92:48:90: 60:9e:06:25:49:da:77:83:34:5e:a4:c2:36:c8:a4:e7:52:6e: e7:28:a1:f2:5f:5f:57:b5:a1:ad:05:c2:ba:46:29:0b:2a:cb: 6d:dc:b4:49:4c:ca:35:e3:85:74:16:82:0e:c0:57:4d:5d:70: c9:e3:d0:61:a9:f7:42:87:55:d4:f6:1c:ca:58:29:88:f4:1d: bf:86:69:a8:b7:a4:b2:09:a9:1c:4d:16:f0:90:6b:88:ac:d1: f1:d5:20:06:28:e3:08:6b:99:c5:9d:bc:64:34:3d:cc:ae:ce: 5b:aa:d1:3b:97:4b:51:3c:4f:3b:f5:01:60:92:0c:de:b3:af: a6:b4:2a:7e:e0:a9:e0:e7:be:26:f6:8f:45:90:67:32:e4:8f: 26:af:d5:54:08:97:c1:98:ce:55:d8:14:a7:e3:11:84:45:3d: c1:6b:1f:6f:a9:d1:34:b6:d5:23:9e:41:fb:39:d0:d5:be:f0: 7f:55:59:11:13:67:60:ac:cc:d2:b1:52:8e:57:28:e7:a9:d7: 31:82:2f:f8:aa:bf:44:ba:a2:b7:df:c1:dc:21:28:3b:16:d4: 6f:ce:74:bc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7olwfj0W3JulufroZE4PTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwMDU2YjAzNzVkODk0YjkzY2IwZTI2ZDliNGQ2NGEwOGM1 ODM3MWUwHhcNMjUxMjIwMTIwMDU0WhcNMjUxMjIxMTIwMDU0WjAzMTEwLwYDVQQD EyhkNmNkYjkyZmM3ZmVlODEyMzBmMjJmNTAzMmYxYjBjNDg0MTYyYzczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArm1hJhjXg7AuCqV3kfQXywK+Oh3h nmUKBUURNIdBokuFpE3oFXVQM3iKwhTrFhm1U9GnZG5T4boibgOW+fzWIYcQCF3H 9xf3fKUf38gGaqVUrNvZXKJbjlwnIqC7zleTaC/e85BJfsF32EiuoakDXwVJ0Ho/ eKuOCq+FF7jjnes/Yn0QApUeQNM/vRYeb7mYOLrjEDQg+9NOFkX555WJzOq6axJm 7jtVyLGsq4qfyMWOhquHX4K1h59fMzXscfZ5IVmikIEPSgOOr9Gw9mj3Ko37JjUJ wdDXu1gO3SGwL9Rdu3EO05nFH4XtTqP22N58CJJIczYmnBZpL2DSlQlsTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNbNuS/H/ugSMPIvUDLxsMSEFixzMB8GA1UdIwQY MBaAFDAFawN12JS5PLDibZtNZKCMWDceMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTUFWckEzWFlsTGs4c09KdG0wMWtvSXhZTng0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS8yYTc0NzItY2JiOC00Yzk5LWJlMjEt MTFiNGFmYmVkZTE5LzEvTUFWckEzWFlsTGs4c09KdG0wMWtvSXhZTng0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMS8yYTc0NzItY2JiOC00Yzk5LWJlMjEtMTFiNGFmYmVkZTE5 LzEvTUFWckEzWFlsTGs4c09KdG0wMWtvSXhZTng0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnO13hnwV f+kFa+PcZjL8FyLxJV8XWkSA0BsyaBbemya9kkiQYJ4GJUnad4M0XqTCNsik51Ju 5yih8l9fV7WhrQXCukYpCyrLbdy0SUzKNeOFdBaCDsBXTV1wyePQYan3QodV1PYc ylgpiPQdv4ZpqLeksgmpHE0W8JBriKzR8dUgBijjCGuZxZ28ZDQ9zK7OW6rRO5dL UTxPO/UBYJIM3rOvprQqfuCp4Oe+JvaPRZBnMuSPJq/VVAiXwZjOVdgUp+MRhEU9 wWsfb6nRNLbVI55B+znQ1b7wf1VZERNnYKzM0rFSjlco56nXMYIv+Kq/RLqit9/B 3CEoOxbUb850vA== -----END CERTIFICATE-----Generated at Sat Dec 20 18:04:46 2025 by rpki-client