This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/dee7e1-cf51-43cb-ad36-7fae065b646a/1/MvBHo0IShysLH_gE7gIrAq91_-0.mft File: MvBHo0IShysLH_gE7gIrAq91_-0.mft (raw, json) Hash identifier: drzoa2ldy9CILnGSv+br2TpQLbyWEHdWp68MTNVd0uw= Subject key identifier: EB:00:A0:3A:11:6D:75:DE:F8:17:EB:4A:07:A9:BC:FE:64:F2:4A:44 Authority key identifier: 32:F0:47:A3:42:12:87:2B:0B:1F:F8:04:EE:02:2B:02:AF:75:FF:ED Certificate issuer: /CN=32f047a34212872b0b1ff804ee022b02af75ffed Certificate serial: 019B4EF1E035A981F0AD3E4A67CB4B6DC68A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MvBHo0IShysLH_gE7gIrAq91_-0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/dee7e1-cf51-43cb-ad36-7fae065b646a/1/MvBHo0IShysLH_gE7gIrAq91_-0.mft Manifest number: 073C Signing time: Wed 24 Dec 2025 06:00:32 +0000 Manifest this update: Wed 24 Dec 2025 06:00:32 +0000 Manifest next update: Thu 25 Dec 2025 06:00:32 +0000 Files and hashes: 1: MvBHo0IShysLH_gE7gIrAq91_-0.crl (hash: kDuDt9RYegMLjakHfptuwbT9ysHUTMcv/XoscHgW8hU=) 2: WgGE8SmHkkHtiKjEfowQOh6KXV8.roa (hash: 22fxBEDWF5kPp/e3BDEYhqrTgPBi1KncqCiTSsX2CWM=) 3: pvxgjOK61sSAIjSKXGp9wCqGnds.roa (hash: cyj8Q0roEhc5/yo7oP4F2A5FfhnYWsPzbSEckXutgEg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/dee7e1-cf51-43cb-ad36-7fae065b646a/1/MvBHo0IShysLH_gE7gIrAq91_-0.crl rsync://rpki.ripe.net/repository/DEFAULT/3c/dee7e1-cf51-43cb-ad36-7fae065b646a/1/MvBHo0IShysLH_gE7gIrAq91_-0.mft rsync://rpki.ripe.net/repository/DEFAULT/MvBHo0IShysLH_gE7gIrAq91_-0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 06:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4e:f1:e0:35:a9:81:f0:ad:3e:4a:67:cb:4b:6d:c6:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32f047a34212872b0b1ff804ee022b02af75ffed Validity Not Before: Dec 24 06:00:32 2025 GMT Not After : Dec 25 06:00:32 2025 GMT Subject: CN=eb00a03a116d75def817eb4a07a9bcfe64f24a44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:93:81:d6:75:37:61:d9:0d:b7:d7:a4:31:6e: c7:95:3b:11:b4:0b:84:a3:e9:09:18:6c:de:a4:8f: 21:39:e8:e3:23:f2:40:65:96:6d:dd:c4:4b:4a:e3: ca:22:71:42:0b:01:3a:69:dd:99:56:86:01:ef:11: f5:40:bd:c1:0b:bf:1d:d1:35:50:d7:fb:7f:cc:b8: 81:13:d2:ce:18:39:b0:34:43:5c:45:50:12:47:92: 73:1f:2c:56:a8:27:b9:04:1f:0e:96:7a:9c:01:25: 93:63:3d:0b:9c:8b:62:3c:5b:e2:ee:e7:e7:7f:61: 19:34:a8:51:16:4c:30:0e:9a:ec:92:33:3e:3e:79: 27:45:68:40:cf:63:20:d1:32:b3:0e:14:d4:c1:70: f3:1c:12:28:53:9b:70:81:3f:5c:1d:de:53:35:69: 8f:0c:b2:45:7d:c4:55:18:23:6d:28:5d:63:c0:ae: 9b:3c:07:50:54:66:58:2e:78:b1:ee:d5:46:f2:38: 64:dd:90:26:ec:35:06:b4:50:ce:2b:44:a3:6c:e1: fb:6c:d5:f5:65:e7:aa:0a:4c:13:a0:07:d5:44:83: 6f:df:e9:c8:d1:42:cf:72:30:73:e8:24:31:00:61: 61:b1:7a:d9:d3:b1:50:6d:ee:39:0b:b4:88:e1:1f: ab:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:00:A0:3A:11:6D:75:DE:F8:17:EB:4A:07:A9:BC:FE:64:F2:4A:44 X509v3 Authority Key Identifier: keyid:32:F0:47:A3:42:12:87:2B:0B:1F:F8:04:EE:02:2B:02:AF:75:FF:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MvBHo0IShysLH_gE7gIrAq91_-0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/dee7e1-cf51-43cb-ad36-7fae065b646a/1/MvBHo0IShysLH_gE7gIrAq91_-0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/dee7e1-cf51-43cb-ad36-7fae065b646a/1/MvBHo0IShysLH_gE7gIrAq91_-0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:f6:c0:a7:c3:24:77:02:61:d0:81:40:1b:c0:5d:4f:10:1b: 01:56:d1:fb:bc:7f:5d:32:4f:0b:f2:cf:35:7f:ee:30:4c:05: 0d:99:b1:66:6b:f3:22:31:9f:88:63:4f:b6:cb:7e:0f:0b:c0: eb:ac:95:f5:6e:24:3f:54:0a:3d:c6:b7:31:56:1b:98:cd:a8: 83:b2:b9:e6:12:1a:64:5b:43:c1:ea:41:46:55:67:70:67:8b: 5f:4f:4f:bd:9d:38:21:b9:0a:19:8f:74:22:b1:46:f7:be:49: 4e:17:56:c3:0c:1b:4f:5c:db:dc:74:b6:a0:a0:e9:c6:64:41: 04:96:b7:06:f8:e5:48:7a:f8:d6:0d:3e:b0:45:f3:d2:ee:f8: e5:32:d4:cb:d4:c9:18:f4:f3:1e:8d:86:42:29:87:fe:16:91: 0e:7e:41:34:23:30:64:33:88:b3:9b:bc:d8:7b:b1:88:52:4f: 44:9c:0c:4f:1e:1f:9a:c2:e7:74:98:ac:38:ea:5b:1d:7b:e6: ad:5b:36:1d:a8:5a:1b:d0:e1:e7:ff:51:ae:e4:fe:a6:74:48: 23:ed:26:c4:de:ae:08:07:ea:1f:27:e7:6d:4e:04:79:90:af: 4a:4d:6d:fc:cd:74:21:9a:f3:51:77:cc:8d:ec:7c:12:07:52: 44:05:90:f6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtO8eA1qYHwrT5KZ8tLbcaKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyZjA0N2EzNDIxMjg3MmIwYjFmZjgwNGVlMDIyYjAyYWY3 NWZmZWQwHhcNMjUxMjI0MDYwMDMyWhcNMjUxMjI1MDYwMDMyWjAzMTEwLwYDVQQD EyhlYjAwYTAzYTExNmQ3NWRlZjgxN2ViNGEwN2E5YmNmZTY0ZjI0YTQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwpOB1nU3YdkNt9ekMW7HlTsRtAuE o+kJGGzepI8hOejjI/JAZZZt3cRLSuPKInFCCwE6ad2ZVoYB7xH1QL3BC78d0TVQ 1/t/zLiBE9LOGDmwNENcRVASR5JzHyxWqCe5BB8OlnqcASWTYz0LnItiPFvi7ufn f2EZNKhRFkwwDprskjM+PnknRWhAz2Mg0TKzDhTUwXDzHBIoU5twgT9cHd5TNWmP DLJFfcRVGCNtKF1jwK6bPAdQVGZYLnix7tVG8jhk3ZAm7DUGtFDOK0SjbOH7bNX1 ZeeqCkwToAfVRINv3+nI0ULPcjBz6CQxAGFhsXrZ07FQbe45C7SI4R+rNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOsAoDoRbXXe+BfrSgepvP5k8kpEMB8GA1UdIwQY MBaAFDLwR6NCEocrCx/4BO4CKwKvdf/tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTXZCSG8wSVNoeXNMSF9nRTdnSXJBcTkxXy0wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy9kZWU3ZTEtY2Y1MS00M2NiLWFkMzYt N2ZhZTA2NWI2NDZhLzEvTXZCSG8wSVNoeXNMSF9nRTdnSXJBcTkxXy0wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYy9kZWU3ZTEtY2Y1MS00M2NiLWFkMzYtN2ZhZTA2NWI2NDZh LzEvTXZCSG8wSVNoeXNMSF9nRTdnSXJBcTkxXy0wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg/bAp8Mk dwJh0IFAG8BdTxAbAVbR+7x/XTJPC/LPNX/uMEwFDZmxZmvzIjGfiGNPtst+DwvA 66yV9W4kP1QKPca3MVYbmM2og7K55hIaZFtDwepBRlVncGeLX09PvZ04IbkKGY90 IrFG975JThdWwwwbT1zb3HS2oKDpxmRBBJa3BvjlSHr41g0+sEXz0u745TLUy9TJ GPTzHo2GQimH/haRDn5BNCMwZDOIs5u82HuxiFJPRJwMTx4fmsLndJisOOpbHXvm rVs2HahaG9Dh5/9RruT+pnRII+0mxN6uCAfqHyfnbU4EeZCvSk1t/M10IZrzUXfM jex8EgdSRAWQ9g== -----END CERTIFICATE-----Generated at Wed Dec 24 13:10:46 2025 by rpki-client