This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/dee7e1-cf51-43cb-ad36-7fae065b646a/1/MvBHo0IShysLH_gE7gIrAq91_-0.mft File: MvBHo0IShysLH_gE7gIrAq91_-0.mft (raw, json) Hash identifier: TS85JGrvt/C7HWOORfDB+97xMmGRSDKYfofNyeolUp8= Subject key identifier: 63:59:56:A3:1D:45:E4:37:B3:FA:89:5D:DF:21:75:B9:89:33:3C:14 Authority key identifier: 32:F0:47:A3:42:12:87:2B:0B:1F:F8:04:EE:02:2B:02:AF:75:FF:ED Certificate issuer: /CN=32f047a34212872b0b1ff804ee022b02af75ffed Certificate serial: 019B3D906E2AFF8AA4363C0CBD662359FB15 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MvBHo0IShysLH_gE7gIrAq91_-0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/dee7e1-cf51-43cb-ad36-7fae065b646a/1/MvBHo0IShysLH_gE7gIrAq91_-0.mft Manifest number: 0733 Signing time: Sat 20 Dec 2025 21:00:34 +0000 Manifest this update: Sat 20 Dec 2025 21:00:34 +0000 Manifest next update: Sun 21 Dec 2025 21:00:34 +0000 Files and hashes: 1: MvBHo0IShysLH_gE7gIrAq91_-0.crl (hash: +0bQqFN6ej8WHNgp6EUlaq2PvdpkCKl24X74zwNfGyE=) 2: WgGE8SmHkkHtiKjEfowQOh6KXV8.roa (hash: 22fxBEDWF5kPp/e3BDEYhqrTgPBi1KncqCiTSsX2CWM=) 3: pvxgjOK61sSAIjSKXGp9wCqGnds.roa (hash: cyj8Q0roEhc5/yo7oP4F2A5FfhnYWsPzbSEckXutgEg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/dee7e1-cf51-43cb-ad36-7fae065b646a/1/MvBHo0IShysLH_gE7gIrAq91_-0.crl rsync://rpki.ripe.net/repository/DEFAULT/3c/dee7e1-cf51-43cb-ad36-7fae065b646a/1/MvBHo0IShysLH_gE7gIrAq91_-0.mft rsync://rpki.ripe.net/repository/DEFAULT/MvBHo0IShysLH_gE7gIrAq91_-0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:90:6e:2a:ff:8a:a4:36:3c:0c:bd:66:23:59:fb:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32f047a34212872b0b1ff804ee022b02af75ffed Validity Not Before: Dec 20 21:00:34 2025 GMT Not After : Dec 21 21:00:34 2025 GMT Subject: CN=635956a31d45e437b3fa895ddf2175b989333c14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:64:e8:53:50:45:3c:78:40:87:6a:e5:75:97: 30:41:37:a2:48:18:2d:9c:25:ef:b3:60:a4:6c:e5: 7f:8a:63:8f:63:12:0f:99:8c:64:64:aa:02:fa:ed: c8:1d:cd:52:5a:28:9e:9c:35:f1:d1:fb:42:03:ed: ef:d6:ff:91:87:4f:55:7e:21:d7:b1:a0:35:cb:52: 99:dc:45:26:ef:a3:fb:24:7c:a4:0e:26:24:af:12: 0f:a3:e7:56:4e:a0:b1:f7:ea:5c:63:91:bd:c5:6b: c8:ed:14:f3:7d:b8:dd:a4:28:8c:a9:e5:22:3d:f0: f0:30:42:96:f4:a0:48:10:a4:a4:70:e2:6e:f2:79: 07:c1:96:d0:c0:22:97:61:f6:84:c7:07:45:b1:69: 73:ce:fd:d0:5a:82:fb:4f:20:b9:8c:12:a7:aa:f1: c0:7b:45:a5:dd:d7:73:f2:9d:89:c3:58:ee:2d:8f: d5:a9:d1:1b:bc:de:ed:11:8e:62:2e:19:6a:5a:6a: e9:b0:71:89:44:06:7a:dc:58:4f:ab:aa:93:b2:bb: ae:ad:33:ca:1d:77:6b:0d:ea:5c:a5:31:89:52:b5: b4:f7:eb:e0:cf:07:9f:69:6f:14:78:80:57:ca:36: ad:78:db:61:e5:3d:01:4f:ef:ec:5b:2b:8f:3e:88: 0a:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:59:56:A3:1D:45:E4:37:B3:FA:89:5D:DF:21:75:B9:89:33:3C:14 X509v3 Authority Key Identifier: keyid:32:F0:47:A3:42:12:87:2B:0B:1F:F8:04:EE:02:2B:02:AF:75:FF:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MvBHo0IShysLH_gE7gIrAq91_-0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/dee7e1-cf51-43cb-ad36-7fae065b646a/1/MvBHo0IShysLH_gE7gIrAq91_-0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/dee7e1-cf51-43cb-ad36-7fae065b646a/1/MvBHo0IShysLH_gE7gIrAq91_-0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:2c:2d:2e:ba:6b:d9:95:e1:02:e0:6f:76:43:f2:12:d4:10: fe:67:ad:2c:1c:c4:3e:83:b3:d1:ad:e1:41:78:2c:28:e1:70: 7a:38:90:30:20:08:47:d1:c5:4c:88:76:30:5d:35:ac:45:a0: 5e:dd:d5:e7:d6:cf:fe:55:b1:b4:09:92:96:eb:c2:6f:ce:3b: d3:a2:e5:c3:27:14:f6:32:5f:a5:47:7e:85:d5:e9:23:d6:59: fb:59:66:e1:10:62:f7:6e:9e:03:2e:cb:50:fb:a8:c2:68:ae: dc:4a:6b:cd:73:ff:14:90:c7:31:63:61:a1:07:91:76:8b:10: 42:57:6f:a4:42:a6:41:9c:4d:5c:0e:b7:5f:56:d2:77:d2:5e: 0f:94:f1:01:37:aa:4b:16:6b:13:34:e4:54:d4:45:bd:4d:5f: 53:54:48:4a:6b:d4:8c:61:ab:0c:43:55:a4:f7:23:6f:48:95: 88:b4:49:b6:b7:12:ce:d8:b4:5f:d9:2e:87:c0:36:47:79:c2: 22:d6:4a:60:97:61:b3:02:ca:59:be:91:40:52:f5:75:02:4d: 12:77:dd:b5:a1:b3:4b:0b:08:ce:3a:3c:df:c6:71:15:f8:9e: 0e:f0:3e:14:54:82:b7:ba:19:8e:1e:4b:c1:4b:18:18:cf:d7: 2f:2b:5c:24 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9kG4q/4qkNjwMvWYjWfsVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyZjA0N2EzNDIxMjg3MmIwYjFmZjgwNGVlMDIyYjAyYWY3 NWZmZWQwHhcNMjUxMjIwMjEwMDM0WhcNMjUxMjIxMjEwMDM0WjAzMTEwLwYDVQQD Eyg2MzU5NTZhMzFkNDVlNDM3YjNmYTg5NWRkZjIxNzViOTg5MzMzYzE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy2ToU1BFPHhAh2rldZcwQTeiSBgt nCXvs2CkbOV/imOPYxIPmYxkZKoC+u3IHc1SWiienDXx0ftCA+3v1v+Rh09VfiHX saA1y1KZ3EUm76P7JHykDiYkrxIPo+dWTqCx9+pcY5G9xWvI7RTzfbjdpCiMqeUi PfDwMEKW9KBIEKSkcOJu8nkHwZbQwCKXYfaExwdFsWlzzv3QWoL7TyC5jBKnqvHA e0Wl3ddz8p2Jw1juLY/VqdEbvN7tEY5iLhlqWmrpsHGJRAZ63FhPq6qTsruurTPK HXdrDepcpTGJUrW09+vgzwefaW8UeIBXyjateNth5T0BT+/sWyuPPogKjwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGNZVqMdReQ3s/qJXd8hdbmJMzwUMB8GA1UdIwQY MBaAFDLwR6NCEocrCx/4BO4CKwKvdf/tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTXZCSG8wSVNoeXNMSF9nRTdnSXJBcTkxXy0wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy9kZWU3ZTEtY2Y1MS00M2NiLWFkMzYt N2ZhZTA2NWI2NDZhLzEvTXZCSG8wSVNoeXNMSF9nRTdnSXJBcTkxXy0wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYy9kZWU3ZTEtY2Y1MS00M2NiLWFkMzYtN2ZhZTA2NWI2NDZh LzEvTXZCSG8wSVNoeXNMSF9nRTdnSXJBcTkxXy0wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXCwtLrpr 2ZXhAuBvdkPyEtQQ/metLBzEPoOz0a3hQXgsKOFwejiQMCAIR9HFTIh2MF01rEWg Xt3V59bP/lWxtAmSluvCb84706LlwycU9jJfpUd+hdXpI9ZZ+1lm4RBi926eAy7L UPuowmiu3EprzXP/FJDHMWNhoQeRdosQQldvpEKmQZxNXA63X1bSd9JeD5TxATeq SxZrEzTkVNRFvU1fU1RISmvUjGGrDENVpPcjb0iViLRJtrcSzti0X9kuh8A2R3nC ItZKYJdhswLKWb6RQFL1dQJNEnfdtaGzSwsIzjo838ZxFfieDvA+FFSCt7oZjh5L wUsYGM/XLytcJA== -----END CERTIFICATE-----Generated at Sun Dec 21 00:41:40 2025 by rpki-client