This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/69b08d-7c97-432f-b4bf-51e821d23141/1/MRRFNToII-2u8So6M1b6gJjhXqw.mft File: MRRFNToII-2u8So6M1b6gJjhXqw.mft (raw, json) Hash identifier: Lnhzm3kbH3m1zzN3AdZN/HAABjKoeWrj3VFI7NU+rBk= Subject key identifier: C0:83:B3:03:35:81:34:3E:A8:5E:2C:D5:B4:26:B0:A3:33:24:0F:53 Authority key identifier: 31:14:45:35:3A:08:23:ED:AE:F1:2A:3A:33:56:FA:80:98:E1:5E:AC Certificate issuer: /CN=311445353a0823edaef12a3a3356fa8098e15eac Certificate serial: 019B5486723AAEF846E138367487E6C0D54C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MRRFNToII-2u8So6M1b6gJjhXqw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/69b08d-7c97-432f-b4bf-51e821d23141/1/MRRFNToII-2u8So6M1b6gJjhXqw.mft Manifest number: 0E0E Signing time: Thu 25 Dec 2025 08:00:55 +0000 Manifest this update: Thu 25 Dec 2025 08:00:55 +0000 Manifest next update: Fri 26 Dec 2025 08:00:55 +0000 Files and hashes: 1: MRRFNToII-2u8So6M1b6gJjhXqw.crl (hash: JG71IpOSo5OXxC4PhdPVmwIY5jQ5ayejY1UdOHM/JEc=) 2: Mv9wQiaEyUk3-XuVJoSinHpzB2g.roa (hash: ZIu/bU0ql4U4qIOYcI80NNWYWWCG67vptIw8Gwe6w3Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/69b08d-7c97-432f-b4bf-51e821d23141/1/MRRFNToII-2u8So6M1b6gJjhXqw.crl rsync://rpki.ripe.net/repository/DEFAULT/66/69b08d-7c97-432f-b4bf-51e821d23141/1/MRRFNToII-2u8So6M1b6gJjhXqw.mft rsync://rpki.ripe.net/repository/DEFAULT/MRRFNToII-2u8So6M1b6gJjhXqw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 08:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:54:86:72:3a:ae:f8:46:e1:38:36:74:87:e6:c0:d5:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=311445353a0823edaef12a3a3356fa8098e15eac Validity Not Before: Dec 25 08:00:55 2025 GMT Not After : Dec 26 08:00:55 2025 GMT Subject: CN=c083b3033581343ea85e2cd5b426b0a333240f53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:d7:9f:55:bb:a9:d0:ea:5e:b7:92:7d:d2:10: e2:76:d8:d4:4f:2e:1e:2e:15:6b:96:e3:29:11:70: fb:32:8b:4e:f4:c2:fc:5d:88:1a:10:88:73:cc:8f: 9c:d4:fa:d9:fc:f4:fd:24:41:14:67:ac:a7:33:28: 01:37:29:fe:a5:af:ba:47:a3:fd:f2:3f:4d:f3:2c: 49:0f:4d:b4:d2:41:5a:93:4b:57:0b:47:c8:42:ab: 05:e3:85:ad:92:a6:11:cd:28:72:00:a9:93:6c:f8: 35:5f:0e:2b:73:04:58:9d:c9:92:ee:11:09:52:e7: e9:92:5c:b4:a5:04:ce:25:95:9c:73:9e:c6:b7:d3: 23:13:bf:59:ba:00:9d:be:3b:1e:f9:22:94:98:d7: e5:e9:97:92:7a:8a:2f:ec:73:2f:08:28:2d:0c:a7: 9c:b4:18:e5:19:eb:77:5d:31:32:71:83:01:52:46: 82:9b:69:8d:18:32:27:06:41:d1:cd:03:45:8b:74: a4:94:72:bf:13:ec:57:ee:dd:a5:3a:34:57:6c:9a: b1:6c:f4:16:0e:a0:8b:03:7a:bd:83:6b:3e:38:92: 19:fa:5f:ed:53:1a:0c:bb:de:eb:4b:d2:e9:7f:73: 7e:39:a8:37:72:1c:59:51:b3:e2:8c:3b:41:e9:10: 3b:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:83:B3:03:35:81:34:3E:A8:5E:2C:D5:B4:26:B0:A3:33:24:0F:53 X509v3 Authority Key Identifier: keyid:31:14:45:35:3A:08:23:ED:AE:F1:2A:3A:33:56:FA:80:98:E1:5E:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MRRFNToII-2u8So6M1b6gJjhXqw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/69b08d-7c97-432f-b4bf-51e821d23141/1/MRRFNToII-2u8So6M1b6gJjhXqw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/69b08d-7c97-432f-b4bf-51e821d23141/1/MRRFNToII-2u8So6M1b6gJjhXqw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:73:7a:df:3b:f0:c5:fc:cd:2b:f7:ef:f5:7c:f1:e2:4c:01: 0a:6e:dc:d2:33:1e:7b:0f:4e:d6:38:a3:95:51:68:5f:eb:49: a9:02:87:f9:fc:56:67:1a:52:c8:a6:ff:e0:20:4d:52:68:75: 24:e6:b0:c5:a1:81:33:a6:dc:43:7f:25:3f:dc:1f:2d:f1:91: a7:f6:40:26:59:58:74:07:83:40:af:4b:b7:7a:9a:69:d9:83: d2:6f:83:b2:a0:15:7c:5c:db:cb:36:0c:72:a5:f0:bc:56:4e: 86:a2:d4:a7:6b:eb:8d:fe:db:aa:a9:bc:e7:7f:02:0e:a2:c8: 17:43:76:e3:a1:5f:d0:43:a3:a9:5b:5d:d6:ee:55:26:cb:43: ea:bd:2b:21:22:c5:20:b0:55:28:5c:f7:93:ca:73:9f:9f:f3: b1:3f:7c:5e:cb:5b:c0:c8:91:6c:44:3b:5f:1e:10:86:a0:3c: 1a:44:da:3d:c4:ee:d8:64:c0:07:3c:df:3c:92:0c:38:bb:f6: 39:5f:ce:23:2a:1d:c7:28:b9:2e:72:6c:94:c6:21:80:24:c8: 69:fc:55:85:bb:b7:fa:42:c7:6d:07:ad:f8:e0:0c:bb:2b:9d: 33:19:11:2f:5d:6f:dd:e9:82:96:64:4c:fd:e4:5d:87:48:6b: d3:c7:d5:90 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtUhnI6rvhG4Tg2dIfmwNVMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxMTQ0NTM1M2EwODIzZWRhZWYxMmEzYTMzNTZmYTgwOThl MTVlYWMwHhcNMjUxMjI1MDgwMDU1WhcNMjUxMjI2MDgwMDU1WjAzMTEwLwYDVQQD EyhjMDgzYjMwMzM1ODEzNDNlYTg1ZTJjZDViNDI2YjBhMzMzMjQwZjUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAudefVbup0Opet5J90hDidtjUTy4e LhVrluMpEXD7MotO9ML8XYgaEIhzzI+c1PrZ/PT9JEEUZ6ynMygBNyn+pa+6R6P9 8j9N8yxJD0200kFak0tXC0fIQqsF44WtkqYRzShyAKmTbPg1Xw4rcwRYncmS7hEJ Uufpkly0pQTOJZWcc57Gt9MjE79ZugCdvjse+SKUmNfl6ZeSeoov7HMvCCgtDKec tBjlGet3XTEycYMBUkaCm2mNGDInBkHRzQNFi3SklHK/E+xX7t2lOjRXbJqxbPQW DqCLA3q9g2s+OJIZ+l/tUxoMu97rS9Lpf3N+Oag3chxZUbPijDtB6RA7hQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMCDswM1gTQ+qF4s1bQmsKMzJA9TMB8GA1UdIwQY MBaAFDEURTU6CCPtrvEqOjNW+oCY4V6sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTVJSRk5Ub0lJLTJ1OFNvNk0xYjZnSmpoWHF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni82OWIwOGQtN2M5Ny00MzJmLWI0YmYt NTFlODIxZDIzMTQxLzEvTVJSRk5Ub0lJLTJ1OFNvNk0xYjZnSmpoWHF3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni82OWIwOGQtN2M5Ny00MzJmLWI0YmYtNTFlODIxZDIzMTQx LzEvTVJSRk5Ub0lJLTJ1OFNvNk0xYjZnSmpoWHF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIHN63zvw xfzNK/fv9Xzx4kwBCm7c0jMeew9O1jijlVFoX+tJqQKH+fxWZxpSyKb/4CBNUmh1 JOawxaGBM6bcQ38lP9wfLfGRp/ZAJllYdAeDQK9Lt3qaadmD0m+DsqAVfFzbyzYM cqXwvFZOhqLUp2vrjf7bqqm8538CDqLIF0N246Ff0EOjqVtd1u5VJstD6r0rISLF ILBVKFz3k8pzn5/zsT98XstbwMiRbEQ7Xx4QhqA8GkTaPcTu2GTABzzfPJIMOLv2 OV/OIyodxyi5LnJslMYhgCTIafxVhbu3+kLHbQet+OAMuyudMxkRL11v3emClmRM /eRdh0hr08fVkA== -----END CERTIFICATE-----Generated at Thu Dec 25 14:32:47 2025 by rpki-client