This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/69b08d-7c97-432f-b4bf-51e821d23141/1/MRRFNToII-2u8So6M1b6gJjhXqw.mft File: MRRFNToII-2u8So6M1b6gJjhXqw.mft (raw, json) Hash identifier: G+UZvXUdvBNhEbAFtb3mvxpbI9kUNwf0AXNY+MM5T2k= Subject key identifier: 86:CC:7A:A0:10:0C:C0:F6:CD:59:7E:68:22:0C:10:EC:73:09:A4:5F Authority key identifier: 31:14:45:35:3A:08:23:ED:AE:F1:2A:3A:33:56:FA:80:98:E1:5E:AC Certificate issuer: /CN=311445353a0823edaef12a3a3356fa8098e15eac Certificate serial: 019B2FD4FB20D05CF8F0D2B067E58CEF8D4B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MRRFNToII-2u8So6M1b6gJjhXqw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/69b08d-7c97-432f-b4bf-51e821d23141/1/MRRFNToII-2u8So6M1b6gJjhXqw.mft Manifest number: 0DFB Signing time: Thu 18 Dec 2025 05:00:45 +0000 Manifest this update: Thu 18 Dec 2025 05:00:45 +0000 Manifest next update: Fri 19 Dec 2025 05:00:45 +0000 Files and hashes: 1: MRRFNToII-2u8So6M1b6gJjhXqw.crl (hash: es+c+b5vxsVitpYiH4rgqYtpTe0gCvBQHPMLKOgg48o=) 2: Mv9wQiaEyUk3-XuVJoSinHpzB2g.roa (hash: ZIu/bU0ql4U4qIOYcI80NNWYWWCG67vptIw8Gwe6w3Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/69b08d-7c97-432f-b4bf-51e821d23141/1/MRRFNToII-2u8So6M1b6gJjhXqw.crl rsync://rpki.ripe.net/repository/DEFAULT/66/69b08d-7c97-432f-b4bf-51e821d23141/1/MRRFNToII-2u8So6M1b6gJjhXqw.mft rsync://rpki.ripe.net/repository/DEFAULT/MRRFNToII-2u8So6M1b6gJjhXqw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 05:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:d4:fb:20:d0:5c:f8:f0:d2:b0:67:e5:8c:ef:8d:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=311445353a0823edaef12a3a3356fa8098e15eac Validity Not Before: Dec 18 05:00:45 2025 GMT Not After : Dec 19 05:00:45 2025 GMT Subject: CN=86cc7aa0100cc0f6cd597e68220c10ec7309a45f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:34:57:b5:36:e0:76:ff:2f:a0:77:ba:6b:91: 76:fc:1e:a0:23:c2:93:c5:31:6f:aa:4b:c9:7e:21: b6:37:a4:f2:05:11:a1:aa:f6:5f:af:0b:9e:0e:53: a7:df:51:6c:0f:99:fb:ad:52:d5:ca:78:82:33:79: bb:4c:15:03:d8:d6:7a:03:24:f8:cb:f8:d2:bd:f7: 32:ad:8a:de:f6:35:37:f5:87:f8:d4:23:05:98:47: d3:9c:c8:12:61:9b:9c:46:34:02:90:97:d5:ce:83: 6f:77:5a:b4:1f:31:dc:12:5b:ce:90:20:25:6e:c1: fe:a9:9b:1f:84:d0:f8:4f:db:23:d3:c4:18:59:82: b0:e2:3e:fb:c7:09:8d:15:01:59:5e:9d:78:72:a4: 68:7d:3f:38:e6:ab:be:60:d0:0b:a0:f9:91:c9:f5: eb:01:a4:f7:0a:10:c2:c1:df:62:7d:f6:bb:a0:cc: 31:cc:28:89:2e:64:7e:66:8c:98:0c:d4:39:04:29: d5:71:c1:b0:f5:ef:a6:ac:63:a3:97:af:c5:0e:3f: b6:2d:11:25:54:5e:0f:6d:0c:a8:33:78:bf:27:40: c2:d7:fa:96:4f:7b:ba:3f:b3:7d:96:b1:e1:1f:38: ec:c9:d7:bd:b4:e8:95:b9:a5:9a:cf:c1:eb:4e:2d: 5d:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:CC:7A:A0:10:0C:C0:F6:CD:59:7E:68:22:0C:10:EC:73:09:A4:5F X509v3 Authority Key Identifier: keyid:31:14:45:35:3A:08:23:ED:AE:F1:2A:3A:33:56:FA:80:98:E1:5E:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MRRFNToII-2u8So6M1b6gJjhXqw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/69b08d-7c97-432f-b4bf-51e821d23141/1/MRRFNToII-2u8So6M1b6gJjhXqw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/69b08d-7c97-432f-b4bf-51e821d23141/1/MRRFNToII-2u8So6M1b6gJjhXqw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:04:cb:1b:c7:a3:2f:fd:82:c9:b1:1d:16:59:a7:45:34:fc: b0:02:89:e1:02:88:3d:9a:49:69:5a:10:5d:88:6f:82:b7:2d: 3b:89:48:17:9c:f1:e1:c1:97:e6:75:12:db:01:96:12:3c:ba: 1d:92:42:9d:66:ee:6e:cc:83:8f:62:9f:2e:82:6b:f2:14:56: 56:60:f5:44:a3:31:cd:f2:70:1f:5f:28:73:70:e6:1d:63:f8: d8:a4:38:79:de:fb:f9:9b:6a:d6:da:2d:1b:84:00:4d:01:dc: a0:b3:24:83:cb:47:34:7d:b6:a1:74:83:82:93:5a:24:b1:87: b6:c1:1d:9f:46:6d:e2:f7:ed:69:f5:52:64:ae:99:46:af:f7: 8b:ec:f9:c3:01:27:ab:ed:27:05:27:84:99:ca:2c:b2:b7:63: 8f:ef:77:fc:28:ac:42:5b:0f:ab:c7:2b:62:ef:13:9c:5f:fc: 96:9d:6c:cb:e0:84:fc:6b:7e:c2:a2:c2:65:4d:98:29:aa:5d: ab:f0:a2:95:a8:1e:d7:a7:90:8a:5e:75:6c:fd:42:cb:dc:bb: 8d:03:12:2b:dd:c7:3e:a5:e1:45:4c:64:26:4b:11:a4:6d:33: 78:f1:d8:00:d5:34:fe:04:aa:99:c9:26:ae:27:b7:85:6a:f1: 7d:d6:d8:23 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsv1Psg0Fz48NKwZ+WM741LMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxMTQ0NTM1M2EwODIzZWRhZWYxMmEzYTMzNTZmYTgwOThl MTVlYWMwHhcNMjUxMjE4MDUwMDQ1WhcNMjUxMjE5MDUwMDQ1WjAzMTEwLwYDVQQD Eyg4NmNjN2FhMDEwMGNjMGY2Y2Q1OTdlNjgyMjBjMTBlYzczMDlhNDVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkDRXtTbgdv8voHe6a5F2/B6gI8KT xTFvqkvJfiG2N6TyBRGhqvZfrwueDlOn31FsD5n7rVLVyniCM3m7TBUD2NZ6AyT4 y/jSvfcyrYre9jU39Yf41CMFmEfTnMgSYZucRjQCkJfVzoNvd1q0HzHcElvOkCAl bsH+qZsfhND4T9sj08QYWYKw4j77xwmNFQFZXp14cqRofT845qu+YNALoPmRyfXr AaT3ChDCwd9iffa7oMwxzCiJLmR+ZoyYDNQ5BCnVccGw9e+mrGOjl6/FDj+2LREl VF4PbQyoM3i/J0DC1/qWT3u6P7N9lrHhHzjsyde9tOiVuaWaz8HrTi1dAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIbMeqAQDMD2zVl+aCIMEOxzCaRfMB8GA1UdIwQY MBaAFDEURTU6CCPtrvEqOjNW+oCY4V6sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTVJSRk5Ub0lJLTJ1OFNvNk0xYjZnSmpoWHF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni82OWIwOGQtN2M5Ny00MzJmLWI0YmYt NTFlODIxZDIzMTQxLzEvTVJSRk5Ub0lJLTJ1OFNvNk0xYjZnSmpoWHF3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni82OWIwOGQtN2M5Ny00MzJmLWI0YmYtNTFlODIxZDIzMTQx LzEvTVJSRk5Ub0lJLTJ1OFNvNk0xYjZnSmpoWHF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMATLG8ej L/2CybEdFlmnRTT8sAKJ4QKIPZpJaVoQXYhvgrctO4lIF5zx4cGX5nUS2wGWEjy6 HZJCnWbubsyDj2KfLoJr8hRWVmD1RKMxzfJwH18oc3DmHWP42KQ4ed77+Ztq1tot G4QATQHcoLMkg8tHNH22oXSDgpNaJLGHtsEdn0Zt4vftafVSZK6ZRq/3i+z5wwEn q+0nBSeEmcossrdjj+93/CisQlsPq8crYu8TnF/8lp1sy+CE/Gt+wqLCZU2YKapd q/Cilage16eQil51bP1Cy9y7jQMSK93HPqXhRUxkJksRpG0zePHYANU0/gSqmckm rie3hWrxfdbYIw== -----END CERTIFICATE-----Generated at Thu Dec 18 14:34:11 2025 by rpki-client