This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/7605ec-6f34-4589-9237-f80a48ad0a2c/1/mwVP7CVdDNxro6uparJgNmMnLbM.mft File: mwVP7CVdDNxro6uparJgNmMnLbM.mft (raw, json) Hash identifier: DSXjldCby9xqtrZSHKJIMR+1pKIkLsRvhxgrSD7SlhQ= Subject key identifier: C4:9E:0D:1A:F1:7A:1B:A2:CE:23:07:A8:8F:EB:79:7F:FA:0C:4C:6B Authority key identifier: 9B:05:4F:EC:25:5D:0C:DC:6B:A3:AB:A9:6A:B2:60:36:63:27:2D:B3 Certificate issuer: /CN=9b054fec255d0cdc6ba3aba96ab2603663272db3 Certificate serial: 019B668C937872D1444893FA61F7C9F5D58B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mwVP7CVdDNxro6uparJgNmMnLbM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/7605ec-6f34-4589-9237-f80a48ad0a2c/1/mwVP7CVdDNxro6uparJgNmMnLbM.mft Manifest number: 07F0 Signing time: Sun 28 Dec 2025 20:00:47 +0000 Manifest this update: Sun 28 Dec 2025 20:00:47 +0000 Manifest next update: Mon 29 Dec 2025 20:00:47 +0000 Files and hashes: 1: 8miC2Rsp1615SXSK8OmrRssi2ZE.roa (hash: nGqL5IRvbvXVDb+f+fbwv68gM09CPTOSXIrZUMH3uqU=) 2: mwVP7CVdDNxro6uparJgNmMnLbM.crl (hash: wG01Uuqw5xkwlTC1tFGkc+62KtPdVbHuksp+4hzr/Tk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/7605ec-6f34-4589-9237-f80a48ad0a2c/1/mwVP7CVdDNxro6uparJgNmMnLbM.crl rsync://rpki.ripe.net/repository/DEFAULT/a1/7605ec-6f34-4589-9237-f80a48ad0a2c/1/mwVP7CVdDNxro6uparJgNmMnLbM.mft rsync://rpki.ripe.net/repository/DEFAULT/mwVP7CVdDNxro6uparJgNmMnLbM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 20:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:66:8c:93:78:72:d1:44:48:93:fa:61:f7:c9:f5:d5:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9b054fec255d0cdc6ba3aba96ab2603663272db3 Validity Not Before: Dec 28 20:00:47 2025 GMT Not After : Dec 29 20:00:47 2025 GMT Subject: CN=c49e0d1af17a1ba2ce2307a88feb797ffa0c4c6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:13:48:5c:d6:bb:aa:6c:7f:21:61:3e:81:06: e2:ff:d5:8d:a0:8d:08:c4:fc:56:c6:21:11:75:d0: 45:b5:72:bb:9e:eb:1d:29:78:d2:0d:e0:9e:67:57: 77:a3:9a:7f:dd:ca:0e:b5:01:25:d8:08:f8:3e:16: 06:89:d2:d9:0b:da:12:69:25:a9:5c:5e:5c:a4:4b: da:41:35:15:d5:e2:aa:6e:a3:af:42:c5:ab:c4:4c: a0:a9:c9:b4:11:26:8a:24:3d:5f:50:16:88:21:24: 1c:17:b3:05:ae:4e:9f:9d:70:c4:44:35:b0:c1:85: 0e:ce:e3:1c:f7:84:d4:ff:32:c4:55:0c:d1:5f:ec: 3b:ce:36:24:64:3c:b4:65:4d:13:35:9c:26:8a:5e: 64:8b:06:ee:3b:bc:ce:36:2c:00:f4:39:9c:af:63: 93:1d:4c:0c:ac:75:da:a7:81:fb:cc:b7:e1:5a:b0: 36:ab:d1:9b:fa:69:b7:1b:d7:84:b4:8a:d8:36:75: 37:9e:34:63:51:fb:33:dc:d9:11:79:0b:4b:46:21: 7c:ae:db:d6:8f:36:aa:44:e7:94:af:82:de:75:33: e6:e0:cd:c8:a8:fc:63:a2:fa:50:6c:e2:bb:59:7f: a0:65:ba:5d:0d:cb:d7:2b:b6:71:ca:73:cb:24:50: 89:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:9E:0D:1A:F1:7A:1B:A2:CE:23:07:A8:8F:EB:79:7F:FA:0C:4C:6B X509v3 Authority Key Identifier: keyid:9B:05:4F:EC:25:5D:0C:DC:6B:A3:AB:A9:6A:B2:60:36:63:27:2D:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mwVP7CVdDNxro6uparJgNmMnLbM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/7605ec-6f34-4589-9237-f80a48ad0a2c/1/mwVP7CVdDNxro6uparJgNmMnLbM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/7605ec-6f34-4589-9237-f80a48ad0a2c/1/mwVP7CVdDNxro6uparJgNmMnLbM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:a2:29:e9:fc:76:9f:29:31:5a:e9:25:2a:47:48:97:d4:6b: f7:41:8a:c6:b9:32:7c:00:06:59:01:1b:e5:e8:41:c4:b2:42: b0:8c:b6:e7:74:90:b9:25:61:82:b4:27:97:5d:06:9a:34:ef: 46:b7:56:55:7b:14:de:42:70:51:18:dc:c8:67:f8:9a:af:e4: 62:28:c7:05:39:68:26:e3:65:2f:74:a7:e7:4c:d9:76:69:96: 7d:fe:fe:5b:e3:b8:57:52:ef:90:1f:94:d0:cd:d4:32:a1:86: 62:99:d8:29:3d:47:02:d3:ec:b5:a3:a3:18:92:35:6a:59:33: 3f:b9:c6:15:c6:3f:d9:ad:ae:a0:97:6c:e2:e9:0f:53:23:1a: 87:d8:a4:bd:75:80:ba:cd:05:cd:d6:f3:0e:c0:c7:77:15:47: 06:f6:d2:07:19:5c:8a:14:4d:69:3f:bb:ca:52:e0:b2:64:1a: 84:7d:0b:2f:4d:22:2e:ae:1b:3a:fb:21:69:a1:46:1c:fb:77: 4b:16:f9:dd:ee:b0:fc:83:ad:1e:88:7d:7b:ea:e1:3f:d9:12: 81:e1:21:bd:ca:f1:37:bf:61:55:26:64:9b:0e:87:1f:5e:2d: 75:11:e7:99:5f:f8:06:0e:fa:00:4f:45:32:5f:ad:5e:ec:23: ed:eb:2b:5b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtmjJN4ctFESJP6YffJ9dWLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDliMDU0ZmVjMjU1ZDBjZGM2YmEzYWJhOTZhYjI2MDM2NjMy NzJkYjMwHhcNMjUxMjI4MjAwMDQ3WhcNMjUxMjI5MjAwMDQ3WjAzMTEwLwYDVQQD EyhjNDllMGQxYWYxN2ExYmEyY2UyMzA3YTg4ZmViNzk3ZmZhMGM0YzZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtRNIXNa7qmx/IWE+gQbi/9WNoI0I xPxWxiERddBFtXK7nusdKXjSDeCeZ1d3o5p/3coOtQEl2Aj4PhYGidLZC9oSaSWp XF5cpEvaQTUV1eKqbqOvQsWrxEygqcm0ESaKJD1fUBaIISQcF7MFrk6fnXDERDWw wYUOzuMc94TU/zLEVQzRX+w7zjYkZDy0ZU0TNZwmil5kiwbuO7zONiwA9Dmcr2OT HUwMrHXap4H7zLfhWrA2q9Gb+mm3G9eEtIrYNnU3njRjUfsz3NkReQtLRiF8rtvW jzaqROeUr4LedTPm4M3IqPxjovpQbOK7WX+gZbpdDcvXK7ZxynPLJFCJ0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMSeDRrxehuiziMHqI/reX/6DExrMB8GA1UdIwQY MBaAFJsFT+wlXQzca6OrqWqyYDZjJy2zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbXdWUDdDVmRETnhybzZ1cGFySmdObU1uTGJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS83NjA1ZWMtNmYzNC00NTg5LTkyMzct ZjgwYTQ4YWQwYTJjLzEvbXdWUDdDVmRETnhybzZ1cGFySmdObU1uTGJNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMS83NjA1ZWMtNmYzNC00NTg5LTkyMzctZjgwYTQ4YWQwYTJj LzEvbXdWUDdDVmRETnhybzZ1cGFySmdObU1uTGJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAraIp6fx2 nykxWuklKkdIl9Rr90GKxrkyfAAGWQEb5ehBxLJCsIy253SQuSVhgrQnl10GmjTv RrdWVXsU3kJwURjcyGf4mq/kYijHBTloJuNlL3Sn50zZdmmWff7+W+O4V1LvkB+U 0M3UMqGGYpnYKT1HAtPstaOjGJI1alkzP7nGFcY/2a2uoJds4ukPUyMah9ikvXWA us0FzdbzDsDHdxVHBvbSBxlcihRNaT+7ylLgsmQahH0LL00iLq4bOvshaaFGHPt3 Sxb53e6w/IOtHoh9e+rhP9kSgeEhvcrxN79hVSZkmw6HH14tdRHnmV/4Bg76AE9F Ml+tXuwj7esrWw== -----END CERTIFICATE-----Generated at Sun Dec 28 23:27:47 2025 by rpki-client