This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/149cf6-611d-4e03-a660-dce1127ab223/1/cMvrOI9ZAsFhYLvtCWLLYisruDI.mft File: cMvrOI9ZAsFhYLvtCWLLYisruDI.mft (raw, json) Hash identifier: xMzJz2IBo0pupEE+n19Q1rVwGjpV5CQyMeFkwHTBXJk= Subject key identifier: 9B:66:3A:AD:A3:62:B4:01:B3:AB:99:3E:AE:3B:65:35:2C:0D:67:41 Authority key identifier: 70:CB:EB:38:8F:59:02:C1:61:60:BB:ED:09:62:CB:62:2B:2B:B8:32 Certificate issuer: /CN=70cbeb388f5902c16160bbed0962cb622b2bb832 Certificate serial: 019B41371A650990CF5A33FD380B0C57A549 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cMvrOI9ZAsFhYLvtCWLLYisruDI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/149cf6-611d-4e03-a660-dce1127ab223/1/cMvrOI9ZAsFhYLvtCWLLYisruDI.mft Manifest number: 0D9F Signing time: Sun 21 Dec 2025 14:01:28 +0000 Manifest this update: Sun 21 Dec 2025 14:01:28 +0000 Manifest next update: Mon 22 Dec 2025 14:01:28 +0000 Files and hashes: 1: Jx2nTRr5pEsEFWo_5nDYJEdIJkI.roa (hash: 5SCIBFwRcqmCVA4jK7ObW5hmOVN8QwAIditbrQHD6YU=) 2: cMvrOI9ZAsFhYLvtCWLLYisruDI.crl (hash: whNNuVVLNiEFfr9nMWajUaffESBGivcVqMfOEqC0B1k=) 3: fVZny3FRspGg7D4Ss3AUbX0JyBI.roa (hash: SocyXocZHSo8f5zsAWiffJrBZyiPOdy55HQXZcolvh4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/149cf6-611d-4e03-a660-dce1127ab223/1/cMvrOI9ZAsFhYLvtCWLLYisruDI.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/149cf6-611d-4e03-a660-dce1127ab223/1/cMvrOI9ZAsFhYLvtCWLLYisruDI.mft rsync://rpki.ripe.net/repository/DEFAULT/cMvrOI9ZAsFhYLvtCWLLYisruDI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:37:1a:65:09:90:cf:5a:33:fd:38:0b:0c:57:a5:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70cbeb388f5902c16160bbed0962cb622b2bb832 Validity Not Before: Dec 21 14:01:28 2025 GMT Not After : Dec 22 14:01:28 2025 GMT Subject: CN=9b663aada362b401b3ab993eae3b65352c0d6741 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:8b:03:c3:db:90:78:98:b0:88:3e:d7:af:2d: c4:10:ae:7d:fd:6c:6f:fe:01:42:ab:f7:4f:ab:07: 02:0b:29:af:37:7f:9a:73:99:6b:3d:30:d4:78:66: 10:59:0e:d6:f0:8d:6e:2b:0e:0c:df:63:5f:35:a1: 60:ec:66:d8:86:b4:da:d6:8c:8b:bf:1a:83:33:3e: 9d:34:e5:3c:46:35:d7:dd:f7:7e:4d:9b:c1:90:88: 76:d9:2c:b6:44:6b:05:6a:cf:4b:d1:db:66:27:20: 72:c0:ec:df:92:c5:26:6b:17:fe:7b:ea:54:b7:fe: 3b:6c:81:38:35:3e:0b:63:b0:80:8a:1d:0d:a2:38: 1c:85:5d:04:b8:19:70:ed:86:a7:f1:1e:f4:00:9d: 9c:76:12:6f:fd:3b:84:3b:52:c4:72:08:48:7b:cb: 87:2e:01:76:36:84:88:67:61:76:61:a2:22:ca:15: 1a:1f:2b:46:74:e1:61:f1:70:22:f5:92:01:f4:25: 7b:d0:de:63:2c:25:29:d1:ab:5e:67:45:f4:8d:38: 15:91:b6:2d:65:68:c0:47:e2:de:65:cd:8c:2f:3b: e3:1c:77:36:bd:0f:e9:27:11:d0:ef:49:a4:81:6e: 88:20:10:12:2f:05:3c:af:1f:7a:f6:f7:41:f0:67: bb:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:66:3A:AD:A3:62:B4:01:B3:AB:99:3E:AE:3B:65:35:2C:0D:67:41 X509v3 Authority Key Identifier: keyid:70:CB:EB:38:8F:59:02:C1:61:60:BB:ED:09:62:CB:62:2B:2B:B8:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMvrOI9ZAsFhYLvtCWLLYisruDI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/149cf6-611d-4e03-a660-dce1127ab223/1/cMvrOI9ZAsFhYLvtCWLLYisruDI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/149cf6-611d-4e03-a660-dce1127ab223/1/cMvrOI9ZAsFhYLvtCWLLYisruDI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:54:a3:41:34:eb:71:69:19:c9:a2:47:61:51:a2:ea:49:15: 3c:ab:e8:1e:83:09:50:7e:b1:f2:b7:f1:f1:9c:ea:94:fe:ab: 1d:bf:1d:e5:9e:6d:e7:4f:f1:95:78:f9:b1:22:6c:fc:bc:5d: 23:ac:6f:cb:73:69:6e:57:85:aa:de:06:d7:8a:d5:8a:77:40: b1:d7:f0:24:8d:3b:58:3e:0d:6b:2a:a3:41:9b:b3:ef:a1:9e: b1:46:27:d0:41:77:83:61:c5:a0:d4:b4:2a:86:e1:cf:77:a5: de:d5:7c:6d:63:14:a2:39:0c:15:49:45:15:4c:a7:be:d1:92: 3f:36:f4:9f:e1:dd:3a:45:10:1a:47:da:3f:30:b4:40:f9:ee: 0b:24:e3:83:35:5b:2b:b1:7e:f7:00:48:f3:12:9c:bc:04:9b: 2c:f5:48:f8:a1:e9:36:11:4e:99:65:8f:9d:78:ae:b3:40:be: 4c:30:44:aa:dc:62:22:0b:3b:23:d1:f4:2b:f9:e2:05:4c:ad: 08:ff:11:13:e3:83:f9:a4:6b:3b:a1:83:d7:23:06:60:1e:eb: 43:42:f1:0c:3a:e7:91:e5:75:7b:f1:b3:d8:85:a2:f0:31:6a: e2:1b:ff:f0:65:b5:cf:a6:d2:f2:c4:95:19:9a:ef:c6:f8:f5: f7:42:fa:c4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtBNxplCZDPWjP9OAsMV6VJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwY2JlYjM4OGY1OTAyYzE2MTYwYmJlZDA5NjJjYjYyMmIy YmI4MzIwHhcNMjUxMjIxMTQwMTI4WhcNMjUxMjIyMTQwMTI4WjAzMTEwLwYDVQQD Eyg5YjY2M2FhZGEzNjJiNDAxYjNhYjk5M2VhZTNiNjUzNTJjMGQ2NzQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp4sDw9uQeJiwiD7Xry3EEK59/Wxv /gFCq/dPqwcCCymvN3+ac5lrPTDUeGYQWQ7W8I1uKw4M32NfNaFg7GbYhrTa1oyL vxqDMz6dNOU8RjXX3fd+TZvBkIh22Sy2RGsFas9L0dtmJyBywOzfksUmaxf+e+pU t/47bIE4NT4LY7CAih0NojgchV0EuBlw7Yan8R70AJ2cdhJv/TuEO1LEcghIe8uH LgF2NoSIZ2F2YaIiyhUaHytGdOFh8XAi9ZIB9CV70N5jLCUp0ateZ0X0jTgVkbYt ZWjAR+LeZc2MLzvjHHc2vQ/pJxHQ70mkgW6IIBASLwU8rx969vdB8Ge7TwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJtmOq2jYrQBs6uZPq47ZTUsDWdBMB8GA1UdIwQY MBaAFHDL6ziPWQLBYWC77Qliy2IrK7gyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY012ck9JOVpBc0ZoWUx2dENXTExZaXNydURJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS8xNDljZjYtNjExZC00ZTAzLWE2NjAt ZGNlMTEyN2FiMjIzLzEvY012ck9JOVpBc0ZoWUx2dENXTExZaXNydURJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS8xNDljZjYtNjExZC00ZTAzLWE2NjAtZGNlMTEyN2FiMjIz LzEvY012ck9JOVpBc0ZoWUx2dENXTExZaXNydURJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUVSjQTTr cWkZyaJHYVGi6kkVPKvoHoMJUH6x8rfx8ZzqlP6rHb8d5Z5t50/xlXj5sSJs/Lxd I6xvy3NpbleFqt4G14rVindAsdfwJI07WD4NayqjQZuz76GesUYn0EF3g2HFoNS0 Kobhz3el3tV8bWMUojkMFUlFFUynvtGSPzb0n+HdOkUQGkfaPzC0QPnuCyTjgzVb K7F+9wBI8xKcvASbLPVI+KHpNhFOmWWPnXius0C+TDBEqtxiIgs7I9H0K/niBUyt CP8RE+OD+aRrO6GD1yMGYB7rQ0LxDDrnkeV1e/Gz2IWi8DFq4hv/8GW1z6bS8sSV GZrvxvj190L6xA== -----END CERTIFICATE-----Generated at Sun Dec 21 15:51:25 2025 by rpki-client