This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/a4cb95-9127-4869-8f90-9e4e46f60a68/1/MvrPXQJzAmjTsedslrD4WI2Zi08.mft File: MvrPXQJzAmjTsedslrD4WI2Zi08.mft (raw, json) Hash identifier: 8gvbY2c7MIi+qtysNL+GYTUL7MqikRUOEwI3eFaMMYY= Subject key identifier: 43:B5:6B:9C:ED:BF:B7:27:93:2D:20:F9:5D:74:A2:9A:7B:CF:F0:FC Authority key identifier: 32:FA:CF:5D:02:73:02:68:D3:B1:E7:6C:96:B0:F8:58:8D:99:8B:4F Certificate issuer: /CN=32facf5d02730268d3b1e76c96b0f8588d998b4f Certificate serial: 019B3AC6A10F5DC90FB604447CAAE0C7B782 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MvrPXQJzAmjTsedslrD4WI2Zi08.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/a4cb95-9127-4869-8f90-9e4e46f60a68/1/MvrPXQJzAmjTsedslrD4WI2Zi08.mft Manifest number: 14D6 Signing time: Sat 20 Dec 2025 08:00:54 +0000 Manifest this update: Sat 20 Dec 2025 08:00:54 +0000 Manifest next update: Sun 21 Dec 2025 08:00:54 +0000 Files and hashes: 1: MvrPXQJzAmjTsedslrD4WI2Zi08.crl (hash: NhwEE+vQaRZFMSRAQKnzfeoCFIq0iBZzc8bhpBpuj+s=) 2: kZhmU11AcLMU9j0H5R4zLY4tMkU.roa (hash: 4zjf1YfmBA/3a2ksRPti6rOa+1AdjV5zlhfDUSPHUS4=) 3: macgBtbCg5Mxhslrz0OHJiQKlew.roa (hash: GBS8E51Gp7YKQrT0Z2MAz5xnX4MGpebSlxO7yoAgVFo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/a4cb95-9127-4869-8f90-9e4e46f60a68/1/MvrPXQJzAmjTsedslrD4WI2Zi08.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/a4cb95-9127-4869-8f90-9e4e46f60a68/1/MvrPXQJzAmjTsedslrD4WI2Zi08.mft rsync://rpki.ripe.net/repository/DEFAULT/MvrPXQJzAmjTsedslrD4WI2Zi08.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 08:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:c6:a1:0f:5d:c9:0f:b6:04:44:7c:aa:e0:c7:b7:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32facf5d02730268d3b1e76c96b0f8588d998b4f Validity Not Before: Dec 20 08:00:54 2025 GMT Not After : Dec 21 08:00:54 2025 GMT Subject: CN=43b56b9cedbfb727932d20f95d74a29a7bcff0fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:b9:ca:0d:a2:74:6b:7b:13:31:40:d2:5a:8d: d4:29:d6:d5:01:6c:3d:75:85:0d:4a:cc:84:83:04: 70:a4:2e:ad:07:d4:05:d1:d2:7c:2b:bc:3c:8f:6f: 41:e4:62:ac:9e:75:b4:44:d9:4b:f0:a4:2d:1f:34: a2:bf:fb:ec:ef:2d:a7:c6:42:f7:f9:6d:45:78:ef: a7:44:2d:33:c5:1c:d6:f0:88:7f:50:24:85:3b:91: 33:31:20:e2:c3:1b:02:b7:5e:fd:d4:20:e1:38:53: 47:a3:25:23:12:9a:41:d3:de:a9:a2:83:0a:99:41: e5:59:20:0a:be:15:1f:f6:c8:5b:21:08:5b:e9:96: 39:39:9a:96:4c:54:77:f0:5d:a8:d9:ce:63:d7:aa: c3:21:a9:17:62:08:cd:87:56:68:be:9f:60:c7:9d: 7d:8d:d3:09:db:70:2b:25:c4:8c:82:4c:a4:c6:b8: 54:b1:da:a0:80:3a:e2:c5:ec:93:70:55:2a:f7:e8: 88:97:60:ae:c7:3f:eb:d7:78:aa:b5:9e:e7:12:e1: 25:bc:78:99:73:bf:f6:d8:81:19:1f:90:32:54:30: 7f:c5:98:9e:cb:6f:c1:86:63:27:ba:a8:25:0d:8d: 2c:5b:39:c7:e1:24:15:ff:df:1f:bf:e9:a5:fd:ba: 9d:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:B5:6B:9C:ED:BF:B7:27:93:2D:20:F9:5D:74:A2:9A:7B:CF:F0:FC X509v3 Authority Key Identifier: keyid:32:FA:CF:5D:02:73:02:68:D3:B1:E7:6C:96:B0:F8:58:8D:99:8B:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MvrPXQJzAmjTsedslrD4WI2Zi08.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a4cb95-9127-4869-8f90-9e4e46f60a68/1/MvrPXQJzAmjTsedslrD4WI2Zi08.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a4cb95-9127-4869-8f90-9e4e46f60a68/1/MvrPXQJzAmjTsedslrD4WI2Zi08.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:35:7e:fc:f5:fc:4e:c9:08:41:c6:ae:12:a8:d1:8b:d3:7c: f6:6d:58:fd:16:67:75:0d:9d:a2:f1:31:ee:27:24:a8:2e:47: 17:c3:08:e2:ec:5d:73:e6:04:9d:ff:a1:1a:a1:dc:46:b7:11: dd:50:b9:d0:80:62:c0:84:89:3b:e6:e7:51:3b:7b:71:f9:a9: d3:eb:25:47:58:1a:0d:ca:e0:c8:bc:18:01:28:09:f3:7e:c9: 83:35:27:40:26:1d:94:f1:b8:e4:24:a0:ea:18:24:1c:d9:e4: e7:95:10:07:fe:82:de:f2:76:e4:c4:72:da:a4:a4:9f:c5:6c: fc:91:b4:c6:05:0b:1d:6f:88:85:55:ee:b9:26:21:c0:6c:25: 85:2e:97:08:45:b1:69:c4:cd:05:5d:33:37:f1:3a:87:f1:29: 88:50:6c:1e:ca:83:c0:09:ac:01:c6:e6:29:33:2d:d0:12:8f: f8:7b:83:f7:cd:81:1c:b7:8d:23:aa:c7:ba:05:b3:a5:33:75: c8:90:fa:c0:af:85:90:e7:05:b1:af:57:2a:de:f6:ea:d5:64: 79:45:dc:86:2e:81:9a:1b:c8:52:8d:ec:25:cb:4d:74:0c:42: 6e:27:45:dd:19:b6:f4:0e:a9:dd:8f:c3:27:5e:d3:dc:04:36: 7e:89:8e:c6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6xqEPXckPtgREfKrgx7eCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyZmFjZjVkMDI3MzAyNjhkM2IxZTc2Yzk2YjBmODU4OGQ5 OThiNGYwHhcNMjUxMjIwMDgwMDU0WhcNMjUxMjIxMDgwMDU0WjAzMTEwLwYDVQQD Eyg0M2I1NmI5Y2VkYmZiNzI3OTMyZDIwZjk1ZDc0YTI5YTdiY2ZmMGZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAprnKDaJ0a3sTMUDSWo3UKdbVAWw9 dYUNSsyEgwRwpC6tB9QF0dJ8K7w8j29B5GKsnnW0RNlL8KQtHzSiv/vs7y2nxkL3 +W1FeO+nRC0zxRzW8Ih/UCSFO5EzMSDiwxsCt1791CDhOFNHoyUjEppB096pooMK mUHlWSAKvhUf9shbIQhb6ZY5OZqWTFR38F2o2c5j16rDIakXYgjNh1Zovp9gx519 jdMJ23ArJcSMgkykxrhUsdqggDrixeyTcFUq9+iIl2Cuxz/r13iqtZ7nEuElvHiZ c7/22IEZH5AyVDB/xZiey2/BhmMnuqglDY0sWznH4SQV/98fv+ml/bqdXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEO1a5ztv7cnky0g+V10opp7z/D8MB8GA1UdIwQY MBaAFDL6z10CcwJo07HnbJaw+FiNmYtPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTXZyUFhRSnpBbWpUc2Vkc2xyRDRXSTJaaTA4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9hNGNiOTUtOTEyNy00ODY5LThmOTAt OWU0ZTQ2ZjYwYTY4LzEvTXZyUFhRSnpBbWpUc2Vkc2xyRDRXSTJaaTA4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS9hNGNiOTUtOTEyNy00ODY5LThmOTAtOWU0ZTQ2ZjYwYTY4 LzEvTXZyUFhRSnpBbWpUc2Vkc2xyRDRXSTJaaTA4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACTV+/PX8 TskIQcauEqjRi9N89m1Y/RZndQ2dovEx7ickqC5HF8MI4uxdc+YEnf+hGqHcRrcR 3VC50IBiwISJO+bnUTt7cfmp0+slR1gaDcrgyLwYASgJ837JgzUnQCYdlPG45CSg 6hgkHNnk55UQB/6C3vJ25MRy2qSkn8Vs/JG0xgULHW+IhVXuuSYhwGwlhS6XCEWx acTNBV0zN/E6h/EpiFBsHsqDwAmsAcbmKTMt0BKP+HuD982BHLeNI6rHugWzpTN1 yJD6wK+FkOcFsa9XKt726tVkeUXchi6BmhvIUo3sJctNdAxCbidF3Rm29A6p3Y/D J17T3AQ2fomOxg== -----END CERTIFICATE-----Generated at Sat Dec 20 18:23:26 2025 by rpki-client