This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/bc1828-3536-4d0f-952b-9d27091784cc/1/MvG4X6XeV6X-Ej3jqQXzyzariv4.mft File: MvG4X6XeV6X-Ej3jqQXzyzariv4.mft (raw, json) Hash identifier: mTppoqvPtuJdOmC4yhlR1D5xcQFLanTnbMboDcm0/XM= Subject key identifier: 8D:D7:0C:11:71:99:7E:0F:F6:40:58:C4:BA:9E:35:12:A4:23:48:75 Authority key identifier: 32:F1:B8:5F:A5:DE:57:A5:FE:12:3D:E3:A9:05:F3:CB:36:AB:8A:FE Certificate issuer: /CN=32f1b85fa5de57a5fe123de3a905f3cb36ab8afe Certificate serial: 019B70A34C43CC5BB55DA298E43CB164C976 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MvG4X6XeV6X-Ej3jqQXzyzariv4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/bc1828-3536-4d0f-952b-9d27091784cc/1/MvG4X6XeV6X-Ej3jqQXzyzariv4.mft Manifest number: 06B6 Signing time: Tue 30 Dec 2025 19:01:48 +0000 Manifest this update: Tue 30 Dec 2025 19:01:48 +0000 Manifest next update: Wed 31 Dec 2025 19:01:48 +0000 Files and hashes: 1: MvG4X6XeV6X-Ej3jqQXzyzariv4.crl (hash: L4Bfj2sb0gabNm5117yR+F1ZT2uCF4CYdrviBz9+mZY=) 2: NYziV-NFGGqBIoJkJemWo5QRXPo.roa (hash: NJwrl3v2N6LA2BTkuAAr9JlSloYvfxRMFpbHdjPuE8g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/bc1828-3536-4d0f-952b-9d27091784cc/1/MvG4X6XeV6X-Ej3jqQXzyzariv4.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/bc1828-3536-4d0f-952b-9d27091784cc/1/MvG4X6XeV6X-Ej3jqQXzyzariv4.mft rsync://rpki.ripe.net/repository/DEFAULT/MvG4X6XeV6X-Ej3jqQXzyzariv4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 19:01:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:70:a3:4c:43:cc:5b:b5:5d:a2:98:e4:3c:b1:64:c9:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32f1b85fa5de57a5fe123de3a905f3cb36ab8afe Validity Not Before: Dec 30 19:01:48 2025 GMT Not After : Dec 31 19:01:48 2025 GMT Subject: CN=8dd70c1171997e0ff64058c4ba9e3512a4234875 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:59:ae:93:c3:17:f5:61:48:ff:39:54:8e:59: cb:b3:36:ad:61:bb:f7:4c:93:d5:57:2f:e8:8c:a7: a6:f9:fb:29:30:4b:6e:ed:d3:13:20:a4:05:eb:c1: a4:ff:16:cc:c6:52:d4:d5:13:19:b6:77:51:62:fa: e5:1c:74:a6:a2:ff:f9:18:c1:f5:b4:ea:72:83:65: 0b:4b:fb:e0:b9:67:d4:09:07:a4:c0:08:bd:2d:aa: 69:b5:b0:4e:b3:76:ec:64:6e:17:ec:ed:9f:36:96: 81:48:91:2d:73:0b:b2:fd:c6:de:fc:69:b0:f5:f2: 4e:29:05:32:ca:89:9e:04:15:d6:1b:1e:7b:6e:c4: 3a:3f:9d:ea:38:42:f0:7b:b3:9a:fb:5d:9c:1e:19: 01:6f:c0:50:f9:4f:4f:83:16:6e:29:8c:3a:86:05: d8:77:5f:e9:3a:4e:2c:5f:c8:c9:7d:5c:92:0c:78: f2:55:e1:59:5d:69:fd:a3:6d:6b:c6:80:e1:f5:7b: b5:02:19:b5:e8:01:95:1d:3a:d7:6d:eb:12:c7:27: d1:af:4e:64:a9:18:fa:ae:9b:83:46:48:e7:63:93: ed:93:db:d2:fe:89:36:0d:83:df:ae:42:a8:cf:0c: bb:5f:96:ac:59:71:a8:f9:64:09:d6:b2:05:7e:22: 95:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:D7:0C:11:71:99:7E:0F:F6:40:58:C4:BA:9E:35:12:A4:23:48:75 X509v3 Authority Key Identifier: keyid:32:F1:B8:5F:A5:DE:57:A5:FE:12:3D:E3:A9:05:F3:CB:36:AB:8A:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MvG4X6XeV6X-Ej3jqQXzyzariv4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bc1828-3536-4d0f-952b-9d27091784cc/1/MvG4X6XeV6X-Ej3jqQXzyzariv4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bc1828-3536-4d0f-952b-9d27091784cc/1/MvG4X6XeV6X-Ej3jqQXzyzariv4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:ab:2d:94:7f:5c:62:3f:f7:4f:d5:b3:84:c7:6e:5c:be:15: 02:75:ac:ec:9d:40:f0:f3:9f:a2:3b:10:2c:93:5d:83:6d:7c: a7:4c:8b:8b:e7:1b:c1:19:1b:fe:03:6c:73:73:d6:91:54:16: 8b:4d:07:0e:4d:1c:2a:b0:8c:72:ee:1b:c1:77:a5:58:ad:21: d0:77:89:df:77:a1:63:96:05:f5:38:82:9e:d8:2b:ec:c4:b5: 25:a7:2d:3a:e7:e2:e5:af:0e:39:cf:37:e3:d5:84:11:c3:50: d7:fa:1b:ce:18:da:5a:69:0b:d8:21:d6:b9:80:6d:9c:fe:fe: 03:82:b2:ec:79:fb:0e:b9:4d:72:d2:14:e4:45:37:fe:17:f2: b5:55:61:30:14:ef:82:41:94:28:62:ec:ef:c3:af:92:13:66: 8f:0d:3f:91:b7:66:6d:f5:db:93:e2:5d:fd:c1:ee:08:30:ee: 88:a9:61:1a:3e:c0:36:31:22:1f:67:b8:a7:a6:29:e0:65:30: 4c:7b:03:61:c5:da:44:0a:25:a9:67:88:d0:69:77:19:47:8e: bf:fe:29:64:a7:c5:d7:cc:33:c1:e4:d1:47:5b:09:16:b9:77: 9b:9b:19:d7:c5:6c:17:ff:36:89:87:de:a6:84:f7:91:8f:82: 59:25:39:cb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtwo0xDzFu1XaKY5DyxZMl2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyZjFiODVmYTVkZTU3YTVmZTEyM2RlM2E5MDVmM2NiMzZh YjhhZmUwHhcNMjUxMjMwMTkwMTQ4WhcNMjUxMjMxMTkwMTQ4WjAzMTEwLwYDVQQD Eyg4ZGQ3MGMxMTcxOTk3ZTBmZjY0MDU4YzRiYTllMzUxMmE0MjM0ODc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp1muk8MX9WFI/zlUjlnLszatYbv3 TJPVVy/ojKem+fspMEtu7dMTIKQF68Gk/xbMxlLU1RMZtndRYvrlHHSmov/5GMH1 tOpyg2ULS/vguWfUCQekwAi9LapptbBOs3bsZG4X7O2fNpaBSJEtcwuy/cbe/Gmw 9fJOKQUyyomeBBXWGx57bsQ6P53qOELwe7Oa+12cHhkBb8BQ+U9PgxZuKYw6hgXY d1/pOk4sX8jJfVySDHjyVeFZXWn9o21rxoDh9Xu1Ahm16AGVHTrXbesSxyfRr05k qRj6rpuDRkjnY5Ptk9vS/ok2DYPfrkKozwy7X5asWXGo+WQJ1rIFfiKVyQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI3XDBFxmX4P9kBYxLqeNRKkI0h1MB8GA1UdIwQY MBaAFDLxuF+l3lel/hI946kF88s2q4r+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTXZHNFg2WGVWNlgtRWozanFRWHp5emFyaXY0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9iYzE4MjgtMzUzNi00ZDBmLTk1MmIt OWQyNzA5MTc4NGNjLzEvTXZHNFg2WGVWNlgtRWozanFRWHp5emFyaXY0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9iYzE4MjgtMzUzNi00ZDBmLTk1MmItOWQyNzA5MTc4NGNj LzEvTXZHNFg2WGVWNlgtRWozanFRWHp5emFyaXY0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaqstlH9c Yj/3T9WzhMduXL4VAnWs7J1A8POfojsQLJNdg218p0yLi+cbwRkb/gNsc3PWkVQW i00HDk0cKrCMcu4bwXelWK0h0HeJ33ehY5YF9TiCntgr7MS1JactOufi5a8OOc83 49WEEcNQ1/obzhjaWmkL2CHWuYBtnP7+A4Ky7Hn7DrlNctIU5EU3/hfytVVhMBTv gkGUKGLs78OvkhNmjw0/kbdmbfXbk+Jd/cHuCDDuiKlhGj7ANjEiH2e4p6Yp4GUw THsDYcXaRAolqWeI0Gl3GUeOv/4pZKfF18wzweTRR1sJFrl3m5sZ18VsF/82iYfe poT3kY+CWSU5yw== -----END CERTIFICATE-----Generated at Wed Dec 31 01:53:07 2025 by rpki-client