This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/0f65fe-262f-474d-8cb6-8ccb674a3875/1/MIVZam3hzL6mZbRWxNLM0JZJmx8.mft File: MIVZam3hzL6mZbRWxNLM0JZJmx8.mft (raw, json) Hash identifier: D+KJlArXDUZvB4IitBxRipW0dY8gjagh3l5Ulq9MKb4= Subject key identifier: F1:80:AF:E8:D5:86:7A:C0:E9:89:C0:BD:B2:BA:61:F2:9E:60:0F:89 Authority key identifier: 30:85:59:6A:6D:E1:CC:BE:A6:65:B4:56:C4:D2:CC:D0:96:49:9B:1F Certificate issuer: /CN=3085596a6de1ccbea665b456c4d2ccd096499b1f Certificate serial: 019B51BC2F42FB66053A0F583A0717B63030 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MIVZam3hzL6mZbRWxNLM0JZJmx8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/0f65fe-262f-474d-8cb6-8ccb674a3875/1/MIVZam3hzL6mZbRWxNLM0JZJmx8.mft Manifest number: 0B79 Signing time: Wed 24 Dec 2025 19:00:45 +0000 Manifest this update: Wed 24 Dec 2025 19:00:45 +0000 Manifest next update: Thu 25 Dec 2025 19:00:45 +0000 Files and hashes: 1: MIVZam3hzL6mZbRWxNLM0JZJmx8.crl (hash: H5J+AYJ9JrC6Ry1Hq3qpy6AtQSs5t7qywYiWtGKWLmw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/0f65fe-262f-474d-8cb6-8ccb674a3875/1/MIVZam3hzL6mZbRWxNLM0JZJmx8.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/0f65fe-262f-474d-8cb6-8ccb674a3875/1/MIVZam3hzL6mZbRWxNLM0JZJmx8.mft rsync://rpki.ripe.net/repository/DEFAULT/MIVZam3hzL6mZbRWxNLM0JZJmx8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 18:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:51:bc:2f:42:fb:66:05:3a:0f:58:3a:07:17:b6:30:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3085596a6de1ccbea665b456c4d2ccd096499b1f Validity Not Before: Dec 24 19:00:45 2025 GMT Not After : Dec 25 19:00:45 2025 GMT Subject: CN=f180afe8d5867ac0e989c0bdb2ba61f29e600f89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:39:1a:ba:4f:dc:47:83:35:39:44:c6:6c:34: bc:00:73:fe:42:77:b4:de:ff:dc:ea:87:9f:3d:b8: ba:e6:90:f7:d3:a8:f8:3d:de:12:09:b9:ab:c7:ca: d2:5f:7a:9d:c3:34:5e:e0:62:8e:d5:99:ef:50:8f: a4:5e:81:ca:c4:33:af:19:12:5f:2b:2f:67:1a:a6: ec:0f:38:92:f7:ee:0e:5d:a0:f5:b7:7c:98:7c:1a: c9:10:2f:6e:c5:7f:64:6f:23:ef:22:79:19:67:b4: 73:17:b2:b1:fe:42:52:b8:b9:b8:88:71:c6:5c:81: 79:7a:49:e4:55:db:67:72:8f:68:bf:15:37:60:8c: 44:f3:35:b1:fa:f5:55:6d:45:62:85:17:e0:b7:e6: d0:1f:af:e5:fd:65:55:2d:42:c4:a3:68:cb:af:bd: b2:43:ef:c6:a6:0f:3b:78:9b:e6:c5:3b:ce:d5:01: 64:ef:61:14:3d:4a:96:13:ac:35:e9:02:a5:f9:7d: 24:66:ef:78:69:23:c8:b2:e1:49:de:7d:a9:d3:96: c8:f3:5c:bf:77:27:2a:9b:d7:ee:f7:41:89:b6:97: a6:df:fa:61:a3:6d:12:d3:d7:be:b8:d6:84:b8:9d: 76:76:64:ec:7a:c2:1b:7e:f2:1b:46:c2:93:a0:63: ad:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:80:AF:E8:D5:86:7A:C0:E9:89:C0:BD:B2:BA:61:F2:9E:60:0F:89 X509v3 Authority Key Identifier: keyid:30:85:59:6A:6D:E1:CC:BE:A6:65:B4:56:C4:D2:CC:D0:96:49:9B:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MIVZam3hzL6mZbRWxNLM0JZJmx8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/0f65fe-262f-474d-8cb6-8ccb674a3875/1/MIVZam3hzL6mZbRWxNLM0JZJmx8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/0f65fe-262f-474d-8cb6-8ccb674a3875/1/MIVZam3hzL6mZbRWxNLM0JZJmx8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d8:f7:28:f3:0c:a6:a8:67:47:f9:34:54:2e:20:c1:6c:3f:4e: 99:2a:03:b1:0a:64:ea:36:a0:36:69:8c:fc:cb:20:a8:11:77: 15:8a:f4:db:2e:4b:55:2f:5a:9d:47:80:1b:17:77:e6:84:d8: e0:21:c3:b0:d1:fa:23:79:b7:40:66:75:49:c1:ab:a8:f8:96: 60:f9:52:b9:36:af:00:72:82:95:51:3f:89:35:fc:74:1d:b2: 0a:11:48:32:d7:61:8c:b6:f4:7f:91:f1:76:36:76:1f:72:db: f6:8e:94:0f:ba:e0:41:d9:49:5e:3b:c8:80:d3:28:30:64:35: 18:da:d3:a8:87:99:b2:61:e6:91:d1:bb:51:b7:27:b6:68:77: 3f:0e:da:43:61:ec:1e:f5:1f:2a:ee:9f:3f:2a:91:82:96:e4: 96:b9:63:8f:4e:1d:65:bc:1b:35:ee:38:f7:9d:73:e3:6d:64: 01:8a:69:00:02:0a:2f:1f:87:02:57:4e:fb:42:c9:f9:ab:df: 55:90:87:e6:d5:1d:cc:af:5f:5c:e8:6f:7c:71:db:64:f7:bc: 8e:cd:46:48:28:92:7e:0c:ac:98:ef:0c:f6:12:02:1b:32:73: 65:8a:53:ca:66:38:db:95:f9:02:6d:6e:0b:b9:5a:7c:65:e5: 06:a9:3d:a5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtRvC9C+2YFOg9YOgcXtjAwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwODU1OTZhNmRlMWNjYmVhNjY1YjQ1NmM0ZDJjY2QwOTY0 OTliMWYwHhcNMjUxMjI0MTkwMDQ1WhcNMjUxMjI1MTkwMDQ1WjAzMTEwLwYDVQQD EyhmMTgwYWZlOGQ1ODY3YWMwZTk4OWMwYmRiMmJhNjFmMjllNjAwZjg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0zkauk/cR4M1OUTGbDS8AHP+Qne0 3v/c6oefPbi65pD306j4Pd4SCbmrx8rSX3qdwzRe4GKO1ZnvUI+kXoHKxDOvGRJf Ky9nGqbsDziS9+4OXaD1t3yYfBrJEC9uxX9kbyPvInkZZ7RzF7Kx/kJSuLm4iHHG XIF5eknkVdtnco9ovxU3YIxE8zWx+vVVbUVihRfgt+bQH6/l/WVVLULEo2jLr72y Q+/Gpg87eJvmxTvO1QFk72EUPUqWE6w16QKl+X0kZu94aSPIsuFJ3n2p05bI81y/ dycqm9fu90GJtpem3/pho20S09e+uNaEuJ12dmTsesIbfvIbRsKToGOt4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPGAr+jVhnrA6YnAvbK6YfKeYA+JMB8GA1UdIwQY MBaAFDCFWWpt4cy+pmW0VsTSzNCWSZsfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTUlWWmFtM2h6TDZtWmJSV3hOTE0wSlpKbXg4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy8wZjY1ZmUtMjYyZi00NzRkLThjYjYt OGNjYjY3NGEzODc1LzEvTUlWWmFtM2h6TDZtWmJSV3hOTE0wSlpKbXg4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy8wZjY1ZmUtMjYyZi00NzRkLThjYjYtOGNjYjY3NGEzODc1 LzEvTUlWWmFtM2h6TDZtWmJSV3hOTE0wSlpKbXg4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA2Pco8wym qGdH+TRULiDBbD9OmSoDsQpk6jagNmmM/MsgqBF3FYr02y5LVS9anUeAGxd35oTY 4CHDsNH6I3m3QGZ1ScGrqPiWYPlSuTavAHKClVE/iTX8dB2yChFIMtdhjLb0f5Hx djZ2H3Lb9o6UD7rgQdlJXjvIgNMoMGQ1GNrTqIeZsmHmkdG7Ubcntmh3Pw7aQ2Hs HvUfKu6fPyqRgpbklrljj04dZbwbNe44951z421kAYppAAIKLx+HAldO+0LJ+avf VZCH5tUdzK9fXOhvfHHbZPe8js1GSCiSfgysmO8M9hICGzJzZYpTymY425X5Am1u C7lafGXlBqk9pQ== -----END CERTIFICATE-----Generated at Thu Dec 25 03:25:56 2025 by rpki-client