This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/264b78-b25d-47a3-ac55-165c96ff9529/1/mRVVjGiX_qIkhVz2A4GFc1RwhBE.mft File: mRVVjGiX_qIkhVz2A4GFc1RwhBE.mft (raw, json) Hash identifier: N8hxDYe9VBnsobLmL5/XpOs8hTk7DAm6DJYnqd2LPa4= Subject key identifier: 74:2A:2B:7A:FE:58:54:79:69:5F:B5:76:05:E7:C3:7E:03:25:EA:AB Authority key identifier: 99:15:55:8C:68:97:FE:A2:24:85:5C:F6:03:81:85:73:54:70:84:11 Certificate issuer: /CN=9915558c6897fea224855cf60381857354708411 Certificate serial: 019B620B1DD3001F66FEB10C118BE4B6D786 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mRVVjGiX_qIkhVz2A4GFc1RwhBE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/264b78-b25d-47a3-ac55-165c96ff9529/1/mRVVjGiX_qIkhVz2A4GFc1RwhBE.mft Manifest number: 0E06 Signing time: Sat 27 Dec 2025 23:00:54 +0000 Manifest this update: Sat 27 Dec 2025 23:00:54 +0000 Manifest next update: Sun 28 Dec 2025 23:00:54 +0000 Files and hashes: 1: mRVVjGiX_qIkhVz2A4GFc1RwhBE.crl (hash: cTTTyH5nFT8uK3Ohi35Rp46317W0o7CYrUV9942Vm0g=) 2: p_ZOqooaB4FZLqO_coSsHFoaxrI.roa (hash: kDng5P96ioc5fd3WKreLwEWmLw7z/u+Qt5PBtL9Aseg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/264b78-b25d-47a3-ac55-165c96ff9529/1/mRVVjGiX_qIkhVz2A4GFc1RwhBE.crl rsync://rpki.ripe.net/repository/DEFAULT/df/264b78-b25d-47a3-ac55-165c96ff9529/1/mRVVjGiX_qIkhVz2A4GFc1RwhBE.mft rsync://rpki.ripe.net/repository/DEFAULT/mRVVjGiX_qIkhVz2A4GFc1RwhBE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 18:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:62:0b:1d:d3:00:1f:66:fe:b1:0c:11:8b:e4:b6:d7:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9915558c6897fea224855cf60381857354708411 Validity Not Before: Dec 27 23:00:54 2025 GMT Not After : Dec 28 23:00:54 2025 GMT Subject: CN=742a2b7afe585479695fb57605e7c37e0325eaab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:17:d4:7c:d5:a0:08:46:57:0e:d9:7d:ca:8c: 67:85:d3:c0:2d:f2:44:2c:0a:9e:a5:0d:b4:48:ca: 45:5b:05:6e:ed:13:04:09:3f:01:30:ae:c1:01:86: ba:82:5f:59:70:0b:45:e1:10:7c:fa:85:87:66:0c: 51:5b:73:8e:9b:cd:56:27:0b:c5:cb:c6:b9:7f:ad: 6f:f9:16:c1:d4:34:be:aa:d1:73:bb:dc:dd:40:b9: 1b:94:2d:88:74:86:4b:73:87:20:5c:8a:f9:e1:2c: 90:49:de:e0:77:a4:62:00:9d:21:fc:9c:b9:8e:ea: 9e:30:ac:d5:22:84:1d:e0:f4:4e:db:30:f5:4c:10: 45:0f:52:35:31:af:2c:8e:dc:49:b1:a5:84:66:5c: 65:30:6b:5f:ab:9b:70:3d:ac:aa:fe:50:14:d6:00: a3:97:df:24:d6:ca:75:54:64:59:9d:3c:cb:0e:b0: df:18:e0:44:37:33:9e:e9:6e:48:fa:0c:96:72:7c: 92:61:63:eb:06:d9:d2:8b:ed:ff:82:82:8d:21:9e: d3:f0:67:40:14:ff:0b:a0:83:29:84:a4:9a:39:cf: f3:2c:35:93:49:b7:d9:cb:ce:e7:cd:d2:62:bd:cc: d4:35:11:5b:f1:c6:8d:d0:c6:2d:dd:3d:d6:e3:34: 70:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:2A:2B:7A:FE:58:54:79:69:5F:B5:76:05:E7:C3:7E:03:25:EA:AB X509v3 Authority Key Identifier: keyid:99:15:55:8C:68:97:FE:A2:24:85:5C:F6:03:81:85:73:54:70:84:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mRVVjGiX_qIkhVz2A4GFc1RwhBE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/264b78-b25d-47a3-ac55-165c96ff9529/1/mRVVjGiX_qIkhVz2A4GFc1RwhBE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/264b78-b25d-47a3-ac55-165c96ff9529/1/mRVVjGiX_qIkhVz2A4GFc1RwhBE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:63:7a:c8:34:29:c1:96:b1:52:9c:2a:d4:89:fe:2f:09:a5: 8d:85:90:14:ce:ce:75:3c:81:4f:23:38:c5:e9:5a:f8:27:0e: 29:8a:dd:70:a9:2e:bf:7b:78:ed:72:ae:c6:c6:b4:91:69:26: 43:e5:f3:5c:e0:85:35:66:4e:24:cb:f5:e4:99:20:71:aa:9d: f0:3d:d9:12:98:6f:12:bc:43:7d:97:f7:9b:29:4a:0c:d9:05: 3e:7f:d3:ce:f7:52:5e:e1:94:31:5a:f6:33:14:bd:36:a8:87: 42:1e:d1:44:1b:3b:c9:8d:50:6b:61:6b:49:a4:77:3c:22:7d: 84:67:0c:db:d7:50:b4:8c:ce:07:ea:7f:4a:cf:da:c9:6c:3c: 76:f4:00:60:fb:ab:ab:7d:a0:da:ec:4d:2e:3e:77:39:f5:73: 7e:96:02:35:55:66:3a:6b:0e:02:85:bd:29:f7:1a:64:b4:b5: 4c:12:36:8f:ec:5b:69:71:63:4a:63:98:2c:a9:57:cf:1d:4c: 82:f9:87:af:88:16:93:17:c9:42:80:0f:b2:6b:87:2e:8a:d6: 3f:52:69:85:e9:d5:81:df:37:fe:9c:8e:15:f0:6e:bb:1c:b8: 00:91:e8:b3:d6:97:2b:18:3d:6b:44:4f:cd:be:c7:b6:df:bb: 4a:22:fe:62 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtiCx3TAB9m/rEMEYvktteGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk5MTU1NThjNjg5N2ZlYTIyNDg1NWNmNjAzODE4NTczNTQ3 MDg0MTEwHhcNMjUxMjI3MjMwMDU0WhcNMjUxMjI4MjMwMDU0WjAzMTEwLwYDVQQD Eyg3NDJhMmI3YWZlNTg1NDc5Njk1ZmI1NzYwNWU3YzM3ZTAzMjVlYWFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApBfUfNWgCEZXDtl9yoxnhdPALfJE LAqepQ20SMpFWwVu7RMECT8BMK7BAYa6gl9ZcAtF4RB8+oWHZgxRW3OOm81WJwvF y8a5f61v+RbB1DS+qtFzu9zdQLkblC2IdIZLc4cgXIr54SyQSd7gd6RiAJ0h/Jy5 juqeMKzVIoQd4PRO2zD1TBBFD1I1Ma8sjtxJsaWEZlxlMGtfq5twPayq/lAU1gCj l98k1sp1VGRZnTzLDrDfGOBENzOe6W5I+gyWcnySYWPrBtnSi+3/goKNIZ7T8GdA FP8LoIMphKSaOc/zLDWTSbfZy87nzdJivczUNRFb8caN0MYt3T3W4zRwNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHQqK3r+WFR5aV+1dgXnw34DJeqrMB8GA1UdIwQY MBaAFJkVVYxol/6iJIVc9gOBhXNUcIQRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbVJWVmpHaVhfcUlraFZ6MkE0R0ZjMVJ3aEJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi8yNjRiNzgtYjI1ZC00N2EzLWFjNTUt MTY1Yzk2ZmY5NTI5LzEvbVJWVmpHaVhfcUlraFZ6MkE0R0ZjMVJ3aEJFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi8yNjRiNzgtYjI1ZC00N2EzLWFjNTUtMTY1Yzk2ZmY5NTI5 LzEvbVJWVmpHaVhfcUlraFZ6MkE0R0ZjMVJ3aEJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGWN6yDQp wZaxUpwq1In+LwmljYWQFM7OdTyBTyM4xela+CcOKYrdcKkuv3t47XKuxsa0kWkm Q+XzXOCFNWZOJMv15Jkgcaqd8D3ZEphvErxDfZf3mylKDNkFPn/TzvdSXuGUMVr2 MxS9NqiHQh7RRBs7yY1Qa2FrSaR3PCJ9hGcM29dQtIzOB+p/Ss/ayWw8dvQAYPur q32g2uxNLj53OfVzfpYCNVVmOmsOAoW9KfcaZLS1TBI2j+xbaXFjSmOYLKlXzx1M gvmHr4gWkxfJQoAPsmuHLorWP1JphenVgd83/pyOFfBuuxy4AJHos9aXKxg9a0RP zb7Htt+7SiL+Yg== -----END CERTIFICATE-----Generated at Sun Dec 28 03:18:12 2025 by rpki-client