This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/257008-da5b-4081-aaf7-403366984c5a/1/mvVxMWwmKI4O1BawE3ofZIp9IAI.mft File: mvVxMWwmKI4O1BawE3ofZIp9IAI.mft (raw, json) Hash identifier: iuH4Di/NzNVEtUQLpZAFxr6vmeOR8szGqJnJFigyp7w= Subject key identifier: DC:D7:F8:9C:27:AC:FC:E8:F6:FF:E1:A5:0B:F8:B2:66:09:9F:CF:56 Authority key identifier: 9A:F5:71:31:6C:26:28:8E:0E:D4:16:B0:13:7A:1F:64:8A:7D:20:02 Certificate issuer: /CN=9af571316c26288e0ed416b0137a1f648a7d2002 Certificate serial: 019B68E9D537FF6D1C5F1C3969207B348D5D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mvVxMWwmKI4O1BawE3ofZIp9IAI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/257008-da5b-4081-aaf7-403366984c5a/1/mvVxMWwmKI4O1BawE3ofZIp9IAI.mft Manifest number: 02E0 Signing time: Mon 29 Dec 2025 07:01:53 +0000 Manifest this update: Mon 29 Dec 2025 07:01:53 +0000 Manifest next update: Tue 30 Dec 2025 07:01:53 +0000 Files and hashes: 1: mvVxMWwmKI4O1BawE3ofZIp9IAI.crl (hash: tvXbpbw89xY5DiN2S0qUz70Uti8twfDOXn0w+u9HlWo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/257008-da5b-4081-aaf7-403366984c5a/1/mvVxMWwmKI4O1BawE3ofZIp9IAI.crl rsync://rpki.ripe.net/repository/DEFAULT/e6/257008-da5b-4081-aaf7-403366984c5a/1/mvVxMWwmKI4O1BawE3ofZIp9IAI.mft rsync://rpki.ripe.net/repository/DEFAULT/mvVxMWwmKI4O1BawE3ofZIp9IAI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 07:01:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:68:e9:d5:37:ff:6d:1c:5f:1c:39:69:20:7b:34:8d:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9af571316c26288e0ed416b0137a1f648a7d2002 Validity Not Before: Dec 29 07:01:53 2025 GMT Not After : Dec 30 07:01:53 2025 GMT Subject: CN=dcd7f89c27acfce8f6ffe1a50bf8b266099fcf56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:e2:20:f6:40:7f:8d:3d:ab:14:64:e2:fc:46: 07:2c:af:d1:04:94:9d:4f:c9:12:b8:55:8b:3a:4b: 2b:49:1f:15:79:09:c1:35:86:aa:a1:bb:c0:3e:91: f8:ee:f9:5d:e8:3c:9d:db:18:d7:86:ad:8b:25:03: a0:ec:9f:c4:fe:51:cc:bb:58:ab:21:ea:79:a0:a9: b6:79:99:2f:e2:68:2e:69:bf:ea:ff:3e:d7:b0:23: 12:01:0b:24:b3:82:ec:b0:de:d4:69:8b:77:5d:aa: 9e:0b:62:f2:b9:bd:ce:87:a7:ab:b1:22:9d:c1:27: f6:a8:88:1e:1d:5c:d1:16:06:4e:18:70:88:76:37: c9:53:96:3c:9c:33:65:4c:ad:08:ac:2a:ee:14:10: c5:cb:b1:30:fb:58:dc:a8:4e:73:5d:57:6f:29:04: ca:2e:7e:72:58:f7:98:5d:d7:1f:4c:da:df:7b:f7: ba:d1:17:ff:8b:fa:78:22:16:9a:67:0e:46:15:78: 69:b1:53:8c:b3:53:0d:98:fa:ca:e2:3b:e6:97:ba: da:73:e3:d3:c8:ea:f7:ac:0e:4f:18:8a:74:d0:be: 0c:19:1e:f2:79:30:76:14:12:06:54:e8:00:6d:9c: 66:f8:27:30:82:64:9a:e7:b6:85:3c:7a:68:57:b6: dd:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:D7:F8:9C:27:AC:FC:E8:F6:FF:E1:A5:0B:F8:B2:66:09:9F:CF:56 X509v3 Authority Key Identifier: keyid:9A:F5:71:31:6C:26:28:8E:0E:D4:16:B0:13:7A:1F:64:8A:7D:20:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mvVxMWwmKI4O1BawE3ofZIp9IAI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/257008-da5b-4081-aaf7-403366984c5a/1/mvVxMWwmKI4O1BawE3ofZIp9IAI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/257008-da5b-4081-aaf7-403366984c5a/1/mvVxMWwmKI4O1BawE3ofZIp9IAI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:5f:7b:2b:b3:43:e2:37:18:c6:6f:9d:37:d5:3c:a9:ad:4c: c8:11:8e:a3:28:8a:d6:db:3a:de:0e:9b:b9:d8:27:54:71:01: b6:1f:52:f9:8c:8e:a7:0a:ca:93:e7:2c:92:1d:fb:31:cb:a5: 20:67:b3:ea:87:dd:dc:47:6a:7b:4a:3f:7e:17:6c:3d:15:6b: 6c:bb:99:10:4a:4c:12:b3:8b:3c:2b:c5:b5:06:c6:41:29:fc: ad:90:a8:a8:0e:d7:91:31:55:c6:89:a3:4c:6e:12:1e:c4:bd: fe:ab:69:ac:6e:ab:47:6a:9a:51:49:45:48:1c:d2:87:a9:e6: 39:9e:41:b1:f1:a8:75:70:de:6c:65:95:c4:e1:95:d7:94:de: 12:d5:cd:7a:0b:70:a1:fb:3f:3f:a8:17:8c:27:20:0e:28:05: a6:5a:8c:f1:9a:64:44:59:86:ef:2f:a5:21:d0:d1:80:d0:df: 0e:57:f3:07:2b:37:d4:a7:16:da:5c:04:18:47:51:06:6f:33: b7:c2:16:81:14:2f:f8:89:4c:9f:86:8f:28:e6:84:e3:5b:a7: d1:70:0d:3c:31:a6:62:53:d3:32:5a:ae:bd:db:a0:9c:21:1c: dc:c6:6e:fd:c2:39:2b:1f:05:a1:23:4c:61:6e:89:7d:f6:8f: 3f:47:2e:22 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZto6dU3/20cXxw5aSB7NI1dMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhZjU3MTMxNmMyNjI4OGUwZWQ0MTZiMDEzN2ExZjY0OGE3 ZDIwMDIwHhcNMjUxMjI5MDcwMTUzWhcNMjUxMjMwMDcwMTUzWjAzMTEwLwYDVQQD EyhkY2Q3Zjg5YzI3YWNmY2U4ZjZmZmUxYTUwYmY4YjI2NjA5OWZjZjU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3uIg9kB/jT2rFGTi/EYHLK/RBJSd T8kSuFWLOksrSR8VeQnBNYaqobvAPpH47vld6Dyd2xjXhq2LJQOg7J/E/lHMu1ir Iep5oKm2eZkv4mguab/q/z7XsCMSAQsks4LssN7UaYt3XaqeC2Lyub3Oh6ersSKd wSf2qIgeHVzRFgZOGHCIdjfJU5Y8nDNlTK0IrCruFBDFy7Ew+1jcqE5zXVdvKQTK Ln5yWPeYXdcfTNrfe/e60Rf/i/p4IhaaZw5GFXhpsVOMs1MNmPrK4jvml7rac+PT yOr3rA5PGIp00L4MGR7yeTB2FBIGVOgAbZxm+CcwgmSa57aFPHpoV7bdXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNzX+JwnrPzo9v/hpQv4smYJn89WMB8GA1UdIwQY MBaAFJr1cTFsJiiODtQWsBN6H2SKfSACMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbXZWeE1Xd21LSTRPMUJhd0Uzb2ZaSXA5SUFJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi8yNTcwMDgtZGE1Yi00MDgxLWFhZjct NDAzMzY2OTg0YzVhLzEvbXZWeE1Xd21LSTRPMUJhd0Uzb2ZaSXA5SUFJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNi8yNTcwMDgtZGE1Yi00MDgxLWFhZjctNDAzMzY2OTg0YzVh LzEvbXZWeE1Xd21LSTRPMUJhd0Uzb2ZaSXA5SUFJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIl97K7ND 4jcYxm+dN9U8qa1MyBGOoyiK1ts63g6budgnVHEBth9S+YyOpwrKk+cskh37Mcul IGez6ofd3Edqe0o/fhdsPRVrbLuZEEpMErOLPCvFtQbGQSn8rZCoqA7XkTFVxomj TG4SHsS9/qtprG6rR2qaUUlFSBzSh6nmOZ5BsfGodXDebGWVxOGV15TeEtXNegtw ofs/P6gXjCcgDigFplqM8ZpkRFmG7y+lIdDRgNDfDlfzBys31KcW2lwEGEdRBm8z t8IWgRQv+IlMn4aPKOaE41un0XANPDGmYlPTMlquvdugnCEc3MZu/cI5Kx8FoSNM YW6JffaPP0cuIg== -----END CERTIFICATE-----Generated at Mon Dec 29 16:28:15 2025 by rpki-client