This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/3bc707-76e7-4987-befa-981184dee131/1/00-mvj9cOPS7fgYrZwd0f0lhoEg.mft File: 00-mvj9cOPS7fgYrZwd0f0lhoEg.mft (raw, json) Hash identifier: v47d1smElMTLN/oyVf+pgFCMM75jNVRBUUf35JpN+j0= Subject key identifier: 5C:CF:37:88:4D:DD:49:CD:37:13:88:1A:8D:CE:DF:A6:48:50:CB:E9 Authority key identifier: D3:4F:A6:BE:3F:5C:38:F4:BB:7E:06:2B:67:07:74:7F:49:61:A0:48 Certificate issuer: /CN=d34fa6be3f5c38f4bb7e062b6707747f4961a048 Certificate serial: 019AF389ED7D8487940C803EAA5300C7B2B3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/00-mvj9cOPS7fgYrZwd0f0lhoEg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/3bc707-76e7-4987-befa-981184dee131/1/00-mvj9cOPS7fgYrZwd0f0lhoEg.mft Manifest number: 10E7 Signing time: Sat 06 Dec 2025 12:01:33 +0000 Manifest this update: Sat 06 Dec 2025 12:01:33 +0000 Manifest next update: Sun 07 Dec 2025 12:01:33 +0000 Files and hashes: 1: 00-mvj9cOPS7fgYrZwd0f0lhoEg.crl (hash: AS8P+Y/L/C8yHmxIO4kXDP6CMXc9DQuWbKaC5WLRdEk=) 2: NqFx58VddClRGkaq4vH0spxB4sY.roa (hash: +1mQ81/UVGy7/f9fmdLWXPkvY0wtPU2QaCzUYGQfgPM=) 3: l-051BYsRCxKE3vQ5NqqDTviFr4.roa (hash: zt5p627DRZYw9RNnukf8GDpw31GizuJMWnR2o5lMps4=) 4: lrUiZniRQz-h8c2XhwOWkweOdEA.roa (hash: d49AW/uRjxvRRJYubTh5j7tar5tvmS5hfgjaKWxZ/ps=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/3bc707-76e7-4987-befa-981184dee131/1/00-mvj9cOPS7fgYrZwd0f0lhoEg.crl rsync://rpki.ripe.net/repository/DEFAULT/04/3bc707-76e7-4987-befa-981184dee131/1/00-mvj9cOPS7fgYrZwd0f0lhoEg.mft rsync://rpki.ripe.net/repository/DEFAULT/00-mvj9cOPS7fgYrZwd0f0lhoEg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:01:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:ed:7d:84:87:94:0c:80:3e:aa:53:00:c7:b2:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d34fa6be3f5c38f4bb7e062b6707747f4961a048 Validity Not Before: Dec 6 12:01:33 2025 GMT Not After : Dec 7 12:01:33 2025 GMT Subject: CN=5ccf37884ddd49cd3713881a8dcedfa64850cbe9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:02:92:e7:df:62:1a:f1:42:fd:b4:75:ae:10: d7:11:a1:29:92:e3:c3:0f:56:47:87:9e:50:fd:ad: 3f:3b:7b:7f:f8:71:16:e3:30:e3:c3:82:fa:37:d5: 0c:35:1c:91:dc:e0:64:8d:79:0c:3a:8d:42:4e:2f: ca:2f:32:37:53:b3:50:4d:5c:f7:78:1f:73:be:95: 6b:f8:12:a7:a1:f4:61:4c:09:e4:2f:aa:b1:bd:cb: f2:61:8b:f9:2e:5a:b3:46:5c:cb:f7:92:55:57:fa: 85:31:2e:2e:34:18:a5:f1:3e:a9:4a:8b:7f:fa:06: da:03:bf:fc:bd:79:e8:71:ca:a4:da:2d:e9:88:3f: c5:7d:92:7d:72:5e:e4:a5:59:a9:5a:ff:59:f9:cd: a7:28:6f:72:0b:42:a1:31:e9:e3:cc:4d:13:52:f3: 1a:8c:0d:6d:fc:d1:02:74:38:17:fc:36:3f:4f:dd: 13:2c:1f:fa:f2:56:5b:db:9c:a4:00:30:87:f8:40: 03:2a:fe:48:ef:94:39:47:8d:3e:b1:e9:f0:95:1e: 65:2c:f4:0c:67:e5:0c:4f:ef:a5:15:e9:d2:ce:e3: db:d3:8c:e0:e9:9e:0c:e4:41:dc:27:28:3e:33:1b: f7:d5:9c:3c:92:e4:94:c3:bc:ea:35:57:04:8f:18: e7:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:CF:37:88:4D:DD:49:CD:37:13:88:1A:8D:CE:DF:A6:48:50:CB:E9 X509v3 Authority Key Identifier: keyid:D3:4F:A6:BE:3F:5C:38:F4:BB:7E:06:2B:67:07:74:7F:49:61:A0:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/00-mvj9cOPS7fgYrZwd0f0lhoEg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/3bc707-76e7-4987-befa-981184dee131/1/00-mvj9cOPS7fgYrZwd0f0lhoEg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/04/3bc707-76e7-4987-befa-981184dee131/1/00-mvj9cOPS7fgYrZwd0f0lhoEg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:6c:ba:f6:51:37:17:58:1d:c0:a8:f9:2c:6e:11:b4:0f:db: a2:c7:7b:d6:0d:cd:a4:62:ae:de:08:59:89:3a:00:5c:a6:ba: f2:9d:2d:cd:3b:98:7d:34:c1:87:d0:69:0b:79:1e:50:78:38: 21:41:81:c2:8f:6d:a6:bd:da:42:1b:d2:28:6f:a9:6c:bc:ce: 62:fc:bb:f4:b7:a7:db:0d:3b:3e:96:39:df:bc:a5:54:fb:1c: d3:a2:2b:c8:ae:fd:b9:77:f3:d8:ac:88:64:bc:8c:74:e8:1a: db:3d:a9:cb:53:ae:ec:eb:8b:59:a8:e3:00:e2:d0:d7:68:3f: 84:dc:5a:47:3f:11:41:df:65:58:f3:cd:dd:83:e4:a4:1c:3c: 60:3a:9c:d3:1b:b0:dd:dc:8c:2d:90:10:5e:fc:27:ed:fe:1b: bf:ad:0f:b2:33:a7:35:78:19:20:43:4d:7a:38:21:54:ca:b9: eb:36:14:fa:3c:d5:37:17:24:e6:23:aa:42:01:61:bd:ee:3d: ba:e3:aa:9a:82:92:32:6a:d0:9b:21:d4:25:09:e2:bf:c6:3f: 38:53:42:84:cd:ba:69:9b:27:55:19:9f:df:0f:7e:70:0e:90: cc:2d:4b:90:3e:44:d6:77:ee:9f:aa:e9:e0:03:17:cf:c0:41: dd:38:be:84 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzie19hIeUDIA+qlMAx7KzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzNGZhNmJlM2Y1YzM4ZjRiYjdlMDYyYjY3MDc3NDdmNDk2 MWEwNDgwHhcNMjUxMjA2MTIwMTMzWhcNMjUxMjA3MTIwMTMzWjAzMTEwLwYDVQQD Eyg1Y2NmMzc4ODRkZGQ0OWNkMzcxMzg4MWE4ZGNlZGZhNjQ4NTBjYmU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnwKS599iGvFC/bR1rhDXEaEpkuPD D1ZHh55Q/a0/O3t/+HEW4zDjw4L6N9UMNRyR3OBkjXkMOo1CTi/KLzI3U7NQTVz3 eB9zvpVr+BKnofRhTAnkL6qxvcvyYYv5LlqzRlzL95JVV/qFMS4uNBil8T6pSot/ +gbaA7/8vXnoccqk2i3piD/FfZJ9cl7kpVmpWv9Z+c2nKG9yC0KhMenjzE0TUvMa jA1t/NECdDgX/DY/T90TLB/68lZb25ykADCH+EADKv5I75Q5R40+senwlR5lLPQM Z+UMT++lFenSzuPb04zg6Z4M5EHcJyg+Mxv31Zw8kuSUw7zqNVcEjxjn/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFzPN4hN3UnNNxOIGo3O36ZIUMvpMB8GA1UdIwQY MBaAFNNPpr4/XDj0u34GK2cHdH9JYaBIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMDAtbXZqOWNPUFM3ZmdZclp3ZDBmMGxob0VnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC8zYmM3MDctNzZlNy00OTg3LWJlZmEt OTgxMTg0ZGVlMTMxLzEvMDAtbXZqOWNPUFM3ZmdZclp3ZDBmMGxob0VnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNC8zYmM3MDctNzZlNy00OTg3LWJlZmEtOTgxMTg0ZGVlMTMx LzEvMDAtbXZqOWNPUFM3ZmdZclp3ZDBmMGxob0VnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIGy69lE3 F1gdwKj5LG4RtA/bosd71g3NpGKu3ghZiToAXKa68p0tzTuYfTTBh9BpC3keUHg4 IUGBwo9tpr3aQhvSKG+pbLzOYvy79Len2w07PpY537ylVPsc06IryK79uXfz2KyI ZLyMdOga2z2py1Ou7OuLWajjAOLQ12g/hNxaRz8RQd9lWPPN3YPkpBw8YDqc0xuw 3dyMLZAQXvwn7f4bv60PsjOnNXgZIENNejghVMq56zYU+jzVNxck5iOqQgFhve49 uuOqmoKSMmrQmyHUJQniv8Y/OFNChM26aZsnVRmf3w9+cA6QzC1LkD5E1nfun6rp 4AMXz8BB3Ti+hA== -----END CERTIFICATE-----Generated at Sat Dec 6 19:12:08 2025 by rpki-client