This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/b199bd-03fe-4734-b799-9879d68728c9/1/MvacygDXMkCpbJMio-lzeQ8vYcQ.mft File: MvacygDXMkCpbJMio-lzeQ8vYcQ.mft (raw, json) Hash identifier: 9KFFlxDEW5mu8PXZ3N+VJ6n58hWvAIQ5rIrpL6XT1po= Subject key identifier: C5:F6:AA:D9:31:7D:50:24:50:0E:21:FA:31:3C:B3:01:55:20:4D:95 Authority key identifier: 32:F6:9C:CA:00:D7:32:40:A9:6C:93:22:A3:E9:73:79:0F:2F:61:C4 Certificate issuer: /CN=32f69cca00d73240a96c9322a3e973790f2f61c4 Certificate serial: 019AF12CFF24933FDC090CD062584D44A7AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MvacygDXMkCpbJMio-lzeQ8vYcQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/b199bd-03fe-4734-b799-9879d68728c9/1/MvacygDXMkCpbJMio-lzeQ8vYcQ.mft Manifest number: 0215 Signing time: Sat 06 Dec 2025 01:00:49 +0000 Manifest this update: Sat 06 Dec 2025 01:00:49 +0000 Manifest next update: Sun 07 Dec 2025 01:00:49 +0000 Files and hashes: 1: MvacygDXMkCpbJMio-lzeQ8vYcQ.crl (hash: 4SkdiLoM8C9MXiOugDFOlUu9nf3AnoouLBko3RYt5Ek=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/b199bd-03fe-4734-b799-9879d68728c9/1/MvacygDXMkCpbJMio-lzeQ8vYcQ.crl rsync://rpki.ripe.net/repository/DEFAULT/08/b199bd-03fe-4734-b799-9879d68728c9/1/MvacygDXMkCpbJMio-lzeQ8vYcQ.mft rsync://rpki.ripe.net/repository/DEFAULT/MvacygDXMkCpbJMio-lzeQ8vYcQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2c:ff:24:93:3f:dc:09:0c:d0:62:58:4d:44:a7:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32f69cca00d73240a96c9322a3e973790f2f61c4 Validity Not Before: Dec 6 01:00:49 2025 GMT Not After : Dec 7 01:00:49 2025 GMT Subject: CN=c5f6aad9317d5024500e21fa313cb30155204d95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:c5:86:0e:d2:c2:47:e2:1e:75:12:0b:d2:33: de:e5:2a:0f:57:c7:79:1e:3a:eb:6d:33:30:b3:ce: 21:bd:7c:c3:5f:05:4c:be:ec:91:bb:30:2f:83:f2: 82:35:be:10:a5:34:95:57:20:a1:da:91:be:41:0b: 2e:f4:2e:5c:19:5e:1b:e9:b0:ad:64:1c:bb:8f:8c: c0:0c:98:98:d9:61:33:ad:e0:ce:81:58:c5:97:84: a1:ad:82:61:ab:a5:b7:be:57:10:df:77:41:78:a5: e6:86:7b:9d:03:e8:4d:23:38:cb:97:4a:aa:7f:58: f2:7b:e6:de:0f:7b:1a:f0:65:94:e9:91:ea:28:af: 76:27:ae:83:48:ad:18:97:f4:8b:80:54:68:7c:53: 38:1d:7a:fd:ed:69:f4:16:7a:4a:e6:25:20:a7:66: 96:e5:fd:bd:18:cd:cb:0e:17:c9:81:0d:86:1d:fc: 62:8a:5e:73:10:bf:8d:df:57:17:f4:2f:22:86:76: b2:02:3a:16:4f:b0:05:3a:23:3c:d6:da:f1:3d:44: 32:97:46:3b:ab:56:de:5a:3b:9b:32:e9:98:9b:f8: e4:fb:20:dc:44:f5:93:e0:85:dc:99:1d:f3:59:4a: ab:11:db:dc:b4:ab:49:26:fc:e6:ad:b3:20:fd:47: 7e:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:F6:AA:D9:31:7D:50:24:50:0E:21:FA:31:3C:B3:01:55:20:4D:95 X509v3 Authority Key Identifier: keyid:32:F6:9C:CA:00:D7:32:40:A9:6C:93:22:A3:E9:73:79:0F:2F:61:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MvacygDXMkCpbJMio-lzeQ8vYcQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/b199bd-03fe-4734-b799-9879d68728c9/1/MvacygDXMkCpbJMio-lzeQ8vYcQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/b199bd-03fe-4734-b799-9879d68728c9/1/MvacygDXMkCpbJMio-lzeQ8vYcQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:d7:74:eb:0a:ef:da:9e:f0:55:f7:06:4b:f5:43:64:43:88: b1:fe:a5:c7:ae:47:59:d6:b1:23:99:66:3f:bc:31:45:2e:f0: d2:ff:19:65:d1:ff:bf:94:77:04:0d:19:4c:c9:a0:39:d5:94: f4:a6:8f:53:9f:77:a2:c5:d4:0f:79:87:67:9a:c0:cc:ce:5c: 25:3e:d4:6b:b7:cd:a1:ea:9b:3e:b5:59:13:79:ee:5b:89:f1: 35:f1:fd:86:86:65:fa:50:d7:c0:a2:07:4b:4b:68:72:55:95: a9:83:47:60:92:e0:42:36:34:7c:72:1b:89:cd:0b:3b:8f:1f: 06:42:ca:cb:97:c9:44:ea:c3:00:15:0b:14:1a:7f:35:2a:20: 9b:78:1c:8b:9f:54:fb:01:e2:dc:59:de:63:77:ce:60:e8:74: f2:6c:28:14:b5:81:33:1c:92:3f:74:a0:89:ed:54:1d:18:d4: d6:a4:a2:c9:86:e3:5d:23:b0:f2:43:b1:a7:33:5b:ad:62:ca: 0d:88:74:48:84:57:8f:59:56:c7:0a:b5:93:2f:95:b9:44:ef: 68:f3:07:53:ff:84:06:16:73:f4:f6:bc:77:4f:38:96:67:19: 3d:93:5b:99:5a:29:a5:9a:df:29:34:c6:65:fc:13:1e:04:b0: 6a:a6:43:a0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLP8kkz/cCQzQYlhNRKeqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyZjY5Y2NhMDBkNzMyNDBhOTZjOTMyMmEzZTk3Mzc5MGYy ZjYxYzQwHhcNMjUxMjA2MDEwMDQ5WhcNMjUxMjA3MDEwMDQ5WjAzMTEwLwYDVQQD EyhjNWY2YWFkOTMxN2Q1MDI0NTAwZTIxZmEzMTNjYjMwMTU1MjA0ZDk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArsWGDtLCR+IedRIL0jPe5SoPV8d5 HjrrbTMws84hvXzDXwVMvuyRuzAvg/KCNb4QpTSVVyCh2pG+QQsu9C5cGV4b6bCt ZBy7j4zADJiY2WEzreDOgVjFl4ShrYJhq6W3vlcQ33dBeKXmhnudA+hNIzjLl0qq f1jye+beD3sa8GWU6ZHqKK92J66DSK0Yl/SLgFRofFM4HXr97Wn0FnpK5iUgp2aW 5f29GM3LDhfJgQ2GHfxiil5zEL+N31cX9C8ihnayAjoWT7AFOiM81trxPUQyl0Y7 q1beWjubMumYm/jk+yDcRPWT4IXcmR3zWUqrEdvctKtJJvzmrbMg/Ud+LwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMX2qtkxfVAkUA4h+jE8swFVIE2VMB8GA1UdIwQY MBaAFDL2nMoA1zJAqWyTIqPpc3kPL2HEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTXZhY3lnRFhNa0NwYkpNaW8tbHplUTh2WWNRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9iMTk5YmQtMDNmZS00NzM0LWI3OTkt OTg3OWQ2ODcyOGM5LzEvTXZhY3lnRFhNa0NwYkpNaW8tbHplUTh2WWNRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC9iMTk5YmQtMDNmZS00NzM0LWI3OTktOTg3OWQ2ODcyOGM5 LzEvTXZhY3lnRFhNa0NwYkpNaW8tbHplUTh2WWNRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc9d06wrv 2p7wVfcGS/VDZEOIsf6lx65HWdaxI5lmP7wxRS7w0v8ZZdH/v5R3BA0ZTMmgOdWU 9KaPU593osXUD3mHZ5rAzM5cJT7Ua7fNoeqbPrVZE3nuW4nxNfH9hoZl+lDXwKIH S0toclWVqYNHYJLgQjY0fHIbic0LO48fBkLKy5fJROrDABULFBp/NSogm3gci59U +wHi3FneY3fOYOh08mwoFLWBMxySP3Sgie1UHRjU1qSiyYbjXSOw8kOxpzNbrWLK DYh0SIRXj1lWxwq1ky+VuUTvaPMHU/+EBhZz9Pa8d084lmcZPZNbmVoppZrfKTTG ZfwTHgSwaqZDoA== -----END CERTIFICATE-----Generated at Sat Dec 6 11:33:06 2025 by rpki-client