This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/fc251e-259c-47f5-ae30-3724535ecc1a/1/mrVxtpr4VlCv_tzv5X0qc_1ubKk.mft File: mrVxtpr4VlCv_tzv5X0qc_1ubKk.mft (raw, json) Hash identifier: GA6YRLxAc0K9y3Z51o6OQeNScp0rZOYwqBem5KMjVoo= Subject key identifier: B2:55:80:3F:CB:B5:1B:CC:97:A7:7F:48:8D:BF:F7:67:2C:AE:B2:2D Authority key identifier: 9A:B5:71:B6:9A:F8:56:50:AF:FE:DC:EF:E5:7D:2A:73:FD:6E:6C:A9 Certificate issuer: /CN=9ab571b69af85650affedcefe57d2a73fd6e6ca9 Certificate serial: 019AF12CC13BEF53350AA26808E5347FAF75 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mrVxtpr4VlCv_tzv5X0qc_1ubKk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/fc251e-259c-47f5-ae30-3724535ecc1a/1/mrVxtpr4VlCv_tzv5X0qc_1ubKk.mft Manifest number: 0D4D Signing time: Sat 06 Dec 2025 01:00:33 +0000 Manifest this update: Sat 06 Dec 2025 01:00:33 +0000 Manifest next update: Sun 07 Dec 2025 01:00:33 +0000 Files and hashes: 1: mrVxtpr4VlCv_tzv5X0qc_1ubKk.crl (hash: CvuOIIk7sne4mozLUwKlB6WMK1AoO7xJMGFlFbx3f9w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/fc251e-259c-47f5-ae30-3724535ecc1a/1/mrVxtpr4VlCv_tzv5X0qc_1ubKk.crl rsync://rpki.ripe.net/repository/DEFAULT/19/fc251e-259c-47f5-ae30-3724535ecc1a/1/mrVxtpr4VlCv_tzv5X0qc_1ubKk.mft rsync://rpki.ripe.net/repository/DEFAULT/mrVxtpr4VlCv_tzv5X0qc_1ubKk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2c:c1:3b:ef:53:35:0a:a2:68:08:e5:34:7f:af:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab571b69af85650affedcefe57d2a73fd6e6ca9 Validity Not Before: Dec 6 01:00:33 2025 GMT Not After : Dec 7 01:00:33 2025 GMT Subject: CN=b255803fcbb51bcc97a77f488dbff7672caeb22d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:2a:f5:1d:86:de:34:a2:67:ad:4d:4d:77:6a: d8:1c:03:12:b8:ab:e4:85:40:92:02:4b:34:f8:86: de:69:20:e2:8d:7b:8a:fe:e6:9e:2f:ba:a8:0e:ce: bf:12:02:55:fe:f7:0d:75:8e:0b:5f:57:b5:2d:e2: 0c:82:df:03:4a:b5:16:5a:68:36:d4:dc:1b:38:23: 77:7a:45:62:a0:3f:ae:a8:c5:eb:4e:39:1b:81:3e: ce:fd:fe:5b:f2:db:41:7d:00:ea:ae:56:20:1e:ba: 6f:d3:83:21:5f:00:fd:5e:b2:ca:5b:5c:4f:b6:ee: 52:de:af:c1:13:bd:20:f5:20:8d:2f:43:11:7e:8e: 39:79:58:c1:ce:76:2f:19:bf:f5:65:bd:0e:74:42: d0:65:d5:38:b5:6d:35:1d:a2:2a:c7:e5:b9:50:b1: b1:d0:14:7d:50:05:d4:58:67:b4:06:4e:61:aa:3d: 33:17:75:97:23:a1:e7:0c:c6:62:42:0b:c2:f4:54: d0:d7:22:4d:c8:0c:19:8b:3a:1e:e1:cf:b0:8d:a4: ab:90:f2:1e:1d:72:c0:2c:15:a9:2c:c7:7f:92:21: 7c:9d:3c:91:dc:63:95:bb:ad:14:69:0e:3a:68:92: be:d8:f0:c1:8a:e0:92:1a:8e:02:b7:e4:4e:26:01: 55:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:55:80:3F:CB:B5:1B:CC:97:A7:7F:48:8D:BF:F7:67:2C:AE:B2:2D X509v3 Authority Key Identifier: keyid:9A:B5:71:B6:9A:F8:56:50:AF:FE:DC:EF:E5:7D:2A:73:FD:6E:6C:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mrVxtpr4VlCv_tzv5X0qc_1ubKk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/fc251e-259c-47f5-ae30-3724535ecc1a/1/mrVxtpr4VlCv_tzv5X0qc_1ubKk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/fc251e-259c-47f5-ae30-3724535ecc1a/1/mrVxtpr4VlCv_tzv5X0qc_1ubKk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:99:5b:42:97:ac:96:3e:92:a1:e9:15:f2:f5:cb:19:ad:79: c6:6a:0b:f4:c1:0d:44:00:da:5a:2a:f3:a7:91:23:82:d5:1b: 1d:49:c1:63:ce:74:87:dd:3f:76:31:10:6a:c5:6d:3d:0f:53: df:57:6a:43:a4:9b:ea:91:2c:58:3f:d2:88:86:10:e2:f4:95: 0c:46:fc:c6:3f:ff:f2:a1:c4:4e:ab:c9:3f:c7:58:95:9d:70: a5:c6:c1:20:90:57:e1:44:0e:75:58:58:3a:1b:27:47:83:af: e4:46:97:6b:62:1a:19:42:74:d5:df:96:4a:02:ca:75:8a:ff: c4:1f:c1:7f:91:ba:1c:f6:08:88:76:f5:7a:54:cf:a0:41:68: 57:46:48:d0:94:2d:ab:01:5d:fa:a6:e0:8b:12:a5:05:b9:d5: 0d:ab:70:3e:8f:0f:1c:3d:b8:ff:93:57:af:cd:df:04:c7:fc: d4:0e:95:2a:05:0f:6b:c9:b7:c3:f7:2e:1c:76:01:9f:95:36: 26:03:6f:95:b5:f5:c7:90:63:06:b9:95:7b:26:30:27:2f:ae: 5c:3a:5e:38:4f:e8:38:1e:66:89:96:22:a6:57:ce:cc:de:69: a7:ca:a8:4a:b9:f6:cd:09:6f:c3:6e:02:ad:65:96:04:53:1c: ba:b5:14:97 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLME771M1CqJoCOU0f691MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhYjU3MWI2OWFmODU2NTBhZmZlZGNlZmU1N2QyYTczZmQ2 ZTZjYTkwHhcNMjUxMjA2MDEwMDMzWhcNMjUxMjA3MDEwMDMzWjAzMTEwLwYDVQQD EyhiMjU1ODAzZmNiYjUxYmNjOTdhNzdmNDg4ZGJmZjc2NzJjYWViMjJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnCr1HYbeNKJnrU1Nd2rYHAMSuKvk hUCSAks0+IbeaSDijXuK/uaeL7qoDs6/EgJV/vcNdY4LX1e1LeIMgt8DSrUWWmg2 1NwbOCN3ekVioD+uqMXrTjkbgT7O/f5b8ttBfQDqrlYgHrpv04MhXwD9XrLKW1xP tu5S3q/BE70g9SCNL0MRfo45eVjBznYvGb/1Zb0OdELQZdU4tW01HaIqx+W5ULGx 0BR9UAXUWGe0Bk5hqj0zF3WXI6HnDMZiQgvC9FTQ1yJNyAwZizoe4c+wjaSrkPIe HXLALBWpLMd/kiF8nTyR3GOVu60UaQ46aJK+2PDBiuCSGo4Ct+ROJgFVBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLJVgD/LtRvMl6d/SI2/92csrrItMB8GA1UdIwQY MBaAFJq1cbaa+FZQr/7c7+V9KnP9bmypMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbXJWeHRwcjRWbEN2X3R6djVYMHFjXzF1YktrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9mYzI1MWUtMjU5Yy00N2Y1LWFlMzAt MzcyNDUzNWVjYzFhLzEvbXJWeHRwcjRWbEN2X3R6djVYMHFjXzF1YktrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS9mYzI1MWUtMjU5Yy00N2Y1LWFlMzAtMzcyNDUzNWVjYzFh LzEvbXJWeHRwcjRWbEN2X3R6djVYMHFjXzF1YktrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkJlbQpes lj6SoekV8vXLGa15xmoL9MENRADaWirzp5EjgtUbHUnBY850h90/djEQasVtPQ9T 31dqQ6Sb6pEsWD/SiIYQ4vSVDEb8xj//8qHETqvJP8dYlZ1wpcbBIJBX4UQOdVhY OhsnR4Ov5EaXa2IaGUJ01d+WSgLKdYr/xB/Bf5G6HPYIiHb1elTPoEFoV0ZI0JQt qwFd+qbgixKlBbnVDatwPo8PHD24/5NXr83fBMf81A6VKgUPa8m3w/cuHHYBn5U2 JgNvlbX1x5BjBrmVeyYwJy+uXDpeOE/oOB5miZYiplfOzN5pp8qoSrn2zQlvw24C rWWWBFMcurUUlw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:12:01 2025 by rpki-client