This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/2a7472-cbb8-4c99-be21-11b4afbede19/1/MAVrA3XYlLk8sOJtm01koIxYNx4.mft File: MAVrA3XYlLk8sOJtm01koIxYNx4.mft (raw, json) Hash identifier: umtVphQ6dGGK98WRGlFnwmBmmi3I/ToHhGc3xUEqZwM= Subject key identifier: 3B:DA:8E:5B:84:F8:3B:36:98:76:9C:83:1B:1D:92:14:79:24:7D:CE Authority key identifier: 30:05:6B:03:75:D8:94:B9:3C:B0:E2:6D:9B:4D:64:A0:8C:58:37:1E Certificate issuer: /CN=30056b0375d894b93cb0e26d9b4d64a08c58371e Certificate serial: 019AF61C27B8A5AAF5DDF5800D977703E2FB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MAVrA3XYlLk8sOJtm01koIxYNx4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/2a7472-cbb8-4c99-be21-11b4afbede19/1/MAVrA3XYlLk8sOJtm01koIxYNx4.mft Manifest number: 0CED Signing time: Sun 07 Dec 2025 00:00:31 +0000 Manifest this update: Sun 07 Dec 2025 00:00:31 +0000 Manifest next update: Mon 08 Dec 2025 00:00:31 +0000 Files and hashes: 1: 3O6Y3eQ5OpGsAft35AyeyfVjQ6o.roa (hash: u+uYD6/L10KdiWIH/nhFz7IkGG28050DGlwgSDFBhnk=) 2: MAVrA3XYlLk8sOJtm01koIxYNx4.crl (hash: 5FhuzZ2gZ4Vfl7RWVO9wR56rWt2UbIvqFlJMqjSaxfg=) 3: vQwx6cGSIAT7m9K8R35GzUVPtvc.roa (hash: zbCFg7Xh1dqpHRv2DApSfzHkCmAjvg9jJtigoE/GHhk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/2a7472-cbb8-4c99-be21-11b4afbede19/1/MAVrA3XYlLk8sOJtm01koIxYNx4.crl rsync://rpki.ripe.net/repository/DEFAULT/21/2a7472-cbb8-4c99-be21-11b4afbede19/1/MAVrA3XYlLk8sOJtm01koIxYNx4.mft rsync://rpki.ripe.net/repository/DEFAULT/MAVrA3XYlLk8sOJtm01koIxYNx4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:1c:27:b8:a5:aa:f5:dd:f5:80:0d:97:77:03:e2:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30056b0375d894b93cb0e26d9b4d64a08c58371e Validity Not Before: Dec 7 00:00:31 2025 GMT Not After : Dec 8 00:00:31 2025 GMT Subject: CN=3bda8e5b84f83b3698769c831b1d921479247dce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:aa:4a:c9:36:c6:99:ee:4e:2f:2a:f7:9c:54: 12:17:db:b0:15:1a:34:78:18:20:43:dd:c5:51:38: 2b:98:1b:9f:29:8b:3a:20:da:d9:48:a0:7b:1c:cd: 53:15:41:53:19:42:2c:e6:50:4c:77:b4:32:da:6b: 14:7f:30:82:eb:4a:2c:ed:24:7e:d6:b9:62:5c:e0: 36:66:e7:c6:f8:ba:37:72:c0:cf:57:ea:95:51:9e: f6:2f:86:d0:b6:aa:dd:53:5a:63:04:19:fe:b8:4c: bc:d2:b9:a5:c3:a3:f0:94:ff:f7:88:aa:57:01:64: 38:8a:49:71:00:19:b3:ce:52:de:2b:26:37:47:52: 7d:86:bd:1a:47:97:c6:66:2f:59:e2:c7:f7:ad:a4: a3:5b:e5:84:1e:13:ba:1a:6b:f6:75:94:f2:30:e6: 9e:63:28:9f:f5:b1:18:4a:cd:a6:7e:e5:60:37:77: b7:b2:15:52:95:8f:d0:8b:b6:ba:f6:52:bf:33:2a: b5:77:a0:8f:3a:d6:4d:62:75:5f:52:74:ab:57:e4: 8e:69:40:f1:d7:a0:10:c1:d0:e1:be:ca:41:d6:5d: c8:53:ca:e1:74:64:30:2d:b2:37:46:a7:71:f1:ec: 01:f9:a6:24:c4:ed:4c:5f:39:f3:fc:ba:af:ff:26: 62:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:DA:8E:5B:84:F8:3B:36:98:76:9C:83:1B:1D:92:14:79:24:7D:CE X509v3 Authority Key Identifier: keyid:30:05:6B:03:75:D8:94:B9:3C:B0:E2:6D:9B:4D:64:A0:8C:58:37:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MAVrA3XYlLk8sOJtm01koIxYNx4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2a7472-cbb8-4c99-be21-11b4afbede19/1/MAVrA3XYlLk8sOJtm01koIxYNx4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2a7472-cbb8-4c99-be21-11b4afbede19/1/MAVrA3XYlLk8sOJtm01koIxYNx4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:5d:20:1d:4c:8f:84:db:62:f0:65:da:f2:a3:25:f6:8e:7c: 71:bc:8b:ba:6b:2e:01:33:dd:44:12:16:48:7d:3e:31:c2:53: bf:89:d8:2e:2c:7d:0d:04:4a:cc:75:d4:c0:50:02:1a:87:cf: 77:02:dd:5b:d4:2c:83:d0:35:5f:5e:2f:5d:16:4c:b9:59:fd: 0d:07:54:4b:b4:15:c2:52:e7:dc:90:b4:65:4c:5d:af:7f:b0: 05:79:9b:c1:80:11:8b:72:aa:9d:67:6e:fc:41:cc:9b:20:0d: 36:59:57:82:4c:9b:2d:b2:ee:94:25:d9:f5:b2:2e:03:3a:6e: 43:17:94:07:ab:cd:16:36:a2:7a:a5:b4:8d:d8:b3:91:96:ee: 42:7c:59:17:f9:c6:11:d1:ee:aa:c3:92:0a:08:a7:6d:41:f3: a0:72:aa:26:5b:79:0d:fb:ff:0b:40:ad:8f:e0:6c:d2:c3:df: 55:99:49:88:c6:2b:73:41:97:55:7e:f8:9c:7f:eb:de:a9:27: 0a:21:85:2c:bc:a9:c4:7f:b4:ca:b9:1b:33:75:e2:d2:a4:2e: f1:53:31:4d:42:21:28:bd:88:3e:fa:d9:6a:b8:37:65:f1:3b: dd:d7:c2:b8:c5:10:5a:7c:49:ae:73:ef:75:e0:0f:52:2f:e4: e5:b4:4d:0b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2HCe4par13fWADZd3A+L7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwMDU2YjAzNzVkODk0YjkzY2IwZTI2ZDliNGQ2NGEwOGM1 ODM3MWUwHhcNMjUxMjA3MDAwMDMxWhcNMjUxMjA4MDAwMDMxWjAzMTEwLwYDVQQD EygzYmRhOGU1Yjg0ZjgzYjM2OTg3NjljODMxYjFkOTIxNDc5MjQ3ZGNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr6pKyTbGme5OLyr3nFQSF9uwFRo0 eBggQ93FUTgrmBufKYs6INrZSKB7HM1TFUFTGUIs5lBMd7Qy2msUfzCC60os7SR+ 1rliXOA2ZufG+Lo3csDPV+qVUZ72L4bQtqrdU1pjBBn+uEy80rmlw6PwlP/3iKpX AWQ4iklxABmzzlLeKyY3R1J9hr0aR5fGZi9Z4sf3raSjW+WEHhO6Gmv2dZTyMOae Yyif9bEYSs2mfuVgN3e3shVSlY/Qi7a69lK/Myq1d6CPOtZNYnVfUnSrV+SOaUDx 16AQwdDhvspB1l3IU8rhdGQwLbI3Rqdx8ewB+aYkxO1MXznz/Lqv/yZiwQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDvajluE+Ds2mHacgxsdkhR5JH3OMB8GA1UdIwQY MBaAFDAFawN12JS5PLDibZtNZKCMWDceMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTUFWckEzWFlsTGs4c09KdG0wMWtvSXhZTng0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS8yYTc0NzItY2JiOC00Yzk5LWJlMjEt MTFiNGFmYmVkZTE5LzEvTUFWckEzWFlsTGs4c09KdG0wMWtvSXhZTng0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMS8yYTc0NzItY2JiOC00Yzk5LWJlMjEtMTFiNGFmYmVkZTE5 LzEvTUFWckEzWFlsTGs4c09KdG0wMWtvSXhZTng0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANF0gHUyP hNti8GXa8qMl9o58cbyLumsuATPdRBIWSH0+McJTv4nYLix9DQRKzHXUwFACGofP dwLdW9Qsg9A1X14vXRZMuVn9DQdUS7QVwlLn3JC0ZUxdr3+wBXmbwYARi3KqnWdu /EHMmyANNllXgkybLbLulCXZ9bIuAzpuQxeUB6vNFjaieqW0jdizkZbuQnxZF/nG EdHuqsOSCginbUHzoHKqJlt5Dfv/C0Ctj+Bs0sPfVZlJiMYrc0GXVX74nH/r3qkn CiGFLLypxH+0yrkbM3Xi0qQu8VMxTUIhKL2IPvrZarg3ZfE73dfCuMUQWnxJrnPv deAPUi/k5bRNCw== -----END CERTIFICATE-----Generated at Sun Dec 7 03:12:23 2025 by rpki-client