This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/69b08d-7c97-432f-b4bf-51e821d23141/1/MRRFNToII-2u8So6M1b6gJjhXqw.mft File: MRRFNToII-2u8So6M1b6gJjhXqw.mft (raw, json) Hash identifier: CB372IeMWqiBeksdUMKi8W4dHjKA9b1mfhspFKRqVvg= Subject key identifier: FD:C3:BC:17:93:A3:AA:0B:74:CE:B0:23:49:EB:A7:31:86:A1:5D:EF Authority key identifier: 31:14:45:35:3A:08:23:ED:AE:F1:2A:3A:33:56:FA:80:98:E1:5E:AC Certificate issuer: /CN=311445353a0823edaef12a3a3356fa8098e15eac Certificate serial: 019AF209485C454BD612A304269A486E7890 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MRRFNToII-2u8So6M1b6gJjhXqw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/69b08d-7c97-432f-b4bf-51e821d23141/1/MRRFNToII-2u8So6M1b6gJjhXqw.mft Manifest number: 0DDB Signing time: Sat 06 Dec 2025 05:01:25 +0000 Manifest this update: Sat 06 Dec 2025 05:01:25 +0000 Manifest next update: Sun 07 Dec 2025 05:01:25 +0000 Files and hashes: 1: MRRFNToII-2u8So6M1b6gJjhXqw.crl (hash: sikSThzKSv0trZ3SG8dKT6uj1ScGAdgCbRkqM/z8liw=) 2: Mv9wQiaEyUk3-XuVJoSinHpzB2g.roa (hash: ZIu/bU0ql4U4qIOYcI80NNWYWWCG67vptIw8Gwe6w3Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/69b08d-7c97-432f-b4bf-51e821d23141/1/MRRFNToII-2u8So6M1b6gJjhXqw.crl rsync://rpki.ripe.net/repository/DEFAULT/66/69b08d-7c97-432f-b4bf-51e821d23141/1/MRRFNToII-2u8So6M1b6gJjhXqw.mft rsync://rpki.ripe.net/repository/DEFAULT/MRRFNToII-2u8So6M1b6gJjhXqw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:48:5c:45:4b:d6:12:a3:04:26:9a:48:6e:78:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=311445353a0823edaef12a3a3356fa8098e15eac Validity Not Before: Dec 6 05:01:25 2025 GMT Not After : Dec 7 05:01:25 2025 GMT Subject: CN=fdc3bc1793a3aa0b74ceb02349eba73186a15def Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:0d:12:81:d2:14:8b:33:07:fb:cc:a4:70:64: 37:c5:60:19:00:97:6c:28:d8:4d:47:92:57:62:1d: 96:68:96:47:29:18:d9:7a:aa:36:7f:4b:bd:f9:5d: 9d:c3:ef:89:bf:47:b2:4d:0b:08:09:76:22:45:5e: b0:e4:bd:ee:05:67:cd:cc:49:2d:af:a7:f9:4f:6b: 3c:6b:c8:a8:a6:f8:c2:a5:c7:ff:41:cc:9e:7d:be: bd:9f:c7:b2:df:1d:21:fe:7a:2a:e8:b4:f9:ac:5c: 2b:04:12:ef:5e:cd:4b:3b:af:28:27:35:2c:7e:ff: ee:b5:93:df:36:ee:0b:f9:f7:e7:21:98:1f:44:49: 55:86:2d:72:a2:66:a1:17:a4:64:c7:00:3e:e6:3c: de:fb:16:45:7e:39:af:a2:72:ea:4c:22:31:91:a4: b7:59:4e:61:7d:38:f5:41:c4:79:45:2e:a7:f8:c8: aa:3e:56:33:99:a0:cd:40:2f:d6:ea:44:8f:ad:f7: df:d0:05:d2:dd:40:07:df:74:4a:82:88:49:ac:66: 9d:d8:9d:b0:25:ef:bd:3b:5d:d2:b9:ad:cc:4c:36: 80:d3:37:af:36:69:32:f5:45:ef:b0:3c:f4:f2:33: fd:4d:79:87:ec:75:58:82:5c:fa:ea:5b:36:78:03: 7d:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:C3:BC:17:93:A3:AA:0B:74:CE:B0:23:49:EB:A7:31:86:A1:5D:EF X509v3 Authority Key Identifier: keyid:31:14:45:35:3A:08:23:ED:AE:F1:2A:3A:33:56:FA:80:98:E1:5E:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MRRFNToII-2u8So6M1b6gJjhXqw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/69b08d-7c97-432f-b4bf-51e821d23141/1/MRRFNToII-2u8So6M1b6gJjhXqw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/69b08d-7c97-432f-b4bf-51e821d23141/1/MRRFNToII-2u8So6M1b6gJjhXqw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:e3:0d:3a:bd:b2:71:f3:26:f7:30:6f:95:8b:ec:3d:3b:0d: d6:8c:a1:be:4e:04:2f:b9:45:bf:70:08:5e:a1:d2:cb:b7:1a: 93:c2:de:e1:44:7e:e7:b3:18:b2:61:f3:7a:08:a4:3e:0f:a5: fc:da:d1:b0:0b:14:d4:31:89:f5:f2:48:46:0c:a0:18:4e:1b: a3:8f:71:85:d2:63:bb:e4:3d:c3:b8:ba:98:58:6d:11:d7:35: 84:da:5a:19:86:94:08:88:53:17:1a:f5:c0:f6:d2:36:62:a0: 55:a9:76:55:01:b8:3e:57:12:f3:dc:49:f1:a1:21:5c:51:32: b2:26:1c:00:9b:cd:45:f1:f6:cd:27:56:55:43:37:12:5c:97: 9c:fe:dc:04:b6:7a:bf:10:c8:31:be:61:bd:ce:07:de:ae:78: 86:22:2f:fe:05:35:95:93:d9:b8:cf:7a:6a:9a:b7:1f:a8:9f: 05:cb:b9:db:d6:0e:6f:74:b2:9f:96:0a:8a:a4:6b:c7:5a:b5: b4:db:c0:7b:26:ee:f1:57:6d:48:c6:25:c5:ee:87:df:f6:6c: 97:a8:0f:02:f9:08:a7:a5:d4:30:cf:79:88:f2:c6:74:7d:dc: e1:e3:90:38:cf:d5:f3:ef:7d:c2:96:99:f4:be:5f:fa:50:76: 27:61:cd:b9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCUhcRUvWEqMEJppIbniQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxMTQ0NTM1M2EwODIzZWRhZWYxMmEzYTMzNTZmYTgwOThl MTVlYWMwHhcNMjUxMjA2MDUwMTI1WhcNMjUxMjA3MDUwMTI1WjAzMTEwLwYDVQQD EyhmZGMzYmMxNzkzYTNhYTBiNzRjZWIwMjM0OWViYTczMTg2YTE1ZGVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArw0SgdIUizMH+8ykcGQ3xWAZAJds KNhNR5JXYh2WaJZHKRjZeqo2f0u9+V2dw++Jv0eyTQsICXYiRV6w5L3uBWfNzEkt r6f5T2s8a8iopvjCpcf/Qcyefb69n8ey3x0h/noq6LT5rFwrBBLvXs1LO68oJzUs fv/utZPfNu4L+ffnIZgfRElVhi1yomahF6RkxwA+5jze+xZFfjmvonLqTCIxkaS3 WU5hfTj1QcR5RS6n+MiqPlYzmaDNQC/W6kSPrfff0AXS3UAH33RKgohJrGad2J2w Je+9O13Sua3MTDaA0zevNmky9UXvsDz08jP9TXmH7HVYglz66ls2eAN94wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP3DvBeTo6oLdM6wI0nrpzGGoV3vMB8GA1UdIwQY MBaAFDEURTU6CCPtrvEqOjNW+oCY4V6sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTVJSRk5Ub0lJLTJ1OFNvNk0xYjZnSmpoWHF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni82OWIwOGQtN2M5Ny00MzJmLWI0YmYt NTFlODIxZDIzMTQxLzEvTVJSRk5Ub0lJLTJ1OFNvNk0xYjZnSmpoWHF3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni82OWIwOGQtN2M5Ny00MzJmLWI0YmYtNTFlODIxZDIzMTQx LzEvTVJSRk5Ub0lJLTJ1OFNvNk0xYjZnSmpoWHF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADeMNOr2y cfMm9zBvlYvsPTsN1oyhvk4EL7lFv3AIXqHSy7cak8Le4UR+57MYsmHzegikPg+l /NrRsAsU1DGJ9fJIRgygGE4bo49xhdJju+Q9w7i6mFhtEdc1hNpaGYaUCIhTFxr1 wPbSNmKgVal2VQG4PlcS89xJ8aEhXFEysiYcAJvNRfH2zSdWVUM3ElyXnP7cBLZ6 vxDIMb5hvc4H3q54hiIv/gU1lZPZuM96apq3H6ifBcu529YOb3Syn5YKiqRrx1q1 tNvAeybu8VdtSMYlxe6H3/Zsl6gPAvkIp6XUMM95iPLGdH3c4eOQOM/V8+99wpaZ 9L5f+lB2J2HNuQ== -----END CERTIFICATE-----Generated at Sat Dec 6 12:39:44 2025 by rpki-client