This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/ce96f4-d85c-4fc5-9e98-500b8834289e/1/_vMpNgwbb8r79SU6ZX4-nX8iT34.mft File: _vMpNgwbb8r79SU6ZX4-nX8iT34.mft (raw, json) Hash identifier: 4oR2W4GuoLCo/3uq46BuOdZk6sNvl5PqVvIAvCtD/bI= Subject key identifier: 31:24:46:B2:9C:79:E5:2A:34:2C:06:AD:24:68:1E:FA:DD:3F:AA:E8 Authority key identifier: FE:F3:29:36:0C:1B:6F:CA:FB:F5:25:3A:65:7E:3E:9D:7F:22:4F:7E Certificate issuer: /CN=fef329360c1b6fcafbf5253a657e3e9d7f224f7e Certificate serial: 019AF5E5C8DF8DF3C2EBB2B565F44CC88CF3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_vMpNgwbb8r79SU6ZX4-nX8iT34.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/ce96f4-d85c-4fc5-9e98-500b8834289e/1/_vMpNgwbb8r79SU6ZX4-nX8iT34.mft Manifest number: 0B9C Signing time: Sat 06 Dec 2025 23:01:08 +0000 Manifest this update: Sat 06 Dec 2025 23:01:08 +0000 Manifest next update: Sun 07 Dec 2025 23:01:08 +0000 Files and hashes: 1: _vMpNgwbb8r79SU6ZX4-nX8iT34.crl (hash: Y9KYwwALYbdPyI060sjZd4KmY9jHQCtlIhsA+Iqx5Vo=) 2: sal7PYLJIpSNgfzX-mHBx92eZY4.roa (hash: y0fWbs+KX+1LX1FUo2i/E/BhGWNH/lzhBXcOY7rC0YY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/ce96f4-d85c-4fc5-9e98-500b8834289e/1/_vMpNgwbb8r79SU6ZX4-nX8iT34.crl rsync://rpki.ripe.net/repository/DEFAULT/86/ce96f4-d85c-4fc5-9e98-500b8834289e/1/_vMpNgwbb8r79SU6ZX4-nX8iT34.mft rsync://rpki.ripe.net/repository/DEFAULT/_vMpNgwbb8r79SU6ZX4-nX8iT34.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:e5:c8:df:8d:f3:c2:eb:b2:b5:65:f4:4c:c8:8c:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fef329360c1b6fcafbf5253a657e3e9d7f224f7e Validity Not Before: Dec 6 23:01:08 2025 GMT Not After : Dec 7 23:01:08 2025 GMT Subject: CN=312446b29c79e52a342c06ad24681efadd3faae8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:86:f6:47:00:91:2b:98:9e:5a:b7:a0:79:7b: 77:00:5e:d2:75:92:b1:63:ad:9d:fa:b1:18:87:18: 84:30:c2:b5:9d:2e:c5:fb:2c:ce:2f:48:11:76:24: 66:0b:20:c6:63:90:08:5e:70:ef:56:a5:e0:f4:9c: 8f:7e:5a:20:c0:a5:c2:f3:a4:22:ca:ef:7d:b8:5c: 07:90:13:a4:9f:75:73:fb:80:e8:14:a3:09:d3:d4: c3:d0:5d:6d:96:71:ff:a0:dd:0b:03:38:ef:68:0e: b5:da:c8:03:58:7e:3e:ff:f2:26:c9:ac:a6:a8:7f: f6:78:cf:9c:29:26:0f:f6:f6:c4:27:a1:4d:1d:cc: 41:41:7f:ae:d9:99:72:b6:45:15:8b:e0:08:cf:6b: f9:4e:b8:8c:29:09:1b:13:56:0c:aa:82:86:a6:56: a9:88:7b:59:b3:3a:e0:8c:ec:5e:49:a8:b6:ba:5c: 10:68:68:dd:c2:aa:a8:35:f6:36:52:fc:8a:35:a1: 84:df:a8:a6:19:ca:b0:c1:e6:c2:d0:7b:55:82:4a: 5d:95:b4:13:1e:27:86:9d:eb:39:54:08:f8:b8:9a: 2b:93:a4:06:01:5e:db:32:1f:9c:35:f3:2e:ce:a7: 85:1a:5c:b3:73:b9:39:48:aa:2a:0f:92:0d:35:8f: c9:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:24:46:B2:9C:79:E5:2A:34:2C:06:AD:24:68:1E:FA:DD:3F:AA:E8 X509v3 Authority Key Identifier: keyid:FE:F3:29:36:0C:1B:6F:CA:FB:F5:25:3A:65:7E:3E:9D:7F:22:4F:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_vMpNgwbb8r79SU6ZX4-nX8iT34.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/ce96f4-d85c-4fc5-9e98-500b8834289e/1/_vMpNgwbb8r79SU6ZX4-nX8iT34.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/86/ce96f4-d85c-4fc5-9e98-500b8834289e/1/_vMpNgwbb8r79SU6ZX4-nX8iT34.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:be:f8:a5:fd:84:57:e4:41:45:41:a7:a5:1d:9e:03:bd:b7: e1:da:3e:e5:6b:0f:a3:29:19:64:67:97:c4:bf:32:57:08:10: 2b:73:81:55:82:d2:e2:df:8b:b8:2a:6e:20:8b:3b:3b:5f:37: 8b:42:e3:1b:dc:b6:49:fe:36:3a:1d:02:17:3d:e2:5f:af:7e: 44:23:10:ec:47:f5:4c:c7:90:d0:d6:e3:4d:09:d1:a4:22:fe: 4e:1f:f1:d6:43:a7:93:fb:71:0b:d8:91:07:7b:bb:df:29:da: 50:09:ea:df:a5:aa:19:27:96:3c:0f:68:3a:48:46:38:2f:32: 22:6e:b7:a2:9d:24:fb:2e:21:1b:00:af:e2:5c:91:d5:51:20: ce:50:7e:e9:96:78:67:0f:b5:7f:4a:67:b5:07:98:7b:9a:f9: c2:1e:db:38:4c:43:69:33:f0:ae:ee:4a:85:1b:0b:5f:56:dd: d5:7d:0c:89:9d:bf:00:46:45:49:06:02:bc:47:a6:c3:ca:66: 69:35:b2:02:72:fb:a5:d2:c5:f8:da:fd:06:a6:a7:eb:f8:7d: d1:99:e1:3e:10:87:ea:7c:5d:4f:88:8a:96:ed:64:a3:06:5c: 23:71:10:04:54:c6:62:f7:f5:d3:70:df:c4:e6:fa:8e:42:79: 96:b3:95:dc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr15cjfjfPC67K1ZfRMyIzzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZlZjMyOTM2MGMxYjZmY2FmYmY1MjUzYTY1N2UzZTlkN2Yy MjRmN2UwHhcNMjUxMjA2MjMwMTA4WhcNMjUxMjA3MjMwMTA4WjAzMTEwLwYDVQQD EygzMTI0NDZiMjljNzllNTJhMzQyYzA2YWQyNDY4MWVmYWRkM2ZhYWU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzYb2RwCRK5ieWregeXt3AF7SdZKx Y62d+rEYhxiEMMK1nS7F+yzOL0gRdiRmCyDGY5AIXnDvVqXg9JyPflogwKXC86Qi yu99uFwHkBOkn3Vz+4DoFKMJ09TD0F1tlnH/oN0LAzjvaA612sgDWH4+//Imyaym qH/2eM+cKSYP9vbEJ6FNHcxBQX+u2ZlytkUVi+AIz2v5TriMKQkbE1YMqoKGplap iHtZszrgjOxeSai2ulwQaGjdwqqoNfY2UvyKNaGE36imGcqwwebC0HtVgkpdlbQT HieGnes5VAj4uJork6QGAV7bMh+cNfMuzqeFGlyzc7k5SKoqD5INNY/JaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDEkRrKceeUqNCwGrSRoHvrdP6roMB8GA1UdIwQY MBaAFP7zKTYMG2/K+/UlOmV+Pp1/Ik9+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX3ZNcE5nd2JiOHI3OVNVNlpYNC1uWDhpVDM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni9jZTk2ZjQtZDg1Yy00ZmM1LTllOTgt NTAwYjg4MzQyODllLzEvX3ZNcE5nd2JiOHI3OVNVNlpYNC1uWDhpVDM0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ni9jZTk2ZjQtZDg1Yy00ZmM1LTllOTgtNTAwYjg4MzQyODll LzEvX3ZNcE5nd2JiOHI3OVNVNlpYNC1uWDhpVDM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOL74pf2E V+RBRUGnpR2eA7234do+5WsPoykZZGeXxL8yVwgQK3OBVYLS4t+LuCpuIIs7O183 i0LjG9y2Sf42Oh0CFz3iX69+RCMQ7Ef1TMeQ0NbjTQnRpCL+Th/x1kOnk/txC9iR B3u73ynaUAnq36WqGSeWPA9oOkhGOC8yIm63op0k+y4hGwCv4lyR1VEgzlB+6ZZ4 Zw+1f0pntQeYe5r5wh7bOExDaTPwru5KhRsLX1bd1X0MiZ2/AEZFSQYCvEemw8pm aTWyAnL7pdLF+Nr9Bqan6/h90ZnhPhCH6nxdT4iKlu1kowZcI3EQBFTGYvf103Df xOb6jkJ5lrOV3A== -----END CERTIFICATE-----Generated at Sun Dec 7 03:57:13 2025 by rpki-client