This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/51d4b5-c27d-4b7c-9070-721175d65eb8/1/MVGMe1S0QScIP2JtPhUY9EVM4FU.mft File: MVGMe1S0QScIP2JtPhUY9EVM4FU.mft (raw, json) Hash identifier: ANTfv9/AESE7wP6hc8PLXyUHmJtA8SaAOL/kNhjMKV8= Subject key identifier: 97:46:C5:91:8B:4B:B1:33:8A:20:91:38:23:6B:1C:14:F4:B2:B9:3B Authority key identifier: 31:51:8C:7B:54:B4:41:27:08:3F:62:6D:3E:15:18:F4:45:4C:E0:55 Certificate issuer: /CN=31518c7b54b44127083f626d3e1518f4454ce055 Certificate serial: 019B2C66E364F3E99CC92709A7C0DC3A5A28 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MVGMe1S0QScIP2JtPhUY9EVM4FU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/51d4b5-c27d-4b7c-9070-721175d65eb8/1/MVGMe1S0QScIP2JtPhUY9EVM4FU.mft Manifest number: 0450 Signing time: Wed 17 Dec 2025 13:01:38 +0000 Manifest this update: Wed 17 Dec 2025 13:01:38 +0000 Manifest next update: Thu 18 Dec 2025 13:01:38 +0000 Files and hashes: 1: MVGMe1S0QScIP2JtPhUY9EVM4FU.crl (hash: hnjU1sN+w/mD9R1Be/q+ZmgUyP09CckF05jrcGuU4NY=) 2: Z8_72VViKIEya-8jYQ4foPa8uyM.roa (hash: VfRJSQVqCqPZi9LVFFlh6oeMG2gSmAPtA9TzAjDBjm8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/51d4b5-c27d-4b7c-9070-721175d65eb8/1/MVGMe1S0QScIP2JtPhUY9EVM4FU.crl rsync://rpki.ripe.net/repository/DEFAULT/8c/51d4b5-c27d-4b7c-9070-721175d65eb8/1/MVGMe1S0QScIP2JtPhUY9EVM4FU.mft rsync://rpki.ripe.net/repository/DEFAULT/MVGMe1S0QScIP2JtPhUY9EVM4FU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 13:01:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2c:66:e3:64:f3:e9:9c:c9:27:09:a7:c0:dc:3a:5a:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31518c7b54b44127083f626d3e1518f4454ce055 Validity Not Before: Dec 17 13:01:38 2025 GMT Not After : Dec 18 13:01:38 2025 GMT Subject: CN=9746c5918b4bb1338a209138236b1c14f4b2b93b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:79:62:4f:f7:bc:23:2b:3b:2f:8d:02:9a:a2: 9f:7d:da:f7:65:59:d3:ed:ad:ab:68:55:71:eb:79: ee:cf:bf:06:81:d9:c0:32:6c:b8:11:0c:ba:ae:e9: fd:1b:c7:f3:73:0e:13:62:e6:92:ee:7a:66:2b:65: ad:97:67:40:20:1e:f9:09:ef:7a:4c:c6:4a:ef:ff: fc:16:27:3e:65:f4:d0:92:37:e7:8f:8f:27:d3:68: 28:66:35:b9:26:ff:72:f7:f6:4b:d9:69:8c:6b:af: bf:83:c2:2d:72:08:e5:d3:91:00:be:ff:d0:0c:64: 96:a4:cc:3c:28:34:4f:d9:5e:02:84:1d:15:f3:bb: 69:59:37:01:80:f8:6e:e4:c6:72:74:60:43:1b:34: 29:a9:2c:b2:1d:29:f5:b3:4e:dc:a4:ab:2b:5f:0a: af:5b:5a:a1:52:25:f2:ca:25:63:24:11:4f:ee:28: ac:bc:18:73:53:04:9d:cd:f3:1b:d4:35:af:55:ed: 2c:43:fe:2a:bc:f7:d4:10:39:49:de:70:fd:92:ed: 0a:6d:3a:67:98:46:88:af:96:56:fe:03:d3:40:a2: 15:fa:e4:4c:48:cd:c5:66:de:58:24:cd:91:a1:f0: ee:5e:d4:ca:32:e6:ed:fb:cc:d2:c3:13:13:80:af: 22:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:46:C5:91:8B:4B:B1:33:8A:20:91:38:23:6B:1C:14:F4:B2:B9:3B X509v3 Authority Key Identifier: keyid:31:51:8C:7B:54:B4:41:27:08:3F:62:6D:3E:15:18:F4:45:4C:E0:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MVGMe1S0QScIP2JtPhUY9EVM4FU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/51d4b5-c27d-4b7c-9070-721175d65eb8/1/MVGMe1S0QScIP2JtPhUY9EVM4FU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/51d4b5-c27d-4b7c-9070-721175d65eb8/1/MVGMe1S0QScIP2JtPhUY9EVM4FU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:12:86:4c:3f:07:07:02:de:f7:63:2b:f3:80:3c:2e:9d:da: ed:05:09:6c:bc:45:aa:10:70:16:da:df:b6:ae:eb:1f:3a:52: cd:fd:92:5c:de:8c:db:b8:10:02:8c:b2:03:6a:f8:b9:1a:26: f6:73:e8:44:32:77:09:9f:ce:31:5f:f1:d3:bf:25:f5:51:68: 59:31:03:03:25:5d:88:c9:a7:39:75:3f:70:ef:44:88:40:e0: 43:8f:65:65:da:b3:c6:7f:13:28:a9:ed:bf:4d:c7:4b:4e:a2: cc:30:57:7a:af:5a:c7:0a:42:77:66:ef:63:29:2b:35:06:7e: 0e:0c:f8:54:4b:0b:72:4d:cf:4f:16:5d:24:4d:90:24:14:2f: ca:c9:3b:ac:59:4d:c2:25:ff:24:88:ba:a0:19:d0:dc:3b:8a: 7b:d5:87:74:ef:d1:c7:19:1d:c6:55:c8:16:d9:00:43:c5:f1: 33:58:f1:db:e3:d9:a0:25:84:9e:4a:79:0c:80:c1:9e:b3:39: 2e:5f:c2:79:fb:4a:89:ea:58:ea:40:3d:71:25:cc:52:f9:a8: b2:d9:04:43:82:0a:c1:c0:e2:50:52:17:d6:60:8a:76:b9:cb: f9:ab:15:3f:7f:62:e4:50:2f:c2:bf:2f:42:46:19:a0:ca:0a: ae:8c:e0:fd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZssZuNk8+mcyScJp8DcOlooMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxNTE4YzdiNTRiNDQxMjcwODNmNjI2ZDNlMTUxOGY0NDU0 Y2UwNTUwHhcNMjUxMjE3MTMwMTM4WhcNMjUxMjE4MTMwMTM4WjAzMTEwLwYDVQQD Eyg5NzQ2YzU5MThiNGJiMTMzOGEyMDkxMzgyMzZiMWMxNGY0YjJiOTNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA53liT/e8Iys7L40CmqKffdr3ZVnT 7a2raFVx63nuz78GgdnAMmy4EQy6run9G8fzcw4TYuaS7npmK2Wtl2dAIB75Ce96 TMZK7//8Fic+ZfTQkjfnj48n02goZjW5Jv9y9/ZL2WmMa6+/g8Itcgjl05EAvv/Q DGSWpMw8KDRP2V4ChB0V87tpWTcBgPhu5MZydGBDGzQpqSyyHSn1s07cpKsrXwqv W1qhUiXyyiVjJBFP7iisvBhzUwSdzfMb1DWvVe0sQ/4qvPfUEDlJ3nD9ku0KbTpn mEaIr5ZW/gPTQKIV+uRMSM3FZt5YJM2RofDuXtTKMubt+8zSwxMTgK8iuQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJdGxZGLS7EziiCROCNrHBT0srk7MB8GA1UdIwQY MBaAFDFRjHtUtEEnCD9ibT4VGPRFTOBVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTVZHTWUxUzBRU2NJUDJKdFBoVVk5RVZNNEZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy81MWQ0YjUtYzI3ZC00YjdjLTkwNzAt NzIxMTc1ZDY1ZWI4LzEvTVZHTWUxUzBRU2NJUDJKdFBoVVk5RVZNNEZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yy81MWQ0YjUtYzI3ZC00YjdjLTkwNzAtNzIxMTc1ZDY1ZWI4 LzEvTVZHTWUxUzBRU2NJUDJKdFBoVVk5RVZNNEZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVhKGTD8H BwLe92Mr84A8Lp3a7QUJbLxFqhBwFtrftq7rHzpSzf2SXN6M27gQAoyyA2r4uRom 9nPoRDJ3CZ/OMV/x078l9VFoWTEDAyVdiMmnOXU/cO9EiEDgQ49lZdqzxn8TKKnt v03HS06izDBXeq9axwpCd2bvYykrNQZ+Dgz4VEsLck3PTxZdJE2QJBQvysk7rFlN wiX/JIi6oBnQ3DuKe9WHdO/RxxkdxlXIFtkAQ8XxM1jx2+PZoCWEnkp5DIDBnrM5 Ll/CeftKiepY6kA9cSXMUvmostkEQ4IKwcDiUFIX1mCKdrnL+asVP39i5FAvwr8v QkYZoMoKrozg/Q== -----END CERTIFICATE-----Generated at Wed Dec 17 23:27:45 2025 by rpki-client