This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/149cf6-611d-4e03-a660-dce1127ab223/1/cMvrOI9ZAsFhYLvtCWLLYisruDI.mft File: cMvrOI9ZAsFhYLvtCWLLYisruDI.mft (raw, json) Hash identifier: 2A0lqfGD2Y3wBtduXzcVRYFb0DrQdm6KoU3qZjkbw3Q= Subject key identifier: 72:D7:A3:2D:00:C1:D6:1B:8E:AF:DB:06:EF:60:AC:9A:34:44:59:B8 Authority key identifier: 70:CB:EB:38:8F:59:02:C1:61:60:BB:ED:09:62:CB:62:2B:2B:B8:32 Certificate issuer: /CN=70cbeb388f5902c16160bbed0962cb622b2bb832 Certificate serial: 019AF2098A58055E77F296F64CA007CDFDE9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cMvrOI9ZAsFhYLvtCWLLYisruDI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/149cf6-611d-4e03-a660-dce1127ab223/1/cMvrOI9ZAsFhYLvtCWLLYisruDI.mft Manifest number: 0D76 Signing time: Sat 06 Dec 2025 05:01:42 +0000 Manifest this update: Sat 06 Dec 2025 05:01:42 +0000 Manifest next update: Sun 07 Dec 2025 05:01:42 +0000 Files and hashes: 1: Jx2nTRr5pEsEFWo_5nDYJEdIJkI.roa (hash: 5SCIBFwRcqmCVA4jK7ObW5hmOVN8QwAIditbrQHD6YU=) 2: cMvrOI9ZAsFhYLvtCWLLYisruDI.crl (hash: 7jx5FYp0fi2GiCiAz70ThTD/fl5Q9GNMkomYvb0PRII=) 3: fVZny3FRspGg7D4Ss3AUbX0JyBI.roa (hash: SocyXocZHSo8f5zsAWiffJrBZyiPOdy55HQXZcolvh4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/149cf6-611d-4e03-a660-dce1127ab223/1/cMvrOI9ZAsFhYLvtCWLLYisruDI.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/149cf6-611d-4e03-a660-dce1127ab223/1/cMvrOI9ZAsFhYLvtCWLLYisruDI.mft rsync://rpki.ripe.net/repository/DEFAULT/cMvrOI9ZAsFhYLvtCWLLYisruDI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:8a:58:05:5e:77:f2:96:f6:4c:a0:07:cd:fd:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70cbeb388f5902c16160bbed0962cb622b2bb832 Validity Not Before: Dec 6 05:01:42 2025 GMT Not After : Dec 7 05:01:42 2025 GMT Subject: CN=72d7a32d00c1d61b8eafdb06ef60ac9a344459b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:42:a6:f1:3b:ad:20:96:b5:53:e1:be:7f:be: 71:f5:1d:8a:9b:a1:18:f4:a8:2c:62:18:73:f3:6b: 98:af:df:bd:c5:13:90:62:e2:2e:eb:f4:62:43:82: f9:01:2d:c7:4b:cd:4b:44:75:70:db:3a:b7:bd:6a: 62:61:d7:4c:38:c7:32:62:1f:2d:b0:f9:90:c4:dd: 11:24:40:00:94:95:ca:ef:8e:ab:b2:63:3e:0f:57: 86:c1:71:55:cc:8a:d5:e0:68:92:62:93:21:d3:3b: 10:26:b6:21:ac:ba:f9:d4:be:c1:70:64:e5:7a:08: 4f:72:06:e7:97:ad:aa:d3:38:64:bf:e5:a1:ed:39: 11:db:3b:ea:b0:d8:bd:f4:17:74:b9:d5:8d:4e:5e: d1:a1:7f:2f:67:00:82:60:17:58:75:78:f1:c5:54: 5a:42:40:6e:81:ce:cb:76:04:3e:ae:8b:54:53:18: 29:b0:fb:72:0a:08:3c:f1:d4:20:54:37:93:69:59: 07:0e:a4:86:5f:93:66:6c:8f:eb:90:18:5e:91:7a: 32:ff:0f:f6:f2:32:71:7b:53:b2:98:53:22:52:68: ec:19:89:db:0c:39:88:33:e1:7d:cb:9c:99:89:05: 71:2e:e8:60:c5:b5:61:b6:e5:61:e3:fb:96:34:40: a4:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:D7:A3:2D:00:C1:D6:1B:8E:AF:DB:06:EF:60:AC:9A:34:44:59:B8 X509v3 Authority Key Identifier: keyid:70:CB:EB:38:8F:59:02:C1:61:60:BB:ED:09:62:CB:62:2B:2B:B8:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMvrOI9ZAsFhYLvtCWLLYisruDI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/149cf6-611d-4e03-a660-dce1127ab223/1/cMvrOI9ZAsFhYLvtCWLLYisruDI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/149cf6-611d-4e03-a660-dce1127ab223/1/cMvrOI9ZAsFhYLvtCWLLYisruDI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:3e:75:d3:4c:22:a8:ab:7f:ff:5c:e1:c5:d0:ea:34:a8:2f: 15:fb:97:ab:7d:f0:ea:33:33:a2:0c:f8:d3:9c:7c:91:92:20: 84:35:5a:8d:24:0e:78:39:a2:1e:a4:26:49:79:8b:10:b0:d1: 39:c6:14:b6:e3:db:9e:ed:d2:44:34:b2:5f:e5:c4:9b:e4:43: 2a:91:b0:c9:27:b3:92:b5:aa:2e:1a:6d:f1:15:83:c6:27:e1: 5a:d5:fa:0e:26:23:da:b1:b2:a7:59:1d:61:70:7c:1c:88:2c: d8:1b:98:d3:21:20:d7:f9:a6:06:36:b0:17:21:a8:1f:e3:06: c9:22:1d:d9:81:2a:dc:20:b8:f2:07:84:c3:9c:d0:a3:8a:30: bf:03:ea:30:2d:f2:f4:cd:14:44:90:02:02:47:46:f5:1a:4f: 6e:ec:1f:ed:6e:f3:0a:e6:3f:75:27:33:a2:40:14:c5:d8:f6: ae:a9:61:51:b7:9f:69:4c:52:ee:df:4c:58:2b:ee:78:c0:e8: 28:07:87:74:81:ec:20:ca:06:53:1b:bb:29:ca:05:d5:16:0f: 5b:7f:5c:8e:51:a4:00:05:0b:1c:d8:02:55:4b:2c:b2:d2:66: f5:45:a7:c5:a9:e2:cf:2a:ee:e9:2c:f0:c8:2f:e9:ff:31:71: 82:73:7b:57 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCYpYBV538pb2TKAHzf3pMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwY2JlYjM4OGY1OTAyYzE2MTYwYmJlZDA5NjJjYjYyMmIy YmI4MzIwHhcNMjUxMjA2MDUwMTQyWhcNMjUxMjA3MDUwMTQyWjAzMTEwLwYDVQQD Eyg3MmQ3YTMyZDAwYzFkNjFiOGVhZmRiMDZlZjYwYWM5YTM0NDQ1OWI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArUKm8TutIJa1U+G+f75x9R2Km6EY 9KgsYhhz82uYr9+9xROQYuIu6/RiQ4L5AS3HS81LRHVw2zq3vWpiYddMOMcyYh8t sPmQxN0RJEAAlJXK746rsmM+D1eGwXFVzIrV4GiSYpMh0zsQJrYhrLr51L7BcGTl eghPcgbnl62q0zhkv+Wh7TkR2zvqsNi99Bd0udWNTl7RoX8vZwCCYBdYdXjxxVRa QkBugc7LdgQ+rotUUxgpsPtyCgg88dQgVDeTaVkHDqSGX5NmbI/rkBhekXoy/w/2 8jJxe1OymFMiUmjsGYnbDDmIM+F9y5yZiQVxLuhgxbVhtuVh4/uWNECkWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHLXoy0AwdYbjq/bBu9grJo0RFm4MB8GA1UdIwQY MBaAFHDL6ziPWQLBYWC77Qliy2IrK7gyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY012ck9JOVpBc0ZoWUx2dENXTExZaXNydURJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS8xNDljZjYtNjExZC00ZTAzLWE2NjAt ZGNlMTEyN2FiMjIzLzEvY012ck9JOVpBc0ZoWUx2dENXTExZaXNydURJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS8xNDljZjYtNjExZC00ZTAzLWE2NjAtZGNlMTEyN2FiMjIz LzEvY012ck9JOVpBc0ZoWUx2dENXTExZaXNydURJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmT5100wi qKt//1zhxdDqNKgvFfuXq33w6jMzogz405x8kZIghDVajSQOeDmiHqQmSXmLELDR OcYUtuPbnu3SRDSyX+XEm+RDKpGwySezkrWqLhpt8RWDxifhWtX6DiYj2rGyp1kd YXB8HIgs2BuY0yEg1/mmBjawFyGoH+MGySId2YEq3CC48geEw5zQo4owvwPqMC3y 9M0URJACAkdG9RpPbuwf7W7zCuY/dSczokAUxdj2rqlhUbefaUxS7t9MWCvueMDo KAeHdIHsIMoGUxu7KcoF1RYPW39cjlGkAAULHNgCVUssstJm9UWnxanizyru6Szw yC/p/zFxgnN7Vw== -----END CERTIFICATE-----Generated at Sat Dec 6 06:58:35 2025 by rpki-client