This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/cbd060-ad68-4f5f-ad5e-c0404437e85b/1/MvbeMKm492SENE0M07bAJz6t028.mft File: MvbeMKm492SENE0M07bAJz6t028.mft (raw, json) Hash identifier: sZHHteQDE8n+8POLA6+vjvKofsLehiuvUx/6mTawKlY= Subject key identifier: 54:57:21:E8:29:09:15:19:9C:32:99:30:08:00:06:7B:24:82:10:BE Authority key identifier: 32:F6:DE:30:A9:B8:F7:64:84:34:4D:0C:D3:B6:C0:27:3E:AD:D3:6F Certificate issuer: /CN=32f6de30a9b8f76484344d0cd3b6c0273eadd36f Certificate serial: 019AF12D7B60A771855BA03C54107C06C3A3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MvbeMKm492SENE0M07bAJz6t028.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/cbd060-ad68-4f5f-ad5e-c0404437e85b/1/MvbeMKm492SENE0M07bAJz6t028.mft Manifest number: 040D Signing time: Sat 06 Dec 2025 01:01:20 +0000 Manifest this update: Sat 06 Dec 2025 01:01:20 +0000 Manifest next update: Sun 07 Dec 2025 01:01:20 +0000 Files and hashes: 1: 4h6gd-8--_DbMb2PIrFary1u45w.roa (hash: omFQCpjJiNTW/cNLim2vTaoqpmXOjD5FAaL5ZDoz4f8=) 2: MvbeMKm492SENE0M07bAJz6t028.crl (hash: Vmjo+O+4RELDfD5CSgZh3br4NM2sL6aIj1hmV4UgZAE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/cbd060-ad68-4f5f-ad5e-c0404437e85b/1/MvbeMKm492SENE0M07bAJz6t028.crl rsync://rpki.ripe.net/repository/DEFAULT/b7/cbd060-ad68-4f5f-ad5e-c0404437e85b/1/MvbeMKm492SENE0M07bAJz6t028.mft rsync://rpki.ripe.net/repository/DEFAULT/MvbeMKm492SENE0M07bAJz6t028.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:7b:60:a7:71:85:5b:a0:3c:54:10:7c:06:c3:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32f6de30a9b8f76484344d0cd3b6c0273eadd36f Validity Not Before: Dec 6 01:01:20 2025 GMT Not After : Dec 7 01:01:20 2025 GMT Subject: CN=545721e8290915199c3299300800067b248210be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:3e:7d:9b:c7:d4:86:de:43:dc:31:7e:c4:d1: 2e:56:d1:27:29:ae:a1:fb:b0:c6:6b:f3:43:43:07: e8:a4:cb:b5:08:e5:c3:17:57:33:e3:1a:df:5e:68: f9:6c:bb:3d:ec:17:c2:4f:15:9f:20:ef:5d:77:4b: 68:4c:b9:b0:5b:c1:a8:c4:f2:b7:60:07:7a:c2:15: 8f:16:e1:3d:f3:da:57:f9:20:8d:e2:c8:f0:b7:78: db:3f:0e:40:35:ad:dc:f9:1d:87:95:ca:3c:42:7a: ea:f8:7b:1f:d5:5e:4a:0e:9d:ea:ec:2d:2b:ab:2b: 51:6d:8b:ab:2b:d2:5a:09:df:b7:50:dd:f5:24:01: 70:af:1c:dd:f0:d9:d6:d7:83:4d:07:ae:64:a0:2b: d9:30:b3:bc:58:e1:a2:b5:5a:fa:0c:db:2f:be:f8: e5:a4:b5:a0:b3:b9:68:1b:bd:97:43:97:5b:ec:a2: 5b:68:3a:c6:6c:b4:1c:f7:41:40:d1:4f:ca:bb:32: 22:08:76:67:4d:03:70:18:8c:8c:53:e8:9a:e5:37: 81:cf:90:c0:8a:8f:e7:6d:09:b1:0a:d1:30:b8:5e: ff:c6:3b:1d:bf:4a:78:fa:f5:36:6e:92:a0:e8:5d: c3:49:54:e6:28:d8:4f:e4:8d:66:03:5e:33:65:29: 33:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:57:21:E8:29:09:15:19:9C:32:99:30:08:00:06:7B:24:82:10:BE X509v3 Authority Key Identifier: keyid:32:F6:DE:30:A9:B8:F7:64:84:34:4D:0C:D3:B6:C0:27:3E:AD:D3:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MvbeMKm492SENE0M07bAJz6t028.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/cbd060-ad68-4f5f-ad5e-c0404437e85b/1/MvbeMKm492SENE0M07bAJz6t028.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/cbd060-ad68-4f5f-ad5e-c0404437e85b/1/MvbeMKm492SENE0M07bAJz6t028.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:bd:79:e2:a4:10:4d:06:b8:09:9a:d3:76:98:27:78:ab:d9: d9:4b:d0:cb:14:19:4f:ed:28:4c:29:bf:e7:90:fd:13:82:6c: 20:94:b8:b1:57:54:a7:1f:ae:f5:50:81:1b:e8:9b:85:7a:2c: 7f:39:01:e2:aa:e3:cd:29:d4:1e:1e:99:63:3f:24:bb:2f:3f: 79:d1:e0:b6:88:4d:0e:c5:b1:5e:e5:29:8b:cb:1c:e2:50:e9: 91:9b:cc:8e:84:58:79:dc:a7:aa:87:88:3b:4a:6d:09:5b:38: 51:3b:90:bf:5a:de:96:0a:58:d4:ee:7b:3b:9b:38:b2:9c:d7: 0b:fd:ea:01:d3:06:dc:d7:a3:36:3f:03:d4:fa:04:1a:94:91: 98:a5:1d:c5:ef:53:74:fb:42:e2:33:49:31:3b:e5:df:82:13: 79:d8:71:29:68:1a:a1:df:23:9a:7b:c3:93:0e:83:67:64:88: e7:63:86:0f:5a:22:2b:ba:73:6f:fe:11:f4:5a:a5:93:2e:33: 97:5e:4a:df:b7:06:3d:00:1d:bf:a0:ed:36:7f:d3:00:ef:f9: 01:44:63:60:76:c9:d3:43:a4:69:7f:44:41:2a:ab:ce:05:00: ef:52:ea:63:d9:98:e3:bf:34:e2:45:33:34:46:a9:a6:cc:59: 77:a6:21:0e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLXtgp3GFW6A8VBB8BsOjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyZjZkZTMwYTliOGY3NjQ4NDM0NGQwY2QzYjZjMDI3M2Vh ZGQzNmYwHhcNMjUxMjA2MDEwMTIwWhcNMjUxMjA3MDEwMTIwWjAzMTEwLwYDVQQD Eyg1NDU3MjFlODI5MDkxNTE5OWMzMjk5MzAwODAwMDY3YjI0ODIxMGJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsj59m8fUht5D3DF+xNEuVtEnKa6h +7DGa/NDQwfopMu1COXDF1cz4xrfXmj5bLs97BfCTxWfIO9dd0toTLmwW8GoxPK3 YAd6whWPFuE989pX+SCN4sjwt3jbPw5ANa3c+R2Hlco8Qnrq+Hsf1V5KDp3q7C0r qytRbYurK9JaCd+3UN31JAFwrxzd8NnW14NNB65koCvZMLO8WOGitVr6DNsvvvjl pLWgs7loG72XQ5db7KJbaDrGbLQc90FA0U/KuzIiCHZnTQNwGIyMU+ia5TeBz5DA io/nbQmxCtEwuF7/xjsdv0p4+vU2bpKg6F3DSVTmKNhP5I1mA14zZSkzAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFRXIegpCRUZnDKZMAgABnskghC+MB8GA1UdIwQY MBaAFDL23jCpuPdkhDRNDNO2wCc+rdNvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTXZiZU1LbTQ5MlNFTkUwTTA3YkFKejZ0MDI4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy9jYmQwNjAtYWQ2OC00ZjVmLWFkNWUt YzA0MDQ0MzdlODViLzEvTXZiZU1LbTQ5MlNFTkUwTTA3YkFKejZ0MDI4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNy9jYmQwNjAtYWQ2OC00ZjVmLWFkNWUtYzA0MDQ0MzdlODVi LzEvTXZiZU1LbTQ5MlNFTkUwTTA3YkFKejZ0MDI4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACr154qQQ TQa4CZrTdpgneKvZ2UvQyxQZT+0oTCm/55D9E4JsIJS4sVdUpx+u9VCBG+ibhXos fzkB4qrjzSnUHh6ZYz8kuy8/edHgtohNDsWxXuUpi8sc4lDpkZvMjoRYedynqoeI O0ptCVs4UTuQv1relgpY1O57O5s4spzXC/3qAdMG3NejNj8D1PoEGpSRmKUdxe9T dPtC4jNJMTvl34ITedhxKWgaod8jmnvDkw6DZ2SI52OGD1oiK7pzb/4R9Fqlky4z l15K37cGPQAdv6DtNn/TAO/5AURjYHbJ00OkaX9EQSqrzgUA71LqY9mY47804kUz NEappsxZd6YhDg== -----END CERTIFICATE-----Generated at Sat Dec 6 06:57:44 2025 by rpki-client