This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/bc1828-3536-4d0f-952b-9d27091784cc/1/MvG4X6XeV6X-Ej3jqQXzyzariv4.mft File: MvG4X6XeV6X-Ej3jqQXzyzariv4.mft (raw, json) Hash identifier: xwKWtq2EFwMCbqfE6cJqOSAIaorW3z6DHph47qqucEY= Subject key identifier: 5D:B2:FA:C9:2A:11:50:12:77:32:3A:D0:17:2E:96:17:E3:65:83:A0 Authority key identifier: 32:F1:B8:5F:A5:DE:57:A5:FE:12:3D:E3:A9:05:F3:CB:36:AB:8A:FE Certificate issuer: /CN=32f1b85fa5de57a5fe123de3a905f3cb36ab8afe Certificate serial: 019AF12D39090A996C3538C106E633525004 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MvG4X6XeV6X-Ej3jqQXzyzariv4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/bc1828-3536-4d0f-952b-9d27091784cc/1/MvG4X6XeV6X-Ej3jqQXzyzariv4.mft Manifest number: 0674 Signing time: Sat 06 Dec 2025 01:01:03 +0000 Manifest this update: Sat 06 Dec 2025 01:01:03 +0000 Manifest next update: Sun 07 Dec 2025 01:01:03 +0000 Files and hashes: 1: MvG4X6XeV6X-Ej3jqQXzyzariv4.crl (hash: BeM8KtpNaFMrD+EaDvR2/aG0xSvYpHG7EqMNxU3vfGU=) 2: NYziV-NFGGqBIoJkJemWo5QRXPo.roa (hash: NJwrl3v2N6LA2BTkuAAr9JlSloYvfxRMFpbHdjPuE8g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/bc1828-3536-4d0f-952b-9d27091784cc/1/MvG4X6XeV6X-Ej3jqQXzyzariv4.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/bc1828-3536-4d0f-952b-9d27091784cc/1/MvG4X6XeV6X-Ej3jqQXzyzariv4.mft rsync://rpki.ripe.net/repository/DEFAULT/MvG4X6XeV6X-Ej3jqQXzyzariv4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:39:09:0a:99:6c:35:38:c1:06:e6:33:52:50:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32f1b85fa5de57a5fe123de3a905f3cb36ab8afe Validity Not Before: Dec 6 01:01:03 2025 GMT Not After : Dec 7 01:01:03 2025 GMT Subject: CN=5db2fac92a11501277323ad0172e9617e36583a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:f4:1a:1b:7e:4d:55:99:11:a0:8b:e5:ac:bf: c4:5d:30:d6:d3:eb:84:35:3a:b7:51:42:d0:15:34: d4:4d:27:a1:0c:5d:0c:74:4f:b6:0a:81:c1:59:c0: 41:ef:a0:19:c5:67:cb:ee:62:dd:a5:87:87:ee:52: 21:bf:9a:ff:2f:ec:15:05:c6:37:9f:1e:7c:5d:bb: 2d:4e:07:73:90:65:ba:c1:f3:39:18:c3:97:7c:32: 27:7f:6f:a6:00:77:2f:d9:76:10:b5:2e:42:c4:47: a3:6d:84:fa:ae:fa:6a:a4:cc:85:c6:5f:2a:fa:73: 86:23:52:aa:ba:b1:a2:ff:48:d1:a3:e5:f7:02:4d: a9:52:63:62:12:1d:f9:c9:28:0e:bb:04:fd:8e:bf: d8:91:96:4c:46:87:3f:d0:e4:4f:fe:5c:3c:65:84: 96:d3:05:92:79:9b:18:ae:10:09:b1:b9:21:52:0b: d7:32:47:5d:69:2a:5c:73:98:aa:54:78:21:a6:60: 72:f1:a2:1c:7a:73:b7:93:f3:3d:ca:2a:33:07:c0: b6:68:a2:1c:c8:43:e5:bf:8a:1f:34:02:ec:21:64: 6b:2e:f7:41:70:cf:0f:b7:f3:92:6d:32:c2:61:24: f0:11:6c:6f:80:6c:57:25:c0:8a:31:23:3d:20:d4: fe:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:B2:FA:C9:2A:11:50:12:77:32:3A:D0:17:2E:96:17:E3:65:83:A0 X509v3 Authority Key Identifier: keyid:32:F1:B8:5F:A5:DE:57:A5:FE:12:3D:E3:A9:05:F3:CB:36:AB:8A:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MvG4X6XeV6X-Ej3jqQXzyzariv4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bc1828-3536-4d0f-952b-9d27091784cc/1/MvG4X6XeV6X-Ej3jqQXzyzariv4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bc1828-3536-4d0f-952b-9d27091784cc/1/MvG4X6XeV6X-Ej3jqQXzyzariv4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:a3:e6:0f:93:27:c8:df:13:ed:1c:10:1b:bc:8c:d5:52:a6: 93:6b:18:39:95:da:c2:82:ab:e1:9d:f4:f0:1b:60:3b:28:37: 32:ba:4f:49:89:17:f3:ed:85:19:74:8a:37:43:83:0d:da:38: 18:5a:cb:26:e2:83:38:c3:b8:b1:6c:61:85:f0:85:a6:d1:89: 33:52:ee:15:a1:6f:70:7a:91:a6:7c:0b:48:cd:5f:b6:82:ac: e8:74:ec:c5:06:c9:19:51:18:36:7e:2c:8d:ca:2d:51:ed:6e: cf:78:54:50:2a:f3:1c:a0:8d:e5:fa:bb:c1:cf:fa:74:6b:80: a3:6d:ce:52:8c:ac:ba:e9:e7:cc:83:e3:eb:3c:bc:ba:fb:88: 0d:51:9f:87:6e:74:88:a2:0f:3f:3c:38:3b:27:98:94:e5:ec: 98:a7:aa:b1:11:33:a3:68:50:16:8c:14:fe:c2:46:01:09:ae: 97:9c:32:01:ef:7c:83:b7:7a:47:7f:d7:94:46:68:98:d8:78: 3a:30:60:a0:5b:d6:c9:72:be:09:e7:3e:8e:da:a8:63:77:f3: 01:53:43:a7:86:45:fd:60:1a:3b:58:a6:02:72:ec:57:94:d1: 91:7c:42:40:0f:76:a0:6c:4b:45:7c:4f:c7:33:e3:08:b1:43: ee:6d:b6:07 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLTkJCplsNTjBBuYzUlAEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyZjFiODVmYTVkZTU3YTVmZTEyM2RlM2E5MDVmM2NiMzZh YjhhZmUwHhcNMjUxMjA2MDEwMTAzWhcNMjUxMjA3MDEwMTAzWjAzMTEwLwYDVQQD Eyg1ZGIyZmFjOTJhMTE1MDEyNzczMjNhZDAxNzJlOTYxN2UzNjU4M2EwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj/QaG35NVZkRoIvlrL/EXTDW0+uE NTq3UULQFTTUTSehDF0MdE+2CoHBWcBB76AZxWfL7mLdpYeH7lIhv5r/L+wVBcY3 nx58XbstTgdzkGW6wfM5GMOXfDInf2+mAHcv2XYQtS5CxEejbYT6rvpqpMyFxl8q +nOGI1KqurGi/0jRo+X3Ak2pUmNiEh35ySgOuwT9jr/YkZZMRoc/0ORP/lw8ZYSW 0wWSeZsYrhAJsbkhUgvXMkddaSpcc5iqVHghpmBy8aIcenO3k/M9yiozB8C2aKIc yEPlv4ofNALsIWRrLvdBcM8Pt/OSbTLCYSTwEWxvgGxXJcCKMSM9INT+jwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF2y+skqEVASdzI60BculhfjZYOgMB8GA1UdIwQY MBaAFDLxuF+l3lel/hI946kF88s2q4r+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTXZHNFg2WGVWNlgtRWozanFRWHp5emFyaXY0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9iYzE4MjgtMzUzNi00ZDBmLTk1MmIt OWQyNzA5MTc4NGNjLzEvTXZHNFg2WGVWNlgtRWozanFRWHp5emFyaXY0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9iYzE4MjgtMzUzNi00ZDBmLTk1MmItOWQyNzA5MTc4NGNj LzEvTXZHNFg2WGVWNlgtRWozanFRWHp5emFyaXY0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFaPmD5Mn yN8T7RwQG7yM1VKmk2sYOZXawoKr4Z308BtgOyg3MrpPSYkX8+2FGXSKN0ODDdo4 GFrLJuKDOMO4sWxhhfCFptGJM1LuFaFvcHqRpnwLSM1ftoKs6HTsxQbJGVEYNn4s jcotUe1uz3hUUCrzHKCN5fq7wc/6dGuAo23OUoysuunnzIPj6zy8uvuIDVGfh250 iKIPPzw4OyeYlOXsmKeqsREzo2hQFowU/sJGAQmul5wyAe98g7d6R3/XlEZomNh4 OjBgoFvWyXK+Cec+jtqoY3fzAVNDp4ZF/WAaO1imAnLsV5TRkXxCQA92oGxLRXxP xzPjCLFD7m22Bw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:23:21 2025 by rpki-client