This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/46615c-a7df-425b-9590-d21e143f75b2/1/MwvI_ZSeZR2TKFzLwdoTOTt4MwU.mft File: MwvI_ZSeZR2TKFzLwdoTOTt4MwU.mft (raw, json) Hash identifier: qSrNTdLXWOO0DEfFNKpoU/LJaZCsWDrEzsrhZ5T6EHY= Subject key identifier: 7C:AD:19:10:DD:AD:64:BF:42:A5:E1:CD:3A:E0:7A:81:3B:7B:49:9F Authority key identifier: 33:0B:C8:FD:94:9E:65:1D:93:28:5C:CB:C1:DA:13:39:3B:78:33:05 Certificate issuer: /CN=330bc8fd949e651d93285ccbc1da13393b783305 Certificate serial: 019AF23FCB236107958A9AA43B301DA91FD7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MwvI_ZSeZR2TKFzLwdoTOTt4MwU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/46615c-a7df-425b-9590-d21e143f75b2/1/MwvI_ZSeZR2TKFzLwdoTOTt4MwU.mft Manifest number: 1159 Signing time: Sat 06 Dec 2025 06:00:58 +0000 Manifest this update: Sat 06 Dec 2025 06:00:58 +0000 Manifest next update: Sun 07 Dec 2025 06:00:58 +0000 Files and hashes: 1: MwvI_ZSeZR2TKFzLwdoTOTt4MwU.crl (hash: uB6f/5RD7+gKIH2+6q6gHNj9GtNR1O1WV27slTT6F3E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/46615c-a7df-425b-9590-d21e143f75b2/1/MwvI_ZSeZR2TKFzLwdoTOTt4MwU.crl rsync://rpki.ripe.net/repository/DEFAULT/e6/46615c-a7df-425b-9590-d21e143f75b2/1/MwvI_ZSeZR2TKFzLwdoTOTt4MwU.mft rsync://rpki.ripe.net/repository/DEFAULT/MwvI_ZSeZR2TKFzLwdoTOTt4MwU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:cb:23:61:07:95:8a:9a:a4:3b:30:1d:a9:1f:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=330bc8fd949e651d93285ccbc1da13393b783305 Validity Not Before: Dec 6 06:00:58 2025 GMT Not After : Dec 7 06:00:58 2025 GMT Subject: CN=7cad1910ddad64bf42a5e1cd3ae07a813b7b499f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:8e:d6:69:9f:c3:4a:24:e4:83:9d:de:02:33: 87:72:51:d1:70:a9:13:1c:c2:5b:b3:38:70:dd:2a: 85:08:bc:48:3e:05:c5:10:89:4c:81:08:29:1b:bc: b3:86:9e:fd:b0:d7:69:59:87:b9:1c:53:1d:a2:9f: 13:e1:d0:cc:f7:c2:2b:11:27:c8:63:4a:6f:20:fd: b6:38:9b:76:94:a7:70:00:a5:e8:2c:0d:86:a3:a7: 4b:9c:33:36:c0:bf:e8:93:88:b5:87:e5:a1:97:1a: 32:47:2a:e1:c1:20:e4:ef:fc:e0:72:f9:2f:a9:28: 97:e0:9c:ae:c4:56:00:4e:a3:f4:95:83:26:2f:e4: 9b:84:2d:a1:be:b7:02:e8:98:ef:46:2c:d3:2f:60: 52:71:5e:1a:ed:b7:40:68:01:87:cb:3d:e7:ff:e3: 68:00:bb:bc:e3:6e:8d:41:ac:05:b8:f0:b3:ff:a5: 35:6a:df:b6:1c:8c:22:b1:8e:cd:7c:e2:95:47:8f: ad:78:a4:e6:58:d3:33:53:f4:7e:88:de:75:08:2a: 8e:33:b4:0c:b7:1c:be:78:2f:ab:8d:b0:0e:2d:fd: da:47:12:9a:cf:1b:de:43:c4:97:89:9d:dd:65:21: d8:8b:4d:32:d8:04:af:b2:5b:f6:3a:d7:74:26:ab: 01:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:AD:19:10:DD:AD:64:BF:42:A5:E1:CD:3A:E0:7A:81:3B:7B:49:9F X509v3 Authority Key Identifier: keyid:33:0B:C8:FD:94:9E:65:1D:93:28:5C:CB:C1:DA:13:39:3B:78:33:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MwvI_ZSeZR2TKFzLwdoTOTt4MwU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/46615c-a7df-425b-9590-d21e143f75b2/1/MwvI_ZSeZR2TKFzLwdoTOTt4MwU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/46615c-a7df-425b-9590-d21e143f75b2/1/MwvI_ZSeZR2TKFzLwdoTOTt4MwU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:49:9b:79:4b:d9:fb:af:1c:9e:88:05:bd:75:29:0f:67:69: e0:82:80:5e:81:fd:8d:8c:cb:d7:72:e6:c8:51:f4:ac:42:ee: 8e:fd:5f:ad:3c:fb:b9:cc:d0:ea:1f:e2:33:44:ea:a6:f2:d1: 8d:b4:ca:be:68:8a:07:18:81:b3:bf:f1:18:38:d1:b7:90:f6: 5b:96:da:ed:e9:62:b4:8b:e7:31:a1:15:56:17:b5:24:c0:f1: f2:0d:d5:86:2a:b4:8e:af:66:7a:31:f3:32:a5:62:2e:3c:a9: 21:c0:57:3b:90:a2:a6:c7:6a:b4:e2:26:19:b0:7d:0a:97:a1: e8:85:25:c3:13:17:94:d2:62:eb:e7:c0:be:67:9e:4c:5f:0d: b6:8d:40:93:c8:60:67:93:11:3d:9d:6c:9f:c5:da:4f:61:11: 92:be:2e:5c:a7:11:af:a2:ab:d9:8f:47:86:71:a0:7c:6c:cb: 60:d1:28:d0:92:d7:85:91:28:f2:f7:ec:6b:a9:dc:e2:13:4a: 09:bf:7b:95:ce:db:ff:f5:a4:ec:dc:74:e9:c8:c0:5b:52:a7: d6:bc:de:f5:34:6d:9e:09:71:03:51:9d:98:7c:85:8a:be:08: ab:fa:c0:02:47:b4:10:d6:b6:b6:d4:3c:6a:8f:25:d2:4b:70: fd:e6:05:e6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP8sjYQeVipqkOzAdqR/XMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMzMGJjOGZkOTQ5ZTY1MWQ5MzI4NWNjYmMxZGExMzM5M2I3 ODMzMDUwHhcNMjUxMjA2MDYwMDU4WhcNMjUxMjA3MDYwMDU4WjAzMTEwLwYDVQQD Eyg3Y2FkMTkxMGRkYWQ2NGJmNDJhNWUxY2QzYWUwN2E4MTNiN2I0OTlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAro7WaZ/DSiTkg53eAjOHclHRcKkT HMJbszhw3SqFCLxIPgXFEIlMgQgpG7yzhp79sNdpWYe5HFMdop8T4dDM98IrESfI Y0pvIP22OJt2lKdwAKXoLA2Go6dLnDM2wL/ok4i1h+WhlxoyRyrhwSDk7/zgcvkv qSiX4JyuxFYATqP0lYMmL+SbhC2hvrcC6JjvRizTL2BScV4a7bdAaAGHyz3n/+No ALu8426NQawFuPCz/6U1at+2HIwisY7NfOKVR4+teKTmWNMzU/R+iN51CCqOM7QM txy+eC+rjbAOLf3aRxKazxveQ8SXiZ3dZSHYi00y2ASvslv2Otd0JqsB1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHytGRDdrWS/QqXhzTrgeoE7e0mfMB8GA1UdIwQY MBaAFDMLyP2UnmUdkyhcy8HaEzk7eDMFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTXd2SV9aU2VaUjJUS0Z6THdkb1RPVHQ0TXdVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi80NjYxNWMtYTdkZi00MjViLTk1OTAt ZDIxZTE0M2Y3NWIyLzEvTXd2SV9aU2VaUjJUS0Z6THdkb1RPVHQ0TXdVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNi80NjYxNWMtYTdkZi00MjViLTk1OTAtZDIxZTE0M2Y3NWIy LzEvTXd2SV9aU2VaUjJUS0Z6THdkb1RPVHQ0TXdVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ0mbeUvZ +68cnogFvXUpD2dp4IKAXoH9jYzL13LmyFH0rELujv1frTz7uczQ6h/iM0TqpvLR jbTKvmiKBxiBs7/xGDjRt5D2W5ba7elitIvnMaEVVhe1JMDx8g3Vhiq0jq9mejHz MqViLjypIcBXO5CipsdqtOImGbB9Cpeh6IUlwxMXlNJi6+fAvmeeTF8Nto1Ak8hg Z5MRPZ1sn8XaT2ERkr4uXKcRr6Kr2Y9HhnGgfGzLYNEo0JLXhZEo8vfsa6nc4hNK Cb97lc7b//Wk7Nx06cjAW1Kn1rze9TRtnglxA1GdmHyFir4Iq/rAAke0ENa2ttQ8 ao8l0ktw/eYF5g== -----END CERTIFICATE-----Generated at Sat Dec 6 10:15:29 2025 by rpki-client