This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/b638a5-d903-4a31-9489-cb92bb3ed768/1/MVM2kKsYT0M_F2Dz_qoYTEQ-cPk.mft File: MVM2kKsYT0M_F2Dz_qoYTEQ-cPk.mft (raw, json) Hash identifier: il7u7LbNslb5B8F1DC9L50wUuq3ixfmWMtodCwTYm3g= Subject key identifier: E0:6B:23:4C:B8:A2:CA:B4:83:A4:67:2F:8C:CB:F2:DC:F2:F5:0A:C7 Authority key identifier: 31:53:36:90:AB:18:4F:43:3F:17:60:F3:FE:AA:18:4C:44:3E:70:F9 Certificate issuer: /CN=31533690ab184f433f1760f3feaa184c443e70f9 Certificate serial: 019AFB7A3C6252D076B56864716D38F33378 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MVM2kKsYT0M_F2Dz_qoYTEQ-cPk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/b638a5-d903-4a31-9489-cb92bb3ed768/1/MVM2kKsYT0M_F2Dz_qoYTEQ-cPk.mft Manifest number: 0714 Signing time: Mon 08 Dec 2025 01:01:23 +0000 Manifest this update: Mon 08 Dec 2025 01:01:23 +0000 Manifest next update: Tue 09 Dec 2025 01:01:23 +0000 Files and hashes: 1: 4H5f4KMuGUdiq20v6X15FIvWPCg.roa (hash: 1oOS4e7SC894+hZZBmJUAEBGgPQQh1AJU8M/EeMAfmg=) 2: MVM2kKsYT0M_F2Dz_qoYTEQ-cPk.crl (hash: axj+9RGZa8pWUOLYIcQv552QYuGtDcICBSHIS8dHmJ8=) 3: oWYw73o0XVlV6OpLKF4dF1YQeis.roa (hash: 5U7LFltASNwuXUP6x/MbRpxou9KC14KfkL67az3+D4o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/b638a5-d903-4a31-9489-cb92bb3ed768/1/MVM2kKsYT0M_F2Dz_qoYTEQ-cPk.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/b638a5-d903-4a31-9489-cb92bb3ed768/1/MVM2kKsYT0M_F2Dz_qoYTEQ-cPk.mft rsync://rpki.ripe.net/repository/DEFAULT/MVM2kKsYT0M_F2Dz_qoYTEQ-cPk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 09 Dec 2025 01:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:fb:7a:3c:62:52:d0:76:b5:68:64:71:6d:38:f3:33:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31533690ab184f433f1760f3feaa184c443e70f9 Validity Not Before: Dec 8 01:01:23 2025 GMT Not After : Dec 9 01:01:23 2025 GMT Subject: CN=e06b234cb8a2cab483a4672f8ccbf2dcf2f50ac7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:c9:ad:c5:ad:79:26:c9:7d:a4:e2:f9:bc:ed: d2:ab:be:9d:35:72:22:8d:a6:84:03:f2:5d:f8:9b: 8b:66:a6:d0:5b:a1:ff:6b:90:39:a0:61:4f:bb:b1: b9:96:f2:be:c3:1f:98:ef:f4:48:fc:47:32:df:48: 0a:a8:26:c0:a2:d1:3c:13:43:9e:f5:1f:c2:b6:93: 75:62:cb:5b:f2:7e:66:51:91:86:c4:c4:52:52:f1: ee:1b:54:c7:bf:89:de:92:3e:5d:ce:c8:ed:d3:0e: ca:59:7a:7b:7a:49:c8:b1:e6:da:08:40:4e:3e:0a: ac:b0:4c:95:42:02:b4:56:26:90:a9:3e:ce:ab:05: 1d:c0:e8:c5:9b:42:66:0a:ee:e6:32:f4:4c:24:4b: 36:03:47:59:73:dd:28:e7:41:a8:9b:88:9f:0f:40: 30:ce:a1:6e:e3:7f:13:c7:b3:88:5f:7f:68:dd:78: 98:0d:16:54:79:ff:76:32:27:e7:bb:cb:bf:80:e4: 29:2e:e9:65:29:3d:37:39:80:fd:26:8f:0b:0c:36: 96:b2:a3:1e:1f:63:76:4f:bd:87:97:c9:5f:1b:4b: 7a:d5:f1:47:89:0b:30:d5:5b:09:37:0d:63:78:20: 56:99:f2:65:3e:e3:99:0d:9f:6d:85:b3:d1:58:07: 70:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:6B:23:4C:B8:A2:CA:B4:83:A4:67:2F:8C:CB:F2:DC:F2:F5:0A:C7 X509v3 Authority Key Identifier: keyid:31:53:36:90:AB:18:4F:43:3F:17:60:F3:FE:AA:18:4C:44:3E:70:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MVM2kKsYT0M_F2Dz_qoYTEQ-cPk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/b638a5-d903-4a31-9489-cb92bb3ed768/1/MVM2kKsYT0M_F2Dz_qoYTEQ-cPk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/b638a5-d903-4a31-9489-cb92bb3ed768/1/MVM2kKsYT0M_F2Dz_qoYTEQ-cPk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:19:bf:bb:41:43:97:9e:48:59:86:57:06:7f:7e:f6:73:26: fe:78:b2:a9:7b:91:ac:b6:c7:d4:96:43:61:1d:d9:69:0a:24: 1d:bc:80:52:bc:89:c9:fe:25:f5:72:99:eb:68:55:28:22:fd: dd:dd:69:24:d1:32:c8:1c:bc:2c:92:84:fd:72:68:0f:1d:85: 54:c2:14:51:ab:08:16:c7:b5:0c:94:f1:ef:63:fa:f9:c9:7a: 34:7d:3a:09:27:05:5d:25:e6:88:e2:7d:be:4b:da:71:b0:fb: 09:5d:c3:01:d8:ad:4a:9d:92:73:59:1b:14:4c:9a:11:fe:64: 4e:f8:57:21:99:ee:0a:7c:e4:9a:8c:44:b2:ae:8a:b7:9e:0b: 20:78:f6:dd:10:6a:1d:e7:0b:b2:c9:d7:9a:40:2a:e9:43:39: 7c:2b:ee:d8:56:0e:b5:18:84:34:06:84:f7:c8:c4:94:cf:93: 2d:b3:14:63:95:9f:b4:54:8f:20:51:4d:b6:8c:df:bc:25:34: 39:31:10:0f:cf:42:87:4d:a2:73:85:f6:c3:d2:6b:98:ca:98: 87:6c:a1:d8:fb:e8:3c:c3:e6:f8:16:4b:0d:8b:4f:8d:ef:7f: 64:f7:e3:dc:b2:d3:88:67:b0:34:33:3d:79:1b:ce:eb:e1:69: 5f:d2:fc:19 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr7ejxiUtB2tWhkcW048zN4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxNTMzNjkwYWIxODRmNDMzZjE3NjBmM2ZlYWExODRjNDQz ZTcwZjkwHhcNMjUxMjA4MDEwMTIzWhcNMjUxMjA5MDEwMTIzWjAzMTEwLwYDVQQD EyhlMDZiMjM0Y2I4YTJjYWI0ODNhNDY3MmY4Y2NiZjJkY2YyZjUwYWM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv8mtxa15Jsl9pOL5vO3Sq76dNXIi jaaEA/Jd+JuLZqbQW6H/a5A5oGFPu7G5lvK+wx+Y7/RI/Ecy30gKqCbAotE8E0Oe 9R/CtpN1Ystb8n5mUZGGxMRSUvHuG1THv4nekj5dzsjt0w7KWXp7eknIsebaCEBO PgqssEyVQgK0ViaQqT7OqwUdwOjFm0JmCu7mMvRMJEs2A0dZc90o50Gom4ifD0Aw zqFu438Tx7OIX39o3XiYDRZUef92Mifnu8u/gOQpLullKT03OYD9Jo8LDDaWsqMe H2N2T72Hl8lfG0t61fFHiQsw1VsJNw1jeCBWmfJlPuOZDZ9thbPRWAdwvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOBrI0y4osq0g6RnL4zL8tzy9QrHMB8GA1UdIwQY MBaAFDFTNpCrGE9DPxdg8/6qGExEPnD5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTVZNMmtLc1lUME1fRjJEel9xb1lURVEtY1BrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi9iNjM4YTUtZDkwMy00YTMxLTk0ODkt Y2I5MmJiM2VkNzY4LzEvTVZNMmtLc1lUME1fRjJEel9xb1lURVEtY1BrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi9iNjM4YTUtZDkwMy00YTMxLTk0ODktY2I5MmJiM2VkNzY4 LzEvTVZNMmtLc1lUME1fRjJEel9xb1lURVEtY1BrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWRm/u0FD l55IWYZXBn9+9nMm/niyqXuRrLbH1JZDYR3ZaQokHbyAUryJyf4l9XKZ62hVKCL9 3d1pJNEyyBy8LJKE/XJoDx2FVMIUUasIFse1DJTx72P6+cl6NH06CScFXSXmiOJ9 vkvacbD7CV3DAditSp2Sc1kbFEyaEf5kTvhXIZnuCnzkmoxEsq6Kt54LIHj23RBq HecLssnXmkAq6UM5fCvu2FYOtRiENAaE98jElM+TLbMUY5WftFSPIFFNtozfvCU0 OTEQD89Ch02ic4X2w9JrmMqYh2yh2PvoPMPm+BZLDYtPje9/ZPfj3LLTiGewNDM9 eRvO6+FpX9L8GQ== -----END CERTIFICATE-----Generated at Mon Dec 8 09:10:56 2025 by rpki-client