This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/0c5ed7-0e72-4ead-906c-291a3164a0b8/1/mvnR5V9D5P3W0k-0sO2m6dEoqlE.mft File: mvnR5V9D5P3W0k-0sO2m6dEoqlE.mft (raw, json) Hash identifier: Bz8j1mUecKAqdT35b/dVDqQs89sIXZNQjqDcr+J6gsc= Subject key identifier: 3A:18:21:64:38:86:99:89:DE:B2:A0:DB:D5:4E:90:1F:A5:F0:80:AA Authority key identifier: 9A:F9:D1:E5:5F:43:E4:FD:D6:D2:4F:B4:B0:ED:A6:E9:D1:28:AA:51 Certificate issuer: /CN=9af9d1e55f43e4fdd6d24fb4b0eda6e9d128aa51 Certificate serial: 019AF50AC9B4747F2CC5B0108178AA160F78 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mvnR5V9D5P3W0k-0sO2m6dEoqlE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/0c5ed7-0e72-4ead-906c-291a3164a0b8/1/mvnR5V9D5P3W0k-0sO2m6dEoqlE.mft Manifest number: 1205 Signing time: Sat 06 Dec 2025 19:01:56 +0000 Manifest this update: Sat 06 Dec 2025 19:01:56 +0000 Manifest next update: Sun 07 Dec 2025 19:01:56 +0000 Files and hashes: 1: mvnR5V9D5P3W0k-0sO2m6dEoqlE.crl (hash: ywaRTanV1kjMsK+GxUUWergKCxPacoVwfLC4GkfWTTU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/0c5ed7-0e72-4ead-906c-291a3164a0b8/1/mvnR5V9D5P3W0k-0sO2m6dEoqlE.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/0c5ed7-0e72-4ead-906c-291a3164a0b8/1/mvnR5V9D5P3W0k-0sO2m6dEoqlE.mft rsync://rpki.ripe.net/repository/DEFAULT/mvnR5V9D5P3W0k-0sO2m6dEoqlE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0a:c9:b4:74:7f:2c:c5:b0:10:81:78:aa:16:0f:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9af9d1e55f43e4fdd6d24fb4b0eda6e9d128aa51 Validity Not Before: Dec 6 19:01:56 2025 GMT Not After : Dec 7 19:01:56 2025 GMT Subject: CN=3a18216438869989deb2a0dbd54e901fa5f080aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:6f:45:7b:5d:d6:a8:fd:39:65:50:a0:b5:b8: 0a:51:f8:8e:41:72:c9:25:38:98:b6:0f:50:88:68: fa:38:02:49:a9:75:4e:50:86:b8:71:c1:26:b8:11: 27:83:8d:05:6e:14:ee:5c:c2:48:57:ea:37:93:c6: 91:fe:1d:9b:00:d8:cd:60:b6:32:20:7f:e1:c0:5e: 67:4f:d0:95:84:da:43:d2:3d:f5:8d:d5:21:b0:d6: b5:9c:b2:f2:aa:4f:1a:d5:72:3c:e3:e3:02:cf:3b: aa:80:44:5a:c2:5d:3c:4d:2a:14:8f:ff:0c:be:7f: 76:e8:c9:91:02:bb:97:c1:3c:e5:07:0d:7e:6a:50: 36:35:43:ff:6c:89:7e:e4:24:9b:22:6c:42:9b:8e: 5b:a8:cb:9b:a4:57:40:9a:92:3e:96:4f:71:7f:61: 39:f6:e0:d1:55:1b:02:e0:b3:98:93:0b:e8:11:8e: a3:dd:50:30:39:bb:07:46:05:ba:2b:82:c3:03:4a: 08:33:8d:e6:ea:de:a4:af:dd:7b:1d:50:ee:2a:9a: 3b:4f:74:9e:e2:42:ca:bb:d2:26:4c:45:33:14:ae: f2:4a:bd:b1:8c:94:a5:8f:7c:6c:14:9a:3d:02:5a: ef:92:54:14:10:e3:0e:69:68:af:11:6e:67:d9:09: 7b:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:18:21:64:38:86:99:89:DE:B2:A0:DB:D5:4E:90:1F:A5:F0:80:AA X509v3 Authority Key Identifier: keyid:9A:F9:D1:E5:5F:43:E4:FD:D6:D2:4F:B4:B0:ED:A6:E9:D1:28:AA:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mvnR5V9D5P3W0k-0sO2m6dEoqlE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/0c5ed7-0e72-4ead-906c-291a3164a0b8/1/mvnR5V9D5P3W0k-0sO2m6dEoqlE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/0c5ed7-0e72-4ead-906c-291a3164a0b8/1/mvnR5V9D5P3W0k-0sO2m6dEoqlE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:d6:5b:49:4e:8b:91:74:36:97:90:fc:5c:2b:17:40:73:c5: e7:12:51:8b:b0:6d:81:46:29:2c:50:cb:ad:96:bd:e2:25:0e: df:c2:3e:0f:b8:6b:6c:72:7b:b5:b3:9e:2b:94:74:ef:23:9c: 5d:7c:88:66:6e:4b:2d:32:97:58:f9:75:1b:fe:43:5b:1c:3a: b0:6c:b7:52:04:11:d0:bb:ae:f9:91:8a:85:51:1c:4f:84:0b: 5c:27:47:47:52:42:24:97:20:76:4c:28:cc:ca:2b:e7:92:c2: 1e:b9:06:f0:86:11:f7:4b:78:63:bf:a6:f2:c2:29:4e:8f:df: 65:e1:78:6d:8f:b9:4a:cc:34:2a:f8:71:d3:70:2b:fb:6d:8d: a6:ff:d5:d8:f5:94:3e:fb:1e:b2:8c:d9:f4:69:aa:4a:7b:f7: 20:ed:ef:18:f6:81:61:3c:c1:9c:38:42:b3:0a:0b:a9:8b:8f: ef:f4:84:a5:46:4a:ad:5b:ac:1f:72:cd:98:8a:ed:01:e1:f1: 0b:c4:42:a6:fe:26:4d:54:0a:27:45:54:fe:da:5b:91:77:09: 05:ff:aa:6b:7e:1e:54:30:06:fa:ed:bc:35:fe:c7:cf:82:bf: 9f:3a:bc:2a:40:f2:88:a1:b8:de:71:9e:bb:1b:59:66:90:1b: f8:09:91:a9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1Csm0dH8sxbAQgXiqFg94MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhZjlkMWU1NWY0M2U0ZmRkNmQyNGZiNGIwZWRhNmU5ZDEy OGFhNTEwHhcNMjUxMjA2MTkwMTU2WhcNMjUxMjA3MTkwMTU2WjAzMTEwLwYDVQQD EygzYTE4MjE2NDM4ODY5OTg5ZGViMmEwZGJkNTRlOTAxZmE1ZjA4MGFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwm9Fe13WqP05ZVCgtbgKUfiOQXLJ JTiYtg9QiGj6OAJJqXVOUIa4ccEmuBEng40FbhTuXMJIV+o3k8aR/h2bANjNYLYy IH/hwF5nT9CVhNpD0j31jdUhsNa1nLLyqk8a1XI84+MCzzuqgERawl08TSoUj/8M vn926MmRAruXwTzlBw1+alA2NUP/bIl+5CSbImxCm45bqMubpFdAmpI+lk9xf2E5 9uDRVRsC4LOYkwvoEY6j3VAwObsHRgW6K4LDA0oIM43m6t6kr917HVDuKpo7T3Se 4kLKu9ImTEUzFK7ySr2xjJSlj3xsFJo9AlrvklQUEOMOaWivEW5n2Ql7VwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDoYIWQ4hpmJ3rKg29VOkB+l8ICqMB8GA1UdIwQY MBaAFJr50eVfQ+T91tJPtLDtpunRKKpRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbXZuUjVWOUQ1UDNXMGstMHNPMm02ZEVvcWxFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS8wYzVlZDctMGU3Mi00ZWFkLTkwNmMt MjkxYTMxNjRhMGI4LzEvbXZuUjVWOUQ1UDNXMGstMHNPMm02ZEVvcWxFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS8wYzVlZDctMGU3Mi00ZWFkLTkwNmMtMjkxYTMxNjRhMGI4 LzEvbXZuUjVWOUQ1UDNXMGstMHNPMm02ZEVvcWxFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABtZbSU6L kXQ2l5D8XCsXQHPF5xJRi7BtgUYpLFDLrZa94iUO38I+D7hrbHJ7tbOeK5R07yOc XXyIZm5LLTKXWPl1G/5DWxw6sGy3UgQR0Luu+ZGKhVEcT4QLXCdHR1JCJJcgdkwo zMor55LCHrkG8IYR90t4Y7+m8sIpTo/fZeF4bY+5Ssw0Kvhx03Ar+22Npv/V2PWU PvsesozZ9GmqSnv3IO3vGPaBYTzBnDhCswoLqYuP7/SEpUZKrVusH3LNmIrtAeHx C8RCpv4mTVQKJ0VU/tpbkXcJBf+qa34eVDAG+u28Nf7Hz4K/nzq8KkDyiKG43nGe uxtZZpAb+AmRqQ== -----END CERTIFICATE-----Generated at Sat Dec 6 22:58:31 2025 by rpki-client