This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/7e0b13-ec91-483d-b96a-659b4ccd7f4a/1/mvGIoEu0XU7nTETcdtcf_73AT2A.mft File: mvGIoEu0XU7nTETcdtcf_73AT2A.mft (raw, json) Hash identifier: U0BRaWDT6ifiiBPptlhTDdL/Dzgu7+4LGglfoUwbI7Q= Subject key identifier: E0:7A:8B:64:8A:E4:9C:D3:EF:D0:50:42:F0:1A:81:6D:3F:97:B3:1C Authority key identifier: 9A:F1:88:A0:4B:B4:5D:4E:E7:4C:44:DC:76:D7:1F:FF:BD:C0:4F:60 Certificate issuer: /CN=9af188a04bb45d4ee74c44dc76d71fffbdc04f60 Certificate serial: 019B3C7EB8C33CA0CDDA0B466B0FE5A6C0D4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mvGIoEu0XU7nTETcdtcf_73AT2A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/7e0b13-ec91-483d-b96a-659b4ccd7f4a/1/mvGIoEu0XU7nTETcdtcf_73AT2A.mft Manifest number: 1786 Signing time: Sat 20 Dec 2025 16:01:36 +0000 Manifest this update: Sat 20 Dec 2025 16:01:36 +0000 Manifest next update: Sun 21 Dec 2025 16:01:36 +0000 Files and hashes: 1: CfUrafygYGSePjcIej3rxMGbJDI.roa (hash: X6AZHbughYjpJFwaVsupdcP3UOvik8OA/b5qiG++R3Q=) 2: mvGIoEu0XU7nTETcdtcf_73AT2A.crl (hash: qO7l0wue+njhyvVOGs18KHOTvawrGq4X3rasu0lugm8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/7e0b13-ec91-483d-b96a-659b4ccd7f4a/1/mvGIoEu0XU7nTETcdtcf_73AT2A.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/7e0b13-ec91-483d-b96a-659b4ccd7f4a/1/mvGIoEu0XU7nTETcdtcf_73AT2A.mft rsync://rpki.ripe.net/repository/DEFAULT/mvGIoEu0XU7nTETcdtcf_73AT2A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7e:b8:c3:3c:a0:cd:da:0b:46:6b:0f:e5:a6:c0:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9af188a04bb45d4ee74c44dc76d71fffbdc04f60 Validity Not Before: Dec 20 16:01:36 2025 GMT Not After : Dec 21 16:01:36 2025 GMT Subject: CN=e07a8b648ae49cd3efd05042f01a816d3f97b31c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:7c:b6:24:8a:b1:2b:85:78:c5:88:a5:4f:ef: 5c:f3:f0:40:54:2e:b4:b7:83:32:ba:4f:35:d4:38: d6:11:b0:52:72:b5:b9:e9:a2:6e:c1:32:19:0b:30: 29:c7:60:79:69:37:c1:be:a8:0f:58:8a:89:23:ba: 4d:4c:ad:0e:84:17:3d:54:b3:cd:35:5d:e8:ec:2d: 26:d2:da:77:fb:64:2b:a0:b7:18:63:79:af:0c:5c: 54:03:dc:78:ce:12:f3:a2:5d:9f:47:22:f2:d2:03: 1e:e6:35:d1:41:96:ed:5f:8c:93:69:5e:66:42:4b: 97:26:20:7f:4a:92:fd:bf:c0:69:3b:c9:d5:ee:5e: c2:47:13:80:b3:35:6c:fb:9b:10:fc:ac:20:a1:72: 9a:04:e5:6f:da:19:66:36:8d:28:37:6d:8c:4d:61: f8:25:a2:ed:c2:85:97:be:e5:2a:35:71:d2:b6:a4: 42:4d:d2:5c:74:3d:53:38:40:83:4f:8d:73:47:9e: dd:56:a5:63:61:0e:5a:81:83:7c:ea:3d:47:a2:ec: e3:0d:8b:8d:7f:b6:bd:16:08:21:0c:83:48:17:01: a0:62:b4:d6:a7:5b:c1:ab:07:b4:07:7b:22:84:6a: 0d:d1:44:46:ed:0f:56:3f:97:7b:ff:dc:3d:0d:69: 80:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:7A:8B:64:8A:E4:9C:D3:EF:D0:50:42:F0:1A:81:6D:3F:97:B3:1C X509v3 Authority Key Identifier: keyid:9A:F1:88:A0:4B:B4:5D:4E:E7:4C:44:DC:76:D7:1F:FF:BD:C0:4F:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mvGIoEu0XU7nTETcdtcf_73AT2A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/7e0b13-ec91-483d-b96a-659b4ccd7f4a/1/mvGIoEu0XU7nTETcdtcf_73AT2A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/7e0b13-ec91-483d-b96a-659b4ccd7f4a/1/mvGIoEu0XU7nTETcdtcf_73AT2A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:4d:e8:fe:19:6f:75:75:bf:32:7f:73:de:24:fe:9e:fb:a7: bf:e1:5d:e1:1a:d4:b4:6a:23:af:e1:1a:95:66:74:59:01:e2: 3b:4d:49:4b:bc:ec:cd:81:86:67:82:18:f3:bf:9e:b3:1d:aa: c6:f5:05:71:a1:9f:7d:11:95:f5:4a:ae:e6:cc:aa:21:97:f1: 4f:d3:11:32:63:e1:d7:81:36:aa:19:9a:7c:60:67:07:dd:63: ae:c3:b9:3d:93:92:4b:08:f0:91:18:6d:50:d8:2b:f8:9b:ea: 3b:4a:7c:f5:e5:e2:e5:cb:ca:ce:c5:95:2d:31:d1:4f:d1:c0: f8:de:a4:70:77:8c:e4:8e:99:24:35:0a:8c:8c:55:48:46:e2: 41:1d:1f:5d:ef:a1:d2:5c:f7:ef:57:44:ab:b0:8c:04:cf:0f: 3e:15:5e:06:18:fa:84:65:b3:82:35:3d:07:24:d9:d0:a3:2d: c2:88:9e:16:8c:f6:f0:0b:b5:b3:3d:ad:50:8f:4a:bc:6b:b8: 5e:8f:ae:d1:8c:d4:7f:4b:dc:90:73:2c:d4:86:a6:81:e5:e7: 5e:b9:21:6b:e1:95:52:c4:38:5d:9a:13:f6:90:f1:ab:74:bd: b1:5e:72:2e:3a:0d:6f:f5:13:e4:b8:a2:c6:ac:51:e5:5a:c0: f3:c4:39:7f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8frjDPKDN2gtGaw/lpsDUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhZjE4OGEwNGJiNDVkNGVlNzRjNDRkYzc2ZDcxZmZmYmRj MDRmNjAwHhcNMjUxMjIwMTYwMTM2WhcNMjUxMjIxMTYwMTM2WjAzMTEwLwYDVQQD EyhlMDdhOGI2NDhhZTQ5Y2QzZWZkMDUwNDJmMDFhODE2ZDNmOTdiMzFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq3y2JIqxK4V4xYilT+9c8/BAVC60 t4Myuk811DjWEbBScrW56aJuwTIZCzApx2B5aTfBvqgPWIqJI7pNTK0OhBc9VLPN NV3o7C0m0tp3+2QroLcYY3mvDFxUA9x4zhLzol2fRyLy0gMe5jXRQZbtX4yTaV5m QkuXJiB/SpL9v8BpO8nV7l7CRxOAszVs+5sQ/KwgoXKaBOVv2hlmNo0oN22MTWH4 JaLtwoWXvuUqNXHStqRCTdJcdD1TOECDT41zR57dVqVjYQ5agYN86j1HouzjDYuN f7a9FgghDINIFwGgYrTWp1vBqwe0B3sihGoN0URG7Q9WP5d7/9w9DWmAzQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOB6i2SK5JzT79BQQvAagW0/l7McMB8GA1UdIwQY MBaAFJrxiKBLtF1O50xE3HbXH/+9wE9gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbXZHSW9FdTBYVTduVEVUY2R0Y2ZfNzNBVDJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy83ZTBiMTMtZWM5MS00ODNkLWI5NmEt NjU5YjRjY2Q3ZjRhLzEvbXZHSW9FdTBYVTduVEVUY2R0Y2ZfNzNBVDJBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy83ZTBiMTMtZWM5MS00ODNkLWI5NmEtNjU5YjRjY2Q3ZjRh LzEvbXZHSW9FdTBYVTduVEVUY2R0Y2ZfNzNBVDJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABE3o/hlv dXW/Mn9z3iT+nvunv+Fd4RrUtGojr+EalWZ0WQHiO01JS7zszYGGZ4IY87+esx2q xvUFcaGffRGV9Uqu5syqIZfxT9MRMmPh14E2qhmafGBnB91jrsO5PZOSSwjwkRht UNgr+JvqO0p89eXi5cvKzsWVLTHRT9HA+N6kcHeM5I6ZJDUKjIxVSEbiQR0fXe+h 0lz371dEq7CMBM8PPhVeBhj6hGWzgjU9ByTZ0KMtwoieFoz28Au1sz2tUI9KvGu4 Xo+u0YzUf0vckHMs1IamgeXnXrkha+GVUsQ4XZoT9pDxq3S9sV5yLjoNb/UT5Lii xqxR5VrA88Q5fw== -----END CERTIFICATE-----Generated at Sun Dec 21 00:21:50 2025 by rpki-client