This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/7e0b13-ec91-483d-b96a-659b4ccd7f4a/1/mvGIoEu0XU7nTETcdtcf_73AT2A.mft
File: mvGIoEu0XU7nTETcdtcf_73AT2A.mft (raw, json)
Hash identifier: PSJlEfisxO9W8w93EDuejk2cLYDPiTssrD+OpESDWgQ=
Subject key identifier: E8:79:C9:92:9C:13:C3:1F:C2:3A:08:92:E7:35:7F:D9:A4:28:C2:3D
Authority key identifier: 9A:F1:88:A0:4B:B4:5D:4E:E7:4C:44:DC:76:D7:1F:FF:BD:C0:4F:60
Certificate issuer: /CN=9af188a04bb45d4ee74c44dc76d71fffbdc04f60
Certificate serial: 019AF31D7398CFFF21F70C95C1240961F4CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mvGIoEu0XU7nTETcdtcf_73AT2A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/7e0b13-ec91-483d-b96a-659b4ccd7f4a/1/mvGIoEu0XU7nTETcdtcf_73AT2A.mft
Manifest number: 1760
Signing time: Sat 06 Dec 2025 10:03:04 +0000
Manifest this update: Sat 06 Dec 2025 10:03:04 +0000
Manifest next update: Sun 07 Dec 2025 10:03:04 +0000
Files and hashes: 1: CfUrafygYGSePjcIej3rxMGbJDI.roa (hash: X6AZHbughYjpJFwaVsupdcP3UOvik8OA/b5qiG++R3Q=)
2: mvGIoEu0XU7nTETcdtcf_73AT2A.crl (hash: VT3NY88laLgcl5Ab90Ad94cdXtF+P/aC0mSx4qzZvTM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/7e0b13-ec91-483d-b96a-659b4ccd7f4a/1/mvGIoEu0XU7nTETcdtcf_73AT2A.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/7e0b13-ec91-483d-b96a-659b4ccd7f4a/1/mvGIoEu0XU7nTETcdtcf_73AT2A.mft
rsync://rpki.ripe.net/repository/DEFAULT/mvGIoEu0XU7nTETcdtcf_73AT2A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 10:03:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f3:1d:73:98:cf:ff:21:f7:0c:95:c1:24:09:61:f4:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9af188a04bb45d4ee74c44dc76d71fffbdc04f60
Validity
Not Before: Dec 6 10:03:04 2025 GMT
Not After : Dec 7 10:03:04 2025 GMT
Subject: CN=e879c9929c13c31fc23a0892e7357fd9a428c23d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:76:10:fb:23:a6:60:7a:d6:57:f3:7c:58:b6:
2c:9c:9c:11:67:03:ca:92:1d:27:9f:d8:3e:f2:77:
e9:f5:84:92:76:0a:e0:f6:05:ce:36:e6:de:bc:5e:
b5:05:e1:5c:0a:75:e5:f8:1b:79:c3:85:f9:51:c0:
ee:47:4f:3a:df:8c:37:66:c8:d7:f0:fc:2d:3f:50:
e7:a8:25:88:0a:41:5e:d2:f9:0a:95:aa:1d:de:96:
5f:7a:ea:b8:81:98:b6:28:98:f5:a1:0d:78:eb:a0:
63:ea:82:26:d7:7f:5c:56:69:28:ff:c4:a1:7e:1a:
d9:7f:a9:dd:8a:f0:80:ed:c2:20:10:06:d1:de:36:
d0:e7:68:d2:10:5a:84:7a:f4:6a:cd:c6:5f:40:4e:
3f:96:31:c9:be:ae:c2:20:ea:88:04:d9:69:5a:88:
ce:b8:08:a7:ab:64:8c:54:77:8b:a9:6e:87:97:c2:
15:54:ab:b1:83:14:53:ce:d1:bc:dd:f9:10:69:2a:
92:dd:39:08:ee:a2:c3:bf:d9:45:4f:16:f3:1c:86:
5b:31:d5:f3:af:88:c9:02:7b:4b:85:22:a6:5b:e7:
ad:d8:b6:61:98:be:44:c8:4e:88:ac:13:fd:45:94:
dd:9e:0b:90:a1:b6:9d:67:30:58:a3:ce:43:72:cb:
ee:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:79:C9:92:9C:13:C3:1F:C2:3A:08:92:E7:35:7F:D9:A4:28:C2:3D
X509v3 Authority Key Identifier:
keyid:9A:F1:88:A0:4B:B4:5D:4E:E7:4C:44:DC:76:D7:1F:FF:BD:C0:4F:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mvGIoEu0XU7nTETcdtcf_73AT2A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/7e0b13-ec91-483d-b96a-659b4ccd7f4a/1/mvGIoEu0XU7nTETcdtcf_73AT2A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/7e0b13-ec91-483d-b96a-659b4ccd7f4a/1/mvGIoEu0XU7nTETcdtcf_73AT2A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:37:5b:73:16:e2:ef:e5:b7:7b:48:89:9c:05:2d:b5:51:dc:
d1:7d:8b:00:e5:93:18:96:89:2e:c0:ca:4e:e3:31:71:09:bf:
cf:af:b2:78:81:82:9c:60:72:ce:43:f0:a7:c9:11:e0:74:4f:
94:ea:6c:2f:75:17:bc:ed:21:69:43:34:92:cf:97:1d:95:78:
da:ae:b3:15:9b:ae:ef:f0:f0:97:37:7c:40:f0:a7:90:17:1c:
4c:73:82:c8:04:8c:cb:ec:a8:57:96:d9:11:f1:3f:e1:1a:d6:
82:d6:21:f3:56:a6:3f:5e:8b:02:bd:39:00:44:9a:97:06:f6:
ef:91:d2:99:fb:93:e1:1a:9a:a7:28:13:4e:98:10:3f:f1:45:
8f:9e:80:bb:f3:3a:de:11:73:24:35:0a:58:7c:ab:2d:24:21:
b3:14:25:e0:97:f7:11:d7:66:e7:d5:93:17:25:df:a8:8d:b2:
f8:80:fe:b4:6b:41:e7:e1:db:5a:69:64:3f:0a:5c:f1:58:b9:
60:00:07:fc:1d:bf:8b:d6:7e:3d:21:98:fb:53:09:9d:96:39:
ab:29:25:d3:a1:58:b2:fa:5a:51:f4:eb:51:7a:f4:f8:2a:24:
ba:6e:03:73:7e:e9:13:fe:42:6a:55:a5:28:27:04:0a:2f:18:
e6:a9:ed:1c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZrzHXOYz/8h9wyVwSQJYfTOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhZjE4OGEwNGJiNDVkNGVlNzRjNDRkYzc2ZDcxZmZmYmRj
MDRmNjAwHhcNMjUxMjA2MTAwMzA0WhcNMjUxMjA3MTAwMzA0WjAzMTEwLwYDVQQD
EyhlODc5Yzk5MjljMTNjMzFmYzIzYTA4OTJlNzM1N2ZkOWE0MjhjMjNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs3YQ+yOmYHrWV/N8WLYsnJwRZwPK
kh0nn9g+8nfp9YSSdgrg9gXONubevF61BeFcCnXl+Bt5w4X5UcDuR08634w3ZsjX
8PwtP1DnqCWICkFe0vkKlaod3pZfeuq4gZi2KJj1oQ1466Bj6oIm139cVmko/8Sh
fhrZf6ndivCA7cIgEAbR3jbQ52jSEFqEevRqzcZfQE4/ljHJvq7CIOqIBNlpWojO
uAinq2SMVHeLqW6Hl8IVVKuxgxRTztG83fkQaSqS3TkI7qLDv9lFTxbzHIZbMdXz
r4jJAntLhSKmW+et2LZhmL5EyE6IrBP9RZTdnguQobadZzBYo85DcsvuOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOh5yZKcE8MfwjoIkuc1f9mkKMI9MB8GA1UdIwQY
MBaAFJrxiKBLtF1O50xE3HbXH/+9wE9gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbXZHSW9FdTBYVTduVEVUY2R0Y2ZfNzNBVDJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy83ZTBiMTMtZWM5MS00ODNkLWI5NmEt
NjU5YjRjY2Q3ZjRhLzEvbXZHSW9FdTBYVTduVEVUY2R0Y2ZfNzNBVDJBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy83ZTBiMTMtZWM5MS00ODNkLWI5NmEtNjU5YjRjY2Q3ZjRh
LzEvbXZHSW9FdTBYVTduVEVUY2R0Y2ZfNzNBVDJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyjdbcxbi
7+W3e0iJnAUttVHc0X2LAOWTGJaJLsDKTuMxcQm/z6+yeIGCnGByzkPwp8kR4HRP
lOpsL3UXvO0haUM0ks+XHZV42q6zFZuu7/Dwlzd8QPCnkBccTHOCyASMy+yoV5bZ
EfE/4RrWgtYh81amP16LAr05AESalwb275HSmfuT4RqapygTTpgQP/FFj56Au/M6
3hFzJDUKWHyrLSQhsxQl4Jf3Eddm59WTFyXfqI2y+ID+tGtB5+HbWmlkPwpc8Vi5
YAAH/B2/i9Z+PSGY+1MJnZY5qykl06FYsvpaUfTrUXr0+Cokum4Dc37pE/5CalWl
KCcECi8Y5qntHA==
-----END CERTIFICATE-----
Generated at Sat Dec 6 16:29:34 2025 by rpki-client