This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/7e0b13-ec91-483d-b96a-659b4ccd7f4a/1/mvGIoEu0XU7nTETcdtcf_73AT2A.mft File: mvGIoEu0XU7nTETcdtcf_73AT2A.mft (raw, json) Hash identifier: EBos48G5L1GzNZv3KQfV/ePX3lX1ZWqKAktCXyOiS44= Subject key identifier: EC:94:01:EA:F9:40:6E:ED:FE:8B:0B:3B:C6:3E:FA:3A:F6:6C:4F:82 Authority key identifier: 9A:F1:88:A0:4B:B4:5D:4E:E7:4C:44:DC:76:D7:1F:FF:BD:C0:4F:60 Certificate issuer: /CN=9af188a04bb45d4ee74c44dc76d71fffbdc04f60 Certificate serial: 019AF50B9BED9B5D69A53431E63290CC8326 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mvGIoEu0XU7nTETcdtcf_73AT2A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/7e0b13-ec91-483d-b96a-659b4ccd7f4a/1/mvGIoEu0XU7nTETcdtcf_73AT2A.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 19:02:49 +0000 Manifest this update: Sat 06 Dec 2025 19:02:49 +0000 Manifest next update: Sun 07 Dec 2025 19:02:49 +0000 Files and hashes: 1: CfUrafygYGSePjcIej3rxMGbJDI.roa (hash: X6AZHbughYjpJFwaVsupdcP3UOvik8OA/b5qiG++R3Q=) 2: mvGIoEu0XU7nTETcdtcf_73AT2A.crl (hash: p2G83RizWseAsQguRG3E4TNxbeBocD+WkjOyEJp0M2I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/7e0b13-ec91-483d-b96a-659b4ccd7f4a/1/mvGIoEu0XU7nTETcdtcf_73AT2A.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/7e0b13-ec91-483d-b96a-659b4ccd7f4a/1/mvGIoEu0XU7nTETcdtcf_73AT2A.mft rsync://rpki.ripe.net/repository/DEFAULT/mvGIoEu0XU7nTETcdtcf_73AT2A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:02:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0b:9b:ed:9b:5d:69:a5:34:31:e6:32:90:cc:83:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9af188a04bb45d4ee74c44dc76d71fffbdc04f60 Validity Not Before: Dec 6 19:02:49 2025 GMT Not After : Dec 7 19:02:49 2025 GMT Subject: CN=ec9401eaf9406eedfe8b0b3bc63efa3af66c4f82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:8a:fa:db:35:a1:ca:46:3a:aa:f4:e8:46:08: b3:82:7c:2a:1e:7f:03:79:42:2d:d4:80:04:1a:fe: b6:26:e8:0c:92:e8:3a:fa:05:58:66:5f:c0:f0:15: b6:c6:55:13:47:4a:00:62:cb:97:f9:a5:9b:3c:e5: 11:36:21:d5:a0:67:73:b0:98:e6:16:cb:c9:6c:b2: 27:ae:6f:fb:dd:93:58:c9:b3:c1:0a:79:8e:86:5b: fe:22:da:29:e7:8c:65:48:30:1d:18:ec:ee:02:39: 1f:95:43:94:cf:0b:c9:68:ee:bc:1a:57:60:dc:b1: 34:e7:a1:91:37:cc:98:1f:a5:5e:ff:ba:ae:b0:25: 0c:16:a1:a7:84:7c:6d:eb:8a:3a:1b:d8:68:f8:97: ad:74:9e:5e:3a:20:69:5e:e7:57:03:fa:ac:02:b0: 60:5c:3a:fb:e0:07:b2:b0:f2:8f:e2:46:7c:a7:7a: 68:8f:9f:e9:bf:ac:44:ff:47:c0:82:42:56:f6:d7: a4:a1:af:9b:42:e9:06:51:ce:c2:3e:b2:7c:f9:50: e0:2d:2b:97:3f:89:ef:05:d2:a6:a8:32:4f:fa:ec: 81:05:fc:3c:86:90:86:42:42:0d:93:3c:fb:2c:a9: c7:91:c7:c5:c8:45:10:94:b3:5f:19:09:d4:6d:f4: 88:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:94:01:EA:F9:40:6E:ED:FE:8B:0B:3B:C6:3E:FA:3A:F6:6C:4F:82 X509v3 Authority Key Identifier: keyid:9A:F1:88:A0:4B:B4:5D:4E:E7:4C:44:DC:76:D7:1F:FF:BD:C0:4F:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mvGIoEu0XU7nTETcdtcf_73AT2A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/7e0b13-ec91-483d-b96a-659b4ccd7f4a/1/mvGIoEu0XU7nTETcdtcf_73AT2A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/7e0b13-ec91-483d-b96a-659b4ccd7f4a/1/mvGIoEu0XU7nTETcdtcf_73AT2A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:56:36:91:52:e2:19:35:45:79:ed:8e:92:69:1f:0a:ae:92: 05:06:60:85:d3:97:0e:31:ba:ae:5f:4b:2d:be:c4:b9:d5:2f: ec:a1:8b:0c:49:c6:9c:35:3f:5a:d7:f8:2c:3f:de:cf:88:df: 0a:1f:ad:e2:61:12:d4:e7:fc:b1:14:7e:6b:5e:8a:bd:f0:d5: f7:bf:43:85:55:3f:43:2e:56:10:fe:36:0b:13:54:1c:50:71: 75:80:9f:89:fb:f9:09:9b:9a:e0:53:9f:a4:51:f2:f6:57:08: 7b:f3:94:dc:5e:fa:6e:be:7b:5d:3d:51:b9:c0:d2:f7:f9:12: 9d:5b:c9:ec:39:e2:43:a7:a3:1f:fe:7f:d1:e0:69:06:8e:c2: 2d:68:6b:63:c3:7d:b4:49:2a:1a:d6:45:a9:ff:dd:9b:d6:81: 10:fa:1e:fc:fc:81:20:a8:60:8c:5a:79:24:cb:55:6c:87:14: 39:09:4b:37:9c:6a:c9:9c:5f:9a:df:1b:dd:2b:84:52:91:9a: fb:91:c5:d0:65:5d:21:a8:81:9b:15:c5:89:de:78:bc:27:24: f4:e6:80:d4:da:2f:86:20:b7:1e:e3:a7:f6:a0:25:9c:2b:95: 6b:03:21:71:13:f9:2b:5e:4f:ec:55:e5:c4:1c:1b:01:6c:0d: 86:97:a1:e2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1C5vtm11ppTQx5jKQzIMmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhZjE4OGEwNGJiNDVkNGVlNzRjNDRkYzc2ZDcxZmZmYmRj MDRmNjAwHhcNMjUxMjA2MTkwMjQ5WhcNMjUxMjA3MTkwMjQ5WjAzMTEwLwYDVQQD EyhlYzk0MDFlYWY5NDA2ZWVkZmU4YjBiM2JjNjNlZmEzYWY2NmM0ZjgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw4r62zWhykY6qvToRgizgnwqHn8D eUIt1IAEGv62JugMkug6+gVYZl/A8BW2xlUTR0oAYsuX+aWbPOURNiHVoGdzsJjm FsvJbLInrm/73ZNYybPBCnmOhlv+Itop54xlSDAdGOzuAjkflUOUzwvJaO68Gldg 3LE056GRN8yYH6Ve/7qusCUMFqGnhHxt64o6G9ho+JetdJ5eOiBpXudXA/qsArBg XDr74AeysPKP4kZ8p3poj5/pv6xE/0fAgkJW9tekoa+bQukGUc7CPrJ8+VDgLSuX P4nvBdKmqDJP+uyBBfw8hpCGQkINkzz7LKnHkcfFyEUQlLNfGQnUbfSITQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOyUAer5QG7t/osLO8Y++jr2bE+CMB8GA1UdIwQY MBaAFJrxiKBLtF1O50xE3HbXH/+9wE9gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbXZHSW9FdTBYVTduVEVUY2R0Y2ZfNzNBVDJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy83ZTBiMTMtZWM5MS00ODNkLWI5NmEt NjU5YjRjY2Q3ZjRhLzEvbXZHSW9FdTBYVTduVEVUY2R0Y2ZfNzNBVDJBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy83ZTBiMTMtZWM5MS00ODNkLWI5NmEtNjU5YjRjY2Q3ZjRh LzEvbXZHSW9FdTBYVTduVEVUY2R0Y2ZfNzNBVDJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATFY2kVLi GTVFee2OkmkfCq6SBQZghdOXDjG6rl9LLb7EudUv7KGLDEnGnDU/Wtf4LD/ez4jf Ch+t4mES1Of8sRR+a16KvfDV979DhVU/Qy5WEP42CxNUHFBxdYCfifv5CZua4FOf pFHy9lcIe/OU3F76br57XT1RucDS9/kSnVvJ7DniQ6ejH/5/0eBpBo7CLWhrY8N9 tEkqGtZFqf/dm9aBEPoe/PyBIKhgjFp5JMtVbIcUOQlLN5xqyZxfmt8b3SuEUpGa +5HF0GVdIaiBmxXFid54vCck9OaA1NovhiC3HuOn9qAlnCuVawMhcRP5K15P7FXl xBwbAWwNhpeh4g== -----END CERTIFICATE-----Generated at Sun Dec 7 00:54:18 2025 by rpki-client