This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/07d146-ef22-4e5c-bd5c-42ed3e373679/1/MXvyYLzaMCviwgdijPsWRHhhT-U.mft File: MXvyYLzaMCviwgdijPsWRHhhT-U.mft (raw, json) Hash identifier: KWejsW8eqHBFQTGmvBwHA6L/g7Iu68D5Je1ugG7b0RU= Subject key identifier: 0C:09:35:D2:3B:4B:9F:ED:B5:CF:F7:52:85:49:32:F9:1F:68:E4:2D Authority key identifier: 31:7B:F2:60:BC:DA:30:2B:E2:C2:07:62:8C:FB:16:44:78:61:4F:E5 Certificate issuer: /CN=317bf260bcda302be2c207628cfb164478614fe5 Certificate serial: 019B390FE3C3A8C7A5DF4365F82D8AF57882 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MXvyYLzaMCviwgdijPsWRHhhT-U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/07d146-ef22-4e5c-bd5c-42ed3e373679/1/MXvyYLzaMCviwgdijPsWRHhhT-U.mft Manifest number: 0EFA Signing time: Sat 20 Dec 2025 00:01:41 +0000 Manifest this update: Sat 20 Dec 2025 00:01:41 +0000 Manifest next update: Sun 21 Dec 2025 00:01:41 +0000 Files and hashes: 1: MXvyYLzaMCviwgdijPsWRHhhT-U.crl (hash: RPc8LFXlb+G5gEcei7ARkGw2rmthEtwcbnmD0NGZGxU=) 2: penXvalgbMBLZqcx96rUayqK3NQ.roa (hash: vb/Iw29Kb6TCjGenAwHcr/Ra62ZOMD3/iU+HDEP/27c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/07d146-ef22-4e5c-bd5c-42ed3e373679/1/MXvyYLzaMCviwgdijPsWRHhhT-U.crl rsync://rpki.ripe.net/repository/DEFAULT/03/07d146-ef22-4e5c-bd5c-42ed3e373679/1/MXvyYLzaMCviwgdijPsWRHhhT-U.mft rsync://rpki.ripe.net/repository/DEFAULT/MXvyYLzaMCviwgdijPsWRHhhT-U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 17:13:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:0f:e3:c3:a8:c7:a5:df:43:65:f8:2d:8a:f5:78:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=317bf260bcda302be2c207628cfb164478614fe5 Validity Not Before: Dec 20 00:01:41 2025 GMT Not After : Dec 21 00:01:41 2025 GMT Subject: CN=0c0935d23b4b9fedb5cff752854932f91f68e42d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:65:1b:13:af:1d:cf:df:c3:4d:31:71:25:d5: 11:8e:9c:c2:49:d3:f7:6f:83:89:9e:78:06:8f:c6: f0:f0:40:2b:96:bc:13:00:96:12:77:2a:2b:3a:02: 76:61:b2:aa:1b:f8:27:b5:2d:92:04:ad:19:ee:2b: 58:9e:59:77:b6:2c:d6:02:41:b3:d8:46:db:11:cb: 06:57:8a:ee:b5:41:2e:1b:61:48:f8:c8:74:88:06: f1:7c:ae:01:98:d2:de:75:a6:a9:f2:72:ef:45:74: 33:b6:3a:f5:31:95:cd:55:6e:32:60:44:08:28:d7: 49:03:fb:12:39:95:65:61:aa:9a:a5:d5:fd:41:3f: 73:bb:94:63:0a:3b:9b:7a:f3:8d:ef:06:ae:86:24: 24:90:99:53:85:01:4a:21:f9:2a:5e:42:5b:c7:0a: 2c:08:66:0e:52:2e:5b:88:f4:16:b6:7e:53:65:9b: 1f:94:7f:23:e6:9c:cb:23:2a:b9:9f:ae:bf:50:cb: da:39:9b:4a:06:7a:ec:95:03:67:70:79:e3:11:f5: 40:1e:55:f9:5a:a9:4a:61:30:61:5a:7e:8d:37:89: 76:5d:43:2d:8f:a2:e6:c1:fa:66:eb:9f:6f:c5:1a: 66:74:b3:dd:aa:fb:54:87:b0:fc:c2:6a:d0:d4:69: 04:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:09:35:D2:3B:4B:9F:ED:B5:CF:F7:52:85:49:32:F9:1F:68:E4:2D X509v3 Authority Key Identifier: keyid:31:7B:F2:60:BC:DA:30:2B:E2:C2:07:62:8C:FB:16:44:78:61:4F:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MXvyYLzaMCviwgdijPsWRHhhT-U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/07d146-ef22-4e5c-bd5c-42ed3e373679/1/MXvyYLzaMCviwgdijPsWRHhhT-U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/07d146-ef22-4e5c-bd5c-42ed3e373679/1/MXvyYLzaMCviwgdijPsWRHhhT-U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:db:ab:34:a8:3f:7e:ee:b7:44:3c:4d:1a:32:71:7c:92:c5: 11:04:4e:45:80:51:b6:ea:69:93:6f:d0:15:5d:8e:fa:e0:ab: 7a:c9:08:59:83:89:af:3e:27:03:bd:7d:af:c7:f3:99:3a:8d: 8d:46:ba:a8:be:77:ed:cc:1d:a5:65:86:9d:5e:fd:e6:e1:44: 64:5f:fa:e5:ab:5c:14:23:76:1a:57:1c:79:c9:a4:94:44:bb: af:43:8c:c2:34:b4:76:ee:92:8d:66:9c:ea:96:9d:bc:81:33: a3:63:7e:62:8d:de:24:67:2c:d4:ec:27:8d:75:32:c0:05:8c: 41:55:3d:ab:e4:1d:6e:74:fb:fc:3c:af:50:a8:ce:0c:ae:e3: 04:dc:0e:9a:d2:a2:6e:36:33:4a:85:cb:a0:23:76:d6:6a:68: ff:c2:98:fa:39:ce:d0:21:b8:33:f9:28:1a:0e:5d:a1:78:d1: c3:cc:a6:40:3b:f7:9f:bc:41:b4:73:58:d6:7c:4e:59:e9:28: 99:31:e8:3e:e4:39:ad:ac:a4:10:95:af:83:3f:d7:1d:87:df: be:6f:38:7f:e5:47:02:16:50:2a:db:61:aa:fa:68:93:87:2b: b2:f1:22:ed:60:5a:e5:75:d8:9e:d7:f2:61:24:3b:fb:f4:53: 1f:8b:af:17 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5D+PDqMel30Nl+C2K9XiCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxN2JmMjYwYmNkYTMwMmJlMmMyMDc2MjhjZmIxNjQ0Nzg2 MTRmZTUwHhcNMjUxMjIwMDAwMTQxWhcNMjUxMjIxMDAwMTQxWjAzMTEwLwYDVQQD EygwYzA5MzVkMjNiNGI5ZmVkYjVjZmY3NTI4NTQ5MzJmOTFmNjhlNDJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlmUbE68dz9/DTTFxJdURjpzCSdP3 b4OJnngGj8bw8EArlrwTAJYSdyorOgJ2YbKqG/gntS2SBK0Z7itYnll3tizWAkGz 2EbbEcsGV4rutUEuG2FI+Mh0iAbxfK4BmNLedaap8nLvRXQztjr1MZXNVW4yYEQI KNdJA/sSOZVlYaqapdX9QT9zu5RjCjubevON7wauhiQkkJlThQFKIfkqXkJbxwos CGYOUi5biPQWtn5TZZsflH8j5pzLIyq5n66/UMvaOZtKBnrslQNncHnjEfVAHlX5 WqlKYTBhWn6NN4l2XUMtj6Lmwfpm659vxRpmdLPdqvtUh7D8wmrQ1GkEaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAwJNdI7S5/ttc/3UoVJMvkfaOQtMB8GA1UdIwQY MBaAFDF78mC82jAr4sIHYoz7FkR4YU/lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTVh2eVlMemFNQ3Zpd2dkaWpQc1dSSGhoVC1VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy8wN2QxNDYtZWYyMi00ZTVjLWJkNWMt NDJlZDNlMzczNjc5LzEvTVh2eVlMemFNQ3Zpd2dkaWpQc1dSSGhoVC1VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy8wN2QxNDYtZWYyMi00ZTVjLWJkNWMtNDJlZDNlMzczNjc5 LzEvTVh2eVlMemFNQ3Zpd2dkaWpQc1dSSGhoVC1VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYdurNKg/ fu63RDxNGjJxfJLFEQRORYBRtuppk2/QFV2O+uCreskIWYOJrz4nA719r8fzmTqN jUa6qL537cwdpWWGnV795uFEZF/65atcFCN2GlccecmklES7r0OMwjS0du6SjWac 6padvIEzo2N+Yo3eJGcs1OwnjXUywAWMQVU9q+QdbnT7/DyvUKjODK7jBNwOmtKi bjYzSoXLoCN21mpo/8KY+jnO0CG4M/koGg5doXjRw8ymQDv3n7xBtHNY1nxOWeko mTHoPuQ5raykEJWvgz/XHYffvm84f+VHAhZQKtthqvpok4crsvEi7WBa5XXYntfy YSQ7+/RTH4uvFw== -----END CERTIFICATE-----Generated at Sat Dec 20 03:19:30 2025 by rpki-client