This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/3bc707-76e7-4987-befa-981184dee131/1/00-mvj9cOPS7fgYrZwd0f0lhoEg.mft File: 00-mvj9cOPS7fgYrZwd0f0lhoEg.mft (raw, json) Hash identifier: WPRL/29Ttot5+pGwrmDlvJtBdQnJoSt0LOqGh5R+43g= Subject key identifier: 12:77:90:7F:F3:8E:D7:2F:0B:55:A3:54:2D:C4:EF:9A:53:16:C4:AD Authority key identifier: D3:4F:A6:BE:3F:5C:38:F4:BB:7E:06:2B:67:07:74:7F:49:61:A0:48 Certificate issuer: /CN=d34fa6be3f5c38f4bb7e062b6707747f4961a048 Certificate serial: 019B7CDD0F9387AB7B35B262418BAFE6B6DC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/00-mvj9cOPS7fgYrZwd0f0lhoEg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/3bc707-76e7-4987-befa-981184dee131/1/00-mvj9cOPS7fgYrZwd0f0lhoEg.mft Manifest number: 112F Signing time: Fri 02 Jan 2026 04:00:20 +0000 Manifest this update: Fri 02 Jan 2026 04:00:20 +0000 Manifest next update: Sat 03 Jan 2026 04:00:20 +0000 Files and hashes: 1: 00-mvj9cOPS7fgYrZwd0f0lhoEg.crl (hash: Hey50T9ZLI+jpo37mnqbJRMSzgdueCH/jwTdv46ego8=) 2: 9cUez0lt6Mmw_B9XzRcaxVFdcD4.roa (hash: nOpET7s1tBcctYg3BftSbHVRYi4Bukh6zTqeOERZX48=) 3: KiGqqB6_C_ieZKJBT6I3N4MMdDE.roa (hash: rhV7ftUdpJwNEXvedltkn1lDN8x7VUAPfzQjlu6gj8U=) 4: Km329xYl0mWvscl4C7smwLfJLZM.roa (hash: y92Zjmkk3O0mYFiCM2kvamv5Zo1ZKqAX4wwIWsbkyjg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/3bc707-76e7-4987-befa-981184dee131/1/00-mvj9cOPS7fgYrZwd0f0lhoEg.crl rsync://rpki.ripe.net/repository/DEFAULT/04/3bc707-76e7-4987-befa-981184dee131/1/00-mvj9cOPS7fgYrZwd0f0lhoEg.mft rsync://rpki.ripe.net/repository/DEFAULT/00-mvj9cOPS7fgYrZwd0f0lhoEg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:dd:0f:93:87:ab:7b:35:b2:62:41:8b:af:e6:b6:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d34fa6be3f5c38f4bb7e062b6707747f4961a048 Validity Not Before: Jan 2 04:00:20 2026 GMT Not After : Jan 3 04:00:20 2026 GMT Subject: CN=1277907ff38ed72f0b55a3542dc4ef9a5316c4ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:36:22:82:4c:f1:8d:14:c5:02:0a:b8:cf:ae: bc:ef:f5:fb:ac:14:1b:ac:e2:56:2b:a1:0f:c5:1a: fc:c3:31:5f:9d:34:a9:3e:f5:4e:93:07:c6:c2:c8: a9:ac:7a:fd:98:e6:82:f2:88:0b:47:e8:11:e2:52: 6d:f8:57:86:04:5b:f3:a4:f2:b3:e0:a5:d2:d9:dd: 6c:d4:34:97:cd:94:c0:7a:1a:37:47:18:82:ae:7a: b6:f7:9b:34:79:f1:93:af:0a:75:0e:73:4f:06:bc: 77:14:f4:56:e0:ed:a9:23:74:d9:b8:44:b7:74:73: 7b:73:4c:43:06:36:e6:f4:2c:ae:b7:4b:33:21:01: 86:57:92:4b:33:0f:91:94:b1:f6:85:dc:25:20:4e: b1:21:d4:fc:93:3a:28:3a:f3:33:1d:90:a4:db:d3: 99:0a:df:fd:5a:b7:b1:bd:a9:5f:d9:02:92:87:c7: f9:9d:3c:2b:32:a9:cb:2e:22:d5:03:0d:ca:46:e7: 35:1e:96:3a:d6:f0:e5:1d:b0:a2:44:ce:d0:13:a0: 70:f2:76:de:7b:ba:80:01:09:af:53:dc:86:6c:9e: b9:04:37:da:b4:d8:7a:1f:19:f9:a6:99:82:02:39: 56:01:36:d9:78:6e:ce:98:77:76:7d:7f:b1:c2:0d: 0c:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:77:90:7F:F3:8E:D7:2F:0B:55:A3:54:2D:C4:EF:9A:53:16:C4:AD X509v3 Authority Key Identifier: keyid:D3:4F:A6:BE:3F:5C:38:F4:BB:7E:06:2B:67:07:74:7F:49:61:A0:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/00-mvj9cOPS7fgYrZwd0f0lhoEg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/3bc707-76e7-4987-befa-981184dee131/1/00-mvj9cOPS7fgYrZwd0f0lhoEg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/04/3bc707-76e7-4987-befa-981184dee131/1/00-mvj9cOPS7fgYrZwd0f0lhoEg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:17:b6:92:07:ca:5f:4c:b3:5a:12:d8:b9:62:4b:6a:fd:dc: 14:ab:36:c3:22:6f:6d:e3:d6:e2:5f:ab:a0:f7:2f:8e:db:38: d1:a4:99:db:24:f2:df:3f:71:11:2a:dd:76:38:f2:7b:cb:ca: 53:66:13:6c:fb:a7:86:d9:00:ab:27:50:68:e5:9b:2b:7e:9d: 01:c9:43:15:e4:05:99:21:6c:d5:b8:5e:78:2b:3a:04:7b:2c: 26:8c:ea:89:ee:a3:47:ef:31:be:67:91:6b:1f:ff:dd:8a:97: 1f:ee:08:ce:5d:07:99:0d:1c:d4:c2:4b:30:df:64:be:38:f1: 6b:21:69:55:9f:c6:e2:f3:2d:e4:04:37:d5:b2:e8:43:fc:af: 58:51:e0:8b:3a:48:e3:e3:19:cb:69:e4:6d:41:1a:19:cc:09: 3b:d0:bb:33:06:90:4d:df:3b:51:c1:27:33:2f:8c:ef:f2:bb: f8:91:6a:42:fe:a2:48:b3:1c:b5:d6:e2:96:7b:55:f9:14:e4: 1c:8b:fe:77:00:bf:01:c5:5d:df:ab:42:1a:dd:a9:c3:65:bd: 34:42:44:e5:a5:07:53:db:6b:cc:ec:d4:53:47:3b:6f:ca:b4: 66:fc:99:19:15:fa:e3:59:61:6a:1d:4c:93:fe:ff:45:af:5a: 54:72:3f:b4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt83Q+Th6t7NbJiQYuv5rbcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzNGZhNmJlM2Y1YzM4ZjRiYjdlMDYyYjY3MDc3NDdmNDk2 MWEwNDgwHhcNMjYwMTAyMDQwMDIwWhcNMjYwMTAzMDQwMDIwWjAzMTEwLwYDVQQD EygxMjc3OTA3ZmYzOGVkNzJmMGI1NWEzNTQyZGM0ZWY5YTUzMTZjNGFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnTYigkzxjRTFAgq4z6687/X7rBQb rOJWK6EPxRr8wzFfnTSpPvVOkwfGwsiprHr9mOaC8ogLR+gR4lJt+FeGBFvzpPKz 4KXS2d1s1DSXzZTAeho3RxiCrnq295s0efGTrwp1DnNPBrx3FPRW4O2pI3TZuES3 dHN7c0xDBjbm9Cyut0szIQGGV5JLMw+RlLH2hdwlIE6xIdT8kzooOvMzHZCk29OZ Ct/9Wrexvalf2QKSh8f5nTwrMqnLLiLVAw3KRuc1HpY61vDlHbCiRM7QE6Bw8nbe e7qAAQmvU9yGbJ65BDfatNh6Hxn5ppmCAjlWATbZeG7OmHd2fX+xwg0MjwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBJ3kH/zjtcvC1WjVC3E75pTFsStMB8GA1UdIwQY MBaAFNNPpr4/XDj0u34GK2cHdH9JYaBIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMDAtbXZqOWNPUFM3ZmdZclp3ZDBmMGxob0VnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC8zYmM3MDctNzZlNy00OTg3LWJlZmEt OTgxMTg0ZGVlMTMxLzEvMDAtbXZqOWNPUFM3ZmdZclp3ZDBmMGxob0VnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNC8zYmM3MDctNzZlNy00OTg3LWJlZmEtOTgxMTg0ZGVlMTMx LzEvMDAtbXZqOWNPUFM3ZmdZclp3ZDBmMGxob0VnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMxe2kgfK X0yzWhLYuWJLav3cFKs2wyJvbePW4l+roPcvjts40aSZ2yTy3z9xESrddjjye8vK U2YTbPunhtkAqydQaOWbK36dAclDFeQFmSFs1bheeCs6BHssJozqie6jR+8xvmeR ax//3YqXH+4Izl0HmQ0c1MJLMN9kvjjxayFpVZ/G4vMt5AQ31bLoQ/yvWFHgizpI 4+MZy2nkbUEaGcwJO9C7MwaQTd87UcEnMy+M7/K7+JFqQv6iSLMctdbilntV+RTk HIv+dwC/AcVd36tCGt2pw2W9NEJE5aUHU9trzOzUU0c7b8q0ZvyZGRX641lhah1M k/7/Ra9aVHI/tA== -----END CERTIFICATE-----Generated at Fri Jan 2 12:51:54 2026 by rpki-client