This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/35b49b-03a3-4101-a3fe-1d8e19df4a62/1/MtOVxX39MMDNLDD0IziuTBSnUKE.mft File: MtOVxX39MMDNLDD0IziuTBSnUKE.mft (raw, json) Hash identifier: sWuHleRMUcTDcCCC4d1bMYlFlTchjyCiy/v7llqk7UY= Subject key identifier: BF:30:D2:D1:7D:0B:C8:29:23:B1:03:CB:F0:C4:BB:ED:9B:AE:86:60 Authority key identifier: 32:D3:95:C5:7D:FD:30:C0:CD:2C:30:F4:23:38:AE:4C:14:A7:50:A1 Certificate issuer: /CN=32d395c57dfd30c0cd2c30f42338ae4c14a750a1 Certificate serial: 019B5976986DCE012DAF158A7A6F4241D9F0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MtOVxX39MMDNLDD0IziuTBSnUKE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/35b49b-03a3-4101-a3fe-1d8e19df4a62/1/MtOVxX39MMDNLDD0IziuTBSnUKE.mft Manifest number: 0C80 Signing time: Fri 26 Dec 2025 07:01:43 +0000 Manifest this update: Fri 26 Dec 2025 07:01:43 +0000 Manifest next update: Sat 27 Dec 2025 07:01:43 +0000 Files and hashes: 1: MtOVxX39MMDNLDD0IziuTBSnUKE.crl (hash: YkJPvH6Z+elYTdG73p1MAUkjVb4aYkmmET9XXi/xEAM=) 2: n5cNfAezq-PA0qRMQcD4Vk_fATk.roa (hash: 3AWrOq42owDA1epXEWxZ5qyQ/E7NiBYhiJKMNg3oKTI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/35b49b-03a3-4101-a3fe-1d8e19df4a62/1/MtOVxX39MMDNLDD0IziuTBSnUKE.crl rsync://rpki.ripe.net/repository/DEFAULT/14/35b49b-03a3-4101-a3fe-1d8e19df4a62/1/MtOVxX39MMDNLDD0IziuTBSnUKE.mft rsync://rpki.ripe.net/repository/DEFAULT/MtOVxX39MMDNLDD0IziuTBSnUKE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:76:98:6d:ce:01:2d:af:15:8a:7a:6f:42:41:d9:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32d395c57dfd30c0cd2c30f42338ae4c14a750a1 Validity Not Before: Dec 26 07:01:43 2025 GMT Not After : Dec 27 07:01:43 2025 GMT Subject: CN=bf30d2d17d0bc82923b103cbf0c4bbed9bae8660 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:c6:75:0b:08:7c:ff:51:d6:44:f5:c3:85:f4: 38:13:20:db:4f:0b:e2:2e:c2:a9:7c:26:61:e0:54: e3:af:17:6d:a0:02:eb:1a:60:c7:b0:df:2b:48:de: 9c:84:b6:72:67:f3:3f:e5:30:4e:57:01:e4:9c:1e: 56:1f:46:1e:27:b1:01:5d:4d:76:78:bb:95:67:6d: 3e:0b:0f:ff:fb:74:1f:d9:9a:4a:ce:88:8c:da:0d: 6f:f9:a5:d2:8f:f8:42:85:2a:3e:0c:8b:16:b5:80: d9:9f:49:1a:57:e6:fd:4c:3f:02:94:43:29:42:be: 67:d4:4f:b7:60:b2:50:64:d9:bb:06:65:e6:f5:65: 27:91:01:0a:9e:e1:98:2c:42:01:9e:5e:64:d4:3c: 2a:65:6f:ca:7e:12:36:b4:69:f2:59:60:52:99:82: b4:c0:e5:98:d6:10:e6:d1:97:e2:fa:fb:cc:0b:02: 4f:79:96:fb:87:91:63:a4:04:0e:13:c1:54:05:83: 99:f4:05:79:fd:2b:26:90:f1:76:61:7d:8b:3a:8b: 55:ee:36:94:92:28:53:1e:90:4f:da:ec:18:6e:88: 86:71:6e:27:a0:0e:d7:d1:33:ef:f1:37:b9:97:7a: 89:f6:28:04:98:f9:8d:d6:39:d0:91:8a:ed:cb:c5: 0c:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:30:D2:D1:7D:0B:C8:29:23:B1:03:CB:F0:C4:BB:ED:9B:AE:86:60 X509v3 Authority Key Identifier: keyid:32:D3:95:C5:7D:FD:30:C0:CD:2C:30:F4:23:38:AE:4C:14:A7:50:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MtOVxX39MMDNLDD0IziuTBSnUKE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/35b49b-03a3-4101-a3fe-1d8e19df4a62/1/MtOVxX39MMDNLDD0IziuTBSnUKE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/14/35b49b-03a3-4101-a3fe-1d8e19df4a62/1/MtOVxX39MMDNLDD0IziuTBSnUKE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:19:c7:a2:d0:97:7e:16:21:df:99:d8:b6:50:96:dd:4e:00: 89:54:d7:4b:c4:be:dc:e8:ff:09:b0:66:ec:0c:e9:ef:1a:4a: 74:77:76:52:5f:fb:5c:99:93:75:07:60:f6:cc:58:9b:66:59: 82:bc:9c:e8:28:1c:d2:04:2e:e9:5f:9c:27:94:02:fc:9e:e6: 82:3a:de:99:c4:c2:91:4e:88:1b:ca:ea:27:33:04:98:b4:a6: 3b:78:80:d3:ab:0a:5f:9e:0d:a1:d5:10:69:a5:91:e1:80:39: 3b:6d:52:17:95:04:0a:98:94:58:c2:f2:25:05:f7:12:f3:19: 44:ba:7a:f6:87:0c:12:82:bb:61:20:04:18:fe:76:28:6e:3f: 99:1b:9a:a7:76:ff:7d:94:65:ad:58:80:10:60:c5:fb:b4:7e: cc:87:e6:fc:d4:a2:43:80:19:69:26:7d:2d:c4:f3:f5:6f:cc: 49:48:ed:b9:38:d8:c9:62:e8:33:a4:c9:ea:c5:08:87:de:74: 9b:b6:b0:31:75:41:e7:05:51:7b:51:68:9b:8b:8f:d1:1c:83: b7:46:10:90:00:4f:22:dc:a4:dc:73:04:32:6c:d6:62:e6:b5: 2e:1b:5e:11:6f:d7:47:a7:f6:e5:3d:fb:f5:7e:e6:94:7c:44: ae:35:e7:9d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZdphtzgEtrxWKem9CQdnwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyZDM5NWM1N2RmZDMwYzBjZDJjMzBmNDIzMzhhZTRjMTRh NzUwYTEwHhcNMjUxMjI2MDcwMTQzWhcNMjUxMjI3MDcwMTQzWjAzMTEwLwYDVQQD EyhiZjMwZDJkMTdkMGJjODI5MjNiMTAzY2JmMGM0YmJlZDliYWU4NjYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA08Z1Cwh8/1HWRPXDhfQ4EyDbTwvi LsKpfCZh4FTjrxdtoALrGmDHsN8rSN6chLZyZ/M/5TBOVwHknB5WH0YeJ7EBXU12 eLuVZ20+Cw//+3Qf2ZpKzoiM2g1v+aXSj/hChSo+DIsWtYDZn0kaV+b9TD8ClEMp Qr5n1E+3YLJQZNm7BmXm9WUnkQEKnuGYLEIBnl5k1DwqZW/KfhI2tGnyWWBSmYK0 wOWY1hDm0Zfi+vvMCwJPeZb7h5FjpAQOE8FUBYOZ9AV5/SsmkPF2YX2LOotV7jaU kihTHpBP2uwYboiGcW4noA7X0TPv8Te5l3qJ9igEmPmN1jnQkYrty8UMiwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL8w0tF9C8gpI7EDy/DEu+2broZgMB8GA1UdIwQY MBaAFDLTlcV9/TDAzSww9CM4rkwUp1ChMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTXRPVnhYMzlNTUROTEREMEl6aXVUQlNuVUtFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC8zNWI0OWItMDNhMy00MTAxLWEzZmUt MWQ4ZTE5ZGY0YTYyLzEvTXRPVnhYMzlNTUROTEREMEl6aXVUQlNuVUtFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNC8zNWI0OWItMDNhMy00MTAxLWEzZmUtMWQ4ZTE5ZGY0YTYy LzEvTXRPVnhYMzlNTUROTEREMEl6aXVUQlNuVUtFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGhnHotCX fhYh35nYtlCW3U4AiVTXS8S+3Oj/CbBm7Azp7xpKdHd2Ul/7XJmTdQdg9sxYm2ZZ gryc6Cgc0gQu6V+cJ5QC/J7mgjremcTCkU6IG8rqJzMEmLSmO3iA06sKX54NodUQ aaWR4YA5O21SF5UECpiUWMLyJQX3EvMZRLp69ocMEoK7YSAEGP52KG4/mRuap3b/ fZRlrViAEGDF+7R+zIfm/NSiQ4AZaSZ9LcTz9W/MSUjtuTjYyWLoM6TJ6sUIh950 m7awMXVB5wVRe1Fom4uP0RyDt0YQkABPItyk3HMEMmzWYua1LhteEW/XR6f25T37 9X7mlHxErjXnnQ== -----END CERTIFICATE-----Generated at Fri Dec 26 15:47:08 2025 by rpki-client