This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/69b08d-7c97-432f-b4bf-51e821d23141/1/MRRFNToII-2u8So6M1b6gJjhXqw.mft File: MRRFNToII-2u8So6M1b6gJjhXqw.mft (raw, json) Hash identifier: f1+pyJoqQZy/I1iwJg0dypup5OS/H40ZR2mHHGMJhD4= Subject key identifier: DB:A3:34:3C:1E:99:9F:51:15:F0:D7:80:B4:FA:48:29:28:B2:3A:0B Authority key identifier: 31:14:45:35:3A:08:23:ED:AE:F1:2A:3A:33:56:FA:80:98:E1:5E:AC Certificate issuer: /CN=311445353a0823edaef12a3a3356fa8098e15eac Certificate serial: 019B5A519E745B3EEFA8D0744366A034F09E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MRRFNToII-2u8So6M1b6gJjhXqw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/69b08d-7c97-432f-b4bf-51e821d23141/1/MRRFNToII-2u8So6M1b6gJjhXqw.mft Manifest number: 0E11 Signing time: Fri 26 Dec 2025 11:00:56 +0000 Manifest this update: Fri 26 Dec 2025 11:00:56 +0000 Manifest next update: Sat 27 Dec 2025 11:00:56 +0000 Files and hashes: 1: MRRFNToII-2u8So6M1b6gJjhXqw.crl (hash: bq5as1XTnO9JdX/8mh1zASJalb1hWCNejK3/Eqx5p1g=) 2: Mv9wQiaEyUk3-XuVJoSinHpzB2g.roa (hash: ZIu/bU0ql4U4qIOYcI80NNWYWWCG67vptIw8Gwe6w3Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/69b08d-7c97-432f-b4bf-51e821d23141/1/MRRFNToII-2u8So6M1b6gJjhXqw.crl rsync://rpki.ripe.net/repository/DEFAULT/66/69b08d-7c97-432f-b4bf-51e821d23141/1/MRRFNToII-2u8So6M1b6gJjhXqw.mft rsync://rpki.ripe.net/repository/DEFAULT/MRRFNToII-2u8So6M1b6gJjhXqw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:51:9e:74:5b:3e:ef:a8:d0:74:43:66:a0:34:f0:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=311445353a0823edaef12a3a3356fa8098e15eac Validity Not Before: Dec 26 11:00:56 2025 GMT Not After : Dec 27 11:00:56 2025 GMT Subject: CN=dba3343c1e999f5115f0d780b4fa482928b23a0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:94:0e:ad:c6:37:31:bd:de:38:25:4e:8d:10: ca:7e:92:83:98:25:0d:25:0e:5f:cf:36:1f:82:7d: 84:09:f5:b3:96:c0:26:00:f6:b6:12:13:1d:fd:c1: 05:b4:e7:5f:95:a9:79:10:4f:29:37:56:02:9b:8c: ac:54:d3:6d:5d:37:95:3a:9c:83:dc:18:3b:fa:20: 89:b8:20:75:7d:25:79:66:e2:f1:d5:29:65:c3:29: 32:11:25:27:73:43:21:2d:b1:c2:22:55:a5:eb:ee: 0e:e7:07:e3:0a:5d:c5:57:b0:64:a3:0b:ea:52:e5: 7d:df:eb:7c:8b:40:d3:c4:1b:73:70:e6:b1:fe:d7: 41:6f:6c:8b:15:1b:b4:c9:b0:fe:1c:ad:ab:19:f2: 96:e4:5b:92:5e:f4:9d:8f:7d:bb:9a:bd:31:09:83: e1:ae:45:eb:ce:5d:8b:30:9c:46:d0:9b:56:8c:15: c0:2b:85:28:7c:1a:0f:23:08:8c:ad:71:8c:a5:ee: cf:26:1c:ac:8c:06:50:08:57:92:ee:71:a9:b6:ce: 12:d6:a9:72:dc:a3:92:54:28:a1:e5:c2:89:dd:ea: 56:3a:24:08:ea:26:88:19:ca:48:26:30:6e:86:74: 5f:a3:26:0b:e9:f7:fe:e8:f2:44:6d:3a:d7:cc:47: 05:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:A3:34:3C:1E:99:9F:51:15:F0:D7:80:B4:FA:48:29:28:B2:3A:0B X509v3 Authority Key Identifier: keyid:31:14:45:35:3A:08:23:ED:AE:F1:2A:3A:33:56:FA:80:98:E1:5E:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MRRFNToII-2u8So6M1b6gJjhXqw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/69b08d-7c97-432f-b4bf-51e821d23141/1/MRRFNToII-2u8So6M1b6gJjhXqw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/69b08d-7c97-432f-b4bf-51e821d23141/1/MRRFNToII-2u8So6M1b6gJjhXqw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:34:ba:86:64:1f:c3:d0:ee:d2:8d:e0:73:ee:b2:d1:10:30: 71:42:45:1c:b6:17:2b:30:94:b5:0b:50:34:2e:0e:67:38:94: d7:de:db:71:05:c8:d1:09:3f:9c:34:0d:89:18:21:9f:81:74: 7c:8b:8f:9e:e9:e4:e3:07:fe:65:d9:97:72:a9:e7:25:a3:b6: ac:14:9e:a5:56:35:a5:25:f6:16:7c:b6:1c:19:cb:48:47:a2: de:4c:fa:68:16:5a:22:83:06:ee:80:46:f3:65:ed:58:3b:9b: a7:2d:28:05:1a:b7:c4:7c:ff:35:46:c8:05:25:5f:c6:86:37: 25:af:37:da:a5:f7:19:f8:9b:24:04:0a:dc:bf:af:63:0c:9f: 7e:a8:36:4e:cf:86:79:02:0b:9e:e0:c5:30:59:1e:e4:f6:db: 0c:98:c6:92:8b:dd:70:bc:cc:fb:dd:d6:5e:50:1a:a7:bc:f3: 06:d2:53:dd:24:72:42:08:bc:3d:e7:a0:0f:08:eb:84:78:88: 98:8f:1e:b7:66:1b:d1:e1:26:d6:bd:9a:ab:26:27:55:0c:ef: b5:9c:0f:ea:98:98:a2:e4:c2:be:cc:49:99:a6:50:52:83:72: 0e:70:95:98:18:9d:fd:e7:5b:bf:14:88:1f:d2:ec:d6:18:cc: 63:b9:a1:f5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaUZ50Wz7vqNB0Q2agNPCeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxMTQ0NTM1M2EwODIzZWRhZWYxMmEzYTMzNTZmYTgwOThl MTVlYWMwHhcNMjUxMjI2MTEwMDU2WhcNMjUxMjI3MTEwMDU2WjAzMTEwLwYDVQQD EyhkYmEzMzQzYzFlOTk5ZjUxMTVmMGQ3ODBiNGZhNDgyOTI4YjIzYTBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAppQOrcY3Mb3eOCVOjRDKfpKDmCUN JQ5fzzYfgn2ECfWzlsAmAPa2EhMd/cEFtOdflal5EE8pN1YCm4ysVNNtXTeVOpyD 3Bg7+iCJuCB1fSV5ZuLx1SllwykyESUnc0MhLbHCIlWl6+4O5wfjCl3FV7Bkowvq UuV93+t8i0DTxBtzcOax/tdBb2yLFRu0ybD+HK2rGfKW5FuSXvSdj327mr0xCYPh rkXrzl2LMJxG0JtWjBXAK4UofBoPIwiMrXGMpe7PJhysjAZQCFeS7nGpts4S1qly 3KOSVCih5cKJ3epWOiQI6iaIGcpIJjBuhnRfoyYL6ff+6PJEbTrXzEcFVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNujNDwemZ9RFfDXgLT6SCkosjoLMB8GA1UdIwQY MBaAFDEURTU6CCPtrvEqOjNW+oCY4V6sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTVJSRk5Ub0lJLTJ1OFNvNk0xYjZnSmpoWHF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni82OWIwOGQtN2M5Ny00MzJmLWI0YmYt NTFlODIxZDIzMTQxLzEvTVJSRk5Ub0lJLTJ1OFNvNk0xYjZnSmpoWHF3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni82OWIwOGQtN2M5Ny00MzJmLWI0YmYtNTFlODIxZDIzMTQx LzEvTVJSRk5Ub0lJLTJ1OFNvNk0xYjZnSmpoWHF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoTS6hmQf w9Du0o3gc+6y0RAwcUJFHLYXKzCUtQtQNC4OZziU197bcQXI0Qk/nDQNiRghn4F0 fIuPnunk4wf+ZdmXcqnnJaO2rBSepVY1pSX2Fny2HBnLSEei3kz6aBZaIoMG7oBG 82XtWDubpy0oBRq3xHz/NUbIBSVfxoY3Ja832qX3GfibJAQK3L+vYwyffqg2Ts+G eQILnuDFMFke5PbbDJjGkovdcLzM+93WXlAap7zzBtJT3SRyQgi8PeegDwjrhHiI mI8et2Yb0eEm1r2aqyYnVQzvtZwP6piYouTCvsxJmaZQUoNyDnCVmBid/edbvxSI H9Ls1hjMY7mh9Q== -----END CERTIFICATE-----Generated at Fri Dec 26 16:03:28 2025 by rpki-client