This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/51d4b5-c27d-4b7c-9070-721175d65eb8/1/MVGMe1S0QScIP2JtPhUY9EVM4FU.mft File: MVGMe1S0QScIP2JtPhUY9EVM4FU.mft (raw, json) Hash identifier: kU3px113j5CijG7hWBNRIytFABicFY9LqSlINo0Nl1E= Subject key identifier: 33:CC:1E:D5:51:F5:86:7D:44:53:26:BB:07:06:ED:63:A3:98:F9:BD Authority key identifier: 31:51:8C:7B:54:B4:41:27:08:3F:62:6D:3E:15:18:F4:45:4C:E0:55 Certificate issuer: /CN=31518c7b54b44127083f626d3e1518f4454ce055 Certificate serial: 019B5ABFD818FD8BF701328333EB0A9B003B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MVGMe1S0QScIP2JtPhUY9EVM4FU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/51d4b5-c27d-4b7c-9070-721175d65eb8/1/MVGMe1S0QScIP2JtPhUY9EVM4FU.mft Manifest number: 0468 Signing time: Fri 26 Dec 2025 13:01:20 +0000 Manifest this update: Fri 26 Dec 2025 13:01:20 +0000 Manifest next update: Sat 27 Dec 2025 13:01:20 +0000 Files and hashes: 1: MVGMe1S0QScIP2JtPhUY9EVM4FU.crl (hash: zUuhyk41FBKRuIOWlg8bmeUwyG7NYvZX9yEHL9AuAwM=) 2: Z8_72VViKIEya-8jYQ4foPa8uyM.roa (hash: VfRJSQVqCqPZi9LVFFlh6oeMG2gSmAPtA9TzAjDBjm8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/51d4b5-c27d-4b7c-9070-721175d65eb8/1/MVGMe1S0QScIP2JtPhUY9EVM4FU.crl rsync://rpki.ripe.net/repository/DEFAULT/8c/51d4b5-c27d-4b7c-9070-721175d65eb8/1/MVGMe1S0QScIP2JtPhUY9EVM4FU.mft rsync://rpki.ripe.net/repository/DEFAULT/MVGMe1S0QScIP2JtPhUY9EVM4FU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:bf:d8:18:fd:8b:f7:01:32:83:33:eb:0a:9b:00:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31518c7b54b44127083f626d3e1518f4454ce055 Validity Not Before: Dec 26 13:01:20 2025 GMT Not After : Dec 27 13:01:20 2025 GMT Subject: CN=33cc1ed551f5867d445326bb0706ed63a398f9bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:e7:44:79:ec:b6:01:e3:8e:a6:fc:38:62:c9: 10:96:00:3a:ac:10:9e:f2:a5:76:a1:06:4c:53:4d: bc:fd:bf:ae:f6:2f:ae:cf:10:de:b9:ac:d2:04:2e: 7f:d1:8a:72:8d:45:3d:b8:79:1a:f3:f6:31:61:a6: 0e:06:19:84:38:6d:39:ad:df:61:91:89:76:f3:44: 34:fa:2a:95:5a:b0:72:8f:8f:ca:c9:a3:d4:9f:88: 0f:f1:6d:e6:b9:03:2f:28:55:4e:c4:f8:20:bf:cc: 7f:66:a6:9f:02:41:10:8b:b9:d8:9f:64:a6:81:e1: 66:67:a7:6b:0e:bb:24:46:75:7f:f9:94:0c:31:ba: b0:84:7d:c7:3d:8e:e4:83:23:ed:35:b6:a6:1c:45: 1f:20:8b:59:4f:84:1f:0a:55:03:75:2e:91:d4:8c: 83:bb:9e:25:76:26:03:72:61:54:ff:8c:7e:96:74: 5f:5c:ea:96:80:1a:c2:22:f2:85:e3:16:dd:25:27: 1d:5c:7d:9d:c9:68:0d:c9:40:b7:ee:81:4e:12:fe: c9:9a:56:50:94:a4:42:73:b8:ac:dd:df:95:d9:98: 3c:b4:de:fa:57:0b:9b:3f:b8:15:0b:f6:fb:98:6a: b3:bf:a9:85:41:56:e0:39:fa:68:e3:45:d6:49:3a: 0d:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:CC:1E:D5:51:F5:86:7D:44:53:26:BB:07:06:ED:63:A3:98:F9:BD X509v3 Authority Key Identifier: keyid:31:51:8C:7B:54:B4:41:27:08:3F:62:6D:3E:15:18:F4:45:4C:E0:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MVGMe1S0QScIP2JtPhUY9EVM4FU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/51d4b5-c27d-4b7c-9070-721175d65eb8/1/MVGMe1S0QScIP2JtPhUY9EVM4FU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/51d4b5-c27d-4b7c-9070-721175d65eb8/1/MVGMe1S0QScIP2JtPhUY9EVM4FU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:2b:22:b0:a9:6f:bd:8e:63:c0:6b:f8:43:67:5c:cf:70:3e: 6f:5d:b7:8e:79:12:22:02:f0:09:ce:10:0c:ee:74:f0:e3:f9: bc:28:3f:87:cf:13:8a:77:86:30:92:f2:2c:55:f6:5c:6f:7a: 19:b8:f3:4e:2c:77:b6:14:3f:92:d4:66:4a:40:c4:6c:83:49: 67:fa:30:5d:c6:cf:a6:e4:d0:6c:c5:f5:9d:15:9d:a2:9f:79: ef:5d:6c:36:c7:c2:0d:b5:58:37:15:25:92:60:17:fd:a0:57: e6:68:6f:73:50:8a:f5:3c:1d:26:d9:7b:c9:57:cf:2e:99:2f: 5f:aa:50:54:70:c1:03:b8:2d:05:78:98:69:be:d2:ee:9e:8c: 02:00:1e:00:28:a4:26:a3:fb:f9:55:cc:0e:b0:fc:fe:69:98: 6e:3e:d6:e3:a5:f8:3b:75:7d:a9:e0:50:a7:2c:aa:c8:5e:a7: 48:1c:ec:ad:39:5d:81:26:8a:6f:42:63:44:48:13:24:78:98: 7d:d0:43:4e:96:90:77:47:c6:91:45:56:f2:26:d8:95:26:b3: 29:89:ff:04:d9:70:06:15:7e:00:01:e9:42:5f:fa:74:6a:2c: 30:cd:b6:8f:0b:b2:3b:1f:f5:72:ce:d5:39:cd:c7:15:65:07: 02:91:f6:2b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtav9gY/Yv3ATKDM+sKmwA7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxNTE4YzdiNTRiNDQxMjcwODNmNjI2ZDNlMTUxOGY0NDU0 Y2UwNTUwHhcNMjUxMjI2MTMwMTIwWhcNMjUxMjI3MTMwMTIwWjAzMTEwLwYDVQQD EygzM2NjMWVkNTUxZjU4NjdkNDQ1MzI2YmIwNzA2ZWQ2M2EzOThmOWJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiedEeey2AeOOpvw4YskQlgA6rBCe 8qV2oQZMU028/b+u9i+uzxDeuazSBC5/0YpyjUU9uHka8/YxYaYOBhmEOG05rd9h kYl280Q0+iqVWrByj4/KyaPUn4gP8W3muQMvKFVOxPggv8x/ZqafAkEQi7nYn2Sm geFmZ6drDrskRnV/+ZQMMbqwhH3HPY7kgyPtNbamHEUfIItZT4QfClUDdS6R1IyD u54ldiYDcmFU/4x+lnRfXOqWgBrCIvKF4xbdJScdXH2dyWgNyUC37oFOEv7JmlZQ lKRCc7is3d+V2Zg8tN76VwubP7gVC/b7mGqzv6mFQVbgOfpo40XWSToNqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDPMHtVR9YZ9RFMmuwcG7WOjmPm9MB8GA1UdIwQY MBaAFDFRjHtUtEEnCD9ibT4VGPRFTOBVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTVZHTWUxUzBRU2NJUDJKdFBoVVk5RVZNNEZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy81MWQ0YjUtYzI3ZC00YjdjLTkwNzAt NzIxMTc1ZDY1ZWI4LzEvTVZHTWUxUzBRU2NJUDJKdFBoVVk5RVZNNEZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yy81MWQ0YjUtYzI3ZC00YjdjLTkwNzAtNzIxMTc1ZDY1ZWI4 LzEvTVZHTWUxUzBRU2NJUDJKdFBoVVk5RVZNNEZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWisisKlv vY5jwGv4Q2dcz3A+b123jnkSIgLwCc4QDO508OP5vCg/h88TineGMJLyLFX2XG96 GbjzTix3thQ/ktRmSkDEbINJZ/owXcbPpuTQbMX1nRWdop95711sNsfCDbVYNxUl kmAX/aBX5mhvc1CK9TwdJtl7yVfPLpkvX6pQVHDBA7gtBXiYab7S7p6MAgAeACik JqP7+VXMDrD8/mmYbj7W46X4O3V9qeBQpyyqyF6nSBzsrTldgSaKb0JjREgTJHiY fdBDTpaQd0fGkUVW8ibYlSazKYn/BNlwBhV+AAHpQl/6dGosMM22jwuyOx/1cs7V Oc3HFWUHApH2Kw== -----END CERTIFICATE-----Generated at Fri Dec 26 15:45:19 2025 by rpki-client