This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/01d9fe-e14a-40a4-8458-26701b162fc3/1/mvnQ1L79oJ6ZnqvQyHJOIXNk3hA.mft File: mvnQ1L79oJ6ZnqvQyHJOIXNk3hA.mft (raw, json) Hash identifier: ikUEHbBOtS7LTQkT3RNwgiit8KnSq1RvjHnT+ZLepGI= Subject key identifier: 6D:B7:78:64:38:EA:D8:F2:46:08:D9:D9:69:D8:6D:1D:AD:88:F1:AD Authority key identifier: 9A:F9:D0:D4:BE:FD:A0:9E:99:9E:AB:D0:C8:72:4E:21:73:64:DE:10 Certificate issuer: /CN=9af9d0d4befda09e999eabd0c8724e217364de10 Certificate serial: 019AABDDD51EDDAFE6B52ADE90ED886C8E00 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mvnQ1L79oJ6ZnqvQyHJOIXNk3hA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/01d9fe-e14a-40a4-8458-26701b162fc3/1/mvnQ1L79oJ6ZnqvQyHJOIXNk3hA.mft Manifest number: 089B Signing time: Sat 22 Nov 2025 14:00:33 +0000 Manifest this update: Sat 22 Nov 2025 14:00:33 +0000 Manifest next update: Sun 23 Nov 2025 14:00:33 +0000 Files and hashes: 1: 6-NzyccAUUtINjY98ZwTPTgTOqw.roa (hash: VRIswTWRK8wp1kBAJ6oGriHopkql4l7787Pjx0zb2Uk=) 2: Olq79L64wCg-hHRooByi3vPZULM.roa (hash: 7iTlVlX50RF0+9QmCG7iYPxhRnhcj6E2kkA6pnlrhOE=) 3: d-6oHxGBu3uoNsynUGQ-jykLpuY.roa (hash: nTvRGLOiSbzDI5kbpr4PxXlAAgieGj6+zvY9qnISFeU=) 4: dsHWjTHeRRGMMM_nmnG47d-gUzA.roa (hash: AOOkudODUzLnnW8+48GjiYqjo1L5I5U+lNPwyVAkVIA=) 5: m7d5O-mEzrcubvS3JW6tnbVNKd4.roa (hash: Qq9s73nF/u8j1iRoR74NKiqmiIz0zgUdTQSpGdm7mb4=) 6: mvnQ1L79oJ6ZnqvQyHJOIXNk3hA.crl (hash: YlW8ujjwuoW3Ef09XglXiH2vQ3F8K4ArM1vONjB0dG8=) 7: pEGoyKkyL_yswV2yTe6-Nn5a4EE.roa (hash: BRmqr+fKFFdKHRHLRNEIxp96b16KAoY3BPtxfqv5huI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/01d9fe-e14a-40a4-8458-26701b162fc3/1/mvnQ1L79oJ6ZnqvQyHJOIXNk3hA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/01d9fe-e14a-40a4-8458-26701b162fc3/1/mvnQ1L79oJ6ZnqvQyHJOIXNk3hA.mft rsync://rpki.ripe.net/repository/DEFAULT/mvnQ1L79oJ6ZnqvQyHJOIXNk3hA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 23 Nov 2025 12:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ab:dd:d5:1e:dd:af:e6:b5:2a:de:90:ed:88:6c:8e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9af9d0d4befda09e999eabd0c8724e217364de10 Validity Not Before: Nov 22 14:00:33 2025 GMT Not After : Nov 23 14:00:33 2025 GMT Subject: CN=6db7786438ead8f24608d9d969d86d1dad88f1ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:60:ee:0f:ee:3d:91:a0:b4:c4:a3:32:35:11: 51:5c:d2:2f:2f:be:32:e7:03:ad:d7:d6:69:c6:c5: 67:01:58:0f:ef:48:b3:1a:d7:b5:33:ed:a3:d5:43: 64:16:78:70:93:5a:4a:ff:b8:cc:07:86:19:9d:87: 1a:b4:7a:ce:56:18:01:e6:8c:f2:37:8a:49:c3:c0: d1:75:43:96:f8:27:01:23:d3:a1:4a:a0:d5:d5:dc: 90:48:e6:37:ed:f5:10:c0:9c:88:ed:5e:0d:75:70: 0c:5c:9b:c9:be:8a:5c:32:58:78:58:9e:f3:1d:97: e9:95:5f:60:f6:4d:dd:ac:54:67:b2:bc:48:87:ee: 57:f2:38:ed:4e:eb:96:9b:2c:d0:ac:59:23:00:84: 26:78:58:dd:b7:d6:f3:0c:54:ca:82:ae:25:38:22: 5e:fd:5f:fa:d0:29:9f:23:98:b5:50:10:05:7a:d5: b6:b0:13:d7:9a:17:0b:c1:3e:9e:98:16:1b:c1:84: 56:6c:d3:c3:a8:df:ba:c3:7f:c5:f4:f2:e2:f2:8d: ce:da:68:24:8b:10:59:e9:db:45:23:d6:ad:d4:6b: 6b:26:49:89:6c:0b:ab:21:ba:5a:25:26:d1:6f:0b: d6:4c:64:c0:ad:3b:96:6f:fa:ae:d0:db:e0:c9:87: 85:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:B7:78:64:38:EA:D8:F2:46:08:D9:D9:69:D8:6D:1D:AD:88:F1:AD X509v3 Authority Key Identifier: keyid:9A:F9:D0:D4:BE:FD:A0:9E:99:9E:AB:D0:C8:72:4E:21:73:64:DE:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mvnQ1L79oJ6ZnqvQyHJOIXNk3hA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/01d9fe-e14a-40a4-8458-26701b162fc3/1/mvnQ1L79oJ6ZnqvQyHJOIXNk3hA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/01d9fe-e14a-40a4-8458-26701b162fc3/1/mvnQ1L79oJ6ZnqvQyHJOIXNk3hA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:0d:eb:f5:64:71:3f:4d:cf:b7:c7:1e:e6:88:a2:2c:1f:c7: f2:44:05:4f:98:c9:3b:a2:42:7c:08:81:f4:f3:ac:7e:c6:2e: a3:c2:e6:1d:0d:24:3e:43:93:ed:3a:87:f9:9f:37:5a:b3:c2: d3:8c:c1:d1:bf:af:07:de:f7:6f:4e:64:e0:d3:13:9c:00:31: 30:45:68:36:da:8d:d4:00:31:5c:a4:ab:b7:b0:21:ce:d6:bb: e5:b9:3e:f0:8e:86:e9:6a:7d:9f:da:6d:54:db:25:b2:d4:f6: 40:7a:ba:6b:80:5f:d4:03:41:ce:30:3e:b3:fc:1b:34:ab:23: 5c:0c:73:76:37:e2:60:af:dd:bb:73:00:43:e7:c7:c6:f9:b9: cf:09:b3:cd:c8:c3:2b:b6:8d:2e:1c:cc:51:eb:e2:a8:e1:00: f4:8b:ab:6d:84:fb:ad:82:11:8b:be:7b:2c:8f:ee:02:8a:87: 22:63:64:84:17:8b:f0:38:80:56:31:33:1c:c4:de:c9:1b:7b: bb:17:45:3b:05:60:20:1b:c1:b5:97:60:94:32:37:7f:79:0f: 9f:0a:9b:01:74:33:e0:ea:b2:49:81:af:69:96:c1:37:87:4d: 6c:64:0d:5b:33:ac:33:ca:11:61:db:82:7c:f0:e4:3b:ea:7c: c5:2a:34:b7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZqr3dUe3a/mtSrekO2IbI4AMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhZjlkMGQ0YmVmZGEwOWU5OTllYWJkMGM4NzI0ZTIxNzM2 NGRlMTAwHhcNMjUxMTIyMTQwMDMzWhcNMjUxMTIzMTQwMDMzWjAzMTEwLwYDVQQD Eyg2ZGI3Nzg2NDM4ZWFkOGYyNDYwOGQ5ZDk2OWQ4NmQxZGFkODhmMWFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2DuD+49kaC0xKMyNRFRXNIvL74y 5wOt19ZpxsVnAVgP70izGte1M+2j1UNkFnhwk1pK/7jMB4YZnYcatHrOVhgB5ozy N4pJw8DRdUOW+CcBI9OhSqDV1dyQSOY37fUQwJyI7V4NdXAMXJvJvopcMlh4WJ7z HZfplV9g9k3drFRnsrxIh+5X8jjtTuuWmyzQrFkjAIQmeFjdt9bzDFTKgq4lOCJe /V/60CmfI5i1UBAFetW2sBPXmhcLwT6emBYbwYRWbNPDqN+6w3/F9PLi8o3O2mgk ixBZ6dtFI9at1GtrJkmJbAurIbpaJSbRbwvWTGTArTuWb/qu0NvgyYeF1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG23eGQ46tjyRgjZ2WnYbR2tiPGtMB8GA1UdIwQY MBaAFJr50NS+/aCemZ6r0MhyTiFzZN4QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbXZuUTFMNzlvSjZabnF2UXlISk9JWE5rM2hBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8wMWQ5ZmUtZTE0YS00MGE0LTg0NTgt MjY3MDFiMTYyZmMzLzEvbXZuUTFMNzlvSjZabnF2UXlISk9JWE5rM2hBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS8wMWQ5ZmUtZTE0YS00MGE0LTg0NTgtMjY3MDFiMTYyZmMz LzEvbXZuUTFMNzlvSjZabnF2UXlISk9JWE5rM2hBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASw3r9WRx P03Pt8ce5oiiLB/H8kQFT5jJO6JCfAiB9POsfsYuo8LmHQ0kPkOT7TqH+Z83WrPC 04zB0b+vB973b05k4NMTnAAxMEVoNtqN1AAxXKSrt7Ahzta75bk+8I6G6Wp9n9pt VNslstT2QHq6a4Bf1ANBzjA+s/wbNKsjXAxzdjfiYK/du3MAQ+fHxvm5zwmzzcjD K7aNLhzMUeviqOEA9IurbYT7rYIRi757LI/uAoqHImNkhBeL8DiAVjEzHMTeyRt7 uxdFOwVgIBvBtZdglDI3f3kPnwqbAXQz4OqySYGvaZbBN4dNbGQNWzOsM8oRYduC fPDkO+p8xSo0tw== -----END CERTIFICATE-----Generated at Sat Nov 22 21:44:27 2025 by rpki-client