This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/21c61a-d6b1-4aca-9782-97348336f33a/1/MVlVxK8-sajTQAqGYl42XCYpjWo.mft File: MVlVxK8-sajTQAqGYl42XCYpjWo.mft (raw, json) Hash identifier: rW56WC2GI9phtY9AU8B7LStV4tGFw61zQkpjV1TpaQM= Subject key identifier: DD:26:35:D4:F2:2C:6D:25:CE:06:A5:75:C5:AF:B7:0D:1C:7F:CF:B4 Authority key identifier: 31:59:55:C4:AF:3E:B1:A8:D3:40:0A:86:62:5E:36:5C:26:29:8D:6A Certificate issuer: /CN=315955c4af3eb1a8d3400a86625e365c26298d6a Certificate serial: 019B59E3EB24E71F5A716AC37975F1BF87EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MVlVxK8-sajTQAqGYl42XCYpjWo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/21c61a-d6b1-4aca-9782-97348336f33a/1/MVlVxK8-sajTQAqGYl42XCYpjWo.mft Manifest number: 1541 Signing time: Fri 26 Dec 2025 09:01:07 +0000 Manifest this update: Fri 26 Dec 2025 09:01:07 +0000 Manifest next update: Sat 27 Dec 2025 09:01:07 +0000 Files and hashes: 1: AaZqekVqXMtY7zZxpFlHfm5QAjY.roa (hash: sZGw/ceX9GbcsyDNRtsXxQmamgue/4b7o8nJC51Ghrc=) 2: MVlVxK8-sajTQAqGYl42XCYpjWo.crl (hash: XOgcn5xnrRDY0uoKYBFpf1CtQKZEMFAPTBAKvFnGT9Q=) 3: riu-Erw6ggoEJPGxpmScPYndYfw.roa (hash: wJKk+CwVxUgR9cTPpHbTrZU08Cy9AWK1AiKyfyV+SFw=) 4: xFbU4UXG5RajcOwoLmpvCSpG_lI.roa (hash: EpP3aMWHOolyh4RCM05UrLn8Zcfi0zy+85a7iQrKm9M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/21c61a-d6b1-4aca-9782-97348336f33a/1/MVlVxK8-sajTQAqGYl42XCYpjWo.crl rsync://rpki.ripe.net/repository/DEFAULT/9c/21c61a-d6b1-4aca-9782-97348336f33a/1/MVlVxK8-sajTQAqGYl42XCYpjWo.mft rsync://rpki.ripe.net/repository/DEFAULT/MVlVxK8-sajTQAqGYl42XCYpjWo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 09:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:e3:eb:24:e7:1f:5a:71:6a:c3:79:75:f1:bf:87:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=315955c4af3eb1a8d3400a86625e365c26298d6a Validity Not Before: Dec 26 09:01:07 2025 GMT Not After : Dec 27 09:01:07 2025 GMT Subject: CN=dd2635d4f22c6d25ce06a575c5afb70d1c7fcfb4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:49:17:4e:4c:40:bc:2f:e4:a8:3d:92:aa:ed: e6:4e:0c:77:2d:1d:6d:d9:64:87:58:eb:ba:7d:0b: 94:d6:05:be:d9:0d:90:ba:81:a4:82:93:8b:29:e3: 70:ad:2b:74:9e:e1:c6:ae:67:b8:df:db:67:fb:69: 19:90:70:3b:41:d3:09:bb:80:a3:ca:e0:e7:5a:6c: 67:21:7b:61:f5:fb:6d:71:c6:e0:fb:7c:e5:5c:46: 27:0f:b7:69:d9:50:4b:b2:1e:43:3f:26:c1:fe:60: 9d:5d:12:c0:77:fc:58:4a:83:05:96:4e:21:18:88: 9a:31:9a:67:16:01:7d:bb:90:2d:81:94:0e:8d:1a: d2:98:09:b3:65:da:71:82:11:2e:42:62:17:c9:3e: 9d:32:f9:36:24:5d:cc:7a:f5:d0:e2:64:f0:1e:98: 2b:ea:dd:6f:26:1f:62:2b:03:3c:9b:04:f9:73:45: 49:ee:34:40:bf:65:a3:ff:52:b9:34:52:5c:93:16: 50:35:15:eb:86:a5:42:39:bd:f0:5b:38:fc:48:04: 76:90:9f:4f:95:7e:59:15:30:dc:d7:2b:9b:e8:04: 59:ec:79:e5:7b:4a:d4:83:38:df:65:5a:e7:fa:2c: 1b:d6:ed:2c:e7:82:55:7e:43:2f:5e:a9:8d:6b:43: c5:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:26:35:D4:F2:2C:6D:25:CE:06:A5:75:C5:AF:B7:0D:1C:7F:CF:B4 X509v3 Authority Key Identifier: keyid:31:59:55:C4:AF:3E:B1:A8:D3:40:0A:86:62:5E:36:5C:26:29:8D:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MVlVxK8-sajTQAqGYl42XCYpjWo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/21c61a-d6b1-4aca-9782-97348336f33a/1/MVlVxK8-sajTQAqGYl42XCYpjWo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/21c61a-d6b1-4aca-9782-97348336f33a/1/MVlVxK8-sajTQAqGYl42XCYpjWo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:bc:89:ac:05:8e:ec:6f:d5:d1:b1:38:eb:64:43:8e:7d:b9: 07:e4:46:96:3c:6d:09:e3:0c:be:f4:eb:e2:f6:8c:84:da:17: e5:8b:10:0e:df:8a:18:9d:ed:9a:7f:fa:b9:4f:7a:b0:7f:6c: 14:bd:8c:4d:e0:b7:9c:bc:1e:bd:53:2b:92:f6:1b:2d:fe:a4: 22:7d:38:b8:55:0b:a2:5d:c4:43:ac:d7:60:4f:dc:c8:4f:a4: 46:a4:7d:80:e7:7c:bd:89:9d:f4:e2:bc:82:64:db:6e:9c:81: e3:dd:5c:f9:55:40:bd:2d:40:68:85:86:c4:b0:85:e1:c2:58: f6:8a:f1:70:22:fc:78:62:5a:b7:64:2b:c1:2a:3f:5b:63:43: 30:da:04:a5:88:5a:0b:49:84:46:af:2a:dd:a3:0e:e0:e5:94: be:13:57:83:b4:1b:11:3b:e6:b9:b0:f5:65:32:10:d4:48:81: 70:3b:5e:c1:c4:82:02:d0:a9:15:9f:bd:5b:47:68:24:43:fd: da:6a:0e:52:09:11:04:38:f9:93:f0:bf:29:fb:11:38:7f:5c: 21:82:ce:b6:f6:f1:b7:55:73:a1:08:2a:97:a2:90:f9:28:3d: d3:5f:f8:9f:53:ca:2b:51:a0:d3:c7:f9:01:f9:98:4e:3e:4e: df:03:97:4d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZ4+sk5x9acWrDeXXxv4fsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxNTk1NWM0YWYzZWIxYThkMzQwMGE4NjYyNWUzNjVjMjYy OThkNmEwHhcNMjUxMjI2MDkwMTA3WhcNMjUxMjI3MDkwMTA3WjAzMTEwLwYDVQQD EyhkZDI2MzVkNGYyMmM2ZDI1Y2UwNmE1NzVjNWFmYjcwZDFjN2ZjZmI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr0kXTkxAvC/kqD2Squ3mTgx3LR1t 2WSHWOu6fQuU1gW+2Q2QuoGkgpOLKeNwrSt0nuHGrme439tn+2kZkHA7QdMJu4Cj yuDnWmxnIXth9fttccbg+3zlXEYnD7dp2VBLsh5DPybB/mCdXRLAd/xYSoMFlk4h GIiaMZpnFgF9u5AtgZQOjRrSmAmzZdpxghEuQmIXyT6dMvk2JF3MevXQ4mTwHpgr 6t1vJh9iKwM8mwT5c0VJ7jRAv2Wj/1K5NFJckxZQNRXrhqVCOb3wWzj8SAR2kJ9P lX5ZFTDc1yub6ARZ7Hnle0rUgzjfZVrn+iwb1u0s54JVfkMvXqmNa0PFoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN0mNdTyLG0lzgaldcWvtw0cf8+0MB8GA1UdIwQY MBaAFDFZVcSvPrGo00AKhmJeNlwmKY1qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTVZsVnhLOC1zYWpUUUFxR1lsNDJYQ1lwaldvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy8yMWM2MWEtZDZiMS00YWNhLTk3ODIt OTczNDgzMzZmMzNhLzEvTVZsVnhLOC1zYWpUUUFxR1lsNDJYQ1lwaldvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yy8yMWM2MWEtZDZiMS00YWNhLTk3ODItOTczNDgzMzZmMzNh LzEvTVZsVnhLOC1zYWpUUUFxR1lsNDJYQ1lwaldvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnLyJrAWO 7G/V0bE462RDjn25B+RGljxtCeMMvvTr4vaMhNoX5YsQDt+KGJ3tmn/6uU96sH9s FL2MTeC3nLwevVMrkvYbLf6kIn04uFULol3EQ6zXYE/cyE+kRqR9gOd8vYmd9OK8 gmTbbpyB491c+VVAvS1AaIWGxLCF4cJY9orxcCL8eGJat2QrwSo/W2NDMNoEpYha C0mERq8q3aMO4OWUvhNXg7QbETvmubD1ZTIQ1EiBcDtewcSCAtCpFZ+9W0doJEP9 2moOUgkRBDj5k/C/KfsROH9cIYLOtvbxt1VzoQgql6KQ+Sg901/4n1PKK1Gg08f5 AfmYTj5O3wOXTQ== -----END CERTIFICATE-----Generated at Fri Dec 26 16:03:57 2025 by rpki-client