This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/149cf6-611d-4e03-a660-dce1127ab223/1/cMvrOI9ZAsFhYLvtCWLLYisruDI.mft File: cMvrOI9ZAsFhYLvtCWLLYisruDI.mft (raw, json) Hash identifier: veWJEPj4kXd9j6FH3xUgHafLNY0dHvuYRa56cFDWPDY= Subject key identifier: C6:19:B2:A7:10:C7:E5:2F:F4:1B:14:4B:14:80:18:ED:47:5F:B8:DF Authority key identifier: 70:CB:EB:38:8F:59:02:C1:61:60:BB:ED:09:62:CB:62:2B:2B:B8:32 Certificate issuer: /CN=70cbeb388f5902c16160bbed0962cb622b2bb832 Certificate serial: 019AF5E6089212301DE348545769A0F65C4C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cMvrOI9ZAsFhYLvtCWLLYisruDI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/149cf6-611d-4e03-a660-dce1127ab223/1/cMvrOI9ZAsFhYLvtCWLLYisruDI.mft Manifest number: 0D78 Signing time: Sat 06 Dec 2025 23:01:24 +0000 Manifest this update: Sat 06 Dec 2025 23:01:24 +0000 Manifest next update: Sun 07 Dec 2025 23:01:24 +0000 Files and hashes: 1: Jx2nTRr5pEsEFWo_5nDYJEdIJkI.roa (hash: 5SCIBFwRcqmCVA4jK7ObW5hmOVN8QwAIditbrQHD6YU=) 2: cMvrOI9ZAsFhYLvtCWLLYisruDI.crl (hash: q42l1Xem3O5jfVv3LOIBBCEgO0LQgclYMzO6yIGru4M=) 3: fVZny3FRspGg7D4Ss3AUbX0JyBI.roa (hash: SocyXocZHSo8f5zsAWiffJrBZyiPOdy55HQXZcolvh4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/149cf6-611d-4e03-a660-dce1127ab223/1/cMvrOI9ZAsFhYLvtCWLLYisruDI.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/149cf6-611d-4e03-a660-dce1127ab223/1/cMvrOI9ZAsFhYLvtCWLLYisruDI.mft rsync://rpki.ripe.net/repository/DEFAULT/cMvrOI9ZAsFhYLvtCWLLYisruDI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:e6:08:92:12:30:1d:e3:48:54:57:69:a0:f6:5c:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70cbeb388f5902c16160bbed0962cb622b2bb832 Validity Not Before: Dec 6 23:01:24 2025 GMT Not After : Dec 7 23:01:24 2025 GMT Subject: CN=c619b2a710c7e52ff41b144b148018ed475fb8df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:ae:13:80:64:0a:a1:b1:68:82:eb:4a:1b:41: b9:02:69:73:8e:b2:11:15:54:2e:5e:c2:e4:4a:66: ab:33:34:dd:db:94:80:6b:fe:9d:b5:31:56:ef:cf: 0d:77:bb:76:2b:b0:7a:0b:93:53:45:aa:5d:3d:bc: 81:fb:19:a9:e3:b2:fd:32:fc:04:d5:c1:be:d4:4a: ba:ef:15:80:85:88:29:90:af:f2:49:ab:54:9d:3d: c6:92:83:c7:d3:b8:a9:a3:82:45:a3:0f:07:0d:fb: aa:a2:49:e0:f1:c0:56:94:ed:b4:b1:c8:3e:f1:8f: ef:8e:91:1e:cd:3e:51:a6:50:4f:3c:f4:45:9f:f0: 2b:41:40:26:29:f6:f1:43:51:f5:17:cb:23:06:e8: d8:87:e3:0e:37:7f:66:25:5e:f2:dd:34:60:ab:e2: 5b:8c:70:85:c5:2f:ee:17:52:75:fd:7e:77:f0:0e: 8f:79:e7:6d:1c:35:34:a2:5f:f8:fc:c4:d2:57:ac: 61:17:61:a1:ec:0e:ae:f1:2f:0f:c5:78:7d:52:c5: ed:6c:25:d8:e4:16:15:e7:b4:ea:7f:6c:a8:6f:5b: 9b:f7:d7:50:15:60:07:0e:b5:9f:d0:38:56:bf:b2: 1d:b1:a6:92:21:f7:c5:5c:d5:2e:10:fe:48:f4:88: 17:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:19:B2:A7:10:C7:E5:2F:F4:1B:14:4B:14:80:18:ED:47:5F:B8:DF X509v3 Authority Key Identifier: keyid:70:CB:EB:38:8F:59:02:C1:61:60:BB:ED:09:62:CB:62:2B:2B:B8:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMvrOI9ZAsFhYLvtCWLLYisruDI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/149cf6-611d-4e03-a660-dce1127ab223/1/cMvrOI9ZAsFhYLvtCWLLYisruDI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/149cf6-611d-4e03-a660-dce1127ab223/1/cMvrOI9ZAsFhYLvtCWLLYisruDI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:bc:ec:29:c2:09:4f:f0:ba:21:72:e6:e7:f0:44:57:46:86: a6:a4:06:d0:db:7f:8a:16:01:b8:2d:0e:7b:cb:f6:89:9a:4d: 53:d1:17:66:b9:32:7f:65:93:cf:c8:fb:28:14:79:13:d5:c6: 8d:7f:a1:c2:3c:46:58:ef:1d:78:78:77:50:15:85:bd:e0:ca: a4:df:3f:ae:dd:f2:0d:1d:f2:2b:94:be:3f:3f:79:ae:7b:bf: fb:a3:05:17:7c:a0:64:ca:e6:51:9c:12:a6:b2:55:e2:d8:8f: ad:6c:86:93:d6:93:15:73:52:69:0a:16:57:11:5d:1e:06:0f: 00:3e:47:82:1c:0e:6f:28:5e:3f:19:82:51:f2:d3:82:b2:25: 97:32:9f:b0:75:a3:bb:27:72:e7:a7:d8:30:30:ac:01:8f:a7: 38:bc:55:a4:74:3c:05:4d:25:88:a1:6f:36:55:fd:5f:2c:ee: ec:f7:22:13:ed:6a:5c:df:99:1e:df:bd:6b:4a:3b:d5:47:16: 94:9a:20:f7:b6:5f:c8:85:82:22:a7:9b:fc:55:2a:9f:7e:5a: 06:28:d6:8f:97:7e:c6:fd:87:a6:15:b7:08:2d:d8:ec:bd:de: bd:48:1c:22:5d:e6:09:4b:3a:25:c1:12:43:b2:12:4f:ff:82: f5:70:40:75 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr15giSEjAd40hUV2mg9lxMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwY2JlYjM4OGY1OTAyYzE2MTYwYmJlZDA5NjJjYjYyMmIy YmI4MzIwHhcNMjUxMjA2MjMwMTI0WhcNMjUxMjA3MjMwMTI0WjAzMTEwLwYDVQQD EyhjNjE5YjJhNzEwYzdlNTJmZjQxYjE0NGIxNDgwMThlZDQ3NWZiOGRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1a4TgGQKobFogutKG0G5AmlzjrIR FVQuXsLkSmarMzTd25SAa/6dtTFW788Nd7t2K7B6C5NTRapdPbyB+xmp47L9MvwE 1cG+1Eq67xWAhYgpkK/ySatUnT3GkoPH07ipo4JFow8HDfuqokng8cBWlO20scg+ 8Y/vjpEezT5RplBPPPRFn/ArQUAmKfbxQ1H1F8sjBujYh+MON39mJV7y3TRgq+Jb jHCFxS/uF1J1/X538A6PeedtHDU0ol/4/MTSV6xhF2Gh7A6u8S8PxXh9UsXtbCXY 5BYV57Tqf2yob1ub99dQFWAHDrWf0DhWv7IdsaaSIffFXNUuEP5I9IgX3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMYZsqcQx+Uv9BsUSxSAGO1HX7jfMB8GA1UdIwQY MBaAFHDL6ziPWQLBYWC77Qliy2IrK7gyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY012ck9JOVpBc0ZoWUx2dENXTExZaXNydURJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS8xNDljZjYtNjExZC00ZTAzLWE2NjAt ZGNlMTEyN2FiMjIzLzEvY012ck9JOVpBc0ZoWUx2dENXTExZaXNydURJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS8xNDljZjYtNjExZC00ZTAzLWE2NjAtZGNlMTEyN2FiMjIz LzEvY012ck9JOVpBc0ZoWUx2dENXTExZaXNydURJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfLzsKcIJ T/C6IXLm5/BEV0aGpqQG0Nt/ihYBuC0Oe8v2iZpNU9EXZrkyf2WTz8j7KBR5E9XG jX+hwjxGWO8deHh3UBWFveDKpN8/rt3yDR3yK5S+Pz95rnu/+6MFF3ygZMrmUZwS prJV4tiPrWyGk9aTFXNSaQoWVxFdHgYPAD5HghwObyhePxmCUfLTgrIllzKfsHWj uydy56fYMDCsAY+nOLxVpHQ8BU0liKFvNlX9Xyzu7PciE+1qXN+ZHt+9a0o71UcW lJog97ZfyIWCIqeb/FUqn35aBijWj5d+xv2HphW3CC3Y7L3evUgcIl3mCUs6JcES Q7IST/+C9XBAdQ== -----END CERTIFICATE-----Generated at Sun Dec 7 03:07:04 2025 by rpki-client