This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/264b78-b25d-47a3-ac55-165c96ff9529/1/mRVVjGiX_qIkhVz2A4GFc1RwhBE.mft File: mRVVjGiX_qIkhVz2A4GFc1RwhBE.mft (raw, json) Hash identifier: RkZEgXHo9M/c6UJUpM0eEh8Z2g3amhXwuxAoK8ZMv8Y= Subject key identifier: 67:7D:76:A1:B9:DC:DB:8F:AA:05:85:1D:71:F9:E3:51:27:6E:30:7C Authority key identifier: 99:15:55:8C:68:97:FE:A2:24:85:5C:F6:03:81:85:73:54:70:84:11 Certificate issuer: /CN=9915558c6897fea224855cf60381857354708411 Certificate serial: 019B378EFE7EFC3CBB2C67CD3ABBB369FB22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mRVVjGiX_qIkhVz2A4GFc1RwhBE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/264b78-b25d-47a3-ac55-165c96ff9529/1/mRVVjGiX_qIkhVz2A4GFc1RwhBE.mft Manifest number: 0DF0 Signing time: Fri 19 Dec 2025 17:01:16 +0000 Manifest this update: Fri 19 Dec 2025 17:01:16 +0000 Manifest next update: Sat 20 Dec 2025 17:01:16 +0000 Files and hashes: 1: mRVVjGiX_qIkhVz2A4GFc1RwhBE.crl (hash: inX8xgSlFApVQhRUtDxD3ewEud34oR+JXlh5q6dw+8o=) 2: p_ZOqooaB4FZLqO_coSsHFoaxrI.roa (hash: kDng5P96ioc5fd3WKreLwEWmLw7z/u+Qt5PBtL9Aseg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/264b78-b25d-47a3-ac55-165c96ff9529/1/mRVVjGiX_qIkhVz2A4GFc1RwhBE.crl rsync://rpki.ripe.net/repository/DEFAULT/df/264b78-b25d-47a3-ac55-165c96ff9529/1/mRVVjGiX_qIkhVz2A4GFc1RwhBE.mft rsync://rpki.ripe.net/repository/DEFAULT/mRVVjGiX_qIkhVz2A4GFc1RwhBE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:8e:fe:7e:fc:3c:bb:2c:67:cd:3a:bb:b3:69:fb:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9915558c6897fea224855cf60381857354708411 Validity Not Before: Dec 19 17:01:16 2025 GMT Not After : Dec 20 17:01:16 2025 GMT Subject: CN=677d76a1b9dcdb8faa05851d71f9e351276e307c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:7c:bb:4a:9f:38:5c:f5:33:e3:61:65:b7:0b: 2a:d9:25:c6:a1:6c:bc:db:52:82:7b:e2:1d:e2:2f: fa:1c:1c:6a:b6:41:33:c7:4e:5b:a9:52:34:bb:ba: 8d:63:3a:0d:ed:e7:09:a1:66:03:0f:f3:04:ce:84: 84:e0:db:32:6b:dc:45:e9:00:e4:b5:ee:2c:89:1f: 33:c6:fe:80:05:e2:8e:3c:be:6e:ea:ef:16:ca:c5: 35:ec:09:f4:f6:cd:60:05:a6:98:c6:3a:01:73:78: 70:f6:b7:c2:00:9f:f5:96:39:ad:c3:52:2e:58:bd: 7c:6c:24:30:0b:59:eb:44:88:3d:d9:1f:4f:0f:5c: 4e:7e:7b:4a:6e:90:d7:61:00:c1:69:eb:c3:87:26: 8b:85:67:ba:b7:9c:6c:a4:46:8a:ea:f9:f8:8e:a7: 28:1a:50:a6:eb:ab:db:45:b0:b4:cc:12:55:1f:89: 32:17:92:c9:5d:f6:89:64:38:e6:a0:d1:c2:45:ae: 27:49:5b:37:87:09:20:7f:ba:0d:fe:80:ae:98:f6: 67:46:6b:c2:35:2f:0d:a7:f8:66:72:ef:47:f5:06: 3f:92:58:b0:b7:99:a6:55:b2:c2:fa:cf:01:16:b3: fd:94:5d:1b:e0:67:cd:7c:e4:30:ee:00:a4:ff:d8: 0e:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:7D:76:A1:B9:DC:DB:8F:AA:05:85:1D:71:F9:E3:51:27:6E:30:7C X509v3 Authority Key Identifier: keyid:99:15:55:8C:68:97:FE:A2:24:85:5C:F6:03:81:85:73:54:70:84:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mRVVjGiX_qIkhVz2A4GFc1RwhBE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/264b78-b25d-47a3-ac55-165c96ff9529/1/mRVVjGiX_qIkhVz2A4GFc1RwhBE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/264b78-b25d-47a3-ac55-165c96ff9529/1/mRVVjGiX_qIkhVz2A4GFc1RwhBE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:08:31:a7:8c:39:dd:fe:02:62:18:8e:7b:99:a4:d2:9d:b1: fc:e3:b3:55:6a:93:6b:3f:32:64:3b:8c:e2:bd:32:e8:d7:21: 29:5e:d0:a1:69:26:08:e3:22:83:98:4c:a5:0d:37:9d:ee:4e: fe:d7:91:bc:b8:9d:3e:7e:85:3c:39:23:27:50:42:27:b1:15: 82:a3:38:9d:de:92:ee:38:81:0d:d0:f4:6b:9c:de:01:7c:c0: 84:8f:f5:87:b2:31:28:13:18:50:5f:24:cd:85:a5:dc:84:92: 34:4b:ce:a1:01:00:5e:4e:4f:74:01:06:9c:2b:b9:e6:af:68: 0e:c8:81:d6:a7:7d:00:69:31:e7:7a:2c:84:83:7f:50:b9:13: 06:67:93:a7:13:59:5f:4b:dd:e3:68:04:37:5a:c4:d5:ca:16: f6:57:88:94:c5:18:35:a2:8a:38:b0:d5:3d:4b:cb:08:de:7c: 0d:08:97:37:d1:86:6d:76:ff:39:00:af:6c:2f:d9:74:ba:13: b3:5b:1a:27:e2:2a:be:47:2a:01:61:8f:9a:76:8f:02:57:47: d7:0a:ca:8a:f1:7a:e3:85:7e:37:3b:8e:f7:e9:64:9c:41:8e: c7:ba:82:4f:8e:03:c2:98:19:dd:88:8e:90:a3:41:1d:2a:6c: e2:4d:72:11 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3jv5+/Dy7LGfNOruzafsiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk5MTU1NThjNjg5N2ZlYTIyNDg1NWNmNjAzODE4NTczNTQ3 MDg0MTEwHhcNMjUxMjE5MTcwMTE2WhcNMjUxMjIwMTcwMTE2WjAzMTEwLwYDVQQD Eyg2NzdkNzZhMWI5ZGNkYjhmYWEwNTg1MWQ3MWY5ZTM1MTI3NmUzMDdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxny7Sp84XPUz42Fltwsq2SXGoWy8 21KCe+Id4i/6HBxqtkEzx05bqVI0u7qNYzoN7ecJoWYDD/MEzoSE4Nsya9xF6QDk te4siR8zxv6ABeKOPL5u6u8WysU17An09s1gBaaYxjoBc3hw9rfCAJ/1ljmtw1Iu WL18bCQwC1nrRIg92R9PD1xOfntKbpDXYQDBaevDhyaLhWe6t5xspEaK6vn4jqco GlCm66vbRbC0zBJVH4kyF5LJXfaJZDjmoNHCRa4nSVs3hwkgf7oN/oCumPZnRmvC NS8Np/hmcu9H9QY/kliwt5mmVbLC+s8BFrP9lF0b4GfNfOQw7gCk/9gO/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGd9dqG53NuPqgWFHXH541EnbjB8MB8GA1UdIwQY MBaAFJkVVYxol/6iJIVc9gOBhXNUcIQRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbVJWVmpHaVhfcUlraFZ6MkE0R0ZjMVJ3aEJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi8yNjRiNzgtYjI1ZC00N2EzLWFjNTUt MTY1Yzk2ZmY5NTI5LzEvbVJWVmpHaVhfcUlraFZ6MkE0R0ZjMVJ3aEJFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi8yNjRiNzgtYjI1ZC00N2EzLWFjNTUtMTY1Yzk2ZmY5NTI5 LzEvbVJWVmpHaVhfcUlraFZ6MkE0R0ZjMVJ3aEJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcAgxp4w5 3f4CYhiOe5mk0p2x/OOzVWqTaz8yZDuM4r0y6NchKV7QoWkmCOMig5hMpQ03ne5O /teRvLidPn6FPDkjJ1BCJ7EVgqM4nd6S7jiBDdD0a5zeAXzAhI/1h7IxKBMYUF8k zYWl3ISSNEvOoQEAXk5PdAEGnCu55q9oDsiB1qd9AGkx53oshIN/ULkTBmeTpxNZ X0vd42gEN1rE1coW9leIlMUYNaKKOLDVPUvLCN58DQiXN9GGbXb/OQCvbC/ZdLoT s1saJ+IqvkcqAWGPmnaPAldH1wrKivF644V+NzuO9+lknEGOx7qCT44DwpgZ3YiO kKNBHSps4k1yEQ== -----END CERTIFICATE-----Generated at Sat Dec 20 00:14:10 2025 by rpki-client