This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/7e0b13-ec91-483d-b96a-659b4ccd7f4a/1/mvGIoEu0XU7nTETcdtcf_73AT2A.mft File: mvGIoEu0XU7nTETcdtcf_73AT2A.mft (raw, json) Hash identifier: R1Kuonv3cXVuK4ZP/GoiyXXlSsA4E+8kN6EELDncZkU= Subject key identifier: D6:74:69:08:3D:8B:06:78:8F:59:2F:30:F5:5E:EE:1C:82:44:6E:FC Authority key identifier: 9A:F1:88:A0:4B:B4:5D:4E:E7:4C:44:DC:76:D7:1F:FF:BD:C0:4F:60 Certificate issuer: /CN=9af188a04bb45d4ee74c44dc76d71fffbdc04f60 Certificate serial: 019AABA8162404F51A71D3783E5A75268089 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mvGIoEu0XU7nTETcdtcf_73AT2A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/7e0b13-ec91-483d-b96a-659b4ccd7f4a/1/mvGIoEu0XU7nTETcdtcf_73AT2A.mft Manifest number: 173B Signing time: Sat 22 Nov 2025 13:01:50 +0000 Manifest this update: Sat 22 Nov 2025 13:01:50 +0000 Manifest next update: Sun 23 Nov 2025 13:01:50 +0000 Files and hashes: 1: CfUrafygYGSePjcIej3rxMGbJDI.roa (hash: X6AZHbughYjpJFwaVsupdcP3UOvik8OA/b5qiG++R3Q=) 2: mvGIoEu0XU7nTETcdtcf_73AT2A.crl (hash: MNI9B9m19FNcVfrqIO9tZiWHNkTTq+M7sk+Ez92cGAc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/7e0b13-ec91-483d-b96a-659b4ccd7f4a/1/mvGIoEu0XU7nTETcdtcf_73AT2A.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/7e0b13-ec91-483d-b96a-659b4ccd7f4a/1/mvGIoEu0XU7nTETcdtcf_73AT2A.mft rsync://rpki.ripe.net/repository/DEFAULT/mvGIoEu0XU7nTETcdtcf_73AT2A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 23 Nov 2025 12:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ab:a8:16:24:04:f5:1a:71:d3:78:3e:5a:75:26:80:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9af188a04bb45d4ee74c44dc76d71fffbdc04f60 Validity Not Before: Nov 22 13:01:50 2025 GMT Not After : Nov 23 13:01:50 2025 GMT Subject: CN=d67469083d8b06788f592f30f55eee1c82446efc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:3b:fb:93:93:9b:3b:dd:ec:a3:c4:cf:19:61: 2a:fc:50:d1:f5:a0:5f:ea:72:5e:93:04:9a:8d:de: a1:6d:1f:de:9a:47:1a:2d:72:d5:d5:c8:80:78:2f: c0:35:14:0d:b7:98:87:a1:ac:fa:0b:b0:8c:a6:8a: d8:93:d0:4a:9f:f4:3b:4a:68:22:1e:17:98:3d:54: 5e:62:8c:b5:72:fd:20:9a:56:a9:2c:81:b0:57:84: 26:e2:e1:8d:fa:d0:2e:b6:66:3e:06:a5:af:c1:56: 4b:1e:81:e7:9d:e3:24:58:5c:1d:f9:4b:1e:eb:09: 39:31:13:54:43:a8:e7:16:73:f1:82:9c:69:a3:1e: 13:c5:e0:f2:88:93:71:f5:7e:e5:26:ea:37:cc:9a: 7b:ca:99:eb:a0:31:25:52:04:f7:68:ee:f6:3a:9a: 6d:14:8e:0b:1b:68:a7:f0:ae:21:f3:63:ff:1e:02: a0:b6:73:5f:fa:84:b2:89:16:c2:59:7e:4c:1f:7a: d0:76:92:3b:c9:b5:dc:1f:b8:82:04:96:7f:48:f0: 96:f2:ac:20:a1:09:71:90:bb:79:b8:ac:d7:5b:2d: 1f:65:47:be:91:a4:9b:79:f3:54:16:2b:44:bb:dd: d1:4d:f9:ac:7a:df:a7:dc:e6:74:ee:50:30:1f:7b: 7f:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:74:69:08:3D:8B:06:78:8F:59:2F:30:F5:5E:EE:1C:82:44:6E:FC X509v3 Authority Key Identifier: keyid:9A:F1:88:A0:4B:B4:5D:4E:E7:4C:44:DC:76:D7:1F:FF:BD:C0:4F:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mvGIoEu0XU7nTETcdtcf_73AT2A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/7e0b13-ec91-483d-b96a-659b4ccd7f4a/1/mvGIoEu0XU7nTETcdtcf_73AT2A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/7e0b13-ec91-483d-b96a-659b4ccd7f4a/1/mvGIoEu0XU7nTETcdtcf_73AT2A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c2:44:05:35:79:79:43:b7:7a:c2:0e:6d:3a:52:e6:72:ef:fc: db:b4:c6:c1:1a:8c:b7:a5:13:04:df:e8:d0:ca:18:e7:83:b0: af:15:33:46:57:f7:55:54:e2:89:82:35:21:a0:26:41:1d:dd: 49:9b:b5:6e:1b:15:8e:57:ba:2c:cf:72:49:93:19:f3:01:10: dc:fa:a6:d9:63:0f:3b:f1:c4:48:e5:89:8c:a5:fc:fe:68:2c: 32:a4:97:d4:1d:5e:49:41:00:24:af:4c:49:a0:45:6d:e1:10: 01:47:ea:90:cf:6d:36:41:fc:27:a6:d1:7b:06:f6:a0:b1:af: 5f:de:9c:ce:ef:f0:96:d8:d1:25:a2:85:22:23:37:08:d9:cb: c5:56:76:c3:65:26:2b:7c:91:f9:68:4d:b6:9a:1f:2d:93:75: cc:ab:7e:5a:9e:2f:aa:7f:95:a9:1f:f1:57:60:3c:e5:68:6c: 79:64:f5:7a:3e:39:1d:34:81:4e:c0:41:52:56:66:71:9d:ce: 04:b8:c6:33:df:90:ee:70:0a:80:09:af:fa:c3:71:d4:7c:45: 07:3c:a9:57:84:6d:56:57:27:1a:54:f8:07:3e:c6:a0:6e:f0: 87:76:89:d5:ad:c3:02:d0:8b:27:28:73:0b:21:f0:7f:be:de: f6:55:42:44 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZqrqBYkBPUacdN4Plp1JoCJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhZjE4OGEwNGJiNDVkNGVlNzRjNDRkYzc2ZDcxZmZmYmRj MDRmNjAwHhcNMjUxMTIyMTMwMTUwWhcNMjUxMTIzMTMwMTUwWjAzMTEwLwYDVQQD EyhkNjc0NjkwODNkOGIwNjc4OGY1OTJmMzBmNTVlZWUxYzgyNDQ2ZWZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2jv7k5ObO93so8TPGWEq/FDR9aBf 6nJekwSajd6hbR/emkcaLXLV1ciAeC/ANRQNt5iHoaz6C7CMporYk9BKn/Q7Smgi HheYPVReYoy1cv0gmlapLIGwV4Qm4uGN+tAutmY+BqWvwVZLHoHnneMkWFwd+Use 6wk5MRNUQ6jnFnPxgpxpox4TxeDyiJNx9X7lJuo3zJp7ypnroDElUgT3aO72Oppt FI4LG2in8K4h82P/HgKgtnNf+oSyiRbCWX5MH3rQdpI7ybXcH7iCBJZ/SPCW8qwg oQlxkLt5uKzXWy0fZUe+kaSbefNUFitEu93RTfmset+n3OZ07lAwH3t/bQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNZ0aQg9iwZ4j1kvMPVe7hyCRG78MB8GA1UdIwQY MBaAFJrxiKBLtF1O50xE3HbXH/+9wE9gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbXZHSW9FdTBYVTduVEVUY2R0Y2ZfNzNBVDJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy83ZTBiMTMtZWM5MS00ODNkLWI5NmEt NjU5YjRjY2Q3ZjRhLzEvbXZHSW9FdTBYVTduVEVUY2R0Y2ZfNzNBVDJBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy83ZTBiMTMtZWM5MS00ODNkLWI5NmEtNjU5YjRjY2Q3ZjRh LzEvbXZHSW9FdTBYVTduVEVUY2R0Y2ZfNzNBVDJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwkQFNXl5 Q7d6wg5tOlLmcu/827TGwRqMt6UTBN/o0MoY54OwrxUzRlf3VVTiiYI1IaAmQR3d SZu1bhsVjle6LM9ySZMZ8wEQ3Pqm2WMPO/HESOWJjKX8/mgsMqSX1B1eSUEAJK9M SaBFbeEQAUfqkM9tNkH8J6bRewb2oLGvX96czu/wltjRJaKFIiM3CNnLxVZ2w2Um K3yR+WhNtpofLZN1zKt+Wp4vqn+VqR/xV2A85WhseWT1ej45HTSBTsBBUlZmcZ3O BLjGM9+Q7nAKgAmv+sNx1HxFBzypV4RtVlcnGlT4Bz7GoG7wh3aJ1a3DAtCLJyhz CyHwf77e9lVCRA== -----END CERTIFICATE-----Generated at Sat Nov 22 21:45:57 2025 by rpki-client