This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/eb301d-ab50-4c3e-8c78-9df37109c81d/1/m-du9KpJjCFSTdftrRbeHT2wAuM.mft File: m-du9KpJjCFSTdftrRbeHT2wAuM.mft (raw, json) Hash identifier: TzpJengYtq7LiulygnzEzRt7POeU9lLt49VZ7lh8EmA= Subject key identifier: AD:F5:18:07:53:A1:55:32:86:83:E1:C4:A3:F0:C2:5C:E4:BC:71:02 Authority key identifier: 9B:E7:6E:F4:AA:49:8C:21:52:4D:D7:ED:AD:16:DE:1D:3D:B0:02:E3 Certificate issuer: /CN=9be76ef4aa498c21524dd7edad16de1d3db002e3 Certificate serial: 019B19BB09C4527AB256F6E40D1D8C410BEC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m-du9KpJjCFSTdftrRbeHT2wAuM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/eb301d-ab50-4c3e-8c78-9df37109c81d/1/m-du9KpJjCFSTdftrRbeHT2wAuM.mft Manifest number: 1777 Signing time: Sat 13 Dec 2025 22:00:46 +0000 Manifest this update: Sat 13 Dec 2025 22:00:46 +0000 Manifest next update: Sun 14 Dec 2025 22:00:46 +0000 Files and hashes: 1: HoDvxsQA4iXxpxVk1_co_JtvvPE.roa (hash: cWutlJOtBJ4KMx+ET4BMORGB6H9YK5+9Bn/1o272ZUM=) 2: m-du9KpJjCFSTdftrRbeHT2wAuM.crl (hash: qPw/TT3b8MhVVDgUc6/+3pDM4EQSQMvqIy8RfZFUc0M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/eb301d-ab50-4c3e-8c78-9df37109c81d/1/m-du9KpJjCFSTdftrRbeHT2wAuM.crl rsync://rpki.ripe.net/repository/DEFAULT/18/eb301d-ab50-4c3e-8c78-9df37109c81d/1/m-du9KpJjCFSTdftrRbeHT2wAuM.mft rsync://rpki.ripe.net/repository/DEFAULT/m-du9KpJjCFSTdftrRbeHT2wAuM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 17:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:19:bb:09:c4:52:7a:b2:56:f6:e4:0d:1d:8c:41:0b:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9be76ef4aa498c21524dd7edad16de1d3db002e3 Validity Not Before: Dec 13 22:00:46 2025 GMT Not After : Dec 14 22:00:46 2025 GMT Subject: CN=adf5180753a155328683e1c4a3f0c25ce4bc7102 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:fa:54:e3:c1:cd:73:45:ae:c0:cc:11:b5:57: cd:87:18:53:72:ca:f5:54:99:e0:1f:f9:62:f4:77: 9e:e6:ee:a2:40:58:2e:76:52:f6:c4:f1:a4:b8:f6: 5d:a4:2b:d8:92:72:c1:17:e4:81:c7:64:f5:78:76: 0e:7e:e2:6a:44:69:0e:94:80:a5:05:ea:87:b0:fb: 6f:8f:b4:74:f1:0c:53:69:08:ba:39:d8:3b:0a:80: 2a:37:0f:ff:0e:5a:87:be:ce:75:ba:67:db:e1:a4: 97:04:04:7a:a0:f6:78:bc:fa:56:a9:5a:e3:4e:43: 40:28:0d:bd:ba:5d:03:b5:b4:b5:0f:25:76:85:8a: 0b:01:9c:fe:ec:8c:fd:74:91:c4:da:7a:ca:b6:be: 39:d8:cf:fd:79:3c:c3:61:ae:6c:c9:1b:e1:07:aa: d7:4b:37:43:06:7c:16:db:c6:89:1d:6d:ed:bd:9d: 37:8d:06:32:9d:1e:f3:89:20:ca:a0:38:15:91:40: bc:ea:09:41:59:ab:15:90:a8:ad:ca:a2:2c:3f:37: ac:16:69:b0:dd:56:83:87:ba:06:9a:c1:ba:be:1f: 50:0d:9a:87:72:40:76:92:bf:fe:13:22:6c:45:70: ca:c0:51:5d:e9:b6:4e:d2:10:0e:cf:54:0a:72:b4: 30:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:F5:18:07:53:A1:55:32:86:83:E1:C4:A3:F0:C2:5C:E4:BC:71:02 X509v3 Authority Key Identifier: keyid:9B:E7:6E:F4:AA:49:8C:21:52:4D:D7:ED:AD:16:DE:1D:3D:B0:02:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m-du9KpJjCFSTdftrRbeHT2wAuM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/eb301d-ab50-4c3e-8c78-9df37109c81d/1/m-du9KpJjCFSTdftrRbeHT2wAuM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/eb301d-ab50-4c3e-8c78-9df37109c81d/1/m-du9KpJjCFSTdftrRbeHT2wAuM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:51:52:ef:e5:d2:ff:8d:5d:92:6f:a5:04:40:ee:46:7d:87: 9d:67:a5:74:c0:cc:0f:ab:1e:b1:c1:cd:55:29:80:86:87:e3: 74:84:ab:8e:09:1e:35:bf:38:e3:58:9a:a2:a9:b9:02:88:45: ef:e5:aa:97:68:f9:68:4e:ff:bc:d5:2e:80:e5:58:04:b1:d7: 09:23:95:3b:4c:87:32:12:ad:38:90:9d:e3:89:de:1e:49:07: e3:91:56:fa:56:fa:3c:f9:fb:ea:3a:9c:12:54:d3:92:7e:85: 80:56:ae:0c:9c:94:23:d2:cd:c0:2b:52:89:7e:0f:96:f5:c5: 9c:09:2a:82:dc:73:3e:b9:cf:de:de:ca:2a:c6:a6:62:d8:d0: fd:a7:0e:60:5e:5d:ad:3d:26:01:d9:a3:c8:28:9a:c0:72:d9: d5:5e:c7:ca:9d:ae:4c:c7:0b:86:f7:28:e0:a1:18:73:df:ab: ee:10:1d:0a:51:1e:8b:d1:91:79:29:83:03:50:d1:99:69:c2: f1:27:0d:39:75:40:b7:9a:89:21:f0:65:fd:92:15:04:d4:e6: 04:8b:6c:41:e5:26:49:7b:36:d4:23:de:b9:de:b9:3b:eb:87: 77:de:21:04:47:21:3f:a6:3d:0d:eb:ab:01:20:a1:39:e8:8f: e6:29:2a:ee -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsZuwnEUnqyVvbkDR2MQQvsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDliZTc2ZWY0YWE0OThjMjE1MjRkZDdlZGFkMTZkZTFkM2Ri MDAyZTMwHhcNMjUxMjEzMjIwMDQ2WhcNMjUxMjE0MjIwMDQ2WjAzMTEwLwYDVQQD EyhhZGY1MTgwNzUzYTE1NTMyODY4M2UxYzRhM2YwYzI1Y2U0YmM3MTAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxvpU48HNc0WuwMwRtVfNhxhTcsr1 VJngH/li9Hee5u6iQFgudlL2xPGkuPZdpCvYknLBF+SBx2T1eHYOfuJqRGkOlICl BeqHsPtvj7R08QxTaQi6Odg7CoAqNw//DlqHvs51umfb4aSXBAR6oPZ4vPpWqVrj TkNAKA29ul0DtbS1DyV2hYoLAZz+7Iz9dJHE2nrKtr452M/9eTzDYa5syRvhB6rX SzdDBnwW28aJHW3tvZ03jQYynR7ziSDKoDgVkUC86glBWasVkKityqIsPzesFmmw 3VaDh7oGmsG6vh9QDZqHckB2kr/+EyJsRXDKwFFd6bZO0hAOz1QKcrQwOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK31GAdToVUyhoPhxKPwwlzkvHECMB8GA1UdIwQY MBaAFJvnbvSqSYwhUk3X7a0W3h09sALjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbS1kdTlLcEpqQ0ZTVGRmdHJSYmVIVDJ3QXVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9lYjMwMWQtYWI1MC00YzNlLThjNzgt OWRmMzcxMDljODFkLzEvbS1kdTlLcEpqQ0ZTVGRmdHJSYmVIVDJ3QXVNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC9lYjMwMWQtYWI1MC00YzNlLThjNzgtOWRmMzcxMDljODFk LzEvbS1kdTlLcEpqQ0ZTVGRmdHJSYmVIVDJ3QXVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXFFS7+XS /41dkm+lBEDuRn2HnWeldMDMD6sescHNVSmAhofjdISrjgkeNb8441iaoqm5AohF 7+Wql2j5aE7/vNUugOVYBLHXCSOVO0yHMhKtOJCd44neHkkH45FW+lb6PPn76jqc ElTTkn6FgFauDJyUI9LNwCtSiX4PlvXFnAkqgtxzPrnP3t7KKsamYtjQ/acOYF5d rT0mAdmjyCiawHLZ1V7Hyp2uTMcLhvco4KEYc9+r7hAdClEei9GReSmDA1DRmWnC 8ScNOXVAt5qJIfBl/ZIVBNTmBItsQeUmSXs21CPeud65O+uHd94hBEchP6Y9Deur ASChOeiP5ikq7g== -----END CERTIFICATE-----Generated at Sun Dec 14 01:57:57 2025 by rpki-client