This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/c84a4d-9e57-4756-bdbb-01aa056b1f6f/1/m7xCOcnLmB8ZpJXmM9O-yIn8vok.mft File: m7xCOcnLmB8ZpJXmM9O-yIn8vok.mft (raw, json) Hash identifier: asdDLybVE9+mpwuEeFDEstBSnA3bBcNzdfu36tx0kY0= Subject key identifier: 55:3C:D6:EC:0D:5C:07:C5:7B:73:7A:A6:B1:EC:0A:69:F9:E2:3D:C3 Authority key identifier: 9B:BC:42:39:C9:CB:98:1F:19:A4:95:E6:33:D3:BE:C8:89:FC:BE:89 Certificate issuer: /CN=9bbc4239c9cb981f19a495e633d3bec889fcbe89 Certificate serial: 019B348D73CB016D97446C609440A8865C41 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m7xCOcnLmB8ZpJXmM9O-yIn8vok.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/c84a4d-9e57-4756-bdbb-01aa056b1f6f/1/m7xCOcnLmB8ZpJXmM9O-yIn8vok.mft Manifest number: 0FD4 Signing time: Fri 19 Dec 2025 03:00:43 +0000 Manifest this update: Fri 19 Dec 2025 03:00:43 +0000 Manifest next update: Sat 20 Dec 2025 03:00:43 +0000 Files and hashes: 1: XQF1gy_GwOpRDFXNG6GoJ-bdHmU.roa (hash: 2eDBAsY9Cf7EZVCxOyjj6e6wsGijuJlQgQ3d0xmYCt4=) 2: _RG38RYDV8XCGP63JRH0IruOPOQ.roa (hash: sUnqtqAeRsj4aEysWIOSTKFJQIMojCeLnix7ODtsEOY=) 3: m7xCOcnLmB8ZpJXmM9O-yIn8vok.crl (hash: fRmQoiHaReuqiqxcy6gSGdmqNqE0K5R/aRb9el0QEls=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/c84a4d-9e57-4756-bdbb-01aa056b1f6f/1/m7xCOcnLmB8ZpJXmM9O-yIn8vok.crl rsync://rpki.ripe.net/repository/DEFAULT/3b/c84a4d-9e57-4756-bdbb-01aa056b1f6f/1/m7xCOcnLmB8ZpJXmM9O-yIn8vok.mft rsync://rpki.ripe.net/repository/DEFAULT/m7xCOcnLmB8ZpJXmM9O-yIn8vok.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:8d:73:cb:01:6d:97:44:6c:60:94:40:a8:86:5c:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9bbc4239c9cb981f19a495e633d3bec889fcbe89 Validity Not Before: Dec 19 03:00:43 2025 GMT Not After : Dec 20 03:00:43 2025 GMT Subject: CN=553cd6ec0d5c07c57b737aa6b1ec0a69f9e23dc3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:44:2d:58:fe:eb:22:52:e6:7c:8b:33:36:c7: 39:3c:46:37:4e:83:6e:4e:fe:21:3e:6e:53:5d:da: 05:f1:12:68:6a:2d:17:d1:33:42:e1:38:41:e2:6d: 9b:26:87:c3:f0:22:c4:d8:b2:7c:e7:2b:aa:b3:32: 9f:10:f5:ba:e7:a6:ec:76:bf:82:57:db:f4:e3:4b: bc:60:93:a6:5a:32:f8:f2:fc:39:69:b0:29:fd:cb: 89:64:c3:01:86:f9:4c:2c:bf:30:3d:e7:54:1b:4b: 9d:b7:bf:6a:e6:e0:57:bc:f3:23:af:fb:61:0d:36: 1a:cb:c9:0d:7f:aa:dd:9b:40:1d:dc:a7:06:b8:85: e1:b4:a7:1b:7e:33:f8:dc:67:5d:5d:eb:16:0b:1c: 13:69:13:80:c1:ff:df:07:a4:90:6c:26:4e:5e:a4: 2a:d5:09:cb:ca:c0:43:61:89:d7:56:75:1e:16:ef: 90:cd:7c:b0:8d:4d:74:85:d2:da:77:68:fe:a4:a9: 2e:99:cb:c5:80:23:cb:9a:98:c1:0e:8b:fc:64:d8: 91:8b:b5:02:e1:06:c1:03:c5:cf:91:40:a3:70:ec: 70:75:cd:4d:0a:31:43:e3:5b:3b:84:8e:05:7b:af: ff:02:a7:85:5c:b2:2c:de:c0:22:2b:40:1a:ef:48: 64:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:3C:D6:EC:0D:5C:07:C5:7B:73:7A:A6:B1:EC:0A:69:F9:E2:3D:C3 X509v3 Authority Key Identifier: keyid:9B:BC:42:39:C9:CB:98:1F:19:A4:95:E6:33:D3:BE:C8:89:FC:BE:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m7xCOcnLmB8ZpJXmM9O-yIn8vok.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/c84a4d-9e57-4756-bdbb-01aa056b1f6f/1/m7xCOcnLmB8ZpJXmM9O-yIn8vok.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/c84a4d-9e57-4756-bdbb-01aa056b1f6f/1/m7xCOcnLmB8ZpJXmM9O-yIn8vok.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:6a:6d:d0:75:52:ab:fb:f6:d3:26:bb:22:44:6f:be:fa:12: 4d:a8:3a:d3:4b:9a:e9:23:9f:87:06:ab:ea:63:84:ea:bd:6e: 0d:da:4a:21:08:a7:cf:cc:b0:2f:37:79:5b:ff:47:e4:c5:f4: 7c:29:e3:01:cd:1e:9a:23:04:20:7c:22:94:08:a1:e8:29:e2: 1a:7b:48:d7:25:b7:84:96:68:97:64:70:b4:37:3e:1a:72:87: ee:b2:14:37:2a:0d:d6:02:e1:56:d8:9d:64:31:41:4c:15:b3: 76:63:36:b6:04:78:36:74:a7:d7:22:5d:f7:28:06:8b:e2:9c: e3:67:7c:69:ba:52:01:a2:6a:8a:82:40:1c:4e:5d:87:d2:c8: 26:68:8f:b1:11:0c:db:4b:07:fb:13:0e:66:f7:d7:cd:de:95: 24:e3:dc:be:03:aa:84:4a:3f:a2:59:33:fc:d4:27:b3:01:f9: f4:9d:af:bc:89:59:7c:ca:66:30:56:23:eb:65:fe:13:2c:0e: 0e:de:78:c8:da:12:22:0e:39:b6:57:4c:e7:9a:a4:78:b9:ca: ed:02:9c:bb:94:a6:dc:9c:b5:71:2d:7c:d9:fc:5f:86:5c:43: a9:75:5b:7b:63:fc:f5:b1:de:03:3e:42:82:10:f0:c5:ae:c5: c5:3e:a5:be -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0jXPLAW2XRGxglECohlxBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDliYmM0MjM5YzljYjk4MWYxOWE0OTVlNjMzZDNiZWM4ODlm Y2JlODkwHhcNMjUxMjE5MDMwMDQzWhcNMjUxMjIwMDMwMDQzWjAzMTEwLwYDVQQD Eyg1NTNjZDZlYzBkNWMwN2M1N2I3MzdhYTZiMWVjMGE2OWY5ZTIzZGMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlkQtWP7rIlLmfIszNsc5PEY3ToNu Tv4hPm5TXdoF8RJoai0X0TNC4ThB4m2bJofD8CLE2LJ85yuqszKfEPW656bsdr+C V9v040u8YJOmWjL48vw5abAp/cuJZMMBhvlMLL8wPedUG0udt79q5uBXvPMjr/th DTYay8kNf6rdm0Ad3KcGuIXhtKcbfjP43GddXesWCxwTaROAwf/fB6SQbCZOXqQq 1QnLysBDYYnXVnUeFu+QzXywjU10hdLad2j+pKkumcvFgCPLmpjBDov8ZNiRi7UC 4QbBA8XPkUCjcOxwdc1NCjFD41s7hI4Fe6//AqeFXLIs3sAiK0Aa70hkrwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFU81uwNXAfFe3N6prHsCmn54j3DMB8GA1UdIwQY MBaAFJu8QjnJy5gfGaSV5jPTvsiJ/L6JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbTd4Q09jbkxtQjhacEpYbU05Ty15SW44dm9rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi9jODRhNGQtOWU1Ny00NzU2LWJkYmIt MDFhYTA1NmIxZjZmLzEvbTd4Q09jbkxtQjhacEpYbU05Ty15SW44dm9rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYi9jODRhNGQtOWU1Ny00NzU2LWJkYmItMDFhYTA1NmIxZjZm LzEvbTd4Q09jbkxtQjhacEpYbU05Ty15SW44dm9rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnmpt0HVS q/v20ya7IkRvvvoSTag600ua6SOfhwar6mOE6r1uDdpKIQinz8ywLzd5W/9H5MX0 fCnjAc0emiMEIHwilAih6CniGntI1yW3hJZol2RwtDc+GnKH7rIUNyoN1gLhVtid ZDFBTBWzdmM2tgR4NnSn1yJd9ygGi+Kc42d8abpSAaJqioJAHE5dh9LIJmiPsREM 20sH+xMOZvfXzd6VJOPcvgOqhEo/olkz/NQnswH59J2vvIlZfMpmMFYj62X+EywO Dt54yNoSIg45tldM55qkeLnK7QKcu5Sm3Jy1cS182fxfhlxDqXVbe2P89bHeAz5C ghDwxa7FxT6lvg== -----END CERTIFICATE-----Generated at Fri Dec 19 04:49:40 2025 by rpki-client