This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/be92b5-5717-4046-ac1c-8222e251a91b/1/m1WmQjec5XjznsDRBgPc-oP2404.mft File: m1WmQjec5XjznsDRBgPc-oP2404.mft (raw, json) Hash identifier: AluSHJXvuJADx2I70ovpVSjPjbafYKGw00f2Wo7WebM= Subject key identifier: 39:C7:E7:C7:F6:FC:27:91:9D:FB:B7:11:34:A4:70:0D:14:40:66:C5 Authority key identifier: 9B:55:A6:42:37:9C:E5:78:F3:9E:C0:D1:06:03:DC:FA:83:F6:E3:4E Certificate issuer: /CN=9b55a642379ce578f39ec0d10603dcfa83f6e34e Certificate serial: 019B0DB71B01DD926E8516FB2E51400492BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m1WmQjec5XjznsDRBgPc-oP2404.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/be92b5-5717-4046-ac1c-8222e251a91b/1/m1WmQjec5XjznsDRBgPc-oP2404.mft Manifest number: 1351 Signing time: Thu 11 Dec 2025 14:01:02 +0000 Manifest this update: Thu 11 Dec 2025 14:01:02 +0000 Manifest next update: Fri 12 Dec 2025 14:01:02 +0000 Files and hashes: 1: m1WmQjec5XjznsDRBgPc-oP2404.crl (hash: s/5838oQZn0RCrtS+mVCjEpEzPkVsO+4xW7BEKcfPS4=) 2: rKHwl3Cc8x5jyJG1zE_2bLEuudU.roa (hash: R8KRd6bkmQYX+rv1TKmwJFyYawaIUtq89ucsqsJ+aXQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/be92b5-5717-4046-ac1c-8222e251a91b/1/m1WmQjec5XjznsDRBgPc-oP2404.crl rsync://rpki.ripe.net/repository/DEFAULT/74/be92b5-5717-4046-ac1c-8222e251a91b/1/m1WmQjec5XjznsDRBgPc-oP2404.mft rsync://rpki.ripe.net/repository/DEFAULT/m1WmQjec5XjznsDRBgPc-oP2404.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0d:b7:1b:01:dd:92:6e:85:16:fb:2e:51:40:04:92:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9b55a642379ce578f39ec0d10603dcfa83f6e34e Validity Not Before: Dec 11 14:01:02 2025 GMT Not After : Dec 12 14:01:02 2025 GMT Subject: CN=39c7e7c7f6fc27919dfbb71134a4700d144066c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:66:a8:04:16:e9:90:00:28:3f:d2:b4:a9:3c: 2b:e7:a4:05:4b:74:2e:ca:99:81:e2:40:d3:67:16: 31:7f:f9:8d:ac:0e:0b:29:43:e5:e0:1c:61:29:a5: f2:ee:fc:cf:42:9b:2d:31:20:ff:ae:f7:fa:37:ef: 8f:d7:49:7d:bd:1b:7c:b1:c2:ec:a3:87:5b:36:79: ed:9e:22:b9:76:c3:72:50:f2:38:8d:6d:aa:4f:af: 05:4a:d0:9d:d5:09:18:a9:28:83:df:29:c4:81:84: a2:10:70:ac:7a:74:01:fb:a8:6b:ee:dd:55:f8:de: e7:84:8e:6a:51:36:3e:5f:a9:fc:8a:d2:d8:9f:1a: d9:20:b2:cb:5e:17:fd:4b:b3:24:d7:fc:bd:2c:4f: 29:74:e9:44:12:d5:c7:b9:b5:80:af:6b:17:28:62: 73:6e:5c:bc:a7:52:6b:b8:0c:76:47:63:14:c2:40: b5:d3:8c:2a:3a:5b:e1:07:77:51:14:94:02:ed:3c: 93:b9:f3:ed:5a:e7:46:01:f3:5a:98:8a:29:ac:ca: f0:9b:08:c3:2a:2b:1e:7c:a1:e8:e7:9c:35:00:7c: 67:ee:83:49:2d:56:dc:0d:c7:48:de:b8:da:c8:bb: b5:b4:da:d4:c7:2d:bd:ca:71:ee:d9:bf:ee:55:95: 50:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:C7:E7:C7:F6:FC:27:91:9D:FB:B7:11:34:A4:70:0D:14:40:66:C5 X509v3 Authority Key Identifier: keyid:9B:55:A6:42:37:9C:E5:78:F3:9E:C0:D1:06:03:DC:FA:83:F6:E3:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m1WmQjec5XjznsDRBgPc-oP2404.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/be92b5-5717-4046-ac1c-8222e251a91b/1/m1WmQjec5XjznsDRBgPc-oP2404.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/74/be92b5-5717-4046-ac1c-8222e251a91b/1/m1WmQjec5XjznsDRBgPc-oP2404.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:89:92:d4:7f:b8:02:e3:25:57:db:f8:e1:af:5d:86:36:45: dc:1c:3c:c3:18:a8:4e:6b:7a:6d:20:ae:08:46:01:08:9c:db: 01:a7:72:a9:f0:57:1b:d0:0a:cb:1e:26:50:1f:5f:a0:9a:8f: 7b:01:b2:2f:fd:c9:46:c2:e6:7c:96:f2:91:57:05:49:4e:1a: a9:e0:33:23:01:d0:db:5d:81:a4:d9:1f:31:5d:71:4a:50:ed: d8:be:a7:db:af:59:19:60:61:b5:40:68:51:a9:c2:88:c1:d3: 98:62:b0:69:50:24:5b:86:8a:b0:c0:80:92:c9:6a:2b:9c:8f: ae:c6:14:9e:ac:03:32:94:48:ea:f4:5f:8c:6b:38:c9:8c:ed: 58:4d:3b:85:5d:40:3b:1d:25:72:12:74:4a:0b:63:0b:34:db: 18:6d:2d:5d:85:11:2c:f4:4e:53:dc:8f:b5:cb:dd:7b:3e:88: 99:e9:15:15:c3:fc:07:f8:90:2a:0c:7c:6c:8a:35:fd:28:52: 4a:c9:96:96:74:01:8c:da:3a:71:49:49:51:2b:07:53:b0:2c: 7f:a3:24:a1:a7:76:b5:45:94:5e:10:c6:cd:ef:84:2a:a0:5f: 47:8e:33:ba:38:10:1a:f7:cd:7c:c7:31:25:cb:47:cd:84:62: ea:0e:69:da -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsNtxsB3ZJuhRb7LlFABJK+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDliNTVhNjQyMzc5Y2U1NzhmMzllYzBkMTA2MDNkY2ZhODNm NmUzNGUwHhcNMjUxMjExMTQwMTAyWhcNMjUxMjEyMTQwMTAyWjAzMTEwLwYDVQQD EygzOWM3ZTdjN2Y2ZmMyNzkxOWRmYmI3MTEzNGE0NzAwZDE0NDA2NmM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzmaoBBbpkAAoP9K0qTwr56QFS3Qu ypmB4kDTZxYxf/mNrA4LKUPl4BxhKaXy7vzPQpstMSD/rvf6N++P10l9vRt8scLs o4dbNnntniK5dsNyUPI4jW2qT68FStCd1QkYqSiD3ynEgYSiEHCsenQB+6hr7t1V +N7nhI5qUTY+X6n8itLYnxrZILLLXhf9S7Mk1/y9LE8pdOlEEtXHubWAr2sXKGJz bly8p1JruAx2R2MUwkC104wqOlvhB3dRFJQC7TyTufPtWudGAfNamIoprMrwmwjD KisefKHo55w1AHxn7oNJLVbcDcdI3rjayLu1tNrUxy29ynHu2b/uVZVQnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDnH58f2/CeRnfu3ETSkcA0UQGbFMB8GA1UdIwQY MBaAFJtVpkI3nOV4857A0QYD3PqD9uNOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbTFXbVFqZWM1WGp6bnNEUkJnUGMtb1AyNDA0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC9iZTkyYjUtNTcxNy00MDQ2LWFjMWMt ODIyMmUyNTFhOTFiLzEvbTFXbVFqZWM1WGp6bnNEUkJnUGMtb1AyNDA0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NC9iZTkyYjUtNTcxNy00MDQ2LWFjMWMtODIyMmUyNTFhOTFi LzEvbTFXbVFqZWM1WGp6bnNEUkJnUGMtb1AyNDA0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFomS1H+4 AuMlV9v44a9dhjZF3Bw8wxioTmt6bSCuCEYBCJzbAadyqfBXG9AKyx4mUB9foJqP ewGyL/3JRsLmfJbykVcFSU4aqeAzIwHQ212BpNkfMV1xSlDt2L6n269ZGWBhtUBo UanCiMHTmGKwaVAkW4aKsMCAkslqK5yPrsYUnqwDMpRI6vRfjGs4yYztWE07hV1A Ox0lchJ0SgtjCzTbGG0tXYURLPROU9yPtcvdez6ImekVFcP8B/iQKgx8bIo1/ShS SsmWlnQBjNo6cUlJUSsHU7Asf6Mkoad2tUWUXhDGze+EKqBfR44zujgQGvfNfMcx JctHzYRi6g5p2g== -----END CERTIFICATE-----Generated at Fri Dec 12 00:11:21 2025 by rpki-client