This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/8450a1-66db-48c6-93b8-947859c0ecc4/1/mmLiahyv_1UwpwGQyNAAwQ8kuWY.mft File: mmLiahyv_1UwpwGQyNAAwQ8kuWY.mft (raw, json) Hash identifier: EMTfD8ijmKg41qoN1dNbbTGmWPk3Q2wxdiJBmLQBgak= Subject key identifier: D6:12:92:7C:90:6B:87:10:B0:82:95:82:8B:FB:50:93:5E:49:59:AD Authority key identifier: 9A:62:E2:6A:1C:AF:FF:55:30:A7:01:90:C8:D0:00:C1:0F:24:B9:66 Certificate issuer: /CN=9a62e26a1cafff5530a70190c8d000c10f24b966 Certificate serial: 019B217508D8B4B66391B73DAAD415ACE9F2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mmLiahyv_1UwpwGQyNAAwQ8kuWY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/8450a1-66db-48c6-93b8-947859c0ecc4/1/mmLiahyv_1UwpwGQyNAAwQ8kuWY.mft Manifest number: 177A Signing time: Mon 15 Dec 2025 10:01:16 +0000 Manifest this update: Mon 15 Dec 2025 10:01:16 +0000 Manifest next update: Tue 16 Dec 2025 10:01:16 +0000 Files and hashes: 1: dxplGkGd26kxQwEZC2H1JLcUelQ.roa (hash: hG64YrjrDAuq/4PStZsOFKbG0lLEJS6HhJTFQZMO3jk=) 2: mmLiahyv_1UwpwGQyNAAwQ8kuWY.crl (hash: Cf48Q9AaUCMzmuPCtl/owxfjtehqjRiF0+finRFkRTs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/8450a1-66db-48c6-93b8-947859c0ecc4/1/mmLiahyv_1UwpwGQyNAAwQ8kuWY.crl rsync://rpki.ripe.net/repository/DEFAULT/8c/8450a1-66db-48c6-93b8-947859c0ecc4/1/mmLiahyv_1UwpwGQyNAAwQ8kuWY.mft rsync://rpki.ripe.net/repository/DEFAULT/mmLiahyv_1UwpwGQyNAAwQ8kuWY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 10:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:21:75:08:d8:b4:b6:63:91:b7:3d:aa:d4:15:ac:e9:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a62e26a1cafff5530a70190c8d000c10f24b966 Validity Not Before: Dec 15 10:01:16 2025 GMT Not After : Dec 16 10:01:16 2025 GMT Subject: CN=d612927c906b8710b08295828bfb50935e4959ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:dd:6d:7f:5c:75:13:27:28:d5:af:72:ee:d1: 05:1a:47:5f:f2:1c:77:c5:e5:74:26:8b:b7:88:13: 94:4d:7a:99:c8:e5:df:63:18:da:2b:a0:e3:45:b9: 67:ea:c3:3c:0f:00:5a:ce:7e:b5:87:62:c4:49:af: 03:f1:ae:4d:55:72:6d:92:d2:11:8e:ae:a0:94:63: a5:80:a8:0f:c4:28:d8:e1:c7:2a:df:bf:e5:60:d5: 86:9a:f7:88:fe:ef:cc:60:75:38:b1:0b:e1:e1:53: 02:f7:da:b1:42:45:bb:7b:99:f5:0f:2a:2d:dd:61: af:52:ba:1d:05:42:0a:e6:52:fe:44:5a:2a:ac:60: f3:eb:f7:6d:b0:82:87:48:41:9a:5d:20:ce:68:dc: 2d:c0:22:11:a0:0a:33:db:fc:af:48:63:a7:cf:eb: b3:c4:59:09:42:8a:80:2e:7e:78:1f:82:fd:de:2f: b4:84:e7:7d:aa:de:c2:dc:c9:b3:2f:7f:8e:37:2c: 31:98:42:e8:bf:b1:8a:74:7c:65:b1:91:ae:0f:b7: 6f:54:6b:41:a5:39:16:34:f0:72:19:b3:59:57:fa: 52:f5:04:be:90:f2:c6:8d:17:df:fc:c1:9b:93:14: 00:8a:7d:78:f4:1e:c8:9b:12:c2:70:24:4b:76:ea: 1e:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:12:92:7C:90:6B:87:10:B0:82:95:82:8B:FB:50:93:5E:49:59:AD X509v3 Authority Key Identifier: keyid:9A:62:E2:6A:1C:AF:FF:55:30:A7:01:90:C8:D0:00:C1:0F:24:B9:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mmLiahyv_1UwpwGQyNAAwQ8kuWY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/8450a1-66db-48c6-93b8-947859c0ecc4/1/mmLiahyv_1UwpwGQyNAAwQ8kuWY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/8450a1-66db-48c6-93b8-947859c0ecc4/1/mmLiahyv_1UwpwGQyNAAwQ8kuWY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:c5:ca:1b:7c:7c:87:07:ca:1a:50:6f:77:7f:28:cd:c2:81: 6d:5d:05:a3:57:45:a9:ea:ec:37:36:aa:7a:54:eb:c4:54:99: e6:ed:d6:d6:24:61:1c:ba:f3:a8:3a:3a:7f:f0:cc:1b:ac:d1: c6:31:48:2d:e0:bf:6e:29:d7:6e:15:3a:97:16:ff:03:0a:3e: 4b:6e:a3:9e:1a:e4:1b:8a:1c:b6:ab:a0:9a:f6:e8:5a:0c:1d: 4e:3c:18:1b:ac:34:66:47:16:60:bb:17:cd:ba:78:98:0e:04: 43:3f:f2:29:21:15:62:a5:79:e3:3c:c5:39:9d:af:94:36:c1: a7:29:fb:97:64:52:eb:6b:ab:00:72:7b:f7:81:11:66:cf:a0: 35:f3:a2:98:9b:ff:54:a8:19:4d:96:02:11:8a:1d:2f:d5:a9: 99:4c:d9:b6:30:ad:af:1a:f3:ac:f8:fd:33:92:6c:e3:44:73: e2:35:e8:f5:40:14:ae:cd:2d:ae:5d:0a:91:03:07:cc:21:cc: 6c:09:82:5b:d5:f7:4f:2b:8d:83:1f:5a:b2:ef:0c:f0:f4:26: 5b:8a:47:a4:99:59:80:bd:8e:ba:89:77:32:82:35:33:7a:87: d4:ff:1d:8c:d2:a6:16:55:cd:4f:3c:9a:7a:99:7c:5f:26:a2: b3:3a:e8:ba -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZshdQjYtLZjkbc9qtQVrOnyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhNjJlMjZhMWNhZmZmNTUzMGE3MDE5MGM4ZDAwMGMxMGYy NGI5NjYwHhcNMjUxMjE1MTAwMTE2WhcNMjUxMjE2MTAwMTE2WjAzMTEwLwYDVQQD EyhkNjEyOTI3YzkwNmI4NzEwYjA4Mjk1ODI4YmZiNTA5MzVlNDk1OWFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjt1tf1x1Eyco1a9y7tEFGkdf8hx3 xeV0Jou3iBOUTXqZyOXfYxjaK6DjRbln6sM8DwBazn61h2LESa8D8a5NVXJtktIR jq6glGOlgKgPxCjY4ccq37/lYNWGmveI/u/MYHU4sQvh4VMC99qxQkW7e5n1Dyot 3WGvUrodBUIK5lL+RFoqrGDz6/dtsIKHSEGaXSDOaNwtwCIRoAoz2/yvSGOnz+uz xFkJQoqALn54H4L93i+0hOd9qt7C3MmzL3+ONywxmELov7GKdHxlsZGuD7dvVGtB pTkWNPByGbNZV/pS9QS+kPLGjRff/MGbkxQAin149B7ImxLCcCRLduoeywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNYSknyQa4cQsIKVgov7UJNeSVmtMB8GA1UdIwQY MBaAFJpi4mocr/9VMKcBkMjQAMEPJLlmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbW1MaWFoeXZfMVV3cHdHUXlOQUF3UThrdVdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy84NDUwYTEtNjZkYi00OGM2LTkzYjgt OTQ3ODU5YzBlY2M0LzEvbW1MaWFoeXZfMVV3cHdHUXlOQUF3UThrdVdZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yy84NDUwYTEtNjZkYi00OGM2LTkzYjgtOTQ3ODU5YzBlY2M0 LzEvbW1MaWFoeXZfMVV3cHdHUXlOQUF3UThrdVdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIsXKG3x8 hwfKGlBvd38ozcKBbV0Fo1dFqersNzaqelTrxFSZ5u3W1iRhHLrzqDo6f/DMG6zR xjFILeC/binXbhU6lxb/Awo+S26jnhrkG4octqugmvboWgwdTjwYG6w0ZkcWYLsX zbp4mA4EQz/yKSEVYqV54zzFOZ2vlDbBpyn7l2RS62urAHJ794ERZs+gNfOimJv/ VKgZTZYCEYodL9WpmUzZtjCtrxrzrPj9M5Js40Rz4jXo9UAUrs0trl0KkQMHzCHM bAmCW9X3TyuNgx9asu8M8PQmW4pHpJlZgL2Ouol3MoI1M3qH1P8djNKmFlXNTzya epl8Xyaiszroug== -----END CERTIFICATE-----Generated at Mon Dec 15 16:55:54 2025 by rpki-client