This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/c9d4bb-3135-4a9c-b371-bb0d04a27727/1/m7S5jjWbTJLDEYP790kjjmtvCMI.mft File: m7S5jjWbTJLDEYP790kjjmtvCMI.mft (raw, json) Hash identifier: QjKO2sFyfRcbOfMQsCRL21jf/cq1mXCwb9EF6A2yfaw= Subject key identifier: 08:01:F7:7A:18:A0:69:33:DF:D5:94:9F:0F:6A:C7:22:84:B2:3F:5A Authority key identifier: 9B:B4:B9:8E:35:9B:4C:92:C3:11:83:FB:F7:49:23:8E:6B:6F:08:C2 Certificate issuer: /CN=9bb4b98e359b4c92c31183fbf749238e6b6f08c2 Certificate serial: 019B34FB5087AC66D0ACE6947B2F2656AE02 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m7S5jjWbTJLDEYP790kjjmtvCMI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/c9d4bb-3135-4a9c-b371-bb0d04a27727/1/m7S5jjWbTJLDEYP790kjjmtvCMI.mft Manifest number: 1782 Signing time: Fri 19 Dec 2025 05:00:43 +0000 Manifest this update: Fri 19 Dec 2025 05:00:43 +0000 Manifest next update: Sat 20 Dec 2025 05:00:43 +0000 Files and hashes: 1: VxhJQDKCdmlccpU7wsiJAEzzTtc.roa (hash: b9Rf82tWGBx56csRc2DtObsZNSgJoQBwhj0rE/YxDoo=) 2: m7S5jjWbTJLDEYP790kjjmtvCMI.crl (hash: GpDkjwzG2Ceiz2hcWi5tzBlhFSBfqrA/iF0ywZWcnYY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/c9d4bb-3135-4a9c-b371-bb0d04a27727/1/m7S5jjWbTJLDEYP790kjjmtvCMI.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/c9d4bb-3135-4a9c-b371-bb0d04a27727/1/m7S5jjWbTJLDEYP790kjjmtvCMI.mft rsync://rpki.ripe.net/repository/DEFAULT/m7S5jjWbTJLDEYP790kjjmtvCMI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 05:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:fb:50:87:ac:66:d0:ac:e6:94:7b:2f:26:56:ae:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9bb4b98e359b4c92c31183fbf749238e6b6f08c2 Validity Not Before: Dec 19 05:00:43 2025 GMT Not After : Dec 20 05:00:43 2025 GMT Subject: CN=0801f77a18a06933dfd5949f0f6ac72284b23f5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:48:e2:09:29:90:b5:6b:c4:ec:af:4b:94:44: 0c:9e:6d:96:fe:8a:96:b3:db:18:59:86:0a:f8:64: c0:f4:ae:a9:0c:07:87:ce:ca:ed:cb:c0:62:dc:76: 39:71:45:55:43:64:b1:91:d7:d9:75:bf:22:da:61: 49:45:40:c1:4d:03:99:43:ea:3d:17:27:48:7e:e9: 4e:c0:3a:be:0d:6d:c1:e5:b1:74:8b:64:8b:1b:dc: 29:a3:47:8a:cd:a0:53:6f:b4:58:69:fa:4d:9c:4f: 38:71:8e:48:50:9f:a3:66:68:55:6e:08:1b:f0:f8: cc:f6:4a:35:45:a4:22:23:45:5c:9d:bc:1e:ed:b2: 69:f8:ad:0a:d8:6e:99:61:47:84:38:9e:5b:1c:72: 87:b4:52:72:2e:b8:56:ba:e5:af:bb:d9:ec:03:41: 3b:45:39:a7:75:6e:84:3d:da:1e:59:c2:64:74:12: 3d:22:7f:58:2b:b8:35:8f:ae:30:88:1f:75:77:c4: 7a:86:0a:f9:65:e5:6e:78:b1:e6:7c:cd:92:8c:89: f2:d7:cd:9d:47:9e:71:1e:da:b2:8f:75:b8:e1:e9: 95:a9:0d:5c:4a:2b:bc:a2:90:ae:e0:19:4f:da:dc: 81:d3:22:e1:f6:00:fc:0d:5b:09:b3:35:af:29:19: 48:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:01:F7:7A:18:A0:69:33:DF:D5:94:9F:0F:6A:C7:22:84:B2:3F:5A X509v3 Authority Key Identifier: keyid:9B:B4:B9:8E:35:9B:4C:92:C3:11:83:FB:F7:49:23:8E:6B:6F:08:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m7S5jjWbTJLDEYP790kjjmtvCMI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/c9d4bb-3135-4a9c-b371-bb0d04a27727/1/m7S5jjWbTJLDEYP790kjjmtvCMI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/c9d4bb-3135-4a9c-b371-bb0d04a27727/1/m7S5jjWbTJLDEYP790kjjmtvCMI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:b5:2c:26:60:53:e5:6d:41:c2:00:0f:e0:16:78:f9:8e:c1: 5c:78:33:cd:a7:71:23:f1:12:a0:34:61:d4:6e:82:a1:e3:4e: 2a:e2:bc:8f:ce:c2:67:5c:3e:5c:1f:ba:70:bb:d7:80:9c:fd: 10:aa:d7:b8:c0:38:a5:93:1b:6e:b5:a3:0f:c9:17:cc:4d:1d: da:8c:29:56:d7:35:76:fb:d6:3f:72:a9:07:16:f8:23:09:08: 20:9c:95:3a:e3:bb:ec:ef:49:c6:04:c2:95:c8:bc:30:b5:35: 90:6a:98:61:41:98:4d:90:db:34:2f:ef:5b:4f:f9:83:9c:19: 6b:7c:dc:33:cb:71:c9:94:c7:87:d8:b4:07:5a:d3:22:ae:0f: ef:31:77:87:77:85:ce:f5:5e:fb:f1:2d:a5:f2:32:bf:fc:55: 42:e1:89:92:a9:a0:83:59:8c:a9:d1:be:04:74:66:ab:f1:3d: 9f:2d:e9:49:03:24:0a:43:b4:3e:e0:24:2c:ed:d4:0e:4f:f6: 51:69:10:04:02:3c:d2:49:f1:48:3a:fd:e6:9d:2b:a9:cd:27: 60:4c:c4:f3:91:23:10:8e:55:92:33:45:d6:7d:1b:3c:c4:12: f8:ab:7d:9c:52:45:57:d2:03:8f:85:b1:33:96:2d:20:a9:54: 4f:d6:f4:7e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0+1CHrGbQrOaUey8mVq4CMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDliYjRiOThlMzU5YjRjOTJjMzExODNmYmY3NDkyMzhlNmI2 ZjA4YzIwHhcNMjUxMjE5MDUwMDQzWhcNMjUxMjIwMDUwMDQzWjAzMTEwLwYDVQQD EygwODAxZjc3YTE4YTA2OTMzZGZkNTk0OWYwZjZhYzcyMjg0YjIzZjVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkkjiCSmQtWvE7K9LlEQMnm2W/oqW s9sYWYYK+GTA9K6pDAeHzsrty8Bi3HY5cUVVQ2SxkdfZdb8i2mFJRUDBTQOZQ+o9 FydIfulOwDq+DW3B5bF0i2SLG9wpo0eKzaBTb7RYafpNnE84cY5IUJ+jZmhVbggb 8PjM9ko1RaQiI0Vcnbwe7bJp+K0K2G6ZYUeEOJ5bHHKHtFJyLrhWuuWvu9nsA0E7 RTmndW6EPdoeWcJkdBI9In9YK7g1j64wiB91d8R6hgr5ZeVueLHmfM2SjIny182d R55xHtqyj3W44emVqQ1cSiu8opCu4BlP2tyB0yLh9gD8DVsJszWvKRlIPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAgB93oYoGkz39WUnw9qxyKEsj9aMB8GA1UdIwQY MBaAFJu0uY41m0ySwxGD+/dJI45rbwjCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbTdTNWpqV2JUSkxERVlQNzkwa2pqbXR2Q01JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi9jOWQ0YmItMzEzNS00YTljLWIzNzEt YmIwZDA0YTI3NzI3LzEvbTdTNWpqV2JUSkxERVlQNzkwa2pqbXR2Q01JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi9jOWQ0YmItMzEzNS00YTljLWIzNzEtYmIwZDA0YTI3NzI3 LzEvbTdTNWpqV2JUSkxERVlQNzkwa2pqbXR2Q01JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm7UsJmBT 5W1BwgAP4BZ4+Y7BXHgzzadxI/ESoDRh1G6CoeNOKuK8j87CZ1w+XB+6cLvXgJz9 EKrXuMA4pZMbbrWjD8kXzE0d2owpVtc1dvvWP3KpBxb4IwkIIJyVOuO77O9JxgTC lci8MLU1kGqYYUGYTZDbNC/vW0/5g5wZa3zcM8txyZTHh9i0B1rTIq4P7zF3h3eF zvVe+/EtpfIyv/xVQuGJkqmgg1mMqdG+BHRmq/E9ny3pSQMkCkO0PuAkLO3UDk/2 UWkQBAI80knxSDr95p0rqc0nYEzE85EjEI5VkjNF1n0bPMQS+Kt9nFJFV9IDj4Wx M5YtIKlUT9b0fg== -----END CERTIFICATE-----Generated at Fri Dec 19 10:38:15 2025 by rpki-client