This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft File: MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft (raw, json) Hash identifier: R5yugrZRvObU1fee6tfuJ4KuIPzN6+DqaHFYctsBLPM= Subject key identifier: 8F:25:77:9C:5C:2F:3C:18:30:E7:F6:0E:7E:24:F9:65:A6:B4:85:65 Authority key identifier: 32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3 Certificate issuer: /CN=3263787fd0f94b37813eef16bc8137423ee3fef3 Certificate serial: 019B48F04766AC9095C9E2EACE187370A9BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft Manifest number: 17D4 Signing time: Tue 23 Dec 2025 02:01:05 +0000 Manifest this update: Tue 23 Dec 2025 02:01:05 +0000 Manifest next update: Wed 24 Dec 2025 02:01:05 +0000 Files and hashes: 1: 3NU_jczsTwLqoaX-lCYDIDK-xK4.roa (hash: 8Hfke+9D8re50lqI3eIcpPcn6OSj6q+EHma6Ds52QuY=) 2: 6EzBdLMFhAHXtGoqOgo2hhkKxsE.roa (hash: 6BZyqWO3dBV2T/D/HQLLEXL8wtnsNJxMwYYKl/DQzgM=) 3: GiScTXLFDlSkFEEGri5P1vz6Sho.roa (hash: uMhctxLibeY+IpaWynfmNEbttAIjD24+B1IvRH31TQ8=) 4: MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl (hash: 2srSu/am4XFnWVa/iYlAUtcVZlPaXAViPCVLouNlhcY=) 5: VqhETU_HM_ISXJaoVb2Q85SiUFE.roa (hash: 4DN0T+VOF2hHbD9YtpgtWXAPNydWYghyCai8wce0SKM=) 6: Zq_slRbeIbakzkyhFvP-PgYKmew.roa (hash: cl2sEp9IdvvNJyOdRm/p3gV/wJJc6+uba9k8NqDhtbQ=) 7: nb4wfQ7FzEgUQNDsTQT1rI6C1P0.roa (hash: XbtW2pGYp04EBEIcviRAYkU8I+ewGGN4xhpRClBs10Q=) 8: pZHCAjsk0quEKKapLoBOB8SLyYU.roa (hash: PkFYd+Uy2SwEBC/xRtpP2pJp1/vhJ01S2mfX0UJzqmk=) 9: q7qxZUlMexCCPUrlLyE18hEbtAo.roa (hash: 0VcOLAUsaFOJsTncLeRopLhldfQWg1DdOHrV2K+AOgQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 23:03:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:48:f0:47:66:ac:90:95:c9:e2:ea:ce:18:73:70:a9:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3263787fd0f94b37813eef16bc8137423ee3fef3 Validity Not Before: Dec 23 02:01:05 2025 GMT Not After : Dec 24 02:01:05 2025 GMT Subject: CN=8f25779c5c2f3c1830e7f60e7e24f965a6b48565 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:0f:b0:78:fd:da:83:ab:96:a4:74:e3:c9:7f: 20:c9:27:16:e1:e7:3d:e1:2e:0e:12:3b:dc:23:ea: 75:ca:b5:a9:c6:bf:92:32:cb:c7:0f:67:5e:98:74: 74:e5:9b:51:68:76:20:9f:8d:3a:c2:5b:fb:85:67: 10:ff:1a:cc:09:97:d4:66:72:b9:1c:e5:49:c7:87: 91:8d:e6:8e:de:21:cf:c1:2c:e4:4f:57:8a:a8:af: 2c:da:e2:bc:d9:7a:b0:a7:2c:cc:9d:a7:32:21:61: 74:16:2c:da:d7:ce:5b:17:f1:49:ad:2a:ce:b0:83: 9a:7b:c7:e1:f4:a1:ea:12:ae:78:7e:89:a9:e6:76: 84:ff:97:28:7a:db:5a:04:08:17:69:5c:7d:45:d2: d2:1f:b4:45:99:ee:77:37:86:71:f5:49:30:7b:f5: 3a:8b:ba:c2:c4:41:7b:70:70:aa:dc:ac:e7:ce:0f: 28:3a:46:7f:85:7d:2a:61:6a:87:37:88:3f:7f:39: 28:d8:e0:1e:5f:93:51:81:5a:09:11:17:a3:7a:70: 54:77:dd:c3:a4:26:f1:e2:01:b9:71:ac:5c:af:25: 6c:dc:8e:98:9a:40:e1:58:51:de:0b:05:4f:d2:08: f5:bd:88:46:c6:82:12:72:d8:6b:dd:d8:39:53:c6: 18:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:25:77:9C:5C:2F:3C:18:30:E7:F6:0E:7E:24:F9:65:A6:B4:85:65 X509v3 Authority Key Identifier: keyid:32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:20:7d:6b:a7:5a:0c:6c:92:5b:a3:f4:b4:fb:2b:5f:e5:83: 0e:9c:f3:0d:7c:55:00:07:aa:59:61:4e:1d:bb:26:fb:d5:a4: b7:75:ad:46:c0:f7:b8:9d:51:76:8d:d5:15:01:88:01:11:a1: f7:83:3a:fa:2c:b3:1f:83:1a:64:62:0d:42:a5:4d:4c:f2:33: 10:92:0f:c5:05:5c:26:2d:d9:b0:c6:26:b6:6b:bd:43:03:92: 2f:b4:e7:68:7c:0a:0e:7b:26:c9:90:cb:2c:1a:4f:0c:7e:da: 8b:8e:3b:58:f0:a4:7e:bf:bc:79:1f:60:38:e9:07:9a:92:49: ae:d3:75:a6:9e:8f:f5:b6:df:3d:7e:f4:c7:36:a3:4b:5c:b6: 5f:85:b5:ee:c3:bd:a0:87:ca:11:16:30:25:b9:14:0c:3d:62: 9f:74:cd:57:ed:29:a4:08:28:f4:39:40:fb:c7:88:9e:58:a1: 22:fc:64:c4:7a:92:5a:7e:82:b6:58:09:00:59:31:00:db:78: 79:fe:97:d8:12:8f:d7:e9:20:87:5e:e2:87:d6:2d:0e:7b:1d: 28:4c:72:2e:bd:dd:62:13:a8:d2:4f:37:8d:07:77:3c:6c:d8: d9:89:31:75:1f:13:60:94:85:64:fa:e0:e7:19:bf:55:cb:92: bb:5e:69:6e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtI8EdmrJCVyeLqzhhzcKm8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyNjM3ODdmZDBmOTRiMzc4MTNlZWYxNmJjODEzNzQyM2Vl M2ZlZjMwHhcNMjUxMjIzMDIwMTA1WhcNMjUxMjI0MDIwMTA1WjAzMTEwLwYDVQQD Eyg4ZjI1Nzc5YzVjMmYzYzE4MzBlN2Y2MGU3ZTI0Zjk2NWE2YjQ4NTY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlQ+weP3ag6uWpHTjyX8gyScW4ec9 4S4OEjvcI+p1yrWpxr+SMsvHD2demHR05ZtRaHYgn406wlv7hWcQ/xrMCZfUZnK5 HOVJx4eRjeaO3iHPwSzkT1eKqK8s2uK82XqwpyzMnacyIWF0Fiza185bF/FJrSrO sIOae8fh9KHqEq54fomp5naE/5coettaBAgXaVx9RdLSH7RFme53N4Zx9Ukwe/U6 i7rCxEF7cHCq3Kznzg8oOkZ/hX0qYWqHN4g/fzko2OAeX5NRgVoJERejenBUd93D pCbx4gG5caxcryVs3I6YmkDhWFHeCwVP0gj1vYhGxoIScthr3dg5U8YYHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI8ld5xcLzwYMOf2Dn4k+WWmtIVlMB8GA1UdIwQY MBaAFDJjeH/Q+Us3gT7vFryBN0I+4/7zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS83NzAzZWYtMjQyMi00MzdjLWI5M2Qt NTk1ZTBiZjVjNjEzLzEvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS83NzAzZWYtMjQyMi00MzdjLWI5M2QtNTk1ZTBiZjVjNjEz LzEvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaSB9a6da DGySW6P0tPsrX+WDDpzzDXxVAAeqWWFOHbsm+9Wkt3WtRsD3uJ1Rdo3VFQGIARGh 94M6+iyzH4MaZGINQqVNTPIzEJIPxQVcJi3ZsMYmtmu9QwOSL7TnaHwKDnsmyZDL LBpPDH7ai447WPCkfr+8eR9gOOkHmpJJrtN1pp6P9bbfPX70xzajS1y2X4W17sO9 oIfKERYwJbkUDD1in3TNV+0ppAgo9DlA+8eInlihIvxkxHqSWn6CtlgJAFkxANt4 ef6X2BKP1+kgh17ih9YtDnsdKExyLr3dYhOo0k83jQd3PGzY2YkxdR8TYJSFZPrg 5xm/VcuSu15pbg== -----END CERTIFICATE-----Generated at Tue Dec 23 08:05:25 2025 by rpki-client