This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft File: MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft (raw, json) Hash identifier: QtQQYFRAu68/REo3CPjQ5asVYcQcw2B8F9jABDFlz/w= Subject key identifier: EE:54:4B:02:1F:3D:E7:9F:DD:A5:7B:66:74:ED:43:DD:8C:B1:0C:93 Authority key identifier: 32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3 Certificate issuer: /CN=3263787fd0f94b37813eef16bc8137423ee3fef3 Certificate serial: 019B63F9ABFA9A612179E658D2C9FFABBB77 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft Manifest number: 17E2 Signing time: Sun 28 Dec 2025 08:01:05 +0000 Manifest this update: Sun 28 Dec 2025 08:01:05 +0000 Manifest next update: Mon 29 Dec 2025 08:01:05 +0000 Files and hashes: 1: 3NU_jczsTwLqoaX-lCYDIDK-xK4.roa (hash: 8Hfke+9D8re50lqI3eIcpPcn6OSj6q+EHma6Ds52QuY=) 2: 6EzBdLMFhAHXtGoqOgo2hhkKxsE.roa (hash: 6BZyqWO3dBV2T/D/HQLLEXL8wtnsNJxMwYYKl/DQzgM=) 3: GiScTXLFDlSkFEEGri5P1vz6Sho.roa (hash: uMhctxLibeY+IpaWynfmNEbttAIjD24+B1IvRH31TQ8=) 4: MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl (hash: r3l6Hq1XZ1H2HDtvQRvqzcBB6jmZ3laA5JZ+9ywKEjg=) 5: VqhETU_HM_ISXJaoVb2Q85SiUFE.roa (hash: 4DN0T+VOF2hHbD9YtpgtWXAPNydWYghyCai8wce0SKM=) 6: Zq_slRbeIbakzkyhFvP-PgYKmew.roa (hash: cl2sEp9IdvvNJyOdRm/p3gV/wJJc6+uba9k8NqDhtbQ=) 7: nb4wfQ7FzEgUQNDsTQT1rI6C1P0.roa (hash: XbtW2pGYp04EBEIcviRAYkU8I+ewGGN4xhpRClBs10Q=) 8: pZHCAjsk0quEKKapLoBOB8SLyYU.roa (hash: PkFYd+Uy2SwEBC/xRtpP2pJp1/vhJ01S2mfX0UJzqmk=) 9: q7qxZUlMexCCPUrlLyE18hEbtAo.roa (hash: 0VcOLAUsaFOJsTncLeRopLhldfQWg1DdOHrV2K+AOgQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 03:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:63:f9:ab:fa:9a:61:21:79:e6:58:d2:c9:ff:ab:bb:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3263787fd0f94b37813eef16bc8137423ee3fef3 Validity Not Before: Dec 28 08:01:05 2025 GMT Not After : Dec 29 08:01:05 2025 GMT Subject: CN=ee544b021f3de79fdda57b6674ed43dd8cb10c93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:36:49:ff:cb:ed:37:0f:6e:de:c9:7c:80:d3: 08:44:1e:22:e5:a2:c1:c2:51:fc:d3:10:6f:6b:0c: 19:e3:aa:b6:6e:a2:d4:9d:3b:cc:b5:fb:60:15:92: ba:51:aa:5a:52:2e:d6:8f:75:aa:30:fc:e2:f7:d3: 3b:fa:ef:13:a0:ad:29:58:65:2a:80:88:48:c2:0e: a5:0e:3d:ed:d2:d5:eb:ec:47:dc:13:be:00:03:66: 6a:8c:10:d6:9e:2d:da:bf:4c:12:2d:3b:87:57:8e: 77:a7:86:e1:9d:61:69:a0:c3:7c:6e:e5:1a:32:28: 9c:43:ff:50:36:c7:89:a8:f0:45:72:b6:51:68:c6: 3a:79:35:5c:a3:57:7e:58:21:3d:3c:3d:e2:eb:72: 1e:7a:2a:97:21:f6:13:94:5f:1c:49:8c:cb:ce:2e: 21:bc:c1:d0:d6:f0:fc:68:54:d3:1b:17:3c:ed:48: e8:07:a5:31:b5:5f:4a:fc:64:78:2e:89:70:78:51: 96:fb:45:61:ca:28:9e:a9:92:ca:9a:dc:fb:83:4c: 79:2e:f0:6e:0f:e5:57:d2:38:30:1d:41:4d:9f:d5: 11:73:ac:2a:31:0c:6c:0f:42:f7:2b:16:c5:7f:fe: e6:a0:80:e6:b5:19:47:91:ab:b1:84:63:42:05:73: 38:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:54:4B:02:1F:3D:E7:9F:DD:A5:7B:66:74:ED:43:DD:8C:B1:0C:93 X509v3 Authority Key Identifier: keyid:32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:cc:ac:a1:30:82:5f:b8:b3:79:30:b8:e4:34:29:37:f5:dd: 7d:f5:18:a0:4f:99:92:ca:1b:e1:d5:55:16:51:5e:5e:25:53: 40:80:7e:bc:55:b8:94:4f:fc:24:b2:2d:c4:6b:4c:99:03:31: d1:19:2f:b2:73:49:51:f0:38:eb:09:57:52:b1:1a:24:25:48: ff:76:e2:33:01:2e:4d:55:b2:f3:a7:88:f9:a5:73:23:cd:c9: a4:2d:b6:2d:f1:c4:18:06:2a:a7:ca:9e:5d:b7:16:de:db:3b: ed:8c:ce:1a:3a:96:32:4e:2a:f6:9b:33:6b:97:6a:5c:58:dd: 02:e8:4f:96:33:a5:d6:66:68:ce:57:9b:8b:51:f8:76:c6:2e: cd:a6:9c:28:ea:62:9a:b0:66:4f:a3:85:38:ae:28:cc:9c:23: ef:5b:49:58:85:05:a3:84:f3:13:9a:6f:60:e9:8b:e4:76:2b: 2d:6d:7c:d6:fd:34:d9:04:e7:fe:37:6d:00:68:69:ff:59:d1: f0:1d:78:a9:65:90:89:a7:cc:24:b5:b8:d6:5f:c7:b1:e8:fd: 61:81:fc:cb:bf:0d:bb:6a:11:75:ec:4f:30:27:83:0b:fb:e4: 6c:e4:8b:9c:3a:d9:ea:cb:03:33:85:32:74:fe:f2:a4:f4:ed: 31:74:f7:cd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtj+av6mmEheeZY0sn/q7t3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyNjM3ODdmZDBmOTRiMzc4MTNlZWYxNmJjODEzNzQyM2Vl M2ZlZjMwHhcNMjUxMjI4MDgwMTA1WhcNMjUxMjI5MDgwMTA1WjAzMTEwLwYDVQQD EyhlZTU0NGIwMjFmM2RlNzlmZGRhNTdiNjY3NGVkNDNkZDhjYjEwYzkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkDZJ/8vtNw9u3sl8gNMIRB4i5aLB wlH80xBvawwZ46q2bqLUnTvMtftgFZK6UapaUi7Wj3WqMPzi99M7+u8ToK0pWGUq gIhIwg6lDj3t0tXr7EfcE74AA2ZqjBDWni3av0wSLTuHV453p4bhnWFpoMN8buUa MiicQ/9QNseJqPBFcrZRaMY6eTVco1d+WCE9PD3i63IeeiqXIfYTlF8cSYzLzi4h vMHQ1vD8aFTTGxc87UjoB6UxtV9K/GR4LolweFGW+0VhyiieqZLKmtz7g0x5LvBu D+VX0jgwHUFNn9URc6wqMQxsD0L3KxbFf/7moIDmtRlHkauxhGNCBXM43wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO5USwIfPeef3aV7ZnTtQ92MsQyTMB8GA1UdIwQY MBaAFDJjeH/Q+Us3gT7vFryBN0I+4/7zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS83NzAzZWYtMjQyMi00MzdjLWI5M2Qt NTk1ZTBiZjVjNjEzLzEvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS83NzAzZWYtMjQyMi00MzdjLWI5M2QtNTk1ZTBiZjVjNjEz LzEvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASMysoTCC X7izeTC45DQpN/XdffUYoE+Zksob4dVVFlFeXiVTQIB+vFW4lE/8JLItxGtMmQMx 0RkvsnNJUfA46wlXUrEaJCVI/3biMwEuTVWy86eI+aVzI83JpC22LfHEGAYqp8qe XbcW3ts77YzOGjqWMk4q9psza5dqXFjdAuhPljOl1mZozlebi1H4dsYuzaacKOpi mrBmT6OFOK4ozJwj71tJWIUFo4TzE5pvYOmL5HYrLW181v002QTn/jdtAGhp/1nR 8B14qWWQiafMJLW41l/Hsej9YYH8y78Nu2oRdexPMCeDC/vkbOSLnDrZ6ssDM4Uy dP7ypPTtMXT3zQ== -----END CERTIFICATE-----Generated at Sun Dec 28 13:03:41 2025 by rpki-client