This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft File: MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft (raw, json) Hash identifier: OlgAp3fFHQvAE3fuYXnDdTC2Hmiv7TZFuEaiMU1prRQ= Subject key identifier: 78:3A:0A:59:AD:F2:7B:5D:96:4D:6F:91:8A:A6:DF:F3:D3:15:FC:E3 Authority key identifier: 32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3 Certificate issuer: /CN=3263787fd0f94b37813eef16bc8137423ee3fef3 Certificate serial: 019B3B6B55459FC37A6681293C8BCF27C298 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft Manifest number: 17CD Signing time: Sat 20 Dec 2025 11:00:48 +0000 Manifest this update: Sat 20 Dec 2025 11:00:48 +0000 Manifest next update: Sun 21 Dec 2025 11:00:48 +0000 Files and hashes: 1: 3NU_jczsTwLqoaX-lCYDIDK-xK4.roa (hash: 8Hfke+9D8re50lqI3eIcpPcn6OSj6q+EHma6Ds52QuY=) 2: 6EzBdLMFhAHXtGoqOgo2hhkKxsE.roa (hash: 6BZyqWO3dBV2T/D/HQLLEXL8wtnsNJxMwYYKl/DQzgM=) 3: GiScTXLFDlSkFEEGri5P1vz6Sho.roa (hash: uMhctxLibeY+IpaWynfmNEbttAIjD24+B1IvRH31TQ8=) 4: MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl (hash: uGxsVcYOqjOA7AHLZRZuRJLqBz0IJ0jlgBv8moetXco=) 5: VqhETU_HM_ISXJaoVb2Q85SiUFE.roa (hash: 4DN0T+VOF2hHbD9YtpgtWXAPNydWYghyCai8wce0SKM=) 6: Zq_slRbeIbakzkyhFvP-PgYKmew.roa (hash: cl2sEp9IdvvNJyOdRm/p3gV/wJJc6+uba9k8NqDhtbQ=) 7: nb4wfQ7FzEgUQNDsTQT1rI6C1P0.roa (hash: XbtW2pGYp04EBEIcviRAYkU8I+ewGGN4xhpRClBs10Q=) 8: pZHCAjsk0quEKKapLoBOB8SLyYU.roa (hash: PkFYd+Uy2SwEBC/xRtpP2pJp1/vhJ01S2mfX0UJzqmk=) 9: q7qxZUlMexCCPUrlLyE18hEbtAo.roa (hash: 0VcOLAUsaFOJsTncLeRopLhldfQWg1DdOHrV2K+AOgQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:6b:55:45:9f:c3:7a:66:81:29:3c:8b:cf:27:c2:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3263787fd0f94b37813eef16bc8137423ee3fef3 Validity Not Before: Dec 20 11:00:48 2025 GMT Not After : Dec 21 11:00:48 2025 GMT Subject: CN=783a0a59adf27b5d964d6f918aa6dff3d315fce3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:e6:d0:cb:92:e6:8c:0f:29:11:ad:61:01:9e: 74:3e:2c:33:fb:6d:98:29:41:0d:cd:f1:1b:1b:71: 53:54:ea:56:5c:4d:9b:50:05:b3:c8:e5:7d:be:36: 9b:19:fa:0c:88:b5:0f:c1:52:31:a5:ec:ba:5f:d4: a7:69:ed:73:8c:f3:21:b0:01:be:52:d6:28:16:07: ad:6c:7f:b4:06:7b:9c:4b:3f:67:8b:74:dc:30:6b: 20:32:fe:49:69:22:71:bd:59:35:f3:cb:74:a3:e3: 36:59:a3:41:9e:5d:6d:38:48:8f:4e:e5:c6:aa:d5: 4e:a6:ef:5b:de:aa:a3:16:e8:37:75:b7:24:1e:17: f5:2f:7c:a8:49:f7:e5:3c:bc:92:41:f4:c8:35:e5: 11:e5:31:9f:33:e1:a1:53:81:76:a0:a4:0b:1f:74: 5f:c3:c7:84:68:b7:35:07:e7:7a:7f:35:03:04:d4: 0d:0c:32:b1:70:26:2b:4b:02:61:0b:f8:09:80:9f: 09:76:d4:18:45:e5:e0:35:a4:9a:54:0e:55:35:e0: 17:4d:21:c1:87:ae:50:bb:9d:e3:9b:4f:9b:ec:11: 67:91:43:64:14:a0:3f:04:ac:8c:72:82:06:b9:13: 79:f0:e0:01:f5:85:f1:ba:36:f0:09:3c:ac:b8:9b: ea:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:3A:0A:59:AD:F2:7B:5D:96:4D:6F:91:8A:A6:DF:F3:D3:15:FC:E3 X509v3 Authority Key Identifier: keyid:32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:fc:31:c5:5a:1c:ff:c8:57:b8:25:7f:89:15:94:48:09:bd: 04:8c:70:84:0f:2e:57:ed:2d:82:ae:e1:2b:f4:96:6b:c0:8e: 45:9b:35:27:9f:2f:0f:7b:5d:34:ab:70:05:4d:2e:34:6d:fd: 73:52:cc:95:a9:d8:ec:9d:67:3a:8f:bf:f9:6b:95:a9:91:38: 15:80:52:44:b4:be:5b:27:ab:fd:da:31:49:00:08:d6:e9:59: d5:88:51:bc:cf:dc:8f:b3:0a:be:f9:b3:98:28:a7:54:52:18: 88:92:38:4a:aa:e7:11:3d:7e:b9:29:02:da:0f:33:4b:51:1a: 7d:55:5e:eb:cb:3d:d1:3d:45:ca:3b:1a:4d:a0:dd:a1:d9:a5: 65:92:41:40:f7:7a:d6:68:93:1a:fe:0c:5a:18:7c:09:61:f9: d8:36:31:eb:82:1d:fd:25:4c:59:8c:85:6c:11:79:e3:d0:c6: 28:6d:52:34:b9:68:35:32:96:77:04:d6:d0:92:05:85:dc:9c: 6b:c8:4e:b9:12:40:07:0b:a7:b5:c7:e7:6f:cc:64:02:07:b6: 60:ef:ea:fd:a8:43:30:85:7f:d3:e9:b1:de:20:e7:06:4e:35: d8:23:b9:46:0a:a0:29:3e:00:f6:c7:13:7b:73:78:9a:43:68: d6:64:94:57 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7a1VFn8N6ZoEpPIvPJ8KYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyNjM3ODdmZDBmOTRiMzc4MTNlZWYxNmJjODEzNzQyM2Vl M2ZlZjMwHhcNMjUxMjIwMTEwMDQ4WhcNMjUxMjIxMTEwMDQ4WjAzMTEwLwYDVQQD Eyg3ODNhMGE1OWFkZjI3YjVkOTY0ZDZmOTE4YWE2ZGZmM2QzMTVmY2UzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu+bQy5LmjA8pEa1hAZ50Piwz+22Y KUENzfEbG3FTVOpWXE2bUAWzyOV9vjabGfoMiLUPwVIxpey6X9Snae1zjPMhsAG+ UtYoFgetbH+0BnucSz9ni3TcMGsgMv5JaSJxvVk188t0o+M2WaNBnl1tOEiPTuXG qtVOpu9b3qqjFug3dbckHhf1L3yoSfflPLySQfTINeUR5TGfM+GhU4F2oKQLH3Rf w8eEaLc1B+d6fzUDBNQNDDKxcCYrSwJhC/gJgJ8JdtQYReXgNaSaVA5VNeAXTSHB h65Qu53jm0+b7BFnkUNkFKA/BKyMcoIGuRN58OAB9YXxujbwCTysuJvqiQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHg6Clmt8ntdlk1vkYqm3/PTFfzjMB8GA1UdIwQY MBaAFDJjeH/Q+Us3gT7vFryBN0I+4/7zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS83NzAzZWYtMjQyMi00MzdjLWI5M2Qt NTk1ZTBiZjVjNjEzLzEvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS83NzAzZWYtMjQyMi00MzdjLWI5M2QtNTk1ZTBiZjVjNjEz LzEvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA/wxxVoc /8hXuCV/iRWUSAm9BIxwhA8uV+0tgq7hK/SWa8CORZs1J58vD3tdNKtwBU0uNG39 c1LMlanY7J1nOo+/+WuVqZE4FYBSRLS+Wyer/doxSQAI1ulZ1YhRvM/cj7MKvvmz mCinVFIYiJI4SqrnET1+uSkC2g8zS1EafVVe68s90T1FyjsaTaDdodmlZZJBQPd6 1miTGv4MWhh8CWH52DYx64Id/SVMWYyFbBF549DGKG1SNLloNTKWdwTW0JIFhdyc a8hOuRJABwuntcfnb8xkAge2YO/q/ahDMIV/0+mx3iDnBk412CO5RgqgKT4A9scT e3N4mkNo1mSUVw== -----END CERTIFICATE-----Generated at Sat Dec 20 13:18:34 2025 by rpki-client