This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft File: MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft (raw, json) Hash identifier: kUmgSmn3ufzf0BX44hRtTgeFw+hWIOFaWcO9inU4YKM= Subject key identifier: 7C:C1:04:45:60:F1:BB:D2:08:EE:64:05:D5:F6:77:37:D5:FC:7B:64 Authority key identifier: 32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3 Certificate issuer: /CN=3263787fd0f94b37813eef16bc8137423ee3fef3 Certificate serial: 019AB5BC77115D81F3727287A948B4D9346A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft Manifest number: 1786 Signing time: Mon 24 Nov 2025 12:00:18 +0000 Manifest this update: Mon 24 Nov 2025 12:00:18 +0000 Manifest next update: Tue 25 Nov 2025 12:00:18 +0000 Files and hashes: 1: 3NU_jczsTwLqoaX-lCYDIDK-xK4.roa (hash: 8Hfke+9D8re50lqI3eIcpPcn6OSj6q+EHma6Ds52QuY=) 2: 6EzBdLMFhAHXtGoqOgo2hhkKxsE.roa (hash: 6BZyqWO3dBV2T/D/HQLLEXL8wtnsNJxMwYYKl/DQzgM=) 3: 6ef47TXoBdfjKnlsNsow8DBixKo.roa (hash: CJVWo8/zfulxwmsfO0I8Hpt8eJudz4hqVHD23gptH10=) 4: GiScTXLFDlSkFEEGri5P1vz6Sho.roa (hash: uMhctxLibeY+IpaWynfmNEbttAIjD24+B1IvRH31TQ8=) 5: MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl (hash: 0sq8aAtD6nc5fAvbeDVkz4dK3UFIc4HpMpPtZoRjNtU=) 6: NTZZF4vSmOFfwF5M5O7eO7oF9Vg.roa (hash: FRVNS4KDdnoHo7IUiUNOad62U9M1nGPEQFofB/xcUyw=) 7: Oi1LQnm4lsa7_1hR1J20jJ6vxNI.roa (hash: SY2CzV8LXx9B2pkUZksUiYNXDfeS5dNBeKSh1IfycAI=) 8: ff_a8SBBXF3be68FdU0vfTPnh5s.roa (hash: bW2UtMneC9Mg6cMlRlCRXeNJHB26wQRTTLDsoAfILRU=) 9: nb4wfQ7FzEgUQNDsTQT1rI6C1P0.roa (hash: XbtW2pGYp04EBEIcviRAYkU8I+ewGGN4xhpRClBs10Q=) 10: pZHCAjsk0quEKKapLoBOB8SLyYU.roa (hash: PkFYd+Uy2SwEBC/xRtpP2pJp1/vhJ01S2mfX0UJzqmk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 25 Nov 2025 09:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:b5:bc:77:11:5d:81:f3:72:72:87:a9:48:b4:d9:34:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3263787fd0f94b37813eef16bc8137423ee3fef3 Validity Not Before: Nov 24 12:00:18 2025 GMT Not After : Nov 25 12:00:18 2025 GMT Subject: CN=7cc1044560f1bbd208ee6405d5f67737d5fc7b64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:75:dc:48:4f:6d:01:a8:67:2d:c8:f8:b7:f8: 27:1b:75:ea:e6:27:3a:65:24:6e:19:d8:2e:d1:c0: 02:1f:e7:86:32:ff:44:b3:34:3b:f5:92:a1:cf:d7: 39:2e:10:a1:70:9a:95:2e:8e:a5:51:bb:41:36:53: 57:5b:5b:39:f8:52:2b:c5:62:07:ad:0b:82:14:e1: df:36:19:08:2f:c5:21:8c:ee:f6:7b:53:bd:94:02: 48:9a:d6:21:c5:d3:08:fd:bf:7f:b2:a5:eb:79:9e: fa:f5:d8:a5:40:c3:24:6f:0b:a2:c7:44:9e:20:ad: e2:aa:ea:29:d4:f6:bf:80:11:62:08:9b:99:8b:d4: 3a:55:7f:84:a8:c9:06:90:a1:4c:9d:6f:3f:70:d9: 18:10:04:92:3c:98:85:dc:00:cc:67:5c:2c:61:0c: 9d:a7:2f:d3:e7:c2:d8:06:9c:b0:f9:25:93:ff:9c: b6:39:14:99:d7:07:be:e3:40:e0:8e:3b:7c:f6:e1: e0:1d:7f:54:f9:6b:fb:77:79:c4:50:20:01:5e:aa: b7:9a:82:ea:79:1b:37:a7:12:5d:bf:19:a3:97:6b: 6f:99:73:b7:20:12:48:4e:4e:79:72:38:b9:fe:e9: 67:a5:ab:d6:1d:63:de:7b:7f:da:5f:5b:9e:66:80: d8:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:C1:04:45:60:F1:BB:D2:08:EE:64:05:D5:F6:77:37:D5:FC:7B:64 X509v3 Authority Key Identifier: keyid:32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:85:ca:4b:8f:96:73:e8:50:ab:6e:ef:aa:43:4b:8a:d2:8e: 91:ae:64:b8:e5:e1:f1:96:41:c6:2d:ca:3c:8a:3d:a5:35:9f: f7:58:b7:dc:f1:b7:1d:80:47:7c:23:63:85:82:4a:66:ed:6b: 9f:e9:ab:57:fe:27:b0:0c:dd:69:cc:3f:f8:29:b2:ee:70:46: 24:1e:2f:0a:bf:3c:cc:70:71:ca:9d:29:24:6c:7f:af:d9:33: b6:eb:63:6a:05:da:24:1f:c1:3e:95:44:9a:73:e8:92:5b:c9: cf:03:ed:3d:10:de:d0:4c:43:3f:4a:b9:70:9a:ff:b4:6a:59: b9:08:9f:c0:c9:f5:ff:06:7b:d0:4c:ff:a7:fd:d2:c3:3b:e6: 6a:eb:6c:2d:89:2d:bd:f7:ff:5e:60:10:01:e1:77:76:d4:0a: f5:6e:98:64:bb:50:33:26:f3:a9:7d:dd:eb:3d:66:25:e0:b3: 91:50:d5:5f:82:a4:2a:c6:d3:4a:f0:b3:61:d8:ac:a0:61:11: 5e:65:cf:76:35:c3:81:e7:53:47:e0:b5:51:7f:34:ed:9f:45: 85:14:b8:74:00:92:0b:4f:7b:9a:99:e3:0e:6c:2c:1d:b0:42: f4:f8:b8:fb:cf:10:39:6c:4d:85:36:fb:8b:be:35:f3:1e:ba: 63:a7:27:08 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZq1vHcRXYHzcnKHqUi02TRqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyNjM3ODdmZDBmOTRiMzc4MTNlZWYxNmJjODEzNzQyM2Vl M2ZlZjMwHhcNMjUxMTI0MTIwMDE4WhcNMjUxMTI1MTIwMDE4WjAzMTEwLwYDVQQD Eyg3Y2MxMDQ0NTYwZjFiYmQyMDhlZTY0MDVkNWY2NzczN2Q1ZmM3YjY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvHXcSE9tAahnLcj4t/gnG3Xq5ic6 ZSRuGdgu0cACH+eGMv9EszQ79ZKhz9c5LhChcJqVLo6lUbtBNlNXW1s5+FIrxWIH rQuCFOHfNhkIL8UhjO72e1O9lAJImtYhxdMI/b9/sqXreZ769dilQMMkbwuix0Se IK3iquop1Pa/gBFiCJuZi9Q6VX+EqMkGkKFMnW8/cNkYEASSPJiF3ADMZ1wsYQyd py/T58LYBpyw+SWT/5y2ORSZ1we+40Dgjjt89uHgHX9U+Wv7d3nEUCABXqq3moLq eRs3pxJdvxmjl2tvmXO3IBJITk55cji5/ulnpavWHWPee3/aX1ueZoDYqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHzBBEVg8bvSCO5kBdX2dzfV/HtkMB8GA1UdIwQY MBaAFDJjeH/Q+Us3gT7vFryBN0I+4/7zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS83NzAzZWYtMjQyMi00MzdjLWI5M2Qt NTk1ZTBiZjVjNjEzLzEvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS83NzAzZWYtMjQyMi00MzdjLWI5M2QtNTk1ZTBiZjVjNjEz LzEvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGIXKS4+W c+hQq27vqkNLitKOka5kuOXh8ZZBxi3KPIo9pTWf91i33PG3HYBHfCNjhYJKZu1r n+mrV/4nsAzdacw/+Cmy7nBGJB4vCr88zHBxyp0pJGx/r9kztutjagXaJB/BPpVE mnPoklvJzwPtPRDe0ExDP0q5cJr/tGpZuQifwMn1/wZ70Ez/p/3SwzvmautsLYkt vff/XmAQAeF3dtQK9W6YZLtQMybzqX3d6z1mJeCzkVDVX4KkKsbTSvCzYdisoGER XmXPdjXDgedTR+C1UX807Z9FhRS4dACSC097mpnjDmwsHbBC9Pi4+88QOWxNhTb7 i7418x66Y6cnCA== -----END CERTIFICATE-----Generated at Mon Nov 24 14:12:55 2025 by rpki-client