This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft File: MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft (raw, json) Hash identifier: T7saoNflmJiCYBI49l4z2rbZwRE8jTHigKRpTU0iQaE= Subject key identifier: 81:9D:2D:24:FC:F1:B0:0A:F7:59:5F:5B:9A:A2:A6:FD:0E:EB:D0:F2 Authority key identifier: 32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3 Certificate issuer: /CN=3263787fd0f94b37813eef16bc8137423ee3fef3 Certificate serial: 019B65E795878A9FC73E7DDFB142860C9AD2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft Manifest number: 17E3 Signing time: Sun 28 Dec 2025 17:00:34 +0000 Manifest this update: Sun 28 Dec 2025 17:00:34 +0000 Manifest next update: Mon 29 Dec 2025 17:00:34 +0000 Files and hashes: 1: 3NU_jczsTwLqoaX-lCYDIDK-xK4.roa (hash: 8Hfke+9D8re50lqI3eIcpPcn6OSj6q+EHma6Ds52QuY=) 2: 6EzBdLMFhAHXtGoqOgo2hhkKxsE.roa (hash: 6BZyqWO3dBV2T/D/HQLLEXL8wtnsNJxMwYYKl/DQzgM=) 3: GiScTXLFDlSkFEEGri5P1vz6Sho.roa (hash: uMhctxLibeY+IpaWynfmNEbttAIjD24+B1IvRH31TQ8=) 4: MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl (hash: dF7Vbpw6vEqHu9nm0UHOfTO4JSMnNS9E1o2F424uiWA=) 5: VqhETU_HM_ISXJaoVb2Q85SiUFE.roa (hash: 4DN0T+VOF2hHbD9YtpgtWXAPNydWYghyCai8wce0SKM=) 6: Zq_slRbeIbakzkyhFvP-PgYKmew.roa (hash: cl2sEp9IdvvNJyOdRm/p3gV/wJJc6+uba9k8NqDhtbQ=) 7: nb4wfQ7FzEgUQNDsTQT1rI6C1P0.roa (hash: XbtW2pGYp04EBEIcviRAYkU8I+ewGGN4xhpRClBs10Q=) 8: pZHCAjsk0quEKKapLoBOB8SLyYU.roa (hash: PkFYd+Uy2SwEBC/xRtpP2pJp1/vhJ01S2mfX0UJzqmk=) 9: q7qxZUlMexCCPUrlLyE18hEbtAo.roa (hash: 0VcOLAUsaFOJsTncLeRopLhldfQWg1DdOHrV2K+AOgQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 17:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:65:e7:95:87:8a:9f:c7:3e:7d:df:b1:42:86:0c:9a:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3263787fd0f94b37813eef16bc8137423ee3fef3 Validity Not Before: Dec 28 17:00:34 2025 GMT Not After : Dec 29 17:00:34 2025 GMT Subject: CN=819d2d24fcf1b00af7595f5b9aa2a6fd0eebd0f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:93:99:e2:f6:98:d2:34:36:16:e2:5c:37:09: 04:22:c3:70:63:06:b1:52:a7:22:6a:32:54:a0:da: 33:04:14:d8:bb:fe:62:f7:36:e1:52:8d:c5:88:5b: 83:01:70:72:45:03:6c:32:f0:94:4e:08:c2:59:0a: 69:6e:ce:ee:90:a3:0e:a6:b2:57:99:4b:f2:6c:41: 70:0f:07:29:b0:18:9c:fe:9a:8b:6a:2f:8d:5e:32: 75:54:b1:d6:51:82:88:5a:81:4f:94:bd:ba:b5:96: eb:ad:2d:ae:35:0f:fa:d1:23:19:11:6a:c8:9e:7b: 7a:b7:bb:fb:32:b6:02:41:77:40:29:6a:df:19:94: 4b:e4:00:a3:c1:95:01:51:dd:13:16:8d:7b:bc:a8: 89:0b:20:9b:5c:32:28:65:6c:c3:27:bb:19:a4:d0: c0:6c:18:1f:8c:f2:3c:f4:a9:12:6d:7a:89:88:06: 73:b0:35:91:e4:fa:b6:f5:88:cd:04:b8:67:77:82: 42:65:02:b7:50:2f:40:99:48:47:ad:ff:60:8e:1b: af:bc:8d:9a:4a:ea:6f:6b:48:3f:12:0d:d3:77:0d: 54:9b:67:6e:83:b4:e4:f1:06:ec:4e:fe:bb:13:b9: c5:8b:f4:a5:90:77:af:41:67:6d:25:8f:54:15:e3: fe:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:9D:2D:24:FC:F1:B0:0A:F7:59:5F:5B:9A:A2:A6:FD:0E:EB:D0:F2 X509v3 Authority Key Identifier: keyid:32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:62:67:9a:81:b5:16:39:4b:d3:fc:ca:ae:ee:1d:77:5a:16: 6a:dd:ac:9f:e8:77:39:fc:99:6f:42:8b:99:2b:2d:93:3a:ab: 07:28:07:9b:fa:cb:ae:0a:8b:ec:13:f4:d0:d7:c9:41:ba:f6: 78:ef:4e:aa:d0:53:ae:39:86:cd:23:fd:32:c2:f6:aa:64:b9: 24:90:1e:3d:4d:c9:fd:94:b1:d7:12:0f:89:b4:89:dc:cc:20: 43:ba:c0:cf:5c:bf:18:f5:ee:15:b2:69:6e:06:fd:bb:65:fd: f2:9f:40:93:58:9d:cb:52:f0:91:a7:d0:2b:7c:7b:a4:4a:2a: a0:92:9c:d0:42:cd:f8:b7:fa:2a:70:12:32:a3:7f:d5:be:7b: d6:78:37:61:42:34:b8:13:a3:b9:16:f9:0d:19:b9:02:2b:d7: e7:b4:8e:d5:ac:ed:ef:15:d1:93:ae:0a:41:e6:40:cd:c3:00: c3:c1:a0:31:9d:e5:fd:f9:6f:d1:4e:cb:f0:b4:88:e4:b8:62: df:40:90:50:b9:39:a9:51:56:e9:60:fd:40:56:4a:49:c3:43: cc:02:ff:01:64:10:83:6d:cc:ad:86:de:21:08:16:7c:a2:23: 4a:45:d1:fc:c3:c0:87:fe:35:c5:d5:28:95:bf:7e:cf:99:9f: d8:b5:38:8b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtl55WHip/HPn3fsUKGDJrSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyNjM3ODdmZDBmOTRiMzc4MTNlZWYxNmJjODEzNzQyM2Vl M2ZlZjMwHhcNMjUxMjI4MTcwMDM0WhcNMjUxMjI5MTcwMDM0WjAzMTEwLwYDVQQD Eyg4MTlkMmQyNGZjZjFiMDBhZjc1OTVmNWI5YWEyYTZmZDBlZWJkMGYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAopOZ4vaY0jQ2FuJcNwkEIsNwYwax UqciajJUoNozBBTYu/5i9zbhUo3FiFuDAXByRQNsMvCUTgjCWQppbs7ukKMOprJX mUvybEFwDwcpsBic/pqLai+NXjJ1VLHWUYKIWoFPlL26tZbrrS2uNQ/60SMZEWrI nnt6t7v7MrYCQXdAKWrfGZRL5ACjwZUBUd0TFo17vKiJCyCbXDIoZWzDJ7sZpNDA bBgfjPI89KkSbXqJiAZzsDWR5Pq29YjNBLhnd4JCZQK3UC9AmUhHrf9gjhuvvI2a Supva0g/Eg3Tdw1Um2dug7Tk8QbsTv67E7nFi/SlkHevQWdtJY9UFeP+nQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIGdLST88bAK91lfW5qipv0O69DyMB8GA1UdIwQY MBaAFDJjeH/Q+Us3gT7vFryBN0I+4/7zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS83NzAzZWYtMjQyMi00MzdjLWI5M2Qt NTk1ZTBiZjVjNjEzLzEvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS83NzAzZWYtMjQyMi00MzdjLWI5M2QtNTk1ZTBiZjVjNjEz LzEvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAmJnmoG1 FjlL0/zKru4dd1oWat2sn+h3OfyZb0KLmSstkzqrBygHm/rLrgqL7BP00NfJQbr2 eO9OqtBTrjmGzSP9MsL2qmS5JJAePU3J/ZSx1xIPibSJ3MwgQ7rAz1y/GPXuFbJp bgb9u2X98p9Ak1idy1LwkafQK3x7pEoqoJKc0ELN+Lf6KnASMqN/1b571ng3YUI0 uBOjuRb5DRm5AivX57SO1azt7xXRk64KQeZAzcMAw8GgMZ3l/flv0U7L8LSI5Lhi 30CQULk5qVFW6WD9QFZKScNDzAL/AWQQg23MrYbeIQgWfKIjSkXR/MPAh/41xdUo lb9+z5mf2LU4iw== -----END CERTIFICATE-----Generated at Sun Dec 28 23:07:47 2025 by rpki-client