This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft File: MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft (raw, json) Hash identifier: JjwOCQ7xfoxc1zROMekyPAzN/9ce6M7yF5dQOg2I4ME= Subject key identifier: D5:23:ED:36:1B:65:BF:D0:4B:40:C1:CC:60:96:BC:61:BB:EA:3A:E2 Authority key identifier: 32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3 Certificate issuer: /CN=3263787fd0f94b37813eef16bc8137423ee3fef3 Certificate serial: 019B142693B30F1FD8EF10EC72D306D27DBD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft Manifest number: 17B8 Signing time: Fri 12 Dec 2025 20:00:31 +0000 Manifest this update: Fri 12 Dec 2025 20:00:31 +0000 Manifest next update: Sat 13 Dec 2025 20:00:31 +0000 Files and hashes: 1: 3NU_jczsTwLqoaX-lCYDIDK-xK4.roa (hash: 8Hfke+9D8re50lqI3eIcpPcn6OSj6q+EHma6Ds52QuY=) 2: 6EzBdLMFhAHXtGoqOgo2hhkKxsE.roa (hash: 6BZyqWO3dBV2T/D/HQLLEXL8wtnsNJxMwYYKl/DQzgM=) 3: GiScTXLFDlSkFEEGri5P1vz6Sho.roa (hash: uMhctxLibeY+IpaWynfmNEbttAIjD24+B1IvRH31TQ8=) 4: MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl (hash: lF84e2XdjZ0TvxgQ2Ddp5iQWKF2qt8Cjt7dR1NbUWW8=) 5: NTZZF4vSmOFfwF5M5O7eO7oF9Vg.roa (hash: FRVNS4KDdnoHo7IUiUNOad62U9M1nGPEQFofB/xcUyw=) 6: Zq_slRbeIbakzkyhFvP-PgYKmew.roa (hash: cl2sEp9IdvvNJyOdRm/p3gV/wJJc6+uba9k8NqDhtbQ=) 7: nb4wfQ7FzEgUQNDsTQT1rI6C1P0.roa (hash: XbtW2pGYp04EBEIcviRAYkU8I+ewGGN4xhpRClBs10Q=) 8: pZHCAjsk0quEKKapLoBOB8SLyYU.roa (hash: PkFYd+Uy2SwEBC/xRtpP2pJp1/vhJ01S2mfX0UJzqmk=) 9: q7qxZUlMexCCPUrlLyE18hEbtAo.roa (hash: 0VcOLAUsaFOJsTncLeRopLhldfQWg1DdOHrV2K+AOgQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 17:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:14:26:93:b3:0f:1f:d8:ef:10:ec:72:d3:06:d2:7d:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3263787fd0f94b37813eef16bc8137423ee3fef3 Validity Not Before: Dec 12 20:00:31 2025 GMT Not After : Dec 13 20:00:31 2025 GMT Subject: CN=d523ed361b65bfd04b40c1cc6096bc61bbea3ae2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:b0:13:65:4e:a6:0f:49:b2:63:48:9e:81:67: d8:cf:ed:67:94:94:3c:f1:69:52:29:39:f0:16:2a: ee:27:1d:5d:d4:69:d1:8b:af:91:f7:57:0f:33:fc: 20:26:94:a2:2b:c8:83:23:cc:a7:c7:64:c6:b2:d4: 13:43:3d:b7:f8:20:98:2d:12:da:65:7a:1d:9b:f3: 1f:51:3f:cb:78:b4:54:19:2b:5b:d7:42:b9:07:e0: 81:42:a2:99:63:ea:10:98:e2:5d:bf:cc:ff:23:e9: a6:25:0b:d1:35:0b:e9:52:4c:46:11:2d:41:fc:da: b8:24:7f:58:ce:da:94:72:62:56:94:58:58:76:8f: 12:3a:f6:3c:20:92:24:eb:66:f5:1a:2f:f6:4b:45: d5:7d:60:f5:5a:0a:26:9c:e1:44:bb:d3:0a:05:94: 35:65:0c:2a:39:38:9e:f4:a0:12:4f:86:78:87:53: 7b:a4:0c:98:7e:cb:33:53:d4:54:80:35:ad:1b:48: e5:a7:9e:d8:0a:83:c7:7c:e1:df:ba:e4:9e:e8:3e: 5d:a6:55:6c:c9:c2:47:e6:86:72:ba:e1:65:fd:db: 14:b0:5b:c4:df:d2:dd:ab:80:ae:6f:56:48:02:53: 74:77:6e:40:14:f3:57:e5:65:72:4f:b8:0b:f7:97: b9:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:23:ED:36:1B:65:BF:D0:4B:40:C1:CC:60:96:BC:61:BB:EA:3A:E2 X509v3 Authority Key Identifier: keyid:32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:e7:1c:ba:81:19:5e:62:6c:08:85:5d:13:3d:15:04:61:90: 85:25:cc:3b:8d:54:f9:1e:75:f7:95:5f:dc:f5:7e:8f:53:9e: 88:da:57:c4:60:79:69:7a:eb:24:ca:cd:f2:68:ad:0b:d7:28: ad:e5:22:59:65:83:55:d2:03:1a:d6:7c:fb:e7:55:c0:fe:ce: c7:ca:f6:f7:c6:f3:98:1d:15:7b:be:a4:4f:de:2f:de:c6:a3: 21:66:44:4f:37:58:00:b8:ee:0b:ee:2d:29:a2:c8:71:96:da: 11:36:17:f9:a1:03:1e:57:c2:42:8f:03:24:d1:56:dc:00:42: 7f:60:86:ab:1d:6b:72:2d:0c:2f:e1:19:be:8e:ad:03:2e:34: 7c:b6:62:d1:b3:9c:fe:37:32:33:a7:5d:eb:8a:7e:61:60:71: f2:6b:e8:f6:0e:4d:9e:de:d2:26:5c:69:0f:4d:35:4d:0a:41: f6:3d:ec:d4:2f:ff:6f:18:32:2a:fd:1c:24:57:7f:10:ed:4d: 40:8a:c0:31:59:18:cd:58:81:db:65:ee:20:67:4c:c9:62:d2: df:8a:9c:a0:57:90:3e:d6:61:8d:db:fb:ac:9d:22:8f:69:23: c8:d7:fb:ee:25:18:5e:fb:a6:05:71:65:c0:83:5b:99:f6:71: 33:34:8c:4a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsUJpOzDx/Y7xDsctMG0n29MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyNjM3ODdmZDBmOTRiMzc4MTNlZWYxNmJjODEzNzQyM2Vl M2ZlZjMwHhcNMjUxMjEyMjAwMDMxWhcNMjUxMjEzMjAwMDMxWjAzMTEwLwYDVQQD EyhkNTIzZWQzNjFiNjViZmQwNGI0MGMxY2M2MDk2YmM2MWJiZWEzYWUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqLATZU6mD0myY0iegWfYz+1nlJQ8 8WlSKTnwFiruJx1d1GnRi6+R91cPM/wgJpSiK8iDI8ynx2TGstQTQz23+CCYLRLa ZXodm/MfUT/LeLRUGStb10K5B+CBQqKZY+oQmOJdv8z/I+mmJQvRNQvpUkxGES1B /Nq4JH9YztqUcmJWlFhYdo8SOvY8IJIk62b1Gi/2S0XVfWD1WgomnOFEu9MKBZQ1 ZQwqOTie9KAST4Z4h1N7pAyYfsszU9RUgDWtG0jlp57YCoPHfOHfuuSe6D5dplVs ycJH5oZyuuFl/dsUsFvE39Ldq4Cub1ZIAlN0d25AFPNX5WVyT7gL95e5rQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNUj7TYbZb/QS0DBzGCWvGG76jriMB8GA1UdIwQY MBaAFDJjeH/Q+Us3gT7vFryBN0I+4/7zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS83NzAzZWYtMjQyMi00MzdjLWI5M2Qt NTk1ZTBiZjVjNjEzLzEvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS83NzAzZWYtMjQyMi00MzdjLWI5M2QtNTk1ZTBiZjVjNjEz LzEvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPeccuoEZ XmJsCIVdEz0VBGGQhSXMO41U+R5195Vf3PV+j1OeiNpXxGB5aXrrJMrN8mitC9co reUiWWWDVdIDGtZ8++dVwP7Ox8r298bzmB0Ve76kT94v3sajIWZETzdYALjuC+4t KaLIcZbaETYX+aEDHlfCQo8DJNFW3ABCf2CGqx1rci0ML+EZvo6tAy40fLZi0bOc /jcyM6dd64p+YWBx8mvo9g5Nnt7SJlxpD001TQpB9j3s1C//bxgyKv0cJFd/EO1N QIrAMVkYzViB22XuIGdMyWLS34qcoFeQPtZhjdv7rJ0ij2kjyNf77iUYXvumBXFl wINbmfZxMzSMSg== -----END CERTIFICATE-----Generated at Sat Dec 13 03:48:22 2025 by rpki-client