This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft File: MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft (raw, json) Hash identifier: GXFLUc4ABETjWynCrs1643SjHYRSWFOUrZC69FTUWcw= Subject key identifier: 36:EF:67:C5:BF:34:EF:A4:E6:39:37:54:B7:11:37:21:6E:6D:5A:34 Authority key identifier: 32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3 Certificate issuer: /CN=3263787fd0f94b37813eef16bc8137423ee3fef3 Certificate serial: 019AFEE8A0A90EC86C621E9F06E80A3AAD05 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft Manifest number: 17AD Signing time: Mon 08 Dec 2025 17:00:49 +0000 Manifest this update: Mon 08 Dec 2025 17:00:49 +0000 Manifest next update: Tue 09 Dec 2025 17:00:49 +0000 Files and hashes: 1: 3NU_jczsTwLqoaX-lCYDIDK-xK4.roa (hash: 8Hfke+9D8re50lqI3eIcpPcn6OSj6q+EHma6Ds52QuY=) 2: 6EzBdLMFhAHXtGoqOgo2hhkKxsE.roa (hash: 6BZyqWO3dBV2T/D/HQLLEXL8wtnsNJxMwYYKl/DQzgM=) 3: GiScTXLFDlSkFEEGri5P1vz6Sho.roa (hash: uMhctxLibeY+IpaWynfmNEbttAIjD24+B1IvRH31TQ8=) 4: MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl (hash: J3qIP2J48wWzOoZW2TbGR9R+c5rQyVvU1uodWshSSIw=) 5: NTZZF4vSmOFfwF5M5O7eO7oF9Vg.roa (hash: FRVNS4KDdnoHo7IUiUNOad62U9M1nGPEQFofB/xcUyw=) 6: Zq_slRbeIbakzkyhFvP-PgYKmew.roa (hash: cl2sEp9IdvvNJyOdRm/p3gV/wJJc6+uba9k8NqDhtbQ=) 7: nb4wfQ7FzEgUQNDsTQT1rI6C1P0.roa (hash: XbtW2pGYp04EBEIcviRAYkU8I+ewGGN4xhpRClBs10Q=) 8: pZHCAjsk0quEKKapLoBOB8SLyYU.roa (hash: PkFYd+Uy2SwEBC/xRtpP2pJp1/vhJ01S2mfX0UJzqmk=) 9: q7qxZUlMexCCPUrlLyE18hEbtAo.roa (hash: 0VcOLAUsaFOJsTncLeRopLhldfQWg1DdOHrV2K+AOgQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 09 Dec 2025 15:46:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:fe:e8:a0:a9:0e:c8:6c:62:1e:9f:06:e8:0a:3a:ad:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3263787fd0f94b37813eef16bc8137423ee3fef3 Validity Not Before: Dec 8 17:00:49 2025 GMT Not After : Dec 9 17:00:49 2025 GMT Subject: CN=36ef67c5bf34efa4e6393754b71137216e6d5a34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:c1:fa:99:d3:8e:56:b0:d2:39:ca:e9:e9:b6: 05:7e:9d:c5:e2:90:8c:9c:29:b6:a6:06:da:61:d0: b2:11:39:67:d1:81:53:77:7e:95:ee:9e:65:b1:1f: 6b:71:43:6b:31:c2:1b:41:41:bd:87:bd:25:9b:c5: 1b:cb:18:68:2e:8b:f7:bc:a3:9a:1d:0d:9e:06:25: e3:73:c0:3a:6a:e2:cb:5d:ed:62:3a:c8:27:84:fe: a1:8f:36:bd:4a:51:27:0d:99:fb:1b:5f:8d:3a:5d: d7:fa:2d:81:6f:36:06:ef:2b:fa:25:b4:a9:e8:82: bb:d4:4f:ae:45:54:9e:36:9c:60:db:22:07:47:68: a3:a8:9a:4b:93:e6:1d:9f:af:a7:6a:82:4c:5c:96: b1:67:6a:bf:73:e5:0d:9b:82:15:14:e3:cd:75:43: 33:67:87:2f:3f:e1:c2:8a:2d:0b:b2:9f:fb:31:ce: c4:df:d4:7f:d3:a3:f3:18:7d:ec:67:89:37:b8:dd: cc:34:12:45:45:75:8c:8d:57:80:3b:6b:48:91:6e: 40:1a:5e:62:c3:5e:a5:d4:90:0b:35:b5:2f:21:76: bf:60:a2:c4:a3:da:56:9d:24:50:b9:78:bd:ed:ae: 2e:3c:b4:81:fc:a4:af:8a:54:2c:bd:7d:c8:ef:0b: 82:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:EF:67:C5:BF:34:EF:A4:E6:39:37:54:B7:11:37:21:6E:6D:5A:34 X509v3 Authority Key Identifier: keyid:32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:68:13:8f:bb:28:bf:04:13:51:c6:27:84:7a:18:61:3d:09: ee:9f:52:ea:74:a6:28:72:41:61:04:5c:ea:35:c2:35:4b:5b: 2a:0c:d5:ab:bf:7a:c3:a7:79:c9:40:b8:fe:64:4a:6a:13:e7: 8a:b9:0e:2a:58:f6:af:ba:c6:ae:b5:08:78:40:29:a0:ce:5a: 23:38:4c:0b:ad:5b:5a:39:a7:67:88:c2:b9:a8:f3:eb:91:c4: 31:72:3f:82:cf:b6:93:99:90:85:1a:dc:00:f0:e1:ba:b8:cb: b4:99:0b:ae:80:3e:aa:a5:d5:4f:d4:b1:d3:5c:6d:28:fb:ce: e7:c0:13:60:84:22:f6:d9:26:5b:90:40:24:09:51:fe:0c:35: 1c:6b:7d:70:91:83:27:78:c5:65:ca:43:47:09:bc:39:47:94: 60:c1:11:9d:ec:8c:21:d7:55:6c:f0:a5:4a:75:79:6a:2d:6f: 29:71:a2:fe:c7:32:d1:c3:e6:fe:05:fa:f4:91:b2:cf:6b:67: 61:26:9e:fd:4c:6c:00:e7:5f:a9:07:18:8d:55:e0:b9:34:73: 6b:2d:4d:1e:1d:b6:70:ee:ea:9c:5f:a4:4f:1e:11:4f:c6:28: 21:6c:85:1d:5c:a4:03:f1:ee:75:5b:2b:30:7f:19:50:30:74: 97:89:ab:bd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr+6KCpDshsYh6fBugKOq0FMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyNjM3ODdmZDBmOTRiMzc4MTNlZWYxNmJjODEzNzQyM2Vl M2ZlZjMwHhcNMjUxMjA4MTcwMDQ5WhcNMjUxMjA5MTcwMDQ5WjAzMTEwLwYDVQQD EygzNmVmNjdjNWJmMzRlZmE0ZTYzOTM3NTRiNzExMzcyMTZlNmQ1YTM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu8H6mdOOVrDSOcrp6bYFfp3F4pCM nCm2pgbaYdCyETln0YFTd36V7p5lsR9rcUNrMcIbQUG9h70lm8UbyxhoLov3vKOa HQ2eBiXjc8A6auLLXe1iOsgnhP6hjza9SlEnDZn7G1+NOl3X+i2BbzYG7yv6JbSp 6IK71E+uRVSeNpxg2yIHR2ijqJpLk+Ydn6+naoJMXJaxZ2q/c+UNm4IVFOPNdUMz Z4cvP+HCii0Lsp/7Mc7E39R/06PzGH3sZ4k3uN3MNBJFRXWMjVeAO2tIkW5AGl5i w16l1JALNbUvIXa/YKLEo9pWnSRQuXi97a4uPLSB/KSvilQsvX3I7wuC5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDbvZ8W/NO+k5jk3VLcRNyFubVo0MB8GA1UdIwQY MBaAFDJjeH/Q+Us3gT7vFryBN0I+4/7zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS83NzAzZWYtMjQyMi00MzdjLWI5M2Qt NTk1ZTBiZjVjNjEzLzEvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS83NzAzZWYtMjQyMi00MzdjLWI5M2QtNTk1ZTBiZjVjNjEz LzEvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfGgTj7so vwQTUcYnhHoYYT0J7p9S6nSmKHJBYQRc6jXCNUtbKgzVq796w6d5yUC4/mRKahPn irkOKlj2r7rGrrUIeEApoM5aIzhMC61bWjmnZ4jCuajz65HEMXI/gs+2k5mQhRrc APDhurjLtJkLroA+qqXVT9Sx01xtKPvO58ATYIQi9tkmW5BAJAlR/gw1HGt9cJGD J3jFZcpDRwm8OUeUYMERneyMIddVbPClSnV5ai1vKXGi/scy0cPm/gX69JGyz2tn YSae/UxsAOdfqQcYjVXguTRzay1NHh22cO7qnF+kTx4RT8YoIWyFHVykA/HudVsr MH8ZUDB0l4mrvQ== -----END CERTIFICATE-----Generated at Mon Dec 8 20:57:15 2025 by rpki-client