This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft File: MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft (raw, json) Hash identifier: jfb27tDw9jrkGvym7SRznaqPfRkpR8zC6JkbOf0YFVc= Subject key identifier: 00:E5:EE:95:C7:78:14:F2:A7:5F:35:7D:8C:64:1C:CA:62:EF:47:60 Authority key identifier: 32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3 Certificate issuer: /CN=3263787fd0f94b37813eef16bc8137423ee3fef3 Certificate serial: 019B84600D7FCFF68726FAAEC99F64A6CA1A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft Manifest number: 17F4 Signing time: Sat 03 Jan 2026 15:00:45 +0000 Manifest this update: Sat 03 Jan 2026 15:00:45 +0000 Manifest next update: Sun 04 Jan 2026 15:00:45 +0000 Files and hashes: 1: 5lVyPdOyD8P1p-H37rL7Rn9Z9wc.roa (hash: zcBmn6BXQhy14LhJggHGZvgKbvAjqmr1fPEq1IITW2U=) 2: MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl (hash: lY39vIlIxG8GfP6Hh7onzCinn3JZ//MVpM5ox6+tATs=) 3: TpeoXvVAE9ivR_zsDrWpvovB0Pg.roa (hash: pLhv8c1MmuPpN4oSxxyQE6rsdvRh/FjJkEBZ8oB3LdY=) 4: a5ChY4q_Rl2LqJ-mYn389m6Ojm8.roa (hash: we3at1HFwLi0LGUOGA4ApVNGwgVs+XxOXd6UNPGdgsY=) 5: aAVkA_J7VZ-Vn3jkvnaCXlnFeH8.roa (hash: P6IWduLs8+lEzxc5zHzstOUHtq2Pl9MUd3exHhhXwTw=) 6: dtgov4a-299ipMULZRZEpMThwro.roa (hash: k3WsLS94/kslWVMbnhonNuW+5up2Gqn45ks2BvHssDI=) 7: hk8pc-tdyFbUrPDUG9zSml_2muo.roa (hash: TuWLAyON0bxAuBXGLp5rn9UKbgfz/FixP/aAIGIFC10=) 8: rEoR-mgdOFshp3WK0KrRy38fGME.roa (hash: BUP8/Ijg4vxky0oGy+etXWcemBcfS6atL6F31eVnOgg=) 9: zMIsoXgaQV57efVeTJH9bZFkO9Y.roa (hash: 2IYgK5Bn3+JWvjIXskHShuGbtbwIH4msPtr/SJE/DPE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 04 Jan 2026 08:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:84:60:0d:7f:cf:f6:87:26:fa:ae:c9:9f:64:a6:ca:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3263787fd0f94b37813eef16bc8137423ee3fef3 Validity Not Before: Jan 3 15:00:45 2026 GMT Not After : Jan 4 15:00:45 2026 GMT Subject: CN=00e5ee95c77814f2a75f357d8c641cca62ef4760 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:ec:37:27:79:2f:8d:26:1b:3e:81:93:3e:c7: 40:6e:87:74:96:25:cf:d0:ae:3a:9b:2b:67:4c:0d: c0:e0:fa:a3:1e:2d:00:b3:35:14:69:e3:f9:cd:b4: e9:b1:63:37:a4:78:c3:01:29:44:ca:e2:fb:24:fb: 97:90:bc:cf:2d:90:5b:8d:42:ad:00:5b:bd:82:dd: 8c:7a:6f:e4:71:e9:f2:15:4f:2b:0e:1b:c7:d1:a3: b5:e5:48:4b:c4:da:22:31:39:60:b0:d5:5c:5b:2f: 87:fa:ed:c5:ea:4e:aa:2c:74:59:59:0f:18:49:5e: af:1a:58:8d:5a:e9:3e:97:7b:83:74:da:30:91:29: 4b:fd:fb:e8:d7:fb:4f:f5:65:96:43:1b:00:8e:29: 08:fd:07:f9:b1:88:5e:4a:86:02:9e:45:77:0c:bc: 7a:6a:9c:e0:56:87:13:f5:50:ec:d2:0c:88:4a:7d: 9d:52:ce:49:9b:9b:4b:a7:01:10:80:cd:90:0a:4e: ab:9d:ff:7d:04:5e:31:d6:ef:52:15:e2:83:79:8a: fc:fc:70:60:30:86:39:50:7d:b0:01:84:0f:d5:fd: 27:cd:33:e9:c4:ca:b7:39:f2:8e:9a:e7:f0:0f:16: 75:3d:e0:d3:20:9c:fe:0e:51:79:52:91:e2:b1:b8: 24:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:E5:EE:95:C7:78:14:F2:A7:5F:35:7D:8C:64:1C:CA:62:EF:47:60 X509v3 Authority Key Identifier: keyid:32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:5b:eb:10:8a:13:25:94:98:41:ca:67:90:2c:95:27:61:43: 07:28:4c:d2:4c:26:5f:4e:bd:68:45:0d:d5:e1:fd:13:21:72: ed:84:ba:f7:b0:73:13:98:2c:22:0d:69:37:b6:45:f3:e1:fd: 6e:ad:7b:24:2d:30:d6:10:b2:08:c3:9a:d2:dd:62:8f:d3:12: 56:5f:c3:40:0b:cd:ec:ed:b9:92:8d:71:7f:97:c3:3f:44:f6: a6:7d:0c:3f:86:c2:64:09:9b:81:a8:31:02:32:18:56:31:55: ce:a8:c2:bf:a8:83:b5:b6:6e:0d:a7:d6:53:31:6e:5e:59:d4: ac:60:07:ec:90:d3:f2:5b:d7:a1:15:29:1b:9c:a0:81:22:69: 3a:17:8f:ec:e7:8c:df:1b:46:c7:f6:37:fc:ca:87:ae:27:16: af:a3:41:67:dc:e7:01:95:a7:fd:41:3a:47:74:98:71:2c:e7: 4a:37:cf:40:d0:4b:93:99:5e:5b:57:bf:4d:e9:30:8b:c8:74: aa:41:a0:2b:c4:44:62:44:40:6d:bc:0e:0c:3d:bb:7d:26:66: 38:bc:7c:78:01:da:31:26:1f:5b:c1:a7:0d:8e:cc:4f:6e:4d: 70:47:9f:64:61:f6:61:18:2d:0b:27:bb:6e:7b:29:8c:a5:a1: a0:2c:3c:ec -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuEYA1/z/aHJvquyZ9kpsoaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyNjM3ODdmZDBmOTRiMzc4MTNlZWYxNmJjODEzNzQyM2Vl M2ZlZjMwHhcNMjYwMTAzMTUwMDQ1WhcNMjYwMTA0MTUwMDQ1WjAzMTEwLwYDVQQD EygwMGU1ZWU5NWM3NzgxNGYyYTc1ZjM1N2Q4YzY0MWNjYTYyZWY0NzYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiuw3J3kvjSYbPoGTPsdAbod0liXP 0K46mytnTA3A4PqjHi0AszUUaeP5zbTpsWM3pHjDASlEyuL7JPuXkLzPLZBbjUKt AFu9gt2Mem/kcenyFU8rDhvH0aO15UhLxNoiMTlgsNVcWy+H+u3F6k6qLHRZWQ8Y SV6vGliNWuk+l3uDdNowkSlL/fvo1/tP9WWWQxsAjikI/Qf5sYheSoYCnkV3DLx6 apzgVocT9VDs0gyISn2dUs5Jm5tLpwEQgM2QCk6rnf99BF4x1u9SFeKDeYr8/HBg MIY5UH2wAYQP1f0nzTPpxMq3OfKOmufwDxZ1PeDTIJz+DlF5UpHisbgkHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFADl7pXHeBTyp181fYxkHMpi70dgMB8GA1UdIwQY MBaAFDJjeH/Q+Us3gT7vFryBN0I+4/7zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS83NzAzZWYtMjQyMi00MzdjLWI5M2Qt NTk1ZTBiZjVjNjEzLzEvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS83NzAzZWYtMjQyMi00MzdjLWI5M2QtNTk1ZTBiZjVjNjEz LzEvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACVvrEIoT JZSYQcpnkCyVJ2FDByhM0kwmX069aEUN1eH9EyFy7YS697BzE5gsIg1pN7ZF8+H9 bq17JC0w1hCyCMOa0t1ij9MSVl/DQAvN7O25ko1xf5fDP0T2pn0MP4bCZAmbgagx AjIYVjFVzqjCv6iDtbZuDafWUzFuXlnUrGAH7JDT8lvXoRUpG5yggSJpOheP7OeM 3xtGx/Y3/MqHricWr6NBZ9znAZWn/UE6R3SYcSznSjfPQNBLk5leW1e/Tekwi8h0 qkGgK8REYkRAbbwODD27fSZmOLx8eAHaMSYfW8GnDY7MT25NcEefZGH2YRgtCye7 bnspjKWhoCw87A== -----END CERTIFICATE-----Generated at Sat Jan 3 17:53:53 2026 by rpki-client