This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft File: MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft (raw, json) Hash identifier: Y4xhqrmLapB3CpM8Xg4F3NrXSLe7t/OSMIN+KvyuTnY= Subject key identifier: E2:13:9A:4C:A6:96:EC:71:B6:1B:13:C6:CB:8B:85:21:CE:41:EC:B7 Authority key identifier: 32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3 Certificate issuer: /CN=3263787fd0f94b37813eef16bc8137423ee3fef3 Certificate serial: 019B19F1B679BB25899DF0985CD10F7E0C69 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft Manifest number: 17BB Signing time: Sat 13 Dec 2025 23:00:29 +0000 Manifest this update: Sat 13 Dec 2025 23:00:29 +0000 Manifest next update: Sun 14 Dec 2025 23:00:29 +0000 Files and hashes: 1: 3NU_jczsTwLqoaX-lCYDIDK-xK4.roa (hash: 8Hfke+9D8re50lqI3eIcpPcn6OSj6q+EHma6Ds52QuY=) 2: 6EzBdLMFhAHXtGoqOgo2hhkKxsE.roa (hash: 6BZyqWO3dBV2T/D/HQLLEXL8wtnsNJxMwYYKl/DQzgM=) 3: GiScTXLFDlSkFEEGri5P1vz6Sho.roa (hash: uMhctxLibeY+IpaWynfmNEbttAIjD24+B1IvRH31TQ8=) 4: MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl (hash: 7bkqurPKcFMedevNj9h7S1JL45ScBeo7fiux6h6gXl4=) 5: NTZZF4vSmOFfwF5M5O7eO7oF9Vg.roa (hash: FRVNS4KDdnoHo7IUiUNOad62U9M1nGPEQFofB/xcUyw=) 6: Zq_slRbeIbakzkyhFvP-PgYKmew.roa (hash: cl2sEp9IdvvNJyOdRm/p3gV/wJJc6+uba9k8NqDhtbQ=) 7: nb4wfQ7FzEgUQNDsTQT1rI6C1P0.roa (hash: XbtW2pGYp04EBEIcviRAYkU8I+ewGGN4xhpRClBs10Q=) 8: pZHCAjsk0quEKKapLoBOB8SLyYU.roa (hash: PkFYd+Uy2SwEBC/xRtpP2pJp1/vhJ01S2mfX0UJzqmk=) 9: q7qxZUlMexCCPUrlLyE18hEbtAo.roa (hash: 0VcOLAUsaFOJsTncLeRopLhldfQWg1DdOHrV2K+AOgQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:19:f1:b6:79:bb:25:89:9d:f0:98:5c:d1:0f:7e:0c:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3263787fd0f94b37813eef16bc8137423ee3fef3 Validity Not Before: Dec 13 23:00:29 2025 GMT Not After : Dec 14 23:00:29 2025 GMT Subject: CN=e2139a4ca696ec71b61b13c6cb8b8521ce41ecb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:d2:e4:7c:e6:de:f4:5f:ff:b8:1c:17:24:14: ac:7f:87:ac:ea:56:0a:dd:54:e4:40:c3:4a:1e:e1: 4a:5f:c8:91:4c:2d:e6:fd:70:86:66:17:6e:47:1e: b1:92:1a:62:72:2f:b4:5c:f9:ab:5c:e2:9d:7a:3c: 4c:70:52:cf:5c:2d:3b:b5:54:51:57:8c:e2:28:57: 65:cf:57:97:28:89:b6:6c:86:5e:96:b9:fc:55:4a: 7a:15:0c:88:46:51:2f:c8:a1:93:8a:04:04:aa:2c: ac:f0:e3:71:4a:1e:cf:9e:03:ca:7e:4d:cb:11:90: 24:4c:ea:c2:2c:ac:76:7a:dd:ba:14:56:26:d1:82: 6a:6a:9f:d2:b6:bf:2d:3c:cf:c5:3d:1b:f9:1d:12: 03:63:5b:78:8b:cc:32:a5:ad:e2:6d:63:3c:f8:e6: b0:4b:c4:c9:f9:20:e8:0d:73:d1:ae:01:57:74:a9: cf:a8:91:be:60:70:c2:17:37:4a:46:1c:8d:03:8a: c5:3c:4d:be:c3:9a:82:ba:d1:53:10:a0:fe:37:54: 34:4c:98:6a:ef:ce:a8:1a:29:be:c4:b4:b4:4e:ce: 64:48:9a:d6:3a:04:74:7b:9f:7c:a7:19:ac:51:ca: 4c:df:06:88:0b:3d:0c:3d:7e:92:4b:68:cb:b7:c7: a4:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:13:9A:4C:A6:96:EC:71:B6:1B:13:C6:CB:8B:85:21:CE:41:EC:B7 X509v3 Authority Key Identifier: keyid:32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:78:2e:83:0f:ec:e3:b2:7c:e1:ca:18:c8:47:5b:29:9c:32: 0b:da:63:98:61:39:93:00:62:d0:49:48:e6:2a:c3:b0:eb:fc: 34:86:2c:72:3f:4a:4e:df:ed:0e:55:75:c7:35:65:d0:1f:b5: 6c:84:58:22:b5:40:80:1b:46:a0:d7:6b:7e:62:90:a5:ba:e5: c1:9c:ad:d7:8b:22:c2:ee:4e:45:99:fd:0c:4b:02:86:c9:31: d6:17:88:13:bf:fb:ea:62:f0:ef:46:02:99:22:0a:27:f6:d0: b0:98:c7:b7:01:06:28:cf:f4:8f:39:c0:e3:a8:53:2a:93:ac: e8:51:c0:dc:3f:85:d3:3f:09:a8:01:21:ae:2b:fd:65:e0:cf: 2d:ce:de:01:c9:c0:e9:39:c4:e7:41:1d:a0:1f:86:f0:59:8b: 13:96:7c:35:02:9b:7a:d7:d4:70:1c:90:65:01:b7:59:61:11: d5:cc:52:3c:f3:c1:8a:e7:d2:27:33:84:e8:a2:8d:f3:f2:5e: 67:1f:cf:3c:f5:6b:01:e3:05:11:92:7e:df:47:3c:14:15:f5: 91:43:c4:3f:41:4e:79:9c:82:ee:0b:56:2d:22:7d:cf:3f:50: 02:f1:5a:2b:dc:ed:63:f2:d1:3b:aa:5a:7c:d3:d7:e7:df:41: 48:98:95:21 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsZ8bZ5uyWJnfCYXNEPfgxpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyNjM3ODdmZDBmOTRiMzc4MTNlZWYxNmJjODEzNzQyM2Vl M2ZlZjMwHhcNMjUxMjEzMjMwMDI5WhcNMjUxMjE0MjMwMDI5WjAzMTEwLwYDVQQD EyhlMjEzOWE0Y2E2OTZlYzcxYjYxYjEzYzZjYjhiODUyMWNlNDFlY2I3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwNLkfObe9F//uBwXJBSsf4es6lYK 3VTkQMNKHuFKX8iRTC3m/XCGZhduRx6xkhpici+0XPmrXOKdejxMcFLPXC07tVRR V4ziKFdlz1eXKIm2bIZelrn8VUp6FQyIRlEvyKGTigQEqiys8ONxSh7PngPKfk3L EZAkTOrCLKx2et26FFYm0YJqap/Str8tPM/FPRv5HRIDY1t4i8wypa3ibWM8+Oaw S8TJ+SDoDXPRrgFXdKnPqJG+YHDCFzdKRhyNA4rFPE2+w5qCutFTEKD+N1Q0TJhq 786oGim+xLS0Ts5kSJrWOgR0e598pxmsUcpM3waICz0MPX6SS2jLt8ekQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOITmkymluxxthsTxsuLhSHOQey3MB8GA1UdIwQY MBaAFDJjeH/Q+Us3gT7vFryBN0I+4/7zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS83NzAzZWYtMjQyMi00MzdjLWI5M2Qt NTk1ZTBiZjVjNjEzLzEvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS83NzAzZWYtMjQyMi00MzdjLWI5M2QtNTk1ZTBiZjVjNjEz LzEvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc3gugw/s 47J84coYyEdbKZwyC9pjmGE5kwBi0ElI5irDsOv8NIYscj9KTt/tDlV1xzVl0B+1 bIRYIrVAgBtGoNdrfmKQpbrlwZyt14siwu5ORZn9DEsChskx1heIE7/76mLw70YC mSIKJ/bQsJjHtwEGKM/0jznA46hTKpOs6FHA3D+F0z8JqAEhriv9ZeDPLc7eAcnA 6TnE50EdoB+G8FmLE5Z8NQKbetfUcByQZQG3WWER1cxSPPPBiufSJzOE6KKN8/Je Zx/PPPVrAeMFEZJ+30c8FBX1kUPEP0FOeZyC7gtWLSJ9zz9QAvFaK9ztY/LRO6pa fNPX599BSJiVIQ== -----END CERTIFICATE-----Generated at Sun Dec 14 03:59:48 2025 by rpki-client